last executing test programs:

2m39.473344686s ago: executing program 1 (id=28):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

2m35.755514165s ago: executing program 1 (id=36):
creat(&(0x7f0000000080)='./bus\x00', 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x20)
personality(0x619641b6fb4b8591)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[], 0x3c}}, 0x0)

2m34.6760613s ago: executing program 1 (id=38):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'ip6gre0\x00', 0x8})

2m34.432092867s ago: executing program 1 (id=41):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000080)={[{}, {@dmask={'dmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0xea}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fmask={'fmask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x9}}, {@keep_last_dots}, {@namecase}, {@discard}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000008c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2m33.461548808s ago: executing program 1 (id=43):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
setresgid(0x0, 0xee01, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x4d, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000780)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x9, @loopback, 0x6a}]}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a005f1114f9f4070009", 0xe)

2m32.776137211s ago: executing program 1 (id=46):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$kcm(0x1e, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0)

2m31.760881153s ago: executing program 32 (id=46):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$kcm(0x1e, 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0)

2m10.570366313s ago: executing program 2 (id=94):
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @local}}}}}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r0, &(0x7f00000001c0)=[{0xff, 0xb, 0x0, 0xfd, @time={0xa, 0x2}, {}, {}, @connect={{0xa, 0x28}, {0x80, 0x50}}}], 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0)
recvmsg$can_raw(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/155, 0x9b}], 0x1, &(0x7f00000015c0)=""/30, 0x1e}, 0x100)
write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2941, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

2m9.433255569s ago: executing program 2 (id=99):
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b000100627269646765"], 0x44}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m9.051346941s ago: executing program 2 (id=101):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m8.355721494s ago: executing program 2 (id=102):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

2m8.025020814s ago: executing program 2 (id=106):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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")
lchown(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x0, 0xee00)

2m7.482974111s ago: executing program 2 (id=110):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m6.685781116s ago: executing program 33 (id=110):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

9.048074195s ago: executing program 3 (id=579):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

8.040160997s ago: executing program 3 (id=584):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0x15, 0x6, "88ec7220b51f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

7.900137811s ago: executing program 4 (id=585):
syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b00"], 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001080)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

5.40012496s ago: executing program 4 (id=595):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0xed8}}, {@nodelalloc}, {@data_err_ignore}, {@noload}, {@norecovery}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000001240)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1)

4.909283425s ago: executing program 4 (id=601):
r0 = socket(0x10, 0x803, 0x0)
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="120126013f840f405e040a047b670102030109022b0001e30830060904140502ffffff0709050800000206030907058f42a2666c09050703ff03800600bcbbad9cedd9fc80d230d7ec711d8210eba0089340d53fc77a52a98adb7ea66530a77a1932570580c6f761b46dda254c745865e13d"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0xe)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1})
socket$inet(0x2, 0x6, 0x6)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

4.530928667s ago: executing program 0 (id=606):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
truncate(&(0x7f0000000080)='./file2\x00', 0x6002)
r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9030, 0x0, 0x3)

3.79819752s ago: executing program 3 (id=607):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r4, &(0x7f0000000040)='\b', 0x1)
sendfile(r3, r4, &(0x7f0000000000), 0xfffb)
fcntl$addseals(r4, 0x409, 0x8)

3.50303492s ago: executing program 5 (id=610):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0xed8}}, {@nodelalloc}, {@data_err_ignore}, {@noload}, {@norecovery}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000001240)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1)

3.17574988s ago: executing program 5 (id=611):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20)
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

2.155996042s ago: executing program 5 (id=612):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)

2.128366533s ago: executing program 4 (id=613):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)

2.054723176s ago: executing program 3 (id=614):
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040006000000000008000000", @ANYRES32=0x0, @ANYBLOB="10"], 0x2c, 0x2)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

2.053800116s ago: executing program 5 (id=615):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

1.779960884s ago: executing program 4 (id=616):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

1.779679174s ago: executing program 0 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="24005a8020000180140003002a000200a80005000200000000007e8e"], 0x40}}, 0x0)

1.28185766s ago: executing program 3 (id=618):
socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)

1.066474907s ago: executing program 5 (id=619):
socket(0x28, 0x801, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4)
close(0x4)

1.034327547s ago: executing program 0 (id=620):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xffffffff, 0x0, 0x102, 0x4000008, 'syz0\x00', 0x210002})

833.900244ms ago: executing program 4 (id=621):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=00000000001000000007,heartbeat=none,inode64,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c)

833.005674ms ago: executing program 5 (id=622):
r0 = socket(0x10, 0x803, 0x0)
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000800)=ANY=[@ANYBLOB="120126013f840f405e040a047b670102030109022b0001e30830060904140502ffffff0709050800000206030907058f42a2666c09050703ff03800600bcbbad9cedd9fc80d230d7ec711d8210eba0089340d53fc77a52a98adb7ea66530a77a1932570580c6f761b46dda254c745865e13d"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x1f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0xe)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1})
socket$inet(0x2, 0x6, 0x6)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

780.031776ms ago: executing program 0 (id=623):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

152.787725ms ago: executing program 0 (id=624):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)

84.124987ms ago: executing program 3 (id=625):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0xf5c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

0s ago: executing program 0 (id=626):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000280)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@compress_force}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f)
write$char_usb(r0, &(0x7f0000001300)="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", 0xfc4)

kernel console output (not intermixed with test programs):

bond0
[   70.139625][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.154641][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   70.188345][  T267] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.195534][  T267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.207035][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   70.250128][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.257242][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.268594][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.275748][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.298916][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.306065][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.327101][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.421240][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.456932][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.504518][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   70.526888][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.534071][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.587848][  T267] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.595025][  T267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.728963][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.836451][ T5772] veth0_vlan: entered promiscuous mode
[   70.869769][ T5772] veth1_vlan: entered promiscuous mode
[   70.916198][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.945145][ T5772] veth0_macvtap: entered promiscuous mode
[   70.958740][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.971819][ T5772] veth1_macvtap: entered promiscuous mode
[   71.031156][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.063674][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.088779][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.098827][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.109204][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.119816][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.212070][ T5771] veth0_vlan: entered promiscuous mode
[   71.227747][ T5773] veth0_vlan: entered promiscuous mode
[   71.247887][ T5771] veth1_vlan: entered promiscuous mode
[   71.274543][ T5087] Bluetooth: hci0: command tx timeout
[   71.286035][ T5773] veth1_vlan: entered promiscuous mode
[   71.303377][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.331973][ T5771] veth0_macvtap: entered promiscuous mode
[   71.333410][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.346539][ T5087] Bluetooth: hci2: command tx timeout
[   71.346629][   T51] Bluetooth: hci1: command tx timeout
[   71.353666][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.386858][ T5771] veth1_macvtap: entered promiscuous mode
[   71.421728][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.424485][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.441304][   T51] Bluetooth: hci3: command tx timeout
[   71.442066][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[   71.450083][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.458042][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[   71.464669][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.475847][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.516432][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.527438][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.547280][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.592142][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.603692][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.612396][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.622767][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.637429][ T5773] veth0_macvtap: entered promiscuous mode
[   71.662338][ T5774] veth0_vlan: entered promiscuous mode
[   71.687611][ T5773] veth1_macvtap: entered promiscuous mode
[   71.740180][ T5831] syz.2.3[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   71.743551][ T5774] veth1_vlan: entered promiscuous mode
[   71.777870][ T5831] loop2: detected capacity change from 0 to 1024
[   71.811542][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.838568][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.856470][ T5831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.868636][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.892659][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.912089][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.946665][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.955751][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.976589][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.991554][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.002314][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.014239][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.025656][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.071775][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.081186][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.090951][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.100170][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.109811][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.127488][  T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.147773][  T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.167677][ T5774] veth0_macvtap: entered promiscuous mode
[   72.248938][ T5774] veth1_macvtap: entered promiscuous mode
[   72.285026][ T5839] loop2: detected capacity change from 0 to 512
[   72.317320][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.337046][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.348817][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.361465][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.373225][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.386237][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.424125][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.495671][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.513918][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.524447][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.551084][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.561052][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.572885][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.583230][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.594663][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.963957][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.065230][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.081071][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.082587][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.100624][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.110953][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.119966][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.324736][  T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.343001][   T51] Bluetooth: hci0: command tx timeout
[   73.358346][  T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.443719][   T51] Bluetooth: hci2: command tx timeout
[   73.448369][ T5087] Bluetooth: hci1: command tx timeout
[   73.510312][ T5087] Bluetooth: hci3: command tx timeout
[   74.396021][ T5851] loop2: detected capacity change from 0 to 4096
[   74.515652][ T5851] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   74.525078][ T5851] ntfs3: loop2: Failed to load $Extend (-22).
[   74.531258][ T5851] ntfs3: loop2: Failed to initialize $Extend.
[   74.605074][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.627606][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.968229][ T5860] process 'syz.2.6' launched './file2' with NULL argv: empty string added
[   75.104397][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.452621][ T5087] Bluetooth: hci0: command tx timeout
[   75.506682][   T51] Bluetooth: hci1: command tx timeout
[   75.512210][ T5087] Bluetooth: hci2: command tx timeout
[   75.587276][ T5087] Bluetooth: hci3: command tx timeout
[   75.632594][ T5829] usb 2-1: Using ep0 maxpacket: 8
[   75.641545][ T5829] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[   75.658943][ T5829] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   75.670365][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.695694][ T5829] usb 2-1: Product: syz
[   75.701250][ T5829] usb 2-1: Manufacturer: syz
[   75.726396][ T5829] usb 2-1: SerialNumber: syz
[   75.748834][ T5829] usb 2-1: config 0 descriptor??
[   75.790686][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   75.840872][ T5829] usb 2-1: setting power ON
[   75.978737][ T5829] dvb-usb: bulk message failed: -22 (2/0)
[   76.006569][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   76.028443][ T5857] dvb-usb: bulk message failed: -22 (4/0)
[   76.043830][ T5857] cxusb: i2c read failed
[   76.052880][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   77.033541][ T5829] usb 2-1: media controller created
[   78.497664][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.603402][ T5829] usb 2-1: selecting invalid altsetting 6
[   78.609307][ T5829] usb 2-1: digital interface selection failed (-22)
[   78.681331][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   78.724236][ T5829] usb 2-1: setting power OFF
[   78.734401][ T5829] dvb-usb: bulk message failed: -22 (2/0)
[   78.754757][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   78.791208][ T5829] (NULL device *): no alternate interface
[   79.320283][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   79.482120][ T5829] usb 2-1: USB disconnect, device number 2
[   79.872818][ T5886] loop0: detected capacity change from 0 to 4096
[   80.282255][ T5886] =======================================================
[   80.282255][ T5886] WARNING: The mand mount option has been deprecated and
[   80.282255][ T5886]          and is ignored by this kernel. Remove the mand
[   80.282255][ T5886]          option from the mount to silence this warning.
[   80.282255][ T5886] =======================================================
[   80.906333][ T5886] ntfs3: loop0: Failed to load $Extend (-22).
[   80.922545][ T5886] ntfs3: loop0: Failed to initialize $Extend.
[   81.815041][   T34] cfg80211: failed to load regulatory.db
[   82.898379][ T5906] loop3: detected capacity change from 0 to 32768
[   83.171072][ T5906] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   83.391478][ T5906] XFS (loop3): Ending clean mount
[   83.411898][ T5906] XFS (loop3): Quotacheck needed: Please wait.
[   84.309205][ T5906] XFS (loop3): Quotacheck: Done.
[   85.184912][ T5927] overlayfs: missing 'lowerdir'
[   85.875388][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.617325][ T5953] input: syz1 as /devices/virtual/input/input5
[   89.428254][ T5087] Bluetooth: hci1: unexpected cc 0x0c0d length: 7 > 5
[   90.164326][ T5969] loop3: detected capacity change from 0 to 32768
[   90.286565][ T5969] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   90.353910][ T5969] XFS (loop3): Ending clean mount
[   90.374786][ T5969] XFS (loop3): Quotacheck needed: Please wait.
[   90.413161][ T5969] XFS (loop3): Quotacheck: Done.
[   91.693845][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.026232][ T5967] loop2: detected capacity change from 0 to 32768
[   93.138194][ T5766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5766)
[   93.243289][ T5995] loop1: detected capacity change from 0 to 256
[   93.268152][ T5995] exfat: Deprecated parameter 'namecase'
[   93.372500][ T5995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[   94.067141][ T6000] Core dump to core aborted: cannot preserve file permissions
[   94.270111][ T6004] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   94.563147][ T6009] syzkaller0: entered promiscuous mode
[   94.568685][ T6009] syzkaller0: entered allmulticast mode
[   94.784582][ T5991] loop2: detected capacity change from 0 to 32768
[   95.685257][ T5991] JBD2: Ignoring recovery information on journal
[   95.858107][ T5991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   96.011144][ T5991] overlayfs: upper fs does not support tmpfile.
[   96.046789][  T258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.049927][ T5991] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   96.269191][ T5991] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   96.997973][ T5991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   97.153636][ T5991] OCFS2: File system is now read-only.
[   97.159188][ T5991] (syz.2.39,5991,1):ocfs2_search_chain:1761 ERROR: status = -30
[   97.242983][ T5991] (syz.2.39,5991,1):ocfs2_search_chain:1871 ERROR: status = -30
[   97.250694][ T5991] (syz.2.39,5991,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   97.302538][ T5991] (syz.2.39,5991,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   97.323742][  T258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.338714][ T5991] (syz.2.39,5991,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[   97.360308][ T5991] (syz.2.39,5991,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[   97.386430][ T5991] (syz.2.39,5991,0):ocfs2_create_xattr_block:2887 ERROR: status = -30
[   97.406836][ T5991] (syz.2.39,5991,0):ocfs2_xattr_block_set:2968 ERROR: status = -30
[   97.437775][ T5991] overlayfs: failed to set xattr on upper
[   97.463342][ T5991] overlayfs: ...falling back to redirect_dir=nofollow.
[   97.487778][ T5991] overlayfs: ...falling back to index=off.
[   97.508475][ T5991] overlayfs: ...falling back to uuid=null.
[   97.508495][  T258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.537291][ T5991] overlayfs: upper fs missing required features.
[   97.634938][ T6026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.689351][  T258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.724666][ T6019] loop3: detected capacity change from 0 to 32768
[   97.771222][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.791110][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.799982][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.810750][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.813184][ T5772] ocfs2: Unmounting device (7,2) on (node local)
[   97.826886][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   97.835492][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.963771][ T6019] read_mapping_page failed!
[   97.968674][ T6019] ERROR: (device loop3): txCommit: 
[   97.968674][ T6019] 
[   98.388511][ T6028] chnl_net:caif_netlink_parms(): no params data found
[   98.430122][ T6038] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure
[   98.468729][ T6038] loop2: detected capacity change from 0 to 256
[   98.797298][ T6050] comedi comedi1: 8255: I/O port conflict (0x8,4)
[   98.805603][ T6050] comedi comedi1: 8255: I/O port conflict (0xffffffff8000fca8,4)
[   98.813875][ T6050] comedi comedi1: 8255: I/O port conflict (0xe,4)
[   98.824900][ T6050] comedi comedi1: 8255: I/O port conflict (0x840005,4)
[   98.831892][ T6050] comedi comedi1: 8255: I/O port conflict (0xffffffff80000001,4)
[   98.842092][ T6050] comedi comedi1: 8255: I/O port conflict (0x6,4)
[   98.852067][ T6050] comedi comedi1: 8255: I/O port conflict (0x6,4)
[   98.861482][ T6050] comedi comedi1: 8255: I/O port conflict (0xfffffffffeffffff,4)
[   98.872703][ T6050] comedi comedi1: 8255: I/O port conflict (0xb,4)
[   98.879248][ T6050] comedi comedi1: 8255: I/O port conflict (0x1,4)
[   98.886353][ T6050] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4)
[   98.895382][ T6050] comedi comedi1: 8255: I/O port conflict (0x2,4)
[   98.901992][ T6050] comedi comedi1: 8255: I/O port conflict (0x3,4)
[   98.920536][ T6050] comedi comedi1: 8255: I/O port conflict (0x5,4)
[   98.920774][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.932549][ T6050] comedi comedi1: 8255: I/O port conflict (0x4007a,4)
[   98.950055][ T6050] comedi comedi1: 8255: I/O port conflict (0x5,4)
[   98.956884][ T6050] comedi comedi1: 8255: I/O port conflict (0x3,4)
[   98.963718][ T6050] comedi comedi1: 8255: I/O port conflict (0xa,4)
[   98.970299][ T6050] comedi comedi1: 8255: I/O port conflict (0x12,4)
[   98.972818][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.977868][ T6050] comedi comedi1: 8255: I/O port conflict (0x100007f,4)
[   98.991240][ T6050] comedi comedi1: 8255: I/O port conflict (0x5,4)
[   98.998046][ T6050] comedi comedi1: 8255: I/O port conflict (0x1,4)
[   99.012651][ T6028] bridge_slave_0: entered allmulticast mode
[   99.042642][ T6028] bridge_slave_0: entered promiscuous mode
[   99.098426][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.113991][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.121206][ T6028] bridge_slave_1: entered allmulticast mode
[   99.146298][ T6028] bridge_slave_1: entered promiscuous mode
[   99.153322][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.266803][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.310362][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.364399][ T5812] usb 4-1: config 227 has an invalid interface number: 20 but max is 0
[   99.393497][ T5812] usb 4-1: config 227 has no interface number 0
[   99.421636][ T5812] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[   99.452913][ T5812] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[   99.485991][ T5812] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[   99.517119][ T5812] usb 4-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   99.540494][ T5812] usb 4-1: config 227 interface 20 has no altsetting 0
[   99.544916][ T6028] team0: Port device team_slave_0 added
[   99.563374][ T5812] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[   99.607853][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.632481][ T5812] usb 4-1: Product: syz
[   99.636681][ T5812] usb 4-1: Manufacturer: syz
[   99.638689][ T6028] team0: Port device team_slave_1 added
[   99.641264][ T5812] usb 4-1: SerialNumber: syz
[   99.670277][ T6048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.802154][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.815085][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.841860][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.902774][   T51] Bluetooth: hci3: command tx timeout
[   99.918601][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.925886][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.954787][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.004796][ T6058] loop2: detected capacity change from 0 to 32768
[  100.029177][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'.
[  100.069003][ T6058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.56 (6058)
[  100.195375][ T6058] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.226267][ T6028] hsr_slave_0: entered promiscuous mode
[  100.232670][ T6058] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  100.241365][ T6058] BTRFS info (device loop2): force clearing of disk cache
[  100.280842][ T6058] BTRFS info (device loop2): enabling auto defrag
[  100.298281][ T6028] hsr_slave_1: entered promiscuous mode
[  100.308394][ T6058] BTRFS info (device loop2): max_inline at 0
[  100.341993][ T6028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.343415][ T6058] BTRFS info (device loop2): enabling disk space caching
[  100.381974][ T6028] Cannot create hsr debugfs directory
[  100.419942][ T6058] BTRFS info (device loop2): disk space caching is enabled
[  100.559462][ T6074] loop3: detected capacity change from 0 to 4096
[  100.818390][ T6058] BTRFS info (device loop2): enabling ssd optimizations
[  100.838820][ T6058] BTRFS info (device loop2): rebuilding free space tree
[  100.968559][ T6058] BTRFS info (device loop2): disabling free space tree
[  100.987896][ T6058] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  100.997517][ T5812] usb 4-1: USB disconnect, device number 2
[  101.019427][ T6058] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.411436][  T258] hsr_slave_0: left promiscuous mode
[  101.450074][  T258] hsr_slave_1: left promiscuous mode
[  101.475719][  T258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.492663][  T258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.525890][  T258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.542499][  T258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.560590][  T258] bridge_slave_1: left allmulticast mode
[  101.578313][  T258] bridge_slave_1: left promiscuous mode
[  101.593975][  T258] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.654837][  T258] bridge_slave_0: left allmulticast mode
[  101.680850][  T258] bridge_slave_0: left promiscuous mode
[  101.693803][  T258] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.772394][  T258] veth1_macvtap: left promiscuous mode
[  101.799602][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.811095][  T258] veth0_macvtap: left promiscuous mode
[  101.825794][  T258] veth1_vlan: left promiscuous mode
[  101.831406][  T258] veth0_vlan: left promiscuous mode
[  101.973148][ T5101] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.982797][   T51] Bluetooth: hci3: command tx timeout
[  102.192906][ T5101] usb 1-1: Using ep0 maxpacket: 16
[  102.228217][ T5101] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  102.245089][ T5101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.278920][ T5101] usb 1-1: Product: syz
[  102.283195][ T5101] usb 1-1: Manufacturer: syz
[  102.287810][ T5101] usb 1-1: SerialNumber: syz
[  102.312560][ T5101] usb 1-1: config 0 descriptor??
[  102.336219][ T5101] hub 1-1:0.0: bad descriptor, ignoring hub
[  102.342219][ T5101] hub: probe of 1-1:0.0 failed with error -5
[  102.436159][ T5101] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  102.485028][   T42] usb 1-1: Failed to submit usb control message: -71
[  102.519235][   T42] usb 1-1: unable to send the bmi data to the device: -71
[  102.550408][   T42] usb 1-1: unable to get target info from device
[  102.562156][   T42] usb 1-1: could not get target info (-71)
[  102.594105][   T42] usb 1-1: could not probe fw (-71)
[  103.400082][ T6126] loop2: detected capacity change from 0 to 40427
[  103.426570][ T6126] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff
[  103.465798][  T258] team0 (unregistering): Port device team_slave_1 removed
[  103.611198][  T258] team0 (unregistering): Port device team_slave_0 removed
[  103.703931][  T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.817437][  T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.064842][   T51] Bluetooth: hci3: command tx timeout
[  104.243667][ T6131] loop2: detected capacity change from 0 to 32768
[  104.315893][ T6131] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.418219][  T258] bond0 (unregistering): Released all slaves
[  104.488548][ T6131] XFS (loop2): Ending clean mount
[  104.506997][ T6131] XFS (loop2): Quotacheck needed: Please wait.
[  104.515217][ T1205] usb 1-1: USB disconnect, device number 2
[  104.641477][ T6131] XFS (loop2): Quotacheck: Done.
[  105.605596][ T6028] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.656433][ T6028] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.680387][ T6028] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.861366][ T6148] loop3: detected capacity change from 0 to 32768
[  105.902168][ T6028] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.914881][ T6148] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  106.142559][   T51] Bluetooth: hci3: command tx timeout
[  106.503379][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.750933][ T6148] XFS (loop3): Ending clean mount
[  108.307642][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.380959][ T6028] 8021q: adding VLAN 0 to HW filter on device team0
[  108.407819][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.414982][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.564237][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  108.613346][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.620474][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.649136][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  108.717079][ T6178] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  109.334928][ T6028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  109.381691][ T6028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  110.247388][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.161306][ T6028] veth0_vlan: entered promiscuous mode
[  111.191105][ T6028] veth1_vlan: entered promiscuous mode
[  111.269333][ T6028] veth0_macvtap: entered promiscuous mode
[  111.292803][ T5812] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  111.296092][ T6028] veth1_macvtap: entered promiscuous mode
[  111.315325][ T6197] loop2: detected capacity change from 0 to 32768
[  111.341513][ T6197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.67 (6197)
[  111.380124][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.436354][ T6197] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.448297][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.461763][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.482658][ T6197] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  111.491333][ T6197] BTRFS info (device loop2): using free space tree
[  111.498312][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.510068][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.514410][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.523631][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.541496][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.557242][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.567837][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.578662][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.593418][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.604285][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.657422][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.685941][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.710342][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.732582][ T6197] BTRFS info (device loop2): enabling ssd optimizations
[  111.740198][ T6197] BTRFS info (device loop2): auto enabling async discard
[  111.765906][ T6028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.828064][ T6028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.872515][ T6028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.881270][ T6028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.216794][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.252601][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.268238][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.312967][ T5812] usb 4-1: no configurations
[  112.317620][ T5812] usb 4-1: can't read configurations, error -22
[  112.340554][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.368794][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.492393][   T49] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  112.734391][ T6256] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  112.829144][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.585442][ T5829] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  114.783367][ T5829] usb 4-1: Using ep0 maxpacket: 32
[  114.822811][ T5829] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  114.852153][ T5829] usb 4-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config
[  114.900165][ T5829] usb 4-1: config 0 has no interface number 0
[  114.921599][ T5829] usb 4-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  114.982518][ T5829] usb 4-1: config 0 interface 12 has no altsetting 0
[  114.989370][ T5829] usb 4-1: New USB device found, idVendor=0042, idProduct=0001, bcdDevice= 0.00
[  115.007921][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.043340][ T5829] usb 4-1: config 0 descriptor??
[  116.962660][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  117.174418][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.205333][ T6340] Zero length message leads to an empty skb
[  117.211345][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.222169][   T34] usb 4-1: USB disconnect, device number 5
[  117.251162][ T5861] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  117.297733][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.577176][ T5861] usb 1-1: config 0 descriptor??
[  118.199354][ T5861] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0
[  118.234585][ T5861] playstation 0003:054C:0BA0.0001: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0
[  118.362616][ T5861] playstation 0003:054C:0BA0.0001: Invalid byte count transferred, expected 16 got 0
[  118.403588][ T5861] playstation 0003:054C:0BA0.0001: Failed to retrieve DualShock4 pairing info: -22
[  118.448038][ T5861] playstation 0003:054C:0BA0.0001: Failed to get MAC address from DualShock4
[  118.509165][ T5861] playstation 0003:054C:0BA0.0001: Failed to create dualshock4.
[  118.509414][   T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  118.809029][ T5861] playstation: probe of 0003:054C:0BA0.0001 failed with error -22
[  119.164724][ T5861] usb 1-1: USB disconnect, device number 3
[  119.364293][   T34] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  119.373086][   T34] usb 5-1: config 227 has no interface number 0
[  119.379391][   T34] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  119.391853][   T34] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  119.407800][   T34] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  119.440371][   T34] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  119.483398][   T34] usb 5-1: config 227 interface 20 has no altsetting 0
[  119.523334][   T34] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  119.541907][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.572675][   T27] audit: type=1326 audit(1782210746.802:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c66f9ce59 code=0x7ffc0000
[  119.594375][   T34] usb 5-1: Product: syz
[  119.600566][   T34] usb 5-1: Manufacturer: syz
[  119.606203][   T27] audit: type=1326 audit(1782210746.812:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c66f9ce59 code=0x7ffc0000
[  119.633427][   T34] usb 5-1: SerialNumber: syz
[  119.691174][   T27] audit: type=1326 audit(1782210746.812:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c66f9ce59 code=0x7ffc0000
[  119.694910][ T6359] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  119.722092][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.768205][   T27] audit: type=1326 audit(1782210746.812:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c66f9ce59 code=0x7ffc0000
[  119.877338][   T27] audit: type=1326 audit(1782210746.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.0.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c66f9ce59 code=0x7ffc0000
[  119.995210][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'.
[  120.342573][ T6402] loop4: detected capacity change from 0 to 4096
[  120.674348][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.763693][   T34] usb 5-1: USB disconnect, device number 2
[  120.877298][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.113424][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.278681][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.269486][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.278739][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.287665][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.307079][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.317171][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  122.332745][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.433372][   T34] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.673094][   T34] usb 1-1: Using ep0 maxpacket: 8
[  122.709289][   T34] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  122.727872][   T34] usb 1-1: config 179 has no interface number 0
[  122.744775][   T34] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  122.778734][   T34] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  122.799936][   T34] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  122.828633][   T34] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  122.872681][   T34] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  122.906487][   T34] usb 1-1: config 179 interface 65 has no altsetting 0
[  122.922545][   T34] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  122.941377][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.026902][   T34] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6
[  123.078112][ T6443] loop3: detected capacity change from 0 to 256
[  123.087015][ T5127] input input6: unable to receive magic message: -110
[  123.103458][ T5127] input input6: unable to receive magic message: -32
[  123.171163][ T5127] input input6: unable to receive magic message: -32
[  123.242538][ T5127] input input6: unable to receive magic message: -32
[  123.254664][   T34] usb 1-1: USB disconnect, device number 4
[  123.254732][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  123.255204][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  123.387732][   T34] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  123.509153][ T6451] autofs4:pid:6451:autofs_fill_super: called with bogus options
[  123.585176][ T6429] chnl_net:caif_netlink_parms(): no params data found
[  123.761879][ T6451] loop3: detected capacity change from 0 to 512
[  124.472648][ T5087] Bluetooth: hci1: command tx timeout
[  125.333108][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.340227][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.492675][ T6429] bridge_slave_0: entered allmulticast mode
[  125.499947][ T6429] bridge_slave_0: entered promiscuous mode
[  125.525044][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.532165][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.539746][ T6429] bridge_slave_1: entered allmulticast mode
[  125.553830][ T6429] bridge_slave_1: entered promiscuous mode
[  125.928732][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.261503][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.409507][   T42] hsr_slave_0: left promiscuous mode
[  126.459769][   T42] hsr_slave_1: left promiscuous mode
[  126.470769][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.497531][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[  126.500123][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.542572][ T5087] Bluetooth: hci1: command tx timeout
[  126.559556][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.579565][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.595553][   T42] bridge_slave_1: left allmulticast mode
[  126.612588][   T42] bridge_slave_1: left promiscuous mode
[  126.618368][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.650613][   T42] bridge_slave_0: left allmulticast mode
[  126.670055][   T42] bridge_slave_0: left promiscuous mode
[  126.689642][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.746788][   T42] veth1_macvtap: left promiscuous mode
[  126.752361][   T42] veth0_macvtap: left promiscuous mode
[  126.758310][   T42] veth1_vlan: left promiscuous mode
[  126.773840][   T42] veth0_vlan: left promiscuous mode
[  127.698844][  T789] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  127.903219][  T789] usb 4-1: config 227 has an invalid interface number: 20 but max is 0
[  127.924346][  T789] usb 4-1: config 227 has no interface number 0
[  127.930656][  T789] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  127.958591][  T789] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  127.980409][  T789] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  128.006541][  T789] usb 4-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  128.036832][  T789] usb 4-1: config 227 interface 20 has no altsetting 0
[  128.056477][  T789] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  128.069663][   T42] team0 (unregistering): Port device team_slave_1 removed
[  128.077093][  T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.095458][  T789] usb 4-1: Product: syz
[  128.099720][  T789] usb 4-1: Manufacturer: syz
[  128.110277][  T789] usb 4-1: SerialNumber: syz
[  128.132817][ T6497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.154595][   T42] team0 (unregistering): Port device team_slave_0 removed
[  128.199942][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.278981][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.622590][ T5087] Bluetooth: hci1: command tx timeout
[  128.857350][ T6506] loop3: detected capacity change from 0 to 4096
[  129.230691][   T42] bond0 (unregistering): Released all slaves
[  129.361786][ T6429] team0: Port device team_slave_0 added
[  129.373496][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[  129.402753][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'.
[  129.486855][ T6429] team0: Port device team_slave_1 added
[  129.563563][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.570541][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.618216][  T789] usb 4-1: USB disconnect, device number 6
[  129.684466][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.745329][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.759737][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.817694][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.040345][ T6429] hsr_slave_0: entered promiscuous mode
[  130.081402][ T6429] hsr_slave_1: entered promiscuous mode
[  130.102009][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.132643][ T6429] Cannot create hsr debugfs directory
[  130.288014][ T6437] Set syz1 is full, maxelem 65536 reached
[  130.461541][ T6529] loop3: detected capacity change from 0 to 256
[  130.712624][ T5087] Bluetooth: hci1: command tx timeout
[  131.784759][ T6429] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.814532][ T6429] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.845816][ T6429] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  131.865765][ T6429] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.003607][ T1205] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  132.078651][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.154360][ T6429] 8021q: adding VLAN 0 to HW filter on device team0
[  132.207323][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.214455][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.233015][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  132.253939][ T1205] usb 1-1: config 0 has no interfaces?
[  132.280670][ T1205] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  132.280972][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.296907][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.302512][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.375813][ T1205] usb 1-1: config 0 descriptor??
[  132.441364][ T6548] loop3: detected capacity change from 0 to 32768
[  132.516260][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.596536][ T6548] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.720205][ T6548] XFS (loop3): Ending clean mount
[  132.866748][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873589][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  132.943937][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.138546][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.836224][ T6429] veth0_vlan: entered promiscuous mode
[  133.867806][ T6429] veth1_vlan: entered promiscuous mode
[  133.961616][ T6429] veth0_macvtap: entered promiscuous mode
[  134.003001][ T6429] veth1_macvtap: entered promiscuous mode
[  134.085698][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.122580][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.145454][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.169821][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.190650][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.232735][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.244837][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.272724][ T1205] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.276309][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.318403][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.346593][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.357942][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.388740][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.401573][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.407006][ T6613] loop3: detected capacity change from 0 to 256
[  134.417484][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.437108][ T6613] exfat: Deprecated parameter 'utf8'
[  134.461988][ T6429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.484763][ T1205] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  134.494309][ T1205] usb 5-1: config 227 has no interface number 0
[  134.496041][ T6429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.520308][ T1205] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  134.531630][ T6429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.541397][ T6613] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  134.552470][ T6429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.582005][ T1205] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  134.623525][ T1205] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  134.679389][ T1205] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  134.728838][ T1205] usb 5-1: config 227 interface 20 has no altsetting 0
[  134.761047][ T1205] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  134.772342][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.788948][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.815460][ T1205] usb 5-1: Product: syz
[  134.819057][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.827591][ T1205] usb 5-1: Manufacturer: syz
[  134.836735][ T1205] usb 5-1: SerialNumber: syz
[  134.862302][ T6603] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  134.880490][ T6619] loop3: detected capacity change from 0 to 256
[  134.896413][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.909649][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.075771][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'.
[  135.141592][ T6624] loop3: detected capacity change from 0 to 64
[  135.625072][ T5829] usb 1-1: USB disconnect, device number 5
[  135.708088][ T6628] loop4: detected capacity change from 0 to 4096
[  137.136001][ T6628] ntfs3: loop4: Failed to read $AttrDef (-4).
[  137.772313][ T1205] usb 5-1: USB disconnect, device number 3
[  138.149500][ T6657] loop3: detected capacity change from 0 to 256
[  138.857138][ T6670] netlink: 'syz.3.148': attribute type 19 has an invalid length.
[  140.011658][ T6676] loop4: detected capacity change from 0 to 32768
[  140.421957][ T6676] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong
[  140.421957][ T6676] 
[  140.474043][ T6676] ERROR: (device loop4): remounting filesystem as read-only
[  140.481478][ T6676] ialloc: diAlloc returned -5!
[  141.056971][ T6683] Bluetooth: MGMT ver 1.22
[  141.419776][ T5101] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  141.624625][ T5101] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  141.633151][ T5101] usb 5-1: config 227 has no interface number 0
[  141.640414][ T5101] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  141.692317][ T5101] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  141.722477][ T5101] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  141.762508][ T5101] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  141.782483][ T5101] usb 5-1: config 227 interface 20 has no altsetting 0
[  141.802134][ T5101] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  141.811604][ T5101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.823314][ T5101] usb 5-1: Product: syz
[  141.827769][ T5101] usb 5-1: Manufacturer: syz
[  141.842472][ T5101] usb 5-1: SerialNumber: syz
[  141.854536][ T6688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  142.067274][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'.
[  142.685731][ T6714] loop4: detected capacity change from 0 to 4096
[  143.301448][ T6726] syzkaller0: entered promiscuous mode
[  143.302316][ T5101] usb 5-1: USB disconnect, device number 4
[  143.322541][ T6726] syzkaller0: entered allmulticast mode
[  143.544766][ T6733] loop3: detected capacity change from 0 to 512
[  143.563028][ T6733] EXT4-fs: Ignoring removed nobh option
[  143.590639][ T6733] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  143.611083][ T6733] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  143.645239][ T6733] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.160: inode has both inline data and extents flags
[  143.737187][ T6733] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.160: couldn't read orphan inode 13 (err -117)
[  143.843885][ T6733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.958677][ T6733] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  144.106065][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.402570][ T5101] IPVS: starting estimator thread 0...
[  145.529566][ T6771] IPVS: using max 18 ests per chain, 43200 per kthread
[  148.142868][ T5087] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  148.149424][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  148.491191][ T6811] loop4: detected capacity change from 0 to 32768
[  148.564712][ T6811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.178 (6811)
[  148.675320][ T6811] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.746047][ T6811] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  148.814792][ T6811] BTRFS info (device loop4): using free space tree
[  149.159630][ T6811] BTRFS info (device loop4): enabling ssd optimizations
[  149.211637][ T6811] BTRFS info (device loop4): auto enabling async discard
[  150.222546][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  150.566741][ T6028] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.162752][ T5101] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  152.323389][ T5101] usb 6-1: device descriptor read/64, error -71
[  152.603565][ T5101] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  152.786698][ T5101] usb 6-1: device descriptor read/64, error -71
[  152.924440][ T5101] usb usb6-port1: attempt power cycle
[  153.334025][ T5101] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  153.363503][ T5101] usb 6-1: device descriptor read/8, error -71
[  153.637116][ T5101] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  153.673168][ T6903] loop3: detected capacity change from 0 to 16
[  153.685784][ T5101] usb 6-1: device descriptor read/8, error -71
[  153.708674][ T6903] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  153.724493][ T6903] erofs: DAX unsupported by block device. Turning off DAX.
[  153.808460][ T5101] usb usb6-port1: unable to enumerate USB device
[  154.464396][ T6925] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[  155.012508][   T23] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  155.224757][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  155.246633][   T23] usb 6-1: config 0 has no interface number 0
[  155.253779][ T6941] syz.0.200 uses obsolete (PF_INET,SOCK_PACKET)
[  155.271189][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  155.312192][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  155.349844][   T23] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  155.390652][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.430812][   T23] usb 6-1: config 0 descriptor??
[  155.449996][ T6932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  155.779797][   T23] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  156.064527][   T23] usb 6-1: USB disconnect, device number 6
[  156.241506][ T6910] loop3: detected capacity change from 0 to 65536
[  156.350081][ T6910] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  156.522536][ T1205] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  157.193267][ T6910] XFS (loop3): Ending clean mount
[  157.251532][ T6972] loop5: detected capacity change from 0 to 4096
[  157.300075][ T6910] XFS (loop3): Quotacheck needed: Please wait.
[  157.362629][ T1205] usb 5-1: device descriptor read/64, error -71
[  157.371246][   T23] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[  157.450437][   T23] XFS (loop3): Unmount and run xfs_repair
[  157.481784][   T23] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  157.496677][   T23] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  157.523845][ T6976] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.551681][   T23] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  157.610988][   T23] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  157.642512][ T1205] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.663329][   T23] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  157.681038][   T23] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  157.802467][   T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  157.811373][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  157.852863][ T1205] usb 5-1: device descriptor read/64, error -71
[  157.948029][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  157.973571][   T12] XFS (loop3): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74
[  157.992798][ T1205] usb usb5-port1: attempt power cycle
[  158.046398][ T6910] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  158.118029][ T6972] syz.5.204 (6972) used greatest stack depth: 19696 bytes left
[  158.326061][ T5771] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  158.604205][ T1205] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.644498][ T1205] usb 5-1: device descriptor read/8, error -71
[  158.932526][ T1205] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  158.986366][ T1205] usb 5-1: device descriptor read/8, error -71
[  159.277231][ T1205] usb usb5-port1: unable to enumerate USB device
[  159.485487][ T7016] loop4: detected capacity change from 0 to 512
[  159.593035][ T7016] EXT4-fs (loop4): 1 truncate cleaned up
[  159.619302][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.686471][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.849362][ T7036] loop5: detected capacity change from 0 to 1024
[  160.893583][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'.
[  161.197029][ T7047] loop3: detected capacity change from 0 to 256
[  161.225433][ T7047] exfat: Deprecated parameter 'namecase'
[  161.231151][ T7047] exfat: Deprecated parameter 'namecase'
[  161.469323][ T7047] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  162.355231][ T5861] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  162.512566][ T5861] usb 1-1: device descriptor read/64, error -71
[  162.894784][ T5861] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  163.204789][ T5861] usb 1-1: device descriptor read/64, error -71
[  163.373895][ T5861] usb usb1-port1: attempt power cycle
[  163.794444][ T5861] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  163.853345][ T5861] usb 1-1: device descriptor read/8, error -71
[  164.040840][ T7096] loop4: detected capacity change from 0 to 1024
[  164.742575][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  164.822065][   T27] audit: type=1800 audit(1782210792.062:7): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.233" name="file1" dev="loop4" ino=20 res=0 errno=0
[  165.016546][ T7105] loop5: detected capacity change from 0 to 256
[  165.024209][ T5861] usb 1-1: device not accepting address 9, error -71
[  165.038804][ T5861] usb usb1-port1: unable to enumerate USB device
[  165.144820][ T7113] loop3: detected capacity change from 0 to 128
[  165.254839][ T7113] EXT4-fs: Ignoring removed i_version option
[  165.552526][ T5861] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  165.770149][ T7113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  165.805870][ T7113] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  165.937411][ T5861] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.965261][ T5861] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  165.991317][ T5861] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.022289][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0
[  166.045797][ T5861] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  166.046438][ T7113] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.238: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  166.072801][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.116295][ T5861] usb 1-1: config 0 descriptor??
[  166.132775][ T7107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  166.399603][ T7133] fuse: root generation should be zero
[  166.410583][ T5861] usbhid 1-1:0.0: can't add hid device: -71
[  166.422582][ T5861] usbhid: probe of 1-1:0.0 failed with error -71
[  166.440572][ T5861] usb 1-1: USB disconnect, device number 10
[  166.476621][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.543103][ T5761] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  166.754980][ T5761] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.763665][ T5761] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0
[  166.774436][ T5761] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  166.789932][ T5761] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0
[  166.802544][ T5829] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  166.808054][ T5761] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  166.819173][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.828821][ T5761] usb 5-1: Manufacturer: 疥憝犓嶺⺳꡾霨讕⃿봗蜷岃椶㢊༊ￓ싥⧐뼺茥즸陖禫ꄐ쾃ℎ畬銨쥷砟壈᳍䄧ܐ唴緌竓↔聹
[  166.952641][ T5829] usb 4-1: device descriptor read/64, error -71
[  167.090549][ T5761] usb 5-1: low speed audio streaming not supported
[  167.102514][ T5761] usb 5-1: low speed audio streaming not supported
[  167.165859][ T5761] usb 5-1: USB disconnect, device number 9
[  167.226933][ T5829] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.251296][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.427723][ T5829] usb 4-1: device descriptor read/64, error -71
[  167.552695][ T5829] usb usb4-port1: attempt power cycle
[  167.972676][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  168.200413][ T5829] usb 4-1: device descriptor read/8, error -71
[  168.585423][ T5829] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  168.653411][ T5829] usb 4-1: device descriptor read/8, error -71
[  168.792749][ T5829] usb usb4-port1: unable to enumerate USB device
[  169.062578][ T5761] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  169.174651][ T1205] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  169.300277][ T7179] warning: `syz.4.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  169.337417][ T7179] loop4: detected capacity change from 0 to 8
[  169.351424][ T7179] squashfs: Unknown parameter 'func'
[  169.392717][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  169.487578][ T1205] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  169.654860][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.825417][ T5764] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.836068][ T5761] usb 6-1: Using ep0 maxpacket: 8
[  169.846297][ T5761] usb 6-1: unable to get BOS descriptor or descriptor too short
[  169.855716][ T5761] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16
[  169.857106][ T1205] usb 1-1: config 0 descriptor??
[  169.865651][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 107, changing to 10
[  169.902705][ T5761] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  169.921482][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.048651][ T5761] usb 6-1: Product: syz
[  170.059907][ T5761] usb 6-1: Manufacturer: syz
[  170.072467][ T5761] usb 6-1: SerialNumber: syz
[  170.080683][ T7169] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  170.130026][ T1205] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  170.182305][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.239816][ T1205] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  170.279281][ T1205] usb 1-1: media controller created
[  170.369037][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.400994][ T5761] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  170.439033][ T5761] usb 6-1: MIDIStreaming interface descriptor not found
[  170.524718][ T7198] loop4: detected capacity change from 0 to 256
[  170.577737][ T5761] usb 6-1: USB disconnect, device number 7
[  171.378564][ T1205] stb0899_attach: Driver disabled by Kconfig
[  171.456633][ T1205] az6027: no front-end attached
[  171.456633][ T1205] 
[  171.534422][ T1205] az6027: usb out operation failed. (-71)
[  171.541098][ T1205] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  171.605432][ T1205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  171.754938][ T1205] dvb-usb: schedule remote query interval to 400 msecs.
[  172.592729][ T1205] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  172.614981][ T1205] usb 1-1: USB disconnect, device number 11
[  172.669346][ T7216] loop3: detected capacity change from 0 to 4096
[  172.676654][ T7216] ntfs3: Unknown parameter 'syzkaller'
[  173.604011][ T1205] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  173.688607][ T7230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.266'.
[  173.703781][ T7230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.266'.
[  173.833412][   T51] Bluetooth: hci1: command tx timeout
[  174.188572][ T7232] loop3: detected capacity change from 0 to 256
[  174.404442][ T7236] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.863975][  T789] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  175.109973][  T789] usb 1-1: config 227 has an invalid interface number: 20 but max is 0
[  175.187616][  T789] usb 1-1: config 227 has no interface number 0
[  175.323404][ T7255] loop5: detected capacity change from 0 to 64
[  175.352620][  T789] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  175.391412][  T789] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  175.424168][ T7255] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  175.444642][  T789] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  175.474064][  T789] usb 1-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  175.557252][  T789] usb 1-1: config 227 interface 20 has no altsetting 0
[  175.575149][  T789] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  175.623216][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.631250][  T789] usb 1-1: Product: syz
[  175.662733][  T789] usb 1-1: Manufacturer: syz
[  175.667371][  T789] usb 1-1: SerialNumber: syz
[  175.698506][ T7246] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  175.946783][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'.
[  176.064760][ T7267] syzkaller0: entered promiscuous mode
[  176.087945][ T7267] syzkaller0: entered allmulticast mode
[  176.148302][ T7265] loop5: detected capacity change from 0 to 32768
[  176.166158][ T7265] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  176.174671][ T7265] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  176.198882][ T7244] loop4: detected capacity change from 0 to 32768
[  176.224638][ T7265] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  176.238435][ T5812] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  176.246099][ T5812] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  176.320204][ T7244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.270 (7244)
[  176.336336][ T5812] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 90ms
[  176.380434][ T5812] gfs2: fsid=syz:syz.0: jid=0: Done
[  176.398522][ T7244] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.420773][ T7265] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  176.476361][ T7244] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  176.558541][ T7244] BTRFS info (device loop4): setting nodatasum
[  176.576618][  T789] usb 1-1: USB disconnect, device number 12
[  176.596323][ T7265] gfs2: fsid=syz:syz.0: found 1 quota changes
[  176.614334][ T7244] BTRFS info (device loop4): enabling auto defrag
[  176.657924][ T7244] BTRFS info (device loop4): disabling tree log
[  176.955895][ T7244] BTRFS info (device loop4): using free space tree
[  177.289538][ T7265] mmap: syz.5.275 (7265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  177.405970][ T7244] BTRFS info (device loop4): enabling ssd optimizations
[  177.416045][ T6429] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  177.425202][ T7244] BTRFS info (device loop4): auto enabling async discard
[  177.432999][ T6429] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  177.442234][ T6429] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  177.454619][ T6429] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  177.465123][ T6429] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  177.557796][ T6429] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  177.617798][ T6429] CPU: 0 PID: 6429 Comm: syz-executor Not tainted syzkaller #0
[  177.625379][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  177.635451][ T6429] Call Trace:
[  177.638738][ T6429]  <TASK>
[  177.641683][ T6429]  dump_stack_lvl+0x18c/0x250
[  177.646382][ T6429]  ? show_regs_print_info+0x20/0x20
[  177.651590][ T6429]  ? load_image+0x420/0x420
[  177.656106][ T6429]  ? do_raw_spin_unlock+0x121/0x230
[  177.661329][ T6429]  gfs2_assert_warn_i+0x18b/0x2c0
[  177.666375][ T6429]  gfs2_qd_dispose+0x488/0x580
[  177.671154][ T6429]  gfs2_quota_cleanup+0x40d/0x720
[  177.676189][ T6429]  ? gfs2_make_fs_ro+0x17e/0x320
[  177.681145][ T6429]  ? spin_lock_bucket+0x150/0x150
[  177.686182][ T6429]  ? __might_sleep+0xe0/0xe0
[  177.690788][ T6429]  ? down_write+0x16e/0x200
[  177.695308][ T6429]  ? down_read_killable+0x340/0x340
[  177.700529][ T6429]  ? gfs2_quota_sync+0x595/0x5a0
[  177.705496][ T6429]  gfs2_make_fs_ro+0x2aa/0x320
[  177.710277][ T6429]  ? gfs2_put_super+0x1db/0x930
[  177.715141][ T6429]  ? gfs2_dinode_out+0xb10/0xb10
[  177.720064][ T6429]  ? do_raw_spin_lock+0x11f/0x2b0
[  177.725084][ T6429]  ? __rwlock_init+0x150/0x150
[  177.729847][ T6429]  ? do_raw_spin_unlock+0x121/0x230
[  177.735034][ T6429]  gfs2_put_super+0x224/0x930
[  177.739696][ T6429]  ? gfs2_evict_inode+0x13c0/0x13c0
[  177.744886][ T6429]  generic_shutdown_super+0x134/0x2b0
[  177.750247][ T6429]  kill_block_super+0x44/0x90
[  177.754905][ T6429]  deactivate_locked_super+0x97/0x100
[  177.760276][ T6429]  cleanup_mnt+0x3d7/0x460
[  177.764719][ T6429]  task_work_run+0x1d4/0x260
[  177.769330][ T6429]  ? task_work_cancel+0x220/0x220
[  177.774367][ T6429]  ? exit_to_user_mode_loop+0x3b/0x110
[  177.779850][ T6429]  exit_to_user_mode_loop+0xe6/0x110
[  177.785161][ T6429]  exit_to_user_mode_prepare+0xee/0x180
[  177.790739][ T6429]  syscall_exit_to_user_mode+0x1a/0x50
[  177.796221][ T6429]  do_syscall_64+0x61/0xb0
[  177.800660][ T6429]  ? clear_bhb_loop+0x40/0x90
[  177.805348][ T6429]  ? clear_bhb_loop+0x40/0x90
[  177.810038][ T6429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.815961][ T6429] RIP: 0033:0x7f79a399e097
[  177.820396][ T6429] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  177.840012][ T6429] RSP: 002b:00007fff6e676998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.848442][ T6429] RAX: 0000000000000000 RBX: 00007f79a3a322ca RCX: 00007f79a399e097
[  177.856429][ T6429] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6e676a50
[  177.864415][ T6429] RBP: 00007fff6e676a50 R08: 00007fff6e677a50 R09: 00000000ffffffff
[  177.872403][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6e677ae0
[  177.872562][ T5812] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  177.880369][ T6429] R13: 00007f79a3a322ca R14: 000000000002b498 R15: 00007fff6e677b20
[  177.895918][ T6429]  </TASK>
[  178.284864][ T6028] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.622494][ T5812] usb 4-1: device descriptor read/64, error -71
[  178.922583][ T5812] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  179.312542][ T5812] usb 4-1: device descriptor read/64, error -71
[  180.002865][ T5812] usb usb4-port1: attempt power cycle
[  180.047999][ T7340] syzkaller0: entered promiscuous mode
[  180.086722][ T7340] syzkaller0: entered allmulticast mode
[  180.211318][ T7347] netlink: 'syz.4.290': attribute type 4 has an invalid length.
[  180.405261][ T7353] syzkaller0: entered promiscuous mode
[  180.414587][ T7353] syzkaller0: entered allmulticast mode
[  180.422950][ T1205] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  180.443798][ T5812] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  180.733908][ T5812] usb 4-1: device not accepting address 13, error -71
[  181.507748][ T7359] loop5: detected capacity change from 0 to 32768
[  181.914450][ T7359] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong
[  181.914450][ T7359] 
[  181.928516][ T7359] ERROR: (device loop5): remounting filesystem as read-only
[  181.935943][ T7359] ialloc: diAlloc returned -5!
[  182.274755][ T1205] usb 1-1: config 227 has an invalid interface number: 20 but max is 0
[  182.276750][ T7367] loop4: detected capacity change from 0 to 16
[  182.291373][ T7367] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  182.295600][ T1205] usb 1-1: config 227 has no interface number 0
[  182.315391][ T1205] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  182.328421][ T7367] erofs: DAX unsupported by block device. Turning off DAX.
[  182.401368][ T1205] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  182.445297][ T7370] loop3: detected capacity change from 0 to 512
[  182.454406][ T1205] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  182.505419][ T1205] usb 1-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  182.544026][ T7370] EXT4-fs (loop3): 1 truncate cleaned up
[  182.551780][ T7370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.577747][ T1205] usb 1-1: config 227 interface 20 has no altsetting 0
[  182.641000][ T1205] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  182.664265][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.666856][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.710001][ T1205] usb 1-1: Product: syz
[  182.728894][ T1205] usb 1-1: Manufacturer: syz
[  182.734109][ T1205] usb 1-1: SerialNumber: syz
[  182.768999][ T7343] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  182.989299][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'.
[  183.263417][ T1205] usb 1-1: USB disconnect, device number 13
[  183.335118][ T7396] syzkaller0: entered promiscuous mode
[  183.340628][ T7396] syzkaller0: entered allmulticast mode
[  183.605729][ T7374] loop4: detected capacity change from 0 to 32768
[  183.628278][ T7374] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.640427][  T789] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  183.700362][ T7374] XFS (loop4): Ending clean mount
[  183.714050][ T7374] XFS (loop4): Quotacheck needed: Please wait.
[  183.828161][ T7374] XFS (loop4): Quotacheck: Done.
[  183.841545][  T789] usb 4-1: device descriptor read/64, error -71
[  185.188103][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  185.212833][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  185.293641][  T789] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  185.593238][  T789] usb 4-1: device descriptor read/64, error -71
[  185.643260][ T5101] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  185.661447][ T6028] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.890262][ T5101] usb 1-1: config 227 has an invalid interface number: 20 but max is 0
[  185.940773][ T5101] usb 1-1: config 227 has no interface number 0
[  186.013810][ T5101] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  186.138272][ T5101] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  186.235260][  T789] usb usb4-port1: attempt power cycle
[  186.294005][ T5101] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  186.322724][ T5101] usb 1-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  186.336067][ T5101] usb 1-1: config 227 interface 20 has no altsetting 0
[  186.363024][ T5101] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  186.402609][ T5101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.450741][ T5101] usb 1-1: Product: syz
[  186.462907][ T5101] usb 1-1: Manufacturer: syz
[  186.481115][ T5101] usb 1-1: SerialNumber: syz
[  186.522963][ T7430] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  186.673406][ T7453] loop5: detected capacity change from 0 to 512
[  186.747467][ T7453] EXT4-fs (loop5): 1 truncate cleaned up
[  186.798560][ T7453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.869684][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'.
[  187.352751][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  187.641627][ T6429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.708865][ T5101] usb 1-1: USB disconnect, device number 14
[  187.985289][ T7474] syzkaller0: entered promiscuous mode
[  187.990823][ T7474] syzkaller0: entered allmulticast mode
[  189.262662][  T789] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  190.254429][ T5784] Bluetooth: hci0: command 0x0401 tx timeout
[  190.262077][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  190.263755][  T789] usb 4-1: Using ep0 maxpacket: 8
[  190.327043][  T789] usb 4-1: no configurations
[  190.331691][  T789] usb 4-1: can't read configurations, error -22
[  190.517906][  T789] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  190.742633][  T789] usb 4-1: Using ep0 maxpacket: 8
[  190.754972][  T789] usb 4-1: no configurations
[  190.760105][  T789] usb 4-1: can't read configurations, error -22
[  190.772580][ T5101] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  190.812560][  T789] usb usb4-port1: attempt power cycle
[  190.964234][ T5101] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  190.982475][ T5101] usb 5-1: config 227 has no interface number 0
[  190.983073][ T7528] syzkaller0: entered promiscuous mode
[  190.988769][ T5101] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  191.012595][ T7528] syzkaller0: entered allmulticast mode
[  191.043981][ T5101] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  191.064545][ T5101] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  191.075376][ T5101] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  191.103286][ T5101] usb 5-1: config 227 interface 20 has no altsetting 0
[  191.116995][ T5101] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  191.126099][ T5101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.146550][ T5101] usb 5-1: Product: syz
[  191.150884][ T5101] usb 5-1: Manufacturer: syz
[  191.156079][ T5101] usb 5-1: SerialNumber: syz
[  191.165542][ T7513] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  191.242640][  T789] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  191.262595][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  191.377416][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'.
[  191.508426][  T789] usb 4-1: device not accepting address 20, error -71
[  191.887897][ T7554] loop5: detected capacity change from 0 to 64
[  191.902986][ T5101] usb 5-1: USB disconnect, device number 10
[  192.353300][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  192.442746][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  193.615727][ T7578] syzkaller0: entered promiscuous mode
[  193.621350][ T7578] syzkaller0: entered allmulticast mode
[  193.753293][  T789] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  193.952950][  T789] usb 4-1: Using ep0 maxpacket: 8
[  193.961404][  T789] usb 4-1: no configurations
[  193.990683][  T789] usb 4-1: can't read configurations, error -22
[  194.173635][  T789] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  194.318789][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.325226][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  194.383146][  T789] usb 4-1: Using ep0 maxpacket: 8
[  194.388364][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  194.394523][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  194.408654][  T789] usb 4-1: no configurations
[  194.414683][  T789] usb 4-1: can't read configurations, error -22
[  194.425905][  T789] usb usb4-port1: attempt power cycle
[  194.552656][ T5861] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  194.728558][ T7610] syzkaller0: entered promiscuous mode
[  194.734753][ T7610] syzkaller0: entered allmulticast mode
[  194.754468][ T5861] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  194.765426][ T5861] usb 6-1: config 227 has no interface number 0
[  194.771722][ T5861] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  194.799199][ T5861] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  194.819089][ T5861] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  194.829939][ T5861] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  194.843657][  T789] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  194.851704][ T5861] usb 6-1: config 227 interface 20 has no altsetting 0
[  194.875325][ T5861] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  194.888871][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.903441][  T789] usb 4-1: Using ep0 maxpacket: 8
[  194.912610][ T5861] usb 6-1: Product: syz
[  194.917413][  T789] usb 4-1: no configurations
[  194.927954][ T5861] usb 6-1: Manufacturer: syz
[  194.932948][  T789] usb 4-1: can't read configurations, error -22
[  194.952523][ T5861] usb 6-1: SerialNumber: syz
[  194.961873][ T7596] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  195.103037][  T789] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  195.143500][  T789] usb 4-1: Using ep0 maxpacket: 8
[  195.162621][  T789] usb 4-1: no configurations
[  195.167297][  T789] usb 4-1: can't read configurations, error -22
[  195.175908][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'.
[  195.183037][  T789] usb usb4-port1: unable to enumerate USB device
[  195.233782][ T7617] loop4: detected capacity change from 0 to 64
[  195.980480][ T5861] usb 6-1: USB disconnect, device number 8
[  196.472596][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  196.478743][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  196.703822][ T7638] syzkaller0: entered promiscuous mode
[  196.719558][ T7638] syzkaller0: entered allmulticast mode
[  196.982550][ T5861] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  197.081707][ T7634] loop4: detected capacity change from 0 to 32768
[  197.090610][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[  197.118380][ T7634] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.139516][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[  197.192700][ T5861] usb 1-1: Using ep0 maxpacket: 8
[  197.198498][ T5861] usb 1-1: no configurations
[  197.203543][ T5861] usb 1-1: can't read configurations, error -22
[  197.243305][ T7634] XFS (loop4): Ending clean mount
[  197.367013][ T5861] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  197.493824][ T6028] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.556263][ T7664] loop3: detected capacity change from 0 to 8
[  197.592523][ T5861] usb 1-1: Using ep0 maxpacket: 8
[  198.542915][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  198.750253][ T5861] usb 1-1: no configurations
[  198.992784][ T5861] usb 1-1: can't read configurations, error -22
[  198.999257][ T5861] usb usb1-port1: attempt power cycle
[  199.182351][ T7664] SQUASHFS error: xz decompression failed, data probably corrupt
[  199.224708][ T7664] SQUASHFS error: Failed to read block 0x108: -5
[  199.231057][ T7664] SQUASHFS error: Unable to read metadata cache entry [106]
[  199.285632][ T7664] SQUASHFS error: Unable to read inode 0x11f
[  199.412575][ T5861] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  199.947328][ T5861] usb 1-1: device descriptor read/8, error -71
[  200.371564][ T7680] syzkaller0: entered promiscuous mode
[  200.379454][ T7680] syzkaller0: entered allmulticast mode
[  200.472725][ T5861] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  200.635665][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  200.789110][ T5861] usb 1-1: config 227 has an invalid interface number: 20 but max is 0
[  201.072220][ T5861] usb 1-1: config 227 has no interface number 0
[  201.147101][ T5861] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  201.180878][ T5861] usb 1-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  201.219769][ T5861] usb 1-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  201.230117][ T5861] usb 1-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  201.245037][ T5861] usb 1-1: config 227 interface 20 has no altsetting 0
[  201.260167][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  201.271986][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.300684][ T5861] usb 1-1: Product: syz
[  201.326664][ T5861] usb 1-1: Manufacturer: syz
[  201.366006][ T5861] usb 1-1: SerialNumber: syz
[  201.396824][ T7673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  201.399440][ T7687] loop4: detected capacity change from 0 to 256
[  201.435785][ T7687] exfat: Deprecated parameter 'namecase'
[  201.492386][ T7687] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  201.621651][ T7691] Core dump to core aborted: cannot preserve file permissions
[  201.646313][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[  202.034589][ T5861] usb 1-1: USB disconnect, device number 18
[  202.053973][ T5829] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  202.252519][ T5829] usb 6-1: Using ep0 maxpacket: 8
[  202.266190][ T5829] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  202.285451][ T5829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.322041][ T5829] usb 6-1: config 0 has no interfaces?
[  202.349747][ T5829] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  202.370428][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.392930][ T5829] usb 6-1: Product: syz
[  202.401338][ T5829] usb 6-1: Manufacturer: syz
[  202.427065][ T5829] usb 6-1: SerialNumber: syz
[  202.448897][ T5829] usb 6-1: config 0 descriptor??
[  202.692400][ T1205] usb 6-1: USB disconnect, device number 9
[  203.982820][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  204.472570][ T1205] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  204.492987][ T7744] bond1: entered promiscuous mode
[  204.498434][ T7744] bond1: entered allmulticast mode
[  204.504206][ T7744] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.693354][ T1205] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  204.704883][ T1205] usb 6-1: config 227 has no interface number 0
[  204.711188][ T1205] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  204.759985][ T1205] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  204.806408][ T1205] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  204.833812][ T1205] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  204.871154][ T1205] usb 6-1: config 227 interface 20 has no altsetting 0
[  204.892181][ T1205] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  204.912912][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.937038][ T1205] usb 6-1: Product: syz
[  204.942006][ T1205] usb 6-1: Manufacturer: syz
[  204.972460][ T1205] usb 6-1: SerialNumber: syz
[  204.983015][ T7735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  205.080343][ T7753] loop3: detected capacity change from 0 to 512
[  205.127443][   T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  205.137295][ T7753] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  205.171664][ T7753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.203547][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.391'.
[  205.235165][ T7753] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.398: invalid indirect mapped block 4294967295 (level 1)
[  205.260140][ T7753] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.398: invalid indirect mapped block 4294967295 (level 1)
[  205.332496][   T34] usb 5-1: Using ep0 maxpacket: 8
[  205.342112][   T34] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  205.367711][ T7753] EXT4-fs (loop3): 2 truncates cleaned up
[  205.372666][   T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.385283][ T7753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.404296][   T34] usb 5-1: config 0 has no interfaces?
[  205.432644][   T34] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  205.472485][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.492682][   T27] audit: type=1800 audit(1782210832.732:8): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="file1" dev="loop3" ino=15 res=0 errno=0
[  205.540597][   T34] usb 5-1: Product: syz
[  205.558730][   T34] usb 5-1: Manufacturer: syz
[  205.574723][   T34] usb 5-1: SerialNumber: syz
[  205.611706][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.621851][   T34] usb 5-1: config 0 descriptor??
[  205.702602][ T1205] usb 6-1: USB disconnect, device number 10
[  205.878081][   T34] usb 5-1: USB disconnect, device number 11
[  206.063508][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  206.883525][ T1205] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  207.076970][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.108386][ T1205] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.130838][ T1205] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  207.155821][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.181287][ T1205] usb 6-1: config 0 descriptor??
[  207.395829][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  207.606934][ T5812] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  207.620138][ T1205] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0
[  207.628856][ T5812] usb 5-1: config 227 has no interface number 0
[  207.636973][ T1205] cypress 0003:04B4:07B1.0002: item fetching failed at offset 6/41
[  207.645145][ T5812] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  207.656139][ T1205] cypress 0003:04B4:07B1.0002: parse failed
[  207.656230][ T1205] cypress: probe of 0003:04B4:07B1.0002 failed with error -22
[  207.679146][ T5812] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  207.697472][ T5812] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  207.709733][ T5812] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  207.730841][ T5812] usb 5-1: config 227 interface 20 has no altsetting 0
[  207.741197][ T5812] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  207.758958][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.767246][ T5812] usb 5-1: Product: syz
[  207.771436][ T5812] usb 5-1: Manufacturer: syz
[  207.780719][ T5812] usb 5-1: SerialNumber: syz
[  207.797675][ T7797] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  207.833657][ T1205] usb 6-1: USB disconnect, device number 11
[  208.017657][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'.
[  208.142498][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  208.337734][ T5812] usb 5-1: USB disconnect, device number 12
[  208.457909][ T7812] overlayfs: failed to clone upperpath
[  209.312940][   T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  209.502901][   T34] usb 5-1: Using ep0 maxpacket: 32
[  209.519974][   T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.548664][   T34] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  209.573223][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.591430][   T34] usb 5-1: Product: syz
[  209.595903][   T34] usb 5-1: Manufacturer: syz
[  209.600534][   T34] usb 5-1: SerialNumber: syz
[  209.609333][   T34] usb 5-1: config 0 descriptor??
[  209.824773][ T5812] usb 5-1: USB disconnect, device number 13
[  210.024368][   T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  210.173413][ T7875] syzkaller0: entered promiscuous mode
[  210.184335][ T7875] syzkaller0: entered allmulticast mode
[  210.228421][   T34] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  210.247441][   T34] usb 6-1: config 227 has no interface number 0
[  210.263143][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  210.269495][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  210.288415][   T34] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  210.300125][   T34] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  210.314029][   T34] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  210.324591][   T34] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  210.363315][   T34] usb 6-1: config 227 interface 20 has no altsetting 0
[  210.469787][   T34] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  210.614716][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.749768][   T34] usb 6-1: Product: syz
[  210.832667][   T34] usb 6-1: Manufacturer: syz
[  210.916999][   T34] usb 6-1: SerialNumber: syz
[  211.002987][ T7870] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  212.022465][ T7911] overlayfs: failed to clone upperpath
[  212.303221][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  212.318528][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  214.391685][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  214.407448][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  214.817255][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.436'.
[  214.828057][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[  214.973237][   T34] usb 6-1: USB disconnect, device number 12
[  216.135794][ T7955] syzkaller0: entered promiscuous mode
[  216.141449][ T7955] syzkaller0: entered allmulticast mode
[  216.148879][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[  216.463111][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  216.469227][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  216.619801][ T7953] loop5: detected capacity change from 0 to 32768
[  216.640357][ T7953] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.465 (7953)
[  216.667976][ T7953] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  216.716877][ T7953] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  216.728604][ T7953] BTRFS info (device loop5): using free space tree
[  216.922563][ T7953] BTRFS info (device loop5): enabling ssd optimizations
[  216.938716][ T7953] BTRFS info (device loop5): auto enabling async discard
[  217.141850][ T7990] loop4: detected capacity change from 0 to 4096
[  217.163822][ T7990] EXT4-fs: inline encryption not supported
[  217.206037][ T6429] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  217.225075][ T7990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.240148][ T7990] EXT4-fs (loop4): Test dummy encryption mode enabled
[  217.252579][ T7990] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  217.261581][ T7990] System zones: 0-5
[  217.333523][ T7990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.867841][ T7990] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  217.936784][   T27] audit: type=1804 audit(1782210845.182:9): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.471" name="/newroot/111/file2/bus" dev="loop4" ino=18 res=1 errno=0
[  218.022995][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.151602][ T8006] loop5: detected capacity change from 0 to 4096
[  218.306008][   T27] audit: type=1800 audit(1782210845.562:10): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.474" name="file1" dev="loop5" ino=34 res=0 errno=0
[  218.349749][   T27] audit: type=1800 audit(1782210845.572:11): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.474" name="file1" dev="loop5" ino=34 res=0 errno=0
[  218.552609][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  218.558851][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  220.034188][ T8019] loop5: detected capacity change from 0 to 256
[  220.177095][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[  220.694528][ T5784] Bluetooth: hci0: command 0x0401 tx timeout
[  220.717901][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  221.633801][ T1205] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  221.702535][   T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  221.847162][ T1205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.873189][ T1205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  221.882126][ T1205] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  221.899350][ T1205] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  221.940725][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.961721][ T8040] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  221.973450][ T1205] hub 4-1:1.0: bad descriptor, ignoring hub
[  221.979613][ T1205] hub: probe of 4-1:1.0 failed with error -5
[  221.988456][ T5784] Bluetooth: hci3: command 0x0406 tx timeout
[  221.999601][ T1205] cdc_wdm 4-1:1.0: skipping garbage
[  222.005080][ T1205] cdc_wdm 4-1:1.0: skipping garbage
[  222.043625][ T1205] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  222.259894][   T34] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  222.702509][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  222.708614][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  222.715803][ T1205] cdc_wdm 4-1:1.0: Unknown control protocol
[  222.737423][   T34] usb 6-1: config 227 has no interface number 0
[  222.781556][   T34] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  222.860040][   T34] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  222.883635][   T34] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  222.894858][   T34] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  222.909190][   T34] usb 6-1: config 227 interface 20 has no altsetting 0
[  222.918904][   T34] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  222.932544][   T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.962529][   T34] usb 6-1: Product: syz
[  222.966851][   T34] usb 6-1: Manufacturer: syz
[  222.971492][   T34] usb 6-1: SerialNumber: syz
[  222.997679][ T8043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  223.054455][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.061307][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.067741][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.074360][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.081311][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.087932][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.094240][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.100851][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.107183][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.113787][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.120030][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.126634][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.132881][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.139485][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.145748][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  223.152345][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  223.224278][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.490'.
[  223.364356][   T23] usb 4-1: USB disconnect, device number 26
[  223.518708][   T34] usb 6-1: USB disconnect, device number 13
[  223.706688][ T8073] loop4: detected capacity change from 0 to 32768
[  223.794200][ T8073] ERROR: (device loop4): dbAllocNext: Corrupt dmap page
[  223.794200][ T8073] 
[  223.820956][ T8073] ERROR: (device loop4): remounting filesystem as read-only
[  223.842918][ T8073] ialloc: diAlloc returned -5!
[  224.818343][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  225.495979][ T8112] loop4: detected capacity change from 0 to 32768
[  225.518104][ T8112] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  225.526384][ T8112] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  225.560954][ T8112] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  225.570070][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  225.580388][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  225.596656][ T8118] input: syz1 as /devices/virtual/input/input8
[  225.747813][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 167ms
[  225.763269][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  225.773736][ T8112] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  225.892635][ T5861] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  225.993801][ T8112] gfs2: fsid=syz:syz.0: found 1 quota changes
[  226.288638][ T8126] netlink: 272 bytes leftover after parsing attributes in process `syz.4.514'.
[  226.595184][ T5861] usb 4-1: config 227 has an invalid interface number: 20 but max is 0
[  226.603872][ T5861] usb 4-1: config 227 has no interface number 0
[  226.620380][ T5861] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  226.654660][ T5861] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  226.686527][ T5861] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  226.707452][ T5861] usb 4-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  226.712696][ T6028] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  226.733182][ T6028] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  226.742281][ T5861] usb 4-1: config 227 interface 20 has no altsetting 0
[  226.742313][ T6028] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  226.758819][ T6028] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  226.760807][ T5861] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  226.769073][ T6028] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  226.805760][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.806962][ T6028] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  226.825520][ T5861] usb 4-1: Product: syz
[  226.933987][ T6028] CPU: 0 PID: 6028 Comm: syz-executor Not tainted syzkaller #0
[  226.941591][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  226.951636][ T6028] Call Trace:
[  226.954904][ T6028]  <TASK>
[  226.957815][ T6028]  dump_stack_lvl+0x18c/0x250
[  226.962490][ T6028]  ? show_regs_print_info+0x20/0x20
[  226.967672][ T6028]  ? load_image+0x420/0x420
[  226.972159][ T6028]  ? do_raw_spin_unlock+0x121/0x230
[  226.977346][ T6028]  gfs2_assert_warn_i+0x18b/0x2c0
[  226.982360][ T6028]  gfs2_qd_dispose+0x488/0x580
[  226.987138][ T6028]  gfs2_quota_cleanup+0x40d/0x720
[  226.992170][ T6028]  ? gfs2_make_fs_ro+0x17e/0x320
[  226.997096][ T6028]  ? spin_lock_bucket+0x150/0x150
[  227.002111][ T6028]  ? __might_sleep+0xe0/0xe0
[  227.006681][ T6028]  ? down_write+0x16e/0x200
[  227.011167][ T6028]  ? down_read_killable+0x340/0x340
[  227.016350][ T6028]  ? gfs2_quota_sync+0x595/0x5a0
[  227.021274][ T6028]  gfs2_make_fs_ro+0x2aa/0x320
[  227.026038][ T6028]  ? gfs2_put_super+0x1db/0x930
[  227.030903][ T6028]  ? gfs2_dinode_out+0xb10/0xb10
[  227.035828][ T6028]  ? do_raw_spin_lock+0x11f/0x2b0
[  227.040846][ T6028]  ? __rwlock_init+0x150/0x150
[  227.045614][ T6028]  ? do_raw_spin_unlock+0x121/0x230
[  227.050828][ T6028]  gfs2_put_super+0x224/0x930
[  227.055501][ T6028]  ? gfs2_evict_inode+0x13c0/0x13c0
[  227.060687][ T6028]  generic_shutdown_super+0x134/0x2b0
[  227.066049][ T6028]  kill_block_super+0x44/0x90
[  227.070711][ T6028]  deactivate_locked_super+0x97/0x100
[  227.076071][ T6028]  cleanup_mnt+0x3d7/0x460
[  227.080484][ T6028]  task_work_run+0x1d4/0x260
[  227.085096][ T6028]  ? task_work_cancel+0x220/0x220
[  227.090111][ T6028]  ? exit_to_user_mode_loop+0x3b/0x110
[  227.095559][ T6028]  exit_to_user_mode_loop+0xe6/0x110
[  227.100832][ T6028]  exit_to_user_mode_prepare+0xee/0x180
[  227.106364][ T6028]  syscall_exit_to_user_mode+0x1a/0x50
[  227.111810][ T6028]  do_syscall_64+0x61/0xb0
[  227.116215][ T6028]  ? clear_bhb_loop+0x40/0x90
[  227.120873][ T6028]  ? clear_bhb_loop+0x40/0x90
[  227.125532][ T6028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.131411][ T6028] RIP: 0033:0x7fc33a39e097
[  227.135812][ T6028] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  227.155423][ T6028] RSP: 002b:00007fff92d93148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.163821][ T6028] RAX: 0000000000000000 RBX: 00007fc33a4322ca RCX: 00007fc33a39e097
[  227.171774][ T6028] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff92d93200
[  227.179731][ T6028] RBP: 00007fff92d93200 R08: 00007fff92d94200 R09: 00000000ffffffff
[  227.187682][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff92d94290
[  227.195635][ T6028] R13: 00007fc33a4322ca R14: 00000000000374fa R15: 00007fff92d942d0
[  227.203600][ T6028]  </TASK>
[  227.214414][ T5861] usb 4-1: Manufacturer: syz
[  227.219056][ T5861] usb 4-1: SerialNumber: syz
[  227.241995][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  227.249705][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  227.272697][ T8121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  227.490115][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'.
[  227.778453][ T8143] loop4: detected capacity change from 0 to 256
[  227.923377][ T5861] usb 4-1: USB disconnect, device number 27
[  229.059943][ T8163] No such timeout policy "syz1"
[  229.262719][ T5087] Bluetooth: hci0: command 0x0401 tx timeout
[  229.311284][ T8166] loop4: detected capacity change from 0 to 512
[  229.485557][ T8166] EXT4-fs (loop4): 1 truncate cleaned up
[  229.508494][ T8166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.639409][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.448794][ T8204] loop5: detected capacity change from 0 to 2048
[  232.455810][ T8204] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.505506][ T8204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.518729][ T8204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.633016][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  232.640220][ T5087] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  232.762961][   T34] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  232.964966][   T34] usb 5-1: config 0 has no interfaces?
[  232.970509][   T34] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  232.992814][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.012546][ T5812] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  233.029471][   T34] usb 5-1: config 0 descriptor??
[  233.196654][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.209682][ T5812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.225709][ T5812] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  233.242730][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  233.250745][ T5812] usb 4-1: SerialNumber: syz
[  233.268383][   T34] usb 5-1: USB disconnect, device number 14
[  233.546509][ T5812] usb 4-1: 0:2 : does not exist
[  233.603074][ T5812] usb 4-1: USB disconnect, device number 28
[  233.637794][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.742846][ T8248] futex_wake_op: syz.0.554 tries to shift op by 144; fix this program
[  235.502649][   T51] Bluetooth: hci0: command 0x0401 tx timeout
[  235.502859][ T5087] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  236.198749][ T8266] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  237.412018][ T8281] loop5: detected capacity change from 0 to 512
[  237.475044][ T8281] EXT4-fs (loop5): 1 truncate cleaned up
[  237.566134][ T8281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.778366][ T6429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.918850][ T8257] loop3: detected capacity change from 0 to 40427
[  237.957246][ T8257] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  237.975688][ T8257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  237.986903][ T8257] F2FS-fs (loop3): heap/no_heap options were deprecated
[  238.008014][ T8257] F2FS-fs (loop3): invalid crc value
[  238.040400][ T8257] F2FS-fs (loop3): Found nat_bits in checkpoint
[  238.219144][ T8257] F2FS-fs (loop3): Start checkpoint disabled!
[  238.334025][ T8257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  238.341411][ T8257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  238.632741][  T789] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  238.870749][  T789] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  238.951161][  T789] usb 6-1: config 227 has no interface number 0
[  239.041680][  T789] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  239.241169][  T789] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  239.425484][  T789] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  239.477426][  T789] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  239.523780][  T789] usb 6-1: config 227 interface 20 has no altsetting 0
[  239.547265][  T789] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  239.573528][  T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.581557][  T789] usb 6-1: Product: syz
[  239.616378][  T789] usb 6-1: Manufacturer: syz
[  239.641836][  T789] usb 6-1: SerialNumber: syz
[  239.674921][ T8298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  239.882871][   T34] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  239.886368][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.575'.
[  239.973243][ T5812] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  240.094309][   T34] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  240.117939][   T34] usb 4-1: config 0 has no interface number 0
[  240.135188][   T34] usb 4-1: config 0 interface 41 has no altsetting 0
[  240.159655][   T34] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  240.171695][  T789] usb 6-1: USB disconnect, device number 14
[  240.191214][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.205508][   T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.214079][ T5812] usb 5-1: config 0 has no interfaces?
[  240.219626][   T34] usb 4-1: Product: syz
[  240.245112][ T5812] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  240.261635][   T34] usb 4-1: Manufacturer: syz
[  240.301205][   T34] usb 4-1: SerialNumber: syz
[  240.311695][ T5812] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  240.390228][   T34] usb 4-1: config 0 descriptor??
[  240.414805][ T5812] usb 5-1: Manufacturer: syz
[  240.501759][ T5812] usb 5-1: SerialNumber: syz
[  240.696860][ T5812] usb 5-1: config 0 descriptor??
[  241.060827][ T5812] usb 5-1: USB disconnect, device number 15
[  241.608269][   T34] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  242.277915][ T8359] loop4: detected capacity change from 0 to 512
[  242.401393][ T8359] EXT4-fs (loop4): 1 truncate cleaned up
[  242.439964][ T8359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.594744][   T34] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  242.632005][   T34] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  242.683193][   T34] CoreChips: probe of 4-1:0.41 failed with error -71
[  242.707869][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.719158][   T34] usb 4-1: USB disconnect, device number 29
[  243.154522][ T5761] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  243.486094][ T5761] usb 5-1: config 227 has an invalid interface number: 20 but max is 0
[  243.609523][ T5761] usb 5-1: config 227 has no interface number 0
[  243.702751][ T5761] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  243.763512][ T5761] usb 5-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  243.813671][ T5761] usb 5-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  243.842972][ T5761] usb 5-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  243.859340][ T5761] usb 5-1: config 227 interface 20 has no altsetting 0
[  243.871484][ T5761] usb 5-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  243.880993][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.891136][ T5761] usb 5-1: Product: syz
[  243.895630][ T5761] usb 5-1: Manufacturer: syz
[  243.900239][ T5761] usb 5-1: SerialNumber: syz
[  243.910517][ T8378] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  244.151418][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'.
[  244.237315][ T8398] loop5: detected capacity change from 0 to 512
[  244.314577][ T8398] EXT4-fs (loop5): 1 truncate cleaned up
[  244.324031][ T8398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.416075][ T6429] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.481830][ T5761] usb 5-1: USB disconnect, device number 16
[  244.650098][ T8406] loop5: detected capacity change from 0 to 2048
[  244.992672][ T8407] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.376077][ T8406] syz.5.611 (8406) used greatest stack depth: 19640 bytes left
[  247.583354][ T5781] Bluetooth: hci0: command 0x0401 tx timeout
[  247.583418][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  247.589449][ T5087] Bluetooth: hci1: command 0x0406 tx timeout
[  247.682521][ T5812] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  247.867940][ T5812] usb 6-1: config 227 has an invalid interface number: 20 but max is 0
[  247.886473][ T5812] usb 6-1: config 227 has no interface number 0
[  247.916820][ T5812] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  247.923076][ T8437] loop4: detected capacity change from 0 to 32768
[  247.949351][ T5812] usb 6-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[  247.968854][ T8437] (syz.4.621,8437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.984516][ T5812] usb 6-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[  248.013496][ T5812] usb 6-1: config 227 interface 20 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  248.029482][ T8437] (syz.4.621,8437,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.047186][ T5812] usb 6-1: config 227 interface 20 has no altsetting 0
[  248.064187][ T5812] usb 6-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[  248.083641][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.093847][ T5812] usb 6-1: Product: syz
[  248.102971][ T5812] usb 6-1: Manufacturer: syz
[  248.107658][ T5812] usb 6-1: SerialNumber: syz
[  248.124195][ T8438] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  248.136678][ T8437] JBD2: Ignoring recovery information on journal
[  248.269134][ T8437] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  248.346027][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'.
[  248.497124][ T8437] 
[  248.499505][ T8437] ======================================================
[  248.506531][ T8437] WARNING: possible circular locking dependency detected
[  248.513565][ T8437] syzkaller #0 Not tainted
[  248.517987][ T8437] ------------------------------------------------------
[  248.525010][ T8437] syz.4.621/8437 is trying to acquire lock:
[  248.530913][ T8437] ffff88805d969538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  248.540253][ T8437] 
[  248.540253][ T8437] but task is already holding lock:
[  248.547618][ T8437] ffff88805d4d38e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  248.557914][ T8437] 
[  248.557914][ T8437] which lock already depends on the new lock.
[  248.557914][ T8437] 
[  248.568322][ T8437] 
[  248.568322][ T8437] the existing dependency chain (in reverse order) is:
[  248.577341][ T8437] 
[  248.577341][ T8437] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  248.585876][ T8437]        down_read+0x46/0x2e0
[  248.590576][ T8437]        ocfs2_start_trans+0x3a8/0x6f0
[  248.596063][ T8437]        ocfs2_mknod+0xf33/0x2310
[  248.601114][ T8437]        ocfs2_mkdir+0x196/0x430
[  248.606063][ T8437]        vfs_mkdir+0x2a5/0x470
[  248.610839][ T8437]        do_mkdirat+0x1dc/0x450
[  248.615701][ T8437]        __x64_sys_mkdirat+0x89/0xa0
[  248.621000][ T8437]        do_syscall_64+0x55/0xb0
[  248.625951][ T8437]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.632390][ T8437] 
[  248.632390][ T8437] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  248.639884][ T8437]        ocfs2_start_trans+0x2a9/0x6f0
[  248.645361][ T8437]        ocfs2_xattr_set+0xe98/0x13a0
[  248.650759][ T8437]        __vfs_setxattr+0x437/0x470
[  248.655975][ T8437]        __vfs_setxattr_noperm+0x12a/0x5e0
[  248.661799][ T8437]        vfs_setxattr+0x16b/0x2f0
[  248.666835][ T8437]        ovl_get_workdir+0xc62/0x17c0
[  248.672221][ T8437]        ovl_fill_super+0x151a/0x3970
[  248.677610][ T8437]        get_tree_nodev+0xb5/0x140
[  248.682738][ T8437]        vfs_get_tree+0x8c/0x280
[  248.687693][ T8437]        do_new_mount+0x24a/0xa40
[  248.692730][ T8437]        __se_sys_mount+0x2e7/0x3d0
[  248.697949][ T8437]        do_syscall_64+0x55/0xb0
[  248.702904][ T8437]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.709349][ T8437] 
[  248.709349][ T8437] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  248.719897][ T8437]        down_write+0x97/0x200
[  248.724687][ T8437]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  248.731123][ T8437]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  248.737990][ T8437]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  248.744164][ T8437]        ocfs2_xattr_set+0xc75/0x13a0
[  248.749561][ T8437]        __vfs_setxattr+0x437/0x470
[  248.754789][ T8437]        __vfs_setxattr_noperm+0x12a/0x5e0
[  248.760619][ T8437]        vfs_setxattr+0x16b/0x2f0
[  248.765662][ T8437]        ovl_get_workdir+0xc62/0x17c0
[  248.771049][ T8437]        ovl_fill_super+0x151a/0x3970
[  248.776435][ T8437]        get_tree_nodev+0xb5/0x140
[  248.781558][ T8437]        vfs_get_tree+0x8c/0x280
[  248.786507][ T8437]        do_new_mount+0x24a/0xa40
[  248.791540][ T8437]        __se_sys_mount+0x2e7/0x3d0
[  248.796747][ T8437]        do_syscall_64+0x55/0xb0
[  248.801696][ T8437]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.808129][ T8437] 
[  248.808129][ T8437] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  248.815962][ T8437]        __lock_acquire+0x37ef/0x7d80
[  248.821349][ T8437]        lock_acquire+0x19e/0x420
[  248.826393][ T8437]        down_read+0x46/0x2e0
[  248.831085][ T8437]        ocfs2_init_acl+0x30a/0x770
[  248.836294][ T8437]        ocfs2_mknod+0x1427/0x2310
[  248.841422][ T8437]        ocfs2_create+0x196/0x430
[  248.846459][ T8437]        path_openat+0x1705/0x3270
[  248.851579][ T8437]        do_filp_open+0x1f2/0x430
[  248.856611][ T8437]        do_sys_openat2+0x134/0x1d0
[  248.861826][ T8437]        __x64_sys_openat+0x139/0x160
[  248.866688][ T8461] loop3: detected capacity change from 0 to 4096
[  248.867196][ T8437]        do_syscall_64+0x55/0xb0
[  248.867221][ T8437]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.884874][ T8437] 
[  248.884874][ T8437] other info that might help us debug this:
[  248.884874][ T8437] 
[  248.890980][ T8461] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  248.895088][ T8437] Chain exists of:
[  248.895088][ T8437]   &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier
[  248.895088][ T8437] 
[  248.895127][ T8437]  Possible unsafe locking scenario:
[  248.895127][ T8437] 
[  248.895133][ T8437]        CPU0                    CPU1
[  248.895137][ T8437]        ----                    ----
[  248.895142][ T8437]   rlock(&journal->j_trans_barrier);
[  248.895153][ T8437]                                lock(sb_internal#3);
[  248.895170][ T8437]                                lock(&journal->j_trans_barrier);
[  248.895184][ T8437]   rlock(&oi->ip_xattr_sem);
[  248.895197][ T8437] 
[  248.895197][ T8437]  *** DEADLOCK ***
[  248.895197][ T8437] 
[  248.895201][ T8437] 8 locks held by syz.4.621/8437:
[  248.895212][ T8437]  #0: ffff88807e54a418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  248.983135][ T8437]  #1: ffff88805d969818 (&type->i_mutex_dir_key#19){+.+.}-{3:3}, at: path_openat+0x7f4/0x3270
[  248.993409][ T8437]  #2: ffff88805620a658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  249.007067][ T8437]  #3: ffff888056209818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  249.020726][ T8437]  #4: ffff88805620c2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620
[  249.034649][ T8437]  #5: ffff88807e54a608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310
[  249.043879][ T8437]  #6: ffff88805d4d38e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  249.054582][ T8437]  #7: ffff88807dc34990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  249.064437][ T8437] 
[  249.064437][ T8437] stack backtrace:
[  249.070314][ T8437] CPU: 0 PID: 8437 Comm: syz.4.621 Not tainted syzkaller #0
[  249.077591][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  249.087637][ T8437] Call Trace:
[  249.090905][ T8437]  <TASK>
[  249.093840][ T8437]  dump_stack_lvl+0x18c/0x250
[  249.098517][ T8437]  ? load_image+0x420/0x420
[  249.103013][ T8437]  ? show_regs_print_info+0x20/0x20
[  249.108208][ T8437]  ? print_circular_bug+0x12b/0x1a0
[  249.113408][ T8437]  check_noncircular+0x2fc/0x400
[  249.118343][ T8437]  ? print_deadlock_bug+0x5d0/0x5d0
[  249.123540][ T8437]  ? _find_first_zero_bit+0xd6/0x100
[  249.128821][ T8437]  ? add_lock_to_list+0x191/0x280
[  249.133843][ T8437]  __lock_acquire+0x37ef/0x7d80
[  249.138688][ T8437]  ? ocfs2_lock_res_init_common+0x32a/0x450
[  249.144587][ T8437]  ? verify_lock_unused+0x140/0x140
[  249.149780][ T8437]  ? __lock_acquire+0x7d80/0x7d80
[  249.154797][ T8437]  ? do_raw_spin_lock+0x11f/0x2b0
[  249.159821][ T8437]  ? ocfs2_local_write_dquot+0x243/0x370
[  249.165465][ T8437]  lock_acquire+0x19e/0x420
[  249.169966][ T8437]  ? ocfs2_init_acl+0x30a/0x770
[  249.174809][ T8437]  ? __might_sleep+0xe0/0xe0
[  249.179395][ T8437]  ? read_lock_is_recursive+0x20/0x20
[  249.184760][ T8437]  ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0
[  249.191349][ T8437]  down_read+0x46/0x2e0
[  249.195507][ T8437]  ? ocfs2_init_acl+0x30a/0x770
[  249.200355][ T8437]  ocfs2_init_acl+0x30a/0x770
[  249.205025][ T8437]  ? ocfs2_mknod_locked+0x159/0x290
[  249.210219][ T8437]  ? ocfs2_acl_chmod+0x330/0x330
[  249.215146][ T8437]  ? dquot_alloc_inode+0x8ac/0xa40
[  249.220257][ T8437]  ? dquot_alloc_inode+0x15e/0xa40
[  249.225363][ T8437]  ? ocfs2_block_signals+0x9b/0xe0
[  249.230477][ T8437]  ? ocfs2_init_security_get+0x139/0x1a0
[  249.236110][ T8437]  ocfs2_mknod+0x1427/0x2310
[  249.240702][ T8437]  ? ocfs2_mkdir+0x430/0x430
[  249.245293][ T8437]  ? __lock_acquire+0x7d80/0x7d80
[  249.250318][ T8437]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  249.256220][ T8437]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  249.262113][ T8437]  ? _raw_spin_unlock+0x40/0x40
[  249.266974][ T8437]  ? ocfs2_inode_unlock+0xa5/0x140
[  249.272084][ T8437]  ? __lock_acquire+0x7d80/0x7d80
[  249.277101][ T8437]  ? __rwlock_init+0x150/0x150
[  249.281866][ T8437]  ? do_raw_spin_unlock+0x121/0x230
[  249.287062][ T8437]  ? rcu_is_watching+0x15/0xb0
[  249.291829][ T8437]  ? ocfs2_lookup+0x4ac/0x960
[  249.296504][ T8437]  ocfs2_create+0x196/0x430
[  249.301005][ T8437]  ? ocfs2_update_inode_fsync_trans+0x230/0x230
[  249.307240][ T8437]  ? ocfs2_lookup+0x960/0x960
[  249.311913][ T8437]  ? HAS_UNMAPPED_ID+0x101/0x170
[  249.316851][ T8437]  ? inode_permission+0xf3/0x480
[  249.321785][ T8437]  ? bpf_lsm_inode_create+0x9/0x10
[  249.326891][ T8437]  ? security_inode_create+0xb7/0x100
[  249.332261][ T8437]  ? ocfs2_lookup+0x960/0x960
[  249.336939][ T8437]  path_openat+0x1705/0x3270
[  249.341535][ T8437]  ? do_filp_open+0x430/0x430
[  249.346211][ T8437]  do_filp_open+0x1f2/0x430
[  249.350707][ T8437]  ? vfs_tmpfile+0x480/0x480
[  249.355300][ T8437]  ? _raw_spin_unlock+0x28/0x40
[  249.360155][ T8437]  ? alloc_fd+0x590/0x640
[  249.364490][ T8437]  do_sys_openat2+0x134/0x1d0
[  249.369170][ T8437]  ? do_sys_open+0xe0/0xe0
[  249.373579][ T8437]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  249.379551][ T8437]  ? lock_chain_count+0x20/0x20
[  249.384403][ T8437]  __x64_sys_openat+0x139/0x160
[  249.389252][ T8437]  do_syscall_64+0x55/0xb0
[  249.393664][ T8437]  ? clear_bhb_loop+0x40/0x90
[  249.398335][ T8437]  ? clear_bhb_loop+0x40/0x90
[  249.403004][ T8437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.408895][ T8437] RIP: 0033:0x7fc33a39ce59
[  249.413304][ T8437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.432910][ T8437] RSP: 002b:00007fc33b200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  249.441319][ T8437] RAX: ffffffffffffffda RBX: 00007fc33a615fa0 RCX: 00007fc33a39ce59
[  249.449293][ T8437] RDX: 0000000000042041 RSI: 0000200000000700 RDI: ffffffffffffff9c
[  249.457267][ T8437] RBP: 00007fc33a432e6f R08: 0000000000000000 R09: 0000000000000000
[  249.465230][ T8437] R10: 000000000000012c R11: 0000000000000246 R12: 0000000000000000
[  249.473194][ T8437] R13: 00007fc33a616038 R14: 00007fc33a615fa0 R15: 00007fff92d93ed8
[  249.481166][ T8437]  </TASK>
[  249.598994][ T5812] usb 6-1: USB disconnect, device number 15
[  249.691386][ T6028] ocfs2: Unmounting device (7,4) on (node local)
[  255.746221][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  255.752818][ T1288] ieee802154 phy1 wpan1: encryption failed: -22