last executing test programs:

54.403064207s ago: executing program 4 (id=11):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$9p(r4, &(0x7f0000001480)="2d76b4", 0x3)
splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)="a4", 0xfd02}, {&(0x7f0000000500)="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"}, {&(0x7f0000000600)="4c5387bde1b4d590d3c516371eb259d863ed3857c474a72989a7855f92bd71caf658b1b48f2385262bd5b0523e9004569c524de04f4ef5eb62f6f151f2ce72b3bf58cf9b867d883227549778cc49f74ed721a24ff01d"}], 0x1)

53.859039323s ago: executing program 4 (id=14):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$revoke(0x3, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r1})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

53.743682239s ago: executing program 4 (id=15):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
close(r0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12)
listen(r1, 0x787)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

53.563777023s ago: executing program 4 (id=18):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')

53.168912968s ago: executing program 4 (id=22):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

50.93886681s ago: executing program 4 (id=63):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6})
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

50.776433235s ago: executing program 32 (id=63):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r2 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6})
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

44.964069371s ago: executing program 1 (id=161):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)

44.901036332s ago: executing program 1 (id=163):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0x7, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)

44.811921574s ago: executing program 1 (id=164):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x700, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)

44.779389371s ago: executing program 1 (id=165):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002880)={[{@utf8}, {@shortname_win95}, {@fat=@nfs_nostale_ro}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@rodir}, {@fat=@showexec}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}]}, 0x0, 0x2c6, &(0x7f0000002b40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333440, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)
timer_create(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)

44.651983962s ago: executing program 1 (id=168):
syz_io_uring_setup(0x27ab, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x0)
getpid()
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x61)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000002600"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100bc46710b800200000000e82200"/29], 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0)
read(r1, &(0x7f0000000400)=""/1, 0x1000)

44.315141194s ago: executing program 1 (id=184):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(r0, 0x1)

44.241505343s ago: executing program 33 (id=184):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(r0, 0x1)

25.964444879s ago: executing program 0 (id=485):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40003, 0x133}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r3=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r4=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c", 0x3, 0x4000800, 0x0, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

25.582065241s ago: executing program 0 (id=495):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

25.5334948s ago: executing program 0 (id=497):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38bc43, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2640, 0x9)

23.692522134s ago: executing program 0 (id=519):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000400)='./dev\x00', 0x210000, &(0x7f0000007900), 0xfc, 0x585, &(0x7f0000000c00)="$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")
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x208080, &(0x7f0000000880)={[{@gid}, {@mode={'mode', 0x3d, 0x10001}}, {}, {}]})

23.464092194s ago: executing program 0 (id=523):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x73}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb, 0x7}, {0x1ff, 0xffffffffe, 0x7fffffffffffffff, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d4, 0x32}, 0x2, @in6=@local, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

22.780121113s ago: executing program 0 (id=538):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d020140000102030109021200010105600109040000000103"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22.745959152s ago: executing program 34 (id=538):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d020140000102030109021200010105600109040000000103"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

13.791247887s ago: executing program 6 (id=685):
r0 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000044000))
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)

12.18410745s ago: executing program 6 (id=710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

11.881660484s ago: executing program 6 (id=713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040010)

11.794715592s ago: executing program 6 (id=714):
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0xc0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

11.199565284s ago: executing program 6 (id=719):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000044)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
io_setup(0x7, &(0x7f00000000c0)=<r1=>0x0)
fstat(r0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

11.138121824s ago: executing program 6 (id=722):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa3e94ae67402a3cb)

5.183380313s ago: executing program 7 (id=836):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)={0x14, 0x38, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4400c005}, 0x80)

2.151926068s ago: executing program 7 (id=867):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)={0x1, 0xb26, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "5b843c57d0d4fcebda569fd8fea6a7b7ef976c09cf8d2aa4052321896dc15fb693fccb55de57aaaaf6ee76096b4c8b0e182deac6221008dee32436028328ef00"}}, 0x80}}, 0x0)

2.092809415s ago: executing program 7 (id=871):
socket$inet(0x2, 0x1, 0x6)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001")
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)

2.054501645s ago: executing program 5 (id=873):
socket$inet(0x2, 0x1, 0x6)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001")
ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r1, 0x400c0930, 0x0)

1.927643046s ago: executing program 7 (id=878):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x1, 0x240080a0)
sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12)

1.905402903s ago: executing program 3 (id=879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

1.867779832s ago: executing program 5 (id=881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040)

1.808264205s ago: executing program 7 (id=882):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}}, 0x8040)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1.807459712s ago: executing program 3 (id=883):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

1.761105329s ago: executing program 2 (id=884):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
keyctl$revoke(0x3, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r1})
add_key(0x0, 0x0, &(0x7f0000000780)="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", 0x559, r0)

1.760853338s ago: executing program 2 (id=885):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1.735162606s ago: executing program 2 (id=886):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}})

1.734352984s ago: executing program 5 (id=887):
socket$inet(0x2, 0x1, 0x6)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
ioctl(0xffffffffffffffff, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001")
ioctl(0xffffffffffffffff, 0x40140921, &(0x7f0000000400)="0000000001")
ioctl(0xffffffffffffffff, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(0xffffffffffffffff, 0x400c0930, 0x0)

1.671980445s ago: executing program 3 (id=888):
syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.655899774s ago: executing program 5 (id=889):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f60000000000000000000", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

1.594920965s ago: executing program 2 (id=890):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r1 = syz_open_pts(r0, 0x200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)

1.507898042s ago: executing program 2 (id=891):
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000)
close(0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

1.268705082s ago: executing program 5 (id=892):
socket$nl_audit(0x10, 0x3, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@metacopy_on}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/trace\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007000)={0x2020}, 0x2020)
brk(0x0)

285.744153ms ago: executing program 3 (id=893):
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

164.082656ms ago: executing program 3 (id=894):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000100)=""/1000, 0x3e8)
write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x1, 0x80}], 0x76)

163.714944ms ago: executing program 2 (id=895):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)

82.561879ms ago: executing program 7 (id=896):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noquota}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@noinit_itable}, {@journal_checksum}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0x103a00, 0x150)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001140)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x800000000000008, 0x0, 0x0, 0x9, 0x1d, "faf97557e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5ac00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0x2a]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

60.034943ms ago: executing program 3 (id=897):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@noinit_itable}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

0s ago: executing program 5 (id=898):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0xfffffe14)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts.
[   28.790252][ T4697] cgroup: Unknown subsys name 'net'
[   28.910047][ T4697] cgroup: Unknown subsys name 'cpuset'
[   28.912065][ T4697] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   29.027530][ T4697] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   29.837293][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   29.847685][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   29.848840][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   29.849035][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   29.849562][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   29.849655][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   29.850986][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   29.851231][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   29.851613][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   29.851850][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   29.852394][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   29.852752][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   29.852963][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.853984][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   29.854180][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   29.854407][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   29.854763][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   29.854963][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   29.855470][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   29.871924][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   29.873746][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   29.881495][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   29.898716][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   29.902196][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   29.904065][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.278077][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.279798][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.281152][ T4719] bridge_slave_0: entered allmulticast mode
[   30.282765][ T4719] bridge_slave_0: entered promiscuous mode
[   30.286914][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.286963][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.287067][ T4719] bridge_slave_1: entered allmulticast mode
[   30.287502][ T4719] bridge_slave_1: entered promiscuous mode
[   30.311712][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.330931][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.331019][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.331145][ T4716] bridge_slave_0: entered allmulticast mode
[   30.331601][ T4716] bridge_slave_0: entered promiscuous mode
[   30.332904][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.333557][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.333601][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.333667][ T4716] bridge_slave_1: entered allmulticast mode
[   30.334097][ T4716] bridge_slave_1: entered promiscuous mode
[   30.371552][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.371650][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.372356][ T4715] bridge_slave_0: entered allmulticast mode
[   30.372832][ T4715] bridge_slave_0: entered promiscuous mode
[   30.376867][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.378146][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.379740][ T4708] bridge_slave_0: entered allmulticast mode
[   30.381338][ T4708] bridge_slave_0: entered promiscuous mode
[   30.386317][ T4719] team0: Port device team_slave_0 added
[   30.387477][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.387538][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.387617][ T4715] bridge_slave_1: entered allmulticast mode
[   30.388046][ T4715] bridge_slave_1: entered promiscuous mode
[   30.394552][ T4719] team0: Port device team_slave_1 added
[   30.396370][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.397390][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.401822][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.401865][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.402225][ T4708] bridge_slave_1: entered allmulticast mode
[   30.402699][ T4708] bridge_slave_1: entered promiscuous mode
[   30.416111][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.425635][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.425664][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.425975][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.427512][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.429335][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.429444][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.429513][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.429569][ T4709] bridge_slave_0: entered allmulticast mode
[   30.430012][ T4709] bridge_slave_0: entered promiscuous mode
[   30.431902][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.431922][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.432009][ T4709] bridge_slave_1: entered allmulticast mode
[   30.432524][ T4709] bridge_slave_1: entered promiscuous mode
[   30.434366][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.441271][ T4715] team0: Port device team_slave_0 added
[   30.442037][ T4715] team0: Port device team_slave_1 added
[   30.448185][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.448196][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.448210][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.449846][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.449854][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.449869][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.461717][ T4715] hsr_slave_0: entered promiscuous mode
[   30.462065][ T4715] hsr_slave_1: entered promiscuous mode
[   30.468532][ T4716] team0: Port device team_slave_0 added
[   30.469552][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.469596][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.469620][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.471174][ T4716] team0: Port device team_slave_1 added
[   30.477098][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.477107][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.477120][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.477619][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.477626][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.477641][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.498448][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.513265][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.519300][ T4708] team0: Port device team_slave_0 added
[   30.520278][ T4708] team0: Port device team_slave_1 added
[   30.521871][ T4716] hsr_slave_0: entered promiscuous mode
[   30.522258][ T4716] hsr_slave_1: entered promiscuous mode
[   30.522492][ T4716] debugfs: 'hsr0' already exists in 'hsr'
[   30.522533][ T4716] Cannot create hsr debugfs directory
[   30.534469][ T4709] team0: Port device team_slave_0 added
[   30.540871][ T4719] hsr_slave_0: entered promiscuous mode
[   30.542420][ T4719] hsr_slave_1: entered promiscuous mode
[   30.542670][ T4719] debugfs: 'hsr0' already exists in 'hsr'
[   30.542687][ T4719] Cannot create hsr debugfs directory
[   30.553824][ T4709] team0: Port device team_slave_1 added
[   30.566038][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.566064][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.566203][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.580382][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.580415][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.580433][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.591777][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.591809][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.591835][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.592759][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.592767][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.592778][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.601339][ T4708] hsr_slave_0: entered promiscuous mode
[   30.601642][ T4708] hsr_slave_1: entered promiscuous mode
[   30.601838][ T4708] debugfs: 'hsr0' already exists in 'hsr'
[   30.601848][ T4708] Cannot create hsr debugfs directory
[   30.660501][ T4709] hsr_slave_0: entered promiscuous mode
[   30.660849][ T4709] hsr_slave_1: entered promiscuous mode
[   30.661249][ T4709] debugfs: 'hsr0' already exists in 'hsr'
[   30.661260][ T4709] Cannot create hsr debugfs directory
[   30.719480][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.722759][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.724536][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.726660][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.733267][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.735858][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.736626][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.738077][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.762305][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.762368][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.762661][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.762695][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.766891][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.769327][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.769751][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.772490][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.773329][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.775400][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.777358][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.780176][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.799523][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.799571][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.799680][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.799715][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.817552][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.829543][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.831867][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.832229][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.833177][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.834247][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.835948][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.844885][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.847247][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.849306][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.850807][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.853527][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.855650][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.865562][ T4715] 8021q: adding VLAN 0 to HW filter on device team0
[   30.879957][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.880013][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.891065][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.891122][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.897479][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.903357][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.906036][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.919717][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.922143][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.922488][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.924319][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   30.932500][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.934812][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   30.937494][ T4719] 8021q: adding VLAN 0 to HW filter on device team0
[   30.950685][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.960231][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.960274][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.968305][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.970093][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.975315][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   30.975730][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.977879][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   30.995615][ T4708] 8021q: adding VLAN 0 to HW filter on device team0
[   30.997264][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.000194][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.000535][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.002136][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.004430][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.004486][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.023317][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.023364][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.038061][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.038118][ T1810] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.052108][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.057493][ T4716] 8021q: adding VLAN 0 to HW filter on device team0
[   31.067272][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.069602][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.103028][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.105615][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.105683][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.110654][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.110711][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.117356][ T4709] 8021q: adding VLAN 0 to HW filter on device team0
[   31.126721][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.126767][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.156938][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.156991][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.176476][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.232111][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.256256][ T4715] veth0_vlan: entered promiscuous mode
[   31.259926][ T4715] veth1_vlan: entered promiscuous mode
[   31.277557][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.285795][ T4715] veth0_macvtap: entered promiscuous mode
[   31.293403][ T4715] veth1_macvtap: entered promiscuous mode
[   31.317263][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.321346][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.341053][ T1810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.341276][ T1810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.341410][ T1810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.359614][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.379696][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.388853][ T1810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.388889][ T1810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.406383][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.406420][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.427176][ T4708] veth0_vlan: entered promiscuous mode
[   31.443618][ T4708] veth1_vlan: entered promiscuous mode
[   31.463664][ T4719] veth0_vlan: entered promiscuous mode
[   31.466143][ T4719] veth1_vlan: entered promiscuous mode
[   31.471938][ T4708] veth0_macvtap: entered promiscuous mode
[   31.482983][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.491029][ T4715] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.498108][ T4719] veth0_macvtap: entered promiscuous mode
[   31.500231][ T4708] veth1_macvtap: entered promiscuous mode
[   31.503937][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.504991][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.507016][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.514968][ T4719] veth1_macvtap: entered promiscuous mode
[   31.551646][ T4709] veth0_vlan: entered promiscuous mode
[   31.556397][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.557562][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.561911][ T4716] veth0_vlan: entered promiscuous mode
[   31.565961][ T4716] veth1_vlan: entered promiscuous mode
[   31.569453][ T1810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.581808][ T4709] veth1_vlan: entered promiscuous mode
[   31.585112][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.585148][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.590571][ T1830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.597541][ T4890] binder: 4889:4890 tried to acquire reference to desc 0, got 1 instead
[   31.599581][ T4890] binder: 4889:4890 got transaction with invalid data ptr
[   31.600877][ T4716] veth0_macvtap: entered promiscuous mode
[   31.602285][ T4716] veth1_macvtap: entered promiscuous mode
[   31.603496][ T4890] binder: 4889:4890 transaction call to 4889:0 failed 5/29201/-14, code 0 size 0-24 line 3511
[   31.606635][ T1507] binder: undelivered TRANSACTION_ERROR: 29201
[   31.607613][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.619902][ T1810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.624617][ T4709] veth0_macvtap: entered promiscuous mode
[   31.626999][ T4709] veth1_macvtap: entered promiscuous mode
[   31.640998][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.641033][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.644912][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.665331][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.691914][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.744891][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.744928][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.811944][ T1810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.811996][ T1810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812038][ T1810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812062][ T1810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812085][ T1810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812106][ T1810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812127][ T1810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812147][ T1810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.812166][ T1810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.813766][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.813777][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.831127][ T4897] 9pnet_virtio: no channels available for device syz
[   31.843284][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.843320][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.852463][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.852519][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.852544][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.852560][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.869994][   T50] Bluetooth: hci3: command tx timeout
[   31.900199][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.900233][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.932511][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.932546][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.939360][   T50] Bluetooth: hci4: command tx timeout
[   31.939381][ T4720] Bluetooth: hci1: command tx timeout
[   31.939622][   T50] Bluetooth: hci2: command tx timeout
[   31.939626][ T4720] Bluetooth: hci0: command tx timeout
[   31.950958][ T4899] ip_tables: iptables: counters copy to user failed while replacing table
[   32.010473][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.010512][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.067196][ T4904] loop1: detected capacity change from 0 to 256
[   32.300149][ T4912] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   32.430103][ T4917] random: crng reseeded on system resumption
[   32.536994][ T4913] Restarting kernel threads ...
[   32.537392][ T4913] Done restarting kernel threads.
[   32.953059][ T4929] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   33.060772][ T4906] Set syz1 is full, maxelem 65536 reached
[   33.075496][ T4932] ip_tables: iptables: counters copy to user failed while replacing table
[   33.089354][ T4935] loop4: detected capacity change from 0 to 512
[   33.095198][ T4935] =======================================================
[   33.095198][ T4935] WARNING: The mand mount option has been deprecated and
[   33.095198][ T4935]          and is ignored by this kernel. Remove the mand
[   33.095198][ T4935]          option from the mount to silence this warning.
[   33.095198][ T4935] =======================================================
[   33.344740][ T4935] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.18: bad orphan inode 15
[   33.344836][ T4935] loop4: lost filesystem error report for type 5 error -117
[   33.345057][ T4935] ext4_test_bit(bit=14, block=5) = 0
[   33.345521][ T4935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.427121][ T4719] EXT4-fs error (device loop4): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256)
[   33.434135][ T4719] EXT4-fs error (device loop4): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extra_isize 255 (inode size 256)
[   33.612511][ T4956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.27'.
[   33.866965][   T30] audit: type=1326 audit(33.840:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.32" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa27782e8 code=0x0
[   33.882712][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.882969][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.949562][ T4711] Bluetooth: hci3: command tx timeout
[   33.975467][ T4973] fuse: Unknown parameter 'user_i00000000000000000000'
[   34.018804][ T4711] Bluetooth: hci0: command tx timeout
[   34.028739][ T4711] Bluetooth: hci2: command tx timeout
[   34.028793][ T4720] Bluetooth: hci1: command tx timeout
[   34.674132][ T4939] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 8011 vs 220 free clusters
[   35.633858][ T5039] loop2: detected capacity change from 0 to 256
[   35.667384][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.703777][ T5041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.703977][ T5041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.744049][ T1771] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.870306][ T1771] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.935677][ T1771] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.941305][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   35.943537][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   35.943569][   T30] audit: type=1326 audit(35.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5049 comm="syz.0.67" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb25782e8 code=0x7ffc0000
[   35.943663][   T30] audit: type=1326 audit(35.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5049 comm="syz.0.67" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb25782e8 code=0x7ffc0000
[   35.944549][   T30] audit: type=1326 audit(35.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5049 comm="syz.0.67" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=151 compat=0 ip=0xffffb25782e8 code=0x7ffc0000
[   35.944657][   T30] audit: type=1326 audit(35.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5049 comm="syz.0.67" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb25782e8 code=0x7ffc0000
[   35.944730][   T30] audit: type=1326 audit(35.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5049 comm="syz.0.67" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb25782e8 code=0x7ffc0000
[   35.945172][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   35.960260][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   35.964347][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   36.018694][ T4720] Bluetooth: hci3: command tx timeout
[   36.026532][ T5060] loop1: detected capacity change from 0 to 2048
[   36.056286][ T5063] Zero length message leads to an empty skb
[   36.065442][ T5060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.099401][ T4720] Bluetooth: hci1: command tx timeout
[   36.099447][ T4720] Bluetooth: hci2: command tx timeout
[   36.099475][ T4720] Bluetooth: hci0: command tx timeout
[   36.103936][ T1771] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.109271][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.256036][ T1771] bridge_slave_1: left allmulticast mode
[   36.257279][ T1771] bridge_slave_1: left promiscuous mode
[   36.260007][ T1771] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.270578][ T1771] bridge_slave_0: left allmulticast mode
[   36.270617][ T1771] bridge_slave_0: left promiscuous mode
[   36.270719][ T1771] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.326583][ T5096] loop3: detected capacity change from 0 to 256
[   36.330618][ T5096] FAT-fs (loop3): data area starts beyond volume (274 > 64)
[   36.330663][ T5096] FAT-fs (loop3): Can't find a valid FAT filesystem
[   36.416570][ T1771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   36.451340][ T1771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   36.460287][ T1771] bond0 (unregistering): Released all slaves
[   36.612664][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.614335][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.614451][ T5047] bridge_slave_0: entered allmulticast mode
[   36.622740][ T5047] bridge_slave_0: entered promiscuous mode
[   36.642106][ T4805] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   36.644489][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.644571][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.644704][ T5047] bridge_slave_1: entered allmulticast mode
[   36.650665][ T5047] bridge_slave_1: entered promiscuous mode
[   36.706138][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.712372][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.713703][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0
[   36.739995][ T5047] team0: Port device team_slave_0 added
[   36.744706][ T5047] team0: Port device team_slave_1 added
[   36.752483][ T1771] hsr_slave_0: left promiscuous mode
[   36.753789][ T1771] hsr_slave_1: left promiscuous mode
[   36.754225][ T1771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.754241][ T1771] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.757096][ T1771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.757107][ T1771] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.764870][ T1771] veth1_macvtap: left promiscuous mode
[   36.764937][ T1771] veth0_macvtap: left promiscuous mode
[   36.764988][ T1771] veth1_vlan: left promiscuous mode
[   36.765030][ T1771] veth0_vlan: left promiscuous mode
[   36.811083][ T4805] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[   36.813971][ T4805] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   36.814005][ T4805] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.814022][ T4805] usb 1-1: config 1 interface 0 has no altsetting 0
[   36.829737][ T4805] usb 1-1: string descriptor 0 read error: -22
[   36.831215][ T4805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.841718][ T5100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   36.948814][ T1771] team0 (unregistering): Port device team_slave_1 removed
[   36.954698][ T1771] team0 (unregistering): Port device team_slave_0 removed
[   37.152000][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.153835][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.158881][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.161850][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.168538][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.174058][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.176540][ T5137] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) !
[   37.210972][ T5047] hsr_slave_0: entered promiscuous mode
[   37.212793][ T5047] hsr_slave_1: entered promiscuous mode
[   37.214358][ T5047] debugfs: 'hsr0' already exists in 'hsr'
[   37.215586][ T5047] Cannot create hsr debugfs directory
[   37.270721][ T4805] cp2112 0003:10C4:EA90.0001: unexpected long global item
[   37.272664][ T4805] cp2112 0003:10C4:EA90.0001: parse failed
[   37.273848][ T4805] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22
[   37.456657][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3
[   37.483974][ T4805] usb 1-1: USB disconnect, device number 2
[   37.496740][ T5047] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   37.506630][ T5047] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   37.511882][ T5047] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   37.525237][ T5047] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   37.528848][ T5047] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   37.546406][ T5047] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   37.549955][ T5047] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   37.565758][ T5047] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   37.643994][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.656503][ T5047] 8021q: adding VLAN 0 to HW filter on device team0
[   37.679272][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.679325][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.681205][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.681230][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.686073][ T5194] capability: warning: `syz.1.108' uses deprecated v2 capabilities in a way that may be insecure
[   37.696702][ T5047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.899601][ T5221] loop3: detected capacity change from 0 to 128
[   37.900083][ T5221] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   37.909773][ T5221] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   38.018638][ T4711] Bluetooth: hci4: command tx timeout
[   38.025389][ T5047] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.063240][ T5241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.067412][ T5241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.099043][ T4711] Bluetooth: hci3: command tx timeout
[   38.104123][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1
[   38.178705][ T4720] Bluetooth: hci2: command tx timeout
[   38.178746][ T4720] Bluetooth: hci1: command tx timeout
[   38.180005][ T4711] Bluetooth: hci0: command tx timeout
[   38.372389][ T5047] veth0_vlan: entered promiscuous mode
[   38.375927][ T5047] veth1_vlan: entered promiscuous mode
[   38.386564][ T5047] veth0_macvtap: entered promiscuous mode
[   38.389789][ T5047] veth1_macvtap: entered promiscuous mode
[   38.396007][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.404207][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.430371][   T30] audit: type=1326 audit(38.410:8): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=5256 comm="syz.3.123" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f782e8 code=0x0
[   38.475743][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2
[   38.512181][ T1771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.512903][ T1771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.513022][ T1771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.513046][ T1771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.542998][ T5227] Set syz1 is full, maxelem 65536 reached
[   38.560353][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.560389][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.603630][ T5276] loop0: detected capacity change from 0 to 256
[   38.625983][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.626017][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.691172][ T5286] loop2: detected capacity change from 0 to 512
[   38.708970][ T5286] EXT4-fs (loop2): Test dummy encryption mode enabled
[   38.709010][ T5286] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.709039][ T5286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.770168][ T5286] EXT4-fs (loop2): 1 truncate cleaned up
[   38.770706][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.890464][ T5296] loop1: detected capacity change from 0 to 512
[   38.990639][ T5296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.130: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[   38.990782][ T5296] loop1: lost filesystem error report for type 5 error -117
[   38.995648][ T5296] EXT4-fs (loop1): 1 orphan inode deleted
[   39.001737][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.663236][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.759886][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.874091][ T5314] 9p: Bad value for 'wfdno'
[   40.099979][   T50] Bluetooth: hci4: command tx timeout
[   41.035308][ T5351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.044600][ T5351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.057394][ T5353] ip_tables: iptables: counters copy to user failed while replacing table
[   41.057982][ T5360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.058154][ T5360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.292569][ T5383] loop3: detected capacity change from 0 to 4096
[   41.305019][ T5383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.329000][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.659640][ T5407] binder: 5406:5407 ioctl 541b 0 returned -22
[   41.697087][ T5412] loop1: detected capacity change from 0 to 256
[   41.785387][ T5417] loop1: detected capacity change from 0 to 512
[   41.790399][ T5417] EXT4-fs: Ignoring removed bh option
[   41.797522][ T5417] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.164: corrupted in-inode xattr: e_value size too large
[   41.797630][ T5417] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.809247][ T5417] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.164: couldn't read orphan inode 15 (err -117)
[   41.809298][ T5417] loop1: lost filesystem error report for type 5 error -117
[   41.809930][ T5417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.826791][ T5417] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[   41.851846][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.880960][ T5420] loop1: detected capacity change from 0 to 128
[   41.946561][ T4708] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   41.946863][ T4708] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   42.011078][ T5430] loop2: detected capacity change from 0 to 256
[   42.038393][ T5432] loop5: detected capacity change from 0 to 1024
[   42.041445][ T5432] EXT4-fs: Ignoring removed oldalloc option
[   42.061320][ T5432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.142881][ T5437] EXT4-fs (loop5): shut down requested (2)
[   42.168460][ T5047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.178876][   T50] Bluetooth: hci4: command tx timeout
[   42.341627][ T5455] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   42.341661][ T5455] FAT-fs (loop5): Filesystem has been set read-only
[   42.406306][ T1810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.472569][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   42.475220][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   42.476486][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   42.486792][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   42.487105][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   42.507967][ T1810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.599903][ T1810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.672203][ T1810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.841901][ T1810] bridge_slave_1: left allmulticast mode
[   42.843125][ T1810] bridge_slave_1: left promiscuous mode
[   42.844345][ T1810] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.849087][ T4811] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   42.851907][ T1810] bridge_slave_0: left allmulticast mode
[   42.853398][ T1810] bridge_slave_0: left promiscuous mode
[   42.853499][ T1810] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.993545][ T1810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.011233][ T4811] usb 1-1: unable to get BOS descriptor or descriptor too short
[   43.011280][ T4811] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[   43.017959][ T4811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.017992][ T4811] usb 1-1: Product: syz
[   43.018020][ T4811] usb 1-1: Manufacturer: syz
[   43.018034][ T4811] usb 1-1: SerialNumber: syz
[   43.027414][ T1810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.055632][ T1810] bond0 (unregistering): Released all slaves
[   43.067609][ T5529] ip_tables: iptables: counters copy to user failed while replacing table
[   43.080816][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.080857][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.085207][ T5470] bridge_slave_0: entered allmulticast mode
[   43.085790][ T5470] bridge_slave_0: entered promiscuous mode
[   43.090266][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.090313][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.090394][ T5470] bridge_slave_1: entered allmulticast mode
[   43.091084][ T5470] bridge_slave_1: entered promiscuous mode
[   43.146271][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.153680][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.188756][ T5535] set_capacity_and_notify: 1 callbacks suppressed
[   43.189648][ T5535] loop3: detected capacity change from 0 to 512
[   43.190034][ T5535] EXT4-fs: Ignoring removed bh option
[   43.208670][ T5535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.245718][ T5470] team0: Port device team_slave_0 added
[   43.246554][ T5470] team0: Port device team_slave_1 added
[   43.259075][ T4803] usb 1-1: USB disconnect, device number 3
[   43.281214][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4
[   43.288440][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.288469][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   43.288632][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.289274][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.289289][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   43.289310][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.339732][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.420028][ T5555] loop5: detected capacity change from 0 to 256
[   43.421095][ T5470] hsr_slave_0: entered promiscuous mode
[   43.421441][ T5470] hsr_slave_1: entered promiscuous mode
[   43.421641][ T5470] debugfs: 'hsr0' already exists in 'hsr'
[   43.421651][ T5470] Cannot create hsr debugfs directory
[   43.486009][ T5559] Invalid ELF header len 7
[   43.492967][ T1810] hsr_slave_0: left promiscuous mode
[   43.497545][ T1810] hsr_slave_1: left promiscuous mode
[   43.497919][ T1810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.497930][ T1810] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.509654][ T1810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.509695][ T1810] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.529179][ T1810] veth1_macvtap: left promiscuous mode
[   43.529235][ T1810] veth0_macvtap: left promiscuous mode
[   43.529285][ T1810] veth1_vlan: left promiscuous mode
[   43.529320][ T1810] veth0_vlan: left promiscuous mode
[   43.907292][ T1810] team0 (unregistering): Port device team_slave_1 removed
[   43.927691][ T1810] team0 (unregistering): Port device team_slave_0 removed
[   44.022746][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5
[   44.151888][ T5470] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   44.157835][ T5470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   44.160220][ T5470] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   44.172618][ T5470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   44.173302][ T5470] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   44.179586][ T5470] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   44.183266][ T5470] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   44.189922][ T5470] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   44.259209][   T50] Bluetooth: hci4: command tx timeout
[   44.289141][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.292374][ T5470] 8021q: adding VLAN 0 to HW filter on device team0
[   44.308852][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.308907][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.309435][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.309457][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.318568][ T1915] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   44.474191][ T1915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   44.477186][ T1915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   44.477227][ T1915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   44.488636][ T1915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.488668][ T1915] usb 1-1: Product: syz
[   44.488696][ T1915] usb 1-1: Manufacturer: syz
[   44.488709][ T1915] usb 1-1: SerialNumber: syz
[   44.494290][ T1915] usb 1-1: config 0 descriptor??
[   44.499116][   T50] Bluetooth: hci1: command tx timeout
[   44.577634][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6
[   44.582779][ T5643] 9pnet_fd: p9_fd_create_tcp (5643): problem binding to privport
[   44.675370][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.710116][ T5602] loop0: detected capacity change from 0 to 512
[   44.713525][ T5602] EXT4-fs (loop0): Test dummy encryption mode enabled
[   44.715128][ T5602] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (64535!=18645)
[   44.715176][ T5602] EXT4-fs (loop0): group descriptors corrupted!
[   44.815559][ T5671] loop5: detected capacity change from 0 to 256
[   44.825656][ T5470] veth0_vlan: entered promiscuous mode
[   44.829287][ T5470] veth1_vlan: entered promiscuous mode
[   44.847282][ T5470] veth0_macvtap: entered promiscuous mode
[   44.851902][ T5470] veth1_macvtap: entered promiscuous mode
[   44.858321][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.870136][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.924522][ T5677] fuse: Bad value for 'fd'
[   44.941403][ T1771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.941446][ T1771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.949638][ T1732] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.949693][ T1732] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.949726][ T1732] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.949746][ T1732] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.961460][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7
[   44.976587][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.976626][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.987186][ T5683] loop3: detected capacity change from 0 to 2048
[   45.015513][ T5683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.042245][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.109796][ T5699] ip_tables: iptables: counters copy to user failed while replacing table
[   45.135918][ T5702] loop3: detected capacity change from 0 to 128
[   45.144162][ T5702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[   45.144208][ T5702] System zones: 1-3, 19-19, 35-36
[   45.144835][ T5702] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.164272][ T5702] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted
[   45.164858][ T5707] loop5: detected capacity change from 0 to 256
[   45.219086][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.247148][   T30] audit: type=1326 audit(45.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5713 comm="syz.5.251" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x0
[   45.361066][ T5726] fuse: Bad value for 'fd'
[   45.842361][ T5744] 9pnet_fd: p9_fd_create_tcp (5744): problem binding to privport
[   46.256192][ T5784] loop6: detected capacity change from 0 to 2048
[   46.264024][ T5787] loop3: detected capacity change from 0 to 256
[   46.302373][ T5784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.365554][ T5802] loop3: detected capacity change from 0 to 512
[   46.374435][ T5802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   46.376297][ T5802] EXT4-fs (loop3): 1 truncate cleaned up
[   46.377173][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.413603][ T5470] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.492523][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.580025][   T50] Bluetooth: hci1: command tx timeout
[   46.963240][ T5862] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[   46.977695][ T5862] cgroup: Unknown subsys name 'cpuset'
[   47.087080][   T10] usb 1-1: USB disconnect, device number 4
[   47.338026][ T5889] 9p: Bad value for 'rfdno'
[   47.461374][ T5897] ip_tables: iptables: counters copy to user failed while replacing table
[   47.905802][ T5918] overlayfs: failed to clone upperpath
[   48.090456][ T5922] 9p: Bad value for 'rfdno'
[   48.490565][ T5952] overlayfs: failed to clone upperpath
[   48.501880][ T5951] set_capacity_and_notify: 2 callbacks suppressed
[   48.522094][ T5951] loop5: detected capacity change from 0 to 2048
[   48.555530][ T5951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.596582][ T5951] fs-verity (loop5, inode 15): fs-verity keyring is empty, rejecting signed file!
[   48.634540][ T5047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.644886][ T5906] Set syz1 is full, maxelem 65536 reached
[   48.652297][ T5957] ip_tables: iptables: counters copy to user failed while replacing table
[   48.659541][   T50] Bluetooth: hci1: command tx timeout
[   50.301653][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.303680][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.401086][ T6009] ip_tables: iptables: counters copy to user failed while replacing table
[   50.483675][ T6014] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   50.617902][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.351'.
[   50.636458][ T6022] xfrm1: entered promiscuous mode
[   50.646104][ T6022] xfrm1: entered allmulticast mode
[   50.647366][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.351'.
[   50.739577][   T50] Bluetooth: hci1: command tx timeout
[   52.112762][ T6041] loop6: detected capacity change from 0 to 256
[   52.184216][ T5991] Set syz1 is full, maxelem 65536 reached
[   52.399042][   T30] audit: type=1326 audit(52.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.403349][   T30] audit: type=1326 audit(52.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.409053][   T30] audit: type=1326 audit(52.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.413002][   T30] audit: type=1326 audit(52.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.417262][   T30] audit: type=1326 audit(52.390:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.421654][   T30] audit: type=1326 audit(52.390:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.425998][   T30] audit: type=1326 audit(52.390:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.434043][   T30] audit: type=1326 audit(52.410:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.437987][   T30] audit: type=1326 audit(52.410:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.448742][   T30] audit: type=1326 audit(52.430:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.5.365" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffff9d9782e8 code=0x7ffc0000
[   52.516551][ T6084] loop6: detected capacity change from 0 to 512
[   52.549226][ T6084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   52.549292][ T6084] System zones: 1-12
[   52.552163][ T6084] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.369: missing EA_INODE flag
[   52.552183][ T6084] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   52.555281][ T6084] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.369: error while reading EA inode 12 err=-117
[   52.555332][ T6084] loop6: lost filesystem error report for type 5 error -117
[   52.558553][    C0] EXT4-fs (loop6): error count since last fsck: 2
[   52.558570][    C0] EXT4-fs (loop6): initial error at time 52: ext4_xattr_inode_iget:437: inode 12
[   52.558588][    C0] EXT4-fs (loop6): last error at time 52: ext4_xattr_inode_iget:442
[   52.571755][ T6084] EXT4-fs (loop6): 1 orphan inode deleted
[   52.572268][ T6084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.165844][ T6100] Bluetooth: hci5: Frame reassembly failed (-84)
[   54.140218][ T5470] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.505509][ T6146] fuse: Unknown parameter '0x0000000000000004'
[   54.675647][ T6079] Set syz1 is full, maxelem 65536 reached
[   54.772748][ T6166] tmpfs: Bad value for 'nr_inodes'
[   55.220937][ T4711] Bluetooth: hci5: command 0x1003 tx timeout
[   55.221025][   T50] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   56.722356][ T6207] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   56.765611][ T6230] fuse: Unknown parameter '0x0000000000000004'
[   56.784610][ T6229] Bluetooth: hci5: Frame reassembly failed (-84)
[   56.786554][ T1732] Bluetooth: hci5: Frame reassembly failed (-84)
[   56.944651][ T6235] ip_tables: iptables: counters copy to user failed while replacing table
[   57.104286][ T6246] 9p: Bad value for 'rfdno'
[   57.501228][ T6225] Set syz1 is full, maxelem 65536 reached
[   57.565084][ T6262] loop3: detected capacity change from 0 to 4096
[   57.575048][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.818216][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.904630][   T30] kauditd_printk_skb: 25 callbacks suppressed
[   57.904673][   T30] audit: type=1326 audit(57.880:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.428" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x0
[   57.966063][ T6307] loop0: detected capacity change from 0 to 512
[   57.976867][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.977530][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.992688][ T6307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   58.011267][ T6314] fuse: Unknown parameter 'fd0x0000000000000004'
[   58.027706][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   58.033982][ T6316] loop3: detected capacity change from 0 to 128
[   58.038267][ T6316] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.051956][ T6316] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   58.060453][ T6316] fscrypt: AES-256-XTS using blk-crypto-fallback
[   58.067711][ T6316] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[   58.084057][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.205759][ T6329] macsec1: entered allmulticast mode
[   58.205798][ T6329] veth1_macvtap: entered allmulticast mode
[   58.436631][   T30] audit: type=1326 audit(58.410:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.3.447" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f782e8 code=0x0
[   58.448459][ T6356] loop0: detected capacity change from 0 to 1024
[   58.471360][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   58.484218][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   58.818617][ T4711] Bluetooth: hci5: command 0x1003 tx timeout
[   58.818704][   T50] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   59.071038][   T30] audit: type=1326 audit(59.050:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.5.462" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x0
[   59.182059][ T6422] fuse: Unknown parameter 'fd0x0000000000000004'
[   59.191389][ T6421] loop0: detected capacity change from 0 to 512
[   59.198456][ T6421] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.251984][ T6421] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   59.260308][ T6421] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.465: bg 0: block 248: padding at end of block bitmap is not set
[   59.264233][ T6421] loop0: lost filesystem error report for type 5 error -117
[   59.274000][ T6421] Quota error (device loop0): write_blk: dquota write failed
[   59.274072][ T6421] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   59.274113][ T6421] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.465: Failed to acquire dquot type 1
[   59.274135][ T6421] loop0: lost filesystem error report for type 5 error -28
[   59.279080][    C0] EXT4-fs (loop0): error count since last fsck: 2
[   59.279100][    C0] EXT4-fs (loop0): last error at time 59: ext4_acquire_dquot:7069
[   59.310314][ T6421] EXT4-fs (loop0): 1 truncate cleaned up
[   59.310843][ T6421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   59.380294][ T6433] loop3: detected capacity change from 0 to 256
[   59.417554][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   59.420212][ T6277] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5
[   59.420253][ T6277] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 1
[   59.420267][ T6277] loop0: lost filesystem error report for type 5 error -117
[   59.713965][ T6470] loop0: detected capacity change from 0 to 512
[   59.726815][ T6470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   59.729480][ T6470] System zones: 1-12
[   59.734508][ T6472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.478'.
[   59.736779][ T6470] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.477: missing EA_INODE flag
[   59.736793][ T6470] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   59.739216][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   59.739229][    C0] EXT4-fs (loop0): initial error at time 59: ext4_xattr_inode_iget:437: inode 12
[   59.739248][    C0] EXT4-fs (loop0): last error at time 59: ext4_xattr_inode_iget:437: inode 12
[   59.758693][ T6470] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.477: error while reading EA inode 12 err=-117
[   59.758740][ T6470] loop0: lost filesystem error report for type 5 error -117
[   59.765161][ T6470] EXT4-fs (loop0): 1 orphan inode deleted
[   59.765671][ T6470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.806390][ T6476] xt_hashlimit: size too large, truncated to 1048576
[   60.593910][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.931375][   T30] audit: type=1326 audit(60.910:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.2.491" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x0
[   61.033070][ T6516] fuse: Unknown parameter 'fd0x0000000000000004'
[   61.472992][ T6533] loop3: detected capacity change from 0 to 512
[   61.496407][ T6533] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000702)
[   61.496455][ T6533] FAT-fs (loop3): Filesystem has been set read-only
[   61.675897][ T6548] loop3: detected capacity change from 0 to 256
[   61.799000][ T6556] fuse: Bad value for 'group_id'
[   61.799031][ T6556] fuse: Bad value for 'group_id'
[   61.924732][ T6564] binder: 6563:6564 ioctl 4018620d 20004a80 returned -22
[   62.235305][ T6572] loop5: detected capacity change from 0 to 1024
[   62.235757][ T6572] EXT4-fs: Ignoring removed bh option
[   62.333331][ T6572] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   62.462070][ T6572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.485971][ T6572] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.976464][   T30] audit: type=1326 audit(62.950:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6586 comm="syz.6.520" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb35782e8 code=0x0
[   63.044622][ T6591] loop0: detected capacity change from 0 to 1024
[   63.074721][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.135808][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.147223][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.158182][ T4715] EXT4-fs error (device loop0): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   63.168418][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.172754][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.178137][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.180555][ T6598] fuse: fd is not a fuse device
[   63.187352][ T4715] EXT4-fs error (device loop0): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   63.187660][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.187827][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.188371][ T5047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.188977][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.189365][ T4715] EXT4-fs error (device loop0): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   63.189633][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.189769][ T4715] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /104/dev/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   63.190550][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.191083][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.194415][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.195007][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.195548][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.196056][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.196651][ T4715] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   63.741786][ T6285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.796470][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.827841][ T6285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.866078][ T6285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.934347][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.935935][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.937569][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.943091][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.943371][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.955126][ T6285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.501501][ T1585] ieee802154 phy0 wpan0: encryption failed: -22
[   64.503001][ T1585] ieee802154 phy1 wpan1: encryption failed: -22
[   64.962066][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.969366][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.032079][  T865] cfg80211: failed to load regulatory.db
[   65.043919][ T6653] IPv6: A: Disabled Multicast RS
[   65.065897][ T6285] bridge_slave_1: left allmulticast mode
[   65.065935][ T6285] bridge_slave_1: left promiscuous mode
[   65.066031][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.089108][ T6285] bridge_slave_0: left allmulticast mode
[   65.089146][ T6285] bridge_slave_0: left promiscuous mode
[   65.089271][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.191686][ T6669] loop6: detected capacity change from 0 to 128
[   65.332298][ T6684] netlink: 165 bytes leftover after parsing attributes in process `syz.2.551'.
[   65.379758][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.407158][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.415863][ T6694] fuse: fd is not a fuse device
[   65.431820][ T6285] bond0 (unregistering): Released all slaves
[   65.439288][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8
[   65.615900][ T6716] loop5: detected capacity change from 0 to 128
[   65.624861][ T6716] EXT4-fs (loop5): Test dummy encryption mode enabled
[   65.629925][ T6716] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.636039][ T6715] loop6: detected capacity change from 0 to 1024
[   65.670773][ T6715] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   65.693288][ T6715] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #3: block 1: comm syz.6.563: lblock 1 mapped to illegal pblock 1 (length 1)
[   65.696721][ T6715] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   65.697403][ T6715] EXT4-fs (loop6): Remounting filesystem read-only
[   65.697451][ T6715] Quota error (device loop6): write_blk: dquota write failed
[   65.697482][ T6715] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[   65.697531][ T6715] Quota error (device loop6): v2_write_file_info: Can't write info structure
[   65.699526][    C1] EXT4-fs (loop6): error count since last fsck: 1
[   65.699536][    C1] EXT4-fs (loop6): initial error at time 65: ext4_map_blocks:832: inode 3: block 1
[   65.699554][    C1] EXT4-fs (loop6): last error at time 65: ext4_map_blocks:832: inode 3: block 1
[   65.714463][ T6715] EXT4-fs (loop6): 1 orphan inode deleted
[   65.714945][ T6715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.756644][ T5047] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.814578][ T5470] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.874985][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.875208][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.013934][ T6285] hsr_slave_0: left promiscuous mode
[   66.015315][ T6285] hsr_slave_1: left promiscuous mode
[   66.015752][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.015763][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.018672][   T50] Bluetooth: hci2: command tx timeout
[   66.021346][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.021377][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.025813][ T6285] veth1_macvtap: left allmulticast mode
[   66.026030][ T6285] veth1_macvtap: left promiscuous mode
[   66.026063][ T6285] veth0_macvtap: left promiscuous mode
[   66.026113][ T6285] veth1_vlan: left promiscuous mode
[   66.026146][ T6285] veth0_vlan: left promiscuous mode
[   66.269185][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.269380][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.305731][ T6285] team0 (unregistering): Port device team_slave_1 removed
[   66.319812][ T6285] team0 (unregistering): Port device team_slave_0 removed
[   66.423987][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9
[   66.429606][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.429681][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.429910][ T6637] bridge_slave_0: entered allmulticast mode
[   66.448270][ T6637] bridge_slave_0: entered promiscuous mode
[   66.451640][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.453020][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.454344][ T6637] bridge_slave_1: entered allmulticast mode
[   66.455994][ T6637] bridge_slave_1: entered promiscuous mode
[   66.466051][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.473875][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.485356][ T6637] team0: Port device team_slave_0 added
[   66.487767][ T6637] team0: Port device team_slave_1 added
[   66.619407][ T6764] loop3: detected capacity change from 0 to 512
[   66.685662][ T6764] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[   67.452200][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.453670][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.458727][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.459370][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.459378][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.459391][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.529072][ T6637] hsr_slave_0: entered promiscuous mode
[   67.530575][ T6637] hsr_slave_1: entered promiscuous mode
[   67.664490][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.665407][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.785140][ T6637] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   67.790436][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   67.791042][ T6637] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   67.793154][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   67.794464][ T6637] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   67.797025][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   67.801204][ T6637] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   67.819405][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.905131][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.907264][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10
[   67.922089][ T6637] 8021q: adding VLAN 0 to HW filter on device team0
[   67.936101][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.936156][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.956284][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.956342][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.098772][   T50] Bluetooth: hci2: command tx timeout
[   68.117754][ T6823] netlink: 'syz.6.588': attribute type 4 has an invalid length.
[   68.313834][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.354161][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.354382][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.570666][ T6637] veth0_vlan: entered promiscuous mode
[   68.574255][ T6867] netlink: 'syz.2.599': attribute type 3 has an invalid length.
[   68.576433][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[   68.581924][ T6637] veth1_vlan: entered promiscuous mode
[   68.618076][ T6637] veth0_macvtap: entered promiscuous mode
[   68.626853][ T6637] veth1_macvtap: entered promiscuous mode
[   68.631108][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11
[   68.646245][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.666168][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.689911][ T6338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.690234][ T6338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.690269][ T6338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.690294][ T6338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.731813][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.731850][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.752575][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.752614][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.841845][ T6890] syz.7.539 (6890): drop_caches: 0
[   68.879367][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.881292][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.018938][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.020679][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.229605][   T50] Bluetooth: hci2: command tx timeout
[   70.232723][ T6927] loop3: detected capacity change from 0 to 512
[   70.251145][ T6927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   70.261533][ T6927] EXT4-fs (loop3): 1 truncate cleaned up
[   70.262062][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.294735][ T6927] EXT4-fs error (device loop3): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.3.623: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1
[   70.302674][ T6927] EXT4-fs (loop3): Remounting filesystem read-only
[   70.419383][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.492523][ T6949] loop3: detected capacity change from 0 to 256
[   70.537496][ T6949] FAT-fs (loop3): data area starts beyond volume (274 > 64)
[   70.537536][ T6949] FAT-fs (loop3): Can't find a valid FAT filesystem
[   70.778627][ T6965] loop6: detected capacity change from 0 to 8192
[   71.622242][ T7009] capability: warning: `syz.5.658' uses 32-bit capabilities (legacy support in use)
[   71.628042][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.656'.
[   71.708142][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.716355][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.811571][ T7031] loop6: detected capacity change from 0 to 512
[   71.814279][ T7031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   71.814324][ T7031] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 2304
[   71.863748][ T7033] loop6: detected capacity change from 0 to 1024
[   71.866069][ T7033] EXT4-fs: Ignoring removed bh option
[   71.882481][ T7033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.893756][ T5470] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.941832][ T7042] loop7: detected capacity change from 0 to 512
[   71.946653][ T7042] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   71.963365][ T7042] EXT4-fs (loop7): 1 truncate cleaned up
[   71.964039][ T7042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.990547][ T6637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.053855][ T7049] loop7: detected capacity change from 0 to 512
[   72.071393][ T7049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.084241][ T6637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.260439][   T50] Bluetooth: hci2: command tx timeout
[   72.921528][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.925790][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.036059][ T7100] fuse: Unknown parameter 'g00000000000000000000'
[   74.037059][ T7115] loop5: detected capacity change from 0 to 512
[   74.047110][ T7115] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.699: corrupted in-inode xattr: invalid ea_ino
[   74.047155][ T7115] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.049646][ T7115] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.699: couldn't read orphan inode 15 (err -117)
[   74.049675][ T7115] loop5: lost filesystem error report for type 5 error -117
[   74.054323][ T7115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.088848][ T5047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.193900][ T7125] loop5: detected capacity change from 0 to 4096
[   74.196596][ T7125] EXT4-fs: Ignoring removed orlov option
[   74.209321][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.337780][ T5047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.429620][ T7175] loop3: detected capacity change from 0 to 512
[   75.432173][ T7175] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.458025][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.476347][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.620934][ T7183] futex_wake_op: syz.3.723 tries to shift op by -1; fix this program
[   75.723494][ T6340] IPVS: starting estimator thread 0...
[   75.767005][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.727'.
[   75.809993][ T7190] IPVS: using max 59 ests per chain, 141600 per kthread
[   75.852666][ T7195] fuse: Bad value for 'fd'
[   76.199706][ T7166] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   76.199783][ T7166] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   76.207203][ T7166] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   76.212049][ T7166] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   76.213291][ T7166] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   76.215186][ T7166] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   76.218423][ T7166] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   76.219746][ T7166] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   76.223652][ T7166] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   76.227400][ T7166] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   76.228851][ T7166] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   76.231268][ T7166] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   76.233060][ T7166] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   76.234415][ T7166] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   76.237778][ T7166] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   76.243117][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.243338][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.285825][ T7198] netlink: 'syz.2.729': attribute type 11 has an invalid length.
[   76.306201][ T7202] binder: 7201:7202 tried to acquire reference to desc 0, got 1 instead
[   76.309373][ T7202] binder: 7201:7202 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   76.309416][ T7202] binder: 7202 RLIMIT_NICE not set
[   76.309528][ T7202] binder: 7202 RLIMIT_NICE not set
[   76.309588][ T7202] binder: send failed reply for transaction 10 to 7201:7202
[   76.309607][ T7202] binder: 7201:7202 ioctl c0306201 20000180 returned -14
[   76.310055][   T10] binder: undelivered TRANSACTION_COMPLETE
[   76.310071][   T10] binder: undelivered TRANSACTION_ERROR: 29201
[   76.380354][   T50] Bluetooth: hci0: unexpected event for opcode 0x080b
[   76.421617][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.421825][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.432648][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.438055][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.440638][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.440832][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.808437][ T7227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   76.924570][ T7229] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   76.986550][ T7229] md: could not open device unknown-block(1,0).
[   77.053692][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.054293][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.380110][ T7241] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   78.211511][ T7249] fuse: Bad value for 'fd'
[   78.240038][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.241824][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.307534][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[   78.307553][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout
[   78.307594][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[   78.307606][ T4711] Bluetooth: hci3: command 0x0c1a tx timeout
[   78.345325][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'.
[   78.415300][ T7265] syzkaller0: entered promiscuous mode
[   78.415343][ T7265] syzkaller0: entered allmulticast mode
[   78.473497][   T30] audit: type=1326 audit(78.393:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.473616][   T30] audit: type=1326 audit(78.393:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474009][   T30] audit: type=1326 audit(78.393:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474025][   T30] audit: type=1326 audit(78.393:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474041][   T30] audit: type=1326 audit(78.393:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474055][   T30] audit: type=1326 audit(78.393:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474070][   T30] audit: type=1326 audit(78.393:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474182][   T30] audit: type=1326 audit(78.393:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474259][   T30] audit: type=1326 audit(78.393:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.474325][   T30] audit: type=1326 audit(78.393:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7269 comm="syz.2.760" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97b782e8 code=0x7ffc0000
[   78.650442][ T7278] tipc: Started in network mode
[   78.650486][ T7278] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[   78.650891][ T7278] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   78.693802][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.695908][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.700086][ T7282] fuse: Bad value for 'fd'
[   78.859693][ T7286] FAULT_INJECTION: forcing a failure.
[   78.859693][ T7286] name failslab, interval 1, probability 0, space 0, times 0
[   78.859734][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.5.767 Not tainted syzkaller #0 PREEMPT 
[   78.859747][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   78.859754][ T7286] Call trace:
[   78.859758][ T7286]  show_stack+0x2c/0x3c (C)
[   78.859781][ T7286]  __dump_stack+0x30/0x40
[   78.859797][ T7286]  dump_stack_lvl+0xd8/0x12c
[   78.859810][ T7286]  dump_stack+0x1c/0x28
[   78.859821][ T7286]  should_fail_ex+0x41c/0x590
[   78.859835][ T7286]  should_failslab+0xc4/0x120
[   78.859848][ T7286]  kmem_cache_alloc_noprof+0x94/0x5d4
[   78.859862][ T7286]  security_file_alloc+0x3c/0x300
[   78.859873][ T7286]  init_file+0x90/0x28c
[   78.859882][ T7286]  alloc_empty_file+0x80/0x1cc
[   78.859890][ T7286]  alloc_file+0x58/0x98
[   78.859898][ T7286]  alloc_file_pseudo+0xe0/0x198
[   78.859906][ T7286]  sock_alloc_file+0xb4/0x1ac
[   78.859916][ T7286]  __sys_socket+0x90/0xec
[   78.859925][ T7286]  __arm64_sys_socket+0x84/0x9c
[   78.859934][ T7286]  invoke_syscall+0x98/0x244
[   78.859947][ T7286]  el0_svc_common+0xec/0x23c
[   78.859958][ T7286]  do_el0_svc+0x4c/0x5c
[   78.859970][ T7286]  el0_svc+0x64/0x260
[   78.859981][ T7286]  el0t_64_sync_handler+0x44/0x104
[   78.859991][ T7286]  el0t_64_sync+0x198/0x19c
[   79.142759][ T7296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.196205][ T7294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.201570][ T7294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.206287][ T7294] warning: `syz.7.771' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.215015][    T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   79.217480][    T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   79.220337][ T7294] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[   79.450466][ T7310] FAULT_INJECTION: forcing a failure.
[   79.450466][ T7310] name failslab, interval 1, probability 0, space 0, times 0
[   79.450516][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.3.778 Not tainted syzkaller #0 PREEMPT 
[   79.450532][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   79.450539][ T7310] Call trace:
[   79.450543][ T7310]  show_stack+0x2c/0x3c (C)
[   79.450564][ T7310]  __dump_stack+0x30/0x40
[   79.450577][ T7310]  dump_stack_lvl+0xd8/0x12c
[   79.450589][ T7310]  dump_stack+0x1c/0x28
[   79.450600][ T7310]  should_fail_ex+0x41c/0x590
[   79.450613][ T7310]  should_failslab+0xc4/0x120
[   79.450627][ T7310]  kmem_cache_alloc_noprof+0x94/0x5d4
[   79.450640][ T7310]  security_inode_alloc+0x40/0x304
[   79.450649][ T7310]  inode_init_always_gfp+0x704/0xbac
[   79.450661][ T7310]  alloc_inode+0x9c/0x198
[   79.450671][ T7310]  sock_alloc+0x4c/0x204
[   79.450680][ T7310]  __sock_create+0x108/0x670
[   79.450689][ T7310]  sock_create_kern+0x4c/0x64
[   79.450698][ T7310]  start_sync_thread+0xae4/0x1f58
[   79.450707][ T7310]  do_ip_vs_set_ctl+0x388/0x93c
[   79.450719][ T7310]  nf_setsockopt+0xa0/0xe4
[   79.450731][ T7310]  ip_setsockopt+0x118/0x128
[   79.450742][ T7310]  tcp_setsockopt+0xcc/0xe8
[   79.450750][ T7310]  sock_common_setsockopt+0xb0/0xcc
[   79.450759][ T7310]  smc_setsockopt+0x1e0/0xb60
[   79.450771][ T7310]  do_sock_setsockopt+0x1f0/0x330
[   79.450781][ T7310]  __sys_setsockopt+0x104/0x170
[   79.450790][ T7310]  __arm64_sys_setsockopt+0xc8/0xe4
[   79.450800][ T7310]  invoke_syscall+0x98/0x244
[   79.450812][ T7310]  el0_svc_common+0xec/0x23c
[   79.450824][ T7310]  do_el0_svc+0x4c/0x5c
[   79.450835][ T7310]  el0_svc+0x64/0x260
[   79.450845][ T7310]  el0t_64_sync_handler+0x44/0x104
[   79.450855][ T7310]  el0t_64_sync+0x198/0x19c
[   79.450887][ T7310] socket: no more sockets
[   79.450891][ T7310] IPVS: Error during creation of socket; terminating
[   79.777940][   T10] tipc: Node number set to 43690
[   79.791869][ T7331] loop7: detected capacity change from 0 to 128
[   79.799623][ T7331] EXT4-fs: Ignoring removed mblk_io_submit option
[   79.799655][ T7331] EXT4-fs: Ignoring removed bh option
[   79.801809][ T4720] Bluetooth: hci4: ACL packet for unknown connection handle 201
[   79.841067][ T7331] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.868036][ T7331] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (4096)
[   79.886478][ T7339] ip_tables: iptables: counters copy to user failed while replacing table
[   79.889303][   T10] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[   79.941796][ T7340] fido_id[7340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   79.962191][ T6637] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.063171][ T7363] loop7: detected capacity change from 0 to 512
[   80.074320][ T7363] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[   80.164295][ T7374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   80.180914][ T7374] md: array md0 already has disks!
[   80.215156][ T7374] md: could not open device unknown-block(1,0).
[   80.215285][ T7374] md: error, md_import_device() returned -16
[   80.232299][ T7376] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.250555][ T7374] md: could not open device unknown-block(1,1).
[   80.250603][ T7374] md: error, md_import_device() returned -16
[   80.303408][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.303629][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.363701][ T7390] 9pnet_virtio: no channels available for device syz
[   80.400446][ T4711] Bluetooth: hci3: command 0x0c1a tx timeout
[   80.401392][ T4711] Bluetooth: hci1: command 0x0c1a tx timeout
[   80.402284][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout
[   80.402588][ T4711] Bluetooth: hci2: command 0x0c1a tx timeout
[   80.515235][ T7398] loop3: detected capacity change from 0 to 128
[   80.531012][ T7398] FAULT_INJECTION: forcing a failure.
[   80.531012][ T7398] name failslab, interval 1, probability 0, space 0, times 0
[   80.531063][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.3.812 Not tainted syzkaller #0 PREEMPT 
[   80.531076][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   80.531083][ T7398] Call trace:
[   80.531086][ T7398]  show_stack+0x2c/0x3c (C)
[   80.531114][ T7398]  __dump_stack+0x30/0x40
[   80.531130][ T7398]  dump_stack_lvl+0xd8/0x12c
[   80.531142][ T7398]  dump_stack+0x1c/0x28
[   80.531153][ T7398]  should_fail_ex+0x41c/0x590
[   80.531166][ T7398]  should_failslab+0xc4/0x120
[   80.531179][ T7398]  kmem_cache_alloc_noprof+0x94/0x5d4
[   80.531192][ T7398]  security_inode_alloc+0x40/0x304
[   80.531201][ T7398]  inode_init_always_gfp+0x704/0xbac
[   80.531213][ T7398]  alloc_inode+0x9c/0x198
[   80.531223][ T7398]  new_inode+0x20/0x50
[   80.531233][ T7398]  fat_build_inode+0x12c/0x220
[   80.531244][ T7398]  vfat_lookup+0x220/0x41c
[   80.531255][ T7398]  lookup_one_qstr_excl+0xe8/0x200
[   80.531267][ T7398]  __start_dirop+0xb8/0xf4
[   80.531275][ T7398]  filename_create+0x194/0x2b0
[   80.531285][ T7398]  filename_mknodat+0x184/0x5a0
[   80.531295][ T7398]  __arm64_sys_mknodat+0xc0/0xe8
[   80.531305][ T7398]  invoke_syscall+0x98/0x244
[   80.531317][ T7398]  el0_svc_common+0xec/0x23c
[   80.531329][ T7398]  do_el0_svc+0x4c/0x5c
[   80.531340][ T7398]  el0_svc+0x64/0x260
[   80.531351][ T7398]  el0t_64_sync_handler+0x44/0x104
[   80.531361][ T7398]  el0t_64_sync+0x198/0x19c
[   80.546345][ T4720] Bluetooth: hci3: unexpected event for opcode 0x0402
[   80.559552][ T6282] IPVS: starting estimator thread 0...
[   80.653488][ T7403] IPVS: using max 52 ests per chain, 124800 per kthread
[   80.845567][ T7426] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   80.850923][ T7426] netlink: 'syz.3.821': attribute type 4 has an invalid length.
[   80.904090][ T7430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   80.934173][ T7430] md: array md0 already has disks!
[   80.965965][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.825'.
[   80.968352][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.968746][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.975523][ T7430] md: could not open device unknown-block(1,0).
[   80.975571][ T7430] md: error, md_import_device() returned -16
[   81.006757][ T7438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.825'.
[   81.010897][ T7430] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2.
[   81.010943][ T7430] md: pers->run() failed ...
[   81.120661][ T7449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   81.177014][ T7449] md: could not open device unknown-block(1,0).
[   81.237294][ T7460] fuse: Bad value for 'rootmode'
[   81.614675][ T7503] FAULT_INJECTION: forcing a failure.
[   81.614675][ T7503] name fail_futex, interval 1, probability 0, space 0, times 1
[   81.618143][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.5.842 Not tainted syzkaller #0 PREEMPT 
[   81.618161][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   81.618167][ T7503] Call trace:
[   81.618171][ T7503]  show_stack+0x2c/0x3c (C)
[   81.618195][ T7503]  __dump_stack+0x30/0x40
[   81.618208][ T7503]  dump_stack_lvl+0xd8/0x12c
[   81.618220][ T7503]  dump_stack+0x1c/0x28
[   81.618232][ T7503]  should_fail_ex+0x41c/0x590
[   81.618244][ T7503]  should_fail+0x14/0x24
[   81.618255][ T7503]  get_futex_key+0x1ec/0x12b0
[   81.618266][ T7503]  futex_wait_setup+0x58/0x674
[   81.618278][ T7503]  __futex_wait+0x108/0x25c
[   81.618289][ T7503]  futex_wait+0x108/0x2c0
[   81.618300][ T7503]  do_futex+0x320/0x378
[   81.618309][ T7503]  __arm64_sys_futex+0x2e4/0x418
[   81.618320][ T7503]  invoke_syscall+0x98/0x244
[   81.618332][ T7503]  el0_svc_common+0xec/0x23c
[   81.618343][ T7503]  do_el0_svc+0x4c/0x5c
[   81.618354][ T7503]  el0_svc+0x64/0x260
[   81.618365][ T7503]  el0t_64_sync_handler+0x44/0x104
[   81.618375][ T7503]  el0t_64_sync+0x198/0x19c
[   81.751472][ T7515] ªªªªªªaaaaaaaaa: renamed from lo (while UP)
[   82.494723][ T4711] Bluetooth: hci4: command 0x0c1a tx timeout
[   82.495363][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[   82.497962][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout
[   82.974794][ T7552] syz.2.861 uses obsolete (PF_INET,SOCK_PACKET)
[   84.396328][ T7473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.581789][ T7574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   84.603400][ T7574] md: could not open device unknown-block(1,0).
[   84.603455][ T7574] md: error, md_import_device() returned -16
[   84.619570][ T7580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   84.634416][ T7582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   84.639353][ T7574] md: could not open device unknown-block(1,1).
[   84.641466][ T7574] md: error, md_import_device() returned -16
[   84.642625][ T7580] md: could not open device unknown-block(1,0).
[   84.642672][ T7580] md: error, md_import_device() returned -16
[   84.683518][ T7574] md: pers->run() failed ...
[   84.683756][ T7580] md: could not open device unknown-block(1,1).
[   84.683787][ T7580] md: error, md_import_device() returned -16
[   84.726069][ T7580] md: pers->run() failed ...
[   84.940035][ T7607] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   84.950163][ T7610] loop3: detected capacity change from 0 to 1024
[   84.953008][ T7610] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   84.953989][ T7610] JBD2: no valid journal superblock found
[   84.960482][ T7610] EXT4-fs (loop3): Could not load journal inode
[   85.398626][ T7623] overlayfs: failed to resolve './file0': -2
[   86.473193][ T7633] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.583527][ T7635] loop7: detected capacity change from 0 to 1024
[   86.605975][   T30] kauditd_printk_skb: 6580 callbacks suppressed
[   86.606013][   T30] audit: type=1326 audit(86.479:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7640 comm="syz.5.898" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d9782e8 code=0x0
[   86.612124][ T7637] loop3: detected capacity change from 0 to 512
[   86.613202][ T7635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.618585][ T7637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.629823][ T7637] EXT4-fs (loop3): 1 truncate cleaned up
[   86.630327][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.639305][ T7635] ------------[ cut here ]------------
[   86.639320][ T7635] WARNING: block/blk-settings.c:497 at blk_validate_limits+0x1174/0x1c88, CPU#1: syz.7.896/7635
[   86.642089][ T7635] Modules linked in:
[   86.642775][ T7635] CPU: 1 UID: 0 PID: 7635 Comm: syz.7.896 Not tainted syzkaller #0 PREEMPT 
[   86.644324][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   86.646090][ T7635] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   86.647461][ T7635] pc : blk_validate_limits+0x1174/0x1c88
[   86.648444][ T7635] lr : blk_validate_limits+0x1174/0x1c88
[   86.649441][ T7635] sp : ffff800093c16e20
[   86.650161][ T7635] x29: ffff800093c16e70 x28: 1ffff00012782e0a x27: 1ffff00012782df9
[   86.651587][ T7635] x26: dfff800000000000 x25: 1ffff00012782df9 x24: 0000000000000000
[   86.653017][ T7635] x23: 00000000ffffffff x22: ffff800093c17050 x21: 0000000000000a00
[   86.654443][ T7635] x20: 0000000000001000 x19: ffff800093c16fa0 x18: 00000000ffffffff
[   86.655776][ T7635] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
[   86.657174][ T7635] x14: ffff80008b0df2b0 x13: 0000000000000001 x12: 0000000000000003
[   86.658563][ T7635] x11: 0000000000001000 x10: 0000000000080000 x9 : 00000000000017df
[   86.659932][ T7635] x8 : ffff800098ff9000 x7 : 0000000000000000 x6 : 0000000000000000
[   86.661358][ T7635] x5 : ffff80008ab7e970 x4 : 0000000000000008 x3 : ffff8000817c89f4
[   86.662750][ T7635] x2 : 00000000ffffffff x1 : ffff0000f0078000 x0 : 0000000000000001
[   86.664137][ T7635] Call trace:
[   86.664705][ T7635]  blk_validate_limits+0x1174/0x1c88 (P)
[   86.665681][ T7635]  queue_limits_commit_update+0x90/0x348
[   86.666672][ T7635]  loop_configure+0x6fc/0xbb8
[   86.667507][ T7635]  lo_ioctl+0x7a8/0x1740
[   86.668273][ T7635]  blkdev_ioctl+0x574/0x904
[   86.669049][ T7635]  __arm64_sys_ioctl+0x154/0x1cc
[   86.669889][ T7635]  invoke_syscall+0x98/0x244
[   86.670675][ T7635]  el0_svc_common+0xec/0x23c
[   86.671499][ T7635]  do_el0_svc+0x4c/0x5c
[   86.672184][ T7635]  el0_svc+0x64/0x260
[   86.672872][ T7635]  el0t_64_sync_handler+0x44/0x104
[   86.673760][ T7635]  el0t_64_sync+0x198/0x19c
[   86.674523][ T7635] irq event stamp: 2600
[   86.675239][ T7635] hardirqs last  enabled at (2599): [<ffff8000869a9950>] _raw_spin_unlock_irqrestore+0x38/0x98
[   86.677070][ T7635] hardirqs last disabled at (2600): [<ffff8000869841d4>] el1_brk64+0x20/0x54
[   86.678632][ T7635] softirqs last  enabled at (2552): [<ffff80008013b050>] fpsimd_restore_current_state+0x39c/0x9c8
[   86.680545][ T7635] softirqs last disabled at (2550): [<ffff80008013acf8>] fpsimd_restore_current_state+0x44/0x9c8
[   86.682254][ T7635] ---[ end trace 0000000000000000 ]---
[   86.727662][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.763935][ T6637] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.