last executing test programs:

3m58.954930192s ago: executing program 0 (id=163):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9)
recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0, 0x35}], 0x1}, 0x20000}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)

3m58.789822152s ago: executing program 0 (id=164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/178, 0xb2}], 0x1}, 0x7fffffff}], 0x1, 0x122, 0x0)

3m57.95274572s ago: executing program 0 (id=169):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea6c20c6072f36514000cc00800250007000200060019c00364bc24eab556a705251e618294d4938037e786a62c2f04000000000000001bd79fdd69d0001000000e4509c5", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m57.78263613s ago: executing program 0 (id=173):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x60)

3m56.901085278s ago: executing program 0 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0)

3m56.771155438s ago: executing program 0 (id=183):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0xc}, {&(0x7f0000000040)='y\'', 0x2}], 0x3)

3m41.685770492s ago: executing program 32 (id=183):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0xc}, {&(0x7f0000000040)='y\'', 0x2}], 0x3)

2.874792965s ago: executing program 1 (id=1469):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[{0x10, 0x10d, 0x7}], 0x10}}], 0x2, 0x0)

1.978866943s ago: executing program 1 (id=1479):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

1.921246563s ago: executing program 1 (id=1480):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @sit={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @rand_addr=' \x01\x00'}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200480b4}, 0x4008040)

1.828247753s ago: executing program 1 (id=1483):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)='h', 0x1, 0x20020005, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.773260323s ago: executing program 3 (id=1484):
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000106009e24e430f786b66b000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2], 0x44}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0xeb}}}}}}, 0x0)

1.699117703s ago: executing program 1 (id=1485):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

1.691600223s ago: executing program 3 (id=1486):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000240)={[{@nodatacow}, {@noautodefrag}, {@noenospc_debug}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@nodiscard}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x37, 0x0, 0x32, 0x70, 0x31, 0x36, 0x2d, 0x67, 0x25]}}, {@nossd}]}, 0x1, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$binfmt_script(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x95, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x470, 0x28, 0xad, 0x26}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xa, 0x9, 0x8}}}}}}}]}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1.515053783s ago: executing program 2 (id=1489):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x48}}, 0x800)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

1.428431373s ago: executing program 4 (id=1490):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

1.382146352s ago: executing program 2 (id=1491):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0)

1.326932912s ago: executing program 4 (id=1492):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200", 0x19)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000885}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

902.905621ms ago: executing program 5 (id=1495):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@broadcast, 0x4e20, 0x2, 0xc5, 0x12d5c, 0x12d5c}}, 0x44)

854.524082ms ago: executing program 5 (id=1496):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unshare(0x28000400)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @local}, 0x0, 0x2, 0x2}}, 0x26)

779.027321ms ago: executing program 1 (id=1497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x2}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001800), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000480), 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000007c0)}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4)

778.769631ms ago: executing program 5 (id=1498):
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xc0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

618.895611ms ago: executing program 3 (id=1499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

531.975441ms ago: executing program 4 (id=1500):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0)

493.851151ms ago: executing program 2 (id=1501):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x48}}, 0x800)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

285.966221ms ago: executing program 4 (id=1502):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})

278.91397ms ago: executing program 2 (id=1503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

264.13927ms ago: executing program 5 (id=1504):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)

263.11177ms ago: executing program 3 (id=1505):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
write(r3, 0x0, 0x0)

159.04233ms ago: executing program 4 (id=1506):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@broadcast, 0x4e20, 0x2, 0xc5, 0x12d5c, 0x12d5c}}, 0x44)

158.74395ms ago: executing program 2 (id=1507):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400192340835980820180000000000000ff810500000000070058000b480400945f640094272d702d00f9e50000004c8537db9600f85448a4487c752f84338131c76f93364e7be5c3f2e67282b1db0de02c0547fe3af53174b457296d158a7a132e4367f24ad2e5e58a45f28d199eb345f528456c83a0bada7df24fca5cc85f27", 0x85}], 0x1)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9)

152.92697ms ago: executing program 3 (id=1508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

113.07297ms ago: executing program 4 (id=1509):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000240)={[{@nodatacow}, {@noautodefrag}, {@noenospc_debug}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@nodiscard}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x37, 0x0, 0x32, 0x70, 0x31, 0x36, 0x2d, 0x67, 0x25]}}, {@nossd}]}, 0x1, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$binfmt_script(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x95, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x470, 0x28, 0xad, 0x26}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xa, 0x9, 0x8}}}}}}}]}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

63.03266ms ago: executing program 5 (id=1510):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200", 0x19)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000885}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

62.75253ms ago: executing program 2 (id=1511):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}]}}]}, 0x9c}}, 0x0)

43.33813ms ago: executing program 3 (id=1512):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0)

0s ago: executing program 5 (id=1513):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x48}}, 0x800)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

kernel console output (not intermixed with test programs):

_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   62.331067][ T4303] EXT4-fs (loop4): unmounting filesystem.
[   62.368863][   T27] audit: type=1326 audit(62.330:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.380667][   T27] audit: type=1326 audit(62.330:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.386569][   T27] audit: type=1326 audit(62.330:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.403585][   T27] audit: type=1326 audit(62.330:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.412494][   T27] audit: type=1326 audit(62.330:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.417899][   T27] audit: type=1326 audit(62.330:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.422628][   T27] audit: type=1326 audit(62.330:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.433710][   T27] audit: type=1326 audit(62.330:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.438808][   T27] audit: type=1326 audit(62.330:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   62.972311][ T4943] loop3: detected capacity change from 0 to 2048
[   63.081240][ T4887] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.099270][ T4943] loop3: detected capacity change from 0 to 128
[   63.101781][ T4943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   63.111665][ T4943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   63.141526][ T4299] EXT4-fs (loop3): unmounting filesystem.
[   63.172921][ T4947] loop3: detected capacity change from 0 to 128
[   64.515882][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[   64.517518][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[   66.812510][   T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.815460][   T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.817687][   T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.819990][   T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.821982][   T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   66.824496][ T4296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   68.833659][ T4309] Bluetooth: hci5: command 0x0409 tx timeout
[   70.923986][ T4309] Bluetooth: hci5: command 0x041b tx timeout
[   72.743740][ T4958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.745910][ T4958] IPv6: NLM_F_CREATE should be set when creating new route
[   72.941350][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'.
[   72.944339][ T4971] device bridge_slave_1 left promiscuous mode
[   72.945771][ T4971] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.959256][ T4973] loop4: detected capacity change from 0 to 2048
[   72.993894][ T4309] Bluetooth: hci5: command 0x040f tx timeout
[   73.020588][ T4971] device bridge_slave_0 left promiscuous mode
[   73.022014][ T4971] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.168107][   T27] kauditd_printk_skb: 14 callbacks suppressed
[   73.168120][   T27] audit: type=1326 audit(73.130:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.2.226" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9952ba8 code=0x0
[   73.385687][   T27] audit: type=1326 audit(73.350:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.390774][   T27] audit: type=1326 audit(73.350:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.402208][   T27] audit: type=1326 audit(73.350:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.406929][   T27] audit: type=1326 audit(73.350:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.411551][   T27] audit: type=1326 audit(73.350:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.416242][   T27] audit: type=1326 audit(73.350:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.420680][   T27] audit: type=1326 audit(73.350:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.425256][   T27] audit: type=1326 audit(73.350:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   73.430254][   T27] audit: type=1326 audit(73.350:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz.4.230" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[   74.365641][ T4960] chnl_net:caif_netlink_parms(): no params data found
[   74.542175][ T5023] loop2: detected capacity change from 0 to 1024
[   74.547187][ T1614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.560451][ T5021] loop1: detected capacity change from 0 to 512
[   74.582692][ T5021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.612657][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.614333][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.616835][ T4960] device bridge_slave_0 entered promiscuous mode
[   74.620874][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.622968][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   74.632298][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.635237][ T4960] device bridge_slave_1 entered promiscuous mode
[   74.686898][ T5023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   74.772082][ T5023] EXT4-fs (loop2): shut down requested (0)
[   74.784202][ T4295] EXT4-fs (loop1): unmounting filesystem.
[   74.808222][ T1614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.074412][ T4296] Bluetooth: hci5: command 0x0419 tx timeout
[   75.620286][ T1614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.632609][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.656255][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.717290][ T4300] EXT4-fs (loop2): unmounting filesystem.
[   75.738427][ T1614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.780655][ T4960] team0: Port device team_slave_0 added
[   75.789638][ T4960] team0: Port device team_slave_1 added
[   75.801654][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.803334][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.810512][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.833398][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.835373][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.840865][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.965370][ T4960] device hsr_slave_0 entered promiscuous mode
[   76.003856][ T4960] device hsr_slave_1 entered promiscuous mode
[   76.033980][ T4960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.035720][ T4960] Cannot create hsr debugfs directory
[   76.125689][ T1614] tipc: Left network mode
[   76.262404][ T5067] xt_hashlimit: max too large, truncated to 1048576
[   76.269268][ T5067] Cannot find set identified by id 0 to match
[   76.360680][ T5074] loop4: detected capacity change from 0 to 1024
[   76.372859][ T5074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   76.417330][ T5067] lo speed is unknown, defaulting to 1000
[   76.419043][ T5067] lo speed is unknown, defaulting to 1000
[   76.437514][ T5074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.449121][ T5067] lo speed is unknown, defaulting to 1000
[   76.473239][ T5067] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.506842][ T5067] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   76.508348][ T4303] EXT4-fs (loop4): unmounting filesystem.
[   76.648478][ T4960] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   76.730268][ T4960] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   76.730905][ T5067] lo speed is unknown, defaulting to 1000
[   76.838781][ T5096] loop4: detected capacity change from 0 to 1024
[   76.849611][ T5067] lo speed is unknown, defaulting to 1000
[   76.849661][ T4960] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   76.885208][ T4960] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   76.889237][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.919745][ T5067] lo speed is unknown, defaulting to 1000
[   76.921587][ T5067] lo speed is unknown, defaulting to 1000
[   76.949932][ T5096] EXT4-fs (loop4): shut down requested (0)
[   76.992953][ T5067] lo speed is unknown, defaulting to 1000
[   76.996125][ T5067] lo speed is unknown, defaulting to 1000
[   77.010338][ T5067] lo speed is unknown, defaulting to 1000
[   77.101985][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.136577][ T4303] EXT4-fs (loop4): unmounting filesystem.
[   77.160047][ T5115] xt_hashlimit: max too large, truncated to 1048576
[   77.198695][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.200916][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.206999][ T4960] 8021q: adding VLAN 0 to HW filter on device team0
[   77.234841][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.237167][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.239895][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.241540][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.253325][ T5120] Invalid ELF header magic: != ELF
[   77.268837][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.271246][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.273210][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.274771][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.420114][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.424881][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.570890][ T4960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.630905][ T4960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.397695][   T27] kauditd_printk_skb: 117 callbacks suppressed
[   78.397708][   T27] audit: type=1326 audit(78.360:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5135 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[   78.422467][   T27] audit: type=1326 audit(78.380:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5135 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=22 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[   78.427472][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.429919][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.443544][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.448183][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.462517][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.467549][   T27] audit: type=1326 audit(78.430:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5135 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[   78.493515][   T27] audit: type=1326 audit(78.440:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5135 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[   78.498744][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.500953][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.504802][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.507079][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.515798][ T5145] lo speed is unknown, defaulting to 1000
[   78.576154][ T5158] loop2: detected capacity change from 0 to 1024
[   78.624372][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.626786][  T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.671051][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   78.756423][   T27] audit: type=1326 audit(78.720:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.3.268" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db52ba8 code=0x0
[   78.765656][ T5158] EXT4-fs (loop2): shut down requested (0)
[   78.787383][ T5162] xt_hashlimit: max too large, truncated to 1048576
[   78.789459][ T5162] Cannot find set identified by id 0 to match
[   78.841474][ T5167] siw: device registration error -23
[   78.945646][ T4300] EXT4-fs (loop2): unmounting filesystem.
[   79.252076][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.254201][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.430649][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.266428][ T5217] lo speed is unknown, defaulting to 1000
[   80.564470][ T5236] loop4: detected capacity change from 0 to 512
[   80.568874][ T5236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   80.592327][ T5236] EXT4-fs (loop4): 1 truncate cleaned up
[   80.596290][ T5236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   81.482369][ T1614] device hsr_slave_0 left promiscuous mode
[   81.510442][ T1614] device hsr_slave_1 left promiscuous mode
[   81.594032][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.595773][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.599000][ T1614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.600589][ T1614] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.602681][ T1614] device bridge_slave_1 left promiscuous mode
[   81.609671][ T1614] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.652320][ T1614] device bridge_slave_0 left promiscuous mode
[   81.653994][ T1614] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.695116][   T27] audit: type=1107 audit(81.660:3187): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='
[   81.695116][   T27] '
[   81.814356][ T1614] device veth1_macvtap left promiscuous mode
[   81.819118][ T1614] device veth0_macvtap left promiscuous mode
[   81.820690][ T1614] device veth1_vlan left promiscuous mode
[   81.830735][ T1614] device veth0_vlan left promiscuous mode
[   83.676917][ T1614] team0 (unregistering): Port device team_slave_1 removed
[   83.866899][ T1614] team0 (unregistering): Port device team_slave_0 removed
[   84.064430][ T1614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.295223][ T1614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.679335][ T1614] bond0 (unregistering): Released all slaves
[   86.927341][ T5251] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   87.015988][ T4303] EXT4-fs (loop4): unmounting filesystem.
[   87.203402][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.206040][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.218732][ T5307] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[   87.241563][ T5307] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[   87.247316][ T5307] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[   87.249186][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.251502][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.259777][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.264335][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.271478][ T4960] device veth0_vlan entered promiscuous mode
[   87.286874][ T4960] device veth1_vlan entered promiscuous mode
[   87.331186][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.334581][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.336799][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.339431][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.356461][ T4960] device veth0_macvtap entered promiscuous mode
[   87.361755][ T4960] device veth1_macvtap entered promiscuous mode
[   87.392825][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.396965][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.399212][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.401487][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.409225][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.411367][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.421303][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.423121][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.426142][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   87.428238][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.454557][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.460555][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.473131][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.476340][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.478487][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.480455][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.482637][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.515648][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.517463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.519739][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.535195][ T4960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.543483][ T4960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.545459][ T4960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.547364][ T4960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.712976][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.726148][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.729859][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.792160][ T5254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.797022][ T5254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.800459][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.313087][ T5368] loop1: detected capacity change from 0 to 1024
[   88.328895][ T5374] loop2: detected capacity change from 0 to 1024
[   88.383125][ T5375] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   88.398412][ T5337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.401937][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.406031][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.433638][ T5374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   88.515586][ T5374] EXT4-fs (loop2): shut down requested (0)
[   88.570905][   T27] audit: type=1326 audit(88.530:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.5.326" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84552ba8 code=0x0
[   88.719564][ T4300] EXT4-fs (loop2): unmounting filesystem.
[   88.899760][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'.
[   89.291593][ T5434] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET)
[   89.330291][ T5437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.335'.
[   89.464107][ T5445] loop1: detected capacity change from 0 to 1024
[   89.551016][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   90.372864][ T5453] EXT4-fs (loop1): shut down requested (0)
[   90.391902][ T5451] lo speed is unknown, defaulting to 1000
[   90.563644][   T27] audit: type=1326 audit(90.520:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.568356][   T27] audit: type=1326 audit(90.530:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.581204][   T27] audit: type=1326 audit(90.530:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.594096][   T27] audit: type=1326 audit(90.530:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.603347][ T4295] EXT4-fs (loop1): unmounting filesystem.
[   90.619704][   T27] audit: type=1326 audit(90.530:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.641971][   T27] audit: type=1326 audit(90.530:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.662100][   T27] audit: type=1326 audit(90.530:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.682381][   T27] audit: type=1326 audit(90.530:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db52ba8 code=0x7ffc0000
[   90.922917][   T27] audit: type=1326 audit(90.880:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5483 comm="syz.1.351" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x0
[   90.949136][ T5480] lo speed is unknown, defaulting to 1000
[   91.465868][ T5517] loop2: detected capacity change from 0 to 1024
[   91.511707][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   91.610553][ T5517] EXT4-fs (loop2): shut down requested (0)
[   91.817013][ T4300] EXT4-fs (loop2): unmounting filesystem.
[   92.029367][ T5531] loop4: detected capacity change from 0 to 512
[   92.052420][ T5531] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[   92.081530][ T5531] EXT2-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[   92.084805][ T5531] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[   92.438842][ T5554] device sit0 entered promiscuous mode
[   92.614854][ T5561] loop1: detected capacity change from 0 to 1024
[   92.694295][ T5560] lo speed is unknown, defaulting to 1000
[   92.804167][ T5561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   93.695219][ T5576] EXT4-fs (loop1): shut down requested (0)
[   93.743230][ T5572] lo speed is unknown, defaulting to 1000
[   93.940410][ T4295] EXT4-fs (loop1): unmounting filesystem.
[   94.573790][ T5610] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0
[   94.858583][ T5606] loop2: detected capacity change from 0 to 32768
[   94.873934][ T5606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (5606)
[   94.997130][ T5615] ªªªªªª: renamed from syzkaller0
[   95.604861][ T5606] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.608445][ T5606] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   95.617749][ T5606] BTRFS info (device loop2): using free space tree
[   95.735597][ T5626] loop1: detected capacity change from 0 to 1024
[   95.765392][ T5607] loop5: detected capacity change from 0 to 32768
[   95.767935][ T5607] (syz.5.379,5607,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=�one" or missing value
[   95.770499][ T5607] (syz.5.379,5607,0):ocfs2_fill_super:1176 ERROR: status = -22
[   95.825620][ T5626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   95.872780][ T5606] BTRFS info (device loop2): enabling ssd optimizations
[   95.936889][ T5644] netlink: 52 bytes leftover after parsing attributes in process `syz.4.383'.
[   95.940180][ T5626] EXT4-fs (loop1): shut down requested (0)
[   96.041082][   T27] kauditd_printk_skb: 11 callbacks suppressed
[   96.041097][   T27] audit: type=1326 audit(96.000:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5605 comm="syz.5.379" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84552ba8 code=0x0
[   96.101868][ T4295] EXT4-fs (loop1): unmounting filesystem.
[   96.148240][ T4300] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.487599][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   96.713651][ T5675] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0
[   97.054592][ T5682] netlink: 52 bytes leftover after parsing attributes in process `syz.1.394'.
[   97.145378][ T5673] loop2: detected capacity change from 0 to 32768
[   97.149925][ T5673] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.385 (5673)
[   97.341535][ T5673] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   97.348680][ T5673] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   97.350535][ T5673] BTRFS info (device loop2): setting nodatacow, compression disabled
[   97.375285][ T5673] BTRFS info (device loop2): setting datacow
[   97.379035][ T5673] BTRFS info (device loop2): doing ref verification
[   97.380419][ T5673] BTRFS info (device loop2): force clearing of disk cache
[   97.382003][ T5673] BTRFS info (device loop2): turning off barriers
[   97.393774][ T5673] BTRFS info (device loop2): max_inline at 7
[   97.395127][ T5673] BTRFS info (device loop2): using free space tree
[   97.498342][ T5688] lo speed is unknown, defaulting to 1000
[   98.389239][ T5692] loop1: detected capacity change from 0 to 1024
[   98.438397][ T5692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   98.533995][ T5692] EXT4-fs (loop1): shut down requested (0)
[   98.642932][ T5673] BTRFS info (device loop2): enabling ssd optimizations
[   98.651405][ T5673] BTRFS info (device loop2): rebuilding free space tree
[   98.690477][ T4295] EXT4-fs (loop1): unmounting filesystem.
[   98.757789][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'.
[   98.918513][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   98.919235][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.922837][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.019456][ T5738] netlink: 52 bytes leftover after parsing attributes in process `syz.5.405'.
[   99.094813][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 311296 free, is full
[   99.097143][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9678848, pinned=0, reserved=4096, may_use=1540096, readonly=0 zone_unusable=0
[   99.100095][ T1614] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1437696
[   99.102201][ T1614] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   99.104067][ T1614] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   99.105720][ T1614] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   99.107487][ T1614] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 0
[   99.147740][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'.
[   99.160365][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 311296 free, is full
[   99.162654][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9678848, pinned=0, reserved=8192, may_use=1536000, readonly=0 zone_unusable=0
[   99.165827][ T1614] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1433600
[   99.167980][ T1614] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   99.169686][ T1614] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   99.171327][ T1614] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   99.173017][ T1614] BTRFS info (device loop2): delayed_refs_rsv: size 524288 reserved 0
[   99.207657][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 311296 free, is full
[   99.209688][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9678848, pinned=0, reserved=4096, may_use=1540096, readonly=0 zone_unusable=0
[   99.212607][ T1614] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1437696
[   99.214660][ T1614] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   99.216255][ T1614] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   99.217930][ T1614] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   99.219788][ T1614] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 0
[   99.236725][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 311296 free, is full
[   99.238827][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9678848, pinned=0, reserved=8192, may_use=1536000, readonly=0 zone_unusable=0
[   99.241922][ T1614] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1433600
[   99.244103][ T1614] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   99.245770][ T1614] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   99.247406][ T1614] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   99.249074][ T1614] BTRFS info (device loop2): delayed_refs_rsv: size 524288 reserved 0
[   99.329843][ T1614] BTRFS info (device loop2): cannot satisfy tickets, dumping space info
[   99.331906][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 311296 free, is full
[   99.333848][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9678848, pinned=0, reserved=0, may_use=1544192, readonly=0 zone_unusable=0
[   99.548827][ T5762] netlink: 'syz.3.402': attribute type 2 has an invalid length.
[  100.327647][ T1614] BTRFS info (device loop2): space_info DATA+METADATA has 4096 free, is full
[  100.329646][ T1614] BTRFS info (device loop2): space_info total=11534336, used=9986048, pinned=0, reserved=4096, may_use=1540096, readonly=0 zone_unusable=0
[  100.332711][ T1614] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1437696
[  100.334825][ T1614] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  100.336510][ T1614] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  100.338403][ T1614] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  100.340357][ T1614] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 0
[  100.435181][ T5768] loop1: detected capacity change from 0 to 1024
[  100.478196][ T4300] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.503480][ T5763] lo speed is unknown, defaulting to 1000
[  100.512323][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.5.412'.
[  100.522909][ T5770] tipc: Started in network mode
[  100.524393][ T5770] tipc: Node identity 7, cluster identity 5
[  100.525835][ T5770] tipc: Node number set to 7
[  100.550744][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  100.666679][ T5768] EXT4-fs (loop1): shut down requested (0)
[  100.911471][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'.
[  100.941626][ T4295] EXT4-fs (loop1): unmounting filesystem.
[  101.030586][ T5799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.418'.
[  101.260604][ T5816] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  101.453519][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.426'.
[  101.802217][ T5797] loop2: detected capacity change from 0 to 40427
[  101.826561][ T5797] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  101.832418][ T5797] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  101.836745][ T5797] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[  102.041752][ T5820] loop4: detected capacity change from 0 to 32768
[  102.071621][ T5835] loop3: detected capacity change from 0 to 1024
[  102.135706][ T5835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.161873][ T5826] loop5: detected capacity change from 0 to 32768
[  102.228661][ T5826] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.427 (5826)
[  102.238258][ T5840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[  102.240764][ T5826] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.243053][ T5826] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  102.248927][ T5826] BTRFS info (device loop5): enabling auto defrag
[  102.250288][ T5826] BTRFS info (device loop5): max_inline at 0
[  102.251583][ T5826] BTRFS info (device loop5): disabling auto defrag
[  102.253207][ T5826] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  102.256124][ T5826] BTRFS info (device loop5): use lzo compression, level 0
[  102.257856][ T5826] BTRFS info (device loop5): enabling ssd optimizations
[  102.259454][ T5826] BTRFS info (device loop5): using free space tree
[  102.262938][ T5835] EXT4-fs (loop3): shut down requested (0)
[  102.420752][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  102.463902][ T4299] EXT4-fs (loop3): unmounting filesystem.
[  102.579265][ T5866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.433'.
[  103.011050][ T5880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'.
[  103.015650][ T5880] tipc: Started in network mode
[  103.036593][ T5880] tipc: Node identity 7, cluster identity 5
[  103.037874][ T5880] tipc: Node number set to 7
[  103.155018][ T5885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.438'.
[  103.378360][ T5892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'.
[  103.379033][ T5890] loop1: detected capacity change from 0 to 1024
[  103.444106][ T5890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  103.568919][ T5890] EXT4-fs (loop1): shut down requested (0)
[  103.611368][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'.
[  103.623852][ T5901] netlink: 'syz.3.439': attribute type 2 has an invalid length.
[  103.745293][ T4295] EXT4-fs (loop1): unmounting filesystem.
[  103.754718][ T5907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.444'.
[  104.172664][ T4960] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.226841][ T5928] tipc: Started in network mode
[  104.227937][ T5928] tipc: Node identity 7, cluster identity 5
[  104.229302][ T5928] tipc: Node number set to 7
[  104.508539][ T5942] netlink: 'syz.2.452': attribute type 10 has an invalid length.
[  104.603890][ T5942] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  104.771185][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.781570][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.828799][ T5956] loop5: detected capacity change from 0 to 1024
[  104.869788][ T5956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  104.925019][ T5956] EXT4-fs (loop5): shut down requested (0)
[  105.109693][ T4960] EXT4-fs (loop5): unmounting filesystem.
[  105.140706][ T5971] loop3: detected capacity change from 0 to 2048
[  105.211279][ T5971] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  105.219460][ T5971] UDF-fs: Scanning with blocksize 512 failed
[  105.243247][ T5971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.409976][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  105.415446][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  105.420404][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  105.424197][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  105.428115][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  105.431595][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  105.435223][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  105.740966][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.750072][ T5997] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  105.839128][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.863051][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.893711][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.932400][ T5984] loop4: detected capacity change from 0 to 32768
[  105.934470][ T5997] bond0: (slave bond_slave_0): Releasing backup interface
[  105.945062][ T5984] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.460 (5984)
[  105.960584][ T6011] loop1: detected capacity change from 0 to 1024
[  105.967843][ T5984] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.970611][ T5984] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  105.976146][ T5984] BTRFS info (device loop4): enabling auto defrag
[  105.979791][ T5984] BTRFS info (device loop4): max_inline at 0
[  105.983383][ T5984] BTRFS info (device loop4): disabling auto defrag
[  105.985579][ T5997] bond0: (slave bond_slave_1): Releasing backup interface
[  105.989414][ T5984] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  105.996120][ T5984] BTRFS info (device loop4): use lzo compression, level 0
[  106.000030][ T5984] BTRFS info (device loop4): enabling ssd optimizations
[  106.006535][ T5984] BTRFS info (device loop4): using free space tree
[  106.063670][ T6011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  106.126425][ T5997] team0: Port device team_slave_0 removed
[  106.146102][ T6011] EXT4-fs (loop1): shut down requested (0)
[  106.158372][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.160234][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.175669][ T5997] team0: Port device team_slave_1 removed
[  106.177544][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.198850][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.236841][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.251793][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.339435][ T4295] EXT4-fs (loop1): unmounting filesystem.
[  106.341503][ T5997] bond0: (slave wlan1): Releasing backup interface
[  106.376959][ T6006] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  106.379485][ T6008] netlink: 'syz.2.464': attribute type 10 has an invalid length.
[  106.426226][ T6044] netlink: 'syz.5.466': attribute type 2 has an invalid length.
[  107.087385][ T6074] __nla_validate_parse: 5 callbacks suppressed
[  107.087399][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[  107.161119][ T6050] loop1: detected capacity change from 0 to 32768
[  107.184713][ T6050] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.471 (6050)
[  107.195487][ T6050] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  107.200433][ T6050] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  107.202188][ T6050] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  107.218891][ T6050] BTRFS info (device loop1): force lzo compression, level 0
[  107.220619][ T6050] BTRFS info (device loop1): max_inline at 4096
[  107.221980][ T6050] BTRFS info (device loop1): allowing degraded mounts
[  107.223389][ T6050] BTRFS info (device loop1): using free space tree
[  107.311113][ T6086] netlink: 52 bytes leftover after parsing attributes in process `syz.2.479'.
[  107.636522][ T6050] BTRFS info (device loop1): enabling ssd optimizations
[  107.705294][ T4295] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  108.011014][ T6125] loop1: detected capacity change from 0 to 1024
[  108.062499][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  108.181871][ T4303] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.262193][ T6125] EXT4-fs (loop1): shut down requested (0)
[  108.486687][ T4295] EXT4-fs (loop1): unmounting filesystem.
[  108.608000][ T6145] loop2: detected capacity change from 0 to 512
[  108.650260][ T6145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  108.706544][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'.
[  108.806673][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  108.881811][ T6161] netlink: 52 bytes leftover after parsing attributes in process `syz.2.490'.
[  108.948362][ T6131] loop5: detected capacity change from 0 to 32768
[  108.950172][ T6131] XFS: ikeep mount option is deprecated.
[  109.040735][ T6174] loop2: detected capacity change from 0 to 1024
[  109.064511][ T6131] XFS (loop5): Mounting V5 Filesystem
[  109.085207][ T6174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  109.104957][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.170580][ T6170] bond0: (slave rose0): Enslaving as an active interface with an up link
[  109.172819][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  109.206640][ T6188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.239500][ T6131] XFS (loop5): Ending clean mount
[  109.251144][ T6131] XFS (loop5): Quotacheck needed: Please wait.
[  109.320109][ T6131] XFS (loop5): Quotacheck: Done.
[  109.369648][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  109.406222][ T4960] XFS (loop5): Unmounting Filesystem
[  110.062356][ T6201] loop2: detected capacity change from 0 to 32768
[  110.105133][ T6201] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.497 (6201)
[  110.116771][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.503'.
[  110.121309][ T6201] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.128338][ T6201] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  110.130113][ T6201] BTRFS info (device loop2): enabling disk space caching
[  110.131600][ T6201] BTRFS info (device loop2): enabling auto defrag
[  110.132990][ T6201] BTRFS info (device loop2): doing ref verification
[  110.153656][ T6201] BTRFS info (device loop2): use no compression
[  110.155015][ T6201] BTRFS info (device loop2): force clearing of disk cache
[  110.156550][ T6201] BTRFS info (device loop2): disabling disk space caching
[  110.291185][ T6201] BTRFS info (device loop2): enabling ssd optimizations
[  110.296467][ T6201] BTRFS info (device loop2): rebuilding free space tree
[  110.316353][ T6201] BTRFS info (device loop2): disabling free space tree
[  110.317974][ T6201] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  110.320375][ T6201] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  110.423889][ T6201] BTRFS info (device loop2): balance: start -d -m
[  110.428454][ T6201] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  110.560878][ T6201] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  110.604898][ T6257] loop4: detected capacity change from 0 to 4096
[  110.702394][ T6201] BTRFS info (device loop2): found 9 extents, stage: move data extents
[  110.752970][ T6201] BTRFS info (device loop2): found 1 extents, stage: update data pointers
[  110.772788][ T6201] BTRFS info (device loop2): balance: ended with status: 0
[  111.317389][ T4300] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.002003][ T4296] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  113.004266][ T4296] Bluetooth: hci4: Injecting HCI hardware error event
[  113.007521][ T4296] Bluetooth: hci4: hardware error 0x00
[  115.233691][ T4296] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  121.057285][ T6255] lo speed is unknown, defaulting to 1000
[  121.205019][ T6271] block device autoloading is deprecated and will be removed.
[  121.242934][ T6258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.375535][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.4.514'.
[  121.485669][ T6258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.497699][ T6290] loop4: detected capacity change from 0 to 256
[  122.010443][ T6300] hub 2-0:1.0: USB hub found
[  122.018004][ T6300] hub 2-0:1.0: 8 ports detected
[  122.802009][ T4296] Bluetooth: hci5: Invalid connection link type handle 0x00c9
[  123.183344][ T6312] loop1: detected capacity change from 0 to 2048
[  123.234048][ T6312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.436127][ T6258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.473435][    C0] sched: RT throttling activated
[  123.925287][ T6258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.997447][ T6329] bridge0: port 3(ip6gretap1) entered blocking state
[  123.999000][ T6329] bridge0: port 3(ip6gretap1) entered disabled state
[  124.001009][ T6329] device ip6gretap1 entered promiscuous mode
[  124.002707][ T6329] bridge0: port 3(ip6gretap1) entered blocking state
[  124.004248][ T6329] bridge0: port 3(ip6gretap1) entered forwarding state
[  124.860621][ T6329] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[  124.869572][ T6329] bridge0: port 3(ip6gretap1) entered disabled state
[  124.871428][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.873194][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.957311][ T6329] bridge0: port 3(ip6gretap1) entered blocking state
[  124.958913][ T6329] bridge0: port 3(ip6gretap1) entered forwarding state
[  124.960511][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.962048][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.963730][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.965200][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.998374][ T6329] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  125.005783][ T6341] netlink: 52 bytes leftover after parsing attributes in process `syz.4.527'.
[  125.033165][ T6258] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.051226][ T6258] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.081209][ T6258] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.109032][ T6258] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.288624][ T6352] loop1: detected capacity change from 0 to 8192
[  125.311318][ T6352] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.331393][ T6352] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  125.351764][ T6352] REISERFS (device loop1): using ordered data mode
[  125.363154][ T6352] reiserfs: using flush barriers
[  125.372348][ T6352] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.386542][ T6352] REISERFS (device loop1): checking transaction log (loop1)
[  125.801652][ T6352] REISERFS (device loop1): Using r5 hash to sort names
[  125.808329][ T6352] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  125.986613][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  125.989932][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  126.630686][ T6382] loop4: detected capacity change from 0 to 512
[  126.850453][ T6382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  127.714610][ T4303] EXT4-fs (loop4): unmounting filesystem.
[  127.784233][ T6395] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'.
[  128.003709][ T6410] netlink: 'syz.4.540': attribute type 10 has an invalid length.
[  128.149993][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'.
[  128.169340][ T6371] loop5: detected capacity change from 0 to 40427
[  128.195750][ T6371] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  128.197447][ T6371] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  128.212205][ T6371] F2FS-fs (loop5): invalid crc value
[  128.291780][ T6371] F2FS-fs (loop5): Found nat_bits in checkpoint
[  128.408842][ T6371] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  128.410640][ T6371] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  128.461218][ T6399] loop1: detected capacity change from 0 to 32768
[  128.478675][ T6399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.534 (6399)
[  128.483261][ T6399] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.489371][ T6399] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  128.491239][ T6399] BTRFS info (device loop1): using free space tree
[  129.400968][ T6399] BTRFS info (device loop1): enabling ssd optimizations
[  129.621138][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.470430][ T4296] Bluetooth: hci2: Invalid connection link type handle 0x00c9
[  130.567069][ T6471] loop3: detected capacity change from 0 to 1024
[  130.581360][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'.
[  130.672831][ T6471] EXT4-fs: Ignoring removed orlov option
[  130.682584][ T6471] EXT4-fs (loop3): Test dummy encryption mode enabled
[  130.699857][ T6471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  130.818054][ T6490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.549'.
[  131.042725][ T6496] loop5: detected capacity change from 0 to 2048
[  131.066875][ T6496] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  131.068618][ T6496] UDF-fs: Scanning with blocksize 512 failed
[  131.821407][ T6496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.860827][ T6496] 9pnet_fd: Insufficient options for proto=fd
[  132.819020][ T6517] loop1: detected capacity change from 0 to 32768
[  132.854960][ T6517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.560 (6517)
[  132.881843][ T6523] loop5: detected capacity change from 0 to 32768
[  132.885783][ T6517] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.887861][ T6517] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  132.889612][ T6517] BTRFS info (device loop1): using free space tree
[  132.958796][ T6523] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.561 (6523)
[  133.036506][ T6321] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  133.194077][ T6517] BTRFS info (device loop1): enabling ssd optimizations
[  133.370406][ T4296] Bluetooth: hci5: Invalid connection link type handle 0x00c9
[  133.381168][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.548831][ T6573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.566'.
[  133.665289][ T6576] bridge0: port 3(ip6gretap1) entered blocking state
[  133.685371][ T6576] bridge0: port 3(ip6gretap1) entered disabled state
[  133.687436][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  133.698215][ T6576] device ip6gretap1 entered promiscuous mode
[  133.699683][ T6576] bridge0: port 3(ip6gretap1) entered blocking state
[  133.701094][ T6576] bridge0: port 3(ip6gretap1) entered forwarding state
[  133.720175][ T6580] netlink: 'syz.5.567': attribute type 10 has an invalid length.
[  133.749100][ T6580] bridge0: port 3(ip6gretap1) entered disabled state
[  133.750731][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.752394][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.814106][ T6580] bridge0: port 3(ip6gretap1) entered blocking state
[  133.815636][ T6580] bridge0: port 3(ip6gretap1) entered forwarding state
[  133.817142][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.818663][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.820362][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.821857][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.891897][ T6580] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  133.941057][ T6591] netlink: 'syz.1.570': attribute type 10 has an invalid length.
[  133.999838][ T6591] team0: Port device netdevsim0 added
[  134.311489][ T6599] loop2: detected capacity change from 0 to 2048
[  134.375030][ T6599] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  134.376727][ T6599] UDF-fs: Scanning with blocksize 512 failed
[  134.385108][ T4299] EXT4-fs (loop3): unmounting filesystem.
[  134.488382][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.520776][ T6599] 9pnet_fd: Insufficient options for proto=fd
[  134.690145][ T6616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.578'.
[  134.806051][ T6618] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  134.843786][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'.
[  134.941239][ T6604] loop5: detected capacity change from 0 to 32768
[  134.953218][ T6604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.574 (6604)
[  134.968502][ T6604] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.974039][ T6604] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  134.981886][ T6604] BTRFS info (device loop5): using free space tree
[  135.007674][ T6629] netlink: 'syz.4.583': attribute type 10 has an invalid length.
[  135.023108][ T6607] loop1: detected capacity change from 0 to 32768
[  135.031195][ T6607] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.575 (6607)
[  135.182672][ T6604] BTRFS info (device loop5): enabling ssd optimizations
[  135.312532][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.486325][ T6664] loop4: detected capacity change from 0 to 2048
[  135.534219][ T6670] netlink: 52 bytes leftover after parsing attributes in process `syz.5.591'.
[  135.550822][ T6664] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  135.552490][ T6664] UDF-fs: Scanning with blocksize 512 failed
[  135.587574][ T6664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.640005][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  135.664462][ T6664] 9pnet_fd: Insufficient options for proto=fd
[  137.033803][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.605'.
[  137.192984][ T6680] loop5: detected capacity change from 0 to 32768
[  137.222365][ T6685] loop2: detected capacity change from 0 to 32768
[  137.229568][ T6680] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.598 (6680)
[  137.241831][ T6685] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.601 (6685)
[  137.244665][ T6680] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.246846][ T6680] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  137.248645][ T6680] BTRFS info (device loop5): using free space tree
[  137.339291][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'.
[  137.477144][ T6680] BTRFS info (device loop5): enabling ssd optimizations
[  137.587071][ T6727] loop1: detected capacity change from 0 to 2048
[  137.596435][ T6733] loop4: detected capacity change from 0 to 1024
[  137.626273][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.639371][ T6727] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  137.640969][ T6727] UDF-fs: Scanning with blocksize 512 failed
[  137.744923][ T6727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.792828][ T6723] 9pnet_fd: Insufficient options for proto=fd
[  139.466436][ T6750] loop4: detected capacity change from 0 to 512
[  139.469466][ T6751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.617'.
[  139.552849][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  139.693681][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'.
[  139.698331][ T6762] loop2: detected capacity change from 0 to 512
[  139.702080][ T6762] EXT4-fs (loop2): Test dummy encryption mode enabled
[  139.721532][ T6762] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.624: inline data xattr refers to an external xattr inode
[  139.729087][ T6762] EXT4-fs (loop2): Remounting filesystem read-only
[  139.731836][ T6762] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.624: couldn't read orphan inode 12 (err -117)
[  139.744274][ T6762] EXT4-fs (loop2): Remounting filesystem read-only
[  139.745662][ T6762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  141.574252][ T4303] EXT4-fs (loop4): unmounting filesystem.
[  141.616228][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  141.758607][ T6781] netlink: 'syz.2.628': attribute type 10 has an invalid length.
[  141.816577][ T6779] loop5: detected capacity change from 0 to 2048
[  141.958301][ T6787] netlink: 52 bytes leftover after parsing attributes in process `syz.4.631'.
[  142.698802][   T27] audit: type=1400 audit(595.393:3210): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6782 comm="syz.3.629"
[  142.751093][ T6779] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  142.752670][ T6779] UDF-fs: Scanning with blocksize 512 failed
[  142.773854][ T6779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.869274][ T6776] 9pnet_fd: Insufficient options for proto=fd
[  142.913026][ T6795] loop2: detected capacity change from 0 to 512
[  142.960803][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  142.972324][ T6800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.636'.
[  143.058754][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[  143.117717][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  143.219647][ T6812] capability: warning: `syz.2.640' uses deprecated v2 capabilities in a way that may be insecure
[  143.239098][ T6813] netlink: 'syz.5.641': attribute type 10 has an invalid length.
[  143.241823][ T6813] bridge0: port 3(ip6gretap1) entered disabled state
[  143.243373][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.244989][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.274428][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'.
[  143.379896][ T6804] loop1: detected capacity change from 0 to 32768
[  143.388670][ T6804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.638 (6804)
[  143.402241][ T6804] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.405133][ T6804] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  143.407051][ T6804] BTRFS info (device loop1): using free space tree
[  143.587464][ T6834] loop5: detected capacity change from 0 to 2048
[  143.668054][ T6834] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  143.668098][ T6834] UDF-fs: Scanning with blocksize 512 failed
[  143.679512][ T6834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.685032][ T6834] 9pnet_fd: Insufficient options for proto=fd
[  143.703374][ T6804] BTRFS info (device loop1): enabling ssd optimizations
[  143.822218][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.874297][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  144.173953][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'.
[  144.516618][ T6874] netlink: 'syz.2.657': attribute type 10 has an invalid length.
[  144.844229][   T27] audit: type=1400 audit(597.683:3211): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6872 comm="syz.1.659"
[  145.444836][ T6889] loop2: detected capacity change from 0 to 1024
[  145.445366][ T6889] EXT4-fs: Ignoring removed orlov option
[  145.452630][ T6889] EXT4-fs (loop2): Test dummy encryption mode enabled
[  145.498683][ T6889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  145.626813][ T6893] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.629008][ T6893] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.630916][ T6893] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.632690][ T6893] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.674739][ T6893] device vxlan0 entered promiscuous mode
[  147.080333][ T6880] loop4: detected capacity change from 0 to 32768
[  147.099522][ T6880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.661 (6880)
[  147.120520][ T6893] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.122491][ T6893] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.124418][ T6893] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.126107][ T6893] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.129354][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  147.148171][ T6880] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.150327][ T6880] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  147.152185][ T6880] BTRFS info (device loop4): using free space tree
[  147.226794][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'.
[  148.208230][ T6926] loop2: detected capacity change from 0 to 512
[  148.237888][ T6937] netlink: 'syz.3.672': attribute type 10 has an invalid length.
[  148.271094][ T6926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002]
[  148.272971][ T6926] System zones: 1-12
[  148.300035][ T6880] BTRFS error (device loop4): open_ctree failed
[  148.302019][ T6926] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.673: inode #1: comm syz.2.673: iget: illegal inode #
[  148.334273][ T6926] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.673: error while reading EA inode 1 err=-117
[  148.356348][ T6926] EXT4-fs (loop2): 1 orphan inode deleted
[  148.357533][ T6926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  149.324339][   T27] audit: type=1400 audit(602.023:3212): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6945 comm="syz.5.676"
[  149.448330][ T4300] EXT4-fs (loop2): unmounting filesystem.
[  149.618918][ T6971] ªªªªªª: renamed from syzkaller0
[  150.599529][ T6980] binder: 6964:6980 got transaction to invalid handle, 1
[  150.601646][ T6980] binder: 6980:6964 cannot find target node
[  150.602997][ T6980] binder: 6964:6980 transaction call to 0:0 failed 2/29201/-22, size 0-0 line 3054
[  150.606913][ T6980] binder: 6964:6980 ioctl c0306201 20000580 returned -14
[  150.609000][ T6980] binder: 6964:6980 ioctl c0306201 0 returned -14
[  150.618498][ T6980] loop5: detected capacity change from 0 to 512
[  151.473138][ T6993] loop3: detected capacity change from 0 to 1024
[  151.476783][ T6990] netlink: 'syz.1.689': attribute type 10 has an invalid length.
[  151.493699][ T6990] bridge0: port 3(ip6gretap1) entered disabled state
[  151.495254][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.496825][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.213560][ T7001] Bluetooth: MGMT ver 1.22
[  153.063039][ T7011] loop3: detected capacity change from 0 to 1024
[  153.765779][ T6987] loop4: detected capacity change from 0 to 32768
[  153.768184][ T7011] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[  153.769872][ T7011] EXT4-fs (loop3): write access will be enabled during recovery
[  153.771426][ T7011] EXT4-fs (loop3): barriers disabled
[  153.783250][ T6987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.687 (6987)
[  153.788537][ T7011] JBD2: no valid journal superblock found
[  153.789921][ T7011] EXT4-fs (loop3): error loading journal
[  153.793640][ T7019] netlink: 'syz.2.698': attribute type 2 has an invalid length.
[  153.795252][ T7019] netlink: 766 bytes leftover after parsing attributes in process `syz.2.698'.
[  153.834740][ T6987] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.836942][ T6987] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  153.838755][ T6987] BTRFS info (device loop4): using free space tree
[  153.973123][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.983797][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.008204][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.012504][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.125958][ T6987] BTRFS info (device loop4): enabling ssd optimizations
[  154.133320][ T7049] ªªªªªª: renamed from syzkaller0
[  154.206937][ T4303] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.352106][ T7064] loop2: detected capacity change from 0 to 1024
[  156.285246][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'.
[  156.346542][ T7070] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0
[  157.497333][ T7096] loop1: detected capacity change from 0 to 512
[  157.534690][ T7079] loop4: detected capacity change from 0 to 32768
[  157.548439][ T7079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.715 (7079)
[  157.638451][ T7087] loop2: detected capacity change from 0 to 32768
[  157.701715][ T7087] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.718 (7087)
[  157.731282][ T7096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  157.807342][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'.
[  159.572187][   T47] Bluetooth: hci0: command 0x0406 tx timeout
[  159.573600][   T47] Bluetooth: hci1: command 0x0406 tx timeout
[  159.574855][   T47] Bluetooth: hci2: command 0x0406 tx timeout
[  159.586374][ T7079] BTRFS error (device loop4): open_ctree failed
[  159.759761][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'.
[  159.762767][ T7112] loop3: detected capacity change from 0 to 1024
[  160.844390][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (6278)
[  160.946643][ T4295] EXT4-fs (loop1): unmounting filesystem.
[  161.090547][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.730'.
[  161.149742][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.731'.
[  161.450766][ T7141] ªªªªªª: renamed from syzkaller0
[  161.540078][ T7145] loop1: detected capacity change from 0 to 1024
[  161.554444][ T7145] EXT4-fs (loop1): INFO: recovery required on readonly filesystem
[  161.556175][ T7145] EXT4-fs (loop1): write access will be enabled during recovery
[  161.557821][ T7145] EXT4-fs (loop1): barriers disabled
[  161.560314][ T7145] JBD2: no valid journal superblock found
[  161.562575][ T7145] EXT4-fs (loop1): error loading journal
[  161.692844][ T7148] loop1: detected capacity change from 0 to 1024
[  161.873083][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'.
[  161.894613][ T7143] loop2: detected capacity change from 0 to 32768
[  162.701266][ T7143] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.707093][ T7143] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  162.708899][ T7143] BTRFS info (device loop2): using free space tree
[  163.697976][ T7143] BTRFS info (device loop2): enabling ssd optimizations
[  163.905062][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'.
[  163.918485][ T4300] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.925247][ T7194] loop3: detected capacity change from 0 to 8
[  165.699107][ T7194] process 'syz.3.749' launched './file2' with NULL argv: empty string added
[  165.721381][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'.
[  165.738121][ T7194] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.739930][ T7194] SQUASHFS error: Failed to read block 0x0: -5
[  165.749309][ T7194] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.750896][ T7194] SQUASHFS error: Failed to read block 0x0: -5
[  165.988633][ T7215] loop3: detected capacity change from 0 to 512
[  165.994001][ T7215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  166.833958][ T7215] EXT4-fs (loop3): 1 truncate cleaned up
[  166.835240][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  167.140333][ T7213] loop5: detected capacity change from 0 to 32768
[  167.158236][ T7213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.756 (7213)
[  168.326484][ T7213] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.328680][ T7213] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  168.330563][ T7213] BTRFS info (device loop5): using free space tree
[  168.365499][ T4299] EXT4-fs (loop3): unmounting filesystem.
[  169.472103][ T7263] ªªªªªª: renamed from syzkaller0
[  169.619404][ T7213] BTRFS error (device loop5): open_ctree failed
[  172.790588][ T7303] loop5: detected capacity change from 0 to 32768
[  172.801295][ T7303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.778 (7303)
[  172.805372][ T7303] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.807490][ T7303] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  172.809222][ T7303] BTRFS info (device loop5): using free space tree
[  173.882208][ T7303] BTRFS info (device loop5): enabling ssd optimizations
[  173.929838][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.932013][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.962190][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.464358][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'.
[  175.578863][ T7383] ªªªªªª: renamed from syzkaller0
[  175.855771][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.866306][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.873651][   T47] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  177.874348][   T47] Bluetooth: hci0: command 0x0c1a tx timeout
[  178.263295][ T7448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.827'.
[  178.395090][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'.
[  178.422719][ T7452] lo speed is unknown, defaulting to 1000
[  178.635046][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'.
[  179.054311][ T7476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.839'.
[  179.160717][ T7478] netlink: 'syz.4.841': attribute type 10 has an invalid length.
[  179.384303][ T7487] device syzkaller1 entered promiscuous mode
[  179.413024][ T7475] loop2: detected capacity change from 0 to 32768
[  179.424031][ T7475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.840 (7475)
[  179.457961][ T7475] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.460653][ T7475] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  179.462635][ T7475] BTRFS info (device loop2): using free space tree
[  179.632018][ T7475] BTRFS info (device loop2): enabling ssd optimizations
[  179.734759][ T4300] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.992453][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.852'.
[  180.163284][ T7527] netlink: 'syz.2.855': attribute type 10 has an invalid length.
[  180.303268][ T7532] ªªªªªª: renamed from syzkaller0
[  180.919224][ T7538] loop4: detected capacity change from 0 to 32768
[  180.928251][ T7538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.859 (7538)
[  180.941876][ T7538] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.946555][ T7538] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  180.952009][ T7538] BTRFS info (device loop4): using free space tree
[  181.034705][ T7538] BTRFS info (device loop4): enabling ssd optimizations
[  181.220623][ T4303] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.450404][ T7570] ucma_write: process 411 (syz.1.863) changed security contexts after opening file descriptor, this is not allowed.
[  181.679524][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'.
[  181.888910][ T7589] netlink: 'syz.4.869': attribute type 10 has an invalid length.
[  183.368120][ T7596] loop5: detected capacity change from 0 to 32768
[  183.373080][ T7596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.871 (7596)
[  183.382626][ T7600] ªªªªªª: renamed from syzkaller0
[  183.397741][ T7596] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.402266][ T7596] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  183.412142][ T7596] BTRFS info (device loop5): using free space tree
[  183.691510][ T7596] BTRFS info (device loop5): enabling ssd optimizations
[  183.921014][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.171448][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.177879][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.353499][   T27] audit: type=1326 audit(637.303:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.360427][   T27] audit: type=1326 audit(637.313:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.369222][   T27] audit: type=1326 audit(637.323:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.375145][   T27] audit: type=1326 audit(637.323:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.379712][   T27] audit: type=1326 audit(637.323:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.388133][   T27] audit: type=1326 audit(637.323:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.392709][   T27] audit: type=1326 audit(637.323:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.421784][   T27] audit: type=1326 audit(637.333:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=292 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  184.816899][   T27] audit: type=1326 audit(637.333:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9df52ba8 code=0x7ffc0000
[  185.139243][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.880'.
[  185.214351][ T7653] device syzkaller1 entered promiscuous mode
[  185.583674][ T7665] ªªªªªª: renamed from syzkaller0
[  188.175667][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  188.177720][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  188.631017][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.5.900'.
[  188.913196][ T7696] loop3: detected capacity change from 0 to 32768
[  188.922740][ T7696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.902 (7696)
[  189.059661][ T7696] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.061982][ T7696] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  189.067139][ T7696] BTRFS info (device loop3): setting nodatacow, compression disabled
[  189.071192][ T7696] BTRFS info (device loop3): setting datacow
[  189.076220][ T7696] BTRFS info (device loop3): doing ref verification
[  189.079207][ T7696] BTRFS info (device loop3): force clearing of disk cache
[  189.114320][ T7696] BTRFS info (device loop3): turning off barriers
[  189.125735][ T7696] BTRFS info (device loop3): max_inline at 7
[  189.157943][ T7696] BTRFS info (device loop3): using free space tree
[  190.201536][ T4309] Bluetooth: hci5: command 0x0406 tx timeout
[  190.861020][ T7696] BTRFS info (device loop3): enabling ssd optimizations
[  190.865297][ T7696] BTRFS info (device loop3): rebuilding free space tree
[  190.921609][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'.
[  191.215085][ T7765] lo speed is unknown, defaulting to 1000
[  192.196620][ T4299] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  193.898002][ T7810] device vxcan3 entered promiscuous mode
[  194.993256][ T7793] loop1: detected capacity change from 0 to 32768
[  194.996101][ T7793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.934 (7793)
[  195.019107][ T7797] loop4: detected capacity change from 0 to 32768
[  195.021208][ T7793] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.023364][ T7793] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  195.025457][ T7793] BTRFS info (device loop1): setting nodatacow, compression disabled
[  195.027118][ T7793] BTRFS info (device loop1): setting datacow
[  195.028370][ T7793] BTRFS info (device loop1): doing ref verification
[  195.029910][ T7797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.932 (7797)
[  195.034199][ T7793] BTRFS info (device loop1): force clearing of disk cache
[  195.035912][ T7793] BTRFS info (device loop1): turning off barriers
[  195.037324][ T7793] BTRFS info (device loop1): max_inline at 7
[  195.038540][ T7793] BTRFS info (device loop1): using free space tree
[  195.041603][ T7797] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  195.044080][ T7797] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  195.046299][ T7797] BTRFS info (device loop4): using free space tree
[  195.167383][ T7797] BTRFS info (device loop4): enabling ssd optimizations
[  195.173825][ T7793] BTRFS info (device loop1): enabling ssd optimizations
[  195.177196][ T7793] BTRFS info (device loop1): rebuilding free space tree
[  195.264341][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.266586][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.324781][ T4303] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.628128][ T4295] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  199.547801][ T7890] loop1: detected capacity change from 0 to 32768
[  200.317396][ T7890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.955 (7890)
[  200.336846][ T7890] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.339059][ T7890] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  200.340801][ T7890] BTRFS info (device loop1): using free space tree
[  200.360261][ T7903] loop5: detected capacity change from 0 to 32768
[  200.407560][ T7903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.961 (7903)
[  200.423840][ T7903] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.425961][ T7903] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  200.427813][ T7903] BTRFS info (device loop5): setting nodatacow, compression disabled
[  200.429442][ T7903] BTRFS info (device loop5): setting datacow
[  200.430608][ T7903] BTRFS info (device loop5): doing ref verification
[  200.431928][ T7903] BTRFS info (device loop5): force clearing of disk cache
[  200.433368][ T7903] BTRFS info (device loop5): turning off barriers
[  200.468398][ T7903] BTRFS info (device loop5): max_inline at 7
[  200.469782][ T7903] BTRFS info (device loop5): using free space tree
[  200.560183][ T7890] BTRFS info (device loop1): enabling ssd optimizations
[  200.661398][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.673742][ T7903] BTRFS info (device loop5): enabling ssd optimizations
[  200.680605][ T7903] BTRFS info (device loop5): rebuilding free space tree
[  200.712941][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.715528][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.864240][ T4960] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.975063][ T7998] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  202.993610][ T7998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.995200][ T7998] IPv6: NLM_F_CREATE should be set when creating new route
[  203.045031][ T8002] ieee802154 phy0 wpan0: encryption failed: -22
[  204.296656][ T8014] loop1: detected capacity change from 0 to 32768
[  204.311856][ T8014] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.986 (8014)
[  204.325269][ T8014] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.327488][ T8014] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  204.329690][ T8014] BTRFS info (device loop1): setting nodatacow, compression disabled
[  204.331475][ T8014] BTRFS info (device loop1): setting datacow
[  204.332738][ T8014] BTRFS info (device loop1): doing ref verification
[  204.346688][ T8014] BTRFS info (device loop1): force clearing of disk cache
[  204.349451][ T8014] BTRFS info (device loop1): turning off barriers
[  204.358380][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.359593][ T8014] BTRFS info (device loop1): max_inline at 7
[  204.360429][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.361779][ T8014] BTRFS info (device loop1): using free space tree
[  204.368079][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.370823][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.374817][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.377633][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.381535][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.384296][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.387102][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.389861][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.392565][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.395639][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.398608][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.401590][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.404477][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.407277][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.410162][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.412045][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.414184][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.415769][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.417485][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.419184][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.420944][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.422724][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.446076][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.452238][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.463329][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.468708][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.478284][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.484470][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.492863][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.500454][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.507809][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.516184][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.524281][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.531781][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.538589][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.546720][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.551875][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.559258][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.563247][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.569397][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.573323][ T5780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  204.603113][ T5780] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  204.725513][ T8014] BTRFS info (device loop1): enabling ssd optimizations
[  204.728321][ T8014] BTRFS info (device loop1): rebuilding free space tree
[  205.534536][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.539351][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.592552][ T4295] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.599571][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.601674][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.843010][ T8124] netlink: 'syz.3.1022': attribute type 1 has an invalid length.
[  209.853667][ T8124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.855362][ T8124] IPv6: NLM_F_CREATE should be set when creating new route
[  209.961697][ T8101] loop5: detected capacity change from 0 to 32768
[  209.992592][ T8101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1013 (8101)
[  210.088067][ T8101] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.106637][ T8101] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  210.109411][ T8101] BTRFS info (device loop5): setting nodatacow, compression disabled
[  210.111071][ T8101] BTRFS info (device loop5): setting datacow
[  210.112325][ T8101] BTRFS info (device loop5): doing ref verification
[  210.124326][ T8101] BTRFS info (device loop5): force clearing of disk cache
[  210.126128][ T8101] BTRFS info (device loop5): turning off barriers
[  210.128016][ T8101] BTRFS info (device loop5): max_inline at 7
[  210.129363][ T8101] BTRFS info (device loop5): using free space tree
[  211.059365][ T8156] loop3: detected capacity change from 0 to 1024
[  211.137938][ T8101] BTRFS error (device loop5): open_ctree failed
[  211.888123][ T8159] could not allocate digest TFM handle sha1-asm
[  213.198192][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.200044][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.220327][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.222187][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.520932][ T8191] loop2: detected capacity change from 0 to 1024
[  214.472074][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'.
[  214.565291][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.622947][ T8196] loop3: detected capacity change from 0 to 32768
[  214.729657][ T8196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1040 (8196)
[  214.786078][ T8196] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.792508][ T8196] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  214.798622][ T8196] BTRFS info (device loop3): setting nodatacow, compression disabled
[  214.800448][ T8196] BTRFS info (device loop3): setting datacow
[  214.801657][ T8196] BTRFS info (device loop3): doing ref verification
[  214.817754][ T8196] BTRFS info (device loop3): force clearing of disk cache
[  214.819501][ T8196] BTRFS info (device loop3): turning off barriers
[  214.821002][ T8196] BTRFS info (device loop3): max_inline at 7
[  214.822428][ T8196] BTRFS info (device loop3): using free space tree
[  215.032092][ T8209] mkiss: ax0: crc mode is auto.
[  215.325377][ T8210] misc userio: No port type given on /dev/userio
[  215.333461][ T8210] misc userio: The device must be registered before sending interrupts
[  215.356241][ T8210] misc userio: The device must be registered before sending interrupts
[  215.394116][ T8209] can0: slcan on ttyS3.
[  215.744690][ T8200] can0 (unregistered): slcan off ttyS3.
[  215.883819][ T8196] BTRFS info (device loop3): enabling ssd optimizations
[  215.886236][ T8196] BTRFS info (device loop3): rebuilding free space tree
[  216.080400][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.082427][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.256089][ T8224] loop5: detected capacity change from 0 to 32768
[  217.314607][ T8224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1045 (8224)
[  217.787471][ T4299] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.849285][ T8224] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.851693][ T8224] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  217.862079][ T8224] BTRFS info (device loop5): using free space tree
[  218.253568][ T8224] BTRFS info (device loop5): enabling ssd optimizations
[  218.368248][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.742011][ T8318] 9pnet_fd: Insufficient options for proto=fd
[  218.968368][ T8330] loop5: detected capacity change from 0 to 1024
[  220.437547][ T8342] loop2: detected capacity change from 0 to 32768
[  220.450772][ T8342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1068 (8342)
[  220.460847][ T8342] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.463050][ T8342] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  220.470976][ T8342] BTRFS info (device loop2): using free space tree
[  220.591247][ T8354] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1069'.
[  220.667962][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'.
[  220.735768][ T8370] 9pnet_fd: Insufficient options for proto=fd
[  220.766089][ T8342] BTRFS info (device loop2): enabling ssd optimizations
[  220.832216][ T8376] netlink: 'syz.1.1076': attribute type 10 has an invalid length.
[  221.011357][ T4300] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.841151][ T8388] 9pnet_fd: Insufficient options for proto=fd
[  222.804305][ T8402] could not allocate digest TFM handle sha1-asm
[  222.950540][ T8401] netlink: 'syz.2.1081': attribute type 2 has an invalid length.
[  222.959087][ T8409] netlink: 'syz.1.1088': attribute type 13 has an invalid length.
[  222.960863][ T8409] netlink: 'syz.1.1088': attribute type 27 has an invalid length.
[  223.076520][ T8422] loop5: detected capacity change from 0 to 1024
[  223.100603][ T8418] netlink: 'syz.3.1089': attribute type 10 has an invalid length.
[  223.449172][ T8420] loop1: detected capacity change from 0 to 32768
[  223.451476][ T8420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1091 (8420)
[  223.456518][ T8420] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.458652][ T8420] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  223.460499][ T8420] BTRFS info (device loop1): using free space tree
[  224.714146][ T8420] BTRFS info (device loop1): enabling ssd optimizations
[  225.218694][ T8465] could not allocate digest TFM handle sha384-avx
[  225.505596][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.626969][ T8477] netlink: 'syz.3.1105': attribute type 2 has an invalid length.
[  226.878900][ T8488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.423587][ T8518] mkiss: ax0: crc mode is auto.
[  228.457026][ T8518] misc userio: Invalid payload size
[  228.459514][ T8518] misc userio: No port type given on /dev/userio
[  228.563464][ T8519] misc userio: Invalid payload size
[  229.286134][ T8523] netlink: 'syz.3.1117': attribute type 2 has an invalid length.
[  230.149908][ T8530] loop1: detected capacity change from 0 to 1024
[  230.228063][ T8511] loop5: detected capacity change from 0 to 32768
[  230.255450][ T8511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1113 (8511)
[  230.259531][ T8511] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.261656][ T8511] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  230.291005][ T8511] BTRFS info (device loop5): using free space tree
[  231.418535][ T8511] BTRFS error (device loop5): open_ctree failed
[  231.717352][ T8567] netlink: 'syz.3.1124': attribute type 10 has an invalid length.
[  232.036141][ T8577] vxcan1: tx address claim with dlc 1
[  232.728165][ T8578] netlink: 'syz.4.1129': attribute type 2 has an invalid length.
[  233.029937][ T8588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1134'.
[  233.316329][ T8600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.410440][ T8600] device syzkaller0 entered promiscuous mode
[  233.413253][ T8586] loop3: detected capacity change from 0 to 32768
[  233.436156][ T8586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1133 (8586)
[  233.438798][ T8600] tipc: Resetting bearer <eth:syzkaller0>
[  233.452662][ T8586] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  233.460668][ T8586] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  233.470002][ T8586] BTRFS info (device loop3): using free space tree
[  233.473032][ T8599] tipc: Resetting bearer <eth:syzkaller0>
[  233.851459][ T8586] BTRFS info (device loop3): enabling ssd optimizations
[  234.011520][ T4299] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.061042][ T8599] tipc: Disabling bearer <eth:syzkaller0>
[  247.132172][ T8657] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  247.234422][ T4309] Bluetooth: hci0: unexpected event for opcode 0x203b
[  247.478873][ T8683] binder: 8680:8683 Release 1 refcount change on invalid ref 3 ret -22
[  247.610021][ T8684] mkiss: ax0: crc mode is auto.
[  247.678156][ T8684] misc userio: Invalid payload size
[  247.682401][ T8684] misc userio: No port type given on /dev/userio
[  247.776004][ T8685] misc userio: Invalid payload size
[  248.384340][ T8691] dccp_invalid_packet: P.Data Offset(4) too small
[  248.426983][ T8689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  248.428790][ T8689] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  248.431416][ T8691] netlink: 'syz.1.1162': attribute type 1 has an invalid length.
[  248.473597][ T8689] vhci_hcd vhci_hcd.0: Device attached
[  248.476229][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.478291][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.504295][ T8691] device bond1 entered promiscuous mode
[  248.508255][ T8691] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.626586][ T8701] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.629073][ T8701] bond1: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  248.631686][ T8701] bond1: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  248.644262][ T8701] bond1: (slave ip6gre3): making interface the new active one
[  248.646118][ T8701] device ip6gre3 entered promiscuous mode
[  248.650534][ T8701] bond1: (slave ip6gre3): Enslaving as an active interface with an up link
[  248.662074][ T8706] device macvtap1 entered promiscuous mode
[  248.664337][ T8706] device wlan0 entered promiscuous mode
[  248.684145][ T6120] vhci_hcd: vhci_device speed not set
[  248.763652][ T6120] usb 8-1: new full-speed USB device number 2 using vhci_hcd
[  248.773191][ T8706] device wlan0 left promiscuous mode
[  248.863985][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  248.865394][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  249.154176][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  251.392432][ T8692] vhci_hcd: connection reset by peer
[  251.396367][ T5254] vhci_hcd: stop threads
[  251.398109][ T5254] vhci_hcd: release socket
[  251.400070][ T5254] vhci_hcd: disconnect device
[  251.543546][ T8760] ªªªªªª: renamed from syzkaller0
[  252.733133][ T8779] device macvtap1 entered promiscuous mode
[  252.737566][ T8779] device wlan0 entered promiscuous mode
[  252.893766][ T8779] device wlan0 left promiscuous mode
[  253.681895][ T8796] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  253.683205][ T8796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  253.687924][ T8796] vhci_hcd vhci_hcd.0: Device attached
[  253.712862][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.736644][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.015084][ T8806] syz.2.1186 sent an empty control message without MSG_MORE.
[  254.024097][ T8803] ªªªªªª: renamed from syzkaller0
[  254.175387][ T4770] vhci_hcd: vhci_device speed not set
[  254.180906][ T6120] vhci_hcd: vhci_device speed not set
[  254.752431][ T4770] usb 6-1: new full-speed USB device number 2 using vhci_hcd
[  254.950664][ T8812] netlink: 'syz.5.1191': attribute type 10 has an invalid length.
[  255.778911][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.780932][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.806023][ T8797] vhci_hcd: connection reset by peer
[  257.036176][ T6304] vhci_hcd: stop threads
[  257.037348][ T6304] vhci_hcd: release socket
[  257.038265][ T6304] vhci_hcd: disconnect device
[  257.383234][ T8850] netlink: 'syz.3.1206': attribute type 10 has an invalid length.
[  259.282153][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.310702][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.233693][ T4770] vhci_hcd: vhci_device speed not set
[  260.299504][ T8846] loop1: detected capacity change from 0 to 32768
[  260.330499][ T8846] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1205 (8846)
[  260.358776][ T8846] BTRFS error (device loop1): open_ctree failed
[  260.430486][ T8660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (8660)
[  260.574373][ T8897] netlink: 'syz.2.1221': attribute type 10 has an invalid length.
[  263.359234][ T8939] netlink: 'syz.3.1239': attribute type 10 has an invalid length.
[  263.416203][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.421530][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.923082][ T8968] netlink: 'syz.4.1252': attribute type 10 has an invalid length.
[  265.249492][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.253095][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.300723][ T8996] netlink: 'syz.3.1261': attribute type 10 has an invalid length.
[  266.351511][ T8996] team0: Device veth1_vlan failed to register rx_handler
[  266.611065][ T9011] netlink: 'syz.3.1266': attribute type 10 has an invalid length.
[  267.197917][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.203640][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.239583][ T9017] loop5: detected capacity change from 0 to 32768
[  267.250613][ T9017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1270 (9017)
[  267.267059][ T9017] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.273723][ T9017] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  267.280003][ T9017] BTRFS info (device loop5): using free space tree
[  267.411109][ T9017] BTRFS info (device loop5): enabling ssd optimizations
[  267.529545][ T4960] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.202589][ T9069] netlink: 'syz.1.1282': attribute type 10 has an invalid length.
[  269.018189][ T9099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1295'.
[  269.027742][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'.
[  269.105013][ T9089] loop1: detected capacity change from 0 to 32768
[  269.130569][ T9089] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  269.132948][ T9089] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  269.137212][ T9089] BTRFS info (device loop1): setting nodatacow, compression disabled
[  269.140627][ T9089] BTRFS info (device loop1): setting datacow
[  269.142098][ T9089] BTRFS info (device loop1): doing ref verification
[  269.146078][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.148690][ T9089] BTRFS info (device loop1): force clearing of disk cache
[  269.150193][ T9089] BTRFS info (device loop1): turning off barriers
[  269.151880][ T9089] BTRFS info (device loop1): max_inline at 7
[  269.152952][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.154081][ T9089] BTRFS info (device loop1): using free space tree
[  269.179912][ T9100] ªªªªªª: renamed from syzkaller0
[  269.253024][ T9112] binder: 9110:9112 ioctl c0306201 20000080 returned -14
[  269.259738][ T9112] binder: 9110:9112 tried to acquire reference to desc 0, got 1 instead
[  269.267208][ T9112] binder: 9110:9112 DecRefs 0 refcount change on invalid ref 2 ret -22
[  269.372932][ T9089] BTRFS info (device loop1): enabling ssd optimizations
[  269.376461][ T9089] BTRFS info (device loop1): rebuilding free space tree
[  269.469531][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.477681][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.670721][ T4502] BTRFS info (device loop1): space_info DATA+METADATA has 4096 free, is full
[  270.672938][ T4502] BTRFS info (device loop1): space_info total=11534336, used=9986048, pinned=0, reserved=4096, may_use=1540096, readonly=0 zone_unusable=0
[  270.676052][ T4502] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1437696
[  270.678113][ T4502] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  270.679717][ T4502] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  270.681301][ T4502] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  270.683027][ T4502] BTRFS info (device loop1): delayed_refs_rsv: size 262144 reserved 0
[  270.697690][ T4502] BTRFS info (device loop1): space_info DATA+METADATA has 4096 free, is full
[  270.699764][ T4502] BTRFS info (device loop1): space_info total=11534336, used=9986048, pinned=0, reserved=8192, may_use=1536000, readonly=0 zone_unusable=0
[  270.702694][ T4502] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1433600
[  270.704974][ T4502] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  270.706619][ T4502] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  270.708254][ T4502] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  270.709902][ T4502] BTRFS info (device loop1): delayed_refs_rsv: size 524288 reserved 0
[  270.774492][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.776486][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.794813][ T4502] BTRFS info (device loop1): cannot satisfy tickets, dumping space info
[  270.797152][ T4502] BTRFS info (device loop1): space_info DATA+METADATA has 4096 free, is full
[  270.799067][ T4502] BTRFS info (device loop1): space_info total=11534336, used=9986048, pinned=0, reserved=0, may_use=1544192, readonly=0 zone_unusable=0
[  270.801894][ T4502] BTRFS info (device loop1): failing ticket with 98304 bytes
[  270.806522][ T9089] BTRFS info (device loop1): space_info DATA+METADATA has 4096 free, is full
[  270.808708][ T9089] BTRFS info (device loop1): space_info total=11534336, used=9986048, pinned=0, reserved=0, may_use=1544192, readonly=0 zone_unusable=0
[  270.811597][ T9089] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  270.813919][ T9089] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  270.815423][ T9089] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  270.817236][ T9089] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  270.819065][ T9089] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  272.082540][ T9172] device bond1 entered promiscuous mode
[  272.084900][ T9172] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.125499][ T4295] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  272.550706][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.555524][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.665527][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'.
[  272.876883][ T9172] bond1 (unregistering): Released all slaves
[  275.982647][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'.
[  276.101218][ T9308] netlink: 'syz.1.1363': attribute type 29 has an invalid length.
[  276.105520][ T9308] netlink: 'syz.1.1363': attribute type 29 has an invalid length.
[  276.115934][ T9308] netlink: 'syz.1.1363': attribute type 29 has an invalid length.
[  276.210074][ T9297] loop3: detected capacity change from 0 to 32768
[  276.237992][ T9297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1359 (9297)
[  276.277383][ T9297] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  276.279876][ T9297] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  276.289693][ T9297] BTRFS info (device loop3): setting nodatacow, compression disabled
[  276.295228][ T9297] BTRFS info (device loop3): setting datacow
[  276.299426][ T9297] BTRFS info (device loop3): doing ref verification
[  276.301028][ T9297] BTRFS info (device loop3): force clearing of disk cache
[  276.310895][ T9297] BTRFS info (device loop3): turning off barriers
[  276.314834][ T9297] BTRFS info (device loop3): max_inline at 7
[  276.317372][ T9297] BTRFS info (device loop3): using free space tree
[  277.233782][ T9297] BTRFS info (device loop3): enabling ssd optimizations
[  277.236379][ T9297] BTRFS info (device loop3): rebuilding free space tree
[  277.438159][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.440088][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.386259][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'.
[  278.419882][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.421802][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.702269][ T5218] BTRFS info (device loop3): space_info DATA+METADATA has 4096 free, is full
[  278.704213][ T5218] BTRFS info (device loop3): space_info total=11534336, used=9986048, pinned=0, reserved=4096, may_use=1540096, readonly=0 zone_unusable=0
[  278.707065][ T5218] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1437696
[  278.708862][ T5218] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  278.710454][ T5218] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  278.712124][ T5218] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  278.713743][ T5218] BTRFS info (device loop3): delayed_refs_rsv: size 262144 reserved 0
[  278.717410][ T5218] BTRFS info (device loop3): space_info DATA+METADATA has 4096 free, is full
[  278.719358][ T5218] BTRFS info (device loop3): space_info total=11534336, used=9986048, pinned=0, reserved=8192, may_use=1536000, readonly=0 zone_unusable=0
[  278.722281][ T5218] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1433600
[  278.724317][ T5218] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  278.725892][ T5218] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  278.727754][ T5218] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  278.729377][ T5218] BTRFS info (device loop3): delayed_refs_rsv: size 524288 reserved 0
[  278.740162][ T5218] BTRFS info (device loop3): cannot satisfy tickets, dumping space info
[  278.741894][ T5218] BTRFS info (device loop3): space_info DATA+METADATA has 4096 free, is full
[  278.743724][ T5218] BTRFS info (device loop3): space_info total=11534336, used=9986048, pinned=0, reserved=0, may_use=1544192, readonly=0 zone_unusable=0
[  278.746692][ T5218] BTRFS info (device loop3): failing ticket with 98304 bytes
[  278.748226][ T9297] BTRFS info (device loop3): space_info DATA+METADATA has 4096 free, is full
[  278.750189][ T9297] BTRFS info (device loop3): space_info total=11534336, used=9986048, pinned=0, reserved=0, may_use=1544192, readonly=0 zone_unusable=0
[  278.753354][ T9297] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[  278.755525][ T9297] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  278.757234][ T9297] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  278.758800][ T9297] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  278.760643][ T9297] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0
[  279.162604][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'.
[  279.169375][ T9391] netlink: 'syz.1.1387': attribute type 2 has an invalid length.
[  279.341318][ T4299] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  279.344704][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.349337][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.624991][ T9426] binder: 9425:9426 ioctl c0306201 20000080 returned -14
[  280.627988][ T9426] binder: tried to use weak ref as strong ref
[  280.629262][ T9426] binder: 9425:9426 Acquire 1 refcount change on invalid ref 0 ret -22
[  280.644265][ T9426] binder: 9425:9426 DecRefs 0 refcount change on invalid ref 2 ret -22
[  280.724098][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'.
[  280.755605][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.758378][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.880508][ T9442] netlink: 'syz.1.1411': attribute type 2 has an invalid length.
[  282.055131][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1422'.
[  282.251400][   T27] audit: type=1326 audit(735.203:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.257488][   T27] audit: type=1326 audit(735.213:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.257903][   T27] audit: type=1326 audit(735.213:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.258074][   T27] audit: type=1326 audit(735.213:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.261122][   T27] audit: type=1326 audit(735.213:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.261485][   T27] audit: type=1326 audit(735.213:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.261628][   T27] audit: type=1326 audit(735.213:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9952ba8 code=0x7ffc0000
[  282.685626][ T9491] binder: 9490:9491 ioctl c0306201 20000080 returned -14
[  282.686827][ T9491] binder: tried to use weak ref as strong ref
[  282.686867][ T9491] binder: 9490:9491 Acquire 1 refcount change on invalid ref 0 ret -22
[  282.687063][ T9491] binder: 9490:9491 DecRefs 0 refcount change on invalid ref 2 ret -22
[  282.992425][ T9499] netlink: 'syz.1.1436': attribute type 2 has an invalid length.
[  283.269713][ T9505] binder: 9504:9505 tried to acquire reference to desc 0, got 1 instead
[  283.269940][ T9505] binder: cannot allocate buffer
[  283.269999][ T9505] binder: 9504:9505 transaction call to 9504:0 failed 15/29201/-22, size 0-0 line 3239
[  283.270457][ T5659] binder: undelivered TRANSACTION_ERROR: 29201
[  283.651451][ T9518] binder: 9517:9518 ioctl c0306201 20000080 returned -14
[  283.656271][ T9518] binder: BINDER_SET_CONTEXT_MGR already set
[  283.661442][ T9518] binder: 9517:9518 ioctl 4018620d 20000040 returned -16
[  283.664495][ T9518] binder: 9517:9518 DecRefs 0 refcount change on invalid ref 2 ret -22
[  284.579800][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.582574][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.690772][ T9550] binder: 9548:9550 ioctl c0306201 20000080 returned -14
[  284.702400][ T9550] binder: BINDER_SET_CONTEXT_MGR already set
[  284.706169][ T9550] binder: 9548:9550 ioctl 4018620d 20000040 returned -16
[  284.709154][ T9550] binder: 9548:9550 DecRefs 0 refcount change on invalid ref 2 ret -22
[  285.043079][ T9564] netlink: 'syz.2.1461': attribute type 2 has an invalid length.
[  285.084073][ T9553] loop3: detected capacity change from 0 to 32768
[  285.113979][ T9553] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1457 (9553)
[  285.121329][ T9553] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  285.137988][ T9553] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  285.139808][ T9553] BTRFS info (device loop3): setting nodatacow, compression disabled
[  285.141378][ T9553] BTRFS info (device loop3): setting datacow
[  285.142565][ T9553] BTRFS info (device loop3): doing ref verification
[  285.157898][ T9553] BTRFS info (device loop3): force clearing of disk cache
[  285.159373][ T9553] BTRFS info (device loop3): turning off barriers
[  285.160664][ T9553] BTRFS info (device loop3): max_inline at 7
[  285.161933][ T9553] BTRFS info (device loop3): using free space tree
[  285.431819][ T9553] BTRFS info (device loop3): enabling ssd optimizations
[  285.439875][ T9553] BTRFS info (device loop3): rebuilding free space tree
[  285.477572][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.479594][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.480112][ T9600] binder: 9599:9600 ioctl c0306201 20000080 returned -14
[  285.492227][ T9600] binder: BINDER_SET_CONTEXT_MGR already set
[  285.506456][ T9600] binder: 9599:9600 ioctl 4018620d 20000040 returned -16
[  285.508306][ T9600] binder: 9599:9600 DecRefs 0 refcount change on invalid ref 2 ret -22
[  285.801470][ T9616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1474'.
[  286.055770][ T4299] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  286.331272][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.333321][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.479122][ T9630] binder: 9629:9630 DecRefs 0 refcount change on invalid ref 2 ret -22
[  286.534334][ T9628] netlink: 'syz.3.1478': attribute type 10 has an invalid length.
[  286.667736][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'.
[  286.672285][ T9640] device syz_tun entered promiscuous mode
[  286.893665][ T9647] netlink: 'syz.4.1487': attribute type 2 has an invalid length.
[  286.911787][ T9652] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  287.051010][ T9643] loop3: detected capacity change from 0 to 32768
[  287.061595][ T9643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1486 (9643)
[  287.084248][ T9643] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.086481][ T9643] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  287.088194][ T9643] BTRFS info (device loop3): setting nodatacow, compression disabled
[  287.093306][ T9643] BTRFS info (device loop3): setting datacow
[  287.102817][ T9643] BTRFS info (device loop3): doing ref verification
[  287.113352][ T9643] BTRFS info (device loop3): force clearing of disk cache
[  287.122092][ T9643] BTRFS info (device loop3): turning off barriers
[  287.127637][ T9643] BTRFS info (device loop3): max_inline at 7
[  287.128932][ T9643] BTRFS info (device loop3): using free space tree
[  287.229021][ T9643] BTRFS info (device loop3): enabling ssd optimizations
[  287.232265][ T9643] BTRFS info (device loop3): rebuilding free space tree
[  287.261734][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.264090][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.812974][ T4299] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  287.856308][ T9674] netlink: 'syz.4.1492': attribute type 10 has an invalid length.
[  288.046551][ T9703] netlink: 'syz.4.1500': attribute type 2 has an invalid length.
[  288.048400][ T9705] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  288.313299][ T9725] netlink: 'syz.3.1508': attribute type 3 has an invalid length.
[  288.394987][ T9729] netlink: 'syz.5.1510': attribute type 10 has an invalid length.
[  288.419656][ T9732] ------------[ cut here ]------------
[  288.421220][ T9732] WARNING: CPU: 1 PID: 9732 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x154/0x180
[  288.423279][ T9732] Modules linked in:
[  288.424102][ T9732] CPU: 1 PID: 9732 Comm: syz.2.1511 Not tainted 6.1.124-syzkaller #0
[  288.425780][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  288.427796][ T9732] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  288.429455][ T9732] pc : taprio_get_start_time+0x154/0x180
[  288.430724][ T9732] lr : taprio_get_start_time+0x150/0x180
[  288.431980][ T9732] sp : ffff800022736aa0
[  288.432886][ T9732] x29: ffff800022736aa0 x28: ffff0000d0a8d000 x27: dfff800000000000
[  288.434577][ T9732] x26: ffff0000f3922f00 x25: ffff0000d0a8d0f0 x24: dfff800000000000
[  288.436185][ T9732] x23: 0000000000000000 x22: 000000ac9e277928 x21: 0000000000000000
[  288.437797][ T9732] x20: 0000000000000000 x19: ffff800022736dc0 x18: ffff800022736760
[  288.439553][ T9732] x17: ffff800018b7c000 x16: ffff8000084f2fe8 x15: ffff80001865cf80
[  288.441292][ T9732] x14: 1ffff00002b520b2 x13: dfff800000000000 x12: 0000000000080000
[  288.443032][ T9732] x11: 0000000000005fef x10: ffff800026049000 x9 : ffff8000108de6e8
[  288.444734][ T9732] x8 : 0000000000005ff0 x7 : ffff8000108de640 x6 : 0000000000000000
[  288.446373][ T9732] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  288.448000][ T9732] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 00000000fffffff2
[  288.449678][ T9732] Call trace:
[  288.450479][ T9732]  taprio_get_start_time+0x154/0x180
[  288.451634][ T9732]  taprio_change+0x2d20/0x39d0
[  288.452559][ T9732]  taprio_init+0x4a8/0x530
[  288.453547][ T9732]  qdisc_create+0x70c/0xe6c
[  288.454464][ T9732]  tc_modify_qdisc+0xa14/0x186c
[  288.455457][ T9732]  rtnetlink_rcv_msg+0x72c/0xd94
[  288.456552][ T9732]  netlink_rcv_skb+0x20c/0x3b8
[  288.457548][ T9732]  rtnetlink_rcv+0x28/0x38
[  288.458602][ T9732]  netlink_unicast+0x65c/0x898
[  288.459564][ T9732]  netlink_sendmsg+0x834/0xb18
[  288.460600][ T9732]  ____sys_sendmsg+0x55c/0x848
[  288.461649][ T9732]  __sys_sendmsg+0x26c/0x33c
[  288.462603][ T9732]  __arm64_sys_sendmsg+0x80/0x94
[  288.463602][ T9732]  invoke_syscall+0x98/0x2bc
[  288.464531][ T9732]  el0_svc_common+0x138/0x258
[  288.465468][ T9732]  do_el0_svc+0x58/0x13c
[  288.466346][ T9732]  el0_svc+0x58/0x168
[  288.467185][ T9732]  el0t_64_sync_handler+0x84/0xf0
[  288.468270][ T9732]  el0t_64_sync+0x18c/0x190
[  288.469273][ T9732] irq event stamp: 427
[  288.470111][ T9732] hardirqs last  enabled at (426): [<ffff8000083fe658>] ktime_mono_to_any+0x14c/0x22c
[  288.472119][ T9732] hardirqs last disabled at (427): [<ffff80001232af44>] el1_dbg+0x24/0x80
[  288.473837][ T9732] softirqs last  enabled at (332): [<ffff8000106070f8>] local_bh_enable+0x10/0x34
[  288.475830][ T9732] softirqs last disabled at (418): [<ffff8000108d73ec>] taprio_change+0x2b98/0x39d0
[  288.477861][ T9732] ---[ end trace 0000000000000000 ]---
[  289.183720][ T9735] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  289.244054][ T9733] netlink: 'syz.3.1512': attribute type 2 has an invalid length.
[  290.913557][ T4309] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  290.917022][ T4309] Bluetooth: hci5: Injecting HCI hardware error event
[  290.920413][ T4309] Bluetooth: hci5: hardware error 0x00
[  293.153594][ T4309] Bluetooth: hci5: Opcode 0x0c03 failed: -110