last executing test programs:

10m47.097196952s ago: executing program 32 (id=59):
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)

10m6.009481207s ago: executing program 33 (id=284):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)

9m52.853713839s ago: executing program 0 (id=344):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

9m51.438159989s ago: executing program 0 (id=354):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x437, 0xffdffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014)

9m51.304911367s ago: executing program 0 (id=355):
pipe2(&(0x7f0000000080), 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001d0029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x2, 0x2, 0x63, 0x3ff}]}, 0xffffffffffffff9d)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

9m50.38509407s ago: executing program 0 (id=356):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000900)={[{@init_itable_val={'init_itable', 0x3d, 0x94eb}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45f, &(0x7f0000000480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000))

9m49.693434927s ago: executing program 0 (id=358):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

9m46.926896923s ago: executing program 0 (id=364):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @random="a3cac7f9a4c7"}, 0x14)

9m46.891447544s ago: executing program 34 (id=364):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @random="a3cac7f9a4c7"}, 0x14)

9m34.852283594s ago: executing program 1 (id=408):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nobh}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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")

9m34.437966491s ago: executing program 1 (id=412):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0xffd1)

9m34.158086853s ago: executing program 1 (id=414):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000359000/0xa000)=nil, 0x400000, 0x2, 0x2})

9m33.303977284s ago: executing program 1 (id=415):
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0)

9m33.077137573s ago: executing program 1 (id=419):
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x69e, &(0x7f0000000140)="$eJzs3UtsHHcdB/DvrDd+BJS6bfoAITVqRASNSOwsJUGACAihHCoUiUsvHKzEaaxs0spxkVsh6vK8cuyhhyIUDhUH1ANSEYeKckZC4sQl90jcfWLRzM6u19l4481rN/D5SLP//8z/Mb/5eWb2JWsD/N8692oObKXIueOvbJbrN2+02jdvtK726knmkjSSZrdIcS0pPk3Oprvkc+XGerpir/28fOvj94+992Gru9asl6p/Y9S4Ibf3/EOvslU+HEkyU5f3YWtwvgv3PV/Rj7tM2NFe4mDSOkO2xhm+/+sWmFpF93lzyGJyMMl8/Tog9d2h8Wije/DGussBAADAY+qJ7WxnM4cmHQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Turf/y/qpdGrH0nR+/3/2WrbbNV9dtLx3q9PJh0AAAAAAAAAADwAL2xnO5s51FvvFNV3/i9WK4erx8/kzVzPatZzIptZyUY2sp7lJItV+7vV4+zmysbG+vJeIzudzjudmWrkqf7IDIw8NRRaMTryztx9HzwAAAAAAAAAPGZGfFn+s5zb+f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACmQZHMdItqOdyrL6bRTDKfZLbst5X8pVd/nH0y6QAAAADgEXhiO9vZzKHiP931TlG953+2et8/nzdzLRtZy0baWc3F6rOA7rv+xj+2Wu2bN1pXy2V43u/8e6wwqhnT/ezhznteqno8U/ffSvL9/DDHcyTns561/Dgr2chqjuR7VW0lRRaruf71raSOcyjeufLh7K5Qzt8t1uerSBZyKWtVbCdyof8xSKPXZ2Bvf5pNdmWokXfL7BTfru0zRxfrsvwb/KYup8NidVAH+hlZqnNfZuPJm3vlvtI9T+bG31Oz3tLofwZ1eNSe7jHnB+uyzPWvBnP+wn4jflgGc15GdSqN/tn37N6Z6Hb58j//ev5y+9qVy5euH5+e02hPnU7nnb1bbz/7Wv1MzOe50WffYCa29sjER7tXZ+7UZ37MA3pIZutsdGPcuVsm5wbvlp1OMnS3fLEaeyhr+UFez8Ws5nSWspwzWcrXcyqtXWfYM6PzWl1rjfGutaNfqisLSX5dl1Og0y2eHMjr4J1usWob3LKTpaf2kaUx70jNz9eVch8/H3jGmbzbM7E8kImnR2fit1WSr7evXVm/vPLGPvd3rC7Ly/aXu58Pf/cgjufeldfhU+Ufq1rbfXaUbU/fsW25ajvcb2sMtT3Tb7vblTpbv4Ybnqnb9twd21pV2/MDbbte5eT1tPuvQgCYFp3hTQdfOji7cGvh7wsfLPxi4fLCK/PfnTsz94XZHPhb888zf2z8vvHN4qV8kJ/m0CQCBgAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/zXX33r7ykq7vbo+hZU0xhtVHs+kY57aylyScUcVzQcbxkdJ7tzU+5m3EcOr3wrszKW35Yvt1Xx2xE6bA2d4Mg1/ggdY+caPugd3t87N8S7zhXrC6flxMeDhOblx9Y2T1996+ytrV1deW31t9dqpM6fPnG59bfmrJy+ttVeXuo+TjhJ4GHae/ScdCQAAAAAAAAAAALBfj+I/FiZ9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDj7dyrObCVIstLJ5bK9Zs3Wu1y6dV3ejaTNJIUP0mKT5Oz6S5ZHJiu2Gs/L9/6+P1j733Y2pmr2evfGDVuf7bqJUeSzNTl7R2Gze1rvguD8zXuJbyif4Rlwo72EgeT9t8AAAD///lK/zM=")
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x3d9}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'})
r1 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d"], 0x0)
write$usbip_server(r1, &(0x7f00000000c0)=ANY=[], 0x35)

9m31.90384906s ago: executing program 1 (id=421):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f000001000000001000000000000000000040"], 0x30}}], 0x1, 0x0)

9m31.903708278s ago: executing program 35 (id=421):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aa7f000001000000001000000000000000000040"], 0x30}}], 0x1, 0x0)

7m27.335279947s ago: executing program 5 (id=1332):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f96c90", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private2}}}}}}, 0x0)

7m27.335150933s ago: executing program 6 (id=1333):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)={0x1})

7m27.265958067s ago: executing program 5 (id=1334):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
timer_create(0x6, &(0x7f00000001c0)={0x0, 0x6, 0x2}, &(0x7f0000000280))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ptrace(0x4207, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x12c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x187)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000fb00000000fb1a06"], 0x59b300)

7m27.26578831s ago: executing program 6 (id=1335):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055)

7m27.165652579s ago: executing program 6 (id=1336):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x40, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xc, 0x6}, {0x9, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m26.668425773s ago: executing program 6 (id=1337):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7b"], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7m26.585887557s ago: executing program 6 (id=1339):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000100)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}, {0x9, 0x800, 0x0, 0x0}], 0x3})

7m26.315778055s ago: executing program 5 (id=1345):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

7m26.164877573s ago: executing program 5 (id=1349):
syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xb3, 0x7a, 0x57, 0x40, 0x7c0, 0x1503, 0x5c0f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x16, 0x10, 0x6, "", [{{0x9, 0x4, 0x14, 0xe8, 0x2, 0xbb, 0x17, 0xab, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x1, 0x82}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

7m25.489645209s ago: executing program 4 (id=1351):
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r0, 0xfffffffffffffffe, 0x29)

7m25.412555952s ago: executing program 4 (id=1352):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
r1 = dup(r0)
writev(r1, &(0x7f0000000600)=[{&(0x7f0000000000)="16", 0x1}], 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

7m25.275932212s ago: executing program 4 (id=1353):
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03000a", 0x18, 0x0, 0x0, @private0, @local, {[@hopopts={0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}, 0x0)

7m25.275775504s ago: executing program 6 (id=1354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="89e7ee0c7cda99b4b47380c988ca4fbe5ffc018647dce212831f4717b411e6", 0x1f}], 0x1)

7m25.226165778s ago: executing program 4 (id=1355):
syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0xffb, &(0x7f00000010c0)="$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")

7m25.096161812s ago: executing program 4 (id=1356):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4)

7m25.095913685s ago: executing program 4 (id=1357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0)

7m24.933682194s ago: executing program 5 (id=1358):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, &(0x7f0000000040))

7m24.833821796s ago: executing program 5 (id=1359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000019000109000000000000000002180020000000000000000008000100ac1414"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

7m10.094094973s ago: executing program 36 (id=1354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="89e7ee0c7cda99b4b47380c988ca4fbe5ffc018647dce212831f4717b411e6", 0x1f}], 0x1)

7m9.049147938s ago: executing program 37 (id=1359):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000019000109000000000000000002180020000000000000000008000100ac1414"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

7m8.997580761s ago: executing program 38 (id=1357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0)

2m42.100973841s ago: executing program 9 (id=4837):
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @local, @empty, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0)

2m41.455466754s ago: executing program 9 (id=4839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x70}}, 0x0)

2m41.378201323s ago: executing program 9 (id=4841):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x3, 0x10, "9185c7174c970f8ad3f7539a579871cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m39.796661231s ago: executing program 9 (id=4872):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)

2m39.512343661s ago: executing program 9 (id=4877):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
accept(r0, 0x0, 0x0)

2m38.635395788s ago: executing program 9 (id=4893):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000140))

2m38.434304031s ago: executing program 39 (id=4893):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000140))

1m29.294175477s ago: executing program 2 (id=6094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a0101000000000000ee000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b801000e6800b0001006f626a72656600000c0004"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m28.948100791s ago: executing program 2 (id=6102):
r0 = socket$inet6(0xa, 0x1, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x24}, 0x440e0)

1m28.790398493s ago: executing program 2 (id=6103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x402, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x191c)

1m28.180385394s ago: executing program 2 (id=6124):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000480)=ANY=[@ANYBLOB='keep_last_dots,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,umask=00000000000000000000013,namecase=1,discard,time_offset=0x0000000000000008,discard,discard,iocharset=maccenteuro,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x81, 0x1534, &(0x7f0000000e40)="$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")
syz_open_procfs(0x0, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0)

1m27.989405422s ago: executing program 2 (id=6129):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x201008a, &(0x7f0000000300)=ANY=[], 0x3, 0x24b, &(0x7f0000000540)="$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")
rename(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000480)='\xe9\x1fq\x89Y\x1e\x923aK\x00')

1m26.688380087s ago: executing program 2 (id=6155):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000400000000000000000000000ad0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

1m26.567367582s ago: executing program 40 (id=6155):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000400000000000000000000000ad0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

5.165373155s ago: executing program 8 (id=7591):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20004084)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.018158349s ago: executing program 8 (id=7595):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50)

5.018020956s ago: executing program 8 (id=7596):
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000)
syz_usb_disconnect(r0)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550d, &(0x7f00000000c0)=0x18)

3.015229053s ago: executing program 8 (id=7632):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.121654606s ago: executing program 3 (id=7678):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000200)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r0, 0xfffffffffffffffe, 0x29)

961.097389ms ago: executing program 3 (id=7680):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000900)={{0x80}})

826.728613ms ago: executing program 3 (id=7684):
clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0xfffffffffffffff8, 0x8, 0x8, 0x1820000000000, 0x3, 0x7, 0x8, 0x100, 0x8000000000000001, 0x80, 0xb15, 0xff62, 0xa69e, 0xf, 0x5, 0x8000, 0x3, 0x9, 0x5, 0xbc2, 0x8, 0x1, 0x4, 0x1})

728.667328ms ago: executing program 3 (id=7686):
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x86, &(0x7f0000000480)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

354.313193ms ago: executing program 3 (id=7690):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0)

354.16104ms ago: executing program 7 (id=7691):
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc8003, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4000)
creat(&(0x7f0000000440)='./bus\x00', 0xf2)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700383afffe880000000000000000000000000001ff028bf460744117adb6c08a362c0000000000000000000000000001020190780000000060000063000100000000000000"], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4010)
open_by_handle_at(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r4], 0x0)

354.031016ms ago: executing program 8 (id=7692):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="9f060185043a", 0x6}], 0x1, &(0x7f0000000700)=[@hopopts={{0x18, 0x29, 0x36, {0x1d}}}], 0x18}}], 0x1, 0x40)

303.213143ms ago: executing program 7 (id=7693):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3095b90b396cd8ec", "3499a517a1df1c71496cffeebaabfe5eb548502ce0f59ce4a4af09f0438ece31", "4277dea9", "0cf02f56bec1eb9e"}, 0x38)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x78)

181.754362ms ago: executing program 7 (id=7694):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000240)=0x47ee917f)

181.60706ms ago: executing program 3 (id=7695):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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")
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

108.97602ms ago: executing program 7 (id=7696):
r0 = socket$nl_route(0x10, 0x3, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0x3, 0x0, 0x0)

65.359964ms ago: executing program 7 (id=7697):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000002000500010007000000100007800c00018008000140"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)

116.848µs ago: executing program 8 (id=7698):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

0s ago: executing program 7 (id=7699):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x4, 0x1900, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x2, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x100, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

ng write with raw_refcnt=0x0, refcnt=1
[  677.696024][T22071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6787: Block bitmap for bg 0 marked uninitialized
[  677.726043][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.726670][   T40] audit: type=1326 audit(2000000044.169:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22076 comm="syz.8.6790" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe2d6edd60e code=0x7ffc0000
[  677.727110][T22071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6787: Block bitmap for bg 0 marked uninitialized
[  677.727718][   T40] audit: type=1326 audit(2000000044.169:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22076 comm="syz.8.6790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  677.728216][   T40] audit: type=1326 audit(2000000044.169:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22076 comm="syz.8.6790" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  677.728411][   T40] audit: type=1326 audit(2000000044.169:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22076 comm="syz.8.6790" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  677.728656][   T40] audit: type=1326 audit(2000000044.169:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22076 comm="syz.8.6790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  677.752551][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.752876][T22071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6787: Block bitmap for bg 0 marked uninitialized
[  677.757805][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.758090][T22071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6787: Block bitmap for bg 0 marked uninitialized
[  677.758300][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.758963][T22071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6787: Block bitmap for bg 0 marked uninitialized
[  677.759175][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.861488][ T4224] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.861537][ T4224] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.861570][ T4224] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.875983][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.942723][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  677.948221][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  677.999482][T22090] loop3: detected capacity change from 0 to 256
[  678.000810][T22090] exfat: Deprecated parameter 'namecase'
[  678.000889][T22090] exfat: Deprecated parameter 'namecase'
[  678.000906][T22090] exfat: Deprecated parameter 'utf8'
[  678.027646][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.042418][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.044268][T22090] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  678.044443][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.044643][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.044813][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.044988][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.046771][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.046991][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.048727][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.049028][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.049154][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.049273][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.049420][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.049827][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  678.050239][T22090] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff)
[  678.050259][T22090] exFAT-fs (loop3): Filesystem has been set read-only
[  678.050267][T22090] exFAT-fs (loop3): failed to count the number of clusters in root
[  678.050275][T22090] exFAT-fs (loop3): failed to recognize exfat type
[  678.062732][ T9976] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  678.289066][ T9904] usb 9-1: new low-speed USB device number 34 using dummy_hcd
[  678.465867][ T9904] usb 9-1: unable to get BOS descriptor or descriptor too short
[  678.467344][ T9904] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  678.467384][ T9904] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0
[  678.467401][ T9904] usb 9-1: config 1 interface 0 has no altsetting 0
[  678.506443][ T9904] usb 9-1: string descriptor 0 read error: -22
[  678.506554][ T9904] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  678.506573][ T9904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.946517][ T9904] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  678.957828][ T9904] usb 9-1: USB disconnect, device number 34
[  679.053287][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'.
[  679.319441][T22148] loop3: detected capacity change from 0 to 512
[  679.320868][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.321371][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.321755][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.324224][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.324294][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.324449][T22148] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  679.324464][T22148] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  679.352438][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.352721][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.354618][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.354840][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.355035][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.355253][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.365097][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.381973][T22148] EXT4-fs (loop3): orphan cleanup on readonly fs
[  679.382118][T22148] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  679.382140][T22148] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  679.382395][   T94] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  679.461923][T22148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6824: bg 0: block 40: padding at end of block bitmap is not set
[  679.461955][T22148] loop3: lost filesystem error report for type 5 error -117
[  679.469012][    C1] EXT4-fs (loop3): initial error at time 2000000045: ext4_validate_block_bitmap:441
[  679.469034][    C1] EXT4-fs (loop3): last error at time 2000000045: ext4_validate_block_bitmap:441
[  679.602546][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  679.606567][T22148] EXT4-fs (loop3): Remounting filesystem read-only
[  679.744007][T22148] EXT4-fs (loop3): 1 truncate cleaned up
[  679.749692][T22148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  680.088102][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.141956][ T9904] usb 9-1: new full-speed USB device number 35 using dummy_hcd
[  680.144190][T16032] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  680.155939][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  680.353944][ T9904] usb 9-1: device descriptor read/64, error -71
[  680.379851][T22170] netlink: 'syz.3.6833': attribute type 6 has an invalid length.
[  680.379862][T22170] netlink: 'syz.3.6833': attribute type 4 has an invalid length.
[  680.786731][ T9904] usb 9-1: new full-speed USB device number 36 using dummy_hcd
[  680.964173][ T9904] usb 9-1: device descriptor read/64, error -71
[  681.206457][ T9904] usb usb9-port1: attempt power cycle
[  681.636160][ T9904] usb 9-1: new full-speed USB device number 37 using dummy_hcd
[  681.657932][ T9904] usb 9-1: device descriptor read/8, error -71
[  681.933988][ T9904] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[  681.962702][ T9904] usb 9-1: device descriptor read/8, error -71
[  682.088974][ T9904] usb usb9-port1: unable to enumerate USB device
[  682.284634][T22233] loop3: detected capacity change from 0 to 512
[  682.288654][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.288808][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.290802][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.290973][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.291192][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.307599][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.307805][T22233] EXT4-fs (loop3): 1 truncate cleaned up
[  682.308883][T22233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  682.317594][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.323373][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.327370][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.327400][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.329429][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.329648][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.329827][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.330003][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.331400][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.331791][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  682.426076][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.426123][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.426144][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.426163][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.426181][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.428498][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.447909][   T94] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  682.514170][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  682.796818][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816c359400: rx timeout, send abort
[  683.288566][T22264] loop8: detected capacity change from 0 to 512
[  683.295883][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.335429][    C1] vcan0: j1939_tp_rxtimer: 0xffff88819bf59400: rx timeout, send abort
[  683.335835][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816c359400: abort rx timeout. Force session deactivation
[  683.480783][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.480811][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.480821][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.481479][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.481607][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.481717][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.481836][ T4711] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.515230][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520168][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520319][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520483][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520606][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520713][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.520840][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559009][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559235][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559395][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559507][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559817][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.559930][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.560043][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.560168][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.560490][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  683.602455][T22264] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  683.870040][    C1] vcan0: j1939_tp_rxtimer: 0xffff88819bf59400: abort rx timeout. Force session deactivation
[  683.972026][T22281] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  684.496695][T22290] loop3: detected capacity change from 0 to 512
[  684.507934][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.508832][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.509054][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.509887][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.510113][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.510288][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.510499][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.510671][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.511035][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.521955][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.523379][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.523994][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  684.599890][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.600188][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.600855][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.6889: iget: bad extra_isize 58 (inode size 256)
[  684.600882][T22290] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  684.601919][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.602225][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6889: error while reading EA inode 11 err=-117
[  684.602245][T22290] loop3: lost filesystem error report for type 5 error -117
[  684.602496][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.604999][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.6889: iget: bad extra_isize 58 (inode size 256)
[  684.605024][T22290] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  684.613598][    C1] EXT4-fs (loop3): error count since last fsck: 3
[  684.613617][    C1] EXT4-fs (loop3): initial error at time 2000000050: ext4_xattr_inode_iget:441: inode 11
[  684.613639][    C1] EXT4-fs (loop3): last error at time 2000000050: ext4_xattr_inode_iget:441: inode 11
[  684.678653][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.692425][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6889: error while reading EA inode 11 err=-117
[  684.692451][T22290] loop3: lost filesystem error report for type 5 error -117
[  684.692616][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.714802][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.6889: iget: bad extra_isize 58 (inode size 256)
[  684.714831][T22290] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  684.714993][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.715409][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6889: error while reading EA inode 18 err=-117
[  684.715427][T22290] loop3: lost filesystem error report for type 5 error -117
[  684.715548][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.715802][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.6889: iget: bad extra_isize 58 (inode size 256)
[  684.715820][T22290] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  684.716008][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.759564][T22290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6889: error while reading EA inode 18 err=-117
[  684.759588][T22290] loop3: lost filesystem error report for type 5 error -117
[  684.765664][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.766060][T22290] EXT4-fs (loop3): 1 orphan inode deleted
[  684.784645][T22290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.969164][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.986804][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  684.989181][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.998662][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  685.058932][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  685.317336][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6903'.
[  685.525613][T22315] loop3: detected capacity change from 0 to 32768
[  685.575169][ T9007] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.575686][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.575840][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.575906][T22315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6900 (22315)
[  685.575959][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.576066][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.576290][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.576513][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.577032][ T9007] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.577852][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.583714][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.583988][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.584177][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.584424][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.584587][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.584743][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.585022][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.610878][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.611319][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.611502][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.611667][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.611852][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.612133][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.612410][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.613818][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.614051][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.615879][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616094][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616210][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616368][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616484][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616607][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616795][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.616965][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.617105][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.618554][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.618582][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.618601][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.618622][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.618659][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.697187][T22338] loop8: detected capacity change from 0 to 128
[  685.701762][ T9007] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.701842][T22315] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  685.701857][T22315] BTRFS info (device loop3): using sha256 checksum algorithm
[  685.704640][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.704813][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714437][T10013] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714464][T10013] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714479][T10013] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714489][T10013] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714739][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.714888][ T3819] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  685.715101][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.715981][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.716168][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.716311][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.716471][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.716656][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.720099][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  685.728143][T22338] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  685.729036][T10013] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  685.729924][T22338] ext4 filesystem being mounted at /854/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  685.746207][T10013] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  685.830417][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  685.867809][ T9730] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  685.888442][   T44] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  685.991966][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  686.068662][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.072494][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.072880][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.073876][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.076898][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.078195][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.135186][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.158083][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.158346][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.158628][T22315] BTRFS info (device loop3): enabling ssd optimizations
[  686.158638][T22315] BTRFS info (device loop3): turning on async discard
[  686.158645][T22315] BTRFS info (device loop3): enabling free space tree
[  686.158779][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  686.340812][T20630] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  686.564147][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  687.363508][T22403] netlink: 'syz.8.6935': attribute type 3 has an invalid length.
[  687.363528][T22403] netlink: 'syz.8.6935': attribute type 2 has an invalid length.
[  687.363538][T22403] netlink: 'syz.8.6935': attribute type 2 has an invalid length.
[  688.060022][T22425] netlink: 'syz.3.6945': attribute type 1 has an invalid length.
[  688.060033][T22425] netlink: 'syz.3.6945': attribute type 2 has an invalid length.
[  688.164263][ T5608] Bluetooth: hci0: unexpected event for opcode 0x2028
[  689.045880][T22459] loop8: detected capacity change from 0 to 4096
[  689.048604][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.048681][T22459] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  689.048886][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.050837][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.118929][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.118935][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.123645][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.127398][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.127795][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.133277][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.134443][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.140769][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.142841][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.146894][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.150458][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.159854][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.160613][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.166054][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.167433][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.167681][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.167911][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.168078][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.168394][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.168766][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.168952][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.169194][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.169325][T22459] ntfs3(loop8): Failed to load $UpCase (-22).
[  689.177475][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.182573][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.188383][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.205825][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.222193][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.297742][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.302894][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.304588][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.304745][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.304876][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.305049][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.305252][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.305385][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.305490][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.305603][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.307856][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.308152][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.308808][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.357840][ T9976] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  689.786618][T22469] loop8: detected capacity change from 0 to 32768
[  689.788075][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.790005][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.804348][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.807653][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.818360][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.819489][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.821842][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.823624][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.823972][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.824511][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.826795][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.826899][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.827584][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.828809][   T41] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  689.862163][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.867672][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.897514][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.902566][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.902735][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.902859][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.902977][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903092][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903208][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903449][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903567][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903690][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.903881][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.904009][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.904125][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.904424][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.904615][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.904818][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.905061][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.905301][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.905552][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.905729][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.905867][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.906391][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.906525][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.906920][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.907165][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.908065][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.935353][  T779] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  689.935953][  T779] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  689.936565][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  689.936772][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.066018][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.081322][  T779] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.081618][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.081889][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082122][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082416][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082509][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082628][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082824][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.082981][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.083143][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.095086][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  690.290021][T22502] loop8: detected capacity change from 0 to 128
[  690.294768][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.295083][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.297115][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.297147][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.297752][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.297826][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.298265][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.300549][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.300753][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.300967][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.301151][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.301333][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.301401][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.301588][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.302042][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.340715][T22502] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  690.340901][ T9007] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.341083][T22502] ext4 filesystem being mounted at /871/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  690.360174][T22492] loop3: detected capacity change from 0 to 32768
[  690.363322][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.363599][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.363828][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.383328][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.383445][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.383916][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.384160][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.384895][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.386855][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.387771][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.388044][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.388262][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.388509][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.388680][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.388835][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.389295][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.393183][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.393618][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.393810][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.394310][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.396567][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.396836][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.397035][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.397261][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.397466][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.397654][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.398036][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.407863][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.408137][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.408447][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.409252][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.409486][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.409884][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.412307][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.412344][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.412378][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.417786][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.499504][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.547318][ T9730] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  690.552154][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.552994][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.553156][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.553339][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  690.553508][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  690.553706][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  690.554046][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.554917][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  690.558596][  T779] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  690.568701][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  690.968997][T22522] loop8: detected capacity change from 0 to 4096
[  690.970425][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.970534][T22522] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  690.970812][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.972812][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.973154][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.973430][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.973681][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.973984][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.974333][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.974649][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.974943][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.976657][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.977783][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.978789][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.979429][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.982299][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.982940][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.990888][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.991134][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.991347][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.991544][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.991724][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.991968][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.992281][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.992471][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.992659][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.992846][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993023][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993286][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993471][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993647][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993819][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.993998][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.994172][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.994482][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.994707][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.994883][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.995071][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.995280][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.995585][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  690.995775][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.060650][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.060916][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061097][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061300][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061512][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061667][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061815][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.061965][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.062116][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.062299][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.062486][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.062687][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.064473][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.064709][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.064844][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.064964][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065076][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065187][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065355][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065535][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065652][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065763][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.065892][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066007][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066121][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066259][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066373][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066492][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066605][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066729][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.066880][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.067040][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.067159][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.067726][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.067983][ T9007] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.077162][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.077545][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.077819][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.100546][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.100827][   T41] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.112793][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.113150][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.130534][   T41] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.206904][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  691.247248][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.288016][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.288298][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  691.289682][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.289712][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.289725][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.289739][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.289752][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.289771][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  691.294342][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  691.395184][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.395249][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.395265][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.420166][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.420235][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.420256][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.749814][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  691.929997][T21192] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  692.036371][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.038682][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.039029][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.040091][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.040124][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.040355][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.040519][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.040617][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  692.040752][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  692.048163][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  692.093769][T21192] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  692.093793][T21192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.093810][T21192] usb 9-1: Product: syz
[  692.093821][T21192] usb 9-1: Manufacturer: syz
[  692.093833][T21192] usb 9-1: SerialNumber: syz
[  692.117523][T21192] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  692.152989][ T9895] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  692.850020][ T9904] usb 9-1: USB disconnect, device number 39
[  693.297550][ T9895] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  693.297686][ T9895] ath9k_htc: Failed to initialize the device
[  693.298723][ T9904] usb 9-1: ath9k_htc: USB layer deinitialized
[  693.508691][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  693.508701][   T40] audit: type=1326 audit(2000000058.930:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22634 comm="syz.8.7048" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x0
[  693.574904][   T40] audit: type=1326 audit(2000000058.986:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.575056][   T40] audit: type=1326 audit(2000000058.986:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.586079][ T5679] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  693.605621][   T40] audit: type=1326 audit(2000000059.014:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2d6edd60e code=0x7ffc0000
[  693.606343][   T40] audit: type=1326 audit(2000000059.014:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.606441][   T40] audit: type=1326 audit(2000000059.014:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.606897][   T40] audit: type=1326 audit(2000000059.014:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.607013][   T40] audit: type=1326 audit(2000000059.014:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.607136][   T40] audit: type=1326 audit(2000000059.014:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22638 comm="syz.8.7050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  693.757535][ T5679] usb 4-1: Using ep0 maxpacket: 32
[  693.761781][ T5679] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  693.761802][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.761817][ T5679] usb 4-1: Product: syz
[  693.761828][ T5679] usb 4-1: Manufacturer: syz
[  693.761838][ T5679] usb 4-1: SerialNumber: syz
[  693.765771][ T5679] usb 4-1: config 0 descriptor??
[  693.773345][ T5679] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  694.609034][   T40] audit: type=1326 audit(2000000059.912:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.8.7064" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  695.279508][T22690] netlink: 'syz.8.7074': attribute type 1 has an invalid length.
[  695.279622][T22690] netlink: 'syz.8.7074': attribute type 2 has an invalid length.
[  695.397920][ T5679] gspca_topro: reg_w err -71
[  695.424930][ T5679] gspca_topro: Sensor soi763a
[  695.510667][ T5679] usb 4-1: USB disconnect, device number 7
[  695.781447][T22711] loop8: detected capacity change from 0 to 4096
[  695.782901][T22711] EXT4-fs: inline encryption not supported
[  695.782929][T22711] EXT4-fs: Ignoring removed nobh option
[  695.783977][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.784327][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.784381][T22711] EXT4-fs (loop8): Test dummy encryption mode enabled
[  695.785206][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785294][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785423][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785595][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785697][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785848][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.785938][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.824740][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.824959][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.825098][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.825287][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.825406][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.825533][  T779] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.846074][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.846324][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.846518][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.846678][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.846842][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.847019][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.851181][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.851892][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.852029][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.852144][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.868535][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.872960][T22292] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.875664][T22292] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.887686][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.899511][T22292] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  695.902844][T22711] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  695.902982][T22711] System zones: 0-5
[  695.904353][T22292] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  695.918845][T22711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.999798][ T4224] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.028231][ T9730] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.029585][T22292] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.121344][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  696.510081][T22732] loop8: detected capacity change from 0 to 32768
[  696.518734][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.519010][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.519952][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.519997][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.520246][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.520441][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.520637][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.520901][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.521087][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.521367][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.521571][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.521756][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.521946][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.522127][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.522353][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.522538][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.522795][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.523011][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.523308][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.523548][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.523732][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.523934][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.524146][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.524421][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.524616][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.524923][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.525193][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.525401][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.525583][ T4224] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.529973][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.530248][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.531680][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.532495][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.535467][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.669064][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.669588][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.669924][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.670226][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.670467][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.670922][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.671205][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.671939][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.672324][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.672552][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.672733][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.673040][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.673349][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.673571][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.728067][T22732] ERROR: (device loop8): diNewExt: no free extents
[  696.728067][T22732] 
[  696.790111][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.790452][T22732] ERROR: (device loop8): remounting filesystem as read-only
[  696.790494][T22732] ialloc: diAlloc returned -5!
[  696.857836][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.857871][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.858254][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.858608][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.858877][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.859080][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.859139][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.859306][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.859401][  T785] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  696.859489][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  696.865961][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  697.251000][T22778] loop3: detected capacity change from 0 to 256
[  697.259051][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.259626][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261270][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261443][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261461][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261475][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261488][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261497][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261894][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.261998][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.262098][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.271968][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.273135][ T4224] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.305871][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.307726][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.307841][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.307936][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.308030][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.308135][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.308337][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.309446][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.312197][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.312415][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.314265][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.314394][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.314537][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.315443][T22778] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  697.316005][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  697.439992][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  697.627574][ T4224] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  697.628256][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  697.634372][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  697.871259][T22800] netlink: 'syz.8.7125': attribute type 1 has an invalid length.
[  697.871269][T22800] netlink: 'syz.8.7125': attribute type 2 has an invalid length.
[  697.956084][ T5608] Bluetooth: hci0: link tx timeout
[  697.980469][ T5608] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  698.029304][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7129'.
[  698.029324][T22811] netlink: 83 bytes leftover after parsing attributes in process `syz.8.7129'.
[  698.385348][T22825] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:bb to non-existent VLAN 2304
[  698.821182][T22840] loop8: detected capacity change from 0 to 32768
[  698.823829][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.823963][T22840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.7143 (22840)
[  698.837227][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.839283][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.839353][T22840] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  698.839366][T22840] BTRFS info (device loop8): using sha256 checksum algorithm
[  698.867248][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.867579][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.867838][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868033][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868215][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868353][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868562][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868714][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.868727][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.870691][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.870916][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.871088][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.872912][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.873109][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.873321][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.873507][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.873666][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.873880][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.875806][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.877404][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.877619][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.887628][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.894412][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.902161][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.911999][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.912264][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.912741][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.912937][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.913116][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.913327][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.913666][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.916559][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.916803][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.917101][T22840] BTRFS info (device loop8): enabling ssd optimizations
[  698.917111][T22840] BTRFS info (device loop8): turning on async discard
[  698.917118][T22840] BTRFS info (device loop8): enabling free space tree
[  698.917289][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.919464][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.919603][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.919735][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.919848][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.919953][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.921181][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.921202][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.921215][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.921232][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  698.921264][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  699.162603][T22874] loop3: detected capacity change from 0 to 8192
[  699.262074][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.262457][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.270083][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.278667][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.278995][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.279216][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.279505][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.279744][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.279910][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.280163][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.282006][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.282268][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.282619][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.282810][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.283016][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.321560][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.325331][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.329086][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.329461][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.329643][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.329819][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.329989][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.330207][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.330458][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.330658][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.330853][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.331073][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.331283][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.331459][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  699.342432][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  699.487871][T22885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7156'.
[  699.806931][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  699.846428][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  699.852238][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  699.898376][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  699.962244][  T779] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  700.027574][ T9730] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  700.189288][ T5608] Bluetooth: hci0: command 0x041b tx timeout
[  700.307646][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  700.478104][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  700.478146][   T40] audit: type=1326 audit(2000000065.449:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.479967][   T40] audit: type=1326 audit(2000000065.449:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.480604][   T40] audit: type=1326 audit(2000000065.449:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.480804][   T40] audit: type=1326 audit(2000000065.449:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.481196][   T40] audit: type=1326 audit(2000000065.449:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.482577][   T40] audit: type=1326 audit(2000000065.459:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.482774][   T40] audit: type=1326 audit(2000000065.459:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  700.483000][   T40] audit: type=1326 audit(2000000065.459:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22926 comm="syz.8.7173" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  701.094158][T22951] loop8: detected capacity change from 0 to 512
[  701.105208][T22951] EXT4-fs: Ignoring removed nomblk_io_submit option
[  701.105591][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.105669][T22951] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  701.106645][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.106882][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.107015][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.107173][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.108300][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.108447][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.108595][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.108814][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.108944][ T3819] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  701.158831][ T9976] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  705.573306][T23088] netlink: 'syz.8.7252': attribute type 33 has an invalid length.
[  705.573326][T23088] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7252'.
[  705.573358][T23088] `: renamed from macvtap0 (while UP)
[  705.602402][ T9895] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  705.619788][T23088] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  705.759719][   T64] Bluetooth: hci5: unexpected event for opcode 0x0c6d
[  705.771560][ T9895] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  705.771607][ T9895] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  705.771624][ T9895] usb 4-1: config 0 interface 0 has no altsetting 0
[  705.808829][ T9895] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  705.808854][ T9895] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  705.808870][ T9895] usb 4-1: Product: syz
[  705.808880][ T9895] usb 4-1: Manufacturer: syz
[  705.808891][ T9895] usb 4-1: SerialNumber: syz
[  705.833124][ T9895] usb 4-1: config 0 descriptor??
[  705.838925][ T9895] hub 4-1:0.0: bad descriptor, ignoring hub
[  705.838955][ T9895] hub 4-1:0.0: probe with driver hub failed with error -5
[  705.858520][ T9895] usb 4-1: selecting invalid altsetting 0
[  706.019540][T23109] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  706.215135][ T9904] usb 4-1: USB disconnect, device number 8
[  706.339055][T23119] netlink: 300 bytes leftover after parsing attributes in process `syz.8.7267'.
[  706.582128][   T40] audit: type=1326 audit(2000000071.155:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583805][   T40] audit: type=1326 audit(2000000071.155:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583845][   T40] audit: type=1326 audit(2000000071.155:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583874][   T40] audit: type=1326 audit(2000000071.155:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583904][   T40] audit: type=1326 audit(2000000071.155:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583935][   T40] audit: type=1326 audit(2000000071.155:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583964][   T40] audit: type=1326 audit(2000000071.155:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.583993][   T40] audit: type=1326 audit(2000000071.155:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.584021][   T40] audit: type=1326 audit(2000000071.155:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  706.584050][   T40] audit: type=1326 audit(2000000071.155:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23118 comm="syz.8.7267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6f1cdd9 code=0x7ffc0000
[  707.406963][T23177] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7291'.
[  707.508738][T23183] loop8: detected capacity change from 0 to 512
[  707.510428][T23183] EXT4-fs: Ignoring removed nobh option
[  707.511844][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.512647][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.516027][ T4642] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.517790][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.518266][T23183] EXT4-fs (loop8): orphan cleanup on readonly fs
[  707.518624][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.519293][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.522419][ T8304] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.522523][T23183] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7295: EA inode hash validation failed
[  707.563203][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.563517][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.563758][T23183] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  707.563772][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.563984][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.564323][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.566362][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.566698][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.566854][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  707.579511][T23183] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.7295: corrupted inode contents
[  707.579536][T23183] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  707.584682][    C1] EXT4-fs (loop8): initial error at time 2000000072: ext4_do_update_inode:5690: inode 15
[  707.584708][    C1] EXT4-fs (loop8): last error at time 2000000072: ext4_do_update_inode:5690: inode 15
[  707.594624][ T8304] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.609918][T23183] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.7295: mark_inode_dirty error
[  707.609943][T23183] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  707.611187][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.611635][T23183] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.7295: corrupted inode contents
[  707.611657][T23183] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  707.611797][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.615006][T23183] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.7295: mark_inode_dirty error
[  707.615098][T23183] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  707.615251][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.616873][T23183] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.7295: mark inode dirty (error -117)
[  707.616897][T23183] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  707.617232][ T4642] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.617603][T23183] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117)
[  707.617729][T23183] EXT4-fs (loop8): 1 orphan inode deleted
[  707.620352][T23183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  707.731582][ T9730] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.796474][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.796539][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  707.816966][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  707.898248][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7297'.
[  709.111794][   T64] Bluetooth: hci0: unknown advertising packet type: 0x65
[  709.467976][T23283] loop3: detected capacity change from 0 to 1024
[  709.469951][T23283] EXT4-fs: Ignoring removed nomblk_io_submit option
[  709.470408][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.470740][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.471140][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.471456][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.473839][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.488675][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.500411][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.500774][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.501195][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.525430][T23283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.525715][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.525757][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.526114][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.526139][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.526341][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.539992][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.555758][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.555798][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.555815][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.556158][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.556422][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.556446][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.556463][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.556712][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.557100][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.557335][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.557520][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  709.860365][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.861257][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.861472][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.861582][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.861666][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.878250][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.925100][ T9007] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.928183][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  709.930697][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  710.059833][T23314] netlink: 92 bytes leftover after parsing attributes in process `syz.8.7350'.
[  710.094409][T23318] sctp: [Deprecated]: syz.3.7351 (pid 23318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  710.094409][T23318] Use struct sctp_sack_info instead
[  710.242210][T23320] netlink: 'syz.8.7352': attribute type 19 has an invalid length.
[  710.895240][ T5364] usb 9-1: new low-speed USB device number 40 using dummy_hcd
[  711.069692][ T5364] usb 9-1: unable to get BOS descriptor or descriptor too short
[  711.071046][ T5364] usb 9-1: config 194 has an invalid interface number: 4 but max is 0
[  711.071067][ T5364] usb 9-1: config 194 has no interface number 0
[  711.071087][ T5364] usb 9-1: config 194 interface 4 has no altsetting 0
[  711.085671][ T5364] usb 9-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85
[  711.085694][ T5364] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.085707][ T5364] usb 9-1: Product: ⑹
[  711.518128][ T5364] usb 9-1: USB disconnect, device number 40
[  712.561950][T23427] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7402'.
[  712.691868][T23423] bond0: (slave bond_slave_0): Releasing backup interface
[  712.921818][   T32] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  712.923520][   T40] kauditd_printk_skb: 10 callbacks suppressed
[  712.923528][   T40] audit: type=1326 audit(2000000077.086:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.923549][   T40] audit: type=1326 audit(2000000077.086:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.931231][   T40] audit: type=1326 audit(2000000077.095:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.931254][   T40] audit: type=1326 audit(2000000077.095:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.931322][   T40] audit: type=1326 audit(2000000077.095:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.951396][   T40] audit: type=1326 audit(2000000077.114:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f757bd4cdd9 code=0x7ffc0000
[  712.951422][   T40] audit: type=1326 audit(2000000077.114:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f757bd4cb42 code=0x7ffc0000
[  712.951443][   T40] audit: type=1326 audit(2000000077.114:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f757bd0d60e code=0x7ffc0000
[  712.954089][   T40] audit: type=1326 audit(2000000077.114:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f757bd4cc07 code=0x7ffc0000
[  712.954719][   T40] audit: type=1326 audit(2000000077.114:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23446 comm="syz.3.7412" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f757bd0d60e code=0x7ffc0000
[  712.955241][T23448] loop3: detected capacity change from 0 to 512
[  712.956620][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.956932][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.957124][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.958439][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.958568][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  712.968830][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.970394][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  712.983516][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.983564][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  712.986893][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.002398][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.022219][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.022504][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.022746][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.022903][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.023112][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.023302][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.023513][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.023689][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.048261][T23448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.048331][T23448] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  713.111439][   T32] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  713.111461][   T32] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  713.129430][   T32] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  713.129454][   T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.129469][   T32] usb 9-1: Product: syz
[  713.129478][   T32] usb 9-1: Manufacturer: syz
[  713.129489][   T32] usb 9-1: SerialNumber: syz
[  713.239292][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.291331][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.377893][   T32] usb 9-1: Unsupported UAC3 BADD profile
[  713.378945][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.379479][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.379649][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.379680][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.390078][T20630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.419760][   T32] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  713.427178][   T32] usb 9-1: USB disconnect, device number 41
[  713.436357][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  713.508244][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.556948][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.576598][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.578440][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.583251][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  713.845253][T23468] loop3: detected capacity change from 0 to 40427
[  713.848282][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.848381][T23468] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  713.848391][T23468] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  713.855841][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.856202][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.856417][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.856565][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.856636][T23468] F2FS-fs (loop3): invalid crc value
[  713.862107][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.862530][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.862880][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.865949][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.904877][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.907866][T23468] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  713.917227][ T9007] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  713.925221][  T779] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  713.925419][T23468] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  713.925438][T23468] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  714.042105][ T9007] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.043231][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.043501][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.043665][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.043832][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044031][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044189][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044329][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044499][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044663][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.044918][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.045121][   T41] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.049360][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.049727][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.050270][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.050906][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.051605][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.051941][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.052436][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.052913][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.053669][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.054416][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.054925][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.055310][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.055858][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.056354][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.056626][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.057253][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.057464][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.057721][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.058240][T22292] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.060684][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  714.087791][T23481] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7425'.
[  714.087875][T23481] netlink: 212 bytes leftover after parsing attributes in process `syz.8.7425'.
[  714.814384][ T3981] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  714.834183][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  714.959893][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.050132][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.155004][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.208548][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.232639][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.238074][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.333264][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.465632][ T3981] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  715.631047][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  716.132165][T23534] loop3: detected capacity change from 0 to 32768
[  716.133527][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.133642][T23534] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7451 (23534)
[  716.148292][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.150525][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.161729][T23534] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  716.161754][T23534] BTRFS info (device loop3): using crc32c checksum algorithm
[  716.185765][T16032] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.186459][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.186657][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.186843][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.190330][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.190575][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.190870][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.191111][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.191313][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.207536][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.229759][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.230042][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.230307][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.230862][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.231411][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.231567][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.231695][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.231846][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.235899][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.236211][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.237144][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.276248][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.276508][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.276789][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.277020][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.277260][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.277445][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.277626][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.279316][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.279348][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.279370][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.279402][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.280185][ T8304] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.327741][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.569452][ T1393] ieee802154 phy0 wpan0: encryption failed: -22
[  716.569504][ T1393] ieee802154 phy1 wpan1: encryption failed: -22
[  716.597949][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.610169][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.610400][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.610564][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.610741][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.610918][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.611300][  T779] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.637636][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.637864][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.638232][T23534] BTRFS info (device loop3): enabling ssd optimizations
[  716.638244][T23534] BTRFS info (device loop3): turning on async discard
[  716.638250][T23534] BTRFS info (device loop3): enabling free space tree
[  716.638403][  T785] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  716.942024][T20630] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  717.759926][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  720.269167][T23663] loop8: detected capacity change from 0 to 256
[  720.274560][T23663] exfat: Deprecated parameter 'utf8'
[  720.275127][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.275352][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.275582][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.275759][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.275956][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.276129][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.276304][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.276474][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.276515][T23662] loop3: detected capacity change from 0 to 128
[  720.276801][ T1124] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.285670][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.285843][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.291501][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.291635][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.291651][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.291831][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.291972][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292145][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292251][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292266][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292369][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292450][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292582][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.292713][ T4642] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  720.295846][ T4642] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  720.316003][T23662] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  720.316279][  T785] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  720.316464][T23662] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  720.402616][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.402814][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.402978][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.403443][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.403719][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404057][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404222][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404325][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404424][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404524][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404621][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404718][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.404924][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.405147][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.405255][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.405353][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.405448][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.405491][T23663] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf174d08e, utbl_chksum : 0xe619d30d)
[  720.405785][T16032] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  720.595264][T23671] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 18: comm syz.3.7504: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  720.683880][T22292] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  720.978763][T23671] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem
[  720.997497][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  721.160724][ T8304] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  721.163910][ T8304] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  721.178887][  T785] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  721.183833][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  721.254276][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  721.254318][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  721.254341][ T8304] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  721.256037][T20630] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  721.326383][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  721.369162][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  721.918119][ T9955] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  721.947196][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7538'.
[  722.089446][ T9955] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  722.089471][ T9955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.112587][ T9955] usb 4-1: config 0 descriptor??
[  722.140405][ T9955] cp210x 4-1:0.0: cp210x converter detected
[  722.394780][ T9955] usb 4-1: cp210x converter now attached to ttyUSB0
[  722.575984][T21192] usb 4-1: USB disconnect, device number 9
[  722.620574][T21192] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  722.621086][T21192] cp210x 4-1:0.0: device disconnected
[  722.890042][ T5364] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  723.073732][ T5364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.073757][ T5364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.073772][ T5364] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  723.073801][ T5364] usb 9-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  723.073810][ T5364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.093055][ T5364] usb 9-1: config 0 descriptor??
[  723.137054][T23796] loop3: detected capacity change from 0 to 128
[  723.137995][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.138163][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.139281][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.139378][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.139519][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.158713][T23796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  723.158767][T23796] System zones: 1-3, 19-19, 35-36
[  723.160172][T23796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  723.160302][ T3819] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.160876][T23796] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  723.163088][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.192218][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.229567][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.250307][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  723.250430][   T40] audit: type=1800 audit(2000000086.730:198): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7568" name="file1" dev="loop3" ino=12 res=0 errno=0
[  723.287398][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.288195][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.288726][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.288754][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.288770][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.289086][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.289111][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.289127][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.290655][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.290684][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.290700][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.291513][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.291879][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  723.482294][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.561165][ T5364] playstation 0003:054C:09CC.000F: item fetching failed at offset 2/9
[  723.561798][ T5364] playstation 0003:054C:09CC.000F: Parse failed
[  723.561846][ T5364] playstation 0003:054C:09CC.000F: probe with driver playstation failed with error -22
[  723.604507][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.604788][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.619145][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.695837][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.696545][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.696887][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.706334][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.706421][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.706682][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.706796][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.706960][   T41] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.755624][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.755675][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.755689][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  723.759019][T20630] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  723.819118][T21192] usb 9-1: USB disconnect, device number 42
[  723.822515][ T3981] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  724.006817][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  724.439688][ T5364] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  724.642317][ T5364] usb 4-1: Using ep0 maxpacket: 8
[  724.644980][ T5364] usb 4-1: unable to get BOS descriptor or descriptor too short
[  724.649950][ T5364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.649969][ T5364] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  724.650012][ T5364] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  724.679844][ T5364] usb 4-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  724.679864][ T5364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.679876][ T5364] usb 4-1: Product: syz
[  724.679885][ T5364] usb 4-1: Manufacturer: syz
[  724.679921][ T5364] usb 4-1: SerialNumber: syz
[  724.957148][ T5364] usb 4-1: unit 1 not found!
[  725.083954][ T5364] usb 4-1: USB disconnect, device number 10
[  725.159503][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.177073][T21192] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  725.343264][T21192] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  725.343289][T21192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.343304][T21192] usb 9-1: Product: syz
[  725.343313][T21192] usb 9-1: Manufacturer: syz
[  725.343323][T21192] usb 9-1: SerialNumber: syz
[  725.698776][T21192] rtl8150 9-1:1.0: couldn't reset the device
[  725.699376][T21192] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5
[  725.709265][T21192] usb 9-1: USB disconnect, device number 43
[  727.251005][T21192] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  727.468196][T21192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.468216][T21192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  727.472080][T21192] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40
[  727.472101][T21192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.472114][T21192] usb 4-1: Product: syz
[  727.472123][T21192] usb 4-1: Manufacturer: syz
[  727.472133][T21192] usb 4-1: SerialNumber: syz
[  727.516020][T21192] usb 4-1: cannot find UAC_HEADER
[  727.641321][T21192] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  727.692890][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  727.774004][ T9904] usb 4-1: USB disconnect, device number 11
[  728.519653][T24021] loop3: detected capacity change from 0 to 24
[  728.526525][T24021] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  728.576959][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.580083][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.580451][T24021] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  728.581368][ T3819] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.689843][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  728.964400][T24037] loop3: detected capacity change from 0 to 65
[  728.990370][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.991360][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.991574][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.995699][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.995947][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  728.996156][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.101876][T24037] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  729.104401][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.106229][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.106423][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.106568][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.106717][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.106828][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.107004][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.107114][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.107420][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.126289][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.126465][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.126624][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.126750][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.126901][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.127041][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.127183][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.127649][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.129051][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.129239][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.129396][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.129555][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.129982][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.130152][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.139112][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.296307][ T1124] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  729.314021][T20630] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  729.500030][T24054] loop3: detected capacity change from 0 to 512
[  729.502795][ T4711] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.515088][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.515447][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.515650][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.517754][T10013] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.518059][ T3981] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.518259][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.518439][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.518660][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.519817][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.520283][ T1124] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  729.527638][ T9976] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  729.663355][T24061] loop8: detected capacity change from 0 to 512
[  729.665314][T24061] EXT4-fs: Ignoring removed bh option
[  729.666536][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.669601][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.670434][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.670539][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.670715][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.670836][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671055][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671176][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671289][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671403][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671535][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.671647][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.696692][T24061] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  729.696829][ T3981] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  729.716970][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.717123][ T3981] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  729.717351][T24061] EXT4-fs (loop8): 1 truncate cleaned up
[  729.718646][T24061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  729.736047][   T40] audit: type=1800 audit(2000000092.819:199): pid=24061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.7698" name="file1" dev="loop8" ino=15 res=0 errno=0
[  729.750695][T24061] 
[  729.750706][T24061] ======================================================
[  729.750713][T24061] WARNING: possible circular locking dependency detected
[  729.750722][T24061] syzkaller #0 Tainted: G             L     
[  729.750731][T24061] ------------------------------------------------------
[  729.750737][T24061] syz.8.7698/24061 is trying to acquire lock:
[  729.750747][T24061] ffff88811687a428 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[  729.750791][T24061] 
[  729.750791][T24061] but task is already holding lock:
[  729.750797][T24061] ffff888111974cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  729.750832][T24061] 
[  729.750832][T24061] which lock already depends on the new lock.
[  729.750832][T24061] 
[  729.750837][T24061] 
[  729.750837][T24061] the existing dependency chain (in reverse order) is:
[  729.750868][T24061] 
[  729.750868][T24061] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  729.750890][T24061]        percpu_down_read_internal+0x48/0x1d0
[  729.750908][T24061]        ext4_writepages+0x205/0x3b0
[  729.750924][T24061]        do_writepages+0x32e/0x550
[  729.750940][T24061]        __writeback_single_inode+0x133/0x10e0
[  729.750977][T24061]        writeback_single_inode+0x488/0xd60
[  729.750990][T24061]        write_inode_now+0x1c2/0x290
[  729.751003][T24061]        iput+0x8c1/0xe80
[  729.751018][T24061]        ext4_xattr_block_set+0x2359/0x2ad0
[  729.751034][T24061]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  729.751051][T24061]        __ext4_expand_extra_isize+0x30d/0x400
[  729.751068][T24061]        __ext4_mark_inode_dirty+0x45c/0x710
[  729.751086][T24061]        ext4_evict_inode+0x986/0x10e0
[  729.751103][T24061]        evict+0x61e/0xb10
[  729.751115][T24061]        ext4_orphan_cleanup+0xc38/0x1470
[  729.751154][T24061]        ext4_fill_super+0x59bb/0x62d0
[  729.751172][T24061]        get_tree_bdev_flags+0x431/0x4f0
[  729.751193][T24061]        vfs_get_tree+0x92/0x2a0
[  729.751212][T24061]        do_new_mount+0x341/0xd30
[  729.751227][T24061]        __se_sys_mount+0x31d/0x420
[  729.751243][T24061]        do_syscall_64+0x15f/0xf80
[  729.751260][T24061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.751273][T24061] 
[  729.751273][T24061] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[  729.751293][T24061]        __lock_acquire+0x15a5/0x2d10
[  729.751307][T24061]        lock_acquire+0x106/0x350
[  729.751320][T24061]        down_write+0x3a/0x50
[  729.751336][T24061]        ext4_destroy_inline_data+0x28/0xe0
[  729.751354][T24061]        ext4_do_writepages+0x521/0x4670
[  729.751367][T24061]        ext4_writepages+0x241/0x3b0
[  729.751384][T24061]        do_writepages+0x32e/0x550
[  729.751399][T24061]        file_write_and_wait_range+0x374/0x440
[  729.751418][T24061]        mmb_fsync_noflush+0x79/0x1d0
[  729.751438][T24061]        ext4_sync_file+0x440/0xd60
[  729.751452][T24061]        ext4_buffered_write_iter+0x2ce/0x3a0
[  729.751465][T24061]        ext4_file_write_iter+0x299/0x1c10
[  729.751477][T24061]        vfs_write+0x629/0xba0
[  729.751496][T24061]        __x64_sys_pwrite64+0x19c/0x230
[  729.751523][T24061]        do_syscall_64+0x15f/0xf80
[  729.751538][T24061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.751551][T24061] 
[  729.751551][T24061] other info that might help us debug this:
[  729.751551][T24061] 
[  729.751556][T24061]  Possible unsafe locking scenario:
[  729.751556][T24061] 
[  729.751561][T24061]        CPU0                    CPU1
[  729.751566][T24061]        ----                    ----
[  729.751570][T24061]   rlock(&sbi->s_writepages_rwsem);
[  729.751579][T24061]                                lock(&ei->xattr_sem);
[  729.751590][T24061]                                lock(&sbi->s_writepages_rwsem);
[  729.751602][T24061]   lock(&ei->xattr_sem);
[  729.751612][T24061] 
[  729.751612][T24061]  *** DEADLOCK ***
[  729.751612][T24061] 
[  729.751617][T24061] 2 locks held by syz.8.7698/24061:
[  729.751627][T24061]  #0: ffff88811369e480 (sb_writers#4){++++}-{0:0}, at: vfs_write+0x22d/0xba0
[  729.751671][T24061]  #1: ffff888111974cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  729.751707][T24061] 
[  729.751707][T24061] stack backtrace:
[  729.751718][T24061] CPU: 0 UID: 0 PID: 24061 Comm: syz.8.7698 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  729.751737][T24061] Tainted: [L]=SOFTLOCKUP
[  729.751744][T24061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  729.751754][T24061] Call Trace:
[  729.751760][T24061]  <TASK>
[  729.751766][T24061]  dump_stack_lvl+0xe8/0x150
[  729.751784][T24061]  print_circular_bug+0x2e1/0x300
[  729.751804][T24061]  check_noncircular+0x12e/0x150
[  729.751825][T24061]  __lock_acquire+0x15a5/0x2d10
[  729.751868][T24061]  ? unwind_next_frame+0xa6/0x2550
[  729.751891][T24061]  ? is_bpf_text_address+0x26/0x2b0
[  729.751909][T24061]  ? ext4_destroy_inline_data+0x28/0xe0
[  729.751929][T24061]  lock_acquire+0x106/0x350
[  729.751943][T24061]  ? ext4_destroy_inline_data+0x28/0xe0
[  729.751966][T24061]  down_write+0x3a/0x50
[  729.751982][T24061]  ? ext4_destroy_inline_data+0x28/0xe0
[  729.752001][T24061]  ext4_destroy_inline_data+0x28/0xe0
[  729.752020][T24061]  ext4_do_writepages+0x521/0x4670
[  729.752037][T24061]  ? stack_trace_save+0xa9/0x100
[  729.752058][T24061]  ? __pfx_stack_trace_save+0x10/0x10
[  729.752079][T24061]  ? stack_depot_save_flags+0x33/0x810
[  729.752097][T24061]  ? kasan_save_track+0x4f/0x80
[  729.752114][T24061]  ? kasan_save_track+0x3e/0x80
[  729.752132][T24061]  ? __kasan_slab_alloc+0x6c/0x80
[  729.752151][T24061]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  729.752171][T24061]  ? __es_insert_extent+0x707/0x1790
[  729.752189][T24061]  ? ext4_es_insert_delayed_extent+0x422/0xed0
[  729.752211][T24061]  ? ext4_da_write_begin+0x86a/0xd60
[  729.752231][T24061]  ? look_up_lock_class+0x57/0x110
[  729.752247][T24061]  ? register_lock_class+0x31/0x2e0
[  729.752261][T24061]  ? __pfx_ext4_do_writepages+0x10/0x10
[  729.752274][T24061]  ? __lock_acquire+0x6b5/0x2d10
[  729.752290][T24061]  ? __lock_acquire+0x6b5/0x2d10
[  729.752305][T24061]  ? __lock_acquire+0x6b5/0x2d10
[  729.752322][T24061]  ? ext4_writepages+0x205/0x3b0
[  729.752339][T24061]  ? ext4_writepages+0x205/0x3b0
[  729.752361][T24061]  ext4_writepages+0x241/0x3b0
[  729.752377][T24061]  ? __pfx_ext4_writepages+0x10/0x10
[  729.752394][T24061]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  729.752417][T24061]  ? rt_spin_unlock+0x14f/0x200
[  729.752437][T24061]  ? rt_spin_unlock+0x160/0x200
[  729.752453][T24061]  ? __pfx_ext4_writepages+0x10/0x10
[  729.752469][T24061]  do_writepages+0x32e/0x550
[  729.752486][T24061]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  729.752516][T24061]  ? rt_spin_unlock+0x14f/0x200
[  729.752539][T24061]  file_write_and_wait_range+0x374/0x440
[  729.752561][T24061]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  729.752592][T24061]  ? filemap_get_entry+0x378/0x3f0
[  729.752616][T24061]  mmb_fsync_noflush+0x79/0x1d0
[  729.752641][T24061]  ext4_sync_file+0x440/0xd60
[  729.752659][T24061]  ? __pfx_ext4_sync_file+0x10/0x10
[  729.752684][T24061]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  729.752704][T24061]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  729.752723][T24061]  ext4_buffered_write_iter+0x2ce/0x3a0
[  729.752739][T24061]  ext4_file_write_iter+0x299/0x1c10
[  729.752756][T24061]  ? vfs_write+0x22d/0xba0
[  729.752776][T24061]  ? vfs_write+0x22d/0xba0
[  729.752796][T24061]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  729.752813][T24061]  vfs_write+0x629/0xba0
[  729.752835][T24061]  ? __pfx_vfs_write+0x10/0x10
[  729.752885][T24061]  ? __fget_files+0x2a/0x420
[  729.752905][T24061]  __x64_sys_pwrite64+0x19c/0x230
[  729.752925][T24061]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  729.752947][T24061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.752961][T24061]  do_syscall_64+0x15f/0xf80
[  729.752978][T24061]  ? trace_irq_disable+0x3b/0x140
[  729.753000][T24061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.753013][T24061] RIP: 0033:0x7fe2d6f1cdd9
[  729.753028][T24061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.753041][T24061] RSP: 002b:00007fe2d516e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  729.753056][T24061] RAX: ffffffffffffffda RBX: 00007fe2d7195fa0 RCX: 00007fe2d6f1cdd9
[  729.753067][T24061] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005
[  729.753076][T24061] RBP: 00007fe2d6fb2d69 R08: 0000000000000000 R09: 0000000000000000
[  729.753086][T24061] R10: 0000000008080c61 R11: 0000000000000246 R12: 0000000000000000
[  729.753095][T24061] R13: 00007fe2d7196038 R14: 00007fe2d7195fa0 R15: 00007fffec67ac68
[  729.753110][T24061]  </TASK>
[  729.766787][T24061] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7698: bg 0: block 465: padding at end of block bitmap is not set
[  729.767094][ T3819] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  729.768007][T24061] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28
[  729.768029][T24061] EXT4-fs (loop8): This should not happen!! Data will be lost
[  729.768029][T24061] 
[  729.768038][T24061] EXT4-fs (loop8): Total free blocks count 0
[  729.768047][T24061] EXT4-fs (loop8): Free/Dirty block details
[  729.768057][T24061] EXT4-fs (loop8): free_blocks=0
[  729.768065][T24061] EXT4-fs (loop8): dirty_blocks=2
[  729.768073][T24061] EXT4-fs (loop8): Block reservation details
[  729.768078][T24061] EXT4-fs (loop8): i_reserved_data_blocks=2
[  729.773719][ T9904] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  729.818018][ T3819] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  729.818295][T10013] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  729.818828][ T9730] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  729.821922][ T3981] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  729.825944][ T9730] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  729.957148][ T9904] usb 4-1: unable to get BOS descriptor or descriptor too short
[  729.958576][ T9904] usb 4-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[  729.958587][ T9904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  730.003010][ T9904] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  730.003025][ T9904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.003033][ T9904] usb 4-1: Product: syz
[  730.003039][ T9904] usb 4-1: Manufacturer: syz
[  730.003045][ T9904] usb 4-1: SerialNumber: syz
[  730.165632][ T9904] usb 4-1: selecting invalid altsetting 1
[  730.165955][ T9904] usb 4-1: unit 6 not found!
[  730.187547][ T9904] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  730.207867][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  730.389674][ T9904] usb 4-1: USB disconnect, device number 12
