last executing test programs:

5m23.94565419s ago: executing program 0 (id=1105):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000440)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x110, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xc0, 0x100, @void}}}}}}}, 0x0)

5m23.831554489s ago: executing program 0 (id=1108):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4021e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000)

5m23.372108983s ago: executing program 0 (id=1111):
syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fff7fff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x200000, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x0, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x5d, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xf7, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x202, 0x1c, 0x3, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0x7, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1b, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x2c020400)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m23.216903224s ago: executing program 0 (id=1113):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
mount$bind(&(0x7f0000001080)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

5m23.015759915s ago: executing program 0 (id=1116):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50)
r2 = dup(0xffffffffffffffff)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340))
dup(r4)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, r2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m21.791630181s ago: executing program 0 (id=1129):
io_uring_setup(0x7a27, &(0x7f0000001fc0)={0x0, 0x2f2, 0x4000, 0x0, 0x3d3})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r0 = socket(0x2, 0x3, 0xff)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0405626, &(0x7f0000000000)={0x2, 0x1, 0x3})
r2 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6)
r3 = dup(r2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3)
sendto$inet6(r6, 0x0, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
sendto$unix(r5, 0x0, 0x0, 0x4004804, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

5m21.694813433s ago: executing program 32 (id=1129):
io_uring_setup(0x7a27, &(0x7f0000001fc0)={0x0, 0x2f2, 0x4000, 0x0, 0x3d3})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r0 = socket(0x2, 0x3, 0xff)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0405626, &(0x7f0000000000)={0x2, 0x1, 0x3})
r2 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6)
r3 = dup(r2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3)
sendto$inet6(r6, 0x0, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
sendto$unix(r5, 0x0, 0x0, 0x4004804, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m20.021127257s ago: executing program 2 (id=1647):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

4m20.020896666s ago: executing program 2 (id=1648):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x2d0, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x2a0, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendto$inet6(r0, &(0x7f0000000200)="020409dbec075d37ad77", 0xa, 0x24040001, 0x0, 0x0)

4m19.818329656s ago: executing program 2 (id=1649):
unshare(0x2a060400)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0)
mq_getsetattr(r0, &(0x7f0000001080)={0x0, 0x20000000006, 0x8001, 0x55e}, 0x0)

4m19.684530666s ago: executing program 2 (id=1650):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@resuid}, {@errors_remount}, {@bh}]}, 0x1, 0x558, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

4m19.621729874s ago: executing program 2 (id=1651):
r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0x3a4d, 0x100, 0x43, 0x10000000})
mount$overlay(0x0, 0x0, 0x0, 0x48000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1e, 0xce, &(0x7f0000000680)="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"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x3}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m17.751079503s ago: executing program 2 (id=1660):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x700, 0x9f, 0x4}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m17.673815334s ago: executing program 33 (id=1660):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x700, 0x9f, 0x4}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.437818377s ago: executing program 1 (id=3833):
setresuid(0xee00, 0xee00, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd})

2.437710608s ago: executing program 1 (id=3834):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fchmod(r0, 0x40)

2.3794721s ago: executing program 1 (id=3835):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200fffe500004802800018007000100637400001c000280080001400000000208000240000000160500030000000000240001800b0001007470726f7879000014000280080002400000000e0800014000000002"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

2.379180023s ago: executing program 1 (id=3836):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)

2.309629968s ago: executing program 1 (id=3837):
ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010202010902"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

1.680274895s ago: executing program 3 (id=3843):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7a, 0x27f})

1.588383441s ago: executing program 4 (id=3844):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40)

1.466980161s ago: executing program 4 (id=3845):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80d}], 0x1c)

1.466801104s ago: executing program 3 (id=3846):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x22342, 0x0)
write$binfmt_script(r0, 0x0, 0x60)

1.46670803s ago: executing program 3 (id=3847):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5)
syz_clone3(&(0x7f0000000080)={0x0, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$sndctrl(0x0, 0x0, 0xc8080)
read(r0, 0x0, 0x0)

1.388928341s ago: executing program 4 (id=3848):
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
tkill(r0, 0x12)

1.388659119s ago: executing program 3 (id=3849):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

1.297501582s ago: executing program 4 (id=3850):
r0 = userfaultfd(0x80801)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
close_range(r0, 0xffffffffffffffff, 0x0)

1.226516816s ago: executing program 4 (id=3851):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1)

1.2263804s ago: executing program 3 (id=3852):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})

1.169058479s ago: executing program 4 (id=3853):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x56, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0xed, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

113.572µs ago: executing program 1 (id=3854):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f00000000c0)=0xf5, 0x4)

0s ago: executing program 3 (id=3855):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

kernel console output (not intermixed with test programs):

9] Bluetooth: hci1: unexpected event for opcode 0x1005
[  491.567590][T14328] loop1: detected capacity change from 0 to 128
[  491.568874][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.569055][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.569124][T14328] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  491.569547][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.569695][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.569920][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.605212][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.611465][   T41] kauditd_printk_skb: 4 callbacks suppressed
[  491.611474][   T41] audit: type=1800 audit(1778677702.461:109): pid=14328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3423" name="bus" dev="loop1" ino=1048694 res=0 errno=0
[  491.655163][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655190][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655200][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655209][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655217][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655226][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655545][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655664][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655819][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655831][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655840][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655848][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655857][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.655866][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.698799][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.702754][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.702886][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.703013][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.745020][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.745226][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.745516][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.815747][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.819642][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.820340][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.820514][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.821199][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.821315][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.821894][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.822124][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.822415][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.876497][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.876742][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.877184][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.877423][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.877591][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.877847][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.878011][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.878329][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.913527][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.913877][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.920659][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.920958][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.921172][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.921365][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.921746][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.922039][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.922201][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  491.922487][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.922663][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  491.922878][T14329] bio_check_eod: 176 callbacks suppressed
[  491.922886][T14329] syz.1.3423: attempt to access beyond end of device
[  491.922886][T14329] loop1: rw=0, sector=124, nr_sectors = 8 limit=128
[  491.924702][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  492.014864][ T9021] kworker/u9:12: attempt to access beyond end of device
[  492.014864][ T9021] loop1: rw=1, sector=132, nr_sectors = 24 limit=128
[  492.014977][ T9021] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  492.015299][ T9021] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  492.030311][ T9021] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  492.032733][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  492.123667][T14335] netlink: 'syz.3.3426': attribute type 1 has an invalid length.
[  492.123677][T14335] netlink: 'syz.3.3426': attribute type 2 has an invalid length.
[  492.123683][T14335] netlink: 'syz.3.3426': attribute type 8 has an invalid length.
[  492.480169][ T5578] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  492.533250][T14342] netlink: 'syz.3.3429': attribute type 13 has an invalid length.
[  492.533297][T14342] netlink: 'syz.3.3429': attribute type 27 has an invalid length.
[  492.638721][ T5578] usb 2-1: Using ep0 maxpacket: 32
[  492.640786][ T5578] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  492.640804][ T5578] usb 2-1: config 0 has no interface number 0
[  492.643111][ T5578] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  492.643131][ T5578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.643145][ T5578] usb 2-1: Product: syz
[  492.643155][ T5578] usb 2-1: Manufacturer: syz
[  492.643165][ T5578] usb 2-1: SerialNumber: syz
[  492.703494][ T5578] usb 2-1: config 0 descriptor??
[  492.794131][   T10] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  492.974236][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  493.001837][   T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  493.001969][   T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.001986][   T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  493.002006][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  493.002029][   T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  493.002044][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.059241][   T10] usb 5-1: config 0 descriptor??
[  493.485996][   T10] elecom 0003:056E:00FD.000F: item 0 2 0 9 parsing failed
[  493.486536][   T10] elecom 0003:056E:00FD.000F: probe with driver elecom failed with error -22
[  493.961609][   T10] usb 5-1: USB disconnect, device number 28
[  494.018121][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  494.216985][ T5578] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  494.217009][ T5578] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  494.217455][ T5578] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  494.217663][ T5578] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  494.259211][ T5578] usb 2-1: USB disconnect, device number 44
[  494.706546][T14385] loop4: detected capacity change from 0 to 128
[  494.711465][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716440][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716595][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716685][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716774][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716857][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716894][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.716930][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.718983][ T7196] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  494.785869][T14387] loop4: detected capacity change from 0 to 256
[  494.786835][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.787280][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.787544][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.787684][ T9027] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  494.790360][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  494.868394][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.868755][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.868899][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.869064][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.869852][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.870079][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.870333][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.870531][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.870819][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  494.886205][ T1123] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  494.889687][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  495.054308][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  496.085441][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  496.096590][   T39] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  496.252716][   T39] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[  496.252740][   T39] usb 5-1: config 0 has no interface number 1
[  496.252783][   T39] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  496.252808][   T39] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  496.257440][   T39] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  496.257464][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  496.257478][   T39] usb 5-1: SerialNumber: syz
[  496.266736][   T39] usb 5-1: config 0 descriptor??
[  496.478754][   T39] uvcvideo 5-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  496.478780][   T39] uvcvideo 5-1:0.199: No valid video chain found.
[  496.502611][   T39] usb 5-1: USB disconnect, device number 29
[  497.140568][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  497.561676][T14442] loop4: detected capacity change from 0 to 8
[  497.642006][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  497.797238][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  497.827516][T14442] SQUASHFS error: xz decompression failed, data probably corrupt
[  497.827675][T14442] SQUASHFS error: Failed to read block 0x108: -5
[  497.827746][T14442] SQUASHFS error: Unable to read metadata cache entry [106]
[  497.827814][T14442] SQUASHFS error: Unable to read inode 0x11f
[  497.877341][T14442] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  498.165729][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  498.475651][  T810] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  498.724897][  T810] usb 5-1: Using ep0 maxpacket: 8
[  498.781530][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'.
[  499.022983][  T810] usb 5-1: unable to get BOS descriptor or descriptor too short
[  499.031304][  T810] usb 5-1: config 117 has an invalid interface number: 163 but max is 0
[  499.031325][  T810] usb 5-1: config 117 has no interface number 0
[  499.031347][  T810] usb 5-1: config 117 interface 163 has no altsetting 0
[  499.034554][  T810] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  499.034576][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.034590][  T810] usb 5-1: Product: syz
[  499.034601][  T810] usb 5-1: Manufacturer: syz
[  499.034612][  T810] usb 5-1: SerialNumber: syz
[  499.205977][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  499.354465][ T5681] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  499.611672][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3486'.
[  500.078980][ T5578] usb 5-1: USB disconnect, device number 30
[  500.106847][ T5578] f81534a_ctrl 5-1:117.163: failed to enable ports: -19
[  500.244684][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  500.915992][T14489] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3497'.
[  501.030784][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3499'.
[  501.284287][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  501.757468][T14504] loop1: detected capacity change from 0 to 512
[  501.761322][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.761516][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.773591][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.773627][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.783803][   T35] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.789688][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.789886][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.790001][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.790106][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.790246][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.790476][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.790654][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.832337][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.833118][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.842698][T14504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  501.884384][ T3206] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.884855][ T3206] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.901584][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.911413][ T3206] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.926293][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  501.929993][T14504] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  502.007489][ T9884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.009491][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  502.056449][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  502.060328][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  502.128065][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'.
[  502.335365][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  502.384442][ T5681] usb 2-1: device descriptor read/64, error -71
[  502.428403][T14528] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.3514'.
[  502.624223][ T5681] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  502.785239][ T5681] usb 2-1: Using ep0 maxpacket: 32
[  502.787593][ T5681] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  502.787613][ T5681] usb 2-1: config 0 has no interface number 0
[  502.790011][ T5681] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  502.790024][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.790033][ T5681] usb 2-1: Product: syz
[  502.790039][ T5681] usb 2-1: Manufacturer: syz
[  502.790045][ T5681] usb 2-1: SerialNumber: syz
[  502.823583][ T5681] usb 2-1: config 0 descriptor??
[  502.838485][ T5681] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  502.991612][T14548] loop4: detected capacity change from 0 to 4096
[  502.993199][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  502.993317][T14548] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  502.993641][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.001306][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.001817][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.002107][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.002479][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.002780][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.003233][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.003708][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.005934][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.008965][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.009256][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.009627][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.009945][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.010763][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.010965][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.011191][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.011520][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.011710][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.011892][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.012144][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.012380][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.012616][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.012853][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.013126][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.013353][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.013385][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.013767][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.016519][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.016757][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.017018][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.017241][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.017583][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.017615][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.017833][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.018151][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.018413][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.018691][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.018918][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.019106][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.019345][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.019554][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.019910][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.019943][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.020234][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.020384][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.020609][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.020816][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.022669][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.022928][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.023116][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.023347][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.023534][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.028197][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.028459][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.028661][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.028955][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.029150][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.030470][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.030721][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.031126][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.031363][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.031809][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.034920][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.035238][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.036288][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.036497][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.036679][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.036858][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.037042][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.037260][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.037789][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.039383][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.040371][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.040888][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.041026][T14548] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  503.041226][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  503.042326][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.042683][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.042769][T14548] ntfs3(loop4): ino=1a, mi_enum_attr
[  503.043077][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.364608][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  503.445131][ T5681] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  503.475700][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  503.479983][ T5681] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  503.493362][ T5681] usb 2-1: USB disconnect, device number 46
[  503.519542][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.519907][ T5681] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  503.520092][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  503.533042][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  503.561825][ T5681] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  503.563864][ T5681] quatech2 2-1:0.51: device disconnected
[  503.822435][T14564] loop4: detected capacity change from 0 to 256
[  503.849254][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.851903][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.851926][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.851994][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.852009][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.852021][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.852033][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.852045][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.852569][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.854528][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.856275][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.860145][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.869634][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.874911][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.884893][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.887988][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.891144][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.894355][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.894768][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.894968][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.895224][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.895455][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.895961][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.896225][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.896451][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.896680][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.896842][T14564] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256)
[  503.897610][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  503.986746][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  504.405511][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  504.446078][T14584] loop1: detected capacity change from 0 to 512
[  504.528905][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.529419][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.530352][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.530460][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.532813][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.532849][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.533309][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.533509][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.533694][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.533859][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.534772][T14584] FAT-fs (loop1): Directory bread(block 199916) failed
[  504.534790][T14584] FAT-fs (loop1): Directory bread(block 199917) failed
[  504.534803][T14584] FAT-fs (loop1): Directory bread(block 199918) failed
[  504.534815][T14584] FAT-fs (loop1): Directory bread(block 199919) failed
[  504.534827][T14584] FAT-fs (loop1): Directory bread(block 199920) failed
[  504.534839][T14584] FAT-fs (loop1): Directory bread(block 199921) failed
[  504.534852][T14584] FAT-fs (loop1): Directory bread(block 199922) failed
[  504.534864][T14584] FAT-fs (loop1): Directory bread(block 199923) failed
[  504.538491][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  504.538712][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.539066][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.539307][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.539691][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.542020][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.765013][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.793517][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  504.957440][T14584] FAT-fs (loop1): FAT read failed (blocknr 128)
[  505.056225][ T9021] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  505.070884][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  505.444985][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  505.546171][T14614] loop4: detected capacity change from 0 to 32768
[  505.556809][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557004][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557131][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557276][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557386][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557484][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.557882][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.558059][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.558275][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.558461][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.558665][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.558990][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.559218][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.559391][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.559586][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.559730][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.559884][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.568159][ T3206] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.574626][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.574772][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.575064][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579016][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579152][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579352][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579531][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579672][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.579806][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.580131][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.580268][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.580369][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.580537][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.580664][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.580838][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.581009][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.594432][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.594852][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.595270][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.595967][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.596598][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.596879][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.597101][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.597483][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.597713][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.598076][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.598732][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.599945][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.771091][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.847649][ T1123] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  505.863251][T14617] syz.4.3554: attempt to access beyond end of device
[  505.863251][T14617] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  505.863270][T14617] metapage_write_end_io: I/O error
[  505.883659][T14617] ERROR: (device loop4): release_metapage: metapage_write_one() failed
[  505.883659][T14617] 
[  505.910898][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.911041][T14617] ERROR: (device loop4): remounting filesystem as read-only
[  505.922320][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.959025][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  505.959167][T14617] blkno = 8ed2c, nblocks = 1
[  505.959177][T14617] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  505.959177][T14617] 
[  506.113291][T14627] loop1: detected capacity change from 0 to 256
[  506.123362][T14627] exfat: Deprecated parameter 'utf8'
[  506.123373][T14627] exfat: Deprecated parameter 'utf8'
[  506.123419][T14627] exfat: Deprecated parameter 'utf8'
[  506.123810][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.132877][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133010][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133105][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133262][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133383][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133545][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.133686][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.154527][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.154659][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.154755][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.154848][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.155165][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.155440][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.155739][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.155927][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.156031][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.156101][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.156201][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.158642][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.158761][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.160509][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.165581][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.182483][ T9028] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.186791][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.209318][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.224629][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.224742][T14627] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  506.225285][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.328900][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  506.422992][ T9027] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.423263][  T133] blkno = 8ed2c, nblocks = 4
[  506.423276][  T133] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  506.423276][  T133] 
[  506.425123][ T9027] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.425355][T10011] syz-executor: attempt to access beyond end of device
[  506.425355][T10011] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  506.425373][T10011] metapage_write_end_io: I/O error
[  506.426801][ T9027] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.444286][T10011] JFS: metapage_get_blocks failed
[  506.444310][T10011] JFS: metapage_get_blocks failed
[  506.444332][T10011] JFS: metapage_get_blocks failed
[  506.444492][T10011] JFS: metapage_get_blocks failed
[  506.444642][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.444826][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.445074][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.446599][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.447122][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.447877][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.448041][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.473249][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.473559][ T9030] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  506.473731][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  506.488581][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  506.503076][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  506.589527][ T1391] ieee802154 phy0 wpan0: encryption failed: -22
[  506.589606][ T1391] ieee802154 phy1 wpan1: encryption failed: -22
[  506.910072][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'.
[  506.949281][T14643] loop1: detected capacity change from 0 to 128
[  506.961590][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.962547][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.963072][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.972883][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.973102][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.973367][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.973637][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.010867][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.059736][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.067700][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.073052][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.515018][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.517935][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.517960][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.517977][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.517995][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.518011][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.518636][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.520315][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.520518][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.534268][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  507.562147][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.719662][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.750171][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.750446][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.750608][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.750758][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.750906][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.759929][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.760396][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.816481][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  507.992593][T14652] loop1: detected capacity change from 0 to 512
[  507.997975][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.998286][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.999542][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.999941][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000090][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000149][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000380][ T1123] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  508.000397][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000586][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000748][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.000921][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.001079][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.001332][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.001517][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.001955][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.002160][T14652] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  508.154963][T14652] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  508.155072][T14652] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.3570: iget: bad i_size value: 12154757448730
[  508.155092][T14652] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  508.156139][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  508.156522][T14652] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3570: couldn't read orphan inode 13 (err -117)
[  508.156542][T14652] loop1: lost filesystem error report for type 5 error -117
[  508.157107][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  508.161879][T14652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.189503][T14660] tmpfs: Bad value for 'mpol'
[  508.226207][T14652] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  508.311099][T14662] "syz.4.3573" (14662) uses obsolete ecb(arc4) skcipher
[  508.330592][ T9884] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.343413][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  508.442986][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  508.575289][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  509.026307][T14687] overlayfs: overlapping lowerdir path
[  509.073035][T14687] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  509.073074][T14687] overlayfs: overlapping lowerdir path
[  509.604368][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  510.516148][T14718] ceph: No mds server is up or the cluster is laggy
[  510.644793][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  510.952399][T14730] netlink: 'syz.1.3600': attribute type 46 has an invalid length.
[  510.954652][   T39] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  511.077552][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3602'.
[  511.161272][T14739] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3605'.
[  511.168936][   T39] usb 5-1: config index 0 descriptor too short (expected 1051, got 27)
[  511.168949][   T39] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  511.168958][   T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  511.168978][   T39] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149
[  511.168989][   T39] usb 5-1: config 0 interface 0 has no altsetting 0
[  511.170909][   T39] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[  511.170922][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.170930][   T39] usb 5-1: Product: syz
[  511.170936][   T39] usb 5-1: Manufacturer: syz
[  511.170942][   T39] usb 5-1: SerialNumber: syz
[  511.173277][   T39] usb 5-1: config 0 descriptor??
[  511.173829][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  511.410455][   T39] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected
[  511.410790][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  511.412594][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  511.412649][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  511.428131][   T39] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  511.429764][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82
[  511.429898][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  511.432186][   T39] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  511.447482][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  511.447592][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  511.449298][   T39] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  511.450999][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84
[  511.451050][   T39] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  511.452536][   T39] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  511.474474][   T39] usb 5-1: USB disconnect, device number 31
[  511.479515][   T39] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  511.491340][   T39] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  511.499426][   T39] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  511.503194][   T39] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  511.515159][   T39] keyspan 5-1:0.0: device disconnected
[  511.684964][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  511.733326][T14743] loop1: detected capacity change from 0 to 40427
[  511.734301][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.734478][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.734723][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.735436][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.735587][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.735644][T14743] F2FS-fs (loop1): invalid crc value
[  511.736173][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.736328][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.736526][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.739576][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.763857][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.781436][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.781670][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.781839][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.782135][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.784016][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.784259][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.785939][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.786885][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787045][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787224][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787368][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787502][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787707][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.787846][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788029][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788198][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788339][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788475][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788618][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788759][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.788903][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.789131][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.789303][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.789676][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.791324][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.791466][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.793118][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.793140][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.793157][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.793183][ T9035] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.797959][ T9021] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.901310][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  511.918632][T14743] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  511.970139][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  512.085235][T14743] F2FS-fs (loop1): Start checkpoint disabled!
[  512.237481][ T9030] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  512.308868][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  512.389477][T14743] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  512.467340][T14743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  512.839352][T14761] 0X: left allmulticast mode
[  512.945729][T14761] xfrm0: left promiscuous mode
[  512.945805][T14761] xfrm0: left allmulticast mode
[  513.070799][T14761] macvlan1: left promiscuous mode
[  513.070899][T14761] macvlan1: left allmulticast mode
[  513.070905][T14761] veth1_vlan: left allmulticast mode
[  513.071009][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  513.081223][T14761] bond1: left promiscuous mode
[  513.081234][T14761] vcan1: left promiscuous mode
[  513.088916][T14761] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.092586][T14761] team1: left promiscuous mode
[  513.092598][T14761] team1: left allmulticast mode
[  513.097024][T14761] team2: left promiscuous mode
[  513.097039][T14761] team2: left allmulticast mode
[  513.103411][ T5681] team_slave_0: entered promiscuous mode
[  513.103452][ T5681] team_slave_1: entered promiscuous mode
[  513.332240][ T9021] kworker/u9:12: attempt to access beyond end of device
[  513.332240][ T9021] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  513.332287][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: kworker/u9:12 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  513.332299][ T9021] Tainted: [L]=SOFTLOCKUP
[  513.332302][ T9021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  513.332307][ T9021] Workqueue: writeback wb_workfn (flush-7:1)
[  513.332322][ T9021] Call Trace:
[  513.332326][ T9021]  <TASK>
[  513.332331][ T9021]  dump_stack_lvl+0xe8/0x150
[  513.332344][ T9021]  f2fs_stop_checkpoint+0x383/0x540
[  513.332357][ T9021]  f2fs_write_end_io+0x1274/0x1740
[  513.332378][ T9021]  __submit_merged_bio+0x256/0x6a0
[  513.332398][ T9021]  __submit_merged_write_cond+0x3c9/0x4e0
[  513.332421][ T9021]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  513.332454][ T9021]  f2fs_write_data_pages+0x287e/0x34f0
[  513.332496][ T9021]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  513.332523][ T9021]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  513.332562][ T9021]  ? __lock_acquire+0x6b5/0x2d10
[  513.332596][ T9021]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  513.332616][ T9021]  do_writepages+0x32e/0x550
[  513.332635][ T9021]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  513.332654][ T9021]  ? reacquire_held_locks+0x104/0x190
[  513.332669][ T9021]  ? rt_spin_lock+0x1e0/0x400
[  513.332692][ T9021]  __writeback_single_inode+0x133/0x10e0
[  513.332710][ T9021]  ? rt_spin_unlock+0x160/0x200
[  513.332731][ T9021]  writeback_sb_inodes+0x97f/0x1980
[  513.332757][ T9021]  ? lockdep_hardirqs_on+0x7a/0x110
[  513.332785][ T9021]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  513.332825][ T9021]  ? rcu_is_watching+0x15/0xb0
[  513.332838][ T9021]  wb_writeback+0x445/0xb00
[  513.332848][ T9021]  ? queue_io+0x1c1/0x440
[  513.332860][ T9021]  ? __pfx_wb_writeback+0x10/0x10
[  513.332875][ T9021]  wb_workfn+0x3fd/0xf20
[  513.332882][ T9021]  ? look_up_lock_class+0x57/0x110
[  513.332897][ T9021]  ? __pfx_wb_workfn+0x10/0x10
[  513.332915][ T9021]  ? do_raw_spin_unlock+0x4d/0x210
[  513.332937][ T9021]  ? process_one_work+0x8be/0x1630
[  513.332955][ T9021]  ? process_one_work+0x8be/0x1630
[  513.332980][ T9021]  ? process_one_work+0x8be/0x1630
[  513.332997][ T9021]  process_one_work+0x98b/0x1630
[  513.333029][ T9021]  ? __pfx_process_one_work+0x10/0x10
[  513.333044][ T9021]  ? do_raw_spin_lock+0x12b/0x2f0
[  513.333120][ T9021]  worker_thread+0xb49/0x1140
[  513.333158][ T9021]  kthread+0x388/0x470
[  513.333173][ T9021]  ? __pfx_worker_thread+0x10/0x10
[  513.333189][ T9021]  ? __pfx_kthread+0x10/0x10
[  513.333204][ T9021]  ret_from_fork+0x514/0xb70
[  513.333223][ T9021]  ? __pfx_ret_from_fork+0x10/0x10
[  513.333238][ T9021]  ? __switch_to+0xc79/0x1410
[  513.333255][ T9021]  ? __pfx_kthread+0x10/0x10
[  513.333270][ T9021]  ret_from_fork_asm+0x1a/0x30
[  513.333299][ T9021]  </TASK>
[  513.333349][ T9021] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  513.335720][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  513.384202][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  513.649730][ T5681] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  513.673243][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  513.719103][ T7079] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  513.807829][ T5681] usb 5-1: Using ep0 maxpacket: 16
[  513.809455][ T5681] usb 5-1: config 5 has an invalid interface number: 168 but max is 0
[  513.809468][ T5681] usb 5-1: config 5 has no interface number 0
[  513.809485][ T5681] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  513.809496][ T5681] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  513.809506][ T5681] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3
[  513.809516][ T5681] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  513.809524][ T5681] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0
[  513.809534][ T5681] usb 5-1: config 5 interface 168 has no altsetting 0
[  513.811915][ T5681] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  513.811927][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.811935][ T5681] usb 5-1: Product: syz
[  513.811942][ T5681] usb 5-1: Manufacturer: syz
[  513.811948][ T5681] usb 5-1: SerialNumber: syz
[  513.840163][T14766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  514.092523][ T5681] usb 5-1: NFC: Unable to get FW version
[  514.094453][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  514.142625][ T5681] pn533_usb 5-1:5.168: probe with driver pn533_usb failed with error -90
[  514.195269][ T5681] usb 5-1: USB disconnect, device number 32
[  514.243871][T14780] IPv6: NLM_F_REPLACE set, but no existing node found!
[  515.125263][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  515.348107][T14792] loop1: detected capacity change from 0 to 131072
[  515.352521][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.359549][ T1123] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.361967][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.362256][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.362496][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.362996][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.369987][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.395022][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.395490][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.395702][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.395962][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.396361][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.396614][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.396813][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.396995][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.397220][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.397403][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.397673][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.397999][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.398227][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.398425][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.398683][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.398865][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.399073][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.399271][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.399467][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.399658][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.399917][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.400150][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.400372][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.400599][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.400785][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.400965][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.401256][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.402855][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.402890][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.402925][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.402991][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.403658][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.404931][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.410771][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.467698][   T35] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.477408][T14792] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  515.485599][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.493390][T14792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  515.496331][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.500331][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.501366][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.501635][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.501842][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.502208][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.502949][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.503526][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.505957][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.511123][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.582734][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.582899][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.583029][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.583180][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.606942][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.629008][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.630278][ T3176] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  515.636399][T14792] F2FS-fs (loop1): recover xattr in inode (7), error(0)
[  515.636445][T14792] F2FS-fs (loop1): set inode (7) has corrupted xattr
[  515.656429][ T3189] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  515.661677][ T3189] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  515.753307][ T9027] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  515.861308][T14802] loop4: detected capacity change from 0 to 512
[  515.873123][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  515.873599][T14802] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  515.897556][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.100857][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.101061][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.107666][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.110175][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.118824][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.121921][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.209261][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.243323][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.257979][ T3171] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.329899][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  516.332845][ T3176] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.355436][T14802] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.3626: orphan file block 0: bad magic
[  516.355452][T14802] loop4: lost filesystem error report for type 5 error -117
[  516.357848][ T3189] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  516.358709][T14802] EXT4-fs (loop4): mount failed
[  516.364209][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  516.364218][    C1] EXT4-fs (loop4): initial error at time 1778677727: ext4_init_orphan_info:618
[  516.364228][    C1] EXT4-fs (loop4): last error at time 1778677727: ext4_init_orphan_info:618
[  516.443124][T14802] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  516.475917][T14808] netlink: 'syz.3.3629': attribute type 6 has an invalid length.
[  516.540160][ T3206] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  516.631722][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  516.761603][T14814] comedi comedi0: Cannot bond this driver to itself!
[  516.785675][ T9027] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  516.828443][ T9027] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  516.838562][ T9021] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  516.853486][ T9021] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  517.016627][T14822] bond1: entered allmulticast mode
[  517.016644][T14822] vti0: entered allmulticast mode
[  517.022527][T14821] bond1: left allmulticast mode
[  517.022545][T14821] vti0: left allmulticast mode
[  517.051872][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  517.149132][T14824] netlink: 'syz.3.3637': attribute type 4 has an invalid length.
[  517.366166][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  517.444447][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  517.610927][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'.
[  517.658790][T14842] netem: change failed
[  518.498046][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  518.506157][   T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  518.694550][   T10] usb 2-1: Using ep0 maxpacket: 8
[  518.699092][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  518.699116][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.699191][   T10] usb 2-1: Product: syz
[  518.699203][   T10] usb 2-1: Manufacturer: syz
[  518.699213][   T10] usb 2-1: SerialNumber: syz
[  518.718050][   T10] usb 2-1: config 0 descriptor??
[  518.924698][   T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  519.174692][T14867] loop4: detected capacity change from 0 to 8
[  519.175921][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.177185][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.186706][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.909992][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  520.169520][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  520.323840][   T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  520.332675][   T10] usb 2-1: USB disconnect, device number 47
[  520.354745][T14881] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3660'.
[  520.354921][T14881] openvswitch: netlink: Message has 512 unknown bytes.
[  520.356191][ T7196] udevd[7196]: setting mode of /dev/bus/usb/002/047 to 020664 failed: No such file or directory
[  520.356302][ T7196] udevd[7196]: setting owner of /dev/bus/usb/002/047 to uid=0, gid=0 failed: No such file or directory
[  520.971349][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  521.132697][T14898] gfs2: not a GFS2 filesystem
[  521.133224][T14899] loop1: detected capacity change from 0 to 4096
[  521.162420][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.184484][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.184777][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.184971][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.185166][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.185330][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.185603][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.204655][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.205102][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206429][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206459][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206477][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206494][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206512][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206528][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206546][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206562][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206579][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206594][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206630][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206647][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206664][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206681][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206697][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206714][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206731][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206747][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206764][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206780][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206797][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.206813][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210182][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210212][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210228][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210567][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210840][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.210978][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.211164][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.211322][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.211498][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.211678][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.211930][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.212173][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.212466][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.212846][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.216227][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.216852][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.225178][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.225725][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.227604][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.227828][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.228055][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.228286][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.228560][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257131][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257175][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257193][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257210][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257227][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257244][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257258][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257274][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257290][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257306][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257323][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257338][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257353][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257368][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257384][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257398][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257413][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257428][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257444][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257459][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257474][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257490][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257507][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.257523][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.282867][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.288517][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.288707][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.309123][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.345351][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.345398][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.345574][T14901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  521.383783][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.384802][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.384977][T14804] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  521.385796][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  521.658779][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  521.659429][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  521.731047][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  521.800082][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3673'.
[  522.035453][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  522.155512][T14914] loop4: detected capacity change from 0 to 128
[  522.161514][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.176537][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.176732][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.176886][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.177243][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.177466][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.177661][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.177846][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.178148][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.178337][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.191587][T14914] EXT4-fs (loop4): Test dummy encryption mode enabled
[  522.206950][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.234094][T14914] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  522.234305][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.234483][T14914] ext4 filesystem being mounted at /542/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  522.286524][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  522.386561][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.386833][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.387165][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.387512][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.387710][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.425477][T10011] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  522.432704][ T3206] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  522.492728][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  523.054344][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  523.104246][   T39] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  523.258111][   T39] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  523.258132][   T39] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  523.258145][   T39] usb 5-1: Product: syz
[  523.258154][   T39] usb 5-1: SerialNumber: syz
[  523.263636][   T39] usb 5-1: config 0 descriptor??
[  523.377940][T14933] loop1: detected capacity change from 0 to 256
[  523.434993][ T3499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.458338][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.518963][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.519505][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.533353][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.533757][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.545344][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.545824][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.546274][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.546756][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.547696][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.548195][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.548643][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.549065][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.549650][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.596300][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.602470][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.603042][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.628763][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.633845][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.640761][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.666917][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.710251][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.718780][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.852402][   T45] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.922418][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.922695][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.922947][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.923146][T14933] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  523.923706][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.089619][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  524.119321][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  524.193676][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  524.215434][   T45] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  524.415670][   T45] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  524.551993][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  524.809804][ T5599] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  525.135332][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  525.892603][T14945] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3685'.
[  525.934154][ T5578] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  526.136545][ T5578] usb 2-1: Using ep0 maxpacket: 16
[  526.138892][ T5578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.138911][ T5578] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.145069][ T5578] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  526.145093][ T5578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.145107][ T5578] usb 2-1: Product: syz
[  526.145117][ T5578] usb 2-1: Manufacturer: syz
[  526.145127][ T5578] usb 2-1: SerialNumber: syz
[  526.165938][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  526.187561][ T5578] usb 2-1: 0:2 : does not exist
[  526.252063][   T39] usb 5-1: USB disconnect, device number 33
[  526.260789][ T7196] udevd[7196]: setting mode of /dev/bus/usb/005/033 to 020664 failed: No such file or directory
[  526.263514][ T7196] udevd[7196]: setting owner of /dev/bus/usb/005/033 to uid=0, gid=0 failed: No such file or directory
[  526.400540][ T5578] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  526.508816][T14952] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3688'.
[  526.516036][ T5578] usb 2-1: USB disconnect, device number 48
[  526.876870][ T7196] udevd[7196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  527.210341][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  527.227501][T14961] netlink: 'syz.4.3693': attribute type 1 has an invalid length.
[  527.318686][T14965] loop4: detected capacity change from 0 to 2048
[  527.320732][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.320984][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.321984][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.322305][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.322461][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.322653][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.323588][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.323738][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.326074][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.326449][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.326866][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.327242][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.327395][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.327717][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.327800][T14965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  527.327928][ T3189] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.328342][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.333756][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.401584][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.401926][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.402219][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.420545][ T9021] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.420992][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421015][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421028][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421040][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421052][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421065][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421388][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421406][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421418][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421430][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421442][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421454][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421775][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421792][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421805][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421817][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421829][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421841][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.421853][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.422199][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.422403][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.422574][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.422735][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.422884][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.423092][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.423111][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  527.522910][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.523032][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.591081][ T3189] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.834793][ T9032] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.835527][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.835685][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.835843][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.836023][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.886080][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  527.890426][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  528.245977][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  528.260336][T14988] loop4: detected capacity change from 0 to 32768
[  528.262958][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.263291][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.263588][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.264924][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.265257][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.265604][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.265868][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.266149][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.266744][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.266983][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.267152][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.267339][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.267532][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.267826][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.268075][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.311016][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.337718][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.337893][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.338134][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.338257][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.338365][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.338472][ T9027] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.338675][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339007][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339267][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339386][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339491][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339603][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339709][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339812][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.339977][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340123][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340427][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340593][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340709][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340813][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.340923][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341087][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341203][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341313][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341538][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341675][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341783][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.341887][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.343095][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.343114][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.343126][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.343146][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.343180][ T9032] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.461730][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.462061][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.491335][T14975] ceph: No mds server is up or the cluster is laggy
[  528.498143][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.498699][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.499075][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.499138][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.499348][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.521248][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.521487][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  528.521696][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  528.528824][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  528.560620][T14978] ceph: No mds server is up or the cluster is laggy
[  528.922810][T15001] loop1: detected capacity change from 0 to 128
[  528.929405][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x1, refcnt=2
[  528.929693][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x1, refcnt=2
[  528.929899][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x1, refcnt=2
[  528.930177][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x1, refcnt=2
[  528.930323][ T3206] lo_rw_aio(loop1) starting read with raw_refcnt=0x1, refcnt=2
[  529.018735][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.027116][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.028099][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.031188][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.031429][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.084559][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.084976][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.085281][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.085366][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.085444][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.085579][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.136485][ T9030] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.297028][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  529.344768][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.344831][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.345436][ T9027] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.622247][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  529.664758][T15022] loop1: detected capacity change from 0 to 256
[  529.668159][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.668494][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.687970][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.689379][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.689585][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.689602][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.689730][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.689834][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.690006][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.690137][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.690250][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.690361][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.692555][ T9032] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.697015][   T39] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  529.769358][ T3499] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.773258][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  529.855362][   T39] usb 5-1: Using ep0 maxpacket: 32
[  529.856877][   T39] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  529.856889][   T39] usb 5-1: config 0 has no interface number 0
[  529.858950][   T39] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  529.858969][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.858982][   T39] usb 5-1: Product: syz
[  529.858991][   T39] usb 5-1: Manufacturer: syz
[  529.858998][   T39] usb 5-1: SerialNumber: syz
[  529.861320][   T39] usb 5-1: config 0 descriptor??
[  530.033548][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'.
[  530.095253][ T5599] Bluetooth: hci1: unexpected subevent 0x10 length: 5 > 2
[  530.325343][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  530.730106][   T41] audit: type=1326 audit(1778677741.581:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.731885][   T41] audit: type=1326 audit(1778677741.581:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737747][   T41] audit: type=1326 audit(1778677741.591:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737784][   T41] audit: type=1326 audit(1778677741.591:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737815][   T41] audit: type=1326 audit(1778677741.591:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737843][   T41] audit: type=1326 audit(1778677741.591:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737872][   T41] audit: type=1326 audit(1778677741.591:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737901][   T41] audit: type=1326 audit(1778677741.591:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.737974][   T41] audit: type=1326 audit(1778677741.591:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.1.3727" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f073c74cdd9 code=0x7ffc0000
[  530.824995][T15046] loop1: detected capacity change from 0 to 1024
[  530.831789][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.850833][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.850873][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.850892][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.871205][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.871466][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.871657][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.871839][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.872060][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.872265][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.872550][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.872768][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.872983][ T9027] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  530.902211][T15046] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  530.973212][   T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  530.973243][   T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  530.983231][   T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  530.983452][   T39] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  531.005391][   T39] usb 5-1: USB disconnect, device number 34
[  531.364586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  531.586967][T15056] netlink: 'syz.4.3732': attribute type 11 has an invalid length.
[  531.588223][T15056] netlink: 'syz.4.3732': attribute type 11 has an invalid length.
[  531.971422][T15065] loop4: detected capacity change from 0 to 128
[  531.982531][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.982924][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.983109][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.983272][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.983583][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.983809][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.984244][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.984432][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.984645][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.984825][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.991109][T15065] EXT4-fs (loop4): Test dummy encryption mode enabled
[  532.014852][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.051010][T15065] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  532.051223][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.051425][T15065] ext4 filesystem being mounted at /559/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  532.108582][T15065] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  532.240508][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.247431][ T9035] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.247802][ T9035] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.323360][T14804] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.323399][T14804] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.323417][T14804] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.338333][T10011] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  532.384221][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.408324][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  532.429367][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  532.679669][T15076] loop4: detected capacity change from 0 to 256
[  532.947379][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.532176][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  533.619086][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619213][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619304][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619393][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619478][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619658][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.619775][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620141][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620370][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620494][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620574][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620811][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.620911][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.621017][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.668157][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.671982][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.676025][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.680093][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.683679][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.687833][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.691379][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.695339][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.695479][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.695645][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.695742][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.695866][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.696014][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.712643][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.720149][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.720388][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.720536][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.720988][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721185][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721285][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721392][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721458][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721586][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721670][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721783][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.721864][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.722100][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.776350][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.777963][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.778425][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.778584][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.778655][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.778773][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.778855][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.779056][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.784333][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.790587][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.794341][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.800799][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.804332][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.808551][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.824817][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825046][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825137][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825287][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825369][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825618][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825701][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825835][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.825931][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.826030][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.826114][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.826232][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.826321][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.833236][T15076] FAT-fs (loop4): Directory bread(block 64) failed
[  533.833260][T15076] FAT-fs (loop4): Directory bread(block 65) failed
[  533.833382][T15076] FAT-fs (loop4): Directory bread(block 66) failed
[  533.833398][T15076] FAT-fs (loop4): Directory bread(block 67) failed
[  533.833456][T15076] FAT-fs (loop4): Directory bread(block 68) failed
[  533.833471][T15076] FAT-fs (loop4): Directory bread(block 69) failed
[  533.833526][T15076] FAT-fs (loop4): Directory bread(block 70) failed
[  533.833540][T15076] FAT-fs (loop4): Directory bread(block 71) failed
[  533.833601][T15076] FAT-fs (loop4): Directory bread(block 72) failed
[  533.833615][T15076] FAT-fs (loop4): Directory bread(block 73) failed
[  533.908188][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  533.908574][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  534.067466][ T9021] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  534.163993][T15090] lo speed is unknown, defaulting to 1000
[  534.174147][T15090] lo speed is unknown, defaulting to 1000
[  534.174797][ T9030] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  534.176509][T15090] lo speed is unknown, defaulting to 1000
[  534.177297][T15090] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  534.177312][T15090] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  534.177328][T15090] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  534.179378][T15090] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  534.183335][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  534.188924][T15090] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  534.242262][T15090] lo speed is unknown, defaulting to 1000
[  534.243725][T15090] lo speed is unknown, defaulting to 1000
[  534.245650][T15090] lo speed is unknown, defaulting to 1000
[  534.247062][T15090] lo speed is unknown, defaulting to 1000
[  534.349764][T15096] tipc: New replicast peer: 255.255.255.255
[  534.380004][T15096] tipc: Enabled bearer <udp:syz2>, priority 10
[  534.394223][T15098] bond0: (slave erspan0): Opening slave failed
[  534.564615][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  535.215032][T15114] loop1: detected capacity change from 0 to 128
[  535.313240][ T3189] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.313991][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.314023][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.314117][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.314128][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.314138][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.348197][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.348268][ T9032] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.387341][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.396318][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.402113][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.402981][ T9028] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.403587][ T9028] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  535.419952][T14804] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.463595][   T35] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.466562][   T35] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.466595][   T35] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  535.604206][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  535.720033][ T3189] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  535.731002][ T3189] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  535.771774][ T9884] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  536.380796][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'.
[  536.429412][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'.
[  536.429636][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'.
[  536.430469][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'.
[  536.430659][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'.
[  536.608297][T15147] misc userio: The device must be registered before sending interrupts
[  536.665500][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  536.804477][ T4874] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  536.836471][T15160] loop4: detected capacity change from 0 to 8192
[  536.893525][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.893758][T15160]  loop4: p2 < > p3
[  536.901171][T15160] loop4: p3 start 150995456 is beyond EOD, truncated
[  536.903292][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.903517][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.903714][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.923643][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.931237][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.931620][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.931828][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.932569][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.932844][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.933046][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.933201][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.933354][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.933503][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.963558][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.968090][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.972055][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.972379][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.972629][ T9035] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.974145][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.974549][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.974816][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.975267][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.975626][ T4874] usb 2-1: Using ep0 maxpacket: 8
[  536.975995][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.976449][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.976985][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.977199][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.977391][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.977582][ T3189] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  536.978677][ T4874] usb 2-1: unable to get BOS descriptor or descriptor too short
[  536.980080][ T7196] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  536.980284][ T4874] usb 2-1: config 9 has an invalid interface number: 111 but max is 0
[  536.980301][ T4874] usb 2-1: config 9 has no interface number 0
[  536.980334][ T4874] usb 2-1: config 9 interface 111 has no altsetting 0
[  537.015467][ T7196] udevd[7196]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  537.059408][ T4874] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35
[  537.059431][ T4874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.059446][ T4874] usb 2-1: Product: syz
[  537.059457][ T4874] usb 2-1: Manufacturer: syz
[  537.059468][ T4874] usb 2-1: SerialNumber: syz
[  537.453533][ T4874] peak_usb 2-1:9.111 can0: unable to request usb[type=0 value=1] err=-71
[  537.453549][ T4874] peak_usb 2-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71)
[  537.684786][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  537.727260][ T4874] peak_usb 2-1:9.111: probe with driver peak_usb failed with error -71
[  537.750642][ T4874] usb 2-1: USB disconnect, device number 49
[  537.821236][T15190] loop4: detected capacity change from 0 to 512
[  537.822672][ T9025] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.822770][T15190] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  537.822939][ T9025] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.823337][ T9025] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.823502][ T9025] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  537.839702][ T9025] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.840954][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.841232][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.842243][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.842499][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.842727][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.842915][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.843077][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.843291][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.843596][ T3499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.848007][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.848330][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.848679][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.875654][ T3499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  537.897534][ T9035] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  537.937100][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  537.994952][T15190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.995067][T15190] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.101314][ T9025] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.144983][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.145036][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.145055][T14804] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.173143][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.173433][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.173634][ T9028] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.219868][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.233682][   T35] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  538.281014][T15190] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.3785: failed to insert inode 16: doubly allocated?
[  538.286829][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.345892][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.345937][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.345961][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.345994][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.350478][T10011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.398941][   T35] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.450624][T14804] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  538.468251][T10011] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  538.597789][ T5599] Bluetooth: hci1: connection err: -111
[  538.734866][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  538.879626][ T4874] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  539.047532][ T4874] usb 2-1: unable to get BOS descriptor or descriptor too short
[  539.048142][ T4874] usb 2-1: not running at top speed; connect to a high speed hub
[  539.053025][ T4874] usb 2-1: string descriptor 0 read error: -22
[  539.053130][ T4874] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40
[  539.053147][ T4874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.078243][T15207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  539.082689][ T4874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  539.082740][ T4874] usb 2-1: MIDIStreaming interface descriptor not found
[  539.758049][ T4874] usb 2-1: USB disconnect, device number 50
[  539.765918][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  540.237504][T15229] netlink: 'syz.4.3799': attribute type 2 has an invalid length.
[  540.412625][T15238] netlink: 'syz.1.3805': attribute type 3 has an invalid length.
[  540.420792][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3804'.
[  540.804489][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  541.191675][T15259] netlink: 'syz.4.3815': attribute type 4 has an invalid length.
[  541.845085][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  542.115259][ T5681] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  542.278459][ T5681] usb 5-1: Using ep0 maxpacket: 32
[  542.281996][ T5681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  542.282014][ T5681] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  542.282024][ T5681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  542.282034][ T5681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  542.316189][ T5681] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  542.316204][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.316212][ T5681] usb 5-1: Product: syz
[  542.316218][ T5681] usb 5-1: Manufacturer: syz
[  542.316224][ T5681] usb 5-1: SerialNumber: syz
[  542.321002][ T5681] usb 5-1: config 0 descriptor??
[  542.353771][ T5681] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21
[  542.529643][ T5681] usb 5-1: USB disconnect, device number 35
[  542.895221][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  542.974365][ T5681] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  543.199720][ T5681] usb 2-1: config 0 has no interfaces?
[  543.212186][ T5681] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  543.212199][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2
[  543.212207][ T5681] usb 2-1: Product: syz
[  543.212213][ T5681] usb 2-1: Manufacturer: syz
[  543.212219][ T5681] usb 2-1: SerialNumber: syz
[  543.227320][ T5681] usb 2-1: config 0 descriptor??
[  543.306245][T15323] netlink: 'syz.3.3842': attribute type 1 has an invalid length.
[  543.306259][T15323] netlink: 'syz.3.3842': attribute type 2 has an invalid length.
[  543.439440][ T5681] usb 2-1: USB disconnect, device number 51
[  543.440185][ T5599] Bluetooth: hci1: unknown advertising packet type: 0x17
[  543.934463][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  545.147755][   T39] ------------[ cut here ]------------
[  545.147794][   T39] bochs-drm 0000:00:01.0: [drm] vblank wait timed out on crtc 0
[  545.147842][   T39] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3d5/0x590, CPU#1: kworker/1:1/39
[  545.147875][   T39] Modules linked in:
[  545.147892][   T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  545.147911][   T39] Tainted: [L]=SOFTLOCKUP
[  545.147916][   T39] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.147926][   T39] Workqueue: events drm_fb_helper_damage_work
[  545.147945][   T39] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590
[  545.147964][   T39] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 64 0d ca fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff
[  545.147977][   T39] RSP: 0000:ffffc90000ae7920 EFLAGS: 00010246
[  545.147989][   T39] RAX: 1ffff1102095fc1a RBX: ffffffff8f9614c0 RCX: 0000000000000000
[  545.147999][   T39] RDX: ffff888104297320 RSI: ffffffff8bc24e80 RDI: ffffffff8f9614c0
[  545.148010][   T39] RBP: ffffc90000ae7a08 R08: 0000000000000000 R09: 0000000000000000
[  545.148019][   T39] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffffffff8bc24e80
[  545.148036][   T39] R13: ffff888104afe0d0 R14: 0000000000000000 R15: ffff888104297320
[  545.148046][   T39] FS:  0000000000000000(0000) GS:ffff8882a9f1f000(0000) knlGS:0000000000000000
[  545.148057][   T39] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  545.148067][   T39] CR2: 000055555c5779e8 CR3: 000000018a344000 CR4: 00000000000006f0
[  545.148107][   T39] Call Trace:
[  545.148115][   T39]  <TASK>
[  545.148126][   T39]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  545.148144][   T39]  ? rt_spin_unlock+0x14f/0x200
[  545.148166][   T39]  ? __pfx_autoremove_wake_function+0x10/0x10
[  545.148190][   T39]  ? rt_spin_unlock+0x160/0x200
[  545.148214][   T39]  ? drm_vblank_get+0x147/0x280
[  545.148233][   T39]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  545.148252][   T39]  drm_fb_helper_damage_work+0x131/0x720
[  545.148274][   T39]  ? process_one_work+0x8be/0x1630
[  545.148298][   T39]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  545.148324][   T39]  ? process_one_work+0x8be/0x1630
[  545.148343][   T39]  process_one_work+0x98b/0x1630
[  545.148380][   T39]  ? __pfx_process_one_work+0x10/0x10
[  545.148398][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  545.148433][   T39]  worker_thread+0xb49/0x1140
[  545.148474][   T39]  kthread+0x388/0x470
[  545.148490][   T39]  ? __pfx_worker_thread+0x10/0x10
[  545.148508][   T39]  ? __pfx_kthread+0x10/0x10
[  545.148524][   T39]  ret_from_fork+0x514/0xb70
[  545.148546][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  545.148564][   T39]  ? __switch_to+0xc79/0x1410
[  545.148582][   T39]  ? __pfx_kthread+0x10/0x10
[  545.148599][   T39]  ret_from_fork_asm+0x1a/0x30
[  545.148633][   T39]  </TASK>
[  545.148641][   T39] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  545.148653][   T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/1:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  545.148671][   T39] Tainted: [L]=SOFTLOCKUP
[  545.148677][   T39] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.148685][   T39] Workqueue: events drm_fb_helper_damage_work
[  545.148704][   T39] Call Trace:
[  545.148710][   T39]  <TASK>
[  545.148716][   T39]  vpanic+0x56c/0xa60
[  545.148737][   T39]  ? __pfx__printk+0x10/0x10
[  545.148751][   T39]  ? __pfx_vpanic+0x10/0x10
[  545.148768][   T39]  ? is_bpf_text_address+0x292/0x2b0
[  545.148824][   T39]  ? is_bpf_text_address+0x26/0x2b0
[  545.148846][   T39]  panic+0xc5/0xd0
[  545.148865][   T39]  ? __pfx_panic+0x10/0x10
[  545.148891][   T39]  ? ret_from_fork_asm+0x1a/0x30
[  545.148915][   T39]  __warn+0x315/0x4c0
[  545.148933][   T39]  ? drm_crtc_wait_one_vblank+0x3d5/0x590
[  545.148952][   T39]  ? drm_crtc_wait_one_vblank+0x3d5/0x590
[  545.148971][   T39]  __report_bug+0x29a/0x540
[  545.148994][   T39]  ? drm_crtc_wait_one_vblank+0x3d5/0x590
[  545.149014][   T39]  ? __pfx___report_bug+0x10/0x10
[  545.149034][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  545.149059][   T39]  ? drm_crtc_wait_one_vblank+0x541/0x590
[  545.149083][   T39]  report_bug_entry+0x19a/0x290
[  545.149100][   T39]  ? drm_crtc_wait_one_vblank+0x53c/0x590
[  545.149116][   T39]  ? drm_crtc_wait_one_vblank+0x541/0x590
[  545.149133][   T39]  handle_bug+0xce/0x200
[  545.149153][   T39]  exc_invalid_op+0x1a/0x50
[  545.149172][   T39]  asm_exc_invalid_op+0x1a/0x20
[  545.149187][   T39] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590
[  545.149205][   T39] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 64 0d ca fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff
[  545.149218][   T39] RSP: 0000:ffffc90000ae7920 EFLAGS: 00010246
[  545.149248][   T39] RAX: 1ffff1102095fc1a RBX: ffffffff8f9614c0 RCX: 0000000000000000
[  545.149259][   T39] RDX: ffff888104297320 RSI: ffffffff8bc24e80 RDI: ffffffff8f9614c0
[  545.149269][   T39] RBP: ffffc90000ae7a08 R08: 0000000000000000 R09: 0000000000000000
[  545.149278][   T39] R10: dffffc0000000000 R11: fffffbfff1f1597f R12: ffffffff8bc24e80
[  545.149288][   T39] R13: ffff888104afe0d0 R14: 0000000000000000 R15: ffff888104297320
[  545.149315][   T39]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  545.149333][   T39]  ? rt_spin_unlock+0x14f/0x200
[  545.149354][   T39]  ? __pfx_autoremove_wake_function+0x10/0x10
[  545.149378][   T39]  ? rt_spin_unlock+0x160/0x200
[  545.149402][   T39]  ? drm_vblank_get+0x147/0x280
[  545.149421][   T39]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  545.149439][   T39]  drm_fb_helper_damage_work+0x131/0x720
[  545.149460][   T39]  ? process_one_work+0x8be/0x1630
[  545.149483][   T39]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  545.149509][   T39]  ? process_one_work+0x8be/0x1630
[  545.149527][   T39]  process_one_work+0x98b/0x1630
[  545.149563][   T39]  ? __pfx_process_one_work+0x10/0x10
[  545.149582][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  545.149615][   T39]  worker_thread+0xb49/0x1140
[  545.149656][   T39]  kthread+0x388/0x470
[  545.149672][   T39]  ? __pfx_worker_thread+0x10/0x10
[  545.149691][   T39]  ? __pfx_kthread+0x10/0x10
[  545.149708][   T39]  ret_from_fork+0x514/0xb70
[  545.149728][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  545.149746][   T39]  ? __switch_to+0xc79/0x1410
[  545.149763][   T39]  ? __pfx_kthread+0x10/0x10
[  545.149806][   T39]  ret_from_fork_asm+0x1a/0x30
[  545.149838][   T39]  </TASK>
[  545.150558][   T39] Kernel Offset: disabled
