last executing test programs: 16.135250092s ago: executing program 1 (id=12578): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x101182, 0x0) getdents64(r0, 0x0, 0x0) 16.027190929s ago: executing program 1 (id=12583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001"], 0x54}}, 0x0) 15.857291188s ago: executing program 1 (id=12588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003600)={&(0x7f00000001c0), 0x0, &(0x7f0000002540)="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", &(0x7f0000003540), 0x200, r0}, 0x38) 15.767368959s ago: executing program 4 (id=12593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=r0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe80000000000000000200400000000005000800020000"], 0x58}}, 0x0) 15.730314142s ago: executing program 1 (id=12595): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f0000000b80)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) 15.632767577s ago: executing program 4 (id=12598): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x1, {0xffdffff8, 0x1}, {0x6, 0x6, 0x42, 0x10000200}, {0x80000000, 0x6}}) 15.53523341s ago: executing program 4 (id=12603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 15.462160595s ago: executing program 1 (id=12605): r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 15.450896275s ago: executing program 2 (id=12607): r0 = io_uring_setup(0x4700, &(0x7f0000003dc0)={0x0, 0x8e46, 0x400, 0x2, 0x11c}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003f40)={&(0x7f0000003f00)={0x0, 0x0, 0x77680f9b4f2afe35, 0x4, 0xffffffffffffff2c}}, 0x1) 15.364301114s ago: executing program 2 (id=12610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 15.336200948s ago: executing program 4 (id=12612): r0 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x40000) 15.323936417s ago: executing program 1 (id=12613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}}, 0x20050800) 15.300085728s ago: executing program 2 (id=12614): r0 = io_uring_setup(0x1456, &(0x7f0000000100)={0x0, 0xfac7, 0x1000, 0x1, 0x32c}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 15.271322097s ago: executing program 4 (id=12615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000000)) 15.270916847s ago: executing program 2 (id=12616): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140), 0x5, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x3, 0x1}, 0x7, 0x2, 0x0, 0x0, "b803707df1b93e31"}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) 15.227980057s ago: executing program 4 (id=12618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a300000000008000540000000072c001180090001006d657461000000001c000280080002400000001f0800034000000000080001"], 0xb0}, 0x1, 0x0, 0x0, 0x2807c88d}, 0x0) 15.145810231s ago: executing program 2 (id=12620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000480), 0x0}, 0x20) 15.129744195s ago: executing program 2 (id=12621): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x1100, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 15.020128645s ago: executing program 0 (id=12624): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 14.977508316s ago: executing program 3 (id=12626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfd}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x60}}, 0x0) 14.923741303s ago: executing program 3 (id=12627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x9, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) 14.923147847s ago: executing program 3 (id=12628): setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 14.880898722s ago: executing program 3 (id=12629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) 14.842749761s ago: executing program 3 (id=12630): r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 14.840278065s ago: executing program 0 (id=12631): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x5, 0x3, 0xeff, 0x0, 0x90, 0x1, 0x5}, 0x9c) 14.815371091s ago: executing program 0 (id=12632): sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8008) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 14.74838266s ago: executing program 0 (id=12633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c00018008e403000100000008000a"], 0x5c}}, 0x0) 14.748099725s ago: executing program 3 (id=12634): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_pages(0x0, 0x1, &(0x7f0000010180)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000000), 0x0, 0x0) 14.743670716s ago: executing program 0 (id=12635): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x3234564e, 0x7, 0xfffffffe, 0x0, 0x9, 0xfeedcafe, 0x3, 0x1, 0x2, 0x7}}) 14.719133288s ago: executing program 0 (id=12636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 853.797874ms ago: executing program 32 (id=12613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}}, 0x20050800) 780.983653ms ago: executing program 33 (id=12618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a300000000008000540000000072c001180090001006d657461000000001c000280080002400000001f0800034000000000080001"], 0xb0}, 0x1, 0x0, 0x0, 0x2807c88d}, 0x0) 145.520583ms ago: executing program 34 (id=12636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 99.097179ms ago: executing program 35 (id=12621): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x1100, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 0s ago: executing program 36 (id=12634): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_pages(0x0, 0x1, &(0x7f0000010180)=[&(0x7f0000075000/0x4000)=nil], &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.805706][T22572] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.932238][T22599] loop2: detected capacity change from 0 to 512 [ 161.999334][T22599] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.8626: corrupted xattr block 6: invalid header [ 162.014291][T22599] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.8626: corrupted xattr block 6: invalid header [ 162.019090][T22599] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.8626: corrupted xattr block 6: invalid header [ 162.024296][T22599] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.8626: corrupted xattr block 6: invalid header [ 162.026748][T22599] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.8626: corrupted xattr block 6: invalid header [ 162.074722][ T1451] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 162.077273][T22613] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 162.244310][T22647] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 162.403195][T22675] loop1: detected capacity change from 0 to 512 [ 162.516036][T22695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.541980][T22706] random: crng reseeded on system resumption [ 162.635984][T22719] SET target dimension over the limit! [ 163.036255][T22785] __nla_validate_parse: 6 callbacks suppressed [ 163.036299][T22785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8709'. [ 163.036319][T22785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8709'. [ 163.134011][T22807] xt_TCPMSS: Only works on TCP SYN packets [ 163.356130][ T30] audit: type=1326 audit(525476.653:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.366621][ T30] audit: type=1326 audit(525476.663:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.370591][ T30] audit: type=1326 audit(525476.663:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.376013][ T30] audit: type=1326 audit(525476.674:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=148 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.384136][ T30] audit: type=1326 audit(525476.684:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.388183][ T30] audit: type=1326 audit(525476.684:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.392431][ T30] audit: type=1326 audit(525476.684:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.396436][ T30] audit: type=1326 audit(525476.684:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22847 comm="syz.0.8738" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 163.403292][T22854] netlink: 'syz.4.8740': attribute type 11 has an invalid length. [ 163.417522][T22856] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 163.436867][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8743'. [ 163.459913][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8742'. [ 163.561134][T22878] set_capacity_and_notify: 1 callbacks suppressed [ 163.562705][T22878] loop1: detected capacity change from 0 to 128 [ 163.579965][T22881] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8753'. [ 163.764794][T22910] binfmt_misc: register: failed to install interpreter file ./file0 [ 163.796219][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8765'. [ 163.796261][T22905] batadv0: left promiscuous mode [ 163.796349][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8765'. [ 163.796359][T22905] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 163.802058][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8767'. [ 163.863803][T22925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8774'. [ 163.964701][T22939] misc userio: No port type given on /dev/userio [ 163.991160][T22947] loop1: detected capacity change from 0 to 128 [ 164.017785][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8787'. [ 164.025508][T22947] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.8785: No space for directory leaf checksum. Please run e2fsck -D. [ 164.025554][T22947] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.8785: checksumming directory block 0 [ 164.306753][T22993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.308151][T22995] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 164.452197][T23016] loop3: detected capacity change from 0 to 4096 [ 164.478681][T23016] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.491596][T23016] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.8816: Failed to acquire dquot type 0 [ 164.492821][T23016] EXT4-fs (loop3): Remounting filesystem read-only [ 164.588217][T23038] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 164.840713][T23083] tmpfs: Bad value for 'mpol' [ 164.942252][T23099] loop0: detected capacity change from 0 to 4096 [ 164.956138][T23104] tmpfs: Bad value for 'mpol' [ 164.961826][T23107] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 164.980346][T23099] EXT4-fs error (device loop0): ext4_empty_dir:3101: inode #12: block 80: comm syz.0.8857: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 164.984365][T23099] EXT4-fs warning (device loop0): ext4_empty_dir:3104: inode #12: comm syz.0.8857: directory missing '..' [ 165.385781][T23171] bond3 (unregistering): Released all slaves [ 165.580413][T23198] validate_nla: 43 callbacks suppressed [ 165.580459][T23198] netlink: 'syz.2.8901': attribute type 3 has an invalid length. [ 165.580475][T23198] netlink: 'syz.2.8901': attribute type 1 has an invalid length. [ 165.865513][T23197] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 165.943831][T23224] dlm: no locking on control device [ 166.270701][T23253] bond3: Unable to set down delay as MII monitoring is disabled [ 166.280783][T23253] bond3 (unregistering): Released all slaves [ 166.595861][T23288] netlink: 'syz.3.8949': attribute type 29 has an invalid length. [ 166.734243][T23301] vhci_hcd vhci_hcd.0: invalid port number 186 [ 166.799741][T23309] netlink: 'syz.1.8959': attribute type 1 has an invalid length. [ 167.157394][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 167.157529][ T30] audit: type=1326 audit(525480.632:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23350 comm="syz.2.8980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d9781a8 code=0x0 [ 167.231510][T23342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.231787][T23342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.277388][T23342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.277734][T23342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.324938][T23372] netlink: 'syz.2.8991': attribute type 1 has an invalid length. [ 167.401663][T23342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.401896][T23342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.487901][T23342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.487949][T23342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.611153][T23400] netlink: 'syz.0.8997': attribute type 1 has an invalid length. [ 167.623780][T23404] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 167.736418][T23411] overlayfs: conflicting options: nfs_export=on,index=off [ 167.878049][T23430] __nla_validate_parse: 12 callbacks suppressed [ 167.878175][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9010'. [ 168.108010][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9023'. [ 168.111477][T23458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9023'. [ 168.146179][T23456] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.175481][T23458] ipip0: entered allmulticast mode [ 168.308382][T23477] loop3: detected capacity change from 0 to 1024 [ 168.318487][T23477] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.351618][T23477] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.9028: lblock 2 mapped to illegal pblock 2 (length 1) [ 168.351658][T23477] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.354403][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 168.354419][ C1] EXT4-fs (loop3): initial error at time 525481: ext4_map_blocks:791: inode 3: block 2 [ 168.354446][ C1] EXT4-fs (loop3): last error at time 525481: ext4_map_blocks:791: inode 3: block 2 [ 168.360457][T23477] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 168.360498][T23477] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.9028: lblock 0 mapped to illegal pblock 48 (length 1) [ 168.360529][T23477] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.367189][T23477] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 168.367231][T23477] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.9028: Failed to acquire dquot type 0 [ 168.367260][T23477] loop3: lost filesystem error report for type 5 error -117 [ 168.372470][T23477] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 168.372500][T23477] loop3: lost filesystem error report for type 5 error -117 [ 168.374788][T23477] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.9028: mark_inode_dirty error [ 168.374812][T23477] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.379646][T23477] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 168.379717][T23477] EXT4-fs (loop3): 1 orphan inode deleted [ 168.385912][ T143] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.385937][ T143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.386106][ T143] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 168.386121][ T143] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 168.386131][ T143] loop3: lost filesystem error report for type 5 error -117 [ 168.502330][T23502] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9036'. [ 168.556813][ T824] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.556857][ T824] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.557000][ T824] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 168.557019][ T824] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 168.557033][ T824] loop3: lost filesystem error report for type 5 error -117 [ 168.557449][ T5151] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 168.557468][ T5151] loop3: lost filesystem error report for type 5 error -117 [ 168.557564][ T5151] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 168.557577][ T5151] loop3: lost filesystem error report for type 5 error -117 [ 168.566269][ T5151] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 168.566284][ T5151] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.627078][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9043'. [ 168.788289][T23538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9050'. [ 168.808591][T23541] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9051'. [ 168.890815][T23552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.965112][T23561] loop0: detected capacity change from 0 to 256 [ 169.011060][T23566] netlink: 'syz.4.9067': attribute type 5 has an invalid length. [ 169.020724][T23567] trusted_key: encrypted_key: hex blob is missing [ 169.115826][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.194690][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 169.241185][T23593] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.9077'. [ 169.275712][T23597] loop0: detected capacity change from 0 to 4096 [ 169.280621][T23601] xt_ecn: cannot match TCP bits for non-tcp packets [ 169.297003][T23597] EXT4-fs (loop0): Test dummy encryption mode enabled [ 169.342311][T23605] loop4: detected capacity change from 0 to 256 [ 169.344540][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 169.383524][T23597] EXT4-fs mount: 28 callbacks suppressed [ 169.383663][T23597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.421880][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 169.428639][T23616] netlink: 'syz.2.9087': attribute type 2 has an invalid length. [ 169.431737][T23616] netlink: 'syz.2.9087': attribute type 11 has an invalid length. [ 169.433443][T23616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9087'. [ 169.452959][T23614] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 169.478484][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.609831][T23632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9096'. [ 169.642973][T23634] netlink: 'syz.2.9097': attribute type 1 has an invalid length. [ 169.953981][T23673] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 170.236759][T23706] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 170.301809][T23712] loop3: detected capacity change from 0 to 1024 [ 170.316289][T23712] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 170.323842][T23712] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.9135: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.329269][T23712] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.329746][T23712] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 170.333096][T23712] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.9135: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.333139][T23712] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.336446][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 170.336459][ C1] EXT4-fs (loop3): initial error at time 525483: ext4_map_blocks:791: inode 3: block 2 [ 170.336483][ C1] EXT4-fs (loop3): last error at time 525483: ext4_map_blocks:791: inode 3: block 48 [ 170.344026][T23712] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 170.344046][T23712] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.9135: Failed to acquire dquot type 0 [ 170.344059][T23712] loop3: lost filesystem error report for type 5 error -117 [ 170.351958][T23712] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 170.351986][T23712] loop3: lost filesystem error report for type 5 error -117 [ 170.355830][T23712] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.9135: mark_inode_dirty error [ 170.355855][T23712] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.359366][T23712] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 170.359419][T23712] EXT4-fs (loop3): 1 orphan inode deleted [ 170.359920][T23712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.366155][ T143] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.366180][ T143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.371031][ T143] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 170.371064][ T143] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 170.371080][ T143] loop3: lost filesystem error report for type 5 error -117 [ 170.427862][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.432726][ T12] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.433775][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 170.433793][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 170.433804][ T12] loop3: lost filesystem error report for type 5 error -117 [ 170.458992][ T5151] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 170.482419][ T5151] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 170.482942][ T5151] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 170.818589][T23683] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 171.059522][T23783] loop2: detected capacity change from 0 to 256 [ 171.098695][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.175148][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 171.226434][T23804] loop4: detected capacity change from 0 to 4096 [ 171.229984][T23804] EXT4-fs: inline encryption not supported [ 171.251105][T23804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.253194][T23804] EXT4-fs (loop4): Test dummy encryption mode enabled [ 171.255558][T23804] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 171.255622][T23804] System zones: 0-5 [ 171.260192][T23804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.325756][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 171.349549][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.406327][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 171.534176][ T5230] IPVS: starting estimator thread 0... [ 171.611438][T23835] IPVS: using max 57 ests per chain, 136800 per kthread [ 171.767067][T23864] netlink: 'syz.4.9207': attribute type 21 has an invalid length. [ 171.768585][T23864] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.770317][T23864] netlink: 'syz.4.9207': attribute type 1 has an invalid length. [ 172.067914][T23899] xt_TCPMSS: Only works on TCP SYN packets [ 172.150286][T23909] vti0: entered allmulticast mode [ 172.182473][T23911] bond3: entered allmulticast mode [ 172.195606][T23911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.430472][T23928] loop1: detected capacity change from 0 to 8192 [ 172.441657][T23928] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.793409][T23974] __nla_validate_parse: 8 callbacks suppressed [ 172.793450][T23974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9260'. [ 172.924983][T23991] loop3: detected capacity change from 0 to 128 [ 172.962118][T23991] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.971533][T23999] loop1: detected capacity change from 0 to 512 [ 172.980978][T23998] netlink: 'syz.4.9271': attribute type 11 has an invalid length. [ 172.982515][T23998] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9271'. [ 172.991405][ T5151] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.028615][T23999] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.030158][T23999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9272: bg 0: block 63: padding at end of block bitmap is not set [ 173.031040][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 173.031061][ C1] EXT4-fs (loop1): initial error at time 525486: ext4_validate_block_bitmap:441 [ 173.031085][ C1] EXT4-fs (loop1): last error at time 525486: ext4_validate_block_bitmap:441 [ 173.039109][T23999] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 173.039181][T23999] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.9272: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 173.047887][T23999] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.9272: ea_inode dec ref err=-117 [ 173.048038][T23999] EXT4-fs (loop1): 1 orphan inode deleted [ 173.053826][T23999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.160599][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.267328][T24024] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 173.271010][T24025] xt_hashlimit: overflow, try lower: 8388614/0 [ 173.382063][T24037] tmpfs: User quota block hardlimit too large. [ 173.594303][T24055] cgroup: release_agent respecified [ 173.884260][T24077] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 174.267307][T24115] usb usb2: check_ctrlrecip: process 24115 (syz.4.9327) requesting ep 01 but needs 81 [ 174.267349][T24115] usb usb2: usbfs: process 24115 (syz.4.9327) did not claim interface 0 before use [ 174.558065][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9342'. [ 174.604742][T24149] netlink: 'syz.4.9344': attribute type 4 has an invalid length. [ 174.616930][T24151] xt_ecn: cannot match TCP bits for non-tcp packets [ 174.697796][T24156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.103507][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9367'. [ 175.164139][T24201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9369'. [ 175.176347][T24180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9360'. [ 175.176382][T24180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9360'. [ 175.670914][T24235] bridge0: port 3(bond0) entered blocking state [ 175.670966][T24235] bridge0: port 3(bond0) entered disabled state [ 175.671094][T24235] bond0: entered allmulticast mode [ 175.671109][T24235] bond_slave_0: entered allmulticast mode [ 175.671126][T24235] bond_slave_1: entered allmulticast mode [ 175.671976][T24235] bond0: entered promiscuous mode [ 175.671992][T24235] bond_slave_0: entered promiscuous mode [ 175.672063][T24235] bond_slave_1: entered promiscuous mode [ 175.776727][T24245] openvswitch: netlink: Missing valid actions attribute. [ 175.778189][T24245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.913505][T24255] netlink: 'syz.0.9394': attribute type 1 has an invalid length. [ 175.913540][T24255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9394'. [ 175.913565][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9394'. [ 176.376078][T24298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9417'. [ 176.576719][T24330] loop3: detected capacity change from 0 to 1024 [ 176.580452][T24330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.619795][T24330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 176.620004][T24330] System zones: 0-1, 3-36 [ 176.627962][T24330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.738481][T24347] netlink: 'syz.4.9439': attribute type 10 has an invalid length. [ 176.761125][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.950364][T24364] netlink: 'syz.3.9447': attribute type 21 has an invalid length. [ 176.991074][T24368] tmpfs: Bad value for 'mpol' [ 177.143108][T24384] loop2: detected capacity change from 0 to 128 [ 177.150672][T24384] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.192219][T24391] netlink: 'syz.0.9459': attribute type 7 has an invalid length. [ 177.194057][T24391] netlink: 'syz.0.9459': attribute type 8 has an invalid length. [ 177.197287][ T5133] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.265213][T24394] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.267644][T24394] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 177.588361][T24433] loop0: detected capacity change from 0 to 2048 [ 177.624695][T24433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.695390][T24445] netlink: 'syz.1.9485': attribute type 4 has an invalid length. [ 177.723488][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.737850][T24455] __nla_validate_parse: 7 callbacks suppressed [ 177.739070][T24455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9488'. [ 177.835431][T24467] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9497'. [ 177.961229][ T824] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.disc‘verxzð‰zl]! [ 177.964480][T24479] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.disc‘verxzð‰zl]" [ 178.368104][T24531] loop0: detected capacity change from 0 to 256 [ 178.469732][T24541] loop3: detected capacity change from 0 to 256 [ 178.566775][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9536'. [ 178.571105][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9536'. [ 178.679824][T24563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9542'. [ 178.690932][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9541'. [ 178.914630][T24590] loop1: detected capacity change from 0 to 512 [ 178.918608][T24590] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 178.922062][T24590] EXT4-fs (loop1): 1 truncate cleaned up [ 178.924694][T24590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.987409][T24594] loop4: detected capacity change from 0 to 256 [ 178.998987][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.001602][T24598] netlink: 'syz.0.9558': attribute type 1 has an invalid length. [ 179.088727][T24604] vhci_hcd vhci_hcd.1: invalid port number 254 [ 179.254051][T24626] loop3: detected capacity change from 0 to 1024 [ 179.309205][T24626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.411931][T24643] loop2: detected capacity change from 0 to 256 [ 179.443244][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9581'. [ 179.461288][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.684425][T24666] loop3: detected capacity change from 0 to 256 [ 179.850649][T24677] __vm_enough_memory: pid: 24677, comm: syz.2.9596, bytes: 4115879641088 not enough memory for the allocation [ 180.332475][T24729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 180.361261][T24729] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.9620: corrupted inode contents [ 180.361416][T24729] fserror_report: 3 callbacks suppressed [ 180.361425][T24729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.373921][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 180.373959][ C0] EXT4-fs (loop0): initial error at time 525494: ext4_do_update_inode:5742: inode 15 [ 180.374005][ C0] EXT4-fs (loop0): last error at time 525494: ext4_do_update_inode:5742: inode 15 [ 180.388148][T24729] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.9620: mark_inode_dirty error [ 180.388315][T24729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.391010][T24729] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.9620: corrupted inode contents [ 180.391184][T24729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.395011][T24729] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.9620: mark_inode_dirty error [ 180.395033][T24729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.398835][T24729] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.9620: mark inode dirty (error -117) [ 180.399021][T24729] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.403042][T24729] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 180.403259][T24729] EXT4-fs (loop0): 1 orphan inode deleted [ 180.403841][T24729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.479361][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.776728][T24770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.874562][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.981718][T24791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9651'. [ 180.999917][T24791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.090741][T24793] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.102887][T24793] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 181.103300][T24793] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.105926][T24793] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.9652: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.106095][T24793] fserror_report: 3 callbacks suppressed [ 181.106103][T24793] loop0: lost filesystem error report for type 5 error -117 [ 181.110492][T24793] EXT4-fs (loop0): 1 orphan inode deleted [ 181.111220][T24793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.117942][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9654'. [ 181.132709][T24793] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.9652: iget: bad i_size value: 1970324836974602 [ 181.232695][T24813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9661'. [ 181.234394][T24813] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 181.261070][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.382312][T24834] set_capacity_and_notify: 3 callbacks suppressed [ 181.385713][T24834] loop4: detected capacity change from 0 to 256 [ 181.478305][T24843] loop0: detected capacity change from 0 to 512 [ 181.480422][T24843] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.516427][T24843] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.516460][T24843] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 181.520060][T24843] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.9676: attempt to clear invalid blocks 2 len 1 [ 181.520092][T24843] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.523051][T24843] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 181.528788][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 181.528804][ C1] EXT4-fs (loop0): initial error at time 525495: ext4_clear_blocks:876: inode 13 [ 181.528828][ C1] EXT4-fs (loop0): last error at time 525495: ext4_mb_generate_buddy:1317 [ 181.533654][T24843] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.9676: invalid indirect mapped block 1819239214 (level 0) [ 181.544726][T24843] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.546283][T24843] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.9676: invalid indirect mapped block 1819239214 (level 1) [ 181.546448][T24843] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.563722][T24843] EXT4-fs (loop0): 1 truncate cleaned up [ 181.564241][T24843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.650629][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.800196][T24879] loop1: detected capacity change from 0 to 8 [ 181.829941][T24879] process 'syz.1.9689' launched './file1' with NULL argv: empty string added [ 181.837810][T24879] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.838001][T24879] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.838029][T24879] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.838051][T24879] SQUASHFS error: Failed to read block 0x4de: -5 [ 181.838076][T24879] SQUASHFS error: Failed to read block 0x4de: -5 [ 182.311522][T24940] netlink: 'syz.1.9721': attribute type 1 has an invalid length. [ 182.311639][T24940] netlink: 'syz.1.9721': attribute type 2 has an invalid length. [ 182.432224][T24953] geneve4: entered promiscuous mode [ 182.432258][T24953] geneve4: entered allmulticast mode [ 182.632145][T24971] __nla_validate_parse: 3 callbacks suppressed [ 182.632267][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9729'. [ 182.766362][T24991] syz.4.9743: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 182.766914][T24991] CPU: 0 UID: 0 PID: 24991 Comm: syz.4.9743 Tainted: G L syzkaller #0 PREEMPT [ 182.766929][T24991] Tainted: [L]=SOFTLOCKUP [ 182.766932][T24991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 182.766938][T24991] Call trace: [ 182.766941][T24991] show_stack+0x2c/0x3c (C) [ 182.766960][T24991] __dump_stack+0x30/0x40 [ 182.766972][T24991] dump_stack_lvl+0xd8/0x12c [ 182.766984][T24991] dump_stack+0x1c/0x28 [ 182.766995][T24991] warn_alloc+0x1bc/0x1d0 [ 182.767005][T24991] __vmalloc_node_range_noprof+0x120/0x105c [ 182.767017][T24991] __vmalloc_node_noprof+0xec/0x14c [ 182.767028][T24991] vmalloc_noprof+0x3c/0x4c [ 182.767038][T24991] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 182.767049][T24991] dvb_demux_do_ioctl+0x3e0/0x4bc [ 182.767058][T24991] dvb_usercopy+0x2a4/0x4d4 [ 182.767066][T24991] dvb_demux_ioctl+0x3c/0x54 [ 182.767074][T24991] __arm64_sys_ioctl+0x154/0x1cc [ 182.767087][T24991] invoke_syscall+0x98/0x244 [ 182.767099][T24991] el0_svc_common+0xec/0x23c [ 182.767111][T24991] do_el0_svc+0x4c/0x5c [ 182.767122][T24991] el0_svc+0x64/0x260 [ 182.767135][T24991] el0t_64_sync_handler+0x48/0x148 [ 182.767148][T24991] el0t_64_sync+0x198/0x19c [ 182.767245][T24991] Mem-Info: [ 182.767338][T24991] active_anon:28 inactive_anon:13249 isolated_anon:0 [ 182.767338][T24991] active_file:3241 inactive_file:16993 isolated_file:0 [ 182.767338][T24991] unevictable:768 dirty:346 writeback:0 [ 182.767338][T24991] slab_reclaimable:9315 slab_unreclaimable:93162 [ 182.767338][T24991] mapped:33187 shmem:5237 pagetables:1256 [ 182.767338][T24991] sec_pagetables:0 bounce:0 [ 182.767338][T24991] kernel_misc_reclaimable:0 [ 182.767338][T24991] free:1460281 free_pcp:5706 free_cma:7616 [ 182.767447][T24991] Node 0 active_anon:112kB inactive_anon:52996kB active_file:12964kB inactive_file:67972kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132748kB dirty:1384kB writeback:0kB shmem:20948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9252kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.767556][T24991] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 182.767756][T24991] lowmem_reserve[]: 0 0 3651 3651 3651 [ 182.768388][T24991] Node 0 Normal free:2763236kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:52996kB active_file:12964kB inactive_file:67972kB unevictable:3072kB writepending:1384kB zspages:0kB present:5242880kB managed:3739156kB mlocked:0kB bounce:0kB free_pcp:22780kB local_pcp:11244kB free_cma:0kB [ 182.768588][T24991] lowmem_reserve[]: 0 0 0 0 0 [ 182.769219][T24991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 182.769467][T24991] Node 0 Normal: 638*4kB (UE) 488*8kB (UM) 145*16kB (UE) 1386*32kB (UM) 869*64kB (UM) 374*128kB (UM) 226*256kB (UME) 106*512kB (UM) 54*1024kB (UM) 27*2048kB (UME) 582*4096kB (UM) = 2763208kB [ 182.769549][T24991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.769556][T24991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 182.769564][T24991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 182.769570][T24991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 182.769577][T24991] 25462 total pagecache pages [ 182.769581][T24991] 0 pages in swap cache [ 182.769584][T24991] Free swap = 124996kB [ 182.769588][T24991] Total swap = 124996kB [ 182.769592][T24991] 2097152 pages RAM [ 182.769595][T24991] 0 pages HighMem/MovableOnly [ 182.769599][T24991] 392315 pages reserved [ 182.769602][T24991] 8192 pages cma reserved [ 182.769605][T24991] 2 pages hwpoisoned [ 182.839097][T24987] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.182423][T25024] loop4: detected capacity change from 0 to 4096 [ 183.224617][T25024] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.269383][T25024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.380756][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.409968][T25045] loop1: detected capacity change from 0 to 1024 [ 183.411786][T25045] EXT4-fs: Ignoring removed bh option [ 183.428435][T25045] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 183.472218][T25045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.564031][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.710770][T25077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9782'. [ 183.754855][T25083] loop3: detected capacity change from 0 to 256 [ 183.896470][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9793'. [ 183.971981][T25105] bond5 (unregistering): Released all slaves [ 183.986299][T25114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9800'. [ 184.081550][T25122] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9802'. [ 184.359260][ T5148] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 184.446870][T25168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9826'. [ 184.601274][T25186] loop1: detected capacity change from 0 to 512 [ 184.645028][T25186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.715761][T25199] loop3: detected capacity change from 0 to 2048 [ 184.774864][T25199] loop3: p1 < > p3 p4 < > [ 184.865669][T25199] loop3: p3 start 4284289 is beyond EOD, truncated [ 184.886584][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.966974][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.968210][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.980628][T25216] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 184.980655][T25216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.980801][T25216] vhci_hcd vhci_hcd.0: Device attached [ 184.989628][T25223] loop0: detected capacity change from 0 to 512 [ 184.993480][T25216] vhci_hcd vhci_hcd.0: port 0 already used [ 184.994894][T25218] vhci_hcd: connection closed [ 184.995094][ T1375] vhci_hcd vhci_hcd.4: stop threads [ 184.995252][ T1375] vhci_hcd vhci_hcd.4: release socket [ 184.995355][ T1375] vhci_hcd vhci_hcd.4: disconnect device [ 185.000279][T25223] EXT4-fs (loop0): Test dummy encryption mode enabled [ 185.022957][T25229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9853'. [ 185.025121][T25223] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.9850: inode has both inline data and extents flags [ 185.025157][T25223] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.028089][T25223] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9850: couldn't read orphan inode 15 (err -117) [ 185.028127][T25223] loop0: lost filesystem error report for type 5 error -117 [ 185.028782][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 185.032351][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 185.032371][ C1] EXT4-fs (loop0): initial error at time 525499: ext4_orphan_get:1399: inode 15 [ 185.032393][ C1] EXT4-fs (loop0): last error at time 525499: ext4_orphan_get:1404 [ 185.033189][ T5138] udevd[5138]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 185.040444][T25229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9853'. [ 185.069764][T25223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.104937][T25232] loop2: detected capacity change from 0 to 8 [ 185.141673][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.341884][T25251] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.674597][T25289] bond4: option lacp_active: invalid value (254) [ 185.706503][T25289] bond4 (unregistering): Released all slaves [ 185.761650][T25304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9891'. [ 185.987412][T25326] No such timeout policy "syz1" [ 186.177180][T25339] set_capacity_and_notify: 1 callbacks suppressed [ 186.178860][T25339] loop3: detected capacity change from 0 to 256 [ 186.370627][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9919'. [ 186.654537][T25380] bond4: option all_slaves_active: invalid value (8) [ 186.673000][T25380] bond4 (unregistering): Released all slaves [ 186.699620][T25383] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 187.364849][T25438] SET target dimension over the limit! [ 187.478528][T25455] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9965'. [ 187.536386][T25465] xt_connbytes: Forcing CT accounting to be enabled [ 187.636523][T25475] netlink: 'syz.1.9974': attribute type 39 has an invalid length. [ 187.638668][T25475] macvlan1: entered promiscuous mode [ 187.641872][T25475] macvlan1: entered allmulticast mode [ 187.644898][T25475] veth1_vlan: entered allmulticast mode [ 187.768306][T25491] loop0: detected capacity change from 0 to 128 [ 187.789133][T25491] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.900770][T25507] netlink: 'syz.1.9991': attribute type 20 has an invalid length. [ 188.093373][ T5127] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.241823][ T5148] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 188.241873][ T5148] Bluetooth: hci4: Injecting HCI hardware error event [ 188.243036][ T5148] Bluetooth: hci4: hardware error 0x00 [ 188.291944][T25552] overlayfs: conflicting options: userxattr,redirect_dir=on [ 188.312839][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10017'. [ 188.596867][T25590] xt_cgroup: xt_cgroup: no path or classid specified [ 188.653107][T25597] netlink: 'syz.0.10033': attribute type 2 has an invalid length. [ 188.653228][T25597] netlink: 'syz.0.10033': attribute type 1 has an invalid length. [ 188.653237][T25597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10033'. [ 188.722128][T25602] loop4: detected capacity change from 0 to 256 [ 188.722828][T25602] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.950031][T25639] loop3: detected capacity change from 0 to 512 [ 188.987337][T25639] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.987506][T25639] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 189.006552][T25639] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 189.013040][T25639] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 189.013194][T25639] System zones: 0-2, 18-18, 34-35 [ 189.020826][T25639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.025178][T25639] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 189.059210][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.156758][T25665] loop1: detected capacity change from 0 to 256 [ 189.451342][T25696] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 189.454165][T25696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.776167][T25719] comedi comedi0: bad chanlist[0]=0x00000b9a chan=2970 range length=2 [ 190.227329][ T5148] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 190.300240][T25759] netlink: 'syz.4.10111': attribute type 9 has an invalid length. [ 190.742040][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10127'. [ 190.887005][T25800] loop3: detected capacity change from 0 to 8 [ 190.891539][T25802] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10131'. [ 191.030827][T25812] netlink: 'syz.0.10137': attribute type 2 has an invalid length. [ 191.133964][T25820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10141'. [ 191.134013][T25820] netlink: 'syz.4.10141': attribute type 5 has an invalid length. [ 191.134037][T25820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10141'. [ 191.146030][T25821] netlink: 'syz.1.10142': attribute type 2 has an invalid length. [ 191.151957][T25820] geneve4: entered promiscuous mode [ 191.153167][T25820] geneve4: entered allmulticast mode [ 191.185405][ T39] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 191.185775][ T15] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 191.185800][ T15] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 191.185819][ T15] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 191.292044][T25827] dlm: no locking on control device [ 191.387502][T25842] loop2: detected capacity change from 0 to 512 [ 191.443835][T25855] tmpfs: Bad value for 'mpol' [ 191.456414][T25842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.501512][T25860] loop4: detected capacity change from 0 to 8 [ 191.517394][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10161'. [ 191.568700][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.617237][T25871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10165'. [ 191.768913][T25893] netlink: 'syz.1.10174': attribute type 1 has an invalid length. [ 191.768950][T25893] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10174'. [ 191.799538][T25898] loop2: detected capacity change from 0 to 256 [ 191.879233][T25908] binfmt_misc: register: failed to install interpreter file ./file1 [ 191.938023][T25895] bond0: Removing last ns target with arp_interval on [ 191.939429][T25895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.314957][T25954] loop0: detected capacity change from 0 to 256 [ 192.373437][T25960] netlink: 3252 bytes leftover after parsing attributes in process `syz.2.10208'. [ 193.046232][T26059] netlink: 'syz.4.10255': attribute type 32 has an invalid length. [ 193.164573][T26079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10262'. [ 193.210176][T26087] loop2: detected capacity change from 0 to 256 [ 193.404712][T26111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.624579][T26139] loop0: detected capacity change from 0 to 512 [ 193.626482][T26139] EXT4-fs (loop0): Test dummy encryption mode enabled [ 193.637352][T26139] EXT4-fs (loop0): 1 truncate cleaned up [ 193.639159][T26139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.717819][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.784683][T26159] ip6gre1: entered allmulticast mode [ 193.793569][ T143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.952667][T26178] loop4: detected capacity change from 0 to 1024 [ 193.953244][T26178] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.976022][T26178] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.977110][T26178] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.984436][T26178] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.10310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 193.984474][T26178] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.988333][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 193.988366][ C1] EXT4-fs (loop4): initial error at time 525508: ext4_ext_check_inode:521: inode 11 [ 193.988384][ C1] EXT4-fs (loop4): last error at time 525508: ext4_ext_check_inode:521: inode 11 [ 193.995232][T26178] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10310: couldn't read orphan inode 11 (err -117) [ 193.995270][T26178] loop4: lost filesystem error report for type 5 error -117 [ 193.998040][T26178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.039088][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.151205][T26201] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10321'. [ 194.338602][T26226] netlink: 'syz.2.10334': attribute type 7 has an invalid length. [ 194.338640][T26226] netlink: 'syz.2.10334': attribute type 8 has an invalid length. [ 194.416152][T26234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.423031][T26234] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 194.478880][T26244] loop3: detected capacity change from 0 to 512 [ 194.486654][T26244] EXT4-fs: Ignoring removed i_version option [ 194.651753][T26244] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 194.691198][T26244] EXT4-fs (loop3): 1 truncate cleaned up [ 194.691682][T26244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.715713][T26244] EXT4-fs: Ignoring removed i_version option [ 194.886709][T26275] loop0: detected capacity change from 0 to 8 [ 194.905003][T26275] SQUASHFS error: Failed to read block 0x260685: -5 [ 194.905036][T26275] SQUASHFS error: Unable to read metadata cache entry [260685] [ 194.905058][T26275] SQUASHFS error: Unable to read directory block [260685:0] [ 195.065415][T26244] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 195.109067][T26286] lo speed is unknown, defaulting to 1000 [ 195.276268][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.447780][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10376'. [ 195.469409][T26307] loop4: detected capacity change from 0 to 256 [ 195.553971][T26327] trusted_key: encrypted_key: master key parameter is missing [ 195.797777][T26354] netlink: 'syz.4.10394': attribute type 28 has an invalid length. [ 195.797816][T26354] netlink: 'syz.4.10394': attribute type 29 has an invalid length. [ 195.797843][T26354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10394'. [ 195.869568][T26360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.985676][T26373] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.469785][T26437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10435'. [ 196.480123][T26437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10435'. [ 196.480171][T26437] netlink: 81 bytes leftover after parsing attributes in process `syz.0.10435'. [ 196.493513][T26439] mmap: syz.3.10436 (26439): VmData 37511168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 196.571867][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10438'. [ 196.576123][T26452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10441'. [ 196.706849][T26470] netlink: 'syz.0.10450': attribute type 2 has an invalid length. [ 197.286111][T26529] __nla_validate_parse: 2 callbacks suppressed [ 197.287705][T26529] netlink: 332 bytes leftover after parsing attributes in process `syz.4.10479'. [ 197.399076][T26541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10484'. [ 197.470991][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.671428][ T26] usb usb9-port2: attempt power cycle [ 197.806113][T26547] netlink: 'syz.0.10487': attribute type 4 has an invalid length. [ 198.046087][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10502'. [ 198.229143][ T26] usb usb9-port2: unable to enumerate USB device [ 198.305861][T26600] random: crng reseeded on system resumption [ 198.374975][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10516'. [ 198.378447][T26605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10515'. [ 198.442277][ T5223] IPVS: starting estimator thread 0... [ 198.532860][T26613] IPVS: using max 58 ests per chain, 139200 per kthread [ 198.713983][T26632] nvme_tcp: malformed address passed: 127.:.0.1:4420 [ 198.739001][T26636] loop3: detected capacity change from 0 to 128 [ 198.807208][T26646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10535'. [ 198.835138][T26636] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.918413][ T5151] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.956303][T26663] xt_limit: Overflow, try lower: 0/0 [ 199.061044][T26679] netlink: 'syz.4.10551': attribute type 21 has an invalid length. [ 199.171748][ T5148] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 199.452295][T26727] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10573'. [ 199.598927][T26746] loop2: detected capacity change from 0 to 512 [ 199.650229][T26746] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 199.650524][T26746] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.651273][T26746] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 199.651286][T26746] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 199.651302][T26746] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.10584: Failed to acquire dquot type 1 [ 199.651314][T26746] loop2: lost filesystem error report for type 5 error -5 [ 199.661466][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 199.661499][ C0] EXT4-fs (loop2): initial error at time 525514: ext4_acquire_dquot:7041 [ 199.661515][ C0] EXT4-fs (loop2): last error at time 525514: ext4_acquire_dquot:7041 [ 199.672178][T26755] fuse: blksize only supported for fuseblk [ 199.684444][T26746] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10584: bg 0: block 40: padding at end of block bitmap is not set [ 199.684606][T26746] loop2: lost filesystem error report for type 5 error -117 [ 199.697035][T26746] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 199.697234][T26746] loop2: lost filesystem error report for type 5 error -117 [ 199.702159][T26746] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.10584: data will be lost [ 199.702404][T26746] EXT4-fs (loop2): 1 truncate cleaned up [ 199.702932][T26746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.778614][T26746] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.10584: corrupted xattr block 31: invalid header [ 199.781187][T26746] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.10584: corrupted xattr block 31: invalid header [ 199.786097][T26746] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.10584: corrupted xattr block 31: invalid header [ 199.793381][T26746] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.10584: bad symlink. [ 199.801516][T26762] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10590'. [ 199.803153][T26762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.843311][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.893706][T26770] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 200.034290][T26791] netlink: 'syz.3.10604': attribute type 30 has an invalid length. [ 200.056905][T26794] sctp: [Deprecated]: syz.2.10606 (pid 26794) Use of int in maxseg socket option. [ 200.056905][T26794] Use struct sctp_assoc_value instead [ 200.389066][T26834] xt_hashlimit: max too large, truncated to 1048576 [ 200.389106][T26834] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 200.401573][T26836] netlink: 'syz.4.10626': attribute type 12 has an invalid length. [ 200.401612][T26836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10626'. [ 200.655478][T26866] netlink: 'syz.1.10641': attribute type 21 has an invalid length. [ 200.655545][T26866] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10641'. [ 200.670398][T26867] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 200.777417][T26882] netlink: 'syz.3.10649': attribute type 21 has an invalid length. [ 200.777453][T26882] netlink: 'syz.3.10649': attribute type 4 has an invalid length. [ 200.777462][T26882] netlink: 'syz.3.10649': attribute type 5 has an invalid length. [ 200.784323][T26881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.164392][T26916] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.373225][T26936] Invalid ELF header magic: != ELF [ 201.415588][T26941] netlink: 'syz.4.10677': attribute type 63 has an invalid length. [ 201.517659][T26952] netlink: 'syz.1.10682': attribute type 25 has an invalid length. [ 201.530787][T26950] cgroup: Invalid name [ 201.653468][T26967] netlink: 'syz.1.10692': attribute type 3 has an invalid length. [ 201.706861][T26977] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.707023][T26977] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 201.707030][T26977] overlayfs: missing 'lowerdir' [ 202.115882][T27011] xt_l2tp: missing protocol rule (udp|l2tpip) [ 202.401723][T27041] veth5: entered promiscuous mode [ 202.401929][T27041] veth5: entered allmulticast mode [ 202.840199][T27095] __nla_validate_parse: 8 callbacks suppressed [ 202.840236][T27095] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10755'. [ 202.840254][T27095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.894031][T27103] loop0: detected capacity change from 0 to 256 [ 202.976482][T27110] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10762'. [ 202.976623][T27110] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10762'. [ 203.068238][T27118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10766'. [ 203.491948][T27176] random: crng reseeded on system resumption [ 203.548019][T27181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10797'. [ 203.608924][T27185] loop4: detected capacity change from 0 to 1024 [ 203.610438][T27187] loop0: detected capacity change from 0 to 256 [ 203.661032][T27185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.723610][T27185] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 203.779174][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.876509][T27216] validate_nla: 6 callbacks suppressed [ 203.879320][T27216] netlink: 'syz.3.10812': attribute type 7 has an invalid length. [ 203.880717][T27216] netlink: 'syz.3.10812': attribute type 5 has an invalid length. [ 203.884846][T27216] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10812'. [ 203.892776][T27220] overlayfs: missing 'lowerdir' [ 203.987868][T27230] netlink: 268 bytes leftover after parsing attributes in process `syz.1.10821'. [ 203.987996][T27230] netlink: 268 bytes leftover after parsing attributes in process `syz.1.10821'. [ 204.183374][T27257] loop2: detected capacity change from 0 to 256 [ 204.217388][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.219546][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.220985][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.235651][T27264] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 204.343924][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.345721][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.347251][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.351293][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.352993][T27264] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.780091][T27309] usb usb7: usbfs: process 27309 (syz.2.10857) did not claim interface 0 before use [ 204.835965][T27324] netlink: 'syz.2.10867': attribute type 2 has an invalid length. [ 204.866340][T27327] netlink: 'syz.0.10869': attribute type 1 has an invalid length. [ 204.878939][T27329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10868'. [ 205.090831][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.162482][T27366] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 205.176838][T27354] loop4: detected capacity change from 0 to 256 [ 205.598163][T27422] netlink: 'syz.4.10915': attribute type 1 has an invalid length. [ 205.831407][ T5223] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 205.835979][ T5223] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 205.836020][ T5223] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 205.836036][ T5223] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 205.836051][ T5223] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 205.867655][ T5223] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 206.235039][T27477] No control pipe specified [ 206.312567][T27483] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10944'. [ 206.426173][T27474] fido_id[27474]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.544117][T27499] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 206.547143][T27499] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 206.550608][T27499] overlayfs: missing 'lowerdir' [ 206.561309][T27502] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.803968][T27517] bridge6: entered promiscuous mode [ 206.804168][T27517] bridge6: entered allmulticast mode [ 207.064497][T27545] team0: entered allmulticast mode [ 207.064534][T27545] team_slave_0: entered allmulticast mode [ 207.064562][T27545] team_slave_1: entered allmulticast mode [ 207.179265][T27565] ip_tables: iptables: counters copy to user failed while replacing table [ 207.334490][T27580] netlink: 'syz.0.10992': attribute type 11 has an invalid length. [ 207.555991][T27607] netlink: 'syz.3.11006': attribute type 1 has an invalid length. [ 207.556121][T27607] netlink: 'syz.3.11006': attribute type 1 has an invalid length. [ 207.570078][T27610] nfs: Unknown parameter 'mask' [ 207.641398][T27615] __nla_validate_parse: 7 callbacks suppressed [ 207.642952][T27615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11010'. [ 207.813736][T27634] loop2: detected capacity change from 0 to 512 [ 207.814196][T27634] EXT4-fs: inline encryption not supported [ 207.814906][T27634] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 207.836557][T27634] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.11020: bad orphan inode 15 [ 207.836687][T27634] loop2: lost filesystem error report for type 5 error -117 [ 207.844348][T27634] ext4_test_bit(bit=14, block=5) = 0 [ 207.844988][T27634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.911240][T27634] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 207.922734][T27634] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.11020: bit already cleared for inode 13 [ 208.004212][T27653] loop3: detected capacity change from 0 to 1024 [ 208.015692][T27653] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.019812][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.030344][T27653] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 208.032303][T27653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.037198][T27653] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.11028: Invalid inode table block 0 in block_group 0 [ 208.039475][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.039661][T27653] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 208.042715][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.042856][T27653] EXT4-fs error (device loop3): ext4_quota_write:7430: inode #3: comm syz.3.11028: mark_inode_dirty error [ 208.042878][T27653] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 208.044374][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 208.044386][ C1] EXT4-fs (loop3): initial error at time 525523: __ext4_get_inode_loc:4886 [ 208.044402][ C1] EXT4-fs (loop3): last error at time 525523: ext4_quota_write:7430: inode 3 [ 208.046496][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11032'. [ 208.054320][T27653] Quota error (device loop3): write_blk: dquota write failed [ 208.054374][T27653] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 208.054398][T27653] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.11028: Failed to acquire dquot type 0 [ 208.054415][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.059778][T27653] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.11028: Invalid inode table block 0 in block_group 0 [ 208.059816][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.063495][T27653] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 208.063525][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.066952][T27653] EXT4-fs error (device loop3): ext4_ext_truncate:4557: inode #15: comm syz.3.11028: mark_inode_dirty error [ 208.066986][T27653] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.070492][T27653] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.11028: Invalid inode table block 0 in block_group 0 [ 208.070528][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.086773][T27653] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 208.086819][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.090637][T27653] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 208.090673][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.095797][T27653] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.11028: Invalid inode table block 0 in block_group 0 [ 208.096362][T27653] loop3: lost filesystem error report for type 5 error -117 [ 208.100149][T27653] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 208.103539][T27653] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.11028: mark_inode_dirty error [ 208.103568][T27653] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.105693][T27653] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 208.109002][T27653] EXT4-fs (loop3): 1 truncate cleaned up [ 208.109536][T27653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.128664][T27665] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 208.128664][T27665] Please contact the netfilter-devel mailing list or update your nftables rules. [ 208.209110][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.302114][T27678] usb usb8: usbfs: process 27678 (syz.3.11038) did not claim interface 0 before use [ 208.322917][T27678] usb usb8: selecting invalid altsetting 2147483647 [ 208.362202][T27686] loop1: detected capacity change from 0 to 256 [ 208.385059][T27688] qrtr: Invalid version 7 [ 208.800570][T27736] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 208.871197][T27743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11071'. [ 209.057252][T27764] usb usb8: usbfs: process 27764 (syz.4.11080) did not claim interface 0 before use [ 209.074356][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11084'. [ 209.302460][T27799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11098'. [ 209.513084][T27829] ip6tnl2: entered allmulticast mode [ 209.598218][T27839] nftables ruleset with unbound chain [ 209.668166][T27843] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 209.738992][T27843] bond6 (unregistering): Released all slaves [ 209.963651][T27876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11136'. [ 210.181814][T27877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11137'. [ 210.181852][T27877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11137'. [ 210.197292][T27901] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11147'. [ 210.205537][T27902] netlink: 'syz.2.11146': attribute type 10 has an invalid length. [ 210.205912][T27902] syz_tun: entered promiscuous mode [ 210.305299][T27877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11137'. [ 210.353602][T27917] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 210.741013][T27966] netlink: 'syz.4.11175': attribute type 1 has an invalid length. [ 210.823099][T27972] veth1_macvtap: left promiscuous mode [ 210.946386][T27980] netlink: 'syz.2.11180': attribute type 1 has an invalid length. [ 211.077354][T27996] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 211.417779][T28047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.598227][T28071] loop3: detected capacity change from 0 to 256 [ 212.171376][T28143] loop3: detected capacity change from 0 to 128 [ 212.181588][T28143] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.472618][T28171] IPv6: sit2: Disabled Multicast RS [ 212.474075][T28171] sit2: entered allmulticast mode [ 212.506086][T28176] netlink: 'syz.2.11278': attribute type 5 has an invalid length. [ 212.607684][T28182] loop2: detected capacity change from 0 to 1024 [ 212.610596][T28182] EXT4-fs: Ignoring removed bh option [ 212.658552][T28182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 212.694127][T28182] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.11282: directory missing '..' [ 212.733301][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.981366][T28235] loop0: detected capacity change from 0 to 512 [ 212.988723][T28235] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 213.026225][T28239] __nla_validate_parse: 7 callbacks suppressed [ 213.026266][T28239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11307'. [ 213.039986][T28235] loop0: detected capacity change from 0 to 8192 [ 213.088580][T28235] loop0: p1 < > p3 < p5 > p4 [ 213.092130][T28235] loop0: p4 size 3081 extends beyond EOD, truncated [ 213.093756][T28235] loop0: p5 size 3081 extends beyond EOD, truncated [ 213.106379][ T4342] loop0: p1 < > p3 < p5 > p4 [ 213.110011][ T4342] loop0: p4 size 3081 extends beyond EOD, truncated [ 213.112050][ T4342] loop0: p5 size 3081 extends beyond EOD, truncated [ 213.323531][T28276] netlink: 'syz.1.11325': attribute type 5 has an invalid length. [ 213.412747][T28289] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.510324][T28304] netlink: 'syz.3.11339': attribute type 2 has an invalid length. [ 213.574530][T28308] loop2: detected capacity change from 0 to 512 [ 213.579740][T28316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11345'. [ 213.615477][T28308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.674264][T28332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11353'. [ 213.677541][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11353'. [ 213.692241][T28308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 213.734500][T28308] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 213.734581][T28308] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 213.734618][T28308] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.11342: Failed to acquire dquot type 0 [ 213.782256][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 213.795506][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 213.801648][ T5447] udevd[5447]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 213.826175][ T5456] udevd[5456]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 213.843974][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 213.987924][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 213.997294][ T5138] udevd[5138]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 214.001716][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 214.050191][ T5447] udevd[5447]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 214.081936][T28367] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 214.152583][T28367] bond6 (unregistering): Released all slaves [ 214.155519][T28370] netlink: 'syz.0.11368': attribute type 29 has an invalid length. [ 214.213300][T28373] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 214.400654][T28387] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 214.531830][T28401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11385'. [ 214.636400][T28412] loop3: detected capacity change from 0 to 512 [ 214.672365][T28412] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 214.709704][T28412] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.11390: casefold flag without casefold feature [ 214.709867][T28412] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.720089][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 214.720123][ C0] EXT4-fs (loop3): initial error at time 525530: ext4_orphan_get:1399: inode 15 [ 214.720158][ C0] EXT4-fs (loop3): last error at time 525530: ext4_orphan_get:1399: inode 15 [ 214.723950][T28412] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.11390: couldn't read orphan inode 15 (err -117) [ 214.723974][T28412] fserror_report: 2 callbacks suppressed [ 214.723981][T28412] loop3: lost filesystem error report for type 5 error -117 [ 214.730164][T28412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.759651][T28412] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.11390: lblock 0 mapped to illegal pblock 4 (length 1) [ 214.804516][T28430] netlink: 'syz.1.11398': attribute type 3 has an invalid length. [ 214.807346][T28430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11398'. [ 214.809181][T28430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11398'. [ 214.849837][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.876574][T28438] ip6tnl1: entered promiscuous mode [ 215.043430][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11412'. [ 215.091474][T28464] netlink: 'syz.3.11414': attribute type 3 has an invalid length. [ 215.393686][T28504] loop0: detected capacity change from 0 to 1024 [ 215.406259][T28507] netlink: 'syz.4.11435': attribute type 4 has an invalid length. [ 215.406290][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11435'. [ 215.442483][T28504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec028, mo2=0002] [ 215.442677][T28504] System zones: 0-1, 3-12 [ 215.445795][T28504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.451462][T28504] EXT4-fs error (device loop0): ext4_empty_dir:3125: inode #11: block 42: comm syz.0.11432: bad entry in directory: inode out of bounds - offset=10240, inode=100663296, rec_len=1024, size=1024 fake=0 [ 215.452476][T28504] EXT4-fs (loop0): Remounting filesystem read-only [ 215.570805][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.928430][ T30] audit: type=1400 audit(525531.846:100): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="(" requested=w pid=28545 comm="syz.3.11452" daddr=0:0:400::1 [ 215.955849][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11454'. [ 215.968279][T28552] loop4: detected capacity change from 0 to 128 [ 215.987868][T28552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.013056][T28552] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 216.033558][ T5136] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.779713][T28624] loop0: detected capacity change from 0 to 256 [ 216.816780][T28630] xt_HMARK: proto mask must be zero with L3 mode [ 216.869685][T28632] Cannot find del_set index 57343 as target [ 217.075521][T28660] cgroup: none used incorrectly [ 217.155745][T28667] ip6t_rpfilter: unknown options [ 217.171623][T28673] Invalid source name [ 217.171754][T28673] UBIFS error (pid: 28673): cannot open "usb0", error -22 [ 217.268829][T28684] SET target dimension over the limit! [ 217.840086][T28737] __nla_validate_parse: 3 callbacks suppressed [ 217.841779][T28737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11544'. [ 218.019483][T28728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.049467][T28748] loop3: detected capacity change from 0 to 128 [ 218.240596][T28761] loop1: detected capacity change from 0 to 512 [ 218.243922][T28764] loop4: detected capacity change from 0 to 512 [ 218.245371][T28764] EXT4-fs: Ignoring removed nobh option [ 218.275728][T28761] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.300893][T28764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.341826][ T5144] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 218.381872][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.390668][T28784] loop0: detected capacity change from 0 to 8 [ 218.392747][T28784] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 218.394435][T28784] unable to read xattr id index table [ 218.428524][T28784] SQUASHFS error: zlib decompression failed, data probably corrupt [ 218.428706][T28784] SQUASHFS error: Failed to read block 0x9b: -5 [ 218.428715][T28784] SQUASHFS error: Unable to read metadata cache entry [99] [ 218.428724][T28784] SQUASHFS error: Unable to read inode 0x127 [ 218.519353][T28794] bridge4: entered promiscuous mode [ 218.696287][T28814] overlayfs: missing 'lowerdir' [ 218.711174][ T30] audit: type=1326 audit(525534.754:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.711357][ T30] audit: type=1326 audit(525534.754:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.711378][ T30] audit: type=1326 audit(525534.754:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.711399][ T30] audit: type=1326 audit(525534.754:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.711416][ T30] audit: type=1326 audit(525534.754:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.711431][ T30] audit: type=1326 audit(525534.754:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.749476][ T30] audit: type=1326 audit(525534.807:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f781a8 code=0x7ffc0000 [ 218.749639][ T30] audit: type=1326 audit(525534.807:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5b06c code=0x7ffc0000 [ 218.749657][ T30] audit: type=1326 audit(525534.807:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5b06c code=0x7ffc0000 [ 218.749675][ T30] audit: type=1326 audit(525534.807:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28812 comm="syz.1.11580" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5b06c code=0x7ffc0000 [ 219.026596][T28829] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11588'. [ 219.079435][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11591'. [ 219.129637][T28837] new mount options do not match the existing superblock, will be ignored [ 219.154332][T28840] loop4: detected capacity change from 0 to 256 [ 219.207870][T28843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11595'. [ 219.207912][T28843] netlink: 'syz.0.11595': attribute type 1 has an invalid length. [ 219.207934][T28843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11595'. [ 219.207949][T28843] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11595'. [ 219.207963][T28843] netlink: 'syz.0.11595': attribute type 1 has an invalid length. [ 219.207974][T28843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11595'. [ 219.413857][T28855] netlink: 'syz.4.11599': attribute type 21 has an invalid length. [ 219.413930][T28855] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11599'. [ 219.632808][T28868] loop0: detected capacity change from 0 to 8192 [ 219.758658][T28890] random: crng reseeded on system resumption [ 219.840412][T28899] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11622'. [ 220.011083][T28921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11632'. [ 220.167377][T28940] IPVS: length: 173 != 24 [ 220.284224][T28955] xt_HMARK: spi-set and port-set can't be combined [ 220.330220][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.493100][T28979] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 220.775039][T29017] netlink: 'syz.3.11677': attribute type 4 has an invalid length. [ 220.777797][T29018] netlink: 'syz.4.11678': attribute type 21 has an invalid length. [ 220.781842][T29018] netlink: 'syz.4.11678': attribute type 1 has an invalid length. [ 220.986410][ T5230] IPVS: starting estimator thread 0... [ 221.024740][T29042] loop0: detected capacity change from 0 to 4096 [ 221.055778][T29042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.073160][T29044] IPVS: using max 58 ests per chain, 139200 per kthread [ 221.076771][T29042] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.0.11690: bad entry in directory: inode out of bounds - offset=24, inode=41227, rec_len=20, size=4096 fake=0 [ 221.084480][T29042] EXT4-fs error (device loop0) in ext4_delete_entry:2744: Corrupt filesystem [ 221.086586][T29042] EXT4-fs warning (device loop0): ext4_rename_delete:3739: inode #2: comm syz.0.11690: Deleting old file: nlink 4, error=-117 [ 221.127361][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.195566][T29053] xt_l2tp: v2 doesn't support IP mode [ 221.697263][T29110] netlink: 'syz.1.11723': attribute type 13 has an invalid length. [ 221.968195][T29148] random: crng reseeded on system resumption [ 222.020299][T29146] loop1: detected capacity change from 0 to 4096 [ 222.029195][T29146] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.083203][T29146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.093284][T29162] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 222.116513][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.200685][T29172] random: crng reseeded on system resumption [ 222.334578][T29188] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.431390][T29200] loop1: detected capacity change from 0 to 1024 [ 222.468844][T29200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.619009][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.717211][T29240] netlink: 'syz.2.11784': attribute type 11 has an invalid length. [ 222.721112][T29240] __nla_validate_parse: 3 callbacks suppressed [ 222.722478][T29240] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11784'. [ 223.082941][T29284] xt_limit: Overflow, try lower: 167772/2147483648 [ 223.523539][T29330] netlink: 'syz.3.11829': attribute type 21 has an invalid length. [ 223.526899][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11829'. [ 223.560178][T29336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11833'. [ 223.580951][T29340] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.598589][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11836'. [ 223.600716][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11836'. [ 223.969046][T29375] SET target dimension over the limit! [ 224.238108][T29395] netlink: 'syz.1.11863': attribute type 6 has an invalid length. [ 224.246673][T29396] netlink: 'syz.0.11862': attribute type 10 has an invalid length. [ 224.682032][T29396] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.682090][T29396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.682209][T29396] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.682267][T29396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.690347][T29396] bridge0: entered promiscuous mode [ 224.691873][T29396] team0: Port device bridge0 added [ 224.694623][T29420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11875'. [ 224.747175][T29426] loop1: detected capacity change from 0 to 512 [ 224.772300][T29426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.778777][T29426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002] [ 224.779053][T29426] System zones: 1-12 [ 224.779209][T29426] EXT4-fs (loop1): orphan cleanup on readonly fs [ 224.779225][T29426] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.11877: inode #15: comm syz.1.11877: iget: illegal inode # [ 224.779239][T29426] loop1: lost filesystem error report for type 5 error -117 [ 224.797207][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 224.797240][ C0] EXT4-fs (loop1): initial error at time 525541: ext4_orphan_get:1399 [ 224.797272][ C0] EXT4-fs (loop1): last error at time 525541: ext4_orphan_get:1399 [ 224.807867][T29426] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.11877: couldn't read orphan inode 15 (err -117) [ 224.808067][T29426] loop1: lost filesystem error report for type 5 error -117 [ 224.813571][T29426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.895563][T29426] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 224.898395][T29426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002] [ 224.904133][T29426] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 224.952527][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.030028][T29455] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11891'. [ 225.076644][T29459] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 225.105975][T29462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11895'. [ 225.282888][T29479] loop2: detected capacity change from 0 to 512 [ 225.398853][T29495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11909'. [ 225.400593][T29495] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 225.446303][T29483] lo speed is unknown, defaulting to 1000 [ 225.446670][T29483] virt_wifi0 speed is unknown, defaulting to 1000 [ 225.465269][T29479] EXT4-fs (loop2): 1 orphan inode deleted [ 225.466857][T29479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.547099][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.909317][T29522] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 226.128028][T29545] netlink: 'syz.2.11933': attribute type 4 has an invalid length. [ 226.268112][T29555] netlink: 'syz.0.11937': attribute type 38 has an invalid length. [ 226.400167][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11944'. [ 226.913627][T29617] netlink: 'syz.2.11969': attribute type 21 has an invalid length. [ 226.961035][T29626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.134902][T29645] netlink: zone id is out of range [ 227.137707][T29645] netlink: zone id is out of range [ 227.138886][T29645] netlink: zone id is out of range [ 227.140002][T29645] netlink: zone id is out of range [ 227.141134][T29645] netlink: set zone limit has 4 unknown bytes [ 227.363492][T29663] loop1: detected capacity change from 0 to 2048 [ 227.382337][T29663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.455819][ T5144] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 227.463982][T29671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.538912][T29673] loop3: detected capacity change from 0 to 256 [ 227.547179][T29673] FAT-fs (loop3): Directory bread(block 1285) failed [ 227.547225][T29673] FAT-fs (loop3): Directory bread(block 1286) failed [ 227.547246][T29673] FAT-fs (loop3): Directory bread(block 1287) failed [ 227.547292][T29673] FAT-fs (loop3): Directory bread(block 1288) failed [ 227.556781][T29673] FAT-fs (loop3): Directory bread(block 1285) failed [ 227.556820][T29673] FAT-fs (loop3): Directory bread(block 1286) failed [ 227.556848][T29673] FAT-fs (loop3): Directory bread(block 1287) failed [ 227.556872][T29673] FAT-fs (loop3): Directory bread(block 1288) failed [ 227.556941][T29673] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 227.744977][T29684] loop4: detected capacity change from 0 to 512 [ 227.745365][T29684] EXT4-fs: Ignoring removed bh option [ 227.751137][T29684] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #11: comm syz.4.12003: corrupted in-inode xattr: bad e_name length [ 227.753892][T29684] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.754623][T29684] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.12003: couldn't read orphan inode 11 (err -117) [ 227.759255][T29684] loop4: lost filesystem error report for type 5 error -117 [ 227.759421][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 227.759444][ C1] EXT4-fs (loop4): initial error at time 525544: ext4_iget_extra_inode:5180: inode 11 [ 227.759477][ C1] EXT4-fs (loop4): last error at time 525544: ext4_orphan_get:1404 [ 227.768555][T29684] EXT4-fs (loop4): 1 truncate cleaned up [ 227.769350][T29684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.779878][T29684] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.12003: bg 0: block 5: invalid block bitmap [ 227.862119][ T5136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.905740][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.001383][T29693] Injecting memory failure for pfn 0x124ade at process virtual address 0x201bd000 [ 228.009375][T29693] Memory failure: 0x124ade: Sending SIGBUS to syz.3.12007:29693 due to hardware memory corruption [ 228.009440][T29693] Memory failure: 0x124ade: recovery action for dirty LRU page: Recovered [ 228.009470][T29693] Injecting memory failure for pfn 0x124add at process virtual address 0x201be000 [ 228.016536][T29693] Memory failure: 0x124add: Sending SIGBUS to syz.3.12007:29693 due to hardware memory corruption [ 228.016588][T29693] Memory failure: 0x124add: recovery action for dirty LRU page: Recovered [ 228.016616][T29693] Injecting memory failure for pfn 0x124adc at process virtual address 0x201bf000 [ 228.025661][T29693] Memory failure: 0x124adc: Sending SIGBUS to syz.3.12007:29693 due to hardware memory corruption [ 228.025716][T29693] Memory failure: 0x124adc: recovery action for dirty LRU page: Recovered [ 228.090233][T29703] loop1: detected capacity change from 0 to 2048 [ 228.132169][ T4342] Alternate GPT is invalid, using primary GPT. [ 228.132234][ T4342] loop1: p1 p2 p3 [ 228.154427][T29710] RGB/YUV Input: ================= START STATUS ================= [ 228.154579][T29710] RGB/YUV Input: Test Pattern: 75% Colorbar [ 228.154596][T29710] RGB/YUV Input: Show Information: All [ 228.154608][T29710] RGB/YUV Input: Vertical Flip: false [ 228.154618][T29710] RGB/YUV Input: Horizontal Flip: false [ 228.154628][T29710] RGB/YUV Input: Brightness: 128 [ 228.154638][T29710] RGB/YUV Input: Contrast: 128 [ 228.154647][T29710] RGB/YUV Input: Hue: 0 [ 228.154656][T29710] RGB/YUV Input: Saturation: 128 [ 228.154665][T29710] RGB/YUV Input: Pixel Rate: 160000000 [ 228.154675][T29710] RGB/YUV Input: Horizontal Blanking: 800 [ 228.154685][T29710] RGB/YUV Input: Vertical Blanking: 3223 [ 228.154695][T29710] RGB/YUV Input: ================== END STATUS ================== [ 228.207061][T29703] Alternate GPT is invalid, using primary GPT. [ 228.207231][T29703] loop1: p1 p2 p3 [ 228.333237][ T4342] Alternate GPT is invalid, using primary GPT. [ 228.333306][ T4342] loop1: p1 p2 p3 [ 228.963804][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 228.973919][T29791] __nla_validate_parse: 4 callbacks suppressed [ 228.974073][T29791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12055'. [ 228.984488][ T5447] udevd[5447]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 228.994286][ T5138] udevd[5138]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 229.113363][T29798] netlink: 'syz.4.12056': attribute type 1 has an invalid length. [ 229.125940][ T5138] udevd[5138]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 229.138892][ T5447] udevd[5447]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 229.157683][T29803] loop1: detected capacity change from 0 to 512 [ 229.171245][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 229.210163][T29803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.288190][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.370922][ T5139] udevd[5139]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 229.388890][ T5137] udevd[5137]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 229.394312][ T5453] udevd[5453]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 229.422195][T29829] loop0: detected capacity change from 0 to 512 [ 229.460643][T29829] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 229.460936][T29829] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.463630][T29829] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.595184][T29829] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 229.596883][T29841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12075'. [ 229.613824][T29829] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.12072: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 229.617746][T29829] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 229.626276][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 229.626320][ C1] EXT4-fs (loop0): last error at time 525546: ext4_ext_check_inode:521: inode 13 [ 229.627535][T29829] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12072: couldn't read orphan inode 13 (err -117) [ 229.627561][T29829] loop0: lost filesystem error report for type 5 error -117 [ 229.638096][T29829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.666300][T29829] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.12072: deleted inode referenced: 12 [ 229.735834][T29847] netlink: 'syz.1.12077': attribute type 1 has an invalid length. [ 229.735869][T29847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12077'. [ 229.849201][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.894839][T29865] netlink: 'syz.0.12081': attribute type 2 has an invalid length. [ 229.997058][T29878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12092'. [ 230.013319][T29875] ieee802154 phy0 wpan0: encryption failed: -90 [ 230.193274][T29904] dvmrp0: entered allmulticast mode [ 230.343621][T29925] loop2: detected capacity change from 0 to 128 [ 230.385196][T29925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 230.503902][ T5133] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.576209][T29947] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12123'. [ 230.670985][T29952] loop0: detected capacity change from 0 to 1024 [ 230.672778][T29952] EXT4-fs: Ignoring removed oldalloc option [ 230.674599][T29952] EXT4-fs: Ignoring removed bh option [ 230.689083][T29952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.724377][T29952] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12129: bg 0: block 112: padding at end of block bitmap is not set [ 230.728742][T29952] EXT4-fs (loop0): Remounting filesystem read-only [ 230.765977][T29947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.915895][T29966] loop4: detected capacity change from 0 to 512 [ 230.920214][T29966] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (1) [ 230.935166][ T5148] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 231.252136][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.266869][T29947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.303318][T29947] bond0 (unregistering): Released all slaves [ 231.318211][T29956] netlink: 'syz.1.12130': attribute type 3 has an invalid length. [ 231.413317][T29985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12143'. [ 231.468471][T29988] loop2: detected capacity change from 0 to 1024 [ 231.472235][T29988] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 231.474442][T29988] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 231.476539][T29988] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: inode #32: comm syz.2.12145: iget: special inode unallocated [ 231.476585][T29988] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 231.479023][T29988] EXT4-fs (loop2): Remounting filesystem read-only [ 231.481766][T29988] EXT4-fs (loop2): no journal found [ 231.482976][T29988] EXT4-fs (loop2): can't get journal size [ 231.484108][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 231.484119][ C1] EXT4-fs (loop2): initial error at time 525548: ext4_get_journal_inode:5900: inode 32 [ 231.484135][ C1] EXT4-fs (loop2): last error at time 525548: ext4_get_journal_inode:5900: inode 32 [ 231.512090][T29988] EXT4-fs (loop2): filesystem is read-only [ 231.512689][T29988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 231.574400][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.652636][T30010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12156'. [ 231.654689][T30010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12156'. [ 231.657754][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12156'. [ 232.031122][T30052] xt_hashlimit: overflow, try lower: 511/0 [ 232.301438][T30072] loop4: detected capacity change from 0 to 128 [ 232.346374][T30072] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.362883][T30072] EXT4-fs warning (device loop4): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 232.497695][ T5136] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.518555][T30088] sctp: [Deprecated]: syz.3.12195 (pid 30088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.518555][T30088] Use struct sctp_sack_info instead [ 232.584488][T30090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 232.584513][T30090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.584597][T30090] vhci_hcd vhci_hcd.0: Device attached [ 232.601448][T30091] vhci_hcd: unknown pdu 2 [ 232.603553][ T12] vhci_hcd vhci_hcd.4: stop threads [ 232.603623][ T12] vhci_hcd vhci_hcd.4: release socket [ 232.603649][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 232.896148][T30123] netlink: 'syz.2.12211': attribute type 4 has an invalid length. [ 232.897771][T30123] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12211'. [ 233.235472][T30156] ipt_REJECT: TCP_RESET invalid for non-tcp [ 233.242811][T30155] netlink: 'syz.0.12228': attribute type 16 has an invalid length. [ 233.404012][T30176] netlink: 'syz.2.12236': attribute type 1 has an invalid length. [ 233.644845][T30198] overlayfs: missing 'workdir' [ 233.994544][T30243] netlink: 'syz.0.12268': attribute type 1 has an invalid length. [ 233.994581][T30243] netlink: 'syz.0.12268': attribute type 1 has an invalid length. [ 234.041423][T30244] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 234.044287][T30244] bond4 (unregistering): Released all slaves [ 234.104857][T30251] netlink: 'syz.3.12275': attribute type 8 has an invalid length. [ 234.450196][T30283] x_tables: unsorted underflow at hook 2 [ 234.513007][T30290] loop3: detected capacity change from 0 to 2048 [ 234.552760][T30290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.574489][T30302] __nla_validate_parse: 1 callbacks suppressed [ 234.575732][T30302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12297'. [ 234.628285][ T5151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.792928][T30322] loop2: detected capacity change from 0 to 512 [ 234.821229][T30322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.846922][T30322] EXT4-fs (loop2): 1 truncate cleaned up [ 234.847429][T30322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.883340][T30322] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.12304: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 234.887859][T30322] EXT4-fs (loop2): Remounting filesystem read-only [ 234.887872][T30322] EXT4-fs warning (device loop2): ext4_rename_delete:3739: inode #2: comm syz.2.12304: Deleting old file: nlink 4, error=-117 [ 234.936780][ T5133] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.161722][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12327'. [ 235.224453][T30366] netlink: 'syz.2.12328': attribute type 20 has an invalid length. [ 235.224607][T30366] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.302898][T30372] nvme_rdma: malformed address passed: malformed:4420 [ 235.327227][T30367] loop0: detected capacity change from 0 to 4096 [ 235.345657][T30380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12334'. [ 235.359203][T30367] EXT4-fs (loop0): Test dummy encryption mode enabled [ 235.381750][T30367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.396147][T30367] __quota_error: 199 callbacks suppressed [ 235.396199][T30367] Quota error (device loop0): do_check_range: Getting block 150994949 out of range 0-5 [ 235.443047][T30391] loop2: detected capacity change from 0 to 256 [ 235.490514][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.000400][T30451] random: crng reseeded on system resumption [ 236.209049][T30467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12378'. [ 236.209088][T30467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12378'. [ 236.494607][T30491] xt_nat: multiple ranges no longer supported [ 236.513142][T30493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12391'. [ 236.513295][T30493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12391'. [ 236.546566][T30499] netlink: 'syz.1.12395': attribute type 1 has an invalid length. [ 236.638324][T30509] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12394'. [ 236.786844][T30524] loop0: detected capacity change from 0 to 512 [ 236.805846][T30524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.874789][T30524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.939492][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.024950][T30539] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.030504][T30548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12417'. [ 237.030548][T30548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12417'. [ 237.225368][ T5148] Bluetooth: unknown link type 197 [ 237.225411][ T5148] Bluetooth: hci1: connection err: -111 [ 237.281283][T30579] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 237.605201][T30617] netlink: 'syz.2.12451': attribute type 10 has an invalid length. [ 238.356919][T30617] team0 (unregistering): Port device team_slave_0 removed [ 238.360389][T30617] team0 (unregistering): Port device team_slave_1 removed [ 239.157183][T30712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.266952][T30721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.334049][T30727] loop0: detected capacity change from 0 to 256 [ 239.669651][T30740] netlink: 'syz.1.12506': attribute type 1 has an invalid length. [ 239.669806][T30740] __nla_validate_parse: 4 callbacks suppressed [ 239.669815][T30740] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12506'. [ 239.751039][ T30] audit: type=1326 audit(525556.855:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.755692][ T30] audit: type=1326 audit(525556.865:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.765245][ T30] audit: type=1326 audit(525556.876:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.775908][ T30] audit: type=1326 audit(525556.886:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.776059][ T30] audit: type=1326 audit(525556.886:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.776075][ T30] audit: type=1326 audit(525556.886:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.776089][ T30] audit: type=1326 audit(525556.886:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.776104][ T30] audit: type=1326 audit(525556.886:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30747 comm="syz.0.12513" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9e5781a8 code=0x7ffc0000 [ 239.809833][T30755] netlink: 'syz.4.12518': attribute type 7 has an invalid length. [ 239.811376][T30755] netlink: 'syz.4.12518': attribute type 8 has an invalid length. [ 239.879339][T30760] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12517'. [ 239.879488][T30760] netlink: 58 bytes leftover after parsing attributes in process `syz.2.12517'. [ 240.073905][T30780] xt_CT: No such helper "pptp" [ 240.186764][T30799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12534'. [ 240.186917][T30799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12534'. [ 240.186931][T30799] netlink: 'syz.0.12534': attribute type 6 has an invalid length. [ 240.205436][T30801] kernel profiling enabled (shift: 7) [ 240.274770][T30805] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.559803][T30834] netlink: 'syz.1.12554': attribute type 39 has an invalid length. [ 240.623877][T30840] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 241.090496][T30888] loop0: detected capacity change from 0 to 1024 [ 241.124835][T30888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.211391][T30902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12583'. [ 241.213952][ T5127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.215632][T30902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12583'. [ 241.240254][T30899] loop3: detected capacity change from 0 to 256 [ 241.421732][T30916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12593'. [ 241.449204][T30919] loop1: detected capacity change from 0 to 512 [ 241.482776][T30919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.503113][T30919] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.12595: corrupted xattr block 6: invalid header [ 241.514460][T30919] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.12595: corrupted xattr block 6: invalid header [ 241.522702][T30919] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.12595: corrupted xattr block 6: invalid header [ 241.532171][T30919] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.12595: corrupted xattr block 6: invalid header [ 241.558570][T30919] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #12: comm syz.1.12595: corrupted xattr block 6: invalid header [ 241.706489][ T5144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.099743][T30976] futex_wake_op: syz.3.12622 tries to shift op by 144; fix this program [ 242.101544][T30976] futex_wake_op: syz.3.12622 tries to shift op by 144; fix this program [ 242.175719][T30981] netlink: 'syz.3.12626': attribute type 5 has an invalid length. [ 242.373875][T30997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12633'. [ 243.487057][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.488351][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.319298][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.321319][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.323637][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.326389][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.327964][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.412290][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.414866][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.416870][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.418481][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.420399][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.526323][T31018] lo speed is unknown, defaulting to 1000 [ 256.529098][T31018] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.584642][T31010] lo speed is unknown, defaulting to 1000 [ 256.588477][T31010] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.704416][T31018] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.706057][T31018] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.707693][T31018] bridge_slave_0: entered allmulticast mode [ 256.709422][T31018] bridge_slave_0: entered promiscuous mode [ 256.711844][T31018] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.713303][T31018] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.715077][T31018] bridge_slave_1: entered allmulticast mode [ 256.716635][T31018] bridge_slave_1: entered promiscuous mode [ 256.735333][T31018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.738803][T31018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.740695][T31010] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.742285][T31010] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.744232][T31010] bridge_slave_0: entered allmulticast mode [ 256.746117][T31010] bridge_slave_0: entered promiscuous mode [ 256.751618][T31010] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.752979][T31010] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.754822][T31010] bridge_slave_1: entered allmulticast mode [ 256.756709][T31010] bridge_slave_1: entered promiscuous mode [ 256.768686][T31018] team0: Port device team_slave_0 added [ 256.771138][T31018] team0: Port device team_slave_1 added [ 256.778378][T31010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.782198][T31010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.793825][T31018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.795227][T31018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.800206][T31018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.806666][T31018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.808109][T31018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.813032][T31018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.818492][T31010] team0: Port device team_slave_0 added [ 256.821642][T31010] team0: Port device team_slave_1 added [ 256.836717][T31010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.838011][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.843073][T31010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.846162][T31010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.847475][T31010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.852855][T31010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.856792][T31018] hsr_slave_0: entered promiscuous mode [ 256.858766][T31018] hsr_slave_1: entered promiscuous mode [ 256.860190][T31018] debugfs: 'hsr0' already exists in 'hsr' [ 256.861336][T31018] Cannot create hsr debugfs directory [ 256.883186][T31010] hsr_slave_0: entered promiscuous mode [ 256.884753][T31010] hsr_slave_1: entered promiscuous mode [ 256.887503][T31010] debugfs: 'hsr0' already exists in 'hsr' [ 256.887534][T31010] Cannot create hsr debugfs directory [ 256.975061][T31018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.042812][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.045248][ T5131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.047518][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.049593][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.051404][ T5131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.097108][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.099456][ T5131] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.101436][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.104348][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.107983][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 257.195946][ T5148] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.198539][ T5148] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.201491][ T5148] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 257.203346][ T5148] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 257.205110][ T5148] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 258.267406][ T5148] Bluetooth: hci5: command tx timeout [ 258.343482][ T5148] Bluetooth: hci6: command tx timeout [ 259.029427][ T5131] Bluetooth: hci7: command tx timeout [ 259.031682][ T5148] Bluetooth: hci8: command tx timeout [ 259.181971][ T5148] Bluetooth: hci9: command tx timeout [ 260.249572][ T5148] Bluetooth: hci5: command tx timeout [ 260.324934][ T5148] Bluetooth: hci6: command tx timeout [ 261.010356][ T5131] Bluetooth: hci7: command tx timeout [ 261.011818][ T5148] Bluetooth: hci8: command tx timeout [ 261.163096][ T5148] Bluetooth: hci9: command tx timeout [ 261.810675][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 21s! [syz-executor:5144] [ 261.810699][ C0] Modules linked in: [ 261.810706][ C0] irq event stamp: 40479667 [ 261.813594][ C0] hardirqs last enabled at (40479666): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 261.815336][ C0] hardirqs last disabled at (40479667): [] el1_interrupt+0x28/0x60 [ 261.816873][ C0] softirqs last enabled at (8259724): [] __tcp_close+0xa78/0xd80 [ 261.818470][ C0] softirqs last disabled at (8259725): [] __do_softirq+0x14/0x20 [ 261.820034][ C0] CPU: 0 UID: 0 PID: 5144 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT [ 261.820058][ C0] Tainted: [L]=SOFTLOCKUP [ 261.820062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 261.820068][ C0] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 261.820077][ C0] pc : _raw_spin_unlock_irqrestore+0x44/0x98 [ 261.820084][ C0] lr : _raw_spin_unlock_irqrestore+0x38/0x98 [ 261.820091][ C0] sp : ffff80008eb57dc0 [ 261.820094][ C0] x29: ffff80008eb57dc0 x28: 1fffe00034bb7c3a x27: ffff0001a5dbe1c0 [ 261.820106][ C0] x26: ffff0001a5dbe1d0 x25: ffff0000d1e18d38 x24: dfff800000000000 [ 261.820117][ C0] x23: 0000000000000001 x22: ffff800084ed1c18 x21: ffff0001a5dbdd80 [ 261.820127][ C0] x20: ffff0001a5dbdd80 x19: 0000000000000000 x18: 00000000ffffffff [ 261.820136][ C0] x17: ffff80008a7c2000 x16: 0000000000000005 x15: ffff80008a34bda0 [ 261.820146][ C0] x14: 000000008030fe08 x13: 0000000000000001 x12: 0000000000000000 [ 261.820156][ C0] x11: ffff80008a5c1e28 x10: 0000000000000003 x9 : 0000000000000000 [ 261.820166][ C0] x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000 [ 261.820175][ C0] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080157144 [ 261.820184][ C0] x2 : 0000000000000002 x1 : ffff0000dd8e9d40 x0 : ffff80011d2e8000 [ 261.820194][ C0] Call trace: [ 261.820197][ C0] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 261.820206][ C0] __hrtimer_run_queues+0x22c/0xbe0 [ 261.820214][ C0] hrtimer_run_softirq+0x15c/0x21c [ 261.820222][ C0] handle_softirqs+0x2ec/0xd98 [ 261.820230][ C0] __do_softirq+0x14/0x20 [ 261.820237][ C0] ____do_softirq+0x14/0x20 [ 261.820245][ C0] call_on_irq_stack+0x30/0x48 [ 261.820253][ C0] do_softirq_own_stack+0x20/0x2c [ 261.820260][ C0] do_softirq+0x90/0xf8 [ 261.820267][ C0] __local_bh_enable_ip+0x240/0x35c [ 261.820274][ C0] __tcp_close+0xa80/0xd80 [ 261.820281][ C0] tcp_close+0x38/0x140 [ 261.820288][ C0] inet_release+0x154/0x1cc [ 261.820295][ C0] __sock_release+0xa0/0x1d4 [ 261.820304][ C0] sock_close+0x24/0x38 [ 261.820314][ C0] __fput+0x338/0x74c [ 261.820322][ C0] fput_close_sync+0x10c/0x278 [ 261.820330][ C0] __arm64_sys_close+0x80/0x110 [ 261.820340][ C0] invoke_syscall+0x98/0x244 [ 261.820350][ C0] el0_svc_common+0xec/0x23c [ 261.820360][ C0] do_el0_svc+0x4c/0x5c [ 261.820369][ C0] el0_svc+0x64/0x260 [ 261.820379][ C0] el0t_64_sync_handler+0x48/0x148 [ 261.820389][ C0] el0t_64_sync+0x198/0x19c [ 261.820397][ C0] Sending NMI from CPU 0 to CPUs 1: [ 261.820409][ C1] NMI backtrace for cpu 1 [ 261.820421][ C1] CPU: 1 UID: 0 PID: 31009 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT [ 261.820434][ C1] Tainted: [L]=SOFTLOCKUP [ 261.820437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 261.820441][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 261.820450][ C1] pc : check_kcov_mode+0xc/0x54 [ 261.820460][ C1] lr : write_comp_data+0x38/0x84 [ 261.820467][ C1] sp : ffff8000a0a87060 [ 261.820470][ C1] x29: ffff8000a0a87060 x28: ffff0000e13a0a00 x27: 0000000000000000 [ 261.820482][ C1] x26: fffffdffc4557230 x25: dfff800000000000 x24: 1fffffbff88aae43 [ 261.820492][ C1] x23: ffff0000d87d8000 x22: 0000000000000007 x21: 0000000000000003 [ 261.820501][ C1] x20: 0000000000000000 x19: ffff800080a93ddc x18: 0000000000000000 [ 261.820511][ C1] x17: 0000000000000002 x16: 0000000000000000 x15: 0000000000000000 [ 261.820520][ C1] x14: 00000000000001c0 x13: 0000000000000001 x12: 0000000000000000 [ 261.820529][ C1] x11: 0000000000000000 x10: 00003e0040000000 x9 : 0000000000000000 [ 261.820539][ C1] x8 : ffff0000d87d8000 x7 : ffff800080c48cd4 x6 : 0000000000000000 [ 261.820548][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080a93ddc [ 261.820557][ C1] x2 : 0000000000000000 x1 : ffff0000d87d8000 x0 : 0000000000000003 [ 261.820567][ C1] Call trace: [ 261.820569][ C1] check_kcov_mode+0xc/0x54 (P) [ 261.820577][ C1] __sanitizer_cov_trace_const_cmp8+0x24/0x30 [ 261.820585][ C1] folio_remove_rmap_ptes+0x1dc/0xc40 [ 261.820595][ C1] __zap_vma_range+0x192c/0x42d0 [ 261.820606][ C1] unmap_vmas+0x2e0/0x43c [ 261.820615][ C1] exit_mmap+0x1e8/0xad4 [ 261.820624][ C1] __mmput+0xe0/0x2e8 [ 261.820631][ C1] mmput+0x70/0xa8 [ 261.820638][ C1] exit_mm+0x1ac/0x264 [ 261.820648][ C1] do_exit+0x524/0x1a74 [ 261.820657][ C1] do_group_exit+0x198/0x238 [ 261.820667][ C1] get_signal+0xfb0/0x1094 [ 261.820675][ C1] arch_do_signal_or_restart+0x288/0x444c [ 261.820685][ C1] exit_to_user_mode_loop+0x70/0x17c [ 261.820694][ C1] el0_svc+0x18c/0x260 [ 261.820705][ C1] el0t_64_sync_handler+0x48/0x148 [ 261.820715][ C1] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.229901][ T5148] Bluetooth: hci5: command tx timeout [ 262.306087][ T5148] Bluetooth: hci6: command tx timeout [ 262.992172][ T5131] Bluetooth: hci7: command tx timeout [ 262.993716][ T5148] Bluetooth: hci8: command tx timeout [ 263.144228][ T5148] Bluetooth: hci9: command tx timeout [ 264.211039][ T5148] Bluetooth: hci5: command tx timeout [ 264.287240][ T5148] Bluetooth: hci6: command tx timeout [ 264.973086][ T5131] Bluetooth: hci7: command tx timeout [ 264.974172][ T5148] Bluetooth: hci8: command tx timeout [ 265.125197][ T5148] Bluetooth: hci9: command tx timeout