last executing test programs: 16.575335092s ago: executing program 1 (id=10850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE}}}]}, 0x38}}, 0x0) 16.543037053s ago: executing program 1 (id=10851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) 16.447052552s ago: executing program 2 (id=10858): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.436839901s ago: executing program 1 (id=10859): r0 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') sendfile(r0, r0, 0x0, 0xd) 16.426323796s ago: executing program 3 (id=10860): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x53, 0x2) 16.392273236s ago: executing program 1 (id=10862): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 16.37902968s ago: executing program 3 (id=10864): r0 = fsopen(&(0x7f00000001c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='@[]\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) 16.374418037s ago: executing program 2 (id=10865): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x18, 0x1, 0x70bd25, 0x25dfdbf9, {0x9}}, 0x14}}, 0x20006004) 16.355521549s ago: executing program 1 (id=10866): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, 0x0, 0x0) 16.335399861s ago: executing program 3 (id=10867): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f014, 0x1}) 16.310403493s ago: executing program 2 (id=10869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0300010000000014000500fe8000000000000000000000000000bb08000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c0001000002010100000010ff"], 0x60}}, 0x0) 16.28738723s ago: executing program 3 (id=10871): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xffffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 16.280440345s ago: executing program 1 (id=10872): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x10000001, 0x4) 16.231034526s ago: executing program 2 (id=10875): clock_settime(0x0, &(0x7f0000000380)={0x77359400}) clock_settime(0x0, &(0x7f00000003c0)={0x0, 0x3938700}) 16.230781304s ago: executing program 3 (id=10876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x10}, 0x2000a080) 16.191180036s ago: executing program 3 (id=10878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 16.075269756s ago: executing program 0 (id=10885): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x3, 0x8) 16.047727579s ago: executing program 0 (id=10887): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x24000) 16.020495945s ago: executing program 0 (id=10888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) 15.983265178s ago: executing program 0 (id=10890): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000040)=0x4, 0x4) 15.980063997s ago: executing program 2 (id=10891): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1005, &(0x7f0000001500)=""/4101, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c0}, 0x94) 15.946105542s ago: executing program 0 (id=10893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x80) 15.921771376s ago: executing program 2 (id=10894): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0x10000}) 15.90023997s ago: executing program 0 (id=10895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJREF_SET_ID={0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x4008800) 15.377703907s ago: executing program 4 (id=10920): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x141181, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x4, 0x0, 0x12472000, 0x2}) 15.360039449s ago: executing program 4 (id=10921): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x0, 0x1, 0x8}) 15.336903081s ago: executing program 4 (id=10922): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 15.317228272s ago: executing program 4 (id=10923): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x4}}, 0x10) 15.283121764s ago: executing program 4 (id=10924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001200050104849000ffdbdf2528001a00e000000100000000000000000000000009001416000000000000000081c4299ef624a67c74"], 0x38}, 0x13, 0x0, 0x0, 0x800}, 0x0) 15.282795272s ago: executing program 4 (id=10925): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x64) 987.584174ms ago: executing program 32 (id=10872): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x10000001, 0x4) 961.236713ms ago: executing program 33 (id=10878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 495.980926ms ago: executing program 34 (id=10895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJREF_SET_ID={0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x4008800) 474.645634ms ago: executing program 35 (id=10894): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0x10000}) 0s ago: executing program 36 (id=10925): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x64) kernel console output (not intermixed with test programs): 32][ T30] audit: type=1326 audit(2000526919.211:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20141 comm="syz.0.7261" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 115.174856][ T30] audit: type=1326 audit(2000526919.211:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20141 comm="syz.0.7261" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 115.264115][T20159] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7270'. [ 115.327019][T20175] ip6t_REJECT: ECHOREPLY is not supported [ 115.586432][T20239] ip6gre1: entered allmulticast mode [ 115.596538][T20235] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 115.598108][T20235] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.7307: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.598128][T20235] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.598208][T20235] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.7307: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.598223][T20235] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.598289][T20235] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.7307: Failed to acquire dquot type 0 [ 115.598308][T20235] loop0: lost filesystem error report for type 5 error -117 [ 115.598405][T20235] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 115.598414][T20235] loop0: lost filesystem error report for type 5 error -117 [ 115.598479][T20235] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.7307: mark_inode_dirty error [ 115.598490][T20235] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.598551][T20235] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 115.598586][T20235] EXT4-fs (loop0): 1 orphan inode deleted [ 115.610899][T20235] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 115.632280][ T1235] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.632555][ T1235] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 115.636186][T20235] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.669742][ T4711] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.669763][ T4711] loop0: lost filesystem error report for type 5 error -117 [ 115.873285][T20286] netlink: 'syz.0.7331': attribute type 1 has an invalid length. [ 115.882878][T20288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.7333: bg 0: block 5: invalid block bitmap [ 115.882900][T20288] loop3: lost filesystem error report for type 5 error -117 [ 115.884610][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 115.884626][ C1] EXT4-fs (loop3): initial error at time 2000526919: ext4_validate_block_bitmap:436 [ 115.884640][ C1] EXT4-fs (loop3): last error at time 2000526919: ext4_validate_block_bitmap:436 [ 115.891668][T20288] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 115.891686][T20288] loop3: lost filesystem error report for type 5 error -117 [ 115.891879][T20288] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7333: invalid indirect mapped block 3 (level 2) [ 115.891901][T20288] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.892080][T20288] EXT4-fs (loop3): 1 orphan inode deleted [ 115.892091][T20288] EXT4-fs (loop3): 1 truncate cleaned up [ 116.072118][T20331] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 116.088878][T20333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7352'. [ 116.096894][T20335] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 116.119713][T20338] EXT4-fs: Ignoring removed oldalloc option [ 116.128884][T20338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.145447][T20338] EXT4-fs (loop3): 1 orphan inode deleted [ 116.145466][T20338] EXT4-fs (loop3): 1 truncate cleaned up [ 116.165281][T20338] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz.3.7353: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 116.170385][T20338] EXT4-fs (loop3): Remounting filesystem read-only [ 116.170404][T20338] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 116.251387][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7364'. [ 116.550585][T20432] set_capacity_and_notify: 10 callbacks suppressed [ 116.550600][T20432] loop3: detected capacity change from 0 to 2048 [ 116.612909][T20448] veth0_vlan: entered allmulticast mode [ 116.669331][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7410'. [ 116.697819][T20463] xt_NETMAP: bad MAP_IPS. [ 116.752901][T20477] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.939851][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 116.939865][ T30] audit: type=1326 audit(2000526920.982:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.939935][ T30] audit: type=1326 audit(2000526920.982:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.941100][ T30] audit: type=1326 audit(2000526920.982:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.941850][ T30] audit: type=1326 audit(2000526920.982:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.941938][ T30] audit: type=1326 audit(2000526920.982:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.942005][ T30] audit: type=1326 audit(2000526920.982:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.942071][ T30] audit: type=1326 audit(2000526920.982:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.942127][ T30] audit: type=1326 audit(2000526920.982:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.942227][ T30] audit: type=1326 audit(2000526920.982:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.942364][ T30] audit: type=1326 audit(2000526920.982:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20520 comm="syz.0.7441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 116.982967][T20525] netlink: 'syz.3.7444': attribute type 4 has an invalid length. [ 117.100973][T20548] loop2: detected capacity change from 0 to 512 [ 117.123183][T20548] EXT4-fs error (device loop2): __ext4_iget:5592: inode #11: block 1: comm syz.2.7454: invalid block [ 117.123206][T20548] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 117.123434][T20548] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.7454: couldn't read orphan inode 11 (err -117) [ 117.123450][T20548] loop2: lost filesystem error report for type 5 error -117 [ 117.287971][T20582] overlayfs: missing 'lowerdir' [ 117.450403][T20618] loop2: detected capacity change from 0 to 512 [ 117.473983][T20626] loop1: detected capacity change from 0 to 256 [ 117.479098][T20618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 117.479152][T20618] System zones: 1-12 [ 117.488327][T20618] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.7487: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 117.488345][T20618] loop2: lost filesystem error report for type 5 error -117 [ 117.488586][T20618] EXT4-fs (loop2): 1 orphan inode deleted [ 117.628997][T20650] loop3: detected capacity change from 0 to 512 [ 117.651150][T20652] dlm: Unknown command passed to DLM device : 0 [ 117.651150][T20652] [ 117.660731][T20658] ip6gre1: entered allmulticast mode [ 117.669461][T20650] ext4 filesystem being mounted at /1440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.689445][T20650] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.7503: corrupted xattr block 33: invalid ea_ino [ 117.689999][T20650] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.7503: corrupted xattr block 33: invalid ea_ino [ 117.690180][T20650] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.7503: corrupted xattr block 33: invalid ea_ino [ 117.691068][T20650] EXT4-fs error (device loop3): ext4_xattr_block_find:1885: inode #15: comm syz.3.7503: corrupted xattr block 33: invalid ea_ino [ 117.808375][T20688] loop0: detected capacity change from 0 to 256 [ 117.962753][T20719] loop2: detected capacity change from 0 to 512 [ 117.970864][T20719] EXT4-fs (loop2): 1 truncate cleaned up [ 117.985069][T20723] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.041512][T20731] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 118.092174][T20745] loop0: detected capacity change from 0 to 512 [ 118.137323][T20745] ext4 filesystem being mounted at /1521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.148076][T20755] loop2: detected capacity change from 0 to 256 [ 118.271947][T20773] loop3: detected capacity change from 0 to 1024 [ 118.400132][T20800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.409600][T20792] loop4: p2 p3 < > p4 < p5 > [ 118.409615][T20792] loop4: partition table partially beyond EOD, truncated [ 118.410679][T20792] loop4: p3 start 4225 is beyond EOD, truncated [ 118.441199][T20792] syz.4.7572: attempt to access beyond end of device [ 118.441199][T20792] loop4p4: rw=2048, sector=0, nr_sectors = 2 limit=1 [ 118.441233][T20792] SQUASHFS error: Failed to read block 0x0: -5 [ 118.441252][T20792] unable to read squashfs_super_block [ 118.448117][T20808] tmpfs: Bad value for 'mpol' [ 118.517741][T20814] SQUASHFS error: Unable to read inode 0xa7 [ 118.602243][T20833] syz.4.7591: attempt to access beyond end of device [ 118.602243][T20833] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 118.602439][T20833] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000ff00) [ 118.602450][T20833] FAT-fs (loop4): Filesystem has been set read-only [ 118.661188][T20849] overlayfs: workdir and upperdir must be separate subtrees [ 118.697475][T20856] netlink: 'syz.1.7602': attribute type 5 has an invalid length. [ 118.724076][T20858] EXT4-fs: Ignoring removed i_version option [ 118.732148][T20858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.733163][T20858] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.7605: corrupted in-inode xattr: e_name out of bounds [ 118.733180][T20858] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.733288][T20858] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.7605: couldn't read orphan inode 15 (err -117) [ 118.733309][T20858] loop3: lost filesystem error report for type 5 error -117 [ 118.780701][T20870] EXT4-fs: Ignoring removed orlov option [ 118.792518][T20870] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 118.792591][T20870] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.793276][T20870] EXT4-fs (loop4): invalid journal inode [ 118.793319][T20870] EXT4-fs (loop4): can't get journal size [ 118.812429][T20873] netlink: 'syz.3.7610': attribute type 2 has an invalid length. [ 118.973280][T20907] ext4 filesystem being mounted at /1610/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.691492][T21016] __nla_validate_parse: 7 callbacks suppressed [ 119.691510][T21016] netlink: 352 bytes leftover after parsing attributes in process `syz.4.7680'. [ 119.691528][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7680'. [ 119.691543][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7680'. [ 119.738499][T21012] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.7678: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 119.926633][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7701'. [ 120.044868][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7712'. [ 120.075201][T21095] netlink: 'syz.3.7718': attribute type 10 has an invalid length. [ 120.075387][T21095] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.076096][T21095] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.089466][T21095] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.089505][T21095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.089593][T21095] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.089624][T21095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.090831][T21095] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.135611][T21107] openvswitch: netlink: Key type 356 is out of range max 32 [ 120.357221][T21156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7748'. [ 120.395866][T21167] misc userio: No port type given on /dev/userio [ 120.562659][T21197] FAT-fs (loop1): bogus number of reserved sectors [ 120.562676][T21197] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 120.562684][T21197] FAT-fs (loop1): Can't find a valid FAT filesystem [ 120.630214][T21212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7776'. [ 120.633416][T21213] netlink: 'syz.2.7777': attribute type 1 has an invalid length. [ 120.813371][T21257] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7799'. [ 120.882171][T21269] syz.0.7807: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 120.882225][T21269] CPU: 0 UID: 0 PID: 21269 Comm: syz.0.7807 Not tainted syzkaller #0 PREEMPT [ 120.882236][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 120.882241][T21269] Call trace: [ 120.882244][T21269] show_stack+0x2c/0x3c (C) [ 120.882265][T21269] __dump_stack+0x30/0x40 [ 120.882280][T21269] dump_stack_lvl+0xd8/0x12c [ 120.882300][T21269] dump_stack+0x1c/0x28 [ 120.882312][T21269] warn_alloc+0x1c4/0x1d8 [ 120.882322][T21269] __vmalloc_node_range_noprof+0x110/0xe9c [ 120.882333][T21269] xskq_create+0x178/0x278 [ 120.882344][T21269] xsk_init_queue+0x9c/0xf8 [ 120.882353][T21269] xsk_setsockopt+0x49c/0x6c4 [ 120.882362][T21269] do_sock_setsockopt+0x1f0/0x330 [ 120.882375][T21269] __sys_setsockopt+0x104/0x170 [ 120.882386][T21269] __arm64_sys_setsockopt+0xc8/0xe4 [ 120.882397][T21269] invoke_syscall+0x98/0x244 [ 120.882411][T21269] el0_svc_common+0xec/0x23c [ 120.882423][T21269] do_el0_svc+0x4c/0x5c [ 120.882434][T21269] el0_svc+0x60/0x1d8 [ 120.882447][T21269] el0t_64_sync_handler+0x44/0x104 [ 120.882459][T21269] el0t_64_sync+0x198/0x19c [ 120.882470][T21269] Mem-Info: [ 120.882475][T21269] active_anon:28 inactive_anon:10199 isolated_anon:0 [ 120.882475][T21269] active_file:2476 inactive_file:4355 isolated_file:0 [ 120.882475][T21269] unevictable:768 dirty:192 writeback:0 [ 120.882475][T21269] slab_reclaimable:9941 slab_unreclaimable:93240 [ 120.882475][T21269] mapped:28954 shmem:941 pagetables:1165 [ 120.882475][T21269] sec_pagetables:0 bounce:0 [ 120.882475][T21269] kernel_misc_reclaimable:0 [ 120.882475][T21269] free:1468002 free_pcp:10550 free_cma:7616 [ 120.882499][T21269] Node 0 active_anon:112kB inactive_anon:40796kB active_file:9904kB inactive_file:17420kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115816kB dirty:768kB writeback:0kB shmem:3764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9252kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 120.882523][T21269] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 120.882549][T21269] lowmem_reserve[]: 0 0 3652 3652 3652 [ 120.882569][T21269] Node 0 Normal free:2794120kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:112kB inactive_anon:40796kB active_file:9904kB inactive_file:17420kB unevictable:3072kB writepending:768kB zspages:0kB present:5242880kB managed:3739800kB mlocked:0kB bounce:0kB free_pcp:42200kB local_pcp:24860kB free_cma:0kB [ 120.882595][T21269] lowmem_reserve[]: 0 0 0 0 0 [ 120.882614][T21269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 120.882677][T21269] Node 0 Normal: 1246*4kB (UM) 498*8kB (UM) 537*16kB (UME) 1415*32kB (UME) 961*64kB (UME) 316*128kB (UM) 165*256kB (UM) 77*512kB (UME) 30*1024kB (UME) 21*2048kB (UME) 604*4096kB (UM) = 2794168kB [ 120.882759][T21269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.882766][T21269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 120.882773][T21269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 120.882780][T21269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 120.882787][T21269] 7786 total pagecache pages [ 120.882791][T21269] 0 pages in swap cache [ 120.882795][T21269] Free swap = 124996kB [ 120.882798][T21269] Total swap = 124996kB [ 120.882802][T21269] 2097152 pages RAM [ 120.882806][T21269] 0 pages HighMem/MovableOnly [ 120.882809][T21269] 392154 pages reserved [ 120.882812][T21269] 8192 pages cma reserved [ 120.882816][T21269] 2 pages hwpoisoned [ 120.995207][T21283] xt_bpf: check failed: parse error [ 121.030785][T21295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7818'. [ 121.030808][T21295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.157156][T21324] autofs4:pid:21324:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 121.215287][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7836'. [ 121.324076][T21356] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 121.340488][T21356] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.7848: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.340511][T21356] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.341058][T21356] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.7848: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.341080][T21356] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.341179][T21356] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.7848: Failed to acquire dquot type 0 [ 121.341191][T21356] loop2: lost filesystem error report for type 5 error -117 [ 121.341304][T21356] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 121.341319][T21356] loop2: lost filesystem error report for type 5 error -117 [ 121.341401][T21356] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.7848: mark_inode_dirty error [ 121.341413][T21356] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.341548][T21356] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 121.341591][T21356] EXT4-fs (loop2): 1 orphan inode deleted [ 121.357333][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.373414][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 121.392084][ T12] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.392112][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.393309][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 121.393330][ T12] loop2: lost filesystem error report for type 5 error -117 [ 121.402321][ T4719] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.402346][ T4719] loop2: lost filesystem error report for type 5 error -117 [ 121.403990][ T4719] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 121.404018][ T4719] loop2: lost filesystem error report for type 5 error -117 [ 121.412769][ T4719] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 121.412797][ T4719] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.413040][ T4719] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 121.413054][ T4719] loop2: lost filesystem error report for type 5 error -117 [ 121.680443][T21431] netlink: 'syz.1.7884': attribute type 3 has an invalid length. [ 121.719666][T21441] veth5: entered promiscuous mode [ 121.719683][T21441] veth5: entered allmulticast mode [ 121.772353][T21450] netlink: 'syz.4.7894': attribute type 12 has an invalid length. [ 121.779199][T21453] set_capacity_and_notify: 11 callbacks suppressed [ 121.779212][T21453] loop1: detected capacity change from 0 to 512 [ 121.807048][T21458] netlink: 'syz.2.7896': attribute type 21 has an invalid length. [ 121.807095][T21458] netlink: 'syz.2.7896': attribute type 5 has an invalid length. [ 121.807103][T21458] netlink: 'syz.2.7896': attribute type 6 has an invalid length. [ 121.820932][T21453] ext4 filesystem being mounted at /1478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.951840][T21475] Soft offlining pfn 0x120476 at process virtual address 0x20631000 [ 121.955849][T21475] Soft offlining pfn 0x120477 at process virtual address 0x20632000 [ 121.975111][T21479] loop3: detected capacity change from 0 to 512 [ 122.001032][T21479] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.7907: corrupted in-inode xattr: e_value size too large [ 122.001055][T21479] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.001184][T21479] EXT4-fs (loop3): Remounting filesystem read-only [ 122.258442][T21536] openvswitch: netlink: Key type 31 is not supported [ 122.454645][T21574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.490112][T21586] bridge4: entered allmulticast mode [ 122.536543][T21598] binder: 21596:21598 ioctl 400c620e 0 returned -14 [ 122.572704][T21601] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 122.572830][T21601] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 122.586269][T21608] overlay: Unknown parameter '\' [ 122.597873][T21610] netlink: 'syz.2.7971': attribute type 1 has an invalid length. [ 122.597888][T21610] netlink: 'syz.2.7971': attribute type 2 has an invalid length. [ 122.785169][T21654] loop4: detected capacity change from 0 to 256 [ 122.789645][T21653] overlayfs: empty lowerdir [ 122.906037][T21676] loop0: detected capacity change from 0 to 512 [ 122.921047][T21676] EXT4-fs: Ignoring removed bh option [ 122.927179][T21676] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.955494][T21676] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 122.956818][T21676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.8002: bg 0: block 248: padding at end of block bitmap is not set [ 122.956849][T21676] loop0: lost filesystem error report for type 5 error -117 [ 122.957158][T21676] __quota_error: 5 callbacks suppressed [ 122.957165][T21676] Quota error (device loop0): write_blk: dquota write failed [ 122.957190][T21676] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 122.957208][T21676] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.8002: Failed to acquire dquot type 1 [ 122.957219][T21676] loop0: lost filesystem error report for type 5 error -28 [ 122.957894][T21676] EXT4-fs (loop0): 1 truncate cleaned up [ 123.015659][ T202] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 123.015691][ T202] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 123.015705][ T202] loop0: lost filesystem error report for type 5 error -117 [ 123.034047][T21698] netlink: 'syz.3.8013': attribute type 339 has an invalid length. [ 123.585082][T21809] binder: 21807:21809 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 123.616043][T21816] __vm_enough_memory: pid: 21816, comm: syz.0.8065, bytes: 54241668067328 not enough memory for the allocation [ 123.690532][T21824] vhci_hcd vhci_hcd.2: invalid port number 255 [ 123.690552][T21824] vhci_hcd vhci_hcd.2: invalid port number 255 [ 123.701987][T21826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.795119][T21844] overlayfs: cannot append lower layer [ 123.852016][T21859] loop1: detected capacity change from 0 to 512 [ 123.881835][T21859] ext4 filesystem being mounted at /1524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.967307][T21881] xt_ecn: cannot match TCP bits for non-tcp packets [ 124.172053][T21922] ip6t_hbh: Not strict - not implemented [ 124.241409][T21944] vhci_hcd vhci_hcd.3: invalid port number 129 [ 124.241428][T21944] vhci_hcd vhci_hcd.3: invalid port number 129 [ 124.480466][T21997] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 124.517176][T22010] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.847682][T22089] __nla_validate_parse: 21 callbacks suppressed [ 124.847698][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8195'. [ 124.847726][T22089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8195'. [ 124.853399][T22083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.917179][T22104] futex_wake_op: syz.1.8203 tries to shift op by 32; fix this program [ 125.052362][T22133] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8216'. [ 125.153287][T22151] bond3: option arp_interval: invalid value (18446744073709551611) [ 125.153310][T22151] bond3: option arp_interval: allowed values 0 - 2147483647 [ 125.159525][T22151] bond3 (unregistering): Released all slaves [ 125.263220][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8236'. [ 125.398842][T22205] No source specified [ 125.420626][T22208] validate_nla: 6 callbacks suppressed [ 125.420642][T22208] netlink: 'syz.3.8248': attribute type 1 has an invalid length. [ 125.658045][T22262] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.720434][T22275] loop2: detected capacity change from 0 to 512 [ 125.728921][T22280] tmpfs: Bad value for 'mpol' [ 125.729687][T22275] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.733004][T22275] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 125.745477][T22275] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.8280: iget: bad i_size value: 360287970189639680 [ 125.745504][T22275] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.746035][T22275] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.8280: couldn't read orphan inode 15 (err -117) [ 125.746056][T22275] loop2: lost filesystem error report for type 5 error -117 [ 125.746709][T22275] EXT4-fs mount: 62 callbacks suppressed [ 125.746719][T22275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.768563][T22284] loop1: detected capacity change from 0 to 512 [ 125.769242][T22284] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 125.772811][T22275] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 125.773232][T22275] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.8280: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 125.814005][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.814038][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.831445][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.190003][T22356] loop4: detected capacity change from 0 to 512 [ 126.192489][T22356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.204592][T22356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.207328][T22356] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.8316: bad orphan inode 131083 [ 126.207954][T22356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.237851][T22356] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.8316: Logical block already allocated [ 126.280367][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.301371][T22369] loop3: detected capacity change from 0 to 512 [ 126.314059][T22369] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.331854][T22369] EXT4-fs (loop3): 1 truncate cleaned up [ 126.332331][T22369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.341411][T22369] EXT4-fs error (device loop3): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.3.8322: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 126.341715][T22369] EXT4-fs error (device loop3) in ext4_delete_entry:2746: Corrupt filesystem [ 126.341937][T22369] EXT4-fs warning (device loop3): ext4_rename_delete:3741: inode #2: comm syz.3.8322: Deleting old file: nlink 4, error=-117 [ 126.365155][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.389011][T22375] binder: 22373:22375 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 126.389036][T22375] binder: 22375 RLIMIT_NICE not set [ 126.427483][T22382] loop1: detected capacity change from 0 to 4096 [ 126.473531][T22382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.495158][T22382] EXT4-fs error (device loop1): ext4_generic_delete_entry:2675: inode #2: block 16: comm syz.1.8328: bad entry in directory: inode out of bounds - offset=24, inode=41227, rec_len=20, size=4096 fake=0 [ 126.496269][T22382] EXT4-fs error (device loop1) in ext4_delete_entry:2746: Corrupt filesystem [ 126.496438][T22382] EXT4-fs warning (device loop1): ext4_rename_delete:3741: inode #2: comm syz.1.8328: Deleting old file: nlink 4, error=-117 [ 126.520598][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.552065][T22403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.552113][T22403] ext4 filesystem being mounted at /1753/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.559843][T22403] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.8337: Freeing blocks not in datazone - block = 0, count = 16 [ 126.570503][T22405] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8339'. [ 126.570671][T22403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.8337: bg 0: block 112: padding at end of block bitmap is not set [ 126.574951][T22403] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 126.597623][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.634536][T22417] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 126.705987][T22432] overlayfs: unescaped trailing colons in lowerdir mount option. [ 126.803454][T22453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8362'. [ 126.834534][T22462] openvswitch: netlink: Message has 2 unknown bytes. [ 126.898071][T22476] bond4: entered allmulticast mode [ 126.898250][T22476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.939674][T22486] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.005502][T22502] set_capacity_and_notify: 1 callbacks suppressed [ 127.005518][T22502] loop0: detected capacity change from 0 to 512 [ 127.012225][T22508] loop3: detected capacity change from 0 to 512 [ 127.012578][T22508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.039714][T22502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.039766][T22502] ext4 filesystem being mounted at /1699/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.040771][T22508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.040827][T22508] ext4 filesystem being mounted at /1593/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.053717][T22502] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.8384: verity file corrupted; can't find descriptor [ 127.062975][T22502] EXT4-fs (loop0): Remounting filesystem read-only [ 127.062992][T22502] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 127.086893][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.091047][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.221170][T22547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8406'. [ 127.221190][T22547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8406'. [ 127.326456][T22570] netlink: 'syz.1.8416': attribute type 15 has an invalid length. [ 127.326477][T22570] netlink: 'syz.1.8416': attribute type 7 has an invalid length. [ 127.337756][T22572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8417'. [ 127.337774][T22572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8417'. [ 127.348660][ T30] audit: type=1326 audit(2000526931.393:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22576 comm="syz.4.8419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 127.348735][ T30] audit: type=1326 audit(2000526931.393:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22576 comm="syz.4.8419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 127.349865][ T30] audit: type=1326 audit(2000526931.393:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22576 comm="syz.4.8419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 127.350582][ T30] audit: type=1326 audit(2000526931.393:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22576 comm="syz.4.8419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 127.350666][T22578] netlink: 'syz.2.8418': attribute type 2 has an invalid length. [ 127.350688][ T30] audit: type=1326 audit(2000526931.393:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22576 comm="syz.4.8419" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 127.361056][T22578] : entered promiscuous mode [ 127.395044][T22575] xt_CT: No such helper "pptp" [ 127.413121][T22587] tmpfs: Bad value for 'mpol' [ 127.441528][T22590] loop2: detected capacity change from 0 to 256 [ 127.562709][T22611] loop4: detected capacity change from 0 to 8192 [ 127.564743][ T30] audit: type=1326 audit(2000526931.613:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22612 comm="syz.0.8437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 127.571916][T22611] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.579127][ T30] audit: type=1326 audit(2000526931.623:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22612 comm="syz.0.8437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 127.582774][T22611] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 127.582792][T22611] FAT-fs (loop4): Filesystem has been set read-only [ 127.599893][T22611] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 127.600747][T22611] FAT-fs (loop4): error, clusters badly computed (3 != 2) [ 127.601279][T22611] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 127.601542][T22611] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 127.609984][T22611] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 127.613135][T22611] FAT-fs (loop4): error, clusters badly computed (7 != 6) [ 127.616866][T22611] FAT-fs (loop4): error, clusters badly computed (8 != 7) [ 127.629741][T22611] FAT-fs (loop4): error, clusters badly computed (9 != 8) [ 127.633350][T22611] FAT-fs (loop4): error, clusters badly computed (10 != 9) [ 127.956178][T22686] loop4: detected capacity change from 0 to 512 [ 127.956548][T22686] EXT4-fs: Ignoring removed i_version option [ 127.998882][T22686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.998933][T22686] ext4 filesystem being mounted at /1780/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.036261][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.071152][T22708] loop0: detected capacity change from 0 to 8 [ 128.086559][T22712] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.134680][T22719] overlayfs: conflicting options: nfs_export=on,index=off [ 128.181438][T22732] loop3: detected capacity change from 0 to 8 [ 128.208448][T22732] SQUASHFS error: Failed to read block 0x6e6: -5 [ 128.208464][T22732] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.208471][T22732] SQUASHFS error: Unable to read directory block [6aa:26] [ 128.265098][T22742] loop2: detected capacity change from 0 to 256 [ 128.318856][T22757] loop4: detected capacity change from 0 to 512 [ 128.370065][T22757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.370135][T22757] ext4 filesystem being mounted at /1787/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.412413][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.422789][T22777] loop0: detected capacity change from 0 to 256 [ 128.425983][T22777] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 128.477316][ T54] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 128.527320][T22794] netlink: 'syz.0.8522': attribute type 29 has an invalid length. [ 128.574677][T22807] netlink: 'syz.4.8531': attribute type 15 has an invalid length. [ 128.740546][T22839] EXT4-fs: Ignoring removed nobh option [ 128.740595][T22839] EXT4-fs: Ignoring removed bh option [ 128.752846][T22839] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 128.792011][T22839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 128.792049][T22839] System zones: 0-1, 3-12 [ 128.792620][T22839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.827979][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.829270][T22858] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.935947][T22874] EXT4-fs: Ignoring removed orlov option [ 128.936258][T22882] netlink: 'syz.1.8566': attribute type 1 has an invalid length. [ 128.975648][T22874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.017027][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.301661][T22934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.545108][T22988] netlink: 'syz.4.8618': attribute type 1 has an invalid length. [ 129.545127][T22988] netlink: 'syz.4.8618': attribute type 3 has an invalid length. [ 129.913110][T23061] EXT4-fs: Ignoring removed bh option [ 129.918562][T23059] __nla_validate_parse: 10 callbacks suppressed [ 129.918575][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8653'. [ 129.934001][T23061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.977542][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.074648][T23092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8667'. [ 130.271905][T23135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 130.307715][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.410644][T23158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8700'. [ 130.410691][T23158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8700'. [ 130.435159][T23163] netlink: 'syz.0.8702': attribute type 1 has an invalid length. [ 130.573699][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8718'. [ 130.573731][T23193] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8718'. [ 130.630166][T23206] netlink: 'syz.1.8725': attribute type 32 has an invalid length. [ 130.637845][T23208] netlink: 'syz.3.8727': attribute type 3 has an invalid length. [ 130.740020][T23219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.770686][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.818321][T23247] netlink: 'syz.1.8740': attribute type 2 has an invalid length. [ 130.838382][T23250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.006139][T23285] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 131.121248][T23298] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.215199][T23308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 131.215250][T23308] System zones: 1-12 [ 131.215899][T23308] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.8772: missing EA_INODE flag [ 131.215916][T23308] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 131.218210][T23308] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8772: error while reading EA inode 12 err=-117 [ 131.218233][T23308] fserror_report: 1 callbacks suppressed [ 131.218240][T23308] loop2: lost filesystem error report for type 5 error -117 [ 131.218949][T23308] EXT4-fs (loop2): 1 orphan inode deleted [ 131.219420][T23308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.243410][T23308] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #2: comm syz.2.8772: invalid size [ 131.314471][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.364165][T23338] IPv6: Can't replace route, no match found [ 131.411868][T23346] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.462612][T23346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.462665][T23346] ext4 filesystem being mounted at /1851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.463333][T23352] bond3: Unable to set up delay as MII monitoring is disabled [ 131.474429][T23352] bond3 (unregistering): Released all slaves [ 131.509211][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.628972][T23375] random: crng reseeded on system resumption [ 131.635160][T23372] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.649121][T23375] hibernate: Hibernate image not generated by this kernel! [ 131.649131][T23375] PM: hibernation: Image mismatch: architecture specific data [ 131.683645][T23376] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8804'. [ 131.687799][T23372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.690575][T23385] netlink: 'syz.0.8807': attribute type 1 has an invalid length. [ 131.735145][T23372] EXT4-fs error (device loop1): ext4_get_first_dir_block:3562: inode #11: comm syz.1.8802: directory missing '..' [ 131.758408][T23372] EXT4-fs (loop1): Remounting filesystem read-only [ 131.779320][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.017058][T23426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8827'. [ 132.035941][T23427] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 132.082031][T23437] netlink: 'syz.3.8832': attribute type 1 has an invalid length. [ 132.098596][T23443] netlink: 'syz.0.8836': attribute type 3 has an invalid length. [ 132.098635][T23443] netlink: 'syz.0.8836': attribute type 3 has an invalid length. [ 132.098652][T23443] netlink: 'syz.0.8836': attribute type 3 has an invalid length. [ 132.098667][T23443] netlink: 'syz.0.8836': attribute type 3 has an invalid length. [ 132.181046][T23456] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.201260][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8845'. [ 132.235290][T23457] set_capacity_and_notify: 11 callbacks suppressed [ 132.235305][T23457] loop1: detected capacity change from 0 to 256 [ 132.262963][T23467] loop2: detected capacity change from 0 to 512 [ 132.282743][T23467] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.288848][T23467] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 132.311231][T23467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.314868][T23474] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=1]' in ctrl creation request [ 132.352030][T23480] loop3: detected capacity change from 0 to 1024 [ 132.376641][T23481] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 132.378002][T23480] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.380504][T23467] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.8848: Invalid inode bitmap blk 0 in block_group 0 [ 132.380528][T23467] loop2: lost filesystem error report for type 5 error -117 [ 132.382614][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 132.382628][ C1] EXT4-fs (loop2): initial error at time 2000526936: ext4_read_inode_bitmap:141 [ 132.382644][ C1] EXT4-fs (loop2): last error at time 2000526936: ext4_read_inode_bitmap:141 [ 132.398614][T23480] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.8854: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.398640][T23480] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.398809][T23480] __quota_error: 6 callbacks suppressed [ 132.398816][T23480] Quota error (device loop3): write_blk: dquota write failed [ 132.398829][T23480] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 132.398852][T23480] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.8854: Failed to acquire dquot type 0 [ 132.398863][T23480] loop3: lost filesystem error report for type 5 error -117 [ 132.398997][T23480] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.8854: Freeing blocks not in datazone - block = 0, count = 4096 [ 132.399009][T23480] loop3: lost filesystem error report for type 5 error -117 [ 132.399139][T23480] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.8854: Invalid inode bitmap blk 0 in block_group 0 [ 132.399150][T23480] loop3: lost filesystem error report for type 5 error -117 [ 132.399496][T23480] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 132.399521][T23480] loop3: lost filesystem error report for type 5 error -117 [ 132.399637][T23480] EXT4-fs (loop3): 1 orphan inode deleted [ 132.400104][T23480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.436995][ T1235] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.437608][ T1235] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 132.437629][ T1235] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 132.439936][T23467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.474230][ T1235] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.500503][ T1235] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 132.500529][ T1235] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 132.511394][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.525995][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8859'. [ 132.576843][T23492] loop0: detected capacity change from 0 to 1024 [ 132.675532][T23492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.826729][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.066572][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.151043][T23516] cgroup: name respecified [ 133.360479][T23541] binder: 23539 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 133.360494][T23541] binder: 23539:23541 ioctl c018620c 20000100 returned -22 [ 133.761309][T23589] dlm: no locking on control device [ 133.848336][T23600] loop1: detected capacity change from 0 to 256 [ 134.413866][T23653] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.413887][T23653] block device autoloading is deprecated and will be removed. [ 135.014546][T23715] __nla_validate_parse: 8 callbacks suppressed [ 135.014565][T23715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8968'. [ 135.110161][T23723] loop0: detected capacity change from 0 to 256 [ 135.378693][T23740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8980'. [ 135.624789][T23769] syz.2.8995: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 135.624845][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.2.8995 Not tainted syzkaller #0 PREEMPT [ 135.624857][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 135.624863][T23769] Call trace: [ 135.624866][T23769] show_stack+0x2c/0x3c (C) [ 135.624886][T23769] __dump_stack+0x30/0x40 [ 135.624901][T23769] dump_stack_lvl+0xd8/0x12c [ 135.624912][T23769] dump_stack+0x1c/0x28 [ 135.624923][T23769] warn_alloc+0x1c4/0x1d8 [ 135.624932][T23769] __vmalloc_node_range_noprof+0x110/0xe9c [ 135.624945][T23769] __vmalloc_node_noprof+0xec/0x14c [ 135.624955][T23769] vmalloc_noprof+0x3c/0x4c [ 135.624964][T23769] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 135.624977][T23769] dvb_demux_do_ioctl+0x3e0/0x4bc [ 135.624988][T23769] dvb_usercopy+0x2a4/0x4d4 [ 135.624999][T23769] dvb_demux_ioctl+0x3c/0x54 [ 135.625009][T23769] __arm64_sys_ioctl+0x154/0x1cc [ 135.625022][T23769] invoke_syscall+0x98/0x244 [ 135.625034][T23769] el0_svc_common+0xec/0x23c [ 135.625046][T23769] do_el0_svc+0x4c/0x5c [ 135.625057][T23769] el0_svc+0x60/0x1d8 [ 135.625070][T23769] el0t_64_sync_handler+0x44/0x104 [ 135.625081][T23769] el0t_64_sync+0x198/0x19c [ 135.627804][T23769] Mem-Info: [ 135.627819][T23769] active_anon:28 inactive_anon:10262 isolated_anon:0 [ 135.627819][T23769] active_file:2498 inactive_file:4339 isolated_file:0 [ 135.627819][T23769] unevictable:768 dirty:426 writeback:0 [ 135.627819][T23769] slab_reclaimable:10020 slab_unreclaimable:93733 [ 135.627819][T23769] mapped:28987 shmem:941 pagetables:1182 [ 135.627819][T23769] sec_pagetables:0 bounce:0 [ 135.627819][T23769] kernel_misc_reclaimable:0 [ 135.627819][T23769] free:1469396 free_pcp:8409 free_cma:7616 [ 135.627857][T23769] Node 0 active_anon:112kB inactive_anon:41048kB active_file:9992kB inactive_file:17356kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115948kB dirty:1704kB writeback:0kB shmem:3764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9200kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 135.627880][T23769] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 135.627905][T23769] lowmem_reserve[]: 0 0 3652 3652 3652 [ 135.627925][T23769] Node 0 Normal free:2799696kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:112kB inactive_anon:41048kB active_file:9992kB inactive_file:17356kB unevictable:3072kB writepending:1704kB zspages:0kB present:5242880kB managed:3739800kB mlocked:0kB bounce:0kB free_pcp:33636kB local_pcp:18200kB free_cma:0kB [ 135.627950][T23769] lowmem_reserve[]: 0 0 0 0 0 [ 135.627968][T23769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 135.628136][T23769] Node 0 Normal: 618*4kB (UM) 873*8kB (UM) 529*16kB (UME) 1461*32kB (UME) 892*64kB (UME) 303*128kB (UME) 157*256kB (UM) 86*512kB (UM) 33*1024kB (UME) 19*2048kB (UME) 606*4096kB (UM) = 2799648kB [ 135.628218][T23769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.628225][T23769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 135.628232][T23769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 135.628239][T23769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 135.628246][T23769] 7767 total pagecache pages [ 135.628249][T23769] 0 pages in swap cache [ 135.628253][T23769] Free swap = 124996kB [ 135.628257][T23769] Total swap = 124996kB [ 135.628260][T23769] 2097152 pages RAM [ 135.628264][T23769] 0 pages HighMem/MovableOnly [ 135.628267][T23769] 392154 pages reserved [ 135.628271][T23769] 8192 pages cma reserved [ 135.628274][T23769] 4 pages hwpoisoned [ 135.658166][T23771] loop1: detected capacity change from 0 to 512 [ 135.728103][T23771] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.728123][T23771] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 135.728152][T23771] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.728267][T23771] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.729074][T23771] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 135.729128][T23771] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.729143][T23771] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 135.729366][T23771] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.8998: bad orphan inode 16 [ 135.729389][T23771] loop1: lost filesystem error report for type 5 error -117 [ 135.729895][T23771] ext4_test_bit(bit=15, block=18) = 1 [ 135.729909][T23771] is_bad_inode(inode)=0 [ 135.729914][T23771] NEXT_ORPHAN(inode)=0 [ 135.729918][T23771] max_ino=32 [ 135.729922][T23771] i_nlink=2 [ 135.730391][T23771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.762581][T23771] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 135.765078][T23774] deleting an unspecified loop device is not supported. [ 135.793236][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.811237][T23784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9001'. [ 135.938332][T23802] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.047998][T23815] validate_nla: 50 callbacks suppressed [ 136.048015][T23815] netlink: 'syz.3.9019': attribute type 21 has an invalid length. [ 136.048051][T23815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9019'. [ 136.062315][T23817] loop0: detected capacity change from 0 to 1024 [ 136.066129][T23817] ext4: Unknown parameter 'noacl' [ 136.121312][T23820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.252288][T23830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'. [ 136.252320][T23830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9025'. [ 136.290862][T23834] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 136.379078][T23846] loop1: detected capacity change from 0 to 8 [ 136.402703][T23846] SQUASHFS error: Unable to read directory block [631:26] [ 136.620896][T23852] loop0: detected capacity change from 0 to 8 [ 136.627003][T23852] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 136.627012][T23852] unable to read xattr id index table [ 137.153034][T23900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.259869][T23900] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 623: comm syz.4.9060: Attempting to read directory block (623) that is past i_size (638464) [ 137.261602][T23933] set_capacity_and_notify: 1 callbacks suppressed [ 137.261613][T23933] loop2: detected capacity change from 0 to 512 [ 137.281046][T23933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 137.281101][T23933] System zones: 1-12 [ 137.281232][T23933] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.9069: Directory hole found for htree index block 0 [ 137.281252][T23933] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 137.282032][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 137.282049][ C1] EXT4-fs (loop2): initial error at time 2000526941: dx_probe:791: inode 2 [ 137.282068][ C1] EXT4-fs (loop2): last error at time 2000526941: dx_probe:791: inode 2 [ 137.300605][T23933] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 137.300651][T23933] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.9069: Directory hole found for htree index block 0 [ 137.300666][T23933] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 137.303805][T23933] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 137.304451][T23933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.343114][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.354881][T23933] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 137.411373][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.597414][T23966] loop4: detected capacity change from 0 to 512 [ 137.624132][T23966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.624182][T23966] ext4 filesystem being mounted at /1892/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.978429][T24011] netlink: 'syz.3.9106': attribute type 8 has an invalid length. [ 138.023165][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.173085][T24027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9113'. [ 138.348718][T24052] loop1: detected capacity change from 0 to 1024 [ 138.371082][T24052] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.392643][T24052] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 138.392690][T24052] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.392701][T24052] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.9126: Failed to acquire dquot type 0 [ 138.392713][T24052] loop1: lost filesystem error report for type 5 error -5 [ 138.397085][T24052] EXT4-fs (loop1): 1 truncate cleaned up [ 138.397548][T24052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.416733][T24052] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 138.416772][T24052] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.416782][T24052] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.9126: Failed to acquire dquot type 0 [ 138.453561][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.494026][T24066] tc_dump_action: action bad kind [ 138.567921][T24070] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 138.582254][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9138'. [ 138.582275][T24078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9138'. [ 138.661191][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9142'. [ 138.815889][T24106] nvme_fabrics: missing parameter 'traddr=%s' [ 139.058832][T24137] netlink: 'syz.4.9167': attribute type 1 has an invalid length. [ 139.134318][ T30] audit: type=1326 audit(2000526943.184:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.134563][ T30] audit: type=1326 audit(2000526943.184:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.137786][ T30] audit: type=1326 audit(2000526943.184:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.137867][ T30] audit: type=1326 audit(2000526943.184:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.137935][ T30] audit: type=1326 audit(2000526943.184:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.138014][ T30] audit: type=1326 audit(2000526943.184:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24147 comm="syz.1.9172" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 139.383656][T24168] ieee802154 phy0 wpan0: encryption failed: -90 [ 139.462055][T24185] netlink: 'syz.0.9188': attribute type 11 has an invalid length. [ 139.477452][T24189] loop2: detected capacity change from 0 to 128 [ 139.492150][T24189] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 139.504722][T24189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 139.522434][T24189] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 139.530338][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.681572][T24215] xt_hl: Unknown TTL match mode: 237 [ 139.719112][T24219] x_tables: duplicate entry at hook 1 [ 139.965850][T24250] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.056179][T24252] bond5 (unregistering): Released all slaves [ 140.087957][T24269] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.188066][T24281] SET target dimension over the limit! [ 140.384100][T24310] netlink: 'syz.4.9250': attribute type 21 has an invalid length. [ 140.386321][T24306] __nla_validate_parse: 2 callbacks suppressed [ 140.386333][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9249'. [ 140.631935][T24348] ip6gre0: entered promiscuous mode [ 140.631954][T24348] ip6gre0: entered allmulticast mode [ 140.648438][T24348] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 140.660101][T24351] netlink: 'syz.1.9270': attribute type 3 has an invalid length. [ 140.683955][T24354] loop4: detected capacity change from 0 to 512 [ 140.730778][ T54] IPVS: starting estimator thread 0... [ 140.742231][T24354] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.9271: invalid block [ 140.742259][T24354] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.751614][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 140.751627][ C1] EXT4-fs (loop4): initial error at time 2000526944: __ext4_iget:5592: inode 11: block 1 [ 140.751646][ C1] EXT4-fs (loop4): last error at time 2000526944: __ext4_iget:5592: inode 11: block 1 [ 140.761673][T24354] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.9271: couldn't read orphan inode 11 (err -117) [ 140.761697][T24354] loop4: lost filesystem error report for type 5 error -117 [ 140.763150][T24354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.821786][T24362] IPVS: using max 61 ests per chain, 146400 per kthread [ 140.834774][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.851319][T24371] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9281'. [ 140.851337][T24371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.084337][T24389] loop4: detected capacity change from 0 to 256 [ 141.345210][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9298'. [ 141.413450][T24414] overlayfs: conflicting options: nfs_export=on,index=off [ 141.573271][T24426] loop0: detected capacity change from 0 to 512 [ 141.647047][T24426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.647104][T24426] ext4 filesystem being mounted at /1913/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.740522][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.008914][T24491] binder: 24490:24491 ERROR: BC_REGISTER_LOOPER called without request [ 142.008933][T24491] binder: 24490:24491 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 142.008943][T24491] binder: 24490:24491 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 142.065696][T24498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9340'. [ 142.137649][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9348'. [ 142.137670][T24514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9348'. [ 142.137772][T24512] netlink: 'syz.4.9346': attribute type 26 has an invalid length. [ 142.161788][T24516] ip6tnl1: entered promiscuous mode [ 142.388965][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9362'. [ 142.477920][T24561] No source specified [ 142.534514][T24569] loop2: detected capacity change from 0 to 1024 [ 142.577028][T24569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.622752][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.672029][T24583] xt_time: unknown flags 0x4 [ 142.908707][T24624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9401'. [ 142.908743][T24624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.908751][T24624] IPv6: NLM_F_CREATE should be set when creating new route [ 142.908766][T24624] IPv6: NLM_F_CREATE should be set when creating new route [ 142.999771][T24640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9410'. [ 143.133000][T24658] geneve3: entered promiscuous mode [ 143.689866][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9448'. [ 143.690244][T24719] bridge0: port 3(veth1_to_bridge) entered blocking state [ 143.690334][T24719] bridge0: port 3(veth1_to_bridge) entered disabled state [ 143.690440][T24719] veth1_to_bridge: entered allmulticast mode [ 143.699058][T24719] veth1_to_bridge: entered promiscuous mode [ 143.699179][T24719] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 143.699374][T24719] bridge0: port 3(veth1_to_bridge) entered blocking state [ 143.699406][T24719] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 143.956360][T24736] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.261777][T24771] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 144.486819][T24791] netlink: zone id is out of range [ 144.486834][T24791] netlink: zone id is out of range [ 144.486851][T24791] netlink: zone id is out of range [ 144.585072][T24803] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 144.652793][T24811] netlink: del zone limit has 4 unknown bytes [ 144.759196][T24821] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 144.807918][T24833] loop4: detected capacity change from 0 to 256 [ 144.851475][T24841] bond0: Error: Cannot enslave bond to itself. [ 144.906178][T24845] netlink: 'syz.1.9511': attribute type 16 has an invalid length. [ 144.906197][T24845] netlink: 'syz.1.9511': attribute type 17 has an invalid length. [ 144.906207][T24845] netlink: 'syz.1.9511': attribute type 27 has an invalid length. [ 144.912068][T24843] dlm: plock device version mismatch: kernel (1.2.0), user (1869670251.552346378.528026997) [ 144.986523][T24857] openvswitch: netlink: IP tunnel dst address not specified [ 144.994167][T24859] ipt_ah: unknown flags FF [ 145.154923][T24881] trusted_key: encrypted_key: master key parameter is missing [ 145.257361][T24894] sctp: [Deprecated]: syz.1.9534 (pid 24894) Use of int in max_burst socket option. [ 145.257361][T24894] Use struct sctp_assoc_value instead [ 145.338156][T24907] bridge6: entered promiscuous mode [ 145.344218][T24901] nvme_rdma: malformed src address passed: 12w.0.0.1 [ 145.564965][T24946] __nla_validate_parse: 5 callbacks suppressed [ 145.564983][T24946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9559'. [ 145.814630][T24983] loop2: detected capacity change from 0 to 512 [ 145.814970][T24983] EXT4-fs: Ignoring removed nobh option [ 145.825746][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9577'. [ 145.826341][T24983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.845980][T24983] EXT4-fs (loop2): 1 truncate cleaned up [ 145.846430][T24983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.887826][T24988] loop3: detected capacity change from 0 to 1024 [ 145.905934][T24988] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.924278][T24988] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.9579: lblock 2 mapped to illegal pblock 2 (length 1) [ 145.924304][T24988] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 145.924394][T24988] __quota_error: 3 callbacks suppressed [ 145.924401][T24988] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 145.924425][T24988] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.9579: Invalid inode table block 1 in block_group 0 [ 145.924437][T24988] loop3: lost filesystem error report for type 5 error -117 [ 145.924511][T24988] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 145.924520][T24988] loop3: lost filesystem error report for type 5 error -117 [ 145.924587][T24988] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.9579: mark_inode_dirty error [ 145.924598][T24988] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 145.927606][T24988] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 145.927625][T24988] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.9579: Failed to acquire dquot type 0 [ 145.927641][T24988] loop3: lost filesystem error report for type 5 error -117 [ 145.927912][T24988] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 145.927926][T24988] loop3: lost filesystem error report for type 5 error -117 [ 145.928020][T24988] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.9579: mark_inode_dirty error [ 145.928035][T24988] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.928669][T24988] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 145.928740][T24988] EXT4-fs (loop3): 1 orphan inode deleted [ 145.929222][T24988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.978529][ T3743] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.978809][ T3743] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 145.978828][ T3743] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0 [ 145.992179][T24988] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 16: comm syz.3.9579: lblock 0 mapped to illegal pblock 16 (length 1) [ 146.005706][T24988] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.9579: Invalid inode table block 1 in block_group 0 [ 146.009461][T24988] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 146.010524][T24988] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz.3.9579: mark_inode_dirty error [ 146.052821][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.081588][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.087611][ T4707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 146.087627][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 146.090975][ T4707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 146.090989][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 146.091238][ T4707] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 146.091255][ T4707] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 146.092253][ T4707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 146.092281][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 146.328838][T25033] tmpfs: Bad value for 'mpol' [ 146.341589][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 146.344212][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 146.344444][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 146.468534][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9608'. [ 146.525814][T25028] infiniband syz2: set active [ 146.527491][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 146.538372][T25028] infiniband syz2: added vxcan1 [ 146.580249][T25028] RDS/IB: syz2: added [ 146.580278][T25028] smc: adding ib device syz2 with port count 1 [ 146.580291][T25028] smc: ib device syz2 port 1 has no pnetid [ 146.580335][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 146.588436][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 146.596260][T25055] veth1_to_hsr: entered allmulticast mode [ 146.820308][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 146.832047][T25074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9620'. [ 146.832082][T25074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9620'. [ 146.937653][T25079] loop1: detected capacity change from 0 to 4096 [ 146.966990][T25079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.016702][T25088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9626'. [ 147.016727][T25088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9626'. [ 147.039839][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 147.048837][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.123033][T25092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9630'. [ 147.134945][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 147.191049][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 147.234012][T25028] vxcan1 speed is unknown, defaulting to 1000 [ 147.260451][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9633'. [ 147.286021][T25069] lo speed is unknown, defaulting to 1000 [ 147.286053][T25069] lo speed is unknown, defaulting to 1000 [ 147.288235][T25069] lo speed is unknown, defaulting to 1000 [ 147.288979][T25069] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.303815][T25069] infiniband s!0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.323396][T25069] lo speed is unknown, defaulting to 1000 [ 147.323796][T25069] lo speed is unknown, defaulting to 1000 [ 147.324114][T25069] lo speed is unknown, defaulting to 1000 [ 147.324443][T25069] lo speed is unknown, defaulting to 1000 [ 147.324742][T25069] lo speed is unknown, defaulting to 1000 [ 147.325066][T25069] lo speed is unknown, defaulting to 1000 [ 147.401156][T25109] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.402726][T25117] netlink: 'syz.4.9641': attribute type 9 has an invalid length. [ 147.597595][T25127] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.678012][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9653'. [ 147.763760][T25153] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 148.372707][T25218] netlink: 'syz.2.9690': attribute type 29 has an invalid length. [ 148.386968][T25217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.429538][T25224] 9pnet_fd: p9_fd_create_unix (25224): problem connecting socket: ./file0/file0: -20 [ 148.506044][T25238] netlink: 'syz.3.9701': attribute type 10 has an invalid length. [ 148.601645][T25246] loop0: detected capacity change from 0 to 4096 [ 148.602019][T25246] EXT4-fs: Ignoring removed orlov option [ 148.618220][T25246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.618246][T25246] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.628640][T25246] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 148.628700][T25246] System zones: 0-5 [ 148.634974][T25256] netlink: 'syz.4.9708': attribute type 1 has an invalid length. [ 148.656260][T25246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.9705: bg 0: block 98: padding at end of block bitmap is not set [ 148.660677][T25246] EXT4-fs (loop0): Remounting filesystem read-only [ 148.717891][T25264] binder: 25262:25264 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 148.717910][T25264] binder: 25262:25264 ioctl c0306201 20000040 returned -22 [ 148.782207][T25275] loop4: detected capacity change from 0 to 256 [ 148.796431][T25273] netlink: 'syz.1.9715': attribute type 11 has an invalid length. [ 148.796447][T25273] netlink: 'syz.1.9715': attribute type 4 has an invalid length. [ 148.867511][T25285] loop3: detected capacity change from 0 to 512 [ 148.904972][T25285] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #15: comm syz.3.9723: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 149.525675][T25366] rdma_rxe: rxe_newlink: failed to add wlan1 [ 149.638980][T25391] loop3: detected capacity change from 0 to 256 [ 149.725525][T25400] netlink: 'syz.2.9780': attribute type 1 has an invalid length. [ 149.743625][T25394] loop0: detected capacity change from 0 to 256 [ 149.845203][T25391] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 149.845225][T25391] FAT-fs (loop3): Filesystem has been set read-only [ 149.875485][T25394] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.876571][T25412] netlink: 'syz.1.9786': attribute type 3 has an invalid length. [ 149.916868][T25394] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 149.942033][T25418] loop2: detected capacity change from 0 to 8 [ 149.957410][T25418] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 149.957422][T25418] unable to read xattr id index table [ 149.997247][T25423] netlink: 'syz.0.9791': attribute type 1 has an invalid length. [ 149.997265][T25423] netlink: 'syz.0.9791': attribute type 2 has an invalid length. [ 150.200695][T25452] xt_HMARK: proto mask must be zero with L3 mode [ 150.531958][T25487] ./file0: Can't lookup blockdev [ 150.686320][T25507] netlink: 'syz.4.9834': attribute type 5 has an invalid length. [ 150.791941][ T4810] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 150.791962][ T4810] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 150.791971][ T4810] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 150.791980][ T4810] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 150.791988][ T4810] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 150.793994][ T4810] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 150.836900][T25526] loop1: detected capacity change from 0 to 256 [ 150.851667][T25524] fido_id[25524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.891651][T25532] ubi0: attaching mtd0 [ 150.892338][T25532] ubi0: scanning is finished [ 150.892347][T25532] ubi0: empty MTD device detected [ 150.914453][T25535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.113606][T25532] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 151.113629][T25532] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 151.113637][T25532] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 151.113644][T25532] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 151.113651][T25532] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 151.113658][T25532] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 151.113664][T25532] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 908020309 [ 151.113672][T25532] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 151.114316][T25559] ubi0: background thread "ubi_bgt0d" started, PID 25559 [ 151.244197][T25566] __nla_validate_parse: 8 callbacks suppressed [ 151.244212][T25566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9862'. [ 151.652334][T25633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.773933][T25654] loop0: detected capacity change from 0 to 256 [ 151.943541][T25673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9913'. [ 152.043898][T25687] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.288428][T25720] bridge0: port 4(syz_tun) entered blocking state [ 152.288535][T25720] bridge0: port 4(syz_tun) entered disabled state [ 152.288722][T25720] syz_tun: entered allmulticast mode [ 152.289254][T25720] syz_tun: entered promiscuous mode [ 152.289560][T25720] bridge0: port 4(syz_tun) entered blocking state [ 152.289601][T25720] bridge0: port 4(syz_tun) entered forwarding state [ 152.606452][T25734] loop1: detected capacity change from 0 to 1024 [ 152.606808][T25734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.609871][T25734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 152.609913][T25734] System zones: 0-1, 3-36 [ 153.015088][T25740] 0x000000000000-0x000000020000 : "" [ 153.030506][T25740] ftl_cs: FTL header not found. [ 153.247282][T25780] netlink: 'syz.0.9964': attribute type 2 has an invalid length. [ 153.247306][T25780] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.9964'. [ 153.292217][T25787] loop0: detected capacity change from 0 to 512 [ 153.293207][T25787] EXT4-fs: Ignoring removed nobh option [ 153.293563][T25787] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 153.294136][T25787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 153.294212][T25787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.294578][T25787] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.9970: attempt to clear invalid blocks 1024 len 1 [ 153.294592][T25787] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.294739][T25787] EXT4-fs (loop0): Remounting filesystem read-only [ 153.295042][T25787] EXT4-fs (loop0): 1 truncate cleaned up [ 153.577345][T25810] bond5: entered allmulticast mode [ 153.577494][T25810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.622296][T25821] netlink: 'syz.0.9984': attribute type 21 has an invalid length. [ 153.855333][T25854] netlink: 'syz.2.10000': attribute type 1 has an invalid length. [ 153.855353][T25854] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10000'. [ 153.896703][T25856] x_tables: ip_tables: osf match: only valid for protocol 6 [ 153.918190][T25862] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10003'. [ 153.940982][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10002'. [ 154.059494][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10011'. [ 154.081341][T25882] loop0: detected capacity change from 0 to 256 [ 154.123273][T25888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10017'. [ 154.192769][T25899] netlink: 'syz.4.10022': attribute type 15 has an invalid length. [ 154.242607][T25905] netlink: 'syz.1.10026': attribute type 10 has an invalid length. [ 154.272411][T25903] loop4: detected capacity change from 0 to 512 [ 154.342515][T25906] trusted_key: encrypted_key: hex blob is missing [ 154.393228][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10032'. [ 154.445001][T25903] ext4 filesystem being mounted at /2090/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.659825][T25944] netlink: 'syz.2.10043': attribute type 1 has an invalid length. [ 154.659842][T25944] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10043'. [ 154.798240][T25961] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 155.187128][T26021] netlink: 'syz.1.10080': attribute type 21 has an invalid length. [ 155.289633][T26035] ip6gre1: entered allmulticast mode [ 155.471167][T26058] bridge9: entered promiscuous mode [ 155.850783][T26117] xt_cluster: node mask cannot exceed total number of nodes [ 155.873049][T26121] loop1: detected capacity change from 0 to 1024 [ 155.921405][T26121] EXT4-fs mount: 10 callbacks suppressed [ 155.921422][T26121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.941151][T26121] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 38: comm syz.1.10131: bad entry in directory: directory entry overrun - offset=6912, inode=0, rec_len=1024, size=1024 fake=0 [ 155.945769][T26121] EXT4-fs (loop1): Remounting filesystem read-only [ 155.986462][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.200378][T26156] Cannot find del_set index 8192 as target [ 156.278604][T26169] loop4: detected capacity change from 0 to 2048 [ 156.313442][T26169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.374680][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.422666][T26185] __nla_validate_parse: 10 callbacks suppressed [ 156.422683][T26185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10160'. [ 156.533783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.534767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 156.586029][T26198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10166'. [ 156.663753][T26212] loop2: detected capacity change from 0 to 128 [ 156.824706][ T30] audit: type=1326 audit(2000526960.866:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26223 comm="syz.3.10179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff887798a8 code=0x7ffc0000 [ 156.825767][ T30] audit: type=1326 audit(2000526960.866:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26223 comm="syz.3.10179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=174 compat=0 ip=0xffff887798a8 code=0x7ffc0000 [ 156.825838][ T30] audit: type=1326 audit(2000526960.866:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26223 comm="syz.3.10179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff887798a8 code=0x7ffc0000 [ 156.825909][ T30] audit: type=1326 audit(2000526960.866:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26223 comm="syz.3.10179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff887798a8 code=0x7ffc0000 [ 156.933879][T26232] netlink: 'syz.0.10175': attribute type 9 has an invalid length. [ 156.933897][T26232] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10175'. [ 157.110805][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.258100][T26262] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 157.339431][T26268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10201'. [ 157.339452][T26268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10201'. [ 157.347294][T26270] netlink: 292 bytes leftover after parsing attributes in process `syz.4.10202'. [ 157.347320][T26270] netlink: 292 bytes leftover after parsing attributes in process `syz.4.10202'. [ 157.367019][T26269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10199'. [ 157.425355][T26280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 157.425374][T26280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.426111][T26280] vhci_hcd vhci_hcd.0: Device attached [ 157.447293][T26281] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 0 [ 157.452669][ T202] vhci_hcd vhci_hcd.2: stop threads [ 157.452683][ T202] vhci_hcd vhci_hcd.2: release socket [ 157.452703][ T202] vhci_hcd vhci_hcd.2: disconnect device [ 157.481769][T26284] loop1: detected capacity change from 0 to 256 [ 157.595003][T26290] tipc: Can't bind to reserved service type 2 [ 157.691082][T26297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10215'. [ 157.725252][ T30] audit: type=1326 audit(2000526961.766:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26295 comm="syz.0.10214" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 157.725277][ T30] audit: type=1326 audit(2000526961.766:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26295 comm="syz.0.10214" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 157.740658][ T30] audit: type=1326 audit(2000526961.786:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26295 comm="syz.0.10214" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 157.740751][ T30] audit: type=1326 audit(2000526961.786:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26295 comm="syz.0.10214" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 157.740825][ T30] audit: type=1326 audit(2000526961.786:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26295 comm="syz.0.10214" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff855798a8 code=0x7ffc0000 [ 157.777601][T26302] block device autoloading is deprecated and will be removed. [ 157.922554][T26316] loop1: detected capacity change from 0 to 1024 [ 157.949924][T26316] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 157.955171][T26316] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 157.955636][T26316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.022731][T26316] EXT4-fs warning (device loop1): empty_inline_dir:1785: bad inline directory (dir #12) - no `..' [ 158.035440][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.161837][T26328] loop3: detected capacity change from 0 to 8 [ 158.266225][T26350] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 158.303670][T26355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10241'. [ 158.343677][T26361] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 158.526491][T26380] tmpfs: Group quota block hardlimit too large. [ 158.813568][T26410] loop2: detected capacity change from 0 to 256 [ 158.900417][ T30] audit: type=1326 audit(2000526962.947:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26414 comm="syz.1.10271" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f798a8 code=0x7ffc0000 [ 159.030827][T26426] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.124055][T26438] netlink: 'syz.2.10282': attribute type 4 has an invalid length. [ 159.163897][T26443] loop4: detected capacity change from 0 to 4096 [ 159.166153][T26443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.264758][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.292786][T26451] loop3: detected capacity change from 0 to 1024 [ 159.296641][T26451] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.313528][T26451] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.10288: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.313550][T26451] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.313640][T26451] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.10288: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.313654][T26451] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.313725][T26451] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.10288: Failed to acquire dquot type 0 [ 159.313737][T26451] loop3: lost filesystem error report for type 5 error -117 [ 159.313843][T26451] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 159.313852][T26451] loop3: lost filesystem error report for type 5 error -117 [ 159.313923][T26451] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.10288: mark_inode_dirty error [ 159.313934][T26451] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.316661][T26451] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 159.316737][T26451] EXT4-fs (loop3): 1 orphan inode deleted [ 159.317217][T26451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.332816][ T12] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.338203][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 159.377092][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.400469][ T1235] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.400496][ T1235] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.463784][ T1235] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 159.463810][ T1235] loop3: lost filesystem error report for type 5 error -117 [ 159.464316][ T4707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.464333][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 159.464428][ T4707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 159.464437][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 159.464585][ T4707] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 159.464606][ T4707] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.464694][ T4707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.464705][ T4707] loop3: lost filesystem error report for type 5 error -117 [ 159.559917][T26470] usb usb7: usbfs: process 26470 (syz.1.10296) did not claim interface 0 before use [ 159.721935][T26483] vhci_hcd vhci_hcd.0: invalid port number 36 [ 159.721957][T26483] vhci_hcd vhci_hcd.0: invalid port number 36 [ 159.776678][T26491] netlink: 'syz.2.10304': attribute type 9 has an invalid length. [ 159.883715][T26497] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 159.887613][T26497] bond6 (unregistering): Released all slaves [ 160.199750][T26526] loop2: detected capacity change from 0 to 512 [ 160.301069][T26526] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.390106][ T4719] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 160.895001][T26579] loop4: detected capacity change from 0 to 512 [ 160.932082][T26579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.932139][T26579] ext4 filesystem being mounted at /2148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.952905][T26579] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.10346: corrupted xattr block 6: invalid header [ 160.953109][T26579] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.10346: corrupted xattr block 6: invalid header [ 160.953323][T26579] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.10346: corrupted xattr block 6: invalid header [ 160.954058][T26579] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.10346: corrupted xattr block 6: invalid header [ 160.954323][T26579] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.10346: corrupted xattr block 6: invalid header [ 161.002415][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.282003][T26612] loop2: detected capacity change from 0 to 256 [ 161.430874][T26626] netlink: 'syz.3.10368': attribute type 7 has an invalid length. [ 161.430894][T26626] netlink: 'syz.3.10368': attribute type 5 has an invalid length. [ 161.430904][T26626] __nla_validate_parse: 10 callbacks suppressed [ 161.430911][T26626] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10368'. [ 161.539168][ C0] net_ratelimit: 66527 callbacks suppressed [ 161.539183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539614][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539848][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.539926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.726917][T26652] loop1: detected capacity change from 0 to 4096 [ 161.783333][T26652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.783351][T26652] EXT4-fs (loop1): Test dummy encryption mode enabled [ 161.784979][T26652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.864771][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.294057][T26711] loop1: detected capacity change from 0 to 1024 [ 162.324904][T26708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.336590][T26711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.356560][T26711] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #11: comm syz.1.10407: empty directory 'file1' has too many links (111) [ 162.372411][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.415635][T26720] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10411'. [ 162.415655][T26720] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10411'. [ 162.471081][T26727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10414'. [ 162.471101][T26727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10414'. [ 162.471109][T26727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10414'. [ 162.471173][T26727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10414'. [ 162.471180][T26727] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10414'. [ 162.545207][T26735] SET target dimension over the limit! [ 162.924164][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10432'. [ 162.924186][T26775] netlink: 47 bytes leftover after parsing attributes in process `syz.0.10432'. [ 163.149208][T26796] tmpfs: Bad value for 'mpol' [ 163.150124][T26793] loop4: detected capacity change from 0 to 256 [ 163.230329][T26800] loop2: detected capacity change from 0 to 512 [ 163.255160][T26800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.255206][T26800] ext4 filesystem being mounted at /2123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.347615][T26812] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 163.530530][T26832] netlink: 'syz.0.10465': attribute type 10 has an invalid length. [ 163.567752][T26836] comedi comedi0: bad chanlist[1]=0x000003d9 chan=985 range length=2 [ 163.636213][T26844] netlink: 'syz.0.10471': attribute type 1 has an invalid length. [ 163.705702][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.760359][T26853] binder: 26851:26853 ioctl c0306201 0 returned -14 [ 163.763612][T26855] loop3: detected capacity change from 0 to 512 [ 163.776581][T26855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.776600][T26855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.783852][T26855] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 163.850743][T26855] EXT4-fs (loop3): 1 truncate cleaned up [ 163.851220][T26855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.925502][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.297502][T26897] nfs: Unknown parameter 'smackfstransmuteC' [ 164.380379][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 164.380395][ T30] audit: type=1326 audit(2000526968.427:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26902 comm="syz.4.10495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 164.395378][ T30] audit: type=1326 audit(2000526968.437:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26902 comm="syz.4.10495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 164.402583][ T30] audit: type=1326 audit(2000526968.437:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26902 comm="syz.4.10495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 164.402609][ T30] audit: type=1326 audit(2000526968.447:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26902 comm="syz.4.10495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 164.525449][ T30] audit: type=1326 audit(2000526968.567:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26902 comm="syz.4.10495" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d798a8 code=0x7ffc0000 [ 164.935254][T26959] loop3: detected capacity change from 0 to 512 [ 164.942844][T26959] EXT4-fs: Ignoring removed orlov option [ 164.970448][T26959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.970500][T26959] ext4 filesystem being mounted at /2032/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.005805][T26959] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.10524: corrupted xattr block 33: invalid ea_ino [ 165.005961][T26959] EXT4-fs (loop3): Remounting filesystem read-only [ 165.070142][ T4707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.285031][T26992] loop2: detected capacity change from 0 to 512 [ 165.323084][T26992] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 165.323128][T26992] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 165.323141][T26992] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.10534: Failed to acquire dquot type 1 [ 165.323151][T26992] loop2: lost filesystem error report for type 5 error -117 [ 165.323344][T26992] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 165.323380][T26992] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 165.323391][T26992] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.10534: Failed to acquire dquot type 1 [ 165.323401][T26992] loop2: lost filesystem error report for type 5 error -117 [ 165.323755][T26992] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.10534: bg 0: block 248: padding at end of block bitmap is not set [ 165.323767][T26992] loop2: lost filesystem error report for type 5 error -117 [ 165.323878][T26992] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 165.323887][T26992] loop2: lost filesystem error report for type 5 error -117 [ 165.324063][T26992] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 165.324110][T26992] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.10534: Failed to acquire dquot type 1 [ 165.324119][T26992] loop2: lost filesystem error report for type 5 error -117 [ 165.324259][T26992] EXT4-fs (loop2): 1 orphan inode deleted [ 165.324713][T26992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.324755][T26992] ext4 filesystem being mounted at /2138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.422246][T26985] loop4: detected capacity change from 0 to 512 [ 165.428393][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.439674][T26985] EXT4-fs: Invalid want_extra_isize 6 [ 165.833832][T27022] loop1: detected capacity change from 0 to 512 [ 165.946505][T27022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.963732][T27022] EXT4-fs error (device loop1): ext4_validate_block_bitmap:427: comm syz.1.10551: bg 0: bad block bitmap checksum [ 165.967526][T27022] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.10551: Failed to acquire dquot type 0 [ 166.013869][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.548539][ C0] net_ratelimit: 66988 callbacks suppressed [ 166.548554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.548638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.548716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.548794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.548870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.548947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.549023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.549099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.549174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.549260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.651141][T27090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.840449][T27109] __nla_validate_parse: 7 callbacks suppressed [ 166.840467][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10593'. [ 167.146597][T27142] loop1: detected capacity change from 0 to 128 [ 167.182912][T27142] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.183267][T27142] ext4 filesystem being mounted at /2014/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.197055][T27146] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 167.232568][ T4708] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.603439][T27179] comedi comedi0: bad chanlist[0]=0x00200004 chan=4 range length=2 [ 167.658597][T27186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10629'. [ 167.775783][T27205] netlink: 'syz.4.10639': attribute type 1 has an invalid length. [ 167.775808][T27205] netlink: 'syz.4.10639': attribute type 1 has an invalid length. [ 167.947822][T27229] netlink: 'syz.1.10651': attribute type 17 has an invalid length. [ 167.947842][T27229] netlink: 'syz.1.10651': attribute type 16 has an invalid length. [ 167.947854][T27229] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10651'. [ 168.013471][T27238] loop3: detected capacity change from 0 to 256 [ 168.068446][T27245] ip6t_rt: too many addresses specified [ 168.167607][T27257] loop1: detected capacity change from 0 to 4096 [ 168.227546][T27257] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.235745][T27268] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10671'. [ 168.236817][T27257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.271473][T27257] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 168.302263][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.311094][T27276] loop2: detected capacity change from 0 to 512 [ 168.412747][T27276] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.10673: corrupted inode contents [ 168.412770][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.415297][T27276] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #16: comm syz.2.10673: mark_inode_dirty error [ 168.415327][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.418328][T27276] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.10673: corrupted inode contents [ 168.418356][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.418730][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 168.418742][ C0] EXT4-fs (loop2): initial error at time 2000526972: ext4_do_update_inode:5801: inode 16 [ 168.418764][ C0] EXT4-fs (loop2): last error at time 2000526972: ext4_do_update_inode:5801: inode 16 [ 168.423831][T27276] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.10673: mark_inode_dirty error [ 168.423860][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.425145][T27276] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.10673: corrupted inode contents [ 168.425167][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.429997][T27276] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 168.430020][T27276] loop2: lost filesystem error report for type 5 error -117 [ 168.457236][T27276] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.10673: corrupted inode contents [ 168.457268][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.457556][T27276] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.10673: mark_inode_dirty error [ 168.457580][T27276] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.457784][T27276] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 168.457795][T27276] loop2: lost filesystem error report for type 5 error -117 [ 168.465752][T27276] EXT4-fs (loop2): 1 truncate cleaned up [ 168.466194][T27276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.466238][T27276] ext4 filesystem being mounted at /2174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.488817][ T54] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1 [ 168.550207][T27276] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 168.594447][T27304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10687'. [ 168.598937][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.644708][T27310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10686'. [ 168.724840][T27316] loop2: detected capacity change from 0 to 4096 [ 168.726116][T27316] EXT4-fs: Ignoring removed orlov option [ 168.752361][T27316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.752382][T27316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.754123][T27316] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 168.761055][T27316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.841106][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.964701][T27335] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10702'. [ 168.970607][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10705'. [ 168.970726][T27342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10705'. [ 169.005416][T27335] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10702'. [ 169.093038][T27361] xt_l2tp: missing protocol rule (udp|l2tpip) [ 169.134022][T27366] syz_tun: left allmulticast mode [ 169.134042][T27366] syz_tun: left promiscuous mode [ 169.134117][T27366] bridge0: port 4(syz_tun) entered disabled state [ 169.166031][T27366] bridge_slave_0: left allmulticast mode [ 169.166049][T27366] bridge_slave_0: left promiscuous mode [ 169.166112][T27366] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.175811][T27366] veth1_to_bridge: left allmulticast mode [ 169.175827][T27366] veth1_to_bridge: left promiscuous mode [ 169.175887][T27366] bridge0: port 3(veth1_to_bridge) entered disabled state [ 169.177052][T27366] bridge_slave_1: left allmulticast mode [ 169.177066][T27366] bridge_slave_1: left promiscuous mode [ 169.177116][T27366] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.194343][T27366] bond0: (slave 77±ÿ): Releasing backup interface [ 169.223205][T27373] netlink: 'syz.1.10719': attribute type 21 has an invalid length. [ 169.304092][T27366] bond0: (slave bond_slave_1): Releasing backup interface [ 169.362350][T27366] team0: Port device team_slave_0 removed [ 169.373195][T27366] team0: Port device team_slave_1 removed [ 169.373550][T27366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.373561][T27366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.378096][T27366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.378107][T27366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.506981][T27393] binder: 27386 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 169.507000][T27393] binder: 27386:27393 ioctl c018620c 20001400 returned -22 [ 169.525076][T27392] nvme_fabrics: missing parameter 'nqn=%s' [ 169.595584][T27410] netlink: 'syz.0.10736': attribute type 1 has an invalid length. [ 169.636750][T27416] netlink: 'syz.1.10741': attribute type 5 has an invalid length. [ 169.800511][T27442] netlink: 'syz.3.10753': attribute type 7 has an invalid length. [ 169.800527][T27442] netlink: 'syz.3.10753': attribute type 8 has an invalid length. [ 170.594514][T27555] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 170.927395][T27610] loop2: detected capacity change from 0 to 4096 [ 171.019241][T27610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.019259][T27610] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.036397][T27610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.054848][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.073979][T27632] binfmt_misc: register: failed to install interpreter ./file0 [ 171.502008][T27693] 8021q: VLANs not supported on gre0 [ 171.910222][T27744] netlink: 'syz.4.10900': attribute type 21 has an invalid length. [ 171.949087][T27748] __nla_validate_parse: 59 callbacks suppressed [ 171.949106][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10902'. [ 171.949116][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10902'. [ 172.309894][T27782] bond0: Unable to set down delay as MII monitoring is disabled [ 172.482510][T27796] Injecting memory failure for pfn 0x11d4f8 at process virtual address 0x201bd000 [ 186.783234][ T4714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.790732][ T4714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.791254][ T4714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.791582][ T4714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.791797][ T4714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.819065][ T4709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.820404][ T4709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.820856][ T4709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.821594][ T4709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.821799][ T4709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.300216][ T4713] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.301779][ T4713] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 187.302151][ T4713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.302785][ T4713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.303119][ T4713] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.303340][ T4713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.303682][ T4713] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 187.304330][ T4713] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 187.305019][ T4713] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 187.305218][ T4713] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 187.753665][ T4716] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 187.754412][ T4716] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 187.754758][ T4716] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 187.755086][ T4716] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 187.755278][ T4716] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 191.917894][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [ksoftirqd/0:15] [ 191.917913][ C0] Modules linked in: [ 191.917920][ C0] irq event stamp: 54303275 [ 191.921596][ C0] hardirqs last enabled at (54303274): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 191.924121][ C0] hardirqs last disabled at (54303275): [] el1_interrupt+0x28/0x60 [ 191.925966][ C0] softirqs last enabled at (18720954): [] handle_softirqs+0xb2c/0xcbc [ 191.928036][ C0] softirqs last disabled at (18720959): [] run_ksoftirqd+0x70/0xbc [ 191.929878][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT [ 191.929899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 191.929905][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 191.929912][ C0] pc : seqcount_lockdep_reader_access+0xd8/0xf8 [ 191.929921][ C0] lr : seqcount_lockdep_reader_access+0xd4/0xf8 [ 191.929928][ C0] sp : ffff80008ec27a80 [ 191.929931][ C0] x29: ffff80008ec27a80 x28: 1fffe00035bd3032 x27: ffff80008e7a7150 [ 191.929943][ C0] x26: dfff800000000000 x25: ffff0000efe5d780 x24: 1fffe00019c17926 [ 191.929952][ C0] x23: dfff800000000000 x22: ffff0000efe5d7b0 x21: 0000000000000000 [ 191.929962][ C0] x20: ffff800080541e68 x19: 00000000000000c0 x18: ffff800125472000 [ 191.929973][ C0] x17: ffff0001adeafe07 x16: ffff0000c1a21d94 x15: 0000000000000001 [ 191.929983][ C0] x14: 00000000041140a1 x13: 000000000000004d x12: 000000000000004d [ 191.929992][ C0] x11: ffff80008a529e28 x10: 0000000000000003 x9 : 0000000000000101 [ 191.930001][ C0] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 191.930010][ C0] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080541a54 [ 191.930019][ C0] x2 : 0000000000000080 x1 : ffff0000c1a21d80 x0 : 0000000000000000 [ 191.930029][ C0] Call trace: [ 191.930031][ C0] seqcount_lockdep_reader_access+0xd8/0xf8 (P) [ 191.930041][ C0] ktime_get+0x68/0x218 [ 191.930049][ C0] gate_get_time+0x1c/0xa4 [ 191.930059][ C0] gate_timer_func+0x1a8/0x390 [ 191.930069][ C0] __hrtimer_run_queues+0x310/0x998 [ 191.930076][ C0] hrtimer_run_softirq+0x1b4/0x2a8 [ 191.930084][ C0] handle_softirqs+0x324/0xcbc [ 191.930091][ C0] run_ksoftirqd+0x70/0xbc [ 191.930099][ C0] smpboot_thread_fn+0x4e4/0x97c [ 191.930107][ C0] kthread+0x304/0x3d4 [ 191.930114][ C0] ret_from_fork+0x10/0x20 [ 191.930123][ C0] Sending NMI from CPU 0 to CPUs 1: [ 191.930137][ C1] NMI backtrace for cpu 1 [ 191.930149][ C1] CPU: 1 UID: 0 PID: 27797 Comm: syz-executor Not tainted syzkaller #0 PREEMPT SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 191.930162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 191.930167][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 191.930175][ C1] pc : rcu_is_watching+0xc8/0x134 [ 191.930185][ C1] lr : rcu_is_watching+0x50/0x134 [ 191.930191][ C1] sp : ffff800090f57060 [ 191.930194][ C1] x29: ffff800090f57060 x28: fffffdffc4724b58 x27: 0010000000000001 [ 191.930206][ C1] x26: fffffdffc4724b40 x25: ffff0000f677f380 x24: ffff0000d545e950 [ 191.930216][ C1] x23: 0000ffffa4d2a000 x22: dfff800000000000 x21: 0000000000000001 [ 191.930225][ C1] x20: ffff0001adee2560 x19: 000000000015c92d x18: ffff800125498000 [ 191.930235][ C1] x17: ffff0001aded5e12 x16: ffff0000c6685894 x15: 00000000000000e8 [ 191.930245][ C1] x14: 0000000000906018 x13: 0000000000000010 x12: 0000000000000010 [ 191.930254][ C1] x11: 00000000979fa627 x10: 0000000000000003 x9 : ffff800088a30ae0 [ 191.930263][ C1] x8 : 0000000100000002 x7 : ffff800080c35290 x6 : 0000000000000000 [ 191.930273][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080c352ac [ 191.930281][ C1] x2 : 0000000000000001 x1 : ffff0000c6685880 x0 : 0000000000000001 [ 191.930291][ C1] Call trace: [ 191.930293][ C1] rcu_is_watching+0xc8/0x134 (P) [ 191.930306][ C1] pfn_valid+0x144/0x470 [ 191.930317][ C1] page_table_check_clear+0x34/0x510 [ 191.930326][ C1] __page_table_check_pte_clear+0xb0/0xd4 [ 191.930334][ C1] __zap_vma_range+0x2c48/0x4348 [ 191.930344][ C1] unmap_vmas+0x2e0/0x43c [ 191.930352][ C1] exit_mmap+0x1e8/0x9bc [ 191.930360][ C1] __mmput+0xe0/0x2e8 [ 191.930368][ C1] mmput+0x70/0xa8 [ 191.930374][ C1] exit_mm+0x13c/0x1f0 [ 191.930384][ C1] do_exit+0x524/0x1a74 [ 191.930393][ C1] do_group_exit+0x198/0x238 [ 191.930403][ C1] get_signal+0xfb0/0x1094 [ 191.930410][ C1] arch_do_signal_or_restart+0x288/0x444c [ 191.930420][ C1] exit_to_user_mode_loop+0x70/0x17c [ 191.930430][ C1] el0_svc+0x12c/0x1d8 [ 191.930439][ C1] el0t_64_sync_handler+0x44/0x104 [ 191.930449][ C1] el0t_64_sync+0x198/0x19c