last executing test programs: 544.009851ms ago: executing program 4 (id=8153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 476.783629ms ago: executing program 4 (id=8159): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 413.965981ms ago: executing program 3 (id=8163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 413.725078ms ago: executing program 4 (id=8164): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)={[{@init_itable}, {@test_dummy_encryption_v1}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 367.868752ms ago: executing program 2 (id=8167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x308, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 349.847155ms ago: executing program 3 (id=8169): r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0xffffffffffffffff) 294.993203ms ago: executing program 1 (id=8171): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 294.548112ms ago: executing program 2 (id=8172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 286.463526ms ago: executing program 3 (id=8173): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000480)=[{0x33, '\x00', @st={0x4, [{0x3, @svalue=0x5d7cbccb}, {0x1, @uvalue=0x7fff}, {0x2, @svalue=0x800}, {0x2, @uvalue=0x3}]}, 0xf8}, {0x45, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x3, @svalue=0x80000002}, {0x1, @svalue=0x400005}, {0x1, @svalue=0xc}]}, 0x4100f467}, {0x22, '\x00', @data=0x9fe, 0x7}, {0x2e, '\x00', @st={0x4, [{0x3, @svalue=0x1008}, {0x2, @uvalue=0x6}, {0x3, @uvalue=0x6}, {0x3, @uvalue=0x3}]}, 0x7}]}) 274.94532ms ago: executing program 4 (id=8174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5488e78144fd3bc0e7281bc6c6bc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 265.593268ms ago: executing program 1 (id=8175): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf030000, 0x1ff, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0xfffffffc, '\x00', @p_u8=0x0}}) 240.180159ms ago: executing program 3 (id=8176): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x2e, 0x9, 0x4, {0x3, @esp_ip4_spec={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x8}, {0x0, @random="cd94ffd2d258", 0x4, 0x200, [0x6, 0x6]}, @usr_ip6_spec={@mcast2, @private0, 0x2, 0x6, 0x4}, {0x0, @link_local, 0xa, 0x94, [0xfff, 0x6]}, 0x8000000000000000}}}) 233.779045ms ago: executing program 2 (id=8177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x40, {0xa, 0x0, 0x0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 190.5941ms ago: executing program 0 (id=8178): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 190.244566ms ago: executing program 1 (id=8179): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x13, 0xfffffffffffffffe, &(0x7f0000000040)=0x28) 181.349005ms ago: executing program 0 (id=8180): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 181.225139ms ago: executing program 2 (id=8181): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$eJzs3c9vHFcdAPDvjO3Ydd3ahUr8ENBQCgFF3bU3rVX1VC4gVFVCVJw4pMbeWJZ3vZZ3HWKTg/M/IBGJE/wJHJA4IOXEnRvcEFI4IAWIQDESh0UzO3YcZ9exiL2Tej8faTTz5u3u9721573x1/a+AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vOvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs0/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8c72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMG/onQ3YFPMbTAC+7KF+T/YVTJ/8Pokv+H0SX/D6Or202s+Q8AI0aOHziH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTeTb0laKdYCn4k0rVQiXomIuZhIbqw16vMR8WpE/HFyYjIrL5TdaADgOaV/S4r1v67MvjVzvPZS8p/JfB8RP/nFxz+/tdTpbC1k5/95eL5ztzhfOzGQpQYBoCQH8/TBPH7g0cPbywfbMNvz4Nu9xUWzuPvF1qsZj/F8P5XfOEz/KynKPdn9ytgZxN+7ExGf79f/JM+NzBUrnx6Pn8V+Zajx0yfip3ldb5+9F589g7bAqLmXjT8f9Lv+0ric7/tf/1P5CPX8Dsa//afGv/Rw/BsbMP5dPm2Md37/vYF1dyK+ON4vfnIYPxkQ/61Txv/zl77y5qC67i8jrkT/+EdjVTvNzWp7Z/fttebSan21vlGrLS4szr937d1aNc9RVw8y1U/7+/tXXz2p/9MD4k89o/9fP2X/f/XfT3701RPif/Nr/b/+r58QP5sTv3HK+EvTvxm4fHcWf6V//4vnDO7/1VPGv//X3ZVTPhQAGIL2zu76UqNR33IwtIPs3u0FaMaFO7jzqXlXs++As3idz51jU8semYDz9viiL7slAAAAAAAAAAAAAADAIMP4h6ey+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//3Sb1xQ=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 180.923698ms ago: executing program 3 (id=8182): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x20, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc88643acd3aaf000cd3c1069d441d2f9b00000000", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 153.372192ms ago: executing program 1 (id=8183): r0 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="6a45bc8337", 0x5}, {&(0x7f0000000080)="8d094276", 0x4}], 0x2) 137.293624ms ago: executing program 0 (id=8184): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x400) 94.867502ms ago: executing program 4 (id=8185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x111}]}]}, 0x24}}, 0x4882) 94.635271ms ago: executing program 1 (id=8186): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lremovexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@random={'user.', '\x00'}) 93.267298ms ago: executing program 2 (id=8187): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 78.217595ms ago: executing program 3 (id=8188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000140000000002c00038014000100766574683100000000000000000000001400010076657468305f746f5f687372000000e907000240"], 0xfc}}, 0x0) 68.891343ms ago: executing program 0 (id=8189): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) 48.301661ms ago: executing program 4 (id=8190): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 5.146479ms ago: executing program 1 (id=8191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="e2c4"], 0x20) 4.812704ms ago: executing program 0 (id=8192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 4.64576ms ago: executing program 0 (id=8193): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@shortname_lower}, {@utf8}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_win95}, {@utf8no}, {@utf8}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@shortname_lower}]}, 0x3, 0x28c, &(0x7f00000008c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x2) 0s ago: executing program 2 (id=8194): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@grpquota}]}, 0x3, 0x494, &(0x7f0000001100)="$eJzs3M9rHFUcAPDvTLKJMdXEWn+1/ohWsYgmTVu1iAcVBQ8VBD3ocUliqU2rNBFsCZh6qCcRwbt49F/wpBcRT4JXvUuhSC+2IrgyuzPJbjLZJM1utnY/H9j2vZ03+9533rzdN/N2E0Dfmsj+SSL2RMRvETHWyLYWmGj8d+3q0sz1q0szSdRqb/2Z1Mv9dXVppiha7DfanIkkDpTUu3D+wunq/PzcuTw/tXjmw6mF8xeeOXWmenLu5NzZI8ePHzs6/fxzR57tSJyjkeap19/98o0Tn7fEvyaODplot/GJWq3D1fXWHU3pwR62g+0ZyPurUh//YzHQ1Htj8dqnK5lPetRAoGtqtVptdOPNyzXgFpZEa96Qh35RfNAX179l18EvNaUrHZ+B9NaVlxsXQFnc1/JHY8vgv8XBqay5vu2kiYh4Z/nvr7NHdOc+BABAi++z+c/T2RRoaSabe6zOP9K4t6ncnfna0HhE3BUReyPi7jgb+yLinoh62fsi4v5t1t+0SFKfZq6f/6SXbzi4Lcjmfy/ma1ut879ivSjGB+q5841MVJL3Ts3PHc6PyaGoDGf56TZ1/PDqr19stK15/pc9svqLuWDejsuDw637zFYXqzcecasrFyP2D5bFn6ysBCQR8UBE7C97gXTzOk499e2DG23bPP42OrDQVPsm4slG/y/HmvgLSfv1yanbYn7u8FRxVqz38y+X3tyo/h3F3wFZ/99eev6vxD+eNK/XLmy/jku/f7bhNc1EcUG5jfN/ubpYHUrerqeH8uc+ri4unpuOGEpOXKvl71Mrzx9Z3bfIF+Wz+A8dLB//e2P1SByIiOwkfigiHo6IR/K+ezQiHouIg23i/+mVx99f+9xIEf9N0P+z2+r/1cRQtD6TlpTJEgOnf/yupdLx1WQe//Xy+Ifz/j9Wzx3K99nK+9/6VpQnOnEMAQAA4GaX1r8DmKSTeXpPpOnkZOM7/PtWl/s/Ojvb+I3AeFTS4k7XWNP90On8sr6Rv5i9an3HYvvRSOv3jb8aGKnnJ2c+mJ/taeTAaH3Mrx//mT8Get06oOvK19H8jAv6gZEOfSttO/5vtW/8Ay3Wjf+2Y364q20BdlfJ5/9IL9oB7L6y+b+/9wP9Yc34b7vs98+t9XfroO+5/w/9y/iH/mX8Q19aGInNfyTfNlG80g3uvlliLGKnLexNIio3RTO6loh0K4Vf2EkVQzs4tdKI2JWjUXx4Nm1Kujccdi+xhTcP3wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4LAAD///PD0MA=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) kernel console output (not intermixed with test programs): [ 80.201824][T12044] loop3: partition table partially beyond EOD, truncated [ 80.201899][T12044] loop3: p1 size 33024 extends beyond EOD, truncated [ 80.208923][T12044] loop3: p3 start 4284289 is beyond EOD, truncated [ 80.209480][T12044] loop3: p5 size 33024 extends beyond EOD, truncated [ 80.462447][T12082] EXT4-fs (loop1): 1 truncate cleaned up [ 80.463919][T12084] warning: `syz.0.3518' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.464557][T12082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.482066][T12082] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters [ 80.485634][T12082] EXT4-fs (loop1): Remounting filesystem read-only [ 80.510343][T12089] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 80.521288][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3523'. [ 80.534367][T12072] loop2: p1 p2 p3 [ 80.543091][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.587163][T12099] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.626829][T12104] netlink: 'syz.0.3528': attribute type 11 has an invalid length. [ 80.626863][T12104] netlink: 'syz.0.3528': attribute type 4 has an invalid length. [ 80.626886][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3528'. [ 80.699119][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.748192][T12118] netlink: 'syz.4.3537': attribute type 4 has an invalid length. [ 80.748232][T12118] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3537'. [ 80.767672][T12118] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.099724][T12173] xfrm1: entered allmulticast mode [ 81.178389][T12186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3571'. [ 81.194669][T12189] 9p: Unknown Cache mode or invalid value f [ 81.269937][T12201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3577'. [ 81.338418][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 81.436255][T12228] team0: entered promiscuous mode [ 81.436287][T12228] team_slave_0: entered promiscuous mode [ 81.439799][T12228] team_slave_1: entered promiscuous mode [ 81.442501][T12228] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 81.474740][T12235] netlink: 'syz.2.3594': attribute type 5 has an invalid length. [ 81.593330][T12253] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3603'. [ 81.593409][T12253] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3603'. [ 81.788159][T12285] Illegal XDP return value 4118068063 on prog (id 335) dev N/A, expect packet loss! [ 81.805875][T12293] netlink: 'syz.0.3623': attribute type 21 has an invalid length. [ 81.805938][T12293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3623'. [ 81.973454][T12318] team0: entered allmulticast mode [ 81.973490][T12318] team_slave_0: entered allmulticast mode [ 81.973516][T12318] team_slave_1: entered allmulticast mode [ 81.976990][T12318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 82.065262][T12337] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3640'. [ 82.068199][T12336] tmpfs: Bad value for 'mpol' [ 82.101165][T12335] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.102511][T12335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.162018][T12347] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 82.162049][T12347] FAT-fs (loop3): Filesystem has been set read-only [ 82.183659][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.413121][T12385] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.478757][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.782346][T12452] xt_cgroup: path and classid specified [ 82.852308][T12458] usb usb7: usbfs: process 12458 (syz.4.3702) did not claim interface 0 before use [ 82.869179][T12469] netlink: 'syz.3.3707': attribute type 16 has an invalid length. [ 82.871681][T12469] netlink: 'syz.3.3707': attribute type 17 has an invalid length. [ 82.882969][T12469] team0: left promiscuous mode [ 82.883909][T12469] team_slave_0: left promiscuous mode [ 82.884976][T12469] team_slave_1: left promiscuous mode [ 82.886868][T12469] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.912574][T12469] xfrm1: left allmulticast mode [ 83.042577][ T4794] IPVS: starting estimator thread 0... [ 83.149090][T12497] IPVS: using max 65 ests per chain, 156000 per kthread [ 83.270682][T12539] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 83.589832][T12584] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 83.592380][T12582] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.595495][T12584] FAT-fs (loop3): Filesystem has been set read-only [ 83.659251][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.702379][T12603] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 84.117006][ T30] audit: type=1326 audit(527212.594:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117115][ T30] audit: type=1326 audit(527212.594:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117181][ T30] audit: type=1326 audit(527212.594:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117257][ T30] audit: type=1326 audit(527212.594:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117323][ T30] audit: type=1326 audit(527212.594:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117389][ T30] audit: type=1326 audit(527212.594:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117453][ T30] audit: type=1326 audit(527212.594:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117520][ T30] audit: type=1326 audit(527212.594:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117583][ T30] audit: type=1326 audit(527212.594:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.117650][ T30] audit: type=1326 audit(527212.594:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12671 comm="syz.3.3801" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x50000 [ 84.280501][T12695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.293554][T12695] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3811: invalid indirect mapped block 9 (level 0) [ 84.298131][T12695] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.301596][T12695] EXT4-fs (loop4): 1 truncate cleaned up [ 84.302092][T12695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.346399][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.430920][T12708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.449503][T12708] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 16: comm syz.1.3814: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 84.508239][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.684689][T12768] set_capacity_and_notify: 27 callbacks suppressed [ 84.684734][T12768] loop2: detected capacity change from 0 to 2048 [ 84.775289][ T50] Bluetooth: hci4: link tx timeout [ 84.782545][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 84.784949][ T50] Bluetooth: hci4: link tx timeout [ 84.784970][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.181593][T12848] bond1: Unable to set down delay as MII monitoring is disabled [ 85.186955][T12848] bond1 (unregistering): Released all slaves [ 85.376797][T12887] tmpfs: Bad value for 'mpol' [ 85.696672][T12938] netlink: 'syz.2.3917': attribute type 2 has an invalid length. [ 85.696706][T12938] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 85.841312][T12953] loop3: detected capacity change from 0 to 4096 [ 85.841633][T12953] EXT4-fs: Ignoring removed nobh option [ 85.855200][T12953] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.866084][T12953] EXT4-fs: Ignoring removed nobh option [ 85.880994][T12975] loop0: detected capacity change from 0 to 512 [ 85.890794][T12953] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 85.990701][T12988] loop2: detected capacity change from 0 to 128 [ 86.071348][T12997] dlm: non-version read from control device 0 [ 86.104238][T13001] __nla_validate_parse: 14 callbacks suppressed [ 86.104278][T13001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3946'. [ 86.104298][T13001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3946'. [ 86.104308][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 86.123588][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3948'. [ 86.341818][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3968'. [ 86.341859][T13044] netlink: 'syz.3.3968': attribute type 1 has an invalid length. [ 86.341869][T13044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3968'. [ 86.341878][T13044] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3968'. [ 86.341888][T13044] netlink: 'syz.3.3968': attribute type 1 has an invalid length. [ 86.341895][T13044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3968'. [ 86.427734][T13050] [U]  [ 86.648842][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3993'. [ 86.814110][T13123] loop4: detected capacity change from 0 to 512 [ 86.816963][T13123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.823413][T13123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 86.823476][T13123] System zones: 1-12 [ 86.832693][T13123] EXT4-fs (loop4): 1 truncate cleaned up [ 86.845710][T13131] loop1: detected capacity change from 0 to 512 [ 86.877005][T13131] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 86.886046][T13131] EXT4-fs (loop1): 1 truncate cleaned up [ 86.923137][T13131] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.937803][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 86.944047][T13144] binder: 13143 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 86.945205][T13144] binder: 13143:13144 ioctl c018620c 20001400 returned -22 [ 87.026461][T13158] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.211166][T13192] bond0: option all_slaves_active: invalid value (253) [ 87.246264][T13199] loop2: detected capacity change from 0 to 256 [ 87.369775][T13225] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 87.410131][T13231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4051'. [ 87.506175][T13252] comedi comedi0: bad chanlist[0]=0xffffffff chan=65535 range length=1 [ 87.516792][T13254] loop0: detected capacity change from 0 to 8 [ 87.533396][T13254] SQUASHFS error: zlib decompression failed, data probably corrupt [ 87.535345][T13254] SQUASHFS error: Failed to read block 0x4ee: -5 [ 87.536543][T13254] SQUASHFS error: Unable to read metadata cache entry [4ec] [ 87.537873][T13254] SQUASHFS error: Unable to read inode 0x400a7 [ 87.644600][T13274] tmpfs: Bad value for 'nr_inodes' [ 87.757004][T13288] netlink: 'syz.3.4081': attribute type 1 has an invalid length. [ 87.802321][T13302] netlink: 'syz.2.4087': attribute type 3 has an invalid length. [ 87.802799][T13302] netlink: 'syz.2.4087': attribute type 3 has an invalid length. [ 87.945851][T13325] binder: 13324 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 87.945886][T13325] binder: 13324:13325 ioctl c018620c 20001400 returned -22 [ 88.048179][T13340] bond1 (unregistering): Released all slaves [ 88.065972][T13349] loop1: detected capacity change from 0 to 512 [ 88.082498][T13349] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.095731][T13349] EXT4-fs (loop1): 1 truncate cleaned up [ 88.114828][T13355] loop2: detected capacity change from 0 to 256 [ 88.141066][T13355] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 88.293739][T13383] process 'syz.3.4124' launched './file0' with NULL argv: empty string added [ 88.366487][T13390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 88.368198][T13390] System zones: 1-3, 19-19, 35-36 [ 88.551613][T13406] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.556421][T13406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.583235][T13418] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 88.804379][T13447] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz.2.4154: Directory hole found for htree leaf block 0 [ 88.902735][T13472] xt_connbytes: Forcing CT accounting to be enabled [ 88.904573][T13472] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 89.157097][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 89.329627][T13547] bond1: entered promiscuous mode [ 89.329811][T13547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.593750][T13591] EXT4-fs: Ignoring removed nobh option [ 89.928729][T13646] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.928757][T13646] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 89.935087][T13646] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 89.935259][T13646] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 89.935299][T13646] System zones: 0-2, 18-18, 34-35 [ 89.945811][T13646] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 89.976730][ T30] kauditd_printk_skb: 708 callbacks suppressed [ 89.976772][ T30] audit: type=1326 audit(527218.075:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976795][ T30] audit: type=1326 audit(527218.075:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976876][ T30] audit: type=1326 audit(527218.075:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976892][ T30] audit: type=1326 audit(527218.075:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976908][ T30] audit: type=1326 audit(527218.075:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976923][ T30] audit: type=1326 audit(527218.075:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976938][ T30] audit: type=1326 audit(527218.075:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976952][ T30] audit: type=1326 audit(527218.075:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976965][ T30] audit: type=1326 audit(527218.075:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 89.976979][ T30] audit: type=1326 audit(527218.075:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13654 comm="syz.0.4241" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ff00000 [ 90.118670][ T26] IPVS: starting estimator thread 0... [ 90.205498][T13672] IPVS: using max 63 ests per chain, 151200 per kthread [ 90.393585][T13712] set_capacity_and_notify: 5 callbacks suppressed [ 90.402972][T13712] loop2: detected capacity change from 0 to 2048 [ 90.423667][T13721] loop0: detected capacity change from 0 to 1024 [ 90.449866][T13721] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.455825][T13721] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.455960][T13721] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.456513][T13721] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.4273: Invalid inode table block 0 in block_group 0 [ 90.456529][T13721] loop0: lost filesystem error report for type 5 error -117 [ 90.457181][T13721] EXT4-fs (loop0): Remounting filesystem read-only [ 90.457262][T13721] EXT4-fs (loop0): 1 truncate cleaned up [ 90.460961][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 90.460971][ C1] EXT4-fs (loop0): initial error at time 527218: __ext4_get_inode_loc:4886 [ 90.460982][ C1] EXT4-fs (loop0): last error at time 527218: __ext4_get_inode_loc:4886 [ 90.581323][T13740] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 90.651030][T13752] loop1: detected capacity change from 0 to 8192 [ 90.655844][T13752] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.663171][T13752] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 90.663209][T13752] FAT-fs (loop1): Filesystem has been set read-only [ 90.726869][T13765] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.726902][T13765] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.746423][T13769] loop4: detected capacity change from 0 to 4096 [ 90.909038][T13791] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.966037][T13809] netlink: 'syz.2.4311': attribute type 15 has an invalid length. [ 91.262045][T13848] loop3: detected capacity change from 0 to 256 [ 91.283221][T13850] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 91.446848][T13883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.447043][T13883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.448991][ T4717] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 91.489036][T13890] : renamed from team_slave_1 (while UP) [ 91.575756][T13907] xt_l2tp: missing protocol rule (udp|l2tpip) [ 91.973187][T13982] loop1: detected capacity change from 0 to 1024 [ 91.974661][T13981] 0x000000000000-0x000000020000 : "" [ 91.981979][T13981] ftl_cs: FTL header not found. [ 91.997130][T13986] loop3: detected capacity change from 0 to 512 [ 92.010055][T13982] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.4388: missing EA_INODE flag [ 92.010985][T13982] EXT4-fs (loop1): Remounting filesystem read-only [ 92.030465][T13986] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.034208][T13986] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 92.036797][T13986] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4389: inode #15: comm syz.3.4389: iget: illegal inode # [ 92.038862][T13986] loop3: lost filesystem error report for type 5 error -117 [ 92.043184][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 92.043213][ C1] EXT4-fs (loop3): initial error at time 527220: ext4_orphan_get:1399 [ 92.043241][ C1] EXT4-fs (loop3): last error at time 527220: ext4_orphan_get:1399 [ 92.043257][T13986] EXT4-fs (loop3): Remounting filesystem read-only [ 92.309651][T14034] loop0: detected capacity change from 0 to 512 [ 92.310008][T14034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.314051][T14034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 92.314101][T14034] System zones: 1-12 [ 92.314478][T14034] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4411: invalid indirect mapped block 8 (level 2) [ 92.314496][T14034] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.314751][T14034] EXT4-fs (loop0): 1 truncate cleaned up [ 92.323470][T14034] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 5: comm syz.0.4411: lblock 0 mapped to illegal pblock 5 (length 1) [ 92.331702][T14034] EXT4-fs warning (device loop0): ext4_empty_dir:3085: inode #2: lblock 0: comm syz.0.4411: error -EUCLEAN reading directory block [ 92.437258][T14052] netlink: 'syz.3.4420': attribute type 1 has an invalid length. [ 92.675077][T14095] __nla_validate_parse: 18 callbacks suppressed [ 92.675281][T14095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4439'. [ 92.782177][T14106] loop0: detected capacity change from 0 to 4096 [ 92.782513][T14106] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.802978][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4450'. [ 92.804894][T14106] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.132040][T14177] loop4: detected capacity change from 0 to 256 [ 93.238532][T14196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4490'. [ 93.320586][T14206] tmpfs: Bad value for 'mpol' [ 93.474717][T14232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4507'. [ 93.493186][T14232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.554621][T14232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.584499][T14232] bond0 (unregistering): Released all slaves [ 94.738044][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'. [ 94.787729][T14396] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.4587: corrupted xattr block 6: invalid header [ 94.791680][T14396] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.4587: corrupted xattr block 6: invalid header [ 94.795999][T14396] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.4587: corrupted xattr block 6: invalid header [ 94.801171][T14396] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.4587: corrupted xattr block 6: invalid header [ 94.805398][T14396] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.4587: corrupted xattr block 6: invalid header [ 95.147063][T14468] EXT4-fs: inline encryption not supported [ 95.149551][T14468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.159887][T14468] EXT4-fs (loop2): 1 truncate cleaned up [ 95.174533][T14468] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.4622: bad extra_isize 62 (inode size 256) [ 95.177623][T14468] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.4622: bad extra_isize 62 (inode size 256) [ 95.341584][T14495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4634'. [ 95.417396][T14505] netlink: 'syz.2.4641': attribute type 1 has an invalid length. [ 95.615176][T14537] netlink: 'syz.1.4656': attribute type 27 has an invalid length. [ 95.616816][T14537] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4656'. [ 95.618937][T14537] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 95.649856][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4657'. [ 95.649898][T14543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4657'. [ 95.843433][T14576] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4674'. [ 95.843513][T14576] veth0_to_bond: default FDB implementation only supports local addresses [ 96.050669][T14606] set_capacity_and_notify: 5 callbacks suppressed [ 96.056612][T14606] loop3: detected capacity change from 0 to 1024 [ 96.057022][T14606] EXT4-fs: Ignoring removed bh option [ 96.057403][T14606] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 96.338144][T14598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.339830][T14598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.366141][T14598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.397474][T14637] cgroup: name respecified [ 96.424499][T14639] loop2: detected capacity change from 0 to 512 [ 96.433713][T14598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.433749][T14598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.440854][T14639] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.440900][T14639] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.444338][T14639] EXT4-fs (loop2): 1 truncate cleaned up [ 96.444528][T14598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.486188][T14639] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.4703: Logical block already allocated [ 96.700082][T14670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.167293][T14760] loop3: detected capacity change from 0 to 8 [ 97.173919][T14760] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 97.173949][T14760] unable to read xattr id index table [ 97.266683][T14775] netlink: 'syz.4.4768': attribute type 5 has an invalid length. [ 97.590498][T14834] loop4: detected capacity change from 0 to 1024 [ 97.593159][T14834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.607173][T14834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 97.607229][T14834] System zones: 0-1, 3-36 [ 97.611442][T14834] EXT4-fs mount: 42 callbacks suppressed [ 97.611478][T14834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.619395][T14843] netlink: 'syz.1.4803': attribute type 10 has an invalid length. [ 97.651110][T14843] nlmon0: entered allmulticast mode [ 97.651147][T14843] team0: Device nlmon0 is of different type [ 97.670967][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.696071][T14852] loop0: detected capacity change from 0 to 256 [ 97.758930][T14860] loop4: detected capacity change from 0 to 512 [ 97.760545][T14860] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.766492][T14860] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 97.857911][T14871] loop0: detected capacity change from 0 to 1024 [ 97.868211][T14871] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.883320][T14871] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.4816: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.883360][T14871] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.886051][T14871] __quota_error: 274 callbacks suppressed [ 97.886070][T14871] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 97.886088][T14871] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.4816: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.886104][T14871] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.888326][T14871] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 97.888344][T14871] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.4816: Failed to acquire dquot type 0 [ 97.888356][T14871] loop0: lost filesystem error report for type 5 error -117 [ 97.890952][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 97.890967][ C1] EXT4-fs (loop0): initial error at time 527225: ext4_map_blocks:791: inode 3: block 2 [ 97.890988][ C1] EXT4-fs (loop0): last error at time 527225: ext4_acquire_dquot:7041 [ 97.894668][T14871] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.894686][T14871] loop0: lost filesystem error report for type 5 error -117 [ 97.896156][T14871] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.4816: mark_inode_dirty error [ 97.896181][T14871] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.896805][T14871] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 97.896853][T14871] EXT4-fs (loop0): 1 orphan inode deleted [ 97.897336][T14871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.924045][ T12] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.924992][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 97.925012][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 97.931763][T14871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.937886][T14871] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.4816: Invalid inode table block 1 in block_group 0 [ 97.937916][T14871] loop0: lost filesystem error report for type 5 error -117 [ 97.940218][T14871] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.940272][T14871] loop0: lost filesystem error report for type 5 error -117 [ 97.945707][T14871] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz.0.4816: mark_inode_dirty error [ 97.945751][T14871] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.110027][T14911] loop2: detected capacity change from 0 to 256 [ 98.128257][T14915] binder: 14914:14915 ERROR: BC_REGISTER_LOOPER called without request [ 98.128290][T14915] binder: 14914:14915 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 98.128302][T14915] binder: 14914:14915 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 98.201782][T14923] loop4: detected capacity change from 0 to 256 [ 98.350314][T14949] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 98.479689][ T4717] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.621997][T14991] netlink: 'syz.0.4875': attribute type 1 has an invalid length. [ 98.624027][T14991] __nla_validate_parse: 8 callbacks suppressed [ 98.625467][T14991] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4875'. [ 98.628199][T14991] NCSI netlink: No device for ifindex 0 [ 98.660801][ T4717] Bluetooth: hci4: command 0x0406 tx timeout [ 98.660849][ T4717] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.771507][ T867] kernel read not supported for file /vga_arbiter (pid: 867 comm: kworker/1:2) [ 98.778064][T15009] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 98.813854][T15009] bond1 (unregistering): Released all slaves [ 98.916705][T15028] loop3: detected capacity change from 0 to 256 [ 98.922002][T15028] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.930546][T15028] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 98.930583][T15028] FAT-fs (loop3): Filesystem has been set read-only [ 98.963523][T15033] sctp: [Deprecated]: syz.4.4898 (pid 15033) Use of int in max_burst socket option. [ 98.963523][T15033] Use struct sctp_assoc_value instead [ 99.030825][T15046] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.044492][T15046] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.074349][T15046] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 99.074612][T15046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.4903: bg 0: bad block bitmap checksum [ 99.118050][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.136140][T15062] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.159248][T15062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.165887][T15067] binder: 15065:15067 ioctl c018620b ffffffffffffffff returned -14 [ 99.208583][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.271338][T15082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.274110][T15084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 99.274160][T15084] System zones: 1-12 [ 99.274284][T15084] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.4918: Directory hole found for htree index block 0 [ 99.274305][T15084] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 99.275449][T15084] EXT4-fs (loop4): Remounting filesystem read-only [ 99.275478][T15084] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 99.275777][T15084] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 99.276247][T15084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.313289][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.371229][ T4714] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.456001][T15108] xt_time: unknown flags 0x4 [ 99.567544][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4943'. [ 99.567584][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4943'. [ 99.584497][T15136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4945'. [ 99.584533][T15136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4945'. [ 99.584545][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4945'. [ 99.871600][T15186] netlink: 'syz.2.4969': attribute type 11 has an invalid length. [ 99.910247][T15190] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.943494][T15190] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.4973: bad orphan inode 13 [ 99.946760][T15190] loop4: lost filesystem error report for type 5 error -117 [ 99.946929][T15190] ext4_test_bit(bit=12, block=18) = 1 [ 99.946940][T15190] is_bad_inode(inode)=0 [ 99.946945][T15190] NEXT_ORPHAN(inode)=0 [ 99.946950][T15190] max_ino=32 [ 99.946955][T15190] i_nlink=1 [ 99.947433][T15190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 99.953545][T15190] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 99.954733][T15190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4973: bg 0: block 248: padding at end of block bitmap is not set [ 99.955501][T15190] Quota error (device loop4): write_blk: dquota write failed [ 99.955534][T15190] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 99.955555][T15190] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4973: Failed to acquire dquot type 1 [ 99.969709][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 100.094962][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 100.286924][T15247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.332199][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.374578][T15269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5009'. [ 100.485276][T15287] netlink: 'syz.3.5018': attribute type 58 has an invalid length. [ 100.485314][T15287] netlink: 468 bytes leftover after parsing attributes in process `syz.3.5018'. [ 100.486330][T15287] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 100.714426][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.715776][T15334] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.806760][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 100.857127][T15359] xt_TCPMSS: Only works on TCP SYN packets [ 100.887700][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.932559][T15372] netlink: 'syz.2.5058': attribute type 5 has an invalid length. [ 100.937915][T15371] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5060'. [ 101.037974][T15387] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.094571][T15403] netlink: 'syz.1.5071': attribute type 3 has an invalid length. [ 101.094605][T15403] netlink: 'syz.1.5071': attribute type 3 has an invalid length. [ 101.464310][T15468] netlink: 'syz.3.5105': attribute type 1 has an invalid length. [ 101.464346][T15468] netlink: 'syz.3.5105': attribute type 3 has an invalid length. [ 101.566563][T15484] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.780184][T15524] set_capacity_and_notify: 6 callbacks suppressed [ 101.780233][T15524] loop3: detected capacity change from 0 to 1024 [ 101.786980][T15524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.787025][T15524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.787294][T15524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.798547][T15524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.903824][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.915055][T15544] loop0: detected capacity change from 0 to 256 [ 101.959459][T15552] vhci_hcd vhci_hcd.0: invalid port number 36 [ 101.959495][T15552] vhci_hcd vhci_hcd.0: invalid port number 36 [ 102.005845][T15555] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 102.128553][T15576] netlink: 'syz.4.5157': attribute type 2 has an invalid length. [ 102.162414][T15581] loop0: detected capacity change from 0 to 1024 [ 102.162792][T15581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.170351][T15581] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.170413][T15581] System zones: 0-1, 3-36 [ 102.188230][T15581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.229804][T15597] loop2: detected capacity change from 0 to 256 [ 102.237570][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.247343][T15598] loop1: detected capacity change from 0 to 8 [ 102.258965][T15598] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 102.258993][T15598] unable to read xattr id index table [ 102.277403][T15598] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.277452][T15598] SQUASHFS error: Failed to read block 0x13e: -5 [ 102.277465][T15598] SQUASHFS error: Unable to read metadata cache entry [13c] [ 102.277476][T15598] SQUASHFS error: Unable to read directory block [13c:26] [ 102.285332][T15603] netlink: 'syz.0.5165': attribute type 2 has an invalid length. [ 102.455749][T15633] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 102.455774][T15633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.455875][T15633] vhci_hcd vhci_hcd.0: Device attached [ 102.464982][T15634] vhci_hcd: unknown pdu 2 [ 102.466545][ T388] vhci_hcd vhci_hcd.3: stop threads [ 102.466580][ T388] vhci_hcd vhci_hcd.3: release socket [ 102.466594][ T388] vhci_hcd vhci_hcd.3: disconnect device [ 102.478977][T15640] syz.2.5182 (15640): /proc/15637/oom_adj is deprecated, please use /proc/15637/oom_score_adj instead. [ 102.602307][T15661] loop2: detected capacity change from 0 to 256 [ 102.722269][T15678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.727825][T15678] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 102.788001][ T50] Bluetooth: hci4: unexpected cc 0x1405 length: 8 > 4 [ 102.790018][ T50] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 102.891114][T15709] loop0: detected capacity change from 0 to 256 [ 102.922192][T15709] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 102.924437][T15709] FAT-fs (loop0): Filesystem has been set read-only [ 102.926888][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.945268][T15715] loop4: detected capacity change from 0 to 512 [ 102.945614][T15715] EXT4-fs: Ignoring removed bh option [ 102.954187][T15715] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.954216][T15715] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 102.963955][T15715] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 102.964162][T15715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 102.968168][T15715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.038670][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.130759][T15746] mmap: syz.2.5232 (15746): VmData 175906816 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 103.245572][T15765] netdevsim netdevsim3: Direct firmware load for / [ 103.245572][T15765] failed with error -2 [ 103.245610][T15765] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 103.245610][T15765] [ 103.251172][T15764] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 103.478931][T15800] loop4: detected capacity change from 0 to 1024 [ 103.496961][T15800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.544013][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.547209][T15816] netlink: zone id is out of range [ 103.547244][T15816] netlink: zone id is out of range [ 103.547257][T15816] netlink: zone id is out of range [ 103.547269][T15816] netlink: zone id is out of range [ 103.547280][T15816] netlink: zone id is out of range [ 103.547290][T15816] netlink: zone id is out of range [ 103.547298][T15816] netlink: zone id is out of range [ 103.547360][T15816] netlink: zone id is out of range [ 103.547372][T15816] netlink: zone id is out of range [ 103.547384][T15816] netlink: zone id is out of range [ 103.558244][T15814] Cannot find add_set index 4 as target [ 103.590492][T15820] loop4: detected capacity change from 0 to 128 [ 103.603592][T15820] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.627711][T15827] vlan0: entered promiscuous mode [ 103.650685][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.785968][T15851] cgroup: Bad value for 'name' [ 103.798045][T15847] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.808852][T15847] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 103.810579][T15847] FAT-fs (loop0): Filesystem has been set read-only [ 103.914157][T15865] bond1: option all_slaves_active: invalid value (8) [ 103.916649][T15865] bond1 (unregistering): Released all slaves [ 104.360683][T15946] __nla_validate_parse: 15 callbacks suppressed [ 104.360724][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5328'. [ 104.709866][T16015] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5360'. [ 104.711873][T16015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5360'. [ 104.805809][T16033] tmpfs: Bad value for 'mpol' [ 104.843970][T16041] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.972761][T16063] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.017217][ T4714] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.026809][T16068] bond2: option lacp_active: invalid value (254) [ 105.041101][T16068] bond2 (unregistering): Released all slaves [ 105.135873][T16088] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.141031][T16090] validate_nla: 9 callbacks suppressed [ 105.142494][T16090] netlink: 'syz.3.5399': attribute type 1 has an invalid length. [ 105.144767][T16090] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5399'. [ 105.148630][T16082] bond1: option primary_reselect: invalid value (21) [ 105.150165][T16088] EXT4-fs (loop1): 1 truncate cleaned up [ 105.150632][T16088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.159162][T16082] bond1 (unregistering): Released all slaves [ 105.173396][T16097] sctp: [Deprecated]: syz.0.5401 (pid 16097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.173396][T16097] Use struct sctp_sack_info instead [ 105.222511][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.320734][T16115] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.320886][T16115] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.5412: bad orphan inode 15 [ 105.320924][T16115] loop0: lost filesystem error report for type 5 error -117 [ 105.321296][T16115] ext4_test_bit(bit=14, block=18) = 1 [ 105.321311][T16115] is_bad_inode(inode)=0 [ 105.321316][T16115] NEXT_ORPHAN(inode)=1023 [ 105.321320][T16115] max_ino=32 [ 105.321324][T16115] i_nlink=0 [ 105.321454][T16115] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.5412: corrupted xattr block 19: e_value size too large [ 105.321469][T16115] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.321592][T16115] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 105.322069][T16115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 105.367689][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 105.380852][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5414'. [ 105.467271][T16138] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 105.470773][T16138] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 105.473087][T16138] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.5420: iget: bad i_size value: 12154757448730 [ 105.477340][T16138] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.479603][T16138] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5420: couldn't read orphan inode 13 (err -117) [ 105.479636][T16138] loop3: lost filesystem error report for type 5 error -117 [ 105.481519][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 105.481530][ C1] EXT4-fs (loop3): initial error at time 527232: ext4_orphan_get:1399: inode 13 [ 105.481545][ C1] EXT4-fs (loop3): last error at time 527232: ext4_orphan_get:1404 [ 105.493789][T16138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.506676][T16138] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 105.550614][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.663767][T16162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.683996][T16162] EXT4-fs error (device loop0): ext4_get_first_dir_block:3560: inode #11: comm syz.0.5432: directory missing '..' [ 105.692193][T16162] EXT4-fs (loop0): Remounting filesystem read-only [ 105.722490][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.758262][T16188] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.5444'. [ 105.970324][T16223] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 106.022973][T16233] netlink: 'syz.4.5465': attribute type 21 has an invalid length. [ 106.024733][T16233] netlink: 'syz.4.5465': attribute type 1 has an invalid length. [ 106.026196][T16233] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5465'. [ 106.033407][T16235] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 106.035408][T16235] FAT-fs (loop3): Filesystem has been set read-only [ 106.453633][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5501'. [ 106.483714][T16318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5507'. [ 106.492884][T16309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.524490][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.634002][T16342] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5517'. [ 106.723154][T16350] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.723194][T16350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 106.723227][T16350] System zones: 0-1, 15-15, 18-18, 34-34 [ 106.723352][T16350] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.723383][T16350] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 106.723419][T16350] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.723431][T16350] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 106.723732][T16350] EXT4-fs (loop2): 1 truncate cleaned up [ 106.724174][T16350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.739721][T16350] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 106.774324][T16365] sock: sock_timestamping_bind_phc: sock not bind to device [ 106.832154][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.034241][T16401] bond0: option lp_interval: invalid value (0) [ 107.035624][T16401] bond0: option lp_interval: allowed values 1 - 2147483647 [ 107.052306][T16401] bond0 (unregistering): Released all slaves [ 107.087952][T16420] netlink: 'syz.4.5556': attribute type 1 has an invalid length. [ 107.087984][T16420] netlink: 'syz.4.5556': attribute type 2 has an invalid length. [ 107.137705][T16431] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 107.330011][T16457] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.375893][T16465] set_capacity_and_notify: 15 callbacks suppressed [ 107.375938][T16465] loop3: detected capacity change from 0 to 8 [ 107.411965][T16465] SQUASHFS error: Unable to read inode 0xe3 [ 107.454098][ T30] audit: type=1107 audit(527234.426:1026): pid=16471 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='üû?ú' [ 107.539273][T16481] netlink: 'syz.4.5586': attribute type 1 has an invalid length. [ 107.539309][T16481] netlink: 'syz.4.5586': attribute type 3 has an invalid length. [ 107.539335][T16481] NCSI netlink: No device for ifindex 3808428034 [ 107.695990][T16506] loop1: detected capacity change from 0 to 128 [ 107.752974][T16510] loop0: detected capacity change from 0 to 512 [ 107.759090][T16510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.760424][T16510] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.782587][T16510] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.782618][T16510] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 107.783149][T16510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.804841][T16510] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.5599: bad symlink. [ 107.807162][T16510] EXT4-fs (loop0): Remounting filesystem read-only [ 107.830729][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.953296][T16535] netlink: 'syz.3.5609': attribute type 10 has an invalid length. [ 108.107525][T16558] cgroup: name respecified [ 108.200807][T16568] loop4: detected capacity change from 0 to 128 [ 108.240974][T16575] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.326498][T16588] SET target dimension over the limit! [ 108.510571][T16622] bond0: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms [ 108.573585][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.575188][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.576865][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.578894][T16633] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.584314][T16633] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.599528][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.599947][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.600314][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.600636][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.600954][T16633] wg1 speed is unknown, defaulting to 1000 [ 108.698768][T16653] netlink: 'syz.2.5669': attribute type 1 has an invalid length. [ 108.702978][T16659] netlink: 'syz.3.5671': attribute type 13 has an invalid length. [ 108.814387][T16672] xt_socket: unknown flags 0x4c [ 108.915702][T16680] loop0: detected capacity change from 0 to 4096 [ 108.921628][T16680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.983155][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.984127][T16704] random: crng reseeded on system resumption [ 109.065389][ T50] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 109.167876][T16732] : renamed from bond_slave_0 [ 109.272677][T16752] usb usb8: usbfs: process 16752 (syz.2.5714) did not claim interface 0 before use [ 109.311511][T16759] loop3: detected capacity change from 0 to 1024 [ 109.313966][T16762] loop0: detected capacity change from 0 to 2048 [ 109.324776][ T4341] loop0: p1 < > p3 p4 < > [ 109.325274][ T4341] loop0: p3 start 4284289 is beyond EOD, truncated [ 109.328303][T16762] loop0: p1 < > p3 p4 < > [ 109.329203][T16762] loop0: p3 start 4284289 is beyond EOD, truncated [ 109.339241][T16759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.347428][ T4341] loop0: p1 < > p3 p4 < > [ 109.347872][ T4341] loop0: p3 start 4284289 is beyond EOD, truncated [ 109.359647][T16759] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 109.432014][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.483485][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 109.491697][ T6545] udevd[6545]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 109.538469][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 109.564764][ T6546] udevd[6546]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 109.605649][ T6546] udevd[6546]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 109.624798][ T6557] udevd[6557]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 109.876453][T16839] __nla_validate_parse: 9 callbacks suppressed [ 109.876498][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5749'. [ 110.207074][T16898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5771'. [ 110.235755][T16901] tmpfs: Bad value for 'mpol' [ 110.318874][T16918] binder: 16917:16918 got reply transaction with no transaction stack [ 110.320610][T16918] binder: 16917:16918 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-24 line 3155 [ 110.323007][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.379262][T16928] loop2: detected capacity change from 0 to 256 [ 110.399120][T16933] No control pipe specified [ 110.558245][T16954] netlink: 'syz.1.5793': attribute type 30 has an invalid length. [ 110.659334][T16971] netlink: 'syz.2.5801': attribute type 11 has an invalid length. [ 110.857971][T17015] netlink: 'syz.4.5818': attribute type 21 has an invalid length. [ 110.858009][T17015] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.858120][T17015] IPv6: Can't replace route, no match found [ 111.110358][T17061] tmpfs: Bad value for 'mpol' [ 111.171250][T17068] veth3: entered promiscuous mode [ 111.171289][T17068] veth3: entered allmulticast mode [ 111.284584][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5849'. [ 111.287838][T17095] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 111.353114][T17104] tc_dump_action: action bad kind [ 111.384170][T17108] loop3: detected capacity change from 0 to 8 [ 111.393291][T17108] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 111.393315][T17108] unable to read xattr id index table [ 111.408126][T17108] SQUASHFS error: zlib decompression failed, data probably corrupt [ 111.408165][T17108] SQUASHFS error: Failed to read block 0x13e: -5 [ 111.408190][T17108] SQUASHFS error: Unable to read metadata cache entry [13c] [ 111.408207][T17108] SQUASHFS error: Unable to read directory block [13c:26] [ 111.550336][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5864'. [ 111.552143][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5864'. [ 111.591976][T17141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.593485][T17140] bond0: (slave erspan0): Opening slave failed [ 111.635876][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5870'. [ 111.638526][T17147] netlink: 'syz.0.5870': attribute type 12 has an invalid length. [ 111.697237][T17154] loop3: detected capacity change from 0 to 1024 [ 111.708614][T17154] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.747318][T17154] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5872: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.747543][T17154] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.748877][T17154] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 111.748903][T17154] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5872: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.748917][T17154] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.749041][T17154] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 111.749049][T17154] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5872: Failed to acquire dquot type 0 [ 111.749059][T17154] loop3: lost filesystem error report for type 5 error -117 [ 111.749155][T17154] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 111.749165][T17154] loop3: lost filesystem error report for type 5 error -117 [ 111.751918][T17154] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5872: mark_inode_dirty error [ 111.751939][T17154] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.752028][T17154] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 111.752063][T17154] EXT4-fs (loop3): 1 orphan inode deleted [ 111.752525][T17154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.778155][ T1250] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.778814][ T1250] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 111.778830][ T1250] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 111.845102][ T39] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.845144][ T39] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.845272][ T39] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 111.845286][ T39] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 111.845296][ T39] loop3: lost filesystem error report for type 5 error -117 [ 111.867792][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.868180][ T4714] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 111.868194][ T4714] loop3: lost filesystem error report for type 5 error -117 [ 111.868331][ T4714] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 111.868340][ T4714] loop3: lost filesystem error report for type 5 error -117 [ 111.868419][ T4714] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 111.868429][ T4714] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.060454][T17212] net_ratelimit: 337 callbacks suppressed [ 112.060518][T17212] dummy0: mtu less than device minimum [ 112.117240][T17220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5903'. [ 112.159766][T17226] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 112.236054][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5912'. [ 112.236101][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5912'. [ 112.400397][T17264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.416194][T17264] Quota error (device loop4): do_check_range: Getting block 4128768 out of range 0-5 [ 112.464129][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.542291][T17293] geneve3: entered promiscuous mode [ 112.589666][T17301] SQUASHFS error: Unable to read directory block [631:26] [ 112.644204][T17311] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 112.646647][T17311] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 112.648264][T17311] overlayfs: missing 'lowerdir' [ 112.829603][T17343] set_capacity_and_notify: 2 callbacks suppressed [ 112.830451][T17343] loop4: detected capacity change from 0 to 512 [ 112.832300][T17344] Soft offlining pfn 0x1201ee at process virtual address 0x20631000 [ 112.834690][T17344] Soft offlining pfn 0x134c9f at process virtual address 0x20632000 [ 112.856717][T17343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.856842][T17343] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.857278][T17343] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 112.857311][T17343] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 112.857319][T17343] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.5960: Failed to acquire dquot type 1 [ 112.857330][T17343] loop4: lost filesystem error report for type 5 error -5 [ 112.858914][T17343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5960: bg 0: block 40: padding at end of block bitmap is not set [ 112.858929][T17343] loop4: lost filesystem error report for type 5 error -117 [ 112.859052][T17343] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.859062][T17343] loop4: lost filesystem error report for type 5 error -117 [ 112.864997][T17343] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.5960: data will be lost [ 112.865100][T17343] EXT4-fs (loop4): 1 truncate cleaned up [ 112.865731][T17343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.913543][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.018022][T17370] loop2: detected capacity change from 0 to 512 [ 113.042579][T17370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.066727][T17370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.089913][T17370] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 113.089971][T17370] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 113.089983][T17370] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.5974: Failed to acquire dquot type 1 [ 113.132801][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.159341][T17387] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[17390] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[17387] [ 113.288095][T17413] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5994'. [ 113.289326][T17414] netlink: 'syz.2.5993': attribute type 3 has an invalid length. [ 113.314398][T17418] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 113.819701][T17501] netlink: 'syz.4.6037': attribute type 1 has an invalid length. [ 113.851691][T17504] netlink: 'syz.4.6039': attribute type 5 has an invalid length. [ 114.077559][T17541] Zero length message leads to an empty skb [ 114.248749][T17571] netlink: 'syz.4.6071': attribute type 25 has an invalid length. [ 114.354759][T17584] netlink: 'syz.4.6077': attribute type 5 has an invalid length. [ 114.532202][T17601] netlink: 'syz.4.6086': attribute type 10 has an invalid length. [ 114.541039][T17601] team0: Device vxcan0 is of different type [ 114.577691][T17607] loop2: detected capacity change from 0 to 128 [ 114.587884][T17607] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.629136][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.674191][T17493] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 115.288720][T17709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.354697][T17724] random: crng reseeded on system resumption [ 115.500955][T17749] loop2: detected capacity change from 0 to 512 [ 115.553065][T17752] loop0: detected capacity change from 0 to 4096 [ 115.560077][T17749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.586660][T17752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.630110][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.644194][T17752] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 115.676152][T17774] binfmt_misc: register: failed to install interpreter file ./file0 [ 115.677032][T17775] __nla_validate_parse: 10 callbacks suppressed [ 115.677045][T17775] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6170'. [ 115.682591][T17775] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6170'. [ 115.698002][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.737079][T17781] loop1: detected capacity change from 0 to 512 [ 115.748778][T17781] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 115.760232][T17781] EXT4-fs (loop1): 1 truncate cleaned up [ 115.761664][T17789] xt_hashlimit: size too large, truncated to 1048576 [ 115.762889][T17789] xt_hashlimit: invalid rate [ 115.765561][T17781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.798028][T17781] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 115.845020][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.938635][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.182195][T17856] loop1: detected capacity change from 0 to 256 [ 116.338425][T17877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6220'. [ 116.492551][T17897] SET target dimension over the limit! [ 116.639550][T17915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6238'. [ 116.672555][T17921] overlayfs: missing 'lowerdir' [ 116.776106][T17933] team0: entered promiscuous mode [ 116.784560][T17933] team_slave_0: entered promiscuous mode [ 116.784664][T17933] team_slave_1: entered promiscuous mode [ 116.788361][T17933] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 116.812236][T17937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.956647][T17949] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6257'. [ 116.957221][T17949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.034634][T17957] loop3: detected capacity change from 0 to 8 [ 117.065137][T17957] SQUASHFS error: Failed to read block 0x260685: -5 [ 117.065174][T17957] SQUASHFS error: Unable to read metadata cache entry [260685] [ 117.065185][T17957] SQUASHFS error: Unable to read directory block [260685:0] [ 117.184934][T17982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6271'. [ 117.184975][T17982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6271'. [ 117.185001][T17982] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6271'. [ 117.335404][T18009] netlink: 766 bytes leftover after parsing attributes in process `syz.1.6284'. [ 117.691325][T18079] misc userio: No port type given on /dev/userio [ 117.921478][T18125] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.969350][T18133] loop1: detected capacity change from 0 to 512 [ 118.002514][T18133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.037611][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.112927][T18158] IPv6: NLM_F_REPLACE set, but no existing node found! [ 118.144285][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6364'. [ 118.286682][T18193] validate_nla: 3 callbacks suppressed [ 118.286725][T18193] netlink: 'syz.2.6375': attribute type 21 has an invalid length. [ 118.485930][T18223] netlink: 'syz.1.6390': attribute type 12 has an invalid length. [ 118.799510][T18276] xt_HMARK: spi-set and port-set can't be combined [ 118.804740][T18278] loop4: detected capacity change from 0 to 256 [ 118.829337][T18278] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 118.829370][T18278] FAT-fs (loop4): Filesystem has been set read-only [ 118.911908][T18294] loop1: detected capacity change from 0 to 512 [ 118.934255][T18297] loop4: detected capacity change from 0 to 256 [ 118.961978][T18294] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #12: block 32: comm syz.1.6425: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 118.964377][T18294] EXT4-fs (loop1): Remounting filesystem read-only [ 118.999641][T18306] loop3: detected capacity change from 0 to 128 [ 119.325040][T18344] netlink: 'syz.4.6450': attribute type 1 has an invalid length. [ 119.477638][T18359] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 119.508311][T18362] netlink: 'syz.4.6459': attribute type 29 has an invalid length. [ 119.744979][T18384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.907408][T18408] binder: 18399:18408 ioctl c0046209 100000000000000 returned -22 [ 120.011834][T18428] loop4: detected capacity change from 0 to 512 [ 120.026518][T18432] loop3: detected capacity change from 0 to 1024 [ 120.039914][T18428] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 120.040685][T18428] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.6489: corrupted inode contents [ 120.040712][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.043743][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 120.043760][ C1] EXT4-fs (loop4): initial error at time 529824: mb_free_blocks:2049: inode 11: block 64 [ 120.043781][ C1] EXT4-fs (loop4): last error at time 529824: ext4_do_update_inode:5742: inode 11 [ 120.052182][T18428] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #11: comm syz.4.6489: mark_inode_dirty error [ 120.052211][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.054579][T18428] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6489: invalid indirect mapped block 1 (level 1) [ 120.058498][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.062165][T18428] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.6489: corrupted inode contents [ 120.062214][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.067736][T18428] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 120.071093][T18428] loop4: lost filesystem error report for type 5 error -117 [ 120.071727][T18428] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.6489: corrupted inode contents [ 120.075563][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.075777][T18428] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.6489: mark_inode_dirty error [ 120.080097][T18428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.081667][T18428] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 120.081700][T18428] loop4: lost filesystem error report for type 5 error -117 [ 120.088648][T18428] EXT4-fs (loop4): 1 truncate cleaned up [ 120.126095][T18428] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6489: iget: bogus i_mode (3355) [ 120.126735][T18444] loop2: detected capacity change from 0 to 1024 [ 120.128149][T18444] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.128164][T18444] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 120.128768][T18444] EXT4-fs (loop2): invalid journal inode [ 120.128800][T18444] EXT4-fs (loop2): can't get journal size [ 120.199619][T18455] tmpfs: Group quota block hardlimit too large. [ 120.285741][T18470] binder: 18469:18470 ioctl 40046210 ffffffffffffffff returned -14 [ 120.304229][T18472] loop2: detected capacity change from 0 to 256 [ 120.354632][T18476] loop4: detected capacity change from 0 to 8192 [ 120.362918][T18476] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.368750][T18476] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 120.370797][T18476] FAT-fs (loop4): Filesystem has been set read-only [ 120.396540][T18480] loop0: detected capacity change from 0 to 8192 [ 120.401095][T18480] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.746819][T18537] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 120.996414][T18579] nvme_fabrics: unknown parameter or missing value '­' in ctrl creation request [ 121.033105][T18583] vhci_hcd vhci_hcd.3: invalid port number 129 [ 121.033142][T18583] vhci_hcd vhci_hcd.3: invalid port number 129 [ 121.056254][T18587] netlink: 'syz.1.6567': attribute type 75 has an invalid length. [ 121.103483][T18595] netlink: 'syz.0.6571': attribute type 26 has an invalid length. [ 121.244121][T18617] syz.0.6582: attempt to access beyond end of device [ 121.244121][T18617] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 121.350057][ T26] kernel write not supported for file /input/mice (pid: 26 comm: kworker/1:1) [ 121.359028][T18629] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #11: comm syz.4.6588: directory missing '..' [ 121.414216][T18642] __nla_validate_parse: 11 callbacks suppressed [ 121.414256][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6593'. [ 121.416183][T18501] 9pnet_fd: p9_fd_create_tcp (18501): problem connecting socket to 127.0.0.1 [ 121.516735][T18660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6602'. [ 121.601779][T18677] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 121.683877][T18687] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6615'. [ 121.834964][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6630'. [ 121.880599][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6635'. [ 121.944114][T18739] netlink: zone id is out of range [ 121.944145][T18739] netlink: zone id is out of range [ 121.944169][T18739] netlink: zone id is out of range [ 121.944180][T18739] netlink: zone id is out of range [ 121.944190][T18739] netlink: zone id is out of range [ 121.944200][T18739] netlink: zone id is out of range [ 121.944208][T18739] netlink: zone id is out of range [ 121.944217][T18739] netlink: zone id is out of range [ 121.944235][T18739] netlink: zone id is out of range [ 122.045602][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6648'. [ 122.063300][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6650'. [ 122.076275][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6650'. [ 122.076312][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6650'. [ 122.077784][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6650'. [ 122.162073][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.162314][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.183634][T18779] xt_hashlimit: overflow, try lower: 8388614/0 [ 122.185454][T18772] netlink: 'syz.2.6658': attribute type 3 has an invalid length. [ 122.231614][T18784] lo speed is unknown, defaulting to 1000 [ 122.231659][T18784] lo speed is unknown, defaulting to 1000 [ 122.231885][T18784] lo speed is unknown, defaulting to 1000 [ 122.240313][T18784] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 122.250607][T18788] Invalid source name [ 122.250637][T18788] UBIFS error (pid: 18788): cannot open "./file0", error -22 [ 122.261957][T18784] lo speed is unknown, defaulting to 1000 [ 122.262350][T18784] lo speed is unknown, defaulting to 1000 [ 122.263065][T18784] lo speed is unknown, defaulting to 1000 [ 122.263411][T18784] lo speed is unknown, defaulting to 1000 [ 122.263716][T18784] lo speed is unknown, defaulting to 1000 [ 122.280725][T18790] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 122.283314][T18790] FAT-fs (loop4): Filesystem has been set read-only [ 122.444199][ T30] audit: type=1326 audit(529826.448:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18816 comm="syz.0.6680" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 122.448558][ T30] audit: type=1326 audit(529826.458:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18816 comm="syz.0.6680" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 122.453966][ T30] audit: type=1326 audit(529826.458:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18816 comm="syz.0.6680" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=112 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 122.458582][ T30] audit: type=1326 audit(529826.458:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18816 comm="syz.0.6680" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 122.809460][T18873] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 122.938858][T18894] xt_CONNSECMARK: invalid mode: 66 [ 123.371878][T18955] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 123.375259][T18955] bond3 (unregistering): Released all slaves [ 123.407967][T18968] netlink: 'syz.4.6752': attribute type 20 has an invalid length. [ 123.408003][T18968] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.424162][T18966] EXT4-fs: Cannot change quota options when quota turned on [ 123.496383][T18977] netlink: 'syz.3.6756': attribute type 7 has an invalid length. [ 123.496420][T18977] netlink: 'syz.3.6756': attribute type 8 has an invalid length. [ 123.745096][T19014] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.6774: inline data xattr refers to an external xattr inode [ 123.747850][T19014] EXT4-fs (loop2): Remounting filesystem read-only [ 123.772530][T19025] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.041180][T19078] validate_nla: 1 callbacks suppressed [ 124.041227][T19078] netlink: 'syz.1.6804': attribute type 2 has an invalid length. [ 124.067362][T19079] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 124.079859][T19079] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6807: corrupted in-inode xattr: e_value size too large [ 124.092656][T19079] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.092934][T19079] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6807: couldn't read orphan inode 15 (err -117) [ 124.092967][T19079] loop3: lost filesystem error report for type 5 error -117 [ 124.094848][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 124.094869][ C1] EXT4-fs (loop3): initial error at time 529827: ext4_iget_extra_inode:5180: inode 15 [ 124.094885][ C1] EXT4-fs (loop3): last error at time 529827: ext4_orphan_get:1404 [ 124.186127][T19101] set_capacity_and_notify: 10 callbacks suppressed [ 124.186175][T19101] loop1: detected capacity change from 0 to 2048 [ 124.280163][T19118] vlan1: entered allmulticast mode [ 124.281255][T19118] veth0_vlan: entered allmulticast mode [ 124.311671][T19121] netlink: 'syz.0.6826': attribute type 3 has an invalid length. [ 124.334648][T19126] netlink: 'syz.2.6828': attribute type 8 has an invalid length. [ 124.396924][T19135] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 124.742818][T19179] cgroup: Name too long [ 124.878293][T19199] loop2: detected capacity change from 0 to 256 [ 125.053468][T19215] loop0: detected capacity change from 0 to 8 [ 125.114885][T19220] netlink: 'syz.1.6875': attribute type 1 has an invalid length. [ 125.150792][T19225] netlink: 'syz.1.6879': attribute type 2 has an invalid length. [ 125.241032][T19239] loop4: detected capacity change from 0 to 256 [ 125.255404][T19239] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 125.258534][T19239] FAT-fs (loop4): Filesystem has been set read-only [ 125.354545][T19247] netlink: 'syz.4.6889': attribute type 4 has an invalid length. [ 125.406085][T19249] tmpfs: Bad value for 'mpol' [ 125.774995][T19314] loop0: detected capacity change from 0 to 128 [ 125.804748][T19319] autofs4:pid:19319:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1536), cmd(0xc0189375) [ 125.810377][T19319] autofs4:pid:19319:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 125.935317][T19334] loop3: detected capacity change from 0 to 256 [ 125.950576][T19342] loop4: detected capacity change from 0 to 128 [ 125.971702][T19342] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 125.971852][T19342] FAT-fs (loop4): Filesystem has been set read-only [ 126.047986][T19357] netlink: 'syz.4.6939': attribute type 30 has an invalid length. [ 126.102030][T19366] netlink: 'syz.4.6946': attribute type 1 has an invalid length. [ 126.156359][T19379] loop4: detected capacity change from 0 to 256 [ 126.257447][T19383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.309004][T19400] netlink: 'syz.2.6961': attribute type 2 has an invalid length. [ 126.311024][T19400] netlink: 'syz.2.6961': attribute type 1 has an invalid length. [ 126.399094][T19413] loop4: detected capacity change from 0 to 1024 [ 126.544695][ T30] audit: type=1326 audit(529830.283:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.550643][ T30] audit: type=1326 audit(529830.283:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.556143][ T30] audit: type=1326 audit(529830.293:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.568663][ T30] audit: type=1326 audit(529830.302:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.573232][ T30] audit: type=1326 audit(529830.302:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.573265][ T30] audit: type=1326 audit(529830.302:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19430 comm="syz.2.6976" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb77fe8 code=0x7ffc0000 [ 126.628517][T19437] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 126.632125][T19435] loop1: detected capacity change from 0 to 512 [ 126.632804][T19435] EXT4-fs: Ignoring removed bh option [ 126.642459][T19435] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #11: comm syz.1.6980: corrupted in-inode xattr: bad e_name length [ 126.642493][T19435] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.644036][T19435] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6980: couldn't read orphan inode 11 (err -117) [ 126.644056][T19435] loop1: lost filesystem error report for type 5 error -117 [ 126.644194][T19435] EXT4-fs (loop1): 1 truncate cleaned up [ 126.661143][T19435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6980: bg 0: block 5: invalid block bitmap [ 126.906121][T19462] __nla_validate_parse: 43 callbacks suppressed [ 126.908740][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6989'. [ 127.100507][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7001'. [ 127.102318][T19484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7001'. [ 127.243038][T19503] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7009'. [ 127.590112][T19537] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 127.590140][T19537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.590211][T19537] vhci_hcd vhci_hcd.0: Device attached [ 127.596878][T19539] vhci_hcd: connection closed [ 127.597076][ T3330] vhci_hcd vhci_hcd.0: stop threads [ 127.597115][ T3330] vhci_hcd vhci_hcd.0: release socket [ 127.597141][ T3330] vhci_hcd vhci_hcd.0: disconnect device [ 127.683011][T19554] EXT4-fs: inline encryption not supported [ 127.721620][T19554] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7035: Failed to acquire dquot type 0 [ 127.721653][T19554] loop4: lost filesystem error report for type 5 error -117 [ 127.721982][T19554] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 127.724715][T19554] EXT4-fs (loop4): 1 truncate cleaned up [ 127.741192][T19554] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7035: Failed to acquire dquot type 0 [ 127.803439][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7041'. [ 127.803475][T19569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7041'. [ 127.847718][T19574] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7044'. [ 127.847781][T19574] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7044'. [ 128.077459][T19617] IPv6: Can't replace route, no match found [ 128.536638][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7100'. [ 128.563526][T19691] SQUASHFS error: Unable to read inode 0xa7 [ 128.973571][T19769] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 129.017536][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7139'. [ 129.071929][T19782] usb usb8: usbfs: process 19782 (syz.2.7143) did not claim interface 0 before use [ 129.092564][T19776] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7141: bg 0: block 112: padding at end of block bitmap is not set [ 129.357999][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.358042][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.751571][T19900] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.867761][T19924] devpts: Bad value for 'max' [ 129.989563][T19948] validate_nla: 11 callbacks suppressed [ 129.991024][T19948] netlink: 'syz.1.7220': attribute type 2 has an invalid length. [ 130.044306][T19956] set_capacity_and_notify: 7 callbacks suppressed [ 130.045782][T19956] loop4: detected capacity change from 0 to 256 [ 130.062193][T19952] vhci_hcd vhci_hcd.1: invalid port number 254 [ 130.210130][T19986] loop2: detected capacity change from 0 to 128 [ 130.312071][T20005] netlink: 'syz.0.7250': attribute type 1 has an invalid length. [ 130.342112][T20012] loop2: detected capacity change from 0 to 512 [ 130.342465][T20012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.375913][T20012] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 130.375943][T20012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 130.376039][T20012] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.376302][T20012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.7251: bg 0: block 15: invalid block bitmap [ 130.376316][T20012] loop2: lost filesystem error report for type 5 error -117 [ 130.376403][T20012] EXT4-fs (loop2): Remounting filesystem read-only [ 130.376444][T20012] EXT4-fs (loop2): 1 truncate cleaned up [ 130.376888][T20012] EXT4-fs mount: 34 callbacks suppressed [ 130.376896][T20012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.418868][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.500504][T20035] netlink: 'syz.3.7267': attribute type 4 has an invalid length. [ 130.515879][T20041] loop1: detected capacity change from 0 to 256 [ 130.582576][T20048] netlink: 'syz.2.7270': attribute type 38 has an invalid length. [ 130.603357][T20047] xfrm1: entered allmulticast mode [ 130.646098][T20056] loop0: detected capacity change from 0 to 256 [ 130.742314][T20072] loop1: detected capacity change from 0 to 128 [ 130.758079][T20072] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.773612][T20072] EXT4-fs warning (device loop1): ext4_group_extend:1890: can't read last block, resize aborted [ 130.819575][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.853646][T20093] loop4: detected capacity change from 0 to 512 [ 130.880385][T20093] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 130.880421][T20093] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 130.880451][T20093] System zones: 0-1, 15-15, 18-18, 34-34 [ 130.880571][T20093] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.880601][T20093] __quota_error: 7 callbacks suppressed [ 130.880608][T20093] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 130.880641][T20093] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 130.880653][T20093] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 130.880946][T20093] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7293: bg 0: block 40: padding at end of block bitmap is not set [ 130.880958][T20093] loop4: lost filesystem error report for type 5 error -117 [ 130.881051][T20093] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 130.881060][T20093] loop4: lost filesystem error report for type 5 error -117 [ 130.881166][T20093] EXT4-fs (loop4): 1 truncate cleaned up [ 130.893353][T20093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.958949][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.971494][T20108] netlink: 'syz.1.7299': attribute type 1 has an invalid length. [ 130.976283][T20111] vlan1: entered allmulticast mode [ 130.976317][T20111] veth0_vlan: entered allmulticast mode [ 131.013837][T20119] xt_limit: Overflow, try lower: 0/0 [ 131.037922][T20117] net_ratelimit: 38 callbacks suppressed [ 131.037956][T20117] openvswitch: netlink: Flow actions attr not present in new flow. [ 131.172752][T20145] usb usb2: check_ctrlrecip: process 20145 (syz.3.7317) requesting ep 01 but needs 81 [ 131.176067][T20145] usb usb2: usbfs: process 20145 (syz.3.7317) did not claim interface 0 before use [ 131.341307][T20179] : renamed from virt_wifi0 [ 131.372852][T20183] loop2: detected capacity change from 0 to 512 [ 131.378092][T20183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.402505][T20183] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.402717][T20183] EXT4-fs (loop2): orphan cleanup on readonly fs [ 131.409396][T20183] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 131.409450][T20183] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 131.409461][T20183] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7336: Failed to acquire dquot type 1 [ 131.409473][T20183] loop2: lost filesystem error report for type 5 error -117 [ 131.409642][T20183] EXT4-fs (loop2): Remounting filesystem read-only [ 131.410622][T20183] EXT4-fs (loop2): 1 truncate cleaned up [ 131.427027][ T39] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.427058][ T39] Quota error (device loop2): write_blk: dquota write failed [ 131.427080][ T39] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 131.427095][ T39] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 131.427108][ T39] Quota error (device loop2): write_blk: dquota write failed [ 131.427119][ T39] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 131.427147][ T39] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 131.427158][ T39] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 131.427389][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 131.427404][ C0] EXT4-fs (loop2): initial error at time 529834: ext4_acquire_dquot:7041 [ 131.427419][ C0] EXT4-fs (loop2): last error at time 529834: ext4_acquire_dquot:7041 [ 131.428900][T20183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.490647][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.796528][T20250] SET target dimension over the limit! [ 131.870346][T20262] netlink: 'syz.3.7374': attribute type 21 has an invalid length. [ 131.870378][T20262] netlink: 'syz.3.7374': attribute type 23 has an invalid length. [ 131.870402][T20262] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.122020][T20301] netlink: 'syz.3.7393': attribute type 11 has an invalid length. [ 132.295042][T20333] loop0: detected capacity change from 0 to 256 [ 132.302107][T20332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 132.611738][T20391] netlink: 'syz.4.7437': attribute type 1 has an invalid length. [ 132.752071][T20416] __nla_validate_parse: 20 callbacks suppressed [ 132.754210][T20416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7449'. [ 132.912283][T20442] netlink: 'syz.1.7462': attribute type 1 has an invalid length. [ 133.023632][T20463] loop1: detected capacity change from 0 to 256 [ 133.139693][T20480] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7480'. [ 133.223194][T20501] binder: 20500:20501 BC_FREE_BUFFER no match for buffer at offset 0 [ 133.279879][T20511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.409831][T20533] binder: 20532:20533 ioctl c0306201 20000100 returned -14 [ 133.560758][T20563] team_slave_1: entered allmulticast mode [ 133.565803][T20563] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 133.573109][T20567] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 133.602699][T20571] bridge0: port 3(team0) entered blocking state [ 133.604008][T20571] bridge0: port 3(team0) entered disabled state [ 133.605260][T20571] team0: entered allmulticast mode [ 133.606258][T20571] team_slave_0: entered allmulticast mode [ 133.607324][T20571] team_slave_1: entered allmulticast mode [ 133.609481][T20571] team0: entered promiscuous mode [ 133.610482][T20571] team_slave_0: entered promiscuous mode [ 133.611715][T20571] team_slave_1: entered promiscuous mode [ 133.613032][T20571] bridge0: port 3(team0) entered blocking state [ 133.613081][T20571] bridge0: port 3(team0) entered forwarding state [ 133.759106][T20594] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.7532: dx entry: limit 1024 != root limit 124 [ 133.761408][T20594] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7532: Corrupt directory, running e2fsck is recommended [ 133.766658][T20594] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 133.768427][T20594] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7532: corrupted in-inode xattr: invalid ea_ino [ 133.770977][T20594] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.771163][T20594] EXT4-fs (loop0): Remounting filesystem read-only [ 133.776497][T20594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.821927][T20603] Invalid option length (0) for dns_resolver key [ 133.839889][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.069833][T20642] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.078300][T20650] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 134.205055][T20670] nfs: Deprecated parameter 'intr' [ 134.267924][T20683] ip6t_srh: unknown srh match flags 4000 [ 134.382779][T20700] netlink: del zone limit has 8 unknown bytes [ 134.393613][T20703] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.402332][T20703] bridge0: entered allmulticast mode [ 134.411681][T20703] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 134.497912][T20715] netlink: 'syz.4.7591': attribute type 15 has an invalid length. [ 134.569601][T20728] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 134.677954][ T30] audit: type=1326 audit(529837.898:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20748 comm="syz.0.7608" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 134.677999][ T30] audit: type=1326 audit(529837.898:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20748 comm="syz.0.7608" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83777fe8 code=0x7ffc0000 [ 135.129535][T20815] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.7634' sets config #0 [ 135.498755][T20868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7660'. [ 135.498798][T20868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7660'. [ 135.563309][T20875] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 135.581394][T20878] set_capacity_and_notify: 2 callbacks suppressed [ 135.582771][T20878] loop0: detected capacity change from 0 to 2048 [ 135.608709][T20882] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.611498][T20878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.684017][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.749661][T20903] validate_nla: 2 callbacks suppressed [ 135.749702][T20903] netlink: 'syz.2.7676': attribute type 21 has an invalid length. [ 135.749720][T20903] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7676'. [ 135.749767][T20903] netlink: 'syz.2.7676': attribute type 4 has an invalid length. [ 135.749781][T20903] netlink: 'syz.2.7676': attribute type 5 has an invalid length. [ 135.749794][T20903] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7676'. [ 135.897008][T20927] loop3: detected capacity change from 0 to 512 [ 135.930276][T20927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.951865][T20927] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.7689: casefold flag without casefold feature [ 135.985553][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.026809][T20947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7699'. [ 136.230245][T20981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7714'. [ 136.236960][T20986] loop2: detected capacity change from 0 to 128 [ 136.241232][T20986] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.287025][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.311432][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7720'. [ 136.381089][T20997] bond1: entered allmulticast mode [ 136.382292][T20997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.496659][T21029] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 136.518310][T21029] bond3 (unregistering): Released all slaves [ 136.605518][T21039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7741'. [ 136.743783][T21055] tmpfs: Bad value for 'mpol' [ 136.957195][T21089] netlink: 'syz.2.7765': attribute type 2 has an invalid length. [ 136.958948][T21089] netlink: 'syz.2.7765': attribute type 1 has an invalid length. [ 136.973448][T21091] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 136.985811][T21091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.009744][T21095] geneve2: entered promiscuous mode [ 137.049386][T21097] geneve2: entered allmulticast mode [ 137.365308][T21141] loop3: detected capacity change from 0 to 512 [ 137.367347][T21141] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.373060][T21141] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.7791: inode has both inline data and extents flags [ 137.373096][T21141] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.375725][T21141] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7791: couldn't read orphan inode 15 (err -117) [ 137.375763][T21141] loop3: lost filesystem error report for type 5 error -117 [ 137.380331][T21141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.419185][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.484450][T21158] loop4: detected capacity change from 0 to 1024 [ 137.484826][T21158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.484862][T21158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.491345][T21158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.498852][T21158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.560452][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.683135][T21189] kernel profiling enabled (shift: 0) [ 137.756451][T21199] openvswitch: netlink: Flow key attr not present in new flow. [ 138.056426][T21254] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 138.128557][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 138.193495][T21277] loop4: detected capacity change from 0 to 256 [ 138.198291][T21275] team0: entered promiscuous mode [ 138.198322][T21275] team_slave_0: entered promiscuous mode [ 138.198371][T21275] : entered promiscuous mode [ 138.198408][T21275] team0: left allmulticast mode [ 138.198415][T21275] team_slave_0: left allmulticast mode [ 138.198424][T21275] : left allmulticast mode [ 138.198458][T21275] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.231354][T21277] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 138.233465][T21277] FAT-fs (loop4): Filesystem has been set read-only [ 138.375929][T21304] 9pnet_fd: p9_fd_create_unix (21304): problem connecting socket: ./file0/file0: -2 [ 138.413631][T21312] loop1: detected capacity change from 0 to 512 [ 138.423834][T21312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7874: bg 0: block 393: padding at end of block bitmap is not set [ 138.426610][T21312] loop1: lost filesystem error report for type 5 error -117 [ 138.428052][T21312] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 138.431241][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 138.431253][ C1] EXT4-fs (loop1): initial error at time 529841: ext4_validate_block_bitmap:441 [ 138.431268][ C1] EXT4-fs (loop1): last error at time 529841: ext4_validate_block_bitmap:441 [ 138.438995][T21312] loop1: lost filesystem error report for type 5 error -117 [ 138.439493][T21312] EXT4-fs (loop1): 2 truncates cleaned up [ 138.444418][T21312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.463071][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.573130][T21338] loop2: detected capacity change from 0 to 1024 [ 138.602295][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 138.602333][ T30] audit: type=1326 audit(529841.564:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21339 comm="syz.1.7888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4977fe8 code=0x0 [ 138.616624][T21342] __nla_validate_parse: 4 callbacks suppressed [ 138.627001][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7889'. [ 138.793280][T21375] netlink: 'syz.4.7905': attribute type 1 has an invalid length. [ 138.795749][T21375] netlink: 'syz.4.7905': attribute type 3 has an invalid length. [ 138.797206][T21375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7905'. [ 138.851944][T21380] Injecting memory failure for pfn 0x122620 at process virtual address 0x201bd000 [ 138.856617][T21380] Memory failure: 0x122620: Sending SIGBUS to syz.1.7908:21380 due to hardware memory corruption [ 138.859334][T21380] Memory failure: 0x122620: recovery action for dirty LRU page: Recovered [ 138.861034][T21380] Injecting memory failure for pfn 0x122621 at process virtual address 0x201be000 [ 138.863025][T21380] Memory failure: 0x122621: Sending SIGBUS to syz.1.7908:21380 due to hardware memory corruption [ 138.864969][T21380] Memory failure: 0x122621: recovery action for dirty LRU page: Recovered [ 138.866432][T21380] Injecting memory failure for pfn 0x122622 at process virtual address 0x201bf000 [ 138.870088][T21380] Memory failure: 0x122622: Sending SIGBUS to syz.1.7908:21380 due to hardware memory corruption [ 138.875653][T21380] Memory failure: 0x122622: recovery action for dirty LRU page: Recovered [ 138.922723][T21395] loop1: detected capacity change from 0 to 8 [ 138.928977][T21395] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 138.929012][T21395] unable to read xattr id index table [ 139.106254][T21430] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7933'. [ 139.223311][T21454] loop2: detected capacity change from 0 to 512 [ 139.251727][T21454] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.261761][T21463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7948'. [ 139.265062][T21463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7948'. [ 139.287345][T21454] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 139.287430][T21454] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.335790][ T4715] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 139.423706][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7954'. [ 139.423742][T21482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7954'. [ 139.501920][T21495] netlink: 'syz.2.7964': attribute type 11 has an invalid length. [ 139.501955][T21495] netlink: 'syz.2.7964': attribute type 11 has an invalid length. [ 139.501978][T21495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7964'. [ 139.605569][T21513] usb usb1: usbfs: process 21513 (syz.3.7971) did not claim interface 0 before use [ 139.606622][T21513] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.837994][T21547] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.7986'. [ 139.845591][T21548] sit2: entered promiscuous mode [ 139.845624][T21548] sit2: entered allmulticast mode [ 139.905064][T21554] bond3: Unable to set up delay as MII monitoring is disabled [ 139.921040][T21554] bond3 (unregistering): Released all slaves [ 140.123610][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8002'. [ 140.199091][T21594] xt_l2tp: wrong L2TP version: 0 [ 140.206027][T21593] [U] [ 140.206051][T21593] [U] [ 140.206065][T21593] [U] [ 140.206079][T21593] [U] [ 140.206153][T21593] [U] [ 140.206167][T21593] [U] [ 140.206180][T21593] [U] [ 140.206193][T21593] [U] [ 140.206261][T21593] [U] [ 140.206274][T21593] [U] [ 140.206287][T21593] [U] [ 140.206299][T21593] [U] [ 140.206354][T21593] [U] [ 140.206366][T21593] [U] [ 140.206379][T21593] [U] [ 140.206392][T21593] [U] [ 140.206453][T21593] [U] [ 140.206465][T21593] [U] [ 140.206478][T21593] [U] [ 140.206490][T21593] [U] [ 140.206545][T21593] [U] [ 140.206557][T21593] [U] [ 140.206570][T21593] [U] [ 140.206582][T21593] [U] [ 140.206642][T21593] [U] [ 140.206655][T21593] [U] [ 140.206667][T21593] [U] [ 140.206680][T21593] [U] [ 140.206734][T21593] [U] [ 140.206747][T21593] [U] [ 140.206759][T21593] [U] [ 140.206772][T21593] [U] [ 140.206831][T21593] [U] [ 140.206844][T21593] [U] [ 140.206856][T21593] [U] [ 140.206869][T21593] [U] [ 140.206923][T21593] [U] [ 140.206935][T21593] [U] [ 140.206948][T21593] [U] [ 140.206961][T21593] [U] [ 140.207020][T21593] [U] [ 140.207032][T21593] [U] [ 140.207045][T21593] [U] [ 140.207057][T21593] [U] [ 140.207111][T21593] [U] [ 140.207124][T21593] [U] [ 140.207137][T21593] [U] [ 140.207149][T21593] [U] [ 140.207208][T21593] [U] [ 140.207225][T21593] [U] [ 140.207238][T21593] [U] [ 140.207250][T21593] [U] [ 140.207304][T21593] [U] [ 140.207317][T21593] [U] [ 140.207330][T21593] [U] [ 140.207342][T21593] [U] [ 140.207401][T21593] [U] [ 140.207414][T21593] [U] [ 140.207426][T21593] [U] [ 140.207439][T21593] [U] [ 140.207493][T21593] [U] [ 140.207506][T21593] [U] [ 140.207518][T21593] [U] [ 140.207531][T21593] [U] [ 140.207589][T21593] [U] [ 140.207602][T21593] [U] [ 140.207617][T21593] [U] [ 140.207630][T21593] [U] [ 140.207690][T21593] [U] [ 140.207703][T21593] [U] [ 140.207715][T21593] [U] [ 140.207728][T21593] [U] [ 140.207787][T21593] [U] [ 140.207799][T21593] [U] [ 140.207812][T21593] [U] [ 140.207826][T21593] [U] [ 140.214974][T21593] [U] [ 140.214990][T21593] [U] [ 140.215006][T21593] [U] [ 140.215021][T21593] [U] [ 140.215110][T21593] [U] [ 140.215124][T21593] [U] [ 140.215138][T21593] [U] [ 140.215150][T21593] [U] [ 140.215205][T21593] [U] [ 140.215223][T21593] [U] [ 140.215236][T21593] [U] [ 140.215249][T21593] [U] [ 140.215310][T21593] [U] [ 140.215322][T21593] [U] [ 140.215335][T21593] [U] [ 140.215348][T21593] [U] [ 140.215468][T21593] [U] [ 140.215481][T21593] [U] [ 140.215493][T21593] [U] [ 140.215506][T21593] [U] [ 140.215567][T21593] [U] [ 140.215579][T21593] [U] [ 140.215592][T21593] [U] [ 140.215605][T21593] [U] [ 140.215659][T21593] [U] [ 140.215671][T21593] [U] [ 140.215684][T21593] [U] [ 140.215697][T21593] [U] [ 140.215756][T21593] [U] [ 140.215769][T21593] [U] [ 140.215782][T21593] [U] [ 140.215794][T21593] [U] [ 140.215848][T21593] [U] [ 140.215861][T21593] [U] [ 140.215874][T21593] [U] [ 140.215886][T21593] [U] [ 140.215946][T21593] [U] [ 140.215958][T21593] [U] [ 140.215971][T21593] [U] [ 140.215984][T21593] [U] [ 140.216038][T21593] [U] [ 140.216050][T21593] [U] [ 140.216063][T21593] [U] [ 140.216076][T21593] [U] [ 140.216134][T21593] [U] [ 140.216147][T21593] [U] [ 140.216160][T21593] [U] [ 140.216172][T21593] [U] [ 140.216221][T21593] [U] [ 140.216234][T21593] [U] [ 140.216247][T21593] [U] [ 140.240442][T21590] [U] [ 140.290015][T21601] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.8009: invalid block [ 140.290053][T21601] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.292613][T21601] EXT4-fs (loop2): Remounting filesystem read-only [ 140.292768][T21601] EXT4-fs (loop2): 2 truncates cleaned up [ 140.293492][T21601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.344098][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.371664][T21616] fuse: Bad value for 'rootmode' [ 140.549591][T21648] netlink: 'syz.3.8031': attribute type 5 has an invalid length. [ 140.875056][T21701] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 140.939925][T21711] netlink: 'syz.2.8061': attribute type 39 has an invalid length. [ 140.952921][T21711] hsr_slave_0: left promiscuous mode [ 140.968145][T21711] hsr_slave_1: left promiscuous mode [ 141.000997][T21722] binder: 21720:21722 ioctl c0306201 9999999999999999 returned -14 [ 141.072256][ T30] audit: type=1326 audit(529843.875:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.072305][ T30] audit: type=1326 audit(529843.875:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081594][ T30] audit: type=1326 audit(529843.875:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081883][ T30] audit: type=1326 audit(529843.875:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081924][ T30] audit: type=1326 audit(529843.875:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081952][ T30] audit: type=1326 audit(529843.875:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081972][ T30] audit: type=1326 audit(529843.875:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.081992][ T30] audit: type=1326 audit(529843.875:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21732 comm="syz.3.8073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8f177fe8 code=0x7ffc0000 [ 141.244143][T21757] set_capacity_and_notify: 2 callbacks suppressed [ 141.244188][T21757] loop1: detected capacity change from 0 to 256 [ 141.262886][T21757] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 141.265043][T21757] FAT-fs (loop1): Filesystem has been set read-only [ 141.383446][T21785] random: crng reseeded on system resumption [ 141.419348][T21790] netlink: 'syz.1.8102': attribute type 10 has an invalid length. [ 141.427964][ T4794] lo speed is unknown, defaulting to 1000 [ 141.428005][ T4794] syz!: Port: 1 Link DOWN [ 141.491280][T21803] netlink: 'syz.4.8107': attribute type 40 has an invalid length. [ 141.640329][T21830] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 141.668890][T21832] batadv1: entered promiscuous mode [ 141.689183][T21837] loop1: detected capacity change from 0 to 512 [ 141.727758][T21837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.776955][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.842309][T21860] loop2: detected capacity change from 0 to 256 [ 142.006360][T21884] Process accounting resumed [ 142.099158][T21906] netlink: 'syz.0.8158': attribute type 6 has an invalid length. [ 142.126622][T21912] netlink: 'syz.2.8157': attribute type 4 has an invalid length. [ 142.147262][T21912] .`: renamed from bond0 (while UP) [ 142.183072][T21918] netlink: 'syz.3.8163': attribute type 12 has an invalid length. [ 142.212810][T21921] loop4: detected capacity change from 0 to 512 [ 142.219351][T21921] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.234140][T21930] xt_ecn: cannot match TCP bits for non-tcp packets [ 142.241719][T21921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.265664][T21921] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 142.297909][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.318247][T21936] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.8170' sets config #1 [ 142.413368][T21957] loop2: detected capacity change from 0 to 512 [ 142.414668][T21956] usb usb8: usbfs: process 21956 (syz.0.8180) did not claim interface 0 before use [ 142.444905][T21957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.475937][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.506683][T21970] netlink: 'syz.3.8188': attribute type 2 has an invalid length. [ 142.547184][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 142.563753][T21982] loop0: detected capacity change from 0 to 256 [ 142.597790][T21984] loop2: detected capacity change from 0 to 512 [ 142.601031][T21984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.606325][T21984] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.8194: bad orphan inode 131083 [ 142.606358][T21984] loop2: lost filesystem error report for type 5 error -117 [ 142.606973][T21984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.613487][T21984] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.8194: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 142.630087][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.012780][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 144.014053][ T30] audit: type=1400 audit(529846.625:1312): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 144.064001][ T30] audit: type=1400 audit(529846.672:1313): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 145.740823][ T30] audit: type=1400 audit(529848.234:1314): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 145.956300][ T30] audit: type=1400 audit(529848.449:1315): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 149.388789][ T30] audit: type=1400 audit(529851.657:1316): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 149.634051][ T30] audit: type=1400 audit(529851.882:1317): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 156.042486][ T3330] [ 156.042972][ T3330] ====================================================== [ 156.044228][ T3330] WARNING: possible circular locking dependency detected [ 156.045370][ T3330] syzkaller #0 Not tainted [ 156.046060][ T3330] ------------------------------------------------------ [ 156.047286][ T3330] kworker/u8:7/3330 is trying to acquire lock: [ 156.048391][ T3330] ffff0000c9926938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x174/0x228 [ 156.050106][ T3330] [ 156.050106][ T3330] but task is already holding lock: [ 156.051413][ T3330] ffff0000d17a8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 156.053165][ T3330] [ 156.053165][ T3330] which lock already depends on the new lock. [ 156.053165][ T3330] [ 156.054966][ T3330] [ 156.054966][ T3330] the existing dependency chain (in reverse order) is: [ 156.056515][ T3330] [ 156.056515][ T3330] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 156.058012][ T3330] percpu_down_read_internal+0x5c/0x294 [ 156.059053][ T3330] ext4_writepages+0x170/0x2dc [ 156.059973][ T3330] do_writepages+0x284/0x47c [ 156.060862][ T3330] __writeback_single_inode+0x140/0x1880 [ 156.061913][ T3330] writeback_single_inode+0x400/0xb20 [ 156.062955][ T3330] write_inode_now+0x170/0x208 [ 156.063832][ T3330] iput+0x7cc/0xc2c [ 156.064571][ T3330] ext4_xattr_block_set+0x1b1c/0x21e8 [ 156.065625][ T3330] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 156.066672][ T3330] __ext4_expand_extra_isize+0x2a4/0x378 [ 156.067768][ T3330] __ext4_mark_inode_dirty+0x394/0x828 [ 156.068835][ T3330] ext4_evict_inode+0x798/0xfb8 [ 156.069908][ T3330] evict+0x4c0/0x74c [ 156.070722][ T3330] iput+0x8f0/0xc2c [ 156.071499][ T3330] ext4_process_orphan+0x24c/0x2c0 [ 156.072438][ T3330] ext4_orphan_cleanup+0x7d4/0xd20 [ 156.073395][ T3330] ext4_fill_super+0x4628/0x4e14 [ 156.074336][ T3330] get_tree_bdev_flags+0x388/0x43c [ 156.075336][ T3330] get_tree_bdev+0x2c/0x3c [ 156.076184][ T3330] ext4_get_tree+0x28/0x38 [ 156.077024][ T3330] vfs_get_tree+0x90/0x28c [ 156.077849][ T3330] fc_mount+0x24/0xac [ 156.078615][ T3330] do_new_mount+0x2a4/0x538 [ 156.079432][ T3330] path_mount+0x5f0/0xa88 [ 156.080230][ T3330] do_mount+0xe8/0x148 [ 156.080998][ T3330] __arm64_sys_mount+0x334/0x380 [ 156.081927][ T3330] invoke_syscall+0x98/0x244 [ 156.082775][ T3330] el0_svc_common+0xec/0x23c [ 156.083601][ T3330] do_el0_svc+0x4c/0x5c [ 156.084364][ T3330] el0_svc+0x64/0x260 [ 156.085113][ T3330] el0t_64_sync_handler+0x48/0x148 [ 156.086026][ T3330] el0t_64_sync+0x198/0x19c [ 156.086839][ T3330] [ 156.086839][ T3330] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 156.088091][ T3330] down_write+0x50/0xc0 [ 156.089024][ T3330] ext4_xattr_set_handle+0x134/0xde4 [ 156.090107][ T3330] ext4_initxattrs+0xa8/0x11c [ 156.091061][ T3330] security_inode_init_security+0x244/0x370 [ 156.092250][ T3330] ext4_init_security+0x44/0x58 [ 156.093183][ T3330] __ext4_new_inode+0x286c/0x3308 [ 156.094133][ T3330] ext4_create+0x1f4/0x408 [ 156.094986][ T3330] path_openat+0x11f8/0x2a60 [ 156.096019][ T3330] do_file_open+0x1c8/0x2e8 [ 156.097011][ T3330] do_sys_openat2+0x114/0x1e8 [ 156.097992][ T3330] do_sys_open+0xb0/0xe0 [ 156.098947][ T3330] __arm64_sys_openat+0xa0/0xbc [ 156.100036][ T3330] invoke_syscall+0x98/0x244 [ 156.101029][ T3330] el0_svc_common+0xec/0x23c [ 156.101973][ T3330] do_el0_svc+0x4c/0x5c [ 156.102879][ T3330] el0_svc+0x64/0x260 [ 156.103738][ T3330] el0t_64_sync_handler+0x48/0x148 [ 156.104816][ T3330] el0t_64_sync+0x198/0x19c [ 156.105757][ T3330] [ 156.105757][ T3330] -> #0 (jbd2_handle){++++}-{0:0}: [ 156.107096][ T3330] __lock_acquire+0x17c0/0x2ebc [ 156.108185][ T3330] lock_acquire+0x140/0x364 [ 156.109149][ T3330] wait_transaction_locked+0x17c/0x228 [ 156.110300][ T3330] start_this_handle+0x57c/0x1bcc [ 156.111349][ T3330] jbd2__journal_start+0x260/0x534 [ 156.112389][ T3330] __ext4_journal_start_sb+0x228/0x948 [ 156.113485][ T3330] ext4_do_writepages+0xabc/0x3bc0 [ 156.114618][ T3330] ext4_writepages+0x198/0x2dc [ 156.115695][ T3330] do_writepages+0x284/0x47c [ 156.116690][ T3330] __writeback_single_inode+0x140/0x1880 [ 156.117905][ T3330] writeback_sb_inodes+0x798/0x1720 [ 156.119010][ T3330] __writeback_inodes_wb+0xec/0x210 [ 156.120043][ T3330] wb_writeback+0x3d0/0x10cc [ 156.121012][ T3330] wb_workfn+0xa78/0xda8 [ 156.121891][ T3330] process_scheduled_works+0x788/0x10b8 [ 156.122958][ T3330] worker_thread+0x798/0xbd0 [ 156.123807][ T3330] kthread+0x304/0x3d4 [ 156.124610][ T3330] ret_from_fork+0x10/0x20 [ 156.125457][ T3330] [ 156.125457][ T3330] other info that might help us debug this: [ 156.125457][ T3330] [ 156.127256][ T3330] Chain exists of: [ 156.127256][ T3330] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 156.127256][ T3330] [ 156.129591][ T3330] Possible unsafe locking scenario: [ 156.129591][ T3330] [ 156.130916][ T3330] CPU0 CPU1 [ 156.131881][ T3330] ---- ---- [ 156.132808][ T3330] rlock(&sbi->s_writepages_rwsem); [ 156.133752][ T3330] lock(&ei->xattr_sem); [ 156.134919][ T3330] lock(&sbi->s_writepages_rwsem); [ 156.136281][ T3330] lock(jbd2_handle); [ 156.136974][ T3330] [ 156.136974][ T3330] *** DEADLOCK *** [ 156.136974][ T3330] [ 156.138355][ T3330] 4 locks held by kworker/u8:7/3330: [ 156.139182][ T3330] #0: ffff0000c1fe7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 156.141123][ T3330] #1: ffff80009a227c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 156.143141][ T3330] #2: ffff0000d17aa0d8 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 156.144912][ T3330] #3: ffff0000d17a8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 156.146609][ T3330] [ 156.146609][ T3330] stack backtrace: [ 156.147581][ T3330] CPU: 1 UID: 0 PID: 3330 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT [ 156.149012][ T3330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 156.150666][ T3330] Workqueue: writeback wb_workfn (flush-259:0) [ 156.151697][ T3330] Call trace: [ 156.152244][ T3330] show_stack+0x2c/0x3c (C) [ 156.152975][ T3330] __dump_stack+0x30/0x40 [ 156.153720][ T3330] dump_stack_lvl+0xd8/0x12c [ 156.154521][ T3330] dump_stack+0x1c/0x28 [ 156.155218][ T3330] print_circular_bug+0x328/0x330 [ 156.156082][ T3330] check_noncircular+0x158/0x174 [ 156.156883][ T3330] __lock_acquire+0x17c0/0x2ebc [ 156.157679][ T3330] lock_acquire+0x140/0x364 [ 156.158421][ T3330] wait_transaction_locked+0x17c/0x228 [ 156.159321][ T3330] start_this_handle+0x57c/0x1bcc [ 156.160172][ T3330] jbd2__journal_start+0x260/0x534 [ 156.161051][ T3330] __ext4_journal_start_sb+0x228/0x948 [ 156.161954][ T3330] ext4_do_writepages+0xabc/0x3bc0 [ 156.162805][ T3330] ext4_writepages+0x198/0x2dc [ 156.163582][ T3330] do_writepages+0x284/0x47c [ 156.164351][ T3330] __writeback_single_inode+0x140/0x1880 [ 156.165280][ T3330] writeback_sb_inodes+0x798/0x1720 [ 156.166142][ T3330] __writeback_inodes_wb+0xec/0x210 [ 156.167009][ T3330] wb_writeback+0x3d0/0x10cc [ 156.167772][ T3330] wb_workfn+0xa78/0xda8 [ 156.168465][ T3330] process_scheduled_works+0x788/0x10b8 [ 156.169393][ T3330] worker_thread+0x798/0xbd0 [ 156.170145][ T3330] kthread+0x304/0x3d4 [ 156.170813][ T3330] ret_from_fork+0x10/0x20 [ 156.301133][ T30] audit: type=1400 audit(529858.112:1318): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0 [ 157.406330][ T30] audit: type=1400 audit(529859.159:1319): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="jE" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.1.107 dest=35248 netif=enp0s0