last executing test programs:

6m52.780640206s ago: executing program 1 (id=1518):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a)

6m52.644727709s ago: executing program 1 (id=1519):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002)
read$midi(r0, 0x0, 0x0)

6m52.475050986s ago: executing program 1 (id=1520):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab4080905070210007fdc14090401"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})

6m51.084922743s ago: executing program 1 (id=1535):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x0)
dup2(r2, r0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40054}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x1})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

6m50.964809952s ago: executing program 1 (id=1536):
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

6m50.685753676s ago: executing program 1 (id=1537):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0}, 0x20000024)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setresuid(0x0, 0xee01, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

6m50.594667281s ago: executing program 32 (id=1537):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0}, 0x20000024)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setresuid(0x0, 0xee01, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

4m29.892454174s ago: executing program 0 (id=3389):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

4m29.187081769s ago: executing program 0 (id=3398):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4104, 0x9b08}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

4m28.55159043s ago: executing program 0 (id=3400):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e2401"], 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004"], 0x28}, 0x4044804)

4m27.931613743s ago: executing program 0 (id=3413):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0)

4m27.778128571s ago: executing program 0 (id=3415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0xec, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x4}}]}, {0x4, 0x6, "353c5b8feed2ff2c68676ecbecb79bba29"}, {0xc}, {0xc}}}]}, {0xfffffffffffffdb8, 0x1, [@m_xt={0x80, 0x9, 0x0, 0x0, {{0x7}, {0x4}, {0x55, 0x6, "7ab900ddfa355ab6ea9eecb2602cbe5dd501dcf76c7807aff25cd58c016103891fa1b97760c43fd02cff3b8acd10371bf9f9ddc4796adfe02f57eb75c0be91cdfdaf89cc3f15d33ccfd5a184ebe1cf971a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xec}}, 0x20048844)

4m27.369079854s ago: executing program 0 (id=3421):
r0 = socket$rds(0x15, 0x5, 0x0)
unshare(0xa020400)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x7580f78eabfd0eae}, 0x20)

4m27.301908364s ago: executing program 33 (id=3421):
r0 = socket$rds(0x15, 0x5, 0x0)
unshare(0xa020400)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x7580f78eabfd0eae}, 0x20)

2m31.077184383s ago: executing program 3 (id=4872):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="4c000000150097f87059ae08060c8f34a34d4c66dc040002ff0f020000000000000187a41414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b8", 0x4c}], 0x1}, 0x4800)

2m30.989931698s ago: executing program 3 (id=4875):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000100)=0x2, 0x22fffff9)

2m30.923668971s ago: executing program 3 (id=4880):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000900)="$eJzs3c+LW9UXAPAzmZ/t9zuTAUVQES8FF27CdPwHOkgL4oBSG6kuhFcnoyFpUpIwkiJa3Lh16c59celOEP+BLnTvzl03XXZR+iR5SZvMpNVaZ0L184Hhnbx7z8t9N+RxZhHO7cvfXG3sdyv7WS9K51KUIqJ0N2JzGBUWRsfSMF6JSTfi9fLl315574MP397Z3T1/MaULO5fe2E4pbbz602eff3/m597/3v9h48fVuLX50e0727/feuHWi7fvX/q03k31blpq91KWrrTbvexKs5b26t1GJaV3m7WsW0v1VrfWmRrfb7avXeunrLW3fvpap9btpqzVT41aP/XaqbfRT9knWb2VKpVKWj8d075dDg6p3rx4Mdsp4rXHzDt3UgviGHQ6O9ngO7x6ZKR6cy4LAgDm6mnr/5Wnq/9b0/X/cnQbledeKy79xPV/Z6L+XzlS/3PUZP3Pv9Wg/l8ZfX8jIn/4f4D6HwAAAAAAAAAAAAAAngV387yc53l5fHzw44DR6zkvj2N25PM/9Dfv9XG8Jn64txbR/PqgelAtjsX4zn7Uoxm12Ipy3Bs8FsaK+MJbu+e30tBmrF+9ExHVOPNLRHVxOv9slGNzdv7ZIj/F+tUvi/cfHJfj9GT+dpTj+dn52zPzV2Lru4n8SpTj14+jHc3YGz7eHuZ/cTalN9/ZPZS/OpwHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9DJY29HEXf+4NqxKk4GPXvrzycsDndH7/IH/XXL8VWlOPe7P78WzP78y/FS0vzvXcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGOv2rzeyZrPWOalg3PN/eGZlHDw6a6GYfuPQ0KmYnrz6Z9f560Ge5/n9PM+nhkpPdJ1To5ucMTS48ldrxXBxZq/1T23v2sKJfpRPEyxHxGPm5KMNnBxajL/zXv9/sM8z56xGxLHe6cYgKM1/w584OPFHEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzdg6bfgxcL814NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA89LtX29kzeZiZxTUpoOlOHwmay7GIyY/Kpj3PQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxL/ggAAP//TMsH2A==")
creat(&(0x7f0000000200)='./file1\x00', 0x12e)

2m30.714556004s ago: executing program 3 (id=4883):
mkdir(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

2m30.49046024s ago: executing program 3 (id=4884):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3008010, &(0x7f0000000040)={[{@volume={'volume', 0x3d, 0x101}}, {@volume={'volume', 0x3d, 0x4}}, {@uid_ignore}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@longad}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc6b, &(0x7f0000000600)="$eJzs3U9sHNd5APDvDXfFpdzWTJwqThoHm7ZIZcVy9S+iYhUuVdNsC8iyEIq9BeBKpNSFKZIgqUY20pbppYceAhRFDzkRaI0CCRoYbRH0yLQukFx8KHLqiWhhIyh6YIsAAQoEG8zsW3FJUZYikRIl/3429c2f92bemzeasQV98wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPidV88dO5522DHwCBoDADwUFya+fOzETu9/AOCJdelO//8PAAAAAAAAAAAAAADsFymKeCZSLFzYSFPVelfjfLt+4+bk2PjO1YZSVXOgKl/+NI6fOHnqi6dHzvTi+fbch9TfbZ+O1ycunWu+Mn99YXFmaWlmujk5174yPz1zz0d40PrbHakuQPP6Gzemr15dap548eSW3TeHPxh86tDw2ZHnjz7XKzs5Nj4+sVmk0V++dt8N6bpThseBKOJopHjhOz9KrYgo4sGvRePhjv12Q1UnjlSdmBwbrzoy227NLZc7L/YuRBHR7Ks02rtGO49F1OoPtQ93NhqxUja/bPCRsnsTC63F1uXZmebF1uJye7k9P3cxdVtb9qcZRZxJEasRsT54++HqUUQtUnzz6Y10OX/1o7oOX6gSg+/cjmIP+3gPynY26xGrxWMwZvvYYBTxWqT48buH40p+zlTPms9HvFbG70a8XcaXI1J5Y5yKeH+H+4jHUy2K+Ity/M9upOnqedB7rpz/g+bvz12d7yvbfa50UsTP9X647UnxiN4PQ9viw7HPn02NKKJVPfE30v3/xw4AAAAAAAAAAAAAAAAAu20oivhUpHj13/+oyiuOKi/96bMjvzv8i/0548/e5Thl2RcjYqW4t5zcAzkx8GK6mNIjziX+KGtEEX+c8/++/qgbAwAAAAAAAAAAAAAAAAAA8JFWxA8jxUvvHU6r0T+neHvuWvNS6/Jsd1bY3pzivTnTO51Op5mqGMN5faq73lnJcTXHzp9243rK8wv36hfdOJrjVI4rOa7muJbjeo4xkOvnODoQ9XJhKq+v5Lia41qO6zlGLdfPcTTHqRxXclzNcS3H9Rxjn8zdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJCmiiJ9Gim98dSNFiojRiKnoxrXBR906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4x0jR/L3RW9tqEZGqf7sOl7+citEDZfx4jI6U8eUYPZdjq4q10a8/gvbzYOqpiB9EisHGO7cGPI9/vbt26zaIt7+2ufbpWjcO9HYOfzD41KGnz46Mf/bZOy2nnRpw5Hx77sbN5uTY+PhE3+ZaPvvH+7YN5/MWu9N1ImLpzbfeaM3Ozize/0J5C9xn9d5IPsDZd3OhHh9eJtV2samD+6vvOy1EbV8049EtRG1fNOPR9P2WtOUtwJOkfP+/Hyl+873/6L3wu+//RvxCd+3WGz5+8ieb98FL2w90j+//2vZ6+f1fvgl2ev8/07ftpXwf1msRjeXrC/VDEY2lN9862r7eujZzbWbu1LFjXxoZ+dLJY/UDEY2r7dmZvqVduVwAAAAAAAAAAAAAAAAAD08q4rcjResHG6kZETerfK3hsyPPH31uIAZuz/17feLSueYr89cXFmeWlmamm5Nz7Svz0zP3erpGle41OTa+J525q6E9bv9Q45X5hTcX29f+cHnH/Qcb5y4vLS+2ruy8O4aiiBjt33KkavDk2HjV6Nl2a66qenGXEjLrqYj/jBRXTjXT5/K2nP+/PcN/S/7/yvYD7WL+/2cPbub/fawbit45UyriJ5HiN/7y2fhc1c6Dcds1y+X+NlIcOfOZXC4OlOV6beh+V6CbGViW/d9I8Q8/3Vq2lw/5zGbZ4z/3Bd7nyvF/OtJr3/7zb8Wv5m1bv/+w8/gf3H6gPfr+wyf6th3c8r2CB+46efyPRoqXn3knfq3a8v8f+v2P3hcbDncLb36fY4/G/5f7tg3n8/76bnUeAAAAAAAAAADgMVZPRfxdpPjeeC2dztvu5e//TW8/0B79/a9P9m2b3p35iu4+7Q0AAAAAPCHqqYgfRopry+/cyqHemv/dl//5W5v5n2Np297qz/l+qfpuwG7++V+/4XzeqQfvNgAAAAAAAAAAAAAAAAAAAOwrKRVxOs+nPlXl80/fcT71tUjx6n+/kMulQ2W53jzww9WvjQuduaPnZmfnG7Hcujw705xYaF2ZKet+IlJs/M1nct2iml+9N998d473zbnYFyPF+Ld7ZbtzsffmJu/OB97odCKOl2U/Fin+6++3ls1TU+e5o6vjnijL/nWk+Mo/71z20GbZk2XZb0WK73+l2St7sCx7On8M9ZObZV+8Ml/szcAAAAAAAAAAAAAAAAAAAADwkVJPRfxZpPif66u3cvnz/P/1vtXK21/rm+9/m5vVPP/D1fz/d1reoW5xt/n/q+8KrNzprAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GRKUcRbkWLhwkZaGyzXuxrn23M3bk6Oje9cbShVNQeq8uVP4/iJk6e+eHrkTC9+eP3d9ql4feLSueYr89cXFmeWlmamm5Nz7Svz0zP3fIQHrb/dkeoCNK+/cWP66tWl5okXT27ZfXP4g8GnDg2fHXn+6HO9spNj4+MTfWVq9fs++23S1tWh3sKBKOKvIsUL3/lR+t5gRBEPfi3ucu/staGqE0eqTkyOjVcdmW235pbLnRd7F6KIaPZVGu1do4cwFg9kNGKlbH7Z4CNl9yYWWouty7MzzYutxeX2cnt+7mLqtrbsTzOKOJMiViNiffD2w9WjiDcixTef3kj/Mhgx0LsOX7gw8eVjJ+7cjmIP+3gPynY26xGrRXfMOgMR+3bM9rHBKOKfIsWP3z0c/zoYUYvuT3w+4rUyfjfi7eiOdypvjFMR7+9wH/F4qkUR/1eO/9mN9O5g+Twofz/V8t65q/N9ZXvPlcf+/fAw7fP3SSOK+H71xN9I/+b3NQAAAAAAAAAAAAAAAMA+UsSvRIqX3jucqvzgWznF7blrzUuty7PdtL5e7l8vZ7rT6XSaqRtHc5zKcSXH1RzXclzPMYpcP8fRMjY6nam8vpLjao5rOa7nGAO5fo6jOU7luJLjao5rOa7nGLVcP8fRHKdyXMlxNce1HNdzjH2SuwcAAAAAAAAAAAAAAAAAADxZiuqfFN/46kbqDHbnl56KblwzH+gT72cBAAD//2we6oE=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m29.652787126s ago: executing program 3 (id=4887):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x55}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, 0x41, 0x107, 0x70bd2c, 0xa5dfdbfa, {0xe, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400c015}, 0xc000)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1})
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)

2m29.621891699s ago: executing program 34 (id=4887):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x55}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x14, 0x41, 0x107, 0x70bd2c, 0xa5dfdbfa, {0xe, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400c015}, 0xc000)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x80010182, 0x1})
io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)

1m57.205115213s ago: executing program 5 (id=5353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000300010203041c00028005000100060000000600020000140000060003009c400000340003"], 0xc8}}, 0x0)

1m57.130908469s ago: executing program 5 (id=5356):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m57.024422941s ago: executing program 5 (id=5358):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x42474752, 0x0, @stepwise={0x0, 0x400, 0x10, 0x0, 0xfffffffc}})

1m57.024135886s ago: executing program 5 (id=5360):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x243, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c)

1m56.856059965s ago: executing program 5 (id=5364):
r0 = timerfd_create(0x7, 0x0)
ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x31f5)

1m56.370625594s ago: executing program 5 (id=5368):
msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x0)

1m56.228918433s ago: executing program 35 (id=5368):
msgsnd(0x0, &(0x7f0000000100)={0x1}, 0x8, 0x0)
msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x8, 0x0)

1m25.29703257s ago: executing program 6 (id=5813):
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x6, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20000, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

1m25.030064402s ago: executing program 6 (id=5817):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000040)={r1, 0xa, 0x0}, 0x10)

1m24.85770623s ago: executing program 6 (id=5819):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x147)
lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0xc}, 0x2, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1m24.784570885s ago: executing program 6 (id=5821):
setns(0xc9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860)
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r4, 0x0, 0xacb6, 0x8)
splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0)
write(r0, &(0x7f0000000040), 0xffffff4a)

1m23.620498789s ago: executing program 6 (id=5830):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x8, 0xe9, 0x6, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}})

1m23.62006027s ago: executing program 6 (id=5832):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x151c, &(0x7f0000000d80)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
sync()
rename(0x0, &(0x7f0000000180)='./file1\x00')
ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0)

1m7.501389042s ago: executing program 36 (id=5832):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x151c, &(0x7f0000000d80)="$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")
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
sync()
rename(0x0, &(0x7f0000000180)='./file1\x00')
ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0)

3.368812328s ago: executing program 7 (id=7067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x80010040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

3.279340548s ago: executing program 7 (id=7068):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40043d14, 0x0)

3.278465574s ago: executing program 7 (id=7070):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.96785657s ago: executing program 7 (id=7085):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000)

1.836350214s ago: executing program 7 (id=7087):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="09e647c9e0b8e9a2f2abdd74dd2e", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

836.417983ms ago: executing program 7 (id=7097):
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0)

343.822499ms ago: executing program 2 (id=7111):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x2dd8806920477201, 0x0)

343.58123ms ago: executing program 2 (id=7113):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='iso9660\x00', 0x8410, 0x0)

281.23784ms ago: executing program 2 (id=7114):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019})
epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x496a)
close_range(r0, 0xffffffffffffffff, 0x0)

280.993694ms ago: executing program 4 (id=7115):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x844, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@rodir}, {@fat=@flush}, {@numtail}, {@shortname_win95}, {@rodir}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@shortname_winnt}, {@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x292, &(0x7f0000000340)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

206.14912ms ago: executing program 4 (id=7116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

149.958574ms ago: executing program 4 (id=7117):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c757466383d312c696f636861727365743d69736f383835392d352c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c726f6469722c757466383d312c756e695f786c6174653d312c636f6465706167653d3933362c756e695f786c6174653d312c756e695f786c6174653d312c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6c6f7765722c0065f00b6633d41c33c1c2e603c4b2bb6cf27bbc3d8d204141b1d465973af0c4742c6c0623afafe30da2ba4e19bcc275829c69da5da2393051ed70f7a2894865f05f73fdb41120d6af1a608f9fc242c01b4206ae3aa9789dfcd1c99b9fd213cdfa80fc6871975b8dd45686db8c25a73aae6c6b342613edf128217d8d59b0235f75ffcc149e202483783e47daf50283b5bf5c38279850879cf66eaf61e58908f1653606e44bbe5aea91fa39cb8814a7c028074f0d1b"], 0x1, 0x27f, &(0x7f00000008c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

149.710866ms ago: executing program 2 (id=7118):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010)

149.623378ms ago: executing program 4 (id=7119):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="4c0000001100020000002000"/23, 0x17)

66.823248ms ago: executing program 4 (id=7120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0)

66.726607ms ago: executing program 2 (id=7121):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0)

7.782676ms ago: executing program 4 (id=7122):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0}], 0x1})

0s ago: executing program 2 (id=7123):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x10000000)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x10, 0xa00, 0x40800000000000, 0x800000000000003}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='dctcp', 0x5)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)

kernel console output (not intermixed with test programs):

][T18874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.182742][T18874]  sock_sendmsg_nosec+0x13a/0x180
[  510.182753][T18874]  ____sys_sendmsg+0x54e/0x850
[  510.182768][T18874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.182784][T18874]  ? import_iovec+0x73/0xa0
[  510.182798][T18874]  ___sys_sendmsg+0x2a5/0x360
[  510.182809][T18874]  ? __lock_acquire+0x683/0x2cf0
[  510.182820][T18874]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.182834][T18874]  ? futex_wait+0x2a2/0x390
[  510.182866][T18874]  ? __fget_files+0x2a/0x420
[  510.182877][T18874]  ? __fget_files+0x3a2/0x420
[  510.182893][T18874]  __x64_sys_sendmsg+0x1b1/0x290
[  510.182906][T18874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.182928][T18874]  do_syscall_64+0x166/0x520
[  510.182938][T18874]  ? trace_irq_disable+0x3b/0x140
[  510.182947][T18874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.182958][T18874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.182968][T18874] RIP: 0033:0x7f547119e159
[  510.182979][T18874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.182987][T18874] RSP: 002b:00007f5472128028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.182998][T18874] RAX: ffffffffffffffda RBX: 00007f5471425fa0 RCX: 00007f547119e159
[  510.183005][T18874] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000005
[  510.183011][T18874] RBP: 00007f547123506b R08: 0000000000000000 R09: 0000000000000000
[  510.183017][T18874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.183023][T18874] R13: 00007f5471426038 R14: 00007f5471425fa0 R15: 00007ffce40af9c8
[  510.183038][T18874]  </TASK>
[  510.484787][ T5597] Bluetooth: hci0: command tx timeout
[  510.794472][ T5644] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  510.861537][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'.
[  510.861772][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'.
[  510.957603][ T5644] usb 7-1: Using ep0 maxpacket: 32
[  510.958259][ T5644] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  510.959178][ T5644] usb 7-1: config index 0 descriptor too short (expected 27632, got 27)
[  510.959192][ T5644] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  510.959201][ T5644] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  510.959210][ T5644] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  510.959220][ T5644] usb 7-1: config 1 has no interface number 0
[  510.959240][ T5644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.968520][ T5644] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  511.095879][T18911] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5424'.
[  511.251681][ T5644] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values
[  511.251919][ T5644] snd_usb_pod 7-1:1.1: invalid control EP
[  511.255876][ T5644] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  511.256039][ T5644] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  511.256340][ T5644] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22
[  511.428428][T18872] usb 7-1: USB disconnect, device number 2
[  512.295340][T18933] loop6: detected capacity change from 0 to 2048
[  512.310780][T18933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  512.388214][T18935] input: syz0 as /devices/virtual/input/input24
[  512.502184][T18938] bridge0: port 3(syz_tun) entered blocking state
[  512.505934][T18938] bridge0: port 3(syz_tun) entered disabled state
[  512.509286][T18938] syz_tun: entered allmulticast mode
[  512.529696][T18938] syz_tun: entered promiscuous mode
[  512.534092][T18938] bridge0: port 3(syz_tun) entered blocking state
[  512.534261][T18938] bridge0: port 3(syz_tun) entered forwarding state
[  512.541832][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5435'.
[  512.559615][T18938] bridge0: port 4(ip6gretap0) entered blocking state
[  512.559774][T18938] bridge0: port 4(ip6gretap0) entered disabled state
[  512.559907][T18938] ip6gretap0: entered allmulticast mode
[  512.565885][T18938] ip6gretap0: entered promiscuous mode
[  512.566445][T18938] bridge0: port 4(ip6gretap0) entered blocking state
[  512.566555][T18938] bridge0: port 4(ip6gretap0) entered forwarding state
[  512.665535][T18945] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  512.697539][ T5597] Bluetooth: hci0: command tx timeout
[  512.746734][T18953] loop6: detected capacity change from 0 to 1024
[  512.750196][T18953] EXT4-fs: Ignoring removed nomblk_io_submit option
[  512.789945][T18953] EXT4-fs (loop6): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  512.796942][T18953] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  512.857259][ T8528] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm kworker/u10:41: lblock 0 mapped to illegal pblock 0 (length 1)
[  512.883787][ T8528] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  512.884121][ T8528] EXT4-fs (loop6): This should not happen!! Data will be lost
[  512.884121][ T8528] 
[  512.910540][T18727] EXT4-fs (loop6): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  513.083707][T18976] loop6: detected capacity change from 0 to 128
[  513.385451][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  513.385574][   T33] audit: type=1326 audit(1790000832.187:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.389100][   T33] audit: type=1326 audit(1790000832.197:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.389358][   T33] audit: type=1326 audit(1790000832.197:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.398489][   T33] audit: type=1326 audit(1790000832.197:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.398755][   T33] audit: type=1326 audit(1790000832.206:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.398965][   T33] audit: type=1326 audit(1790000832.206:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.421063][   T33] audit: type=1326 audit(1790000832.206:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.452427][   T33] audit: type=1326 audit(1790000832.206:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.452454][   T33] audit: type=1326 audit(1790000832.206:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  513.452473][   T33] audit: type=1326 audit(1790000832.206:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18975 comm="syz.6.5450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547119e159 code=0x7ffc0000
[  514.109666][T18993] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5457'.
[  514.426954][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  514.921609][ T5597] Bluetooth: hci0: command tx timeout
[  515.096944][   T99] block nbd1: Possible stuck request ffff8881037e8000: control (read@0,1024B). Runtime 240 seconds
[  515.097012][   T99] block nbd1: Possible stuck request ffff8881037e8200: control (read@1024,1024B). Runtime 240 seconds
[  515.097077][   T99] block nbd1: Possible stuck request ffff8881037e8400: control (read@2048,2048B). Runtime 240 seconds
[  515.210892][T19032] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5472'.
[  515.353239][T19037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5475'.
[  515.353306][T19037] netlink: 'syz.6.5475': attribute type 2 has an invalid length.
[  515.353358][T19037] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5475'.
[  515.868550][T19065] loop6: detected capacity change from 0 to 2048
[  515.882099][T19065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  517.058022][T19104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5502'.
[  518.017603][T19128] loop6: detected capacity change from 0 to 256
[  518.327403][T19146] loop6: detected capacity change from 0 to 512
[  518.362087][T19146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.362189][T19146] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  518.438472][T18727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.581496][T19158] loop6: detected capacity change from 0 to 256
[  518.586408][T19158] exfat: Deprecated parameter 'utf8'
[  518.603362][T19158] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  520.008107][T19182] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.5533'.
[  520.043066][T19187] fuse: fd is not a fuse device
[  520.167635][T19197] loop6: detected capacity change from 0 to 1024
[  520.181317][T19197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.190224][T19200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5541'.
[  520.219978][T18727] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.290144][T19207] netlink: 'syz.6.5542': attribute type 1 has an invalid length.
[  520.290208][T19207] netlink: 'syz.6.5542': attribute type 1 has an invalid length.
[  521.589881][T19250] syzkaller1: entered allmulticast mode
[  521.866618][T19264] loop6: detected capacity change from 0 to 2048
[  521.874466][T19264] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  521.874923][T19264] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  521.874987][T19264] UDF-fs: Scanning with blocksize 512 failed
[  521.901111][T19264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  522.326390][   T33] kauditd_printk_skb: 407 callbacks suppressed
[  522.328495][   T33] audit: type=1326 audit(1790000840.596:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19292 comm="syz.2.5574" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x0
[  522.653608][T19305] Cannot find del_set index 0 as target
[  523.492400][T19311] loop6: detected capacity change from 0 to 131072
[  523.496516][T19311] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  523.496567][T19311] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  523.503218][T19311] F2FS-fs (loop6): invalid crc value
[  523.575367][T19311] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  523.587444][T19311] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  523.587503][T19311] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  523.965383][T19351] netlink: 'syz.4.5597': attribute type 21 has an invalid length.
[  523.965501][T19351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5597'.
[  524.079889][T19359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5601'.
[  524.083407][T19359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5601'.
[  525.168358][   T33] audit: type=1326 audit(1790000843.253:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.176675][   T33] audit: type=1326 audit(1790000843.253:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.188237][   T33] audit: type=1326 audit(1790000843.272:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.201161][   T33] audit: type=1326 audit(1790000843.281:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.203617][   T33] audit: type=1326 audit(1790000843.281:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.204398][   T33] audit: type=1326 audit(1790000843.281:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.204432][   T33] audit: type=1326 audit(1790000843.281:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.204461][   T33] audit: type=1326 audit(1790000843.281:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.2.5615" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  525.741311][   T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  525.901083][   T50] usb 7-1: Using ep0 maxpacket: 16
[  525.905579][   T50] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  525.907532][   T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.907567][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  525.907589][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  525.907607][   T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  525.907623][   T50] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  525.907656][   T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.912784][   T50] usb 7-1: config 0 descriptor??
[  525.985767][   T50] rc_core: IR keymap rc-hauppauge not found
[  525.985814][   T50] Registered IR keymap rc-empty
[  525.985912][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.009357][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.029479][   T50] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  526.037121][   T50] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25
[  526.127405][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.146732][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.167809][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.188852][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.210573][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.238633][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.270067][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.344219][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.361060][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.387453][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.450239][   T50] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  526.453630][T19471] fuse: fd is not a fuse device
[  526.472803][   T50] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  526.472845][   T50] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  526.484080][   T50] usb 7-1: USB disconnect, device number 3
[  527.106945][T19489] fuse: Bad value for 'fd'
[  527.314647][T19510] fuse: fd is not a fuse device
[  527.583941][T19526] loop6: detected capacity change from 0 to 4096
[  527.592304][T19526] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  527.592366][T19526] NILFS (loop6): mounting unchecked fs
[  527.592399][T19526] NILFS (loop6): recovery required for readonly filesystem
[  527.592431][T19526] NILFS (loop6): write access will be enabled during recovery
[  527.622570][ T5607] udevd[5607]: incorrect nilfs2 checksum on /dev/loop6
[  527.645651][T19526] NILFS (loop6): norecovery option specified, skipping roll-forward recovery
[  527.646415][ T5607] udevd[5607]: incorrect nilfs2 checksum on /dev/loop6
[  527.949429][T19549] cgroup: name respecified
[  528.030975][T19553] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  528.031534][T19553] CIFS: Attempting to mount //127.0.0.1/share
[  528.132581][T19554] CIFS: VFS: Invalid response size 0 for command 0
[  528.133384][T19553] CIFS: VFS: cifs_mount failed w/return code = -5
[  528.553195][T19560] loop6: detected capacity change from 0 to 131072
[  528.554828][T19560] F2FS-fs (loop6): invalid crc value
[  528.616938][T19560] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  528.625359][T19560] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  530.544608][T19622] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed
[  530.545776][T19622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5710'.
[  530.545933][T19622] unsupported nlmsg_type 40
[  530.818102][T19639] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  531.390977][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.391485][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.598429][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.598525][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.675709][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.675765][T19656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5721'.
[  531.831611][T19662] loop6: detected capacity change from 0 to 64
[  531.844810][T19662] MINIX-fs: mounting file system with errors, running fsck is recommended
[  534.488062][   T33] audit: type=1326 audit(1790000851.982:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.488119][   T33] audit: type=1326 audit(1790000851.982:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.488163][   T33] audit: type=1326 audit(1790000851.982:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.488197][   T33] audit: type=1326 audit(1790000851.982:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.496669][   T33] audit: type=1326 audit(1790000851.982:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.496711][   T33] audit: type=1326 audit(1790000851.982:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.496740][   T33] audit: type=1326 audit(1790000851.982:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.539515][   T33] audit: type=1326 audit(1790000852.028:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.539565][   T33] audit: type=1326 audit(1790000852.028:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.539610][   T33] audit: type=1326 audit(1790000852.028:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19730 comm="syz.2.5755" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  534.776077][T19753] loop6: detected capacity change from 0 to 256
[  535.095965][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.183612][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.292894][T19778] erspan1: entered allmulticast mode
[  535.684314][T19810] cgroup: Invalid name
[  535.860069][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.863365][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.867890][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.872487][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.875910][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.882111][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.888376][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.894699][T19821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.950065][T19816] loop6: detected capacity change from 0 to 32768
[  535.981882][T19816] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  536.003549][T19816] XFS (loop6): Ending clean mount
[  536.040521][T18727] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  536.078324][T19832] UBIFS error (pid: 19832): cannot open "c:::", error -22
[  536.634458][T19850] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1
[  538.432205][T19906] loop6: detected capacity change from 0 to 256
[  538.437136][T19906] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  538.441350][T19906] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  538.447664][T19906] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xda9016d0, utbl_chksum : 0xe619d30d)
[  538.452743][T19906] exFAT-fs (loop6): failed to load alloc-bitmap
[  538.455649][T19906] exFAT-fs (loop6): failed to recognize exfat type
[  539.378397][T19928] sctp: [Deprecated]: syz.2.5839 (pid 19928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  539.378397][T19928] Use struct sctp_sack_info instead
[  541.074205][ T5651] net_ratelimit: 9 callbacks suppressed
[  541.074282][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.152674][T19973] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5861'.
[  541.152770][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5861'.
[  541.668888][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.732378][T19977] lo: entered allmulticast mode
[  541.733559][T19976] lo: left allmulticast mode
[  541.754835][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.182249][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.294490][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.914220][T20050] 9p: Bad value for 'rfdno'
[  543.939134][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'.
[  543.945158][T20054] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  543.957670][T20054] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  544.402889][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.929590][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.185872][T20098] 9p: Bad value for 'rfdno'
[  545.265067][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5920'.
[  545.514177][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.622503][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.038029][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.041775][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.045022][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.050510][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.050741][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.052013][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.053705][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.081013][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.081373][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.224853][   T99] block nbd1: Possible stuck request ffff8881037e8000: control (read@0,1024B). Runtime 270 seconds
[  547.229185][   T99] block nbd1: Possible stuck request ffff8881037e8200: control (read@1024,1024B). Runtime 270 seconds
[  547.229215][   T99] block nbd1: Possible stuck request ffff8881037e8400: control (read@2048,2048B). Runtime 270 seconds
[  548.314686][T20156] bond3: entered allmulticast mode
[  548.320215][T20156] 8021q: adding VLAN 0 to HW filter on device bond3
[  549.103428][T20196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5958'.
[  549.110147][T20196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5958'.
[  549.570977][   T33] kauditd_printk_skb: 60 callbacks suppressed
[  549.571049][   T33] audit: type=1326 audit(1790000866.117:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7fc00000
[  549.594294][   T33] audit: type=1326 audit(1790000866.136:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x7fc00000
[  549.619990][   T33] audit: type=1326 audit(1790000866.155:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ed1397ed7 code=0x7fc00000
[  549.628845][   T33] audit: type=1326 audit(1790000866.164:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ed133f4d9 code=0x7fc00000
[  549.633884][   T33] audit: type=1326 audit(1790000866.173:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9ed133f59d code=0x7fc00000
[  549.634151][   T33] audit: type=1326 audit(1790000866.173:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20205 comm="syz.2.5963" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x7fc00000
[  550.943301][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5989'.
[  552.164385][ T5703] net_ratelimit: 210 callbacks suppressed
[  552.164453][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.178464][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.624232][T20296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6005'.
[  552.777005][T20304] netlink: 'syz.4.6009': attribute type 10 has an invalid length.
[  552.796640][T20304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  552.801249][T20304] team0: Port device netdevsim1 added
[  552.811168][T20304] netlink: 'syz.4.6009': attribute type 10 has an invalid length.
[  552.998526][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.998770][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.006094][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.008940][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.012027][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.014845][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.017102][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.017324][T20312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.255754][T20328] 9p: Bad value for 'rfdno'
[  553.445116][T20336] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  554.890247][ T4991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  554.913748][ T4991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  554.927447][ T4991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  554.940717][ T4991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  554.944057][ T4991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  555.676690][T20388] overlayfs: failed to clone upperpath
[  556.051956][T20372] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.052045][T20372] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.052428][T20372] bridge_slave_0: entered allmulticast mode
[  556.053707][T20372] bridge_slave_0: entered promiscuous mode
[  556.056268][T20372] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.056441][T20372] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.056512][T20372] bridge_slave_1: entered allmulticast mode
[  556.057908][T20372] bridge_slave_1: entered promiscuous mode
[  556.104180][T20372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.107167][T20372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.127172][T20372] team0: Port device team_slave_0 added
[  556.130003][T20372] team0: Port device team_slave_1 added
[  556.159292][T20372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.159355][T20372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.159418][T20372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.161490][T20372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.161503][T20372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  556.161518][T20372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.206491][T20372] hsr_slave_0: entered promiscuous mode
[  556.207293][T20372] hsr_slave_1: entered promiscuous mode
[  556.207742][T20372] debugfs: 'hsr0' already exists in 'hsr'
[  556.207754][T20372] Cannot create hsr debugfs directory
[  556.469306][T20372] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  556.483617][T20372] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.485026][T20372] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  556.492832][T20372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.493856][T20372] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  556.505999][T20372] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.506820][T20372] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  556.515847][T20372] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.552785][T20372] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.552923][T20372] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.553080][T20372] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.553133][T20372] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.574788][T20412] fuse: Bad value for 'fd'
[  556.601871][T20372] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.609726][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.612924][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.628612][T20372] 8021q: adding VLAN 0 to HW filter on device team0
[  556.637537][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.637621][ T8494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.644162][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.644260][ T8494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.998145][T20372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.164572][T20372] veth0_vlan: entered promiscuous mode
[  557.177636][T20372] veth1_vlan: entered promiscuous mode
[  557.200884][T20372] veth0_macvtap: entered promiscuous mode
[  557.212047][ T4991] Bluetooth: hci3: command tx timeout
[  557.223935][T20372] veth1_macvtap: entered promiscuous mode
[  557.246315][T20372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.256283][T20372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.341126][T16847] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  557.341187][T16847] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  557.341229][T16847] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  557.341263][T16847] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.523189][ T8490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.523252][ T8490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.583067][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.583169][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.900461][T20461] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6062'.
[  557.907585][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6062'.
[  557.978913][T20468] loop7: detected capacity change from 0 to 128
[  558.066299][ T5651] net_ratelimit: 88 callbacks suppressed
[  558.066379][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.194215][T20472] loop7: detected capacity change from 0 to 16
[  558.234674][T20472] erofs (device loop7): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  558.234838][T20472] erofs (device loop7): mounted with root inode @ nid 36.
[  558.289930][T20472] bio_check_eod: 4079 callbacks suppressed
[  558.291771][T20472] syz.7.6067: attempt to access beyond end of device
[  558.291771][T20472] loop7: rw=0, sector=131157, nr_sectors = 1 limit=16
[  558.299078][T20472] syz.7.6067: attempt to access beyond end of device
[  558.299078][T20472] loop7: rw=0, sector=46, nr_sectors = 1 limit=16
[  558.316112][T20472] erofs (device loop7): read error -5 @ 0 of nid 36
[  558.400633][T20470] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  558.429042][T16851] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  558.474789][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.474861][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.474913][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.646314][T20492] loop7: detected capacity change from 0 to 256
[  559.000611][T20501] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6079'.
[  559.014281][T20501] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6079'.
[  559.094889][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.117276][T20509] loop7: detected capacity change from 0 to 256
[  559.182825][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.282818][T20519] loop7: detected capacity change from 0 to 1024
[  559.322673][T20519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  559.322771][T20519] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  559.330713][T20519] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.6088: bg 0: block 112: padding at end of block bitmap is not set
[  559.367094][T20372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  559.455022][ T4991] Bluetooth: hci3: command tx timeout
[  559.487648][T20530] netlink: 'syz.2.6093': attribute type 1 has an invalid length.
[  559.487697][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'.
[  559.487950][T20530] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6093'.
[  559.576010][T20541] netlink: 'syz.2.6096': attribute type 1 has an invalid length.
[  559.579038][T20541] netlink: 'syz.2.6096': attribute type 1 has an invalid length.
[  559.584918][   T33] audit: type=1326 audit(1790000875.494:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.592730][   T33] audit: type=1326 audit(1790000875.494:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.600391][   T33] audit: type=1326 audit(1790000875.494:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.608698][   T33] audit: type=1326 audit(1790000875.494:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.615777][   T33] audit: type=1326 audit(1790000875.494:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.622507][   T33] audit: type=1326 audit(1790000875.494:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  559.630141][   T33] audit: type=1326 audit(1790000875.494:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20542 comm="syz.4.6097" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  560.287280][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.886939][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.348740][T20624] loop7: detected capacity change from 0 to 8
[  561.398724][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.461048][T20630] loop7: detected capacity change from 0 to 2048
[  561.469707][T20630] NILFS (loop7): invalid segment: Magic number mismatch
[  561.483849][T20630] NILFS (loop7): trying rollback from an earlier position
[  561.489554][T20630] NILFS (loop7): recovery complete
[  561.513014][T20632] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  561.567750][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.653005][ T4991] Bluetooth: hci3: command tx timeout
[  562.191266][T20654] loop7: detected capacity change from 0 to 32768
[  562.374671][T20654] loop7: detected capacity change from 0 to 32768
[  562.377349][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.402134][T20654] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  562.452867][T20654] XFS (loop7): Ending clean mount
[  562.459811][T20654] XFS (loop7): Quotacheck needed: Please wait.
[  562.483917][T20664] macvlan2: entered promiscuous mode
[  562.512600][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.535084][ T8506] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  562.577296][T20665] macvlan2: entered promiscuous mode
[  562.643216][T20654] XFS (loop7): Quotacheck: Done.
[  562.678570][T20372] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  562.736511][   T33] audit: type=1326 audit(1790000878.444:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20668 comm="syz.2.6153" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x0
[  562.868453][T20674] FAULT_INJECTION: forcing a failure.
[  562.868453][T20674] name failslab, interval 1, probability 0, space 0, times 0
[  562.868503][T20674] CPU: 0 UID: 0 PID: 20674 Comm: syz.7.6154 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  562.868533][T20674] Tainted: [L]=SOFTLOCKUP
[  562.868539][T20674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  562.868547][T20674] Call Trace:
[  562.868552][T20674]  <TASK>
[  562.868557][T20674]  dump_stack_lvl+0xe8/0x150
[  562.868575][T20674]  should_fail_ex+0x410/0x560
[  562.868590][T20674]  should_failslab+0xa8/0x100
[  562.868601][T20674]  __kvmalloc_node_noprof+0x176/0x820
[  562.868628][T20674]  ? __fget_files+0x2a/0x420
[  562.868640][T20674]  ? do_getxattr+0xec/0x320
[  562.868650][T20674]  ? do_getxattr+0xec/0x320
[  562.868664][T20674]  do_getxattr+0xec/0x320
[  562.868678][T20674]  path_getxattrat+0x35a/0x460
[  562.868693][T20674]  ? __pfx_path_getxattrat+0x10/0x10
[  562.868719][T20674]  ? rcu_is_watching+0x16/0xb0
[  562.868734][T20674]  do_syscall_64+0x166/0x520
[  562.868744][T20674]  ? trace_irq_disable+0x3b/0x140
[  562.868752][T20674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.868764][T20674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.868773][T20674] RIP: 0033:0x7f74f119e159
[  562.868783][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.868791][T20674] RSP: 002b:00007f74f1f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[  562.868802][T20674] RAX: ffffffffffffffda RBX: 00007f74f1425fa0 RCX: 00007f74f119e159
[  562.868809][T20674] RDX: 0000200000000340 RSI: 0000200000000440 RDI: 0000000000000003
[  562.868815][T20674] RBP: 00007f74f123506b R08: 0000000000000000 R09: 0000000000000000
[  562.868820][T20674] R10: 00000000000000fb R11: 0000000000000246 R12: 0000000000000000
[  562.868825][T20674] R13: 00007f74f1426038 R14: 00007f74f1425fa0 R15: 00007fff51943e58
[  562.868839][T20674]  </TASK>
[  562.996950][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6156'.
[  563.619793][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.884346][ T4991] Bluetooth: hci3: command tx timeout
[  564.043077][T20707] loop7: detected capacity change from 0 to 164
[  564.499963][T20729] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  564.500406][T20729] netlink: 'syz.2.6176': attribute type 12 has an invalid length.
[  564.728369][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.948764][T20751] loop7: detected capacity change from 0 to 8
[  565.160907][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  565.164387][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  565.169141][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5356 instead
[  565.173031][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd0e8 instead
[  565.184381][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  565.188092][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  565.191826][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  565.195827][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  565.200081][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  565.203897][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  565.207415][T20759] jffs2: Further such events for this erase block will not be printed
[  565.211258][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  565.216415][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  565.216478][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5356 instead
[  565.216505][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd0e8 instead
[  565.216529][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  565.216554][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  565.216578][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  565.216604][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  565.216676][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  565.216707][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  565.216731][T20759] jffs2: Further such events for this erase block will not be printed
[  565.216959][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  565.216987][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  565.217012][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5356 instead
[  565.253594][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd0e8 instead
[  565.253647][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  565.253662][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  565.253677][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5356 instead
[  565.253691][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd0e8 instead
[  565.253728][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  565.253742][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  565.253754][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5356 instead
[  565.253767][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd0e8 instead
[  565.253796][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  565.253808][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  565.253822][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5356 instead
[  565.253875][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd0e8 instead
[  565.253915][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  565.253929][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  565.253944][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5356 instead
[  565.253957][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd0e8 instead
[  565.253996][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  565.254012][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  565.254026][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5356 instead
[  565.254043][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd0e8 instead
[  565.254080][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  565.254094][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  565.254109][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5356 instead
[  565.254125][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd0e8 instead
[  565.254162][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  565.254176][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  565.254191][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5356 instead
[  565.254207][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd0e8 instead
[  565.254244][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  565.254259][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  565.254281][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5356 instead
[  565.254298][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd0e8 instead
[  565.254338][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  565.254352][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  565.254368][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5356 instead
[  565.254384][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd0e8 instead
[  565.254420][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  565.254433][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  565.254448][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5356 instead
[  565.254463][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd0e8 instead
[  565.254500][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  565.254514][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  565.254528][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5356 instead
[  565.254543][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd0e8 instead
[  565.254636][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  565.254652][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  565.254667][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5356 instead
[  565.254683][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd0e8 instead
[  565.254721][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  565.254735][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  565.254750][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5356 instead
[  565.254766][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd0e8 instead
[  565.254801][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  565.254815][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  565.254829][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5356 instead
[  565.254880][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd0e8 instead
[  565.254920][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  565.254935][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  565.254950][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5356 instead
[  565.254966][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd0e8 instead
[  565.255004][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  565.255017][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  565.255033][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5356 instead
[  565.255048][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd0e8 instead
[  565.255092][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  565.255105][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  565.255120][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5356 instead
[  565.255240][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd0e8 instead
[  565.255288][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  565.255303][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  565.255318][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5356 instead
[  565.255335][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd0e8 instead
[  565.255374][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  565.255388][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  565.255404][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5356 instead
[  565.255421][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd0e8 instead
[  565.255458][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  565.255472][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  565.255487][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5356 instead
[  565.255503][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd0e8 instead
[  565.255539][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  565.255554][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  565.255569][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5356 instead
[  565.255585][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd0e8 instead
[  565.255622][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  565.255637][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  565.255651][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5356 instead
[  565.255666][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd0e8 instead
[  565.255698][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  565.255711][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  565.255725][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5356 instead
[  565.255741][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd0e8 instead
[  565.255777][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  565.255791][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  565.255806][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5356 instead
[  565.255821][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd0e8 instead
[  565.255891][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  565.255906][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  565.255921][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5356 instead
[  565.255938][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd0e8 instead
[  565.255974][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  565.255988][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  565.256002][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5356 instead
[  565.256017][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd0e8 instead
[  565.256053][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  565.256066][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  565.256081][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5356 instead
[  565.256096][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd0e8 instead
[  565.256131][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  565.256145][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  565.256159][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5356 instead
[  565.256188][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd0e8 instead
[  565.256239][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  565.256252][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  565.256266][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5356 instead
[  565.256290][T20759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd0e8 instead
[  565.256321][T20759] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  565.256330][T20759] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  565.371762][T20760] overlayfs: overlapping lowerdir path
[  565.512011][T20762] loop7: detected capacity change from 0 to 2048
[  565.524965][T20762] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  565.533033][T20762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  565.587832][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.665159][T20765] loop7: detected capacity change from 0 to 256
[  565.671880][T20765] exfat: Deprecated parameter 'namecase'
[  565.704340][T20765] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  565.840142][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.890822][T20780] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6200'.
[  565.911122][T20782] fuse: fd is not a fuse device
[  566.245104][T20803] FAULT_INJECTION: forcing a failure.
[  566.245104][T20803] name failslab, interval 1, probability 0, space 0, times 0
[  566.245170][T20803] CPU: 0 UID: 0 PID: 20803 Comm: syz.7.6210 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  566.245198][T20803] Tainted: [L]=SOFTLOCKUP
[  566.245203][T20803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  566.245209][T20803] Call Trace:
[  566.245213][T20803]  <TASK>
[  566.245219][T20803]  dump_stack_lvl+0xe8/0x150
[  566.245238][T20803]  should_fail_ex+0x410/0x560
[  566.245252][T20803]  should_failslab+0xa8/0x100
[  566.245263][T20803]  ? __pmd_alloc+0xc1/0x5c0
[  566.245275][T20803]  kmem_cache_alloc_noprof+0xa1/0x600
[  566.245288][T20803]  ? alloc_pages_mpol+0x256/0x390
[  566.245299][T20803]  ? __pmd_alloc+0xc1/0x5c0
[  566.245312][T20803]  __pmd_alloc+0xc1/0x5c0
[  566.245325][T20803]  handle_mm_fault+0xe2e/0x3720
[  566.245336][T20803]  ? mt_find+0x186/0x630
[  566.245350][T20803]  ? handle_mm_fault+0xf4/0x3720
[  566.245364][T20803]  ? __pfx_handle_mm_fault+0x10/0x10
[  566.245375][T20803]  ? __lock_acquire+0x683/0x2cf0
[  566.245395][T20803]  __get_user_pages+0x1675/0x2750
[  566.245420][T20803]  __gup_longterm_locked+0xd52/0x15c0
[  566.245433][T20803]  ? gup_fast_fallback+0x20d/0x20e0
[  566.245449][T20803]  gup_fast_fallback+0x1d92/0x20e0
[  566.245473][T20803]  ? __pfx_gup_fast_fallback+0x10/0x10
[  566.245484][T20803]  ? is_valid_gup_args+0x11f/0x200
[  566.245494][T20803]  ? get_user_pages_fast+0x4d/0xb0
[  566.245506][T20803]  get_futex_key+0x90f/0x1580
[  566.245517][T20803]  ? get_futex_key+0x9f0/0x1580
[  566.245528][T20803]  ? __pfx_get_futex_key+0x10/0x10
[  566.245536][T20803]  ? get_futex_key+0x11dc/0x1580
[  566.245545][T20803]  ? get_futex_key+0x9f0/0x1580
[  566.245558][T20803]  futex_wait_setup+0x4a/0x590
[  566.245575][T20803]  futex_wait_requeue_pi+0x33b/0x980
[  566.245586][T20803]  ? futex_unqueue+0x211/0x240
[  566.245598][T20803]  ? __pfx_futex_wait_requeue_pi+0x10/0x10
[  566.245614][T20803]  ? __pfx_futex_wake_mark+0x10/0x10
[  566.245630][T20803]  ? futex_hash+0x4e/0x2b0
[  566.245639][T20803]  ? futex_hash+0x275/0x2b0
[  566.245651][T20803]  ? __pfx_futex_wake_mark+0x10/0x10
[  566.245673][T20803]  do_futex+0x184/0x4e0
[  566.245685][T20803]  ? __pfx_do_futex+0x10/0x10
[  566.245699][T20803]  __se_sys_futex+0x3a8/0x450
[  566.245711][T20803]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  566.245734][T20803]  ? __pfx___se_sys_futex+0x10/0x10
[  566.245744][T20803]  ? rcu_is_watching+0x16/0xb0
[  566.245786][T20803]  ? __x64_sys_futex+0x21/0xf0
[  566.245800][T20803]  do_syscall_64+0x166/0x520
[  566.245811][T20803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.245823][T20803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.245832][T20803] RIP: 0033:0x7f74f119e159
[  566.245842][T20803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.245850][T20803] RSP: 002b:00007f74f1f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  566.245861][T20803] RAX: ffffffffffffffda RBX: 00007f74f1425fa0 RCX: 00007f74f119e159
[  566.245868][T20803] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000000000000000
[  566.245874][T20803] RBP: 00007f74f123506b R08: 0000200000000200 R09: 0000000000000000
[  566.245880][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.245886][T20803] R13: 00007f74f1426038 R14: 00007f74f1425fa0 R15: 00007fff51943e58
[  566.245901][T20803]  </TASK>
[  566.646125][T20830] i2c i2c-0: new_device: Can't parse I2C address
[  566.731044][T20837] loop7: detected capacity change from 0 to 128
[  566.736141][T20837] ufs: You didn't specify the type of your ufs filesystem
[  566.736141][T20837] 
[  566.736141][T20837] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  566.736141][T20837] 
[  566.736141][T20837] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  566.736216][T20837] ufs: ufstype=old is supported read-only
[  566.752354][T20837] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  566.841054][T20846] ip_tables: iptables: counters copy to user failed while replacing table
[  567.898798][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.470713][T20872] loop7: detected capacity change from 0 to 2048
[  568.694753][T20886] loop7: detected capacity change from 0 to 512
[  568.700674][T20886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  568.714999][T20886] EXT4-fs (loop7): 1 truncate cleaned up
[  568.715846][T20886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.755990][T20372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.827317][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.878361][T20896] loop7: detected capacity change from 0 to 2048
[  568.886073][T20896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  568.941869][T20898] ip_tables: iptables: counters copy to user failed while replacing table
[  569.000397][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.035381][ T8515] IPVS: starting estimator thread 0...
[  569.125963][T20903] IPVS: using max 70 ests per chain, 168000 per kthread
[  569.471566][   T33] audit: type=1326 audit(1790000884.758:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.471627][   T33] audit: type=1326 audit(1790000884.758:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.473319][   T33] audit: type=1326 audit(1790000884.758:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.473445][   T33] audit: type=1326 audit(1790000884.758:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.473617][   T33] audit: type=1326 audit(1790000884.758:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.473750][   T33] audit: type=1326 audit(1790000884.758:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.473867][   T33] audit: type=1326 audit(1790000884.758:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.474262][   T33] audit: type=1326 audit(1790000884.758:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.475917][   T33] audit: type=1326 audit(1790000884.758:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20916 comm="syz.2.6262" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  569.688617][T20919] loop7: detected capacity change from 0 to 40427
[  569.689591][T20919] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  569.689607][T20919] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  569.733922][T20919] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  569.748061][T20919] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  569.748112][T20919] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  569.795455][T20931] ip_tables: iptables: counters copy to user failed while replacing table
[  569.865024][T20919] syz.7.6263: attempt to access beyond end of device
[  569.865024][T20919] loop7: rw=2049, sector=45096, nr_sectors = 2048 limit=40427
[  569.877878][T20919] syz.7.6263: attempt to access beyond end of device
[  569.877878][T20919] loop7: rw=2049, sector=47144, nr_sectors = 2048 limit=40427
[  569.886107][T20919] syz.7.6263: attempt to access beyond end of device
[  569.886107][T20919] loop7: rw=2049, sector=49192, nr_sectors = 2048 limit=40427
[  569.891966][T20919] syz.7.6263: attempt to access beyond end of device
[  569.891966][T20919] loop7: rw=2049, sector=51240, nr_sectors = 1912 limit=40427
[  570.356470][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.417541][ T8478] kworker/u10:22: attempt to access beyond end of device
[  570.417541][ T8478] loop7: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  570.749318][T20946] loop7: detected capacity change from 0 to 64
[  570.756681][T20946] Trying to free block not in datazone
[  570.809183][T20948] loop7: detected capacity change from 0 to 2048
[  570.813277][T20948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  571.140440][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.572679][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.074827][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.087154][T20999] fuse: fd is not a fuse device
[  572.231381][ T4991] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3
[  572.245701][ T4991] Bluetooth: hci1: unexpected event for opcode 0x204b
[  572.672728][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.318582][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6308'.
[  573.781451][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.894741][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.895129][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.308016][  T989] net_ratelimit: 5 callbacks suppressed
[  575.308128][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.440276][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.123735][T21121] overlayfs: failed to clone upperpath
[  576.285161][T21132] Bluetooth: MGMT ver 1.23
[  576.428716][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.524453][ T4991] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  576.524595][ T4991] Bluetooth: hci1: Injecting HCI hardware error event
[  576.535787][ T5597] Bluetooth: hci1: hardware error 0x00
[  577.538828][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.494511][T21196] 9p: Bad value for 'wfdno'
[  578.655974][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.663080][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.739390][ T5597] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  578.841585][   T33] audit: type=1326 audit(1790000893.534:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.848529][   T33] audit: type=1326 audit(1790000893.534:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.859054][   T33] audit: type=1326 audit(1790000893.544:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.859107][   T33] audit: type=1326 audit(1790000893.544:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.859219][   T33] audit: type=1326 audit(1790000893.544:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.859255][   T33] audit: type=1326 audit(1790000893.544:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.859289][   T33] audit: type=1326 audit(1790000893.544:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.901526][   T33] audit: type=1326 audit(1790000893.581:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  578.910156][   T33] audit: type=1326 audit(1790000893.600:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21217 comm="syz.4.6395" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  579.361680][   T99] block nbd1: Possible stuck request ffff8881037e8000: control (read@0,1024B). Runtime 300 seconds
[  579.361775][   T99] block nbd1: Possible stuck request ffff8881037e8200: control (read@1024,1024B). Runtime 300 seconds
[  579.362255][   T99] block nbd1: Possible stuck request ffff8881037e8400: control (read@2048,2048B). Runtime 300 seconds
[  579.799616][T21268] loop7: detected capacity change from 0 to 32768
[  579.806998][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.818101][T21268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6419 (21268)
[  579.934113][T21276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.019237][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  580.179788][T21268] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  580.179876][T21268] BTRFS info (device loop7): using crc32c checksum algorithm
[  580.262186][T21268] BTRFS info (device loop7): enabling ssd optimizations
[  580.262226][T21268] BTRFS info (device loop7): turning on flush-on-commit
[  580.262258][T21268] BTRFS info (device loop7): enabling free space tree
[  580.262282][T21268] BTRFS info (device loop7): enabling auto defrag
[  580.262308][T21268] BTRFS info (device loop7): use lzo compression, level 1
[  580.262333][T21268] BTRFS info (device loop7): max_inline set to 4096
[  580.955384][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.982310][T20372] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  581.412400][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.787368][T21331] hub 1-0:1.0: USB hub found
[  581.791051][T21331] hub 1-0:1.0: 1 port detected
[  581.852235][T21337] netlink: 'syz.7.6441': attribute type 8 has an invalid length.
[  581.895264][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.011915][T21343] loop7: detected capacity change from 0 to 4096
[  582.054138][T21348] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  582.067634][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.097799][T16107] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  582.110452][T21343] NILFS (loop7): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0
[  582.110618][T21343] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=3)
[  582.126917][T21343] Remounting filesystem read-only
[  582.257652][T16107] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  582.262969][T16107] usb 1-1: Dual-Role OTG device on HNP port
[  582.265065][T16107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.285820][T16107] gspca_main: spca501-2.14.0 probing 0000:0000
[  582.288634][T16107] gspca_spca501: reg write: error -32
[  582.293548][T16107] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  582.295846][T16107] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  582.301021][T16107] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  582.470070][T21360] loop7: detected capacity change from 0 to 8192
[  582.502145][T21360]  loop7: p1 p2 p4
[  582.507577][T21360] loop7: partition table partially beyond EOD, truncated
[  582.518251][T21360] loop7: p4 start 131072 is beyond EOD, truncated
[  583.176414][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.683727][T21387] gadgetfs: bound to dummy_udc driver
[  583.933545][ T5651] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  583.936432][    C0] gadgetfs: connected
[  583.943151][ T5651] gadgetfs: disconnected
[  584.098945][T21413] overlayfs: failed to clone upperpath
[  584.111338][T21411] loop7: detected capacity change from 0 to 4096
[  584.115837][T21411] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  584.170496][T21411] ntfs3(loop7): Failed to load $Extend (-22).
[  584.172778][T21411] ntfs3(loop7): Failed to initialize $Extend.
[  584.286154][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.298717][T21423] loop7: detected capacity change from 0 to 128
[  584.303814][T21423] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  584.304311][T21423] hpfs: filesystem error: improperly stopped
[  584.304321][T21423] hpfs: You really don't want any checks? You are crazy...
[  584.304578][T21423] hpfs: hpfs_map_sector(): read error
[  584.304588][T21423] hpfs: code page support is disabled
[  584.304801][T21423] hpfs: hpfs_map_4sectors(): unaligned read
[  584.304837][T21423] hpfs: hpfs_map_4sectors(): unaligned read
[  584.304842][T21423] hpfs: filesystem error: unable to find root dir
[  584.817435][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  584.817488][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  584.818112][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5356 instead
[  584.818260][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd0e8 instead
[  584.818431][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  584.818462][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  584.818488][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  584.818514][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  584.818545][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  584.818576][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  584.818600][T21453] jffs2: Further such events for this erase block will not be printed
[  584.818839][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  584.818863][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  584.818887][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5356 instead
[  584.818913][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd0e8 instead
[  584.818942][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  584.818966][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  584.818990][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  584.819016][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  584.819046][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  584.819077][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  584.819101][T21453] jffs2: Further such events for this erase block will not be printed
[  584.819261][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  584.819285][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  584.819342][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5356 instead
[  584.819375][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd0e8 instead
[  584.819447][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  584.822650][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  584.825604][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5356 instead
[  584.825769][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd0e8 instead
[  584.825943][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  584.826069][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  584.826196][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5356 instead
[  584.826371][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd0e8 instead
[  584.826529][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  584.826658][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  584.826780][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5356 instead
[  584.826904][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd0e8 instead
[  584.827132][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  584.827332][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  584.827488][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5356 instead
[  584.827619][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd0e8 instead
[  584.827761][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  584.827889][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  584.828087][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5356 instead
[  584.828324][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd0e8 instead
[  584.828397][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  584.828423][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  584.828448][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5356 instead
[  584.828473][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd0e8 instead
[  584.828510][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  584.828534][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  584.828559][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5356 instead
[  584.828583][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd0e8 instead
[  584.828619][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  584.828643][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  584.828667][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5356 instead
[  584.828691][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd0e8 instead
[  584.828728][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  584.828751][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  584.828775][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5356 instead
[  584.828799][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd0e8 instead
[  584.828835][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  584.828859][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  584.828883][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5356 instead
[  584.828907][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd0e8 instead
[  584.828948][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  584.830535][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  584.830567][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5356 instead
[  584.830594][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd0e8 instead
[  584.830633][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  584.830657][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  584.830682][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5356 instead
[  584.830707][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd0e8 instead
[  584.830743][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  584.830767][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  584.830791][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5356 instead
[  584.830816][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd0e8 instead
[  584.830852][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  584.830876][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  584.830900][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5356 instead
[  584.830930][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd0e8 instead
[  584.831008][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  584.831032][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  584.831056][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5356 instead
[  584.831081][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd0e8 instead
[  584.831118][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  584.831141][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  584.831165][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5356 instead
[  584.831190][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd0e8 instead
[  584.831226][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  584.831250][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  584.831274][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5356 instead
[  584.831340][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd0e8 instead
[  584.831386][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  584.831410][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  584.831436][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5356 instead
[  584.831461][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd0e8 instead
[  584.831498][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  584.831522][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  584.831546][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5356 instead
[  584.831571][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd0e8 instead
[  584.831610][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  584.831634][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  584.831659][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5356 instead
[  584.831684][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd0e8 instead
[  584.831720][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  584.831744][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  584.831768][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5356 instead
[  584.831793][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd0e8 instead
[  584.831829][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  584.831852][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  584.831876][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5356 instead
[  584.831901][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd0e8 instead
[  584.831941][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  584.831966][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  584.831990][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5356 instead
[  584.832015][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd0e8 instead
[  584.832082][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  584.832106][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  584.834714][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5356 instead
[  584.834785][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd0e8 instead
[  584.834825][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  584.834850][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  584.834875][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5356 instead
[  584.834901][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd0e8 instead
[  584.834943][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  584.834967][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  584.834992][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5356 instead
[  584.835017][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd0e8 instead
[  584.835054][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  584.835078][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  584.835102][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5356 instead
[  584.835127][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd0e8 instead
[  584.835163][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  584.835188][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  584.835213][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5356 instead
[  584.835237][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd0e8 instead
[  584.835274][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  584.835340][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  584.835371][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5356 instead
[  584.835396][T21453] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd0e8 instead
[  584.835429][T21453] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  584.835449][T21453] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  585.175073][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.420085][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.247283][   T33] audit: type=1326 audit(1790000900.466:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.247374][   T33] audit: type=1326 audit(1790000900.466:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.249056][   T33] audit: type=1326 audit(1790000900.466:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.249348][   T33] audit: type=1326 audit(1790000900.466:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.272034][   T33] audit: type=1326 audit(1790000900.494:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.272069][   T33] audit: type=1326 audit(1790000900.494:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.272090][   T33] audit: type=1326 audit(1790000900.494:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.272910][   T33] audit: type=1326 audit(1790000900.494:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.273045][   T33] audit: type=1326 audit(1790000900.494:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21496 comm="syz.2.6516" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  586.390405][T21503] 9p: Bad value for 'rfdno'
[  586.508142][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.684008][T21525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.684332][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.697817][T21525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.715931][T21525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.716215][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.722020][T21525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.725166][T21525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.758503][T21526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.531626][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.690798][T21563] loop9: detected capacity change from 0 to 7
[  587.710682][T21563] Dev loop9: unable to read RDB block 7
[  587.713331][T21563]  loop9: AHDI p2 p3
[  587.715356][T21563] loop9: partition table partially beyond EOD, truncated
[  587.718762][T21563] loop9: p3 start 335544320 is beyond EOD, truncated
[  587.921465][   T33] audit: type=1400 audit(1790000902.030:1297): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=21572 comm="syz.7.6552"
[  587.967528][T21577] overlayfs: failed to clone upperpath
[  588.498369][T21593] loop7: detected capacity change from 0 to 32768
[  588.521578][T21593] JBD2: Ignoring recovery information on journal
[  588.603058][T21593] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  588.775113][T20372] ocfs2: Unmounting device (7,7) on (node local)
[  588.894209][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6565'.
[  589.322161][T21609] loop7: detected capacity change from 0 to 32768
[  589.344590][T21609] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  589.373418][T21609] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  589.382288][T21609] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30
[  589.396964][T21609] XFS (loop7): Ending clean mount
[  589.446279][T21625] overlayfs: failed to clone upperpath
[  589.479465][T20372] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  589.754829][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6575'.
[  591.790041][T21730] loop7: detected capacity change from 0 to 256
[  591.998648][T21741] loop7: detected capacity change from 0 to 8
[  592.404064][    T9] net_ratelimit: 7 callbacks suppressed
[  592.404167][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.513793][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.396682][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6682'.
[  594.710774][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.054520][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.819081][T16107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.239038][T21914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  596.240458][T21914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  596.513931][T21924] Bluetooth: hci0: unsupported parameter 5135
[  596.516272][T21924] Bluetooth: hci0: unsupported parameter 8192
[  596.519128][T21924] Bluetooth: hci0: unsupported parameter 5135
[  596.519188][T21924] Bluetooth: hci0: unsupported parameter 8192
[  596.830692][T21942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.834268][T21942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.838054][T21942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.843263][T21942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.846456][T21942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.021063][T21954] bridge0: port 1(macsec1) entered blocking state
[  597.021275][T21954] bridge0: port 1(macsec1) entered disabled state
[  597.021425][T21954] macsec1: entered allmulticast mode
[  597.021444][T21954] bridge0: entered allmulticast mode
[  597.026834][T21954] macsec1: left allmulticast mode
[  597.026853][T21954] bridge0: left allmulticast mode
[  597.681347][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  597.681434][   T33] audit: type=1326 audit(1790000911.172:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.694067][   T33] audit: type=1326 audit(1790000911.191:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.719038][   T33] audit: type=1326 audit(1790000911.209:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.719097][   T33] audit: type=1326 audit(1790000911.209:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.737409][   T33] audit: type=1326 audit(1790000911.228:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.737482][   T33] audit: type=1326 audit(1790000911.228:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.737529][   T33] audit: type=1326 audit(1790000911.228:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.764437][   T33] audit: type=1326 audit(1790000911.256:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.764509][   T33] audit: type=1326 audit(1790000911.256:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.784546][   T33] audit: type=1326 audit(1790000911.275:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21962 comm="syz.2.6726" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  597.917403][T21969] netlink: 1288 bytes leftover after parsing attributes in process `syz.2.6729'.
[  598.038554][    T9] net_ratelimit: 30 callbacks suppressed
[  598.038610][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.295616][T18872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.979013][T21999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.979528][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.982263][T21999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.982452][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.982630][T21999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.982791][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.983156][T21999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.983334][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.261982][T22011] loop7: detected capacity change from 0 to 1024
[  600.378707][T22017] tmpfs: Bad value for 'size'
[  600.558185][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6756'.
[  600.562902][T22027] tmpfs: Unexpected value for 'noswap'
[  600.693871][T22025] loop7: detected capacity change from 0 to 32768
[  600.708666][T22025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6755 (22025)
[  600.770742][T22025] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  600.770800][T22025] BTRFS info (device loop7): using crc32c checksum algorithm
[  600.820740][T22025] BTRFS info (device loop7): enabling ssd optimizations
[  600.820796][T22025] BTRFS info (device loop7): turning on flush-on-commit
[  600.821084][T22025] BTRFS info (device loop7): enabling free space tree
[  600.821256][T22025] BTRFS info (device loop7): enabling auto defrag
[  600.821392][T22025] BTRFS info (device loop7): use lzo compression, level 1
[  600.821522][T22025] BTRFS info (device loop7): max_inline set to 4096
[  600.909891][T22025] BTRFS info (device loop7 state M): max_inline set to 4096
[  600.949681][T20372] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  601.035527][T22058] overlayfs: failed to clone upperpath
[  601.487634][T22067] netlink: 'syz.2.6767': attribute type 4 has an invalid length.
[  601.732563][T22078] Cannot find del_set index 0 as target
[  602.031372][T22095] loop7: detected capacity change from 0 to 4096
[  602.860900][T22149] xt_CONNSECMARK: invalid mode: 0
[  603.102359][T22161] netlink: 'syz.2.6808': attribute type 1 has an invalid length.
[  603.302803][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  603.304894][   T33] audit: type=1326 audit(1790000916.445:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.313512][   T33] audit: type=1326 audit(1790000916.445:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322657][   T33] audit: type=1326 audit(1790000916.445:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322723][   T33] audit: type=1326 audit(1790000916.445:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322757][   T33] audit: type=1326 audit(1790000916.445:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322791][   T33] audit: type=1326 audit(1790000916.445:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322826][   T33] audit: type=1326 audit(1790000916.445:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.322906][   T33] audit: type=1326 audit(1790000916.445:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.2.6812" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ed139e159 code=0x7ffc0000
[  603.849426][ T5651] net_ratelimit: 681 callbacks suppressed
[  603.852548][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.242923][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6829'.
[  604.575655][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'.
[  604.575850][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'.
[  604.792409][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.380499][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.700882][   T33] audit: type=1326 audit(1790000918.674:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22251 comm="syz.7.6852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f119e159 code=0x7ffc0000
[  605.700955][   T33] audit: type=1326 audit(1790000918.674:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22251 comm="syz.7.6852" exe="/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f74f119e159 code=0x7ffc0000
[  605.800052][T22260] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6856'.
[  605.804128][T22262] @: renamed from veth0_vlan (while UP)
[  606.138157][T22286] netlink: 232 bytes leftover after parsing attributes in process `syz.7.6867'.
[  606.273302][T22294] loop7: detected capacity change from 0 to 4096
[  606.276457][T22294] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  606.296038][T22294] ntfs3(loop7): ino=19, mi_enum_attr
[  606.298363][T22294] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  606.302131][T22294] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  606.307689][T22294] ntfs3(loop7): failed to convert "c46c" to cp869
[  606.329248][T22294] ntfs3(loop7): ino=20, mi_enum_attr
[  606.493348][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.603877][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.836746][T22336] netlink: 'syz.2.6889': attribute type 2 has an invalid length.
[  608.030264][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.713621][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.922675][T22366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.930841][T22366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.935688][T22366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.254349][T22390] CIFS: Attempting to mount //127.0.0.1/share
[  609.255181][T22390] net_ratelimit: 48 callbacks suppressed
[  609.255190][T22390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.255415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.255535][T22390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.260968][T22390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.261088][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.828037][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.136130][T22389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.137026][T22390] CIFS: VFS: cifs_mount failed w/return code = -512
[  610.580688][T22430] IPVS: sh: FWM 3 0x00000003 - no destination available
[  610.583831][T22430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.645137][   T33] kauditd_printk_skb: 52 callbacks suppressed
[  610.645219][   T33] audit: type=1400 audit(1790000923.311:1389): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=22435 comm="syz.7.6936" name="p" offset=58
[  610.934669][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.015431][T22453] sock: sock_timestamping_bind_phc: sock not bind to device
[  611.456539][   T99] block nbd1: Possible stuck request ffff8881037e8000: control (read@0,1024B). Runtime 330 seconds
[  611.456619][   T99] block nbd1: Possible stuck request ffff8881037e8200: control (read@1024,1024B). Runtime 330 seconds
[  611.456638][   T99] block nbd1: Possible stuck request ffff8881037e8400: control (read@2048,2048B). Runtime 330 seconds
[  611.533676][T22484] fuse: Bad value for 'fd'
[  611.573586][T22486] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6960'.
[  612.046947][T22496] netlink: 'syz.7.6964': attribute type 3 has an invalid length.
[  612.047007][T22496] netlink: 666 bytes leftover after parsing attributes in process `syz.7.6964'.
[  612.238343][T22506] loop7: detected capacity change from 0 to 512
[  612.243015][T22506] EXT4-fs: Ignoring removed oldalloc option
[  612.247227][T22506] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  612.276541][T22506] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6969: invalid indirect mapped block 83886080 (level 1)
[  612.281426][T22506] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  612.281849][T22506] EXT4-fs (loop7): Remounting filesystem read-only
[  612.287721][T22506] EXT4-fs (loop7): 1 orphan inode deleted
[  612.290161][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  612.290181][    C0] EXT4-fs (loop7): initial error at time 1790000924: ext4_free_branches:1023: inode 16
[  612.290206][    C0] EXT4-fs (loop7): last error at time 1790000924: ext4_free_branches:1023: inode 16
[  612.298389][T22506] EXT4-fs (loop7): 1 truncate cleaned up
[  612.304645][T22506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.330720][T20372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.663048][T22517] FAULT_INJECTION: forcing a failure.
[  612.663048][T22517] name failslab, interval 1, probability 0, space 0, times 0
[  612.670407][T22517] CPU: 0 UID: 0 PID: 22517 Comm: syz.7.6973 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.670451][T22517] Tainted: [L]=SOFTLOCKUP
[  612.670458][T22517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  612.670468][T22517] Call Trace:
[  612.670475][T22517]  <TASK>
[  612.670484][T22517]  dump_stack_lvl+0xe8/0x150
[  612.670514][T22517]  should_fail_ex+0x410/0x560
[  612.670538][T22517]  should_failslab+0xa8/0x100
[  612.670558][T22517]  __kmalloc_cache_noprof+0xa3/0x600
[  612.670582][T22517]  ? file_f_owner_allocate+0x7b/0x100
[  612.670600][T22517]  ? file_f_owner_allocate+0x7b/0x100
[  612.670623][T22517]  file_f_owner_allocate+0x7b/0x100
[  612.670643][T22517]  fcntl_dirnotify+0x1e8/0x6a0
[  612.670664][T22517]  do_fcntl+0x77e/0x1a30
[  612.670684][T22517]  ? __fget_files+0x2a/0x420
[  612.670701][T22517]  ? __pfx_do_fcntl+0x10/0x10
[  612.670724][T22517]  ? __fget_files+0x2a/0x420
[  612.670741][T22517]  ? __fget_files+0x2a/0x420
[  612.670761][T22517]  ? bpf_lsm_file_fcntl+0x9/0x20
[  612.670781][T22517]  __se_sys_fcntl+0xc8/0x150
[  612.670801][T22517]  do_syscall_64+0x166/0x520
[  612.670817][T22517]  ? trace_irq_disable+0x3b/0x140
[  612.670829][T22517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.670848][T22517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.670862][T22517] RIP: 0033:0x7f74f119e159
[  612.670877][T22517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.670889][T22517] RSP: 002b:00007f74f1f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  612.670904][T22517] RAX: ffffffffffffffda RBX: 00007f74f1425fa0 RCX: 00007f74f119e159
[  612.670916][T22517] RDX: 000000008000001c RSI: 0000000000000402 RDI: 0000000000000005
[  612.670925][T22517] RBP: 00007f74f123506b R08: 0000000000000000 R09: 0000000000000000
[  612.670934][T22517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.670943][T22517] R13: 00007f74f1426038 R14: 00007f74f1425fa0 R15: 00007fff51943e58
[  612.670965][T22517]  </TASK>
[  612.837048][   T33] audit: type=1326 audit(1790000925.362:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22519 comm="syz.4.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  612.837150][   T33] audit: type=1326 audit(1790000925.362:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22519 comm="syz.4.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  612.837201][   T33] audit: type=1326 audit(1790000925.362:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22519 comm="syz.4.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  612.865700][   T33] audit: type=1326 audit(1790000925.399:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22519 comm="syz.4.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  612.865769][   T33] audit: type=1326 audit(1790000925.399:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22519 comm="syz.4.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b839e159 code=0x7ffc0000
[  613.734290][T22510] batman_adv: batadv0: Interface deactivated: macsec1
[  613.830771][T16841] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.830833][T16841] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.839830][T16847] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.839857][T16847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.839890][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.839947][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.839972][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.839989][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.038286][T22542] bcache: register_bcache() error : failed to open device
[  614.424684][T22563] loop7: detected capacity change from 0 to 2048
[  614.459038][T22563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.464258][T22563] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  614.503240][T20372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.398504][ T5650] net_ratelimit: 7 callbacks suppressed
[  615.398594][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.410838][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.413509][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.419859][ T5650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.715703][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7005'.
[  615.719920][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7005'.
[  616.017690][T22604] FAULT_INJECTION: forcing a failure.
[  616.017690][T22604] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  616.022274][T22604] CPU: 0 UID: 0 PID: 22604 Comm: syz.7.7012 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.022307][T22604] Tainted: [L]=SOFTLOCKUP
[  616.022312][T22604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  616.022319][T22604] Call Trace:
[  616.022323][T22604]  <TASK>
[  616.022329][T22604]  dump_stack_lvl+0xe8/0x150
[  616.022348][T22604]  should_fail_ex+0x410/0x560
[  616.022363][T22604]  prepare_alloc_pages+0x223/0x600
[  616.022381][T22604]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  616.022392][T22604]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  616.022403][T22604]  ? __pfx_policy_nodemask+0x10/0x10
[  616.022415][T22604]  ? aa_file_perm+0x18b/0x15f0
[  616.022426][T22604]  alloc_pages_mpol+0x21e/0x390
[  616.022438][T22604]  alloc_pages_noprof+0xb1/0x2b0
[  616.022449][T22604]  anon_pipe_write+0x21b/0x1a30
[  616.022459][T22604]  ? __pfx___futex_wait+0x10/0x10
[  616.022474][T22604]  ? __pfx_aa_file_perm+0x10/0x10
[  616.022487][T22604]  ? __pfx_anon_pipe_write+0x10/0x10
[  616.022499][T22604]  ? apparmor_file_permission+0x1f4/0x300
[  616.022511][T22604]  ? bpf_lsm_file_permission+0x9/0x20
[  616.022524][T22604]  ? security_file_permission+0x75/0x260
[  616.022538][T22604]  vfs_write+0x612/0xba0
[  616.022553][T22604]  ? __pfx_vfs_write+0x10/0x10
[  616.022568][T22604]  ? __fget_files+0x2a/0x420
[  616.022582][T22604]  ksys_write+0x150/0x270
[  616.022594][T22604]  ? __pfx_ksys_write+0x10/0x10
[  616.022610][T22604]  do_syscall_64+0x166/0x520
[  616.022620][T22604]  ? trace_irq_disable+0x3b/0x140
[  616.022628][T22604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.022640][T22604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.022649][T22604] RIP: 0033:0x7f74f119e159
[  616.022659][T22604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.022668][T22604] RSP: 002b:00007f74f1f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  616.022679][T22604] RAX: ffffffffffffffda RBX: 00007f74f1425fa0 RCX: 00007f74f119e159
[  616.022685][T22604] RDX: 0000000000000015 RSI: 0000200000000180 RDI: 0000000000000004
[  616.022691][T22604] RBP: 00007f74f123506b R08: 0000000000000000 R09: 0000000000000000
[  616.022697][T22604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.022702][T22604] R13: 00007f74f1426038 R14: 00007f74f1425fa0 R15: 00007fff51943e58
[  616.022715][T22604]  </TASK>
[  616.176073][T22610] loop7: detected capacity change from 0 to 64
[  616.194133][T22610] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop7
[  616.286204][T22620] loop7: detected capacity change from 0 to 128
[  616.322933][T22620] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  616.326702][T22620] hpfs: filesystem error: improperly stopped
[  616.335297][T22620] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  616.337731][T22620] hpfs: You really don't want any checks? You are crazy...
[  616.340599][T22620] hpfs: Code page index out of array
[  616.342371][T22620] hpfs: code page support is disabled
[  616.344352][T22620] hpfs: hpfs_map_4sectors(): unaligned read
[  616.349446][T22620] hpfs: hpfs_map_4sectors(): unaligned read
[  616.349457][T22620] hpfs: filesystem error: unable to find root dir
[  617.095688][T22650] overlayfs: failed to clone upperpath
[  617.428592][T22667] loop7: detected capacity change from 0 to 512
[  617.433336][T22667] EXT4-fs: Ignoring removed bh option
[  617.456498][T22667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.456639][T22667] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.486839][T20372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.699952][T22686] netlink: 'syz.4.7047': attribute type 2 has an invalid length.
[  617.758331][T22686] : entered promiscuous mode
[  618.854895][T22744] overlayfs: failed to clone upperpath
[  621.328910][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7100'.
[  621.387389][T22811] macvlan0: entered promiscuous mode
[  621.388197][T22811] netlink: 'syz.4.7100': attribute type 1 has an invalid length.
[  621.388212][T22811] netlink: 'syz.4.7100': attribute type 2 has an invalid length.
[  621.388224][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7100'.
[  621.623627][T22832] netlink: 33 bytes leftover after parsing attributes in process `syz.2.7110'.
[  621.701099][T22839] /dev/nullb0: Can't lookup blockdev
[  622.423980][   T34] INFO: task udevd:5604 blocked in I/O wait for more than 143 seconds.
[  622.427308][   T34]       Tainted: G             L      syzkaller #0
[  622.429689][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  622.433228][   T34] task:udevd           state:D stack:24744 pid:5604  tgid:5604  ppid:5041   task_flags:0x400140 flags:0x00080802
[  622.437642][   T34] Call Trace:
[  622.442254][   T34]  <TASK>
[  622.443492][   T34]  __schedule+0x17d4/0x5820
[  622.445460][   T34]  ? __lock_acquire+0x683/0x2cf0
[  622.447733][   T34]  ? __pfx___schedule+0x10/0x10
[  622.450382][   T34]  ? schedule+0x90/0x2b0
[  622.452562][   T34]  schedule+0x164/0x2b0
[  622.452653][   T34]  io_schedule+0x7f/0xd0
[  622.452725][   T34]  folio_wait_bit_common+0x836/0xbc0
[  622.452799][   T34]  ? filemap_get_entry+0xcd/0x3f0
[  622.452924][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  622.452994][   T34]  ? filemap_read_folio+0x234/0x3a0
[  622.465847][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  622.477640][   T34]  ? __filemap_get_folio_mpol+0x7c8/0x1000
[  622.480297][   T34]  do_read_cache_folio+0x1ac/0x590
[  622.483098][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  622.485503][   T34]  read_part_sector+0xb6/0x2b0
[  622.485599][   T34]  adfspart_check_POWERTEC+0x9a/0x7a0
[  622.485654][   T34]  ? rcu_is_watching+0x16/0xb0
[  622.499389][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  622.501730][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  622.506138][   T34]  ? __kmalloc_cache_noprof+0x14d/0x600
[  622.511089][   T34]  ? bdev_disk_changed+0x56c/0x17a0
[  622.527564][   T34]  ? bdev_disk_changed+0x56c/0x17a0
[  622.527609][   T34]  bdev_disk_changed+0x851/0x17a0
[  622.527648][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  622.530989][   T34]  blkdev_get_whole+0x372/0x510
[  622.531043][   T34]  bdev_open+0x324/0xd70
[  622.531076][   T34]  blkdev_open+0x461/0x600
[  622.531106][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  622.531134][   T34]  do_dentry_open+0x816/0x1380
[  622.531166][   T34]  vfs_open+0x3b/0x340
[  622.531191][   T34]  ? path_openat+0x1428/0x1d60
[  622.531222][   T34]  path_openat+0x1443/0x1d60
[  622.531259][   T34]  do_file_open+0x23e/0x4a0
[  622.531290][   T34]  ? __pfx_do_file_open+0x10/0x10
[  622.531350][   T34]  ? _raw_spin_unlock+0x28/0x50
[  622
** replaying previous printk message **
[  622.531381][   T34]  ? alloc_fd+0x651/0x6c0
[  622.531412][   T34]  do_sys_openat2+0x115/0x200
[  622.531440][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  622.531468][   T34]  ? __irq_exit_rcu+0xcb/0x220
[  622.531503][   T34]  ? handle_softirqs+0x720/0x860
[  622.531532][   T34]  __x64_sys_openat+0x138/0x170
[  622.531561][   T34]  do_syscall_64+0x166/0x520
[  622.531589][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.531617][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.531643][   T34] RIP: 0033:0x7f336b5669a4
[  622.531669][   T34] RSP: 002b:00007fff9ed67d30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  622.531712][   T34] RAX: ffffffffffffffda RBX: 00005601da951500 RCX: 00007f336b5669a4
[  622.531736][   T34] RDX: 00000000000a0800 RSI: 00005601da9524c0 RDI: 00000000ffffff9c
[  622.531809][   T34] RBP: 00005601da9524c0 R08: 0000000000000001 R09: 3fffffffffffffff
[  622.531832][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  622.531854][   T34] R13: 00005601da95a960 R14: 0000000000000001 R15: 00005601da951910
[  622.564254][   T34]  </TASK>
[  622.564547][   T34] 
[  622.564547][   T34] Showing all locks held in the system:
[  622.564560][   T34] locks held by kworker/u8:0/12: 3, on CPU#0:
[  622.564573][   T34]  #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.564621][   T34]  #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.564661][   T34]  #2: ffffffff8ed62938 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  622.564702][   T34] locks held by kworker/u8:1/13: 5, last CPU#1:
[  622.564714][   T34]  #0: ffff8881bab79940 ((wq_completion)krds_cp_wq#6/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.564819][   T34]  #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.564859][   T34]  #2: ffff88816bdfad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  622.564901][   T34]  #3: ffff888187786e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  622.564942][   T34]  #4: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30
[  622.564983][   T34] locks held by pr/ttyS0/16: 2, last CPU#1:
[  622.564994][   T34]  #0: ffffffff8ec36278 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  622.565032][   T34]  #1: ffffffff9ad250d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  622.565070][   T34] locks held by khungtaskd/34: 1, last CPU#0:
[  622.565081][   T34]  #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  622.565146][   T34] locks held by syslogd/5023: 1, last CPU#1:
[  622.565157][   T34]  #0: ffff8881162c4170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70
[  622.565200][   T34] locks held by udevd/5604: 1, on CPU#1:
[  622.565212][   T34]  #0: ffff88816c7a5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  622.565255][   T34] locks held by getty/7106: 2, on CPU#1:
[  622.565266][   T34]  #0: ffff88816049d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  622.565302][   T34]  #1: ffffc90005b5c2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  622.565374][   T34] locks held by kworker/u10:34/8494: 3, last CPU#1:
[  622.565386][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565427][   T34]  #1: ffffc9000425fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565644][   T34]  #2: ffff88810d8b4258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  622.565696][   T34] locks held by kworker/u10:63/8556: 3, last CPU#1:
[  622.565708][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565747][   T34]  #1: ffffc9000360fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565787][   T34]  #2: ffff88801b98b258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  622.565839][   T34] locks held by kworker/1:0/18872: 2, last CPU#1:
[  622.565850][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565889][   T34]  #1: ffffc90003befc40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  622.565928][   T34] locks held by syz.6.5832/19906: 1, on CPU#1:
[  622.565938][   T34]  #0: ffff88816c7a5350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  622.565981][   T34] 
[  622.565985][   T34] =============================================
[  622.565985][   T34] 
[  622.566009][   T34] NMI backtrace for cpu 0
[  622.566022][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  622.566043][   T34] Tainted: [L]=SOFTLOCKUP
[  622.566049][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  622.566057][   T34] Call Trace:
[  622.566065][   T34]  <TASK>
[  622.566072][   T34]  dump_stack_lvl+0xe8/0x150
[  622.566094][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  622.566115][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  622.566137][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  622.566158][   T34]  sys_info+0x135/0x170
[  622.566176][   T34]  watchdog+0xfd7/0x1030
[  622.566196][   T34]  ? watchdog+0x1c7/0x1030
[  622.566215][   T34]  kthread+0x38b/0x480
[  622.566230][   T34]  ? __pfx_watchdog+0x10/0x10
[  622.566243][   T34]  ? __pfx_kthread+0x10/0x10
[  622.566258][   T34]  ret_from_fork+0x514/0xb70
[  622.566276][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  622.566290][   T34]  ? __switch_to+0xc89/0x1420
[  622.566311][   T34]  ? __pfx_kthread+0x10/0x10
[  622.566356][   T34]  ret_from_fork_asm+0x1a/0x30
[  622.566387][   T34]  </TASK>
[  622.566394][   T34] Sending NMI from CPU 0 to CPUs 1:
[  622.566467][    C1] NMI backtrace for cpu 1
[  622.566482][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  622.566494][    C1] Tainted: [L]=SOFTLOCKUP
[  622.566498][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  622.566504][    C1] RIP: 0010:sched_core_idle_cpu+0xe8/0x1f0
[  622.566519][    C1] Code: 42 0f b6 0c 29 84 c9 75 68 83 3b 00 75 1c 48 83 c3 0c 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 75 67 31 c0 83 3b 00 0f 94 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7
[  622.566526][    C1] RSP: 0018:ffffc90000a18f90 EFLAGS: 00000087
[  622.566535][    C1] RAX: 0000000000000000 RBX: ffff88823c63bac0 RCX: 0000000000000001
[  622.566541][    C1] RDX: 0000000001000000 RSI: ffffffff8c6d6d60 RDI: ffff88823c63bad8
[  622.566547][    C1] RBP: 0000000000000001 R08: 0000000001000001 R09: 1ffffffff20f418f
[  622.566553][    C1] R10: dffffc0000000000 R11: fffffbfff20f4190 R12: ffffffff8e7437d8
[  622.566559][    C1] R13: dffffc0000000000 R14: ffff88823c63bae0 R15: ffff888102ed8000
[  622.566566][    C1] FS:  0000000000000000(0000) GS:ffff8882a8ce6000(0000) knlGS:0000000000000000
[  622.566572][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  622.566579][    C1] CR2: 00007f5830a07580 CR3: 0000000112c46000 CR4: 00000000000006f0
[  622.566604][    C1] Call Trace:
[  622.566610][    C1]  <IRQ>
[  622.566616][    C1]  __irq_exit_rcu+0xdc/0x220
[  622.566630][    C1]  irq_exit_rcu+0x9/0x30
[  622.566639][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  622.566649][    C1]  </IRQ>
[  622.566652][    C1]  <TASK>
[  622.566656][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  622.566666][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  622.566680][    C1] Code: f7 e8 7d 39 bf f5 f7 c3 00 02 00 00 74 05 e8 b0 70 eb f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 64 57 b0 f5 65 48 8b 05 2c 1e af 07 48 85 c0 74 18 5b 41 5e c3
[  622.566688][    C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
[  622.566695][    C1] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001
[  622.566701][    C1] RDX: 0000000000000000 RSI: ffffffff8e472e42 RDI: 0000000000000001
[  622.566706][    C1] RBP: ffffc90000157e18 R08: ffffffff907a0c7f R09: 1ffffffff20f418f
[  622.566712][    C1] R10: dffffc0000000000 R11: fffffbfff20f4190 R12: 0000000000000002
[  622.566718][    C1] R13: ffff888102ed8000 R14: ffffffff9ad250c0 R15: dffffc0000000000
[  622.566730][    C1]  nbcon_kthread_func+0x6c4/0x880
[  622.566740][    C1]  ? nbcon_kthread_func+0x163/0x880
[  622.566748][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  622.566758][    C1]  ? __kthread_parkme+0x71/0x1f0
[  622.566770][    C1]  ? __kthread_parkme+0x199/0x1f0
[  622.566782][    C1]  kthread+0x38b/0x480
[  622.566790][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  622.566798][    C1]  ? __pfx_kthread+0x10/0x10
[  622.566806][    C1]  ret_from_fork+0x514/0xb70
[  622.566815][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  622.566823][    C1]  ? __switch_to+0xc89/0x1420
[  622.566835][    C1]  ? __pfx_kthread+0x10/0x10
[  622.566843][    C1]  ret_from_fork_asm+0x1a/0x30
[  622.566859][    C1]  </TASK>
[  622.567495][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  622.898749][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  622.902782][   T34] Tainted: [L]=SOFTLOCKUP
[  622.904457][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  622.908221][   T34] Call Trace:
[  622.909586][   T34]  <TASK>
[  622.910773][   T34]  vpanic+0x56d/0xa60
[  622.912356][   T34]  ? __pfx___schedule+0x10/0x10
[  622.914242][   T34]  ? __pfx_vpanic+0x10/0x10
[  622.916065][   T34]  panic+0xc5/0xd0
[  622.917838][   T34]  ? __pfx_panic+0x10/0x10
[  622.919567][   T34]  ? preempt_schedule_common+0x7f/0xd0
[  622.921755][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  622.923819][   T34]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  622.926189][   T34]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  622.928596][   T34]  watchdog+0x1030/0x1030
[  622.930263][   T34]  ? watchdog+0x1c7/0x1030
[  622.931969][   T34]  kthread+0x38b/0x480
[  622.933577][   T34]  ? __pfx_watchdog+0x10/0x10
[  622.935361][   T34]  ? __pfx_kthread+0x10/0x10
[  622.937128][   T34]  ret_from_fork+0x514/0xb70
[  622.938901][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  622.940839][   T34]  ? __switch_to+0xc89/0x1420
[  622.942649][   T34]  ? __pfx_kthread+0x10/0x10
[  622.944400][   T34]  ret_from_fork_asm+0x1a/0x30
[  622.946208][   T34]  </TASK>
[  622.948166][   T34] Kernel Offset: disabled
[  622.949848][   T34] Rebooting in 86400 seconds..
