last executing test programs:

2m33.600510694s ago: executing program 2 (id=3):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c)
sendto$inet(r0, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0)

2m33.445204323s ago: executing program 2 (id=9):
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000001140)={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c)

2m33.259988454s ago: executing program 2 (id=11):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1300000065ff050000000600395032303030"], 0x13)

2m30.943670923s ago: executing program 2 (id=15):
socket(0x10, 0x803, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
r0 = open(0x0, 0x1c1042, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x880, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, 0x0)
set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)={[{@acl}, {@direct_io}, {@norecovery}, {@shared_inode_numbers}, {@journal_flush_disabled}, {@norecovery}, {@nocow}, {@btree_node_mem_ptr_optimization}, {@no_data_io}]}, 0x1, 0x5906, &(0x7f0000010b40)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJJBIKAEF1wowEJLS1E/oIXUotGiClaJlMjLJqyiFKtLbSG1uot+8CnkISWQh7J8nKdm+p5Oz52+c3t6ekICv18lc/ucvv0/5957+vb9n+6ZDgAAALwm7Ll+275zjvrAr744/NI1H/7ZpmtDb3m8vhpX6EuXV7xSPeRA6q4sGV9mx8WbrvrBnwcuft8v7+75/su71x27/vfvP+zi+z9z5q7bvv3Qi/Pv/eczRXHjeDpxfzl5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIhBv8eQliXFv45OnpN4533vHTK+rHltTd1T3jQwkwQ4/21rZqOs+37Lj8p/OG9a677zdIf/6hr57M79q+SVBvGUwgLLmx8fFcIYW76f0wcbUvig9Pl6hBCT8Pjzijo13Et9n9FTvnodDknXfYWxIn3L8uUS5n1suWoK7PsKWhvpvL60e56ReZlytmT0Uzl9TPWL0qXP02XJ04zfjn+T0IpCZV69zcm+8dIaDhuSUjGj2W1Xi7Vj21Itz9TTjLlUqZc7sps13i76UArJ8nE+rhepj6ejitp/bGN5+omzs2pf326rKZP1JdjOWRv1PROulHfrnGxX3un6MuBUGo4BzWrrx/49GD0pnW9yeJJjxltIt63e83Ny8trH97Tl9OP5O4kjZ+0FX/7rxfN+9QPb7xsSV78C0tp/FJb8f941uPPn3/j976VG//WGL/cVvyTH+h57qxHrl+Wu3/2xv1TaSv+0DOP3rL08It25vb/9hi/2lb8Vbse756/74EHc/s/GPfP3LbiP/3OD/7prifvezY3fojxe9qKv3bXli939+87ITf+g3H/9LY3fl7YefpT/f1/GciL/0SMP7+t+HfuuO0ddyy86czc47s67p++tuKfffz9183bd98xeefO5PZOvXICvDYdll5j3ZCW280zZ6ohX/jmQKV2zTcv/T+/kw1lLj7H2lnQyfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEI44qT/+aH///G+5yppuTu98XSptoz1c0JI5oYQto0MbR3ZsPmSgc9cetnWzUMbB4ZGBoY3j2y9cuDUtwxsHd6ycejKsXsH33pK7XGLQ1JbJsdMart7dHS01DexLrb3n47f+YflZ/zLX0MYPOJ3/ZXc/q+4bdMdhzf5mZGsGn3PpsvO+d1p3023qy/tV1+Tfo2Ojo6GnH7963n/uOOre/98QgiDr5uqX48+/e5fTOjQeMX+OKlSd6h1qDvpadqPeq/T/sT9VVm/YePw4NT7d+zx5Zzt+M9XPfv39Vd85R+1/VvN3Y4W9+/cVaMbS99Yc/a/f+PqWkVRv16p4160v+NWxP7F/VdN9/eCdLsW5GxXJWe7rv/Ng0/+/KgbX9wRBisvLJ3cdtF2daUDoCt5fUvtxhZ6kkUT6qvp+vGIx8etGNm0ZcW2K7e/dcOmoUuGLxne/PaVp648ffC0009bMb7lKzq8/bH9N7a4/QdmPC383I6fxp+tjaeifhXtj7F+Fe+Pxh7lPf96zv3S195+2yPn1CqKxnlcu34+SZc9Y8d5ZWgYb5P3VbPtKtoPIYSBZvvh+RfPDEf+nw3XFZ2HGo9M48+MZNXoY8v+9t0zvrPkXbWKA3Keb+xQm+f5eq/392d8f1XT4zF6kO7f7lBOt6u3ab9WPvZI1817/vr5ev/mzAlXDI2MbF1Z+zkv7em85Oim/crWxu1aOv6zHNLdEurDtMl4HdMVav3Lnj/j6tm92pve15ssbrpdWfG+3WtuXl5e+/CevD2d3F1rcW6YX1smb8hZc2PmgeV6h5u1f7A+/4rGR/+HvnPvx+/9yamTxsfJtZ9F25XkbNePn7zza9//yn/9See260Pvfrzvb//308trFYfKeaXe67Q/SeN55eQQip5/S0Pz7ch9/pWab0/R8y/bzv71m8cbyJR7Q7mt5+vJD/Q8d9Yj1y/Lfb7ubfX5evWEUrng+XqwjJ/s8yupTOzH7D2/JgyUZNXoL284bMdD16w+qlZRNK7razcb16e0kH/kbNcvzn+q/9KB//K/O3fe+MFb7rng90OrvlCraP+4x7505rhX0/1bzdm/9V7HvLNx/77t4ks3rqvVH7zXv+myIP+Jp5JtV27/7NDGjcNbt7W2Xa2+nsZ2snu53dfTeHZbXLBdpUnbNXs3WtlfrT7fYv/Xtb2/Jj7fekPS1uvC9l8vmvepH954Wd+kR6UNXVhK45faiv/Hsx5//vwbv/et3Pi3xviVtuIPPfPoLUsPv2hnbvzbkzR+ta34q3Y93j1/3wMP5sYfjP2f21b8p9/5wT/d9eR9z+bGDzF+b3v7/4Wdpz/V3/+X3PhPJGk7Y9dIIdzz0inra+UkdKXPt9iPrgn9CtlykimXMuVyY7lUm2utN1BOkon1cb20/tiGvjTziZz6eBVWXVJbvhzLIXtj6vqDTanh3N+svug6FQDg1S6+/x+vQeP7/8PphVL+TAPsN9M8bElO3JiH7Z/PmTPh/iVp/Pj4OA/Y/7YwOLa8dqB2oT/d9xHi8yE7zxnbOeG4iTHanecsmn9flinHftXmyysNeWhqcl5TCS3Mv09uZ+r598zmF8+PD9wwqVsDDfNW2ePXlc6YNfu8Q6a/lbEIeeMjOy8WP8/RvyCsHm+vxfGR/RxNPA7Zz9HEdo7KnDjb/RzNTMdH7PYU42O8y8Xvb0w+fmGK/bv/+DWPlj1+0zje1bH1Z/v92Q7MGzY9pR24ecPZfT/MvGRO/PQJdrDPG8b6uB2VFucTP55T36n5xHi6iP3aO0VfDgTzicCrVcz/42vEWP4/dgH+b5n1iq5Ds1eNMV7u54TKzftTlHdM/pxeT1uv42t3bflyd/++E3Kvcx5s9XM/WyaUego+91O0H5dnyoX7MWeCpijfy7ZTtN+zn8voDfPb2u937rjtHXcsvOnM3P2+uvZCWrzfvzahNL9gvx8C+ULz+PKF10S+MNvzZ69YPpJ+8Gm28pGP5dRPNx/pmXSjvl3jDrl8pOvA9gsAOHTE/L/+/lma//+/uEJ6HVGUt56YKcd4uXlrzvVJXt76kXR5RWb93vQ3KqZ73Xz28fdfN2/ffcfk5i23t5qH/rcJpb7CPHRmeXNuHrG6M58Xz80j6nnWzPLE3P7X88SZ5em58et5+szy6Nz9U8+jZzYPkBu/Pg9wqOe5BfN1mcZisdX5uldtHp3++uxs5dHn5tRPN4/unXSjvl3j5NEAAK+smP/Hy7iY/z+SWW+m77Pn5gUdum7P/j2QevwnDlReOdt532znrbOd18/2vMShnhfP9rzQ7M6Tvebz4rRReTEAAAezmP/PTcv5+f/M8pNm+VvXhPxEft40vvz8IMnPD/X5L/m/98WLyf8BAF7dYv4ff+0x/v2//5GWs3+3Xp6eE1+eLk+favy0nKd3fp4t+BzAKzsPMHf/+uYBAAB4JXSNZ0qTf8/+k+ky+3v2eb+Xf37O+q2qpJfHF41sHR6+4LIt64ZGhi/YfOm64W0XXL51w8jI8ObaejPNG3PzljRv7AqVdH80Xy+bty1M/x7Cwpy/h5BdP4Y9evzG5L+HkG12bsHfEdh//Frrb97xK02xfrPxkXe88+J/Imf9qH78L/70yRes33bBhs0bRjYMbdywfXjiemNZa880vjcz7pZpfV9q5sckpel/f2dn+lGa1I+udH/kfT97kunHorQni/K+/yCn37/6X1/93PGj/7grhMEjym+Y0f5LVo3+9/OGPzKy53dbxvpfmrL/9TXTfhV9X2l2/bg9lY2Xbhs5af2ll23OfqNke+J8RqlenqX5jPTpX25xfmJtTv10P6dQnnTj4NTy/AQAABPE9//j9Wx8//Ar6QVUrG89T5/Z+8e5efpga3l69nvJivL07Ppxe1vN06szzNOz7Rfl6c3Wb5an5+XdefE/lrP+dLU+Tmb2OY/ccXJha+Mk+30GReMku/50x0kyw3GSbb9onDRbv9k4yTvuefE/mrN+ntbHw8w+l5M7Hm5tbTy8OVMuGg/Z9ac7HkozHA/Z9ovGQ7P1m42HvOObF/+cnPVbNXF8jA2M8XExfMHll279bMN6s/39FzPv3+x+/0e7Wu//7H7ua/b7P7ufK5v9/s/sc2W5/X9iZjNhrfd/dr/fpV0HbL42/bBZ0efPiuZx1+TUT3ced86kGwcn87jwyon5f3y7J+b/N6XLTr8NdOh/T5rvMWsav0PfY1Z0HeP1fIrGDgJezwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa011ZMr7cc/22fecc9YFffXH4pWs+/LNN177pqh/8eeDi9/3y7p7vv7x73bHrf//+wy6+/zNn7rrt2w+9OP/efz5TGLhv/GflxLRYDSF5Lgmh+vO9X//S7seOHKtLQgjlpG9HCIuSxQ8tSjIRBv8eQlhX7+fEO+956ZT1Y8trb+qeUL8wEyS7XaG3HPvT2M8QrijcIg5B1XScbd93+UnhD+9dc91vlv74R107n92xf5Wk2jCeQlhwYePju0IIc9P/Y+JoWxIfnC5XhxB6Gh53RkG/jmux/ytyykenyznpsrcgTrx/WaZcyqyXLUddmWVPQXszldePdtcrMi9Tzp6MZiqvn7F+Ubr8abo8cZrxy/F/EkpJqNS7vzHZP0ZCw3FLQjJ+LKv1cql+bEO6/ZlykimXMuVyV2a7xttNB1o5SSbWx/Uy9fF0XEnrj208Vzdxbk7969NlNX2ivhzLIXujpnfSjfp2jYv92jtFXw6EUsM5qFl9/cCnB6M3retNFk96zGgT8b7da25eXl778J6+nH4kdydp/KSt+Nt/vWjep35442VL8uJfWErjl9qK/8ezHn/+/Bu/963c+LfG+OW24p/8QM9zZz1y/bLc/bM37p9KW/GHnnn0lqWHX7Qzt/+3x/jVtuKv2vV49/x9DzyY2//BuH/mthX/6Xd+8E93PXnfs7nxQ4zf01b8tbu2fLm7f98JufEfjPunt73x88LO05/q7//LQF78J2L8+W3Fv3PHbe+4Y+FNZ+Ye39Vx//S1Ff/s4++/bt6++47JO3cmt3fqlRPgtemw9BrrhrTcbp45Uw35wjcHKrVrvnnp//mdbChjrJ0FsxgfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBXp99efeonz3vPR9dUkhCSnHVGm4j3leesWjXQRrtDzzx6y9LDL9rZWLekjTgAAABAsZiHl+o11bAkXJ7MDUc3XT/OERwdS8nE+uwcQoyTnSNoN06pQ3HKHYpT6VCcrg7FmdOhON0dilMtiFMNrcWZO0WcytioaLE/PVP2p/U4vR2KM69DceZ3KM6CDsVZ2KE4fVPGaX0cLupQnMUdinNYh+Ic3qE4R3Qozus6FOfIDsXJzilPdxzOT9c8Ki/O+I1yYZxKUq7f0Ww+/ci0nWNm2E5vQTvzi16PW2xnbovtHJd5XGma7VRbbOeNM2wnabGdN8+wnVJBO3HcXpHtX2wnlloc/1d2KM72DsW5qkNxru5QnM93KM4XOhTnmhnGAWhVzP/353t9obvyrtCTnnGyswAx3106/nPy613eCSnGe0Omfk5RvGyinom3dLr9y04gZOIty9R3TYhXqecjU8SrNsZbnrmzcHuzEwqZ/p2Yqe8uipedWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWfTbq0/95Hnv+eiakISxf02NNhHvK89ZtWqgjXZ3r7l5eXntw3sa67orbQQCAAAACsU8vKteUw3dlZWhO5kzYb1qOg9QTcvlvtqyf0FYPbZMBkrj5Z5k0ZSPq6SPWzGyacuKbVduf+uGTUOXDF8yvPntK09defrgaaeftmL9ho3Dg7WfIXQXxAshjE8/bLty+2eHNm4c3rqtVpnt/5L0cUvScpI+rv9tYXBseW3a/8UF7ZUmtTd7N4qPHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH+zaXYicV/0H8PPMzM5Mt80/+6dv09BshryUqEWTuJVUS/cBwUKbhCwFma2uJdgEi5smtEmJdWwDtjVBEVoCIZILI7HYWrzpiy1iXwhEajTgxiBt0V7ohdJqJS25kJSR7M6ZnZmdyaxjadr4+VzMM3PO75zfc+Zi4fvsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sqerIRGV0bHwwCSHpUlPrIM5l82la7qPvl5/f/v3C8OmVzWOFXB8bAQAAAD3FHD7QGCmGQi4bsuGq6U9LQ9NEmM39AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/56p6shEZXRs/OIkhKRLTa2DOJfNp2m5j75vvPPkZ14dHv5r81ipj30AAACA3mIOzzRGiqEUloWB5KqWuvhsYFHb+va6uM/ieda1PzvoVrdsnnXXzLPuYz3qNtSvuwIAAAB89MX8n2uMDIVCbkHX/N8r18e6JW112fq1n98KAAAAAP+dmP8LjZFSKORKjbw+37y/tK0uru/1f/u4fkWX9b3+n7++fvV/egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD46JiqjkxURsfGs0kISZeaWgdxLptP03Iffde8MPj3W448tLR5rJDrYyMAAACgp5jDZ6N3MRRyg2EgXDyd+4dvOvj0F59+diSEMBPz8/mwa9OOHXevmXmNdauPHRn43tG3vjWnbvXM63k7IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L6Zqo5MVEbHxi9KQki61NQ6iHPZfJqW++j7+ue+8OfHTz73ZvNYqY99AAAAgN5iDp/N/sVQCvmQD1dMf2rO+me1PyPo9swAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHDc8437vr5pcnLz3d544403jTfn+y8TAADwflsSklD7D1258XzfNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GEwVR2ZqIyOjReTEJIuNbUO4lw2n6blPvqmzx8vLDj9wkvNY6U+9gEAAAB6izl8NvsXQykMhIFw+fSnTs8EpvP/0Ad4kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCHylR1ZKIyOja+IAkh6VJT6yDOZfNpWu6j72O7D3z28MLv3tw8Vsj1sREAAADQU8zh+cZIMRRyHw+FcHX982TrgiRbv3Z+LjC7bnvLssF5r6u2rMvOe92etpPl6qeZWVeM+w3NXBvrynPXlZvWlUKjfbllXdjXsmpBj/sMAAAAcB7F/F9ojAyFQq7QlHN/0lI/JOcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1MVUcmKqNj40kSQtKlptZBnMvm07TcR9/7fvP/l3zlp3t3No+V+tgHAAAA6C3m8NnsXwylsDj8X1g8nfvDUGt9rPtH5czhR//5l5UhrLrixHCufdsfxje/ev3GF9tfQsi0VmdCWFjvl3Tp9+vfPXrv8tqZx0NYdXn26jn9wrn7tW6Z1p6pbF6/4+iJ7T2+HAAAALhAxPw/0BgZCoXcXV3zf0zePfJ/w3QAX3jv7p9fVn+tJ/K2FZmher9Ml36fX/7kn1as/dtbZ/P/ufp96sDWw5e1NJwZaZOktdGtOzecuO5QJp56pn+2rX/8Xr70zTf/tWXXI2dm+hdDsT6+KNep/9zXNheltcnM/vF17+2vtvbPdTn/Q7996eQvF+1992z/d5YMNvpfc47zn7v/4K0P77v+wJENrf1DCOVO/d9+9+Zw5R/ufLD9/INtGzd/882vbZK0dmzpqUNrD5ZuaO2ftPWP3//PTj6278ePfOfZ2D/+VmTlsvn2z7T1f2XPpbtffmDjotb+mS7nf/G2V4e3lb/9+/bz39Gya67rXcw9/xPXPnX7a5vS+9unAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALixT1ZGJyujYeCYJIelSU+sgzmXzaVruo+8btxx/+7a9P/pB81ipj30AAACA3mIOn83+xVAK+ZAPg9O5/5nK5vU7jp7YHoZmZpP6NTe57Z4dn9iybeddd5ynOwcAAADmK+b/XGNkKBRyy8NAPf+Pbt254cR1hzIx/2di/t9y5+TmVaFR98qeS3e//MDGRY3nBCFM/yygeLbu07N1N914fOjUH7+2omPdmtm6Y0tPHVp7sHRDrAvNdatD4/nEE9c+dftrm9L7G/fXXPfJr26brD+eiPsO3vrwvusPHNnQOEf9OljfN9ZNZvaPr3tvfzXWZevXYv3cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBcU9WRicro2HjIhpB0qal1EOey+TQt99F33fJfPHjJ6ecWN48Vcn1sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJ+/YTGUfZxAH+e3eTNNpu0SfuCUTFNq6LUg0VBRC8qKtKKFDxVilRbexAFQUSpB1NpxVIVL4LVSxEV1CgFBRuLpVVS8V/x4kEFhepBKMWAdikeVLL7zHYz3XF1UgX184HhyfPMzHd+M8+zs1kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf5SBvrFme3jH/Y1bzrnho0fvOvHITe/cu+2ih1/9bmLTdR/uHXzp5MzmFVu+vH7Zpv13r5ne/fyhn4bf+uVoz+CHWs2q1K2FEI/HEGrvzj7z2MzHZ82NxRBCNY5MhjAalx4ajbmE1T+HEDa365y/880Tl2+Za7ftGpg3viQXkr+vUK9m9bSMzK+Xf5daWmdbGw9eEr6+dv32T5e/8Xr/1LHJU4fEWsd6CmHxxs7z+0MIi9I2J1ttY9nJqV0XQhjsOO/KHnWd/wfrv7Sgf25q/5faeo+cbP/KXL+SOy7fz/Tn2sEe11uoojrKHtfLUK6ffxktVFGd2fhoat9O7ao/mV/NthgqMfS1y78nnlojoWPeYojNuay1+5X23IZ0/7l+zPUruX61P3dfzeumhVaNcf54dlxuPHsd96XxFZ3v6i5uLRg/O7W19EE9mfVD/o+W+ml/tO+rKatr9ndq+TtUOt5B3cbbE58mo57G6nHpaef82kW2b2b9ExdWN7x3eKSgjrg3pvxYKn/rJ6NDt7+284GxovyNlZRfKZX/zdojP9y284XnCvOfzvKrpfIvOzB4fO37O1YWPp/Z7Pn0lcq/4+gHTy7//51T3ea6mb8ny6+Vyr9m+sjAcOPAwcL6V2fPZ1Gp/K+uvvHbVz7fd6wwP2T5g6XyN0zf99TAeOPiwvyDrY9CvblCS6yfH6eu+GJ8/PuJovzPsuc/3CU/9sx/eXL3VS8u2bWmcH2uy57PSKn6b75g//ahxr7zit6dcc+Z+uYE+G9alv7Hejz1y/7OXKiO3wvPTvS1voGG0jZ8Ji+UM3edxX9hPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7EDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE8FAAD//453K6c=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa0)

2m27.816111085s ago: executing program 2 (id=21):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x2, "afb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x891c, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2m11.577343263s ago: executing program 32 (id=21):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x1d, 0x2, "afb6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x891c, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

37.472787034s ago: executing program 1 (id=387):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)

37.304241771s ago: executing program 4 (id=389):
r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x26, 0x230200})
unshare(0x2a060400)
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

36.556716307s ago: executing program 1 (id=390):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83)
ftruncate(r1, 0x2008002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1425}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000002340))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
socket$xdp(0x2c, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

35.373064075s ago: executing program 1 (id=391):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

35.103078135s ago: executing program 4 (id=394):
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0xcd, [{{0x9, 0x4, 0x0, 0xfd, 0x84, 0x7, 0x1, 0x1, 0x3d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="00031b0000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

33.97243938s ago: executing program 1 (id=395):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0xee8cc499168dfa47, &(0x7f0000000040), 0x0)
syz_open_dev$loop(0x0, 0x20364, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002380)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044055}, 0x0)

32.836380063s ago: executing program 1 (id=396):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x5, 0x1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

30.559657327s ago: executing program 4 (id=402):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83)
ftruncate(r1, 0x2008002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1425}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000002340))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
socket$xdp(0x2c, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

30.539285868s ago: executing program 1 (id=403):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000090000000200000009"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS    \x00', 0x2}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x4000, 0x100005, 0xff, 0x0, r6, 0x532, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

28.992274855s ago: executing program 4 (id=407):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x36)

27.946150523s ago: executing program 4 (id=409):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)

27.756572532s ago: executing program 4 (id=411):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
gettid()
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xf51)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1}, 0x10122)
shutdown(r3, 0x1)

15.357163133s ago: executing program 33 (id=403):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000090000000200000009"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS    \x00', 0x2}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x4000, 0x100005, 0xff, 0x0, r6, 0x532, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

12.140845609s ago: executing program 34 (id=411):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
gettid()
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xf51)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/67, 0x43}], 0x1}, 0x10122)
shutdown(r3, 0x1)

7.646361912s ago: executing program 0 (id=467):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200248, &(0x7f0000000040), 0xfd, 0x467, &(0x7f0000001f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6ae, &(0x7f0000001780)="$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")
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)

6.755388845s ago: executing program 0 (id=469):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

5.637833985s ago: executing program 0 (id=472):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000300)=""/118, 0x76)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1f", 0x14, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

3.651553644s ago: executing program 5 (id=477):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x36)

3.415338138s ago: executing program 5 (id=478):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200248, &(0x7f0000000040), 0xfd, 0x467, &(0x7f0000001f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6ae, &(0x7f0000001780)="$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")
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)

2.460419883s ago: executing program 5 (id=481):
getpid()
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
fdatasync(r0)

2.216357152s ago: executing program 5 (id=483):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x7f}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4})
r2 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xa7\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\xb1\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q\x9e@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb0\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000009, 0x13, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r2, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r3, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9)

2.212626108s ago: executing program 0 (id=484):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c1d15d2e7505a8696b50738ece15ee5000000000000000000000000003c1d2832b103826690ce8335d2db58ecedfce9d041c870b417443b109171a4f41e9c212a6451366de92e31182d286e72b80014d07e8e196a3ec1", 0xf8}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c", 0xca}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e769694382", 0x46}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d67efa71c608a29bc1636373ad0461338c453a5bae9e10b5713832e4a6b717d0ebe8c0ee1fd8ccfdd83c514ffa754463ff", 0x5f}], 0x1}}], 0x3, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d8803f5c0ca3642f22e4c896b5f1d4e16556e57cc2f36b50a00000063cf9528e90000000000581c7eeb130aac1cfd109c3e794fe91b5b473f244eeac47acbd809ca44d2ec59bfd29d8284c110", 0xb2, 0x11, 0x0, 0x0)

2.166675121s ago: executing program 3 (id=485):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000001c0)=0x9, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x17a}, 0x8)

2.079298169s ago: executing program 0 (id=486):
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$key(0xf, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet(0x2, 0x801, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20)

2.012010001s ago: executing program 5 (id=487):
socket$packet(0x11, 0x2, 0x300)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x8, r2)
r3 = syz_pidfd_open(r2, 0x0)
process_mrelease(r3, 0x700000000000000)

1.932169286s ago: executing program 0 (id=488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="00000000422200042c0012800800010067726500200002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

1.928340675s ago: executing program 3 (id=489):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

1.826874449s ago: executing program 3 (id=490):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xd1b, 0x2, 0x7, 0x5, 0xd, 0x3, 0x4, 0x0, 0x7, 0x8, 0x37, 0x40, 0x80}, {0xa155, 0xd, 0x3, 0x53, 0x4, 0xe8, 0x8, 0x81, 0x7, 0x2, 0x3, 0x0, 0x10001}, {0x6, 0x8, 0x3, 0x1, 0x8, 0x3, 0x0, 0x7, 0x2, 0x7f, 0x4, 0x3, 0x9}], 0x5c72})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

948.03292ms ago: executing program 5 (id=491):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r0=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100), 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}]}, 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v1={0x1000000, [{0x4f2d, 0x5}]}, 0xc, 0x2)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

780.7919ms ago: executing program 3 (id=492):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x22041, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0)

633.671551ms ago: executing program 3 (id=493):
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe2(&(0x7f0000001940), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)

0s ago: executing program 3 (id=494):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000300)=""/118, 0x76)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1f", 0x14, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts.
[   52.499640][ T5815] cgroup: Unknown subsys name 'net'
[   52.656465][ T5815] cgroup: Unknown subsys name 'cpuset'
[   52.664113][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.892955][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.919942][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.943820][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.954749][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.962113][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.963920][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   57.970695][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.977527][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   57.985715][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.998915][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.005339][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.006646][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.013678][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.021911][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.035115][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.042434][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.042455][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.052067][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.059239][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.066322][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.071361][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.079326][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.098577][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.106010][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.114128][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.123699][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.131010][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.138613][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.141283][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.153704][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.162154][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.476958][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   58.603942][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   58.664967][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   58.688861][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.696307][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.705675][ T5827] bridge_slave_0: entered allmulticast mode
[   58.712252][ T5827] bridge_slave_0: entered promiscuous mode
[   58.724295][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   58.752447][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.759738][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.766951][ T5827] bridge_slave_1: entered allmulticast mode
[   58.773952][ T5827] bridge_slave_1: entered promiscuous mode
[   58.863806][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.876566][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.897414][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.904819][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.911989][ T5837] bridge_slave_0: entered allmulticast mode
[   58.918822][ T5837] bridge_slave_0: entered promiscuous mode
[   58.930295][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.937516][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.944774][ T5837] bridge_slave_1: entered allmulticast mode
[   58.951535][ T5837] bridge_slave_1: entered promiscuous mode
[   58.957976][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   59.000544][ T5827] team0: Port device team_slave_0 added
[   59.039893][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.056894][ T5827] team0: Port device team_slave_1 added
[   59.062994][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.070187][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.077641][ T5825] bridge_slave_0: entered allmulticast mode
[   59.084355][ T5825] bridge_slave_0: entered promiscuous mode
[   59.091430][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.098830][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.106043][ T5835] bridge_slave_0: entered allmulticast mode
[   59.112542][ T5835] bridge_slave_0: entered promiscuous mode
[   59.120842][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.148110][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.158202][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.165866][ T5825] bridge_slave_1: entered allmulticast mode
[   59.172380][ T5825] bridge_slave_1: entered promiscuous mode
[   59.179979][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.187179][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.194671][ T5835] bridge_slave_1: entered allmulticast mode
[   59.201253][ T5835] bridge_slave_1: entered promiscuous mode
[   59.276563][ T5837] team0: Port device team_slave_0 added
[   59.286151][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.293379][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.320440][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.334515][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.345564][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.357346][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.367710][ T5837] team0: Port device team_slave_1 added
[   59.379920][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.387709][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.413839][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.432037][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.504537][ T5835] team0: Port device team_slave_0 added
[   59.511045][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.518527][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.544822][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.559019][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.567152][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.593430][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.604892][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.611977][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.619656][ T5833] bridge_slave_0: entered allmulticast mode
[   59.627021][ T5833] bridge_slave_0: entered promiscuous mode
[   59.636541][ T5825] team0: Port device team_slave_0 added
[   59.643613][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.650699][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.657968][ T5833] bridge_slave_1: entered allmulticast mode
[   59.664532][ T5833] bridge_slave_1: entered promiscuous mode
[   59.672210][ T5835] team0: Port device team_slave_1 added
[   59.693028][ T5825] team0: Port device team_slave_1 added
[   59.745102][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.755166][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.762133][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.791377][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.805478][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.812459][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.838550][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.855081][ T5827] hsr_slave_0: entered promiscuous mode
[   59.861487][ T5827] hsr_slave_1: entered promiscuous mode
[   59.876846][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.883914][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.909942][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.922565][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.951973][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.959256][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.986567][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.016349][ T5833] team0: Port device team_slave_0 added
[   60.026921][ T5837] hsr_slave_0: entered promiscuous mode
[   60.033647][ T5837] hsr_slave_1: entered promiscuous mode
[   60.039796][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.047996][ T5837] Cannot create hsr debugfs directory
[   60.069948][ T5833] team0: Port device team_slave_1 added
[   60.117586][ T5835] hsr_slave_0: entered promiscuous mode
[   60.123724][ T5834] Bluetooth: hci1: command tx timeout
[   60.129679][ T5835] hsr_slave_1: entered promiscuous mode
[   60.136994][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.144829][ T5835] Cannot create hsr debugfs directory
[   60.176346][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.183470][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.203733][ T5844] Bluetooth: hci3: command tx timeout
[   60.210033][ T5142] Bluetooth: hci4: command tx timeout
[   60.215649][ T5844] Bluetooth: hci0: command tx timeout
[   60.220963][ T5834] Bluetooth: hci2: command tx timeout
[   60.226456][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.274089][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.281044][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.307153][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.329731][ T5825] hsr_slave_0: entered promiscuous mode
[   60.335949][ T5825] hsr_slave_1: entered promiscuous mode
[   60.341839][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.350275][ T5825] Cannot create hsr debugfs directory
[   60.437441][ T5833] hsr_slave_0: entered promiscuous mode
[   60.444412][ T5833] hsr_slave_1: entered promiscuous mode
[   60.450403][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.458059][ T5833] Cannot create hsr debugfs directory
[   60.692379][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.703404][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.729991][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.749024][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   60.773420][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.783965][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.806012][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.825566][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.868953][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   60.885529][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   60.898083][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   60.921940][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   60.959825][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.984500][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.995089][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.008033][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.071963][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.096749][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.103831][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.120186][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.129495][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.167577][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   61.185569][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.192982][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.219836][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.227676][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.268808][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.301203][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   61.335591][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.342761][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.368227][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.375352][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.414966][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.469201][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   61.527556][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.541438][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.548592][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.587228][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.601634][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.608847][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.630692][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   61.655358][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.662489][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.679639][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.686793][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.730953][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   61.756615][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.798239][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.805416][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.845776][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.852996][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.879485][ T5835] veth0_vlan: entered promiscuous mode
[   61.908857][ T5835] veth1_vlan: entered promiscuous mode
[   61.970529][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.075926][ T5835] veth0_macvtap: entered promiscuous mode
[   62.095126][ T5827] veth0_vlan: entered promiscuous mode
[   62.119591][ T5835] veth1_macvtap: entered promiscuous mode
[   62.150108][ T5827] veth1_vlan: entered promiscuous mode
[   62.203318][ T5834] Bluetooth: hci1: command tx timeout
[   62.215098][ T5827] veth0_macvtap: entered promiscuous mode
[   62.248695][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.269300][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.283925][ T5834] Bluetooth: hci2: command tx timeout
[   62.284027][ T5844] Bluetooth: hci4: command tx timeout
[   62.289342][ T5836] Bluetooth: hci0: command tx timeout
[   62.295561][ T5827] veth1_macvtap: entered promiscuous mode
[   62.300157][ T5142] Bluetooth: hci3: command tx timeout
[   62.332144][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.344686][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.362341][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.374589][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.386892][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.395424][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.409198][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.418858][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.432862][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.457685][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.468490][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.479959][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.513412][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.522171][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.538789][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.547759][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.586069][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.725158][ T5837] veth0_vlan: entered promiscuous mode
[   62.755617][ T5833] veth0_vlan: entered promiscuous mode
[   62.755661][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.769554][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.780534][ T5833] veth1_vlan: entered promiscuous mode
[   62.805773][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.815784][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.825963][ T5837] veth1_vlan: entered promiscuous mode
[   62.859553][ T5825] veth0_vlan: entered promiscuous mode
[   62.873236][ T5825] veth1_vlan: entered promiscuous mode
[   62.888141][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.901049][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.947440][ T5833] veth0_macvtap: entered promiscuous mode
[   62.976823][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.985839][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.988847][ T5833] veth1_macvtap: entered promiscuous mode
[   63.002058][ T5837] veth0_macvtap: entered promiscuous mode
[   63.029948][ T5837] veth1_macvtap: entered promiscuous mode
[   63.042181][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.059377][ T5825] veth0_macvtap: entered promiscuous mode
[   63.078387][ T5825] veth1_macvtap: entered promiscuous mode
[   63.099347][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.113289][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.129211][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.140875][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.155111][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.189870][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.212557][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.224697][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.250897][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.261930][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.272451][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.284659][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.307129][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.342113][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.383431][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.412930][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.430139][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.448057][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.466195][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.491182][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.516692][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.531256][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.552856][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.563826][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.582824][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.604467][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.640312][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.660355][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.670689][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.681598][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.691681][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.702384][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.716782][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.742311][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.753128][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.763681][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.774357][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.784403][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.795966][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.806278][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.817306][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.828995][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.839269][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.855024][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.865503][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.874480][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.891484][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.901202][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.910824][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.920028][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.935127][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.948334][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.958222][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.974527][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.092872][ T5849] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   64.252830][ T5849] usb 3-1: Using ep0 maxpacket: 16
[   64.305199][ T5834] Bluetooth: hci1: command tx timeout
[   64.357042][ T5939] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure
[   64.376155][ T5834] Bluetooth: hci4: command tx timeout
[   64.381855][ T5834] Bluetooth: hci2: command tx timeout
[   64.504114][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.546006][ T5142] Bluetooth: hci3: command tx timeout
[   64.551837][ T5834] Bluetooth: hci0: command tx timeout
[   64.595335][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.648758][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.710554][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   64.729275][ T5849] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   64.742754][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.759570][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.764853][ T5849] usb 3-1: config 0 descriptor??
[   64.802087][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.831426][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.854680][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.053615][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.061542][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.070457][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.078914][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.112761][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.141950][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.919355][ T5849] usbhid 3-1:0.0: can't add hid device: -71
[   65.925724][ T5849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   65.938153][ T5849] usb 3-1: USB disconnect, device number 2
[   66.147821][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14'.
[   66.389018][ T5949] loop2: detected capacity change from 0 to 32768
[   66.399976][ T5836] Bluetooth: hci1: command tx timeout
[   66.514288][ T5949] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,norecovery,nojournal_transaction_names,allocator_stuck_timeout=32767,nocow,no_data_io
[   66.538626][ T5949] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   66.603028][ T5836] Bluetooth: hci0: command tx timeout
[   66.608490][ T5836] Bluetooth: hci3: command tx timeout
[   66.614053][ T5834] Bluetooth: hci2: command tx timeout
[   66.619468][ T5834] Bluetooth: hci4: command tx timeout
[   66.719682][ T5949] bcachefs (loop2): accounting_read... done
[   66.737349][ T5949] bcachefs (loop2): alloc_read... done
[   66.743056][ T5949] bcachefs (loop2): stripes_read... done
[   66.748782][ T5949] bcachefs (loop2): snapshots_read... done
[   66.770672][ T5949] bcachefs (loop2): going read-write
[   67.550211][ T5940] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.742384][ T5849] IPVS: starting estimator thread 0...
[   67.782763][ T5949] bcachefs (loop2): done starting filesystem
[   68.617308][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[   68.772474][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   69.005614][ T5975] IPVS: using max 22 ests per chain, 52800 per kthread
[   69.090645][ T5827] bcachefs (loop2): shutting down
[   69.115680][ T5827] bcachefs (loop2): going read-only
[   69.286112][ T5940] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[   69.294948][ T5940] usb 2-1: config 0 has no interface number 0
[   69.301447][ T5940] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   69.346041][ T5940] usb 2-1: string descriptor 0 read error: -71
[   69.352347][ T5940] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   69.392527][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.453151][ T5940] usb 2-1: config 0 descriptor??
[   69.459587][ T5940] usb 2-1: can't set config #0, error -71
[   69.598358][ T5995] Bluetooth: MGMT ver 1.23
[   70.438458][ T5940] usb 2-1: USB disconnect, device number 2
[   70.552250][ T5994] netlink: 88 bytes leftover after parsing attributes in process `syz.4.23'.
[   70.561541][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'.
[   71.042918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   71.116064][ T5940] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.144915][   T29] audit: type=1326 audit(1731474002.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.0.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x0
[   71.329406][ T5940] usb 2-1: Using ep0 maxpacket: 16
[   72.276267][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[   72.283141][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[   72.332806][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   72.363223][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[   72.374283][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.385346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   72.393875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   72.843465][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.083051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.124282][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout
[   73.130486][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   73.146584][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   73.192747][ T5940] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   73.201830][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.268944][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.358368][ T6016] hub 9-0:1.0: USB hub found
[   73.364271][ T6016] hub 9-0:1.0: 1 port detected
[   73.404456][ T6016] Zero length message leads to an empty skb
[   73.494359][ T5940] usb 2-1: config 0 descriptor??
[   73.688759][ T5940] usb 2-1: can't set config #0, error -71
[   73.746739][ T5940] usb 2-1: USB disconnect, device number 3
[   74.313641][ T6022] binder: 6011:6022 ioctl c0306201 20000480 returned -14
[   76.029542][   T29] audit: type=1326 audit(1731474006.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   76.053566][   T29] audit: type=1326 audit(1731474006.690:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   77.373804][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   77.540188][   T29] audit: type=1326 audit(1731474009.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.1.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x0
[   77.990974][  T764] cfg80211: failed to load regulatory.db
[   79.317892][   T29] audit: type=1326 audit(1731474011.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   79.398356][   T29] audit: type=1326 audit(1731474011.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   79.623405][ T6082] loop3: detected capacity change from 0 to 2048
[   79.633758][ T6082] =======================================================
[   79.633758][ T6082] WARNING: The mand mount option has been deprecated and
[   79.633758][ T6082]          and is ignored by this kernel. Remove the mand
[   79.633758][ T6082]          option from the mount to silence this warning.
[   79.633758][ T6082] =======================================================
[   79.668660][    C1] vkms_vblank_simulate: vblank timer overrun
[   79.781781][   T29] audit: type=1326 audit(1731474011.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   79.805026][   T29] audit: type=1326 audit(1731474011.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   79.827583][ T6082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.840219][   T29] audit: type=1326 audit(1731474011.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   81.398040][   T29] audit: type=1326 audit(1731474013.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.3.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff61177e719 code=0x0
[   81.925072][ T6073] loop4: detected capacity change from 0 to 40427
[   81.945846][ T6073] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x1fffff
[   81.964147][ T6073] F2FS-fs (loop4): invalid crc value
[   82.006453][ T6073] F2FS-fs (loop4): Found nat_bits in checkpoint
[   82.099985][ T6085] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.123899][ T6073] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   82.388411][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'.
[   82.615349][ T6107] loop0: detected capacity change from 0 to 512
[   82.657108][ T6107] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.755019][ T6107] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   82.768751][ T6107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[   82.817389][ T6113] Bluetooth: MGMT ver 1.23
[   82.819353][ T6107] System zones: 0-1, 15-15, 18-18, 34-34
[   82.828675][ T6107] EXT4-fs (loop0): orphan cleanup on readonly fs
[   82.836425][ T6107] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[   82.847036][ T6107] EXT4-fs warning (device loop0): ext4_enable_quotas:7143: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   82.862065][ T6107] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   82.879264][ T6107] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.57: bg 0: block 40: padding at end of block bitmap is not set
[   82.911171][ T6107] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   82.962205][ T6107] EXT4-fs (loop0): 1 truncate cleaned up
[   82.981277][ T6107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.028036][ T6107] EXT4-fs (loop0): shut down requested (2)
[   83.181343][   T29] audit: type=1326 audit(1731474014.880:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.1.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x0
[   83.597612][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.702549][ T6131] input: syz0 as /devices/virtual/input/input5
[   84.660815][   T29] audit: type=1326 audit(1731474015.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   84.711520][   T29] audit: type=1326 audit(1731474015.660:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   84.733889][   T29] audit: type=1326 audit(1731474015.660:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   84.756671][   T29] audit: type=1326 audit(1731474015.660:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   84.779186][   T29] audit: type=1326 audit(1731474015.660:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732777e719 code=0x7ffc0000
[   86.730932][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.106677][ T6171] loop1: detected capacity change from 0 to 2048
[   87.703020][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.721920][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.758593][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.780547][ T6171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.862504][   T29] audit: type=1326 audit(1731474019.560:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   88.658764][   T29] audit: type=1326 audit(1731474019.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   88.658802][   T29] audit: type=1326 audit(1731474019.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   88.658833][   T29] audit: type=1326 audit(1731474019.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   88.658863][   T29] audit: type=1326 audit(1731474019.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551ab7e719 code=0x7ffc0000
[   89.050873][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   89.058352][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   89.117967][ T5833] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant.
[   89.829699][ T6190] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   91.317025][ T6165] chnl_net:caif_netlink_parms(): no params data found
[   91.355720][ T5844] Bluetooth: hci5: command tx timeout
[   92.981087][ T6218] loop0: detected capacity change from 0 to 2048
[   93.306236][ T6218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.384606][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.398234][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.407406][ T5844] Bluetooth: hci5: command tx timeout
[   93.476732][ T6165] bridge_slave_0: entered allmulticast mode
[   93.802461][ T6165] bridge_slave_0: entered promiscuous mode
[   93.931227][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.940797][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.957422][ T6165] bridge_slave_1: entered allmulticast mode
[   93.988086][ T6165] bridge_slave_1: entered promiscuous mode
[   94.206102][ T6223] [U] 	
[   94.465976][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.479892][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.843926][ T6165] team0: Port device team_slave_0 added
[   94.873022][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.904449][ T6165] team0: Port device team_slave_1 added
[   95.085681][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.142224][    T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   95.223795][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.259872][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.263820][    T8] usb 4-1: config 0 descriptor??
[   95.316326][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.438480][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.493004][ T5844] Bluetooth: hci5: command tx timeout
[   95.639817][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.678755][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.248394][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.899161][ T6165] hsr_slave_0: entered promiscuous mode
[   96.906310][ T6165] hsr_slave_1: entered promiscuous mode
[   97.562875][ T5844] Bluetooth: hci5: command tx timeout
[   97.623384][ T6165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.652788][ T6165] Cannot create hsr debugfs directory
[   99.928309][ T6165] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.025118][ T6165] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.127955][ T6165] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.180740][ T6165] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.683223][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.749632][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  100.760820][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  100.783818][    T8] usb 4-1: USB disconnect, device number 2
[  100.810551][ T6165] 8021q: adding VLAN 0 to HW filter on device team0
[  100.884109][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.891244][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.021871][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.029034][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.682881][ T5932] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  102.922329][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.968178][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.082761][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  103.102280][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  103.150597][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.161523][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  103.204507][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.235431][ T5932] usb 1-1: config 0 descriptor??
[  104.445702][ T5932] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  104.454879][ T5932] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  104.488903][ T5932] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  105.163632][ T6165] veth0_vlan: entered promiscuous mode
[  105.234160][ T6165] veth1_vlan: entered promiscuous mode
[  105.984730][ T6165] veth0_macvtap: entered promiscuous mode
[  106.104000][ T6165] veth1_macvtap: entered promiscuous mode
[  106.157633][ T6300] usb 1-1: string descriptor 0 read error: -71
[  106.161905][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.206112][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.222727][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.246088][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.500656][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.302778][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.843313][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.094356][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.122832][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.362484][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.526015][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.641025][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.651680][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.662042][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.672760][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.683090][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.693778][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.703872][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.714591][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.725470][ T6165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.730516][    T8] usb 1-1: USB disconnect, device number 2
[  108.736846][ T6165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.766574][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.777680][ T6165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.786450][ T6165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.795262][ T6165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.804129][ T6165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.135677][ T6357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.152735][ T6357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  110.588530][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.638195][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.714894][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.897644][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.966712][ T6443] binder: 6437:6443 ioctl c0306201 20000480 returned -14
[  118.586630][ T6465] pimreg: entered allmulticast mode
[  119.132727][ T6483] binder: 6478:6483 ioctl c0306201 20000480 returned -14
[  121.145391][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[  121.223240][ T6499] sctp: [Deprecated]: syz.1.176 (pid 6499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.223240][ T6499] Use struct sctp_sack_info instead
[  121.241235][ T6500] capability: warning: `syz.4.175' uses 32-bit capabilities (legacy support in use)
[  121.643885][ T5940] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  122.714571][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  122.725542][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.738109][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  122.758802][ T5940] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29
[  122.794946][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.814755][ T6520] binder: 6515:6520 ioctl c0306201 20000480 returned -14
[  122.851917][ T5940] usb 2-1: Product: syz
[  122.880846][ T5940] usb 2-1: Manufacturer: syz
[  122.902113][ T5940] usb 2-1: SerialNumber: syz
[  123.095525][ T5940] usb 2-1: config 0 descriptor??
[  123.519606][ T5940] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0)
[  123.528974][ T5940] em28xx 2-1:0.0: Video interface 0 found: isoc
[  123.621950][ T6509] loop3: detected capacity change from 0 to 32768
[  123.878529][ T5940] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  123.981397][ T5940] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  124.057913][ T5940] em28xx 2-1:0.0: board has no eeprom
[  124.129916][ T6509] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  124.168180][ T5940] em28xx 2-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9)
[  124.329013][ T5940] em28xx 2-1:0.0: analog set to isoc mode.
[  124.432355][ T5932] em28xx 2-1:0.0: Registering V4L2 extension
[  124.451195][ T5940] usb 2-1: USB disconnect, device number 4
[  124.513551][ T5940] em28xx 2-1:0.0: Disconnecting em28xx
[  124.522407][ T5932] em28xx 2-1:0.0: Config register raw data: 0xffffffed
[  124.547591][ T5932] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  124.573564][ T5932] em28xx 2-1:0.0: No AC97 audio processor
[  124.613562][ T5932] usb 2-1: Decoder not found
[  124.618217][ T5932] em28xx 2-1:0.0: failed to create media graph
[  124.655156][ T5932] em28xx 2-1:0.0: V4L2 device video103 deregistered
[  124.708762][ T5932] em28xx 2-1:0.0: Remote control support is not available for this card.
[  124.738586][ T5940] em28xx 2-1:0.0: Closing input extension
[  124.752889][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  124.778393][ T6547] Cannot find set identified by id 0 to match
[  124.797784][ T5940] em28xx 2-1:0.0: Freeing device
[  124.806676][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'.
[  124.930080][ T5829] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  125.006805][    T9] usb 4-1: config 0 has no interfaces?
[  125.012436][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.356203][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.395324][    T9] usb 4-1: config 0 descriptor??
[  125.826536][    T9] usb 4-1: can't set config #0, error -71
[  125.847305][    T9] usb 4-1: USB disconnect, device number 3
[  126.016219][ T5829] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  126.026305][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.038981][ T5829] usb 6-1: config 0 descriptor??
[  126.086370][ T5829] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  126.298631][ T5835] ocfs2: Unmounting device (7,3) on (node local)
[  126.487222][ T5829] gp8psk: usb in 128 operation failed.
[  126.517745][ T5829] gp8psk: usb in 137 operation failed.
[  126.570690][ T5829] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  126.761333][ T6563] loop1: detected capacity change from 0 to 256
[  126.890611][ T5829] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  126.919407][ T5829] usb 6-1: USB disconnect, device number 2
[  126.966823][ T5847] udevd[5847]: setting mode of /dev/bus/usb/006/002 to 020664 failed: No such file or directory
[  127.064869][ T5847] udevd[5847]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory
[  127.501462][ T6579] binder: 6573:6579 ioctl c0306201 20000480 returned -14
[  128.178535][ T6569] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  128.236703][ T6563] FAT-fs (loop1): Directory bread(block 64) failed
[  128.253494][ T6563] FAT-fs (loop1): Directory bread(block 65) failed
[  128.283701][ T6563] FAT-fs (loop1): Directory bread(block 66) failed
[  128.372405][ T6563] FAT-fs (loop1): Directory bread(block 67) failed
[  128.382692][ T6563] FAT-fs (loop1): Directory bread(block 68) failed
[  128.389381][ T6563] FAT-fs (loop1): Directory bread(block 69) failed
[  128.432250][ T6563] FAT-fs (loop1): Directory bread(block 70) failed
[  128.466192][ T6563] FAT-fs (loop1): Directory bread(block 71) failed
[  128.481953][ T6563] FAT-fs (loop1): Directory bread(block 72) failed
[  128.547929][ T6563] FAT-fs (loop1): Directory bread(block 73) failed
[  128.642504][ T6600] binder: 6592:6600 ioctl c0306201 20000480 returned -14
[  129.829425][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.218'.
[  129.859196][ T6615] netlink: 'syz.4.218': attribute type 7 has an invalid length.
[  129.875446][ T6615] netlink: 'syz.4.218': attribute type 8 has an invalid length.
[  129.892711][ T5940] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.902932][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'.
[  129.997145][ T6621] binder: 6616:6621 ioctl c0306201 20000480 returned -14
[  130.043344][ T5940] usb 4-1: Using ep0 maxpacket: 32
[  130.705071][ T5940] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.772692][ T5940] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.821690][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  130.840135][ T5940] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  130.870522][ T5940] usb 4-1: Product: syz
[  130.890849][ T5940] usb 4-1: Manufacturer: syz
[  130.982317][ T6634] binder: 6626:6634 ioctl c0306201 20000480 returned -14
[  131.009566][ T5940] hub 4-1:4.0: USB hub found
[  131.278736][ T5940] hub 4-1:4.0: 2 ports detected
[  131.720532][ T6641] loop5: detected capacity change from 0 to 512
[  131.940834][ T6641] EXT4-fs (loop5): Invalid log block size: 4294967295
[  132.053986][ T6644] loop1: detected capacity change from 0 to 256
[  132.333194][ T6644] FAT-fs (loop1): Directory bread(block 64) failed
[  132.340422][ T6644] FAT-fs (loop1): Directory bread(block 65) failed
[  132.347940][ T6644] FAT-fs (loop1): Directory bread(block 66) failed
[  132.355458][ T6644] FAT-fs (loop1): Directory bread(block 67) failed
[  132.367406][ T6644] FAT-fs (loop1): Directory bread(block 68) failed
[  132.376296][ T6644] FAT-fs (loop1): Directory bread(block 69) failed
[  132.383957][ T6644] FAT-fs (loop1): Directory bread(block 70) failed
[  132.390729][ T6644] FAT-fs (loop1): Directory bread(block 71) failed
[  132.398464][ T6644] FAT-fs (loop1): Directory bread(block 72) failed
[  132.405282][ T6644] FAT-fs (loop1): Directory bread(block 73) failed
[  132.686973][ T5940] hub 4-1:4.0: hub_hub_status failed (err = -32)
[  132.689059][ T6641] loop5: detected capacity change from 0 to 1024
[  132.715821][ T5940] hub 4-1:4.0: config failed, can't get hub status (err -32)
[  132.832691][ T5940] usb 4-1: USB disconnect, device number 4
[  133.032197][ T6656] binder: 6651:6656 ioctl c0306201 20000480 returned -14
[  133.116704][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  133.129967][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.811881][ T6655] overlayfs: missing 'lowerdir'
[  134.159893][ T1328] hfsplus: b-tree write err: -5, ino 3
[  134.213241][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'.
[  134.273930][ T6660] netlink: 'syz.4.233': attribute type 7 has an invalid length.
[  134.321006][ T6660] netlink: 'syz.4.233': attribute type 8 has an invalid length.
[  134.331719][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  134.346904][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  134.503496][    T9] usb 1-1: Using ep0 maxpacket: 8
[  134.547192][ T6672] binder: 6664:6672 ioctl c0306201 20000480 returned -14
[  135.286252][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  135.297272][    T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  135.306418][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.381473][    T9] usb 1-1: config 0 descriptor??
[  135.612207][    T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  136.670002][ T6695] binder: 6689:6695 ioctl c0306201 20000480 returned -14
[  137.469848][ T6696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  137.524338][    T8] usb 1-1: USB disconnect, device number 3
[  144.102702][ T5940] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  144.267641][ T5940] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  144.280909][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.331941][ T5940] usb 4-1: Product: syz
[  144.454755][ T5940] usb 4-1: Manufacturer: syz
[  144.460975][ T5940] usb 4-1: SerialNumber: syz
[  144.477256][ T5940] usb 4-1: config 0 descriptor??
[  144.787875][ T6758] loop5: detected capacity change from 0 to 2048
[  145.189340][ T6758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.425265][ T6165] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant.
[  145.482648][ T5940] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  145.490518][ T5940] usb 4-1: Firmware version (0.0) predates our first public release.
[  145.502793][ T5940] usb 4-1: Please update to version 0.2 or newer
[  146.237989][ T5940] usb 4-1: USB disconnect, device number 5
[  152.831281][ T6849] loop1: detected capacity change from 0 to 32768
[  153.208469][ T6849] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[  153.217972][ T6849] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  153.263265][ T6849] bcachefs: bch2_fs_get_tree() error: EINVAL
[  153.745962][ T6876] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.301' sets config #0
[  155.756043][ T6895] Cannot find set identified by id 0 to match
[  157.740983][ T5844] Bluetooth: hci0: unexpected event for opcode 0x0c56
[  157.892877][ T5940] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  158.764089][ T5940] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  158.772240][ T5940] usb 4-1: config 0 has no interface number 0
[  158.790732][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  158.810912][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  158.872259][ T5940] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  158.897737][ T5940] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  158.978914][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  158.992741][ T5940] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  159.001836][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.022066][ T5940] usb 4-1: config 0 descriptor??
[  159.032694][ T6905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.328044][ T5940] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  159.583913][  T764] usb 4-1: USB disconnect, device number 6
[  160.579441][  T764] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  162.624552][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'.
[  162.725785][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'.
[  164.633071][ T6974] [U] 	
[  164.935950][ T6981] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.332' sets config #0
[  166.252718][  T764] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  166.375854][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[  166.385509][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[  166.444641][  T764] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8
[  166.486567][  T764] usb 6-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.548236][  T764] usb 6-1: config 1 interface 0 has no altsetting 0
[  166.669782][  T764] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  166.731595][  T764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.772903][  T764] usb 6-1: Product: syz
[  166.787029][  T764] usb 6-1: Manufacturer: syz
[  166.812952][ T7002] fuse: Bad value for 'fd'
[  166.819466][  T764] usb 6-1: SerialNumber: syz
[  166.855697][ T6972] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  167.157450][  T764] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  167.174834][  T764] usb 6-1: USB disconnect, device number 3
[  168.714124][ T7016] vlan2: entered promiscuous mode
[  168.768314][ T7016] vlan2: entered allmulticast mode
[  168.788318][ T7017] [U] 	
[  170.172875][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'.
[  170.223249][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.354'.
[  170.727466][ T7046] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.359' sets config #0
[  171.115354][ T5938] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  171.315088][ T5938] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8
[  171.334471][ T5938] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.561626][ T5938] usb 2-1: config 1 interface 0 has no altsetting 0
[  171.654964][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.710611][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.748380][ T5938] usb 2-1: Product: syz
[  171.763664][ T5938] usb 2-1: Manufacturer: syz
[  171.768298][ T5938] usb 2-1: SerialNumber: syz
[  171.812892][ T7045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.939383][ T7061] binder: 7055:7061 ioctl c0306201 20000480 returned -14
[  172.140042][ T5938] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  172.457091][ T5938] usb 2-1: USB disconnect, device number 5
[  172.942470][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.365'.
[  173.070006][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[  173.378374][ T7058] loop3: detected capacity change from 0 to 32768
[  173.407640][ T7058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.362 (7058)
[  173.462959][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  173.632514][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  173.711357][ T7058] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.750424][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.875569][ T7058] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  173.893688][ T7058] BTRFS info (device loop3): using free-space-tree
[  173.900353][ T5886] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  173.984419][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.090419][ T5886] usb 6-1: config 0 descriptor??
[  174.301425][   T29] audit: type=1326 audit(1731474106.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x7ffc0000
[  174.337598][   T29] audit: type=1326 audit(1731474106.000:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x7ffc0000
[  174.442715][   T29] audit: type=1326 audit(1731474106.030:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7facc737e719 code=0x7ffc0000
[  174.497515][ T5886] usbhid 6-1:0.0: can't add hid device: -71
[  174.503779][   T29] audit: type=1326 audit(1731474106.030:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x7ffc0000
[  174.555034][   T29] audit: type=1326 audit(1731474106.030:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc737e719 code=0x7ffc0000
[  174.578084][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  175.180992][ T5886] usb 6-1: USB disconnect, device number 4
[  175.552439][ T7058] BTRFS error (device loop3): open_ctree failed
[  181.461752][ T7140] loop5: detected capacity change from 0 to 256
[  181.495368][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.501456][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  181.501517][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout
[  181.508777][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  181.516287][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  181.551888][ T7140] FAT-fs (loop5): Directory bread(block 64) failed
[  181.558569][ T7140] FAT-fs (loop5): Directory bread(block 65) failed
[  181.565431][ T7140] FAT-fs (loop5): Directory bread(block 66) failed
[  181.571931][ T7140] FAT-fs (loop5): Directory bread(block 67) failed
[  181.578633][ T7140] FAT-fs (loop5): Directory bread(block 68) failed
[  181.585202][ T7140] FAT-fs (loop5): Directory bread(block 69) failed
[  181.591733][ T7140] FAT-fs (loop5): Directory bread(block 70) failed
[  181.598273][ T7140] FAT-fs (loop5): Directory bread(block 71) failed
[  181.604843][ T7140] FAT-fs (loop5): Directory bread(block 72) failed
[  181.611357][ T7140] FAT-fs (loop5): Directory bread(block 73) failed
[  181.976276][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  182.112677][ T5940] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  182.132663][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  182.142241][ T5886] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  182.151052][ T5886] usb 4-1: config 0 has no interface number 0
[  182.170675][ T5886] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  182.203264][ T5886] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  182.232650][ T5886] usb 4-1: config 0 interface 41 has no altsetting 0
[  182.251302][ T5886] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  182.273513][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.288138][ T5940] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30
[  182.312619][ T5940] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132
[  182.334565][ T5886] usb 4-1: Product: syz
[  182.342634][ T5886] usb 4-1: Manufacturer: syz
[  182.356992][ T5886] usb 4-1: SerialNumber: syz
[  182.372952][ T5940] usb 5-1: config 1 interface 0 has no altsetting 0
[  182.380623][ T5886] usb 4-1: config 0 descriptor??
[  182.392825][ T5938] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  182.398578][ T7168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.409068][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  182.418532][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.432890][ T7168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.451146][ T5940] usb 5-1: Product: syz
[  182.462734][ T5940] usb 5-1: Manufacturer: syz
[  182.472789][ T5940] usb 5-1: SerialNumber: syz
[  182.593848][ T5938] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  182.602198][ T5938] usb 6-1: config 0 has no interface number 0
[  182.618129][ T5938] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  182.672773][ T5938] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.697492][ T7168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.727557][ T7168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  182.769661][ T5938] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  182.792613][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.800652][ T5938] usb 6-1: Product: syz
[  182.832671][ T5938] usb 6-1: Manufacturer: syz
[  182.837323][ T5938] usb 6-1: SerialNumber: syz
[  182.874201][ T5938] usb 6-1: config 0 descriptor??
[  182.883013][ T7175] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  182.903963][ T5938] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  182.963179][ T5938] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  183.126222][ T5940] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  183.174288][ T5938] usb 6-1: USB disconnect, device number 5
[  183.203771][ T5938] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  183.365407][ T5886] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  183.368908][ T5938] cyberjack 6-1:0.69: device disconnected
[  185.182917][ T5886] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  185.193642][ T5886] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[  185.204263][ T5886] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  185.257790][ T5886] usb 4-1: USB disconnect, device number 7
[  185.500640][ T7202] sctp: [Deprecated]: syz.3.399 (pid 7202) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.500640][ T7202] Use struct sctp_sack_info instead
[  186.322825][ T5849] usb 5-1: USB disconnect, device number 2
[  186.343641][ T5849] usblp0: removed
[  190.046947][ T7247] sctp: [Deprecated]: syz.5.413 (pid 7247) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.046947][ T7247] Use struct sctp_sack_info instead
[  192.245993][ T7266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.422'.
[  194.552528][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.562249][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.879923][ T7303] binder: 7300:7303 ioctl c0306201 20000480 returned -14
[  199.411307][ T7331] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (49)
[  203.979597][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  204.028709][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  204.036783][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  204.045910][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  204.053536][ T5844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  204.060842][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  205.251431][ T7369] chnl_net:caif_netlink_parms(): no params data found
[  206.684260][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.736534][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.775898][ T7369] bridge_slave_0: entered allmulticast mode
[  206.809518][ T7369] bridge_slave_0: entered promiscuous mode
[  206.888656][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.893579][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.905407][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.913806][ T7369] bridge_slave_1: entered allmulticast mode
[  206.920410][ T7369] bridge_slave_1: entered promiscuous mode
[  206.923085][ T5142] Bluetooth: hci6: command tx timeout
[  206.946514][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.957340][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.018141][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.027548][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.035385][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  207.044134][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.087205][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.413505][ T5849] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  207.426978][ T7369] team0: Port device team_slave_0 added
[  207.474072][ T7369] team0: Port device team_slave_1 added
[  207.530555][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.542948][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.571780][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.582850][ T5849] usb 4-1: Using ep0 maxpacket: 32
[  207.590417][ T5849] usb 4-1: config index 0 descriptor too short (expected 65535, got 18)
[  207.602653][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.624823][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.632398][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.659121][ T5849] usb 4-1: config 0 has no interfaces?
[  207.677698][ T5849] usb 4-1: config index 1 descriptor too short (expected 65535, got 18)
[  207.695218][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.727472][ T5849] usb 4-1: config 0 has no interfaces?
[  207.742768][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.771415][ T5849] usb 4-1: config index 2 descriptor too short (expected 65535, got 18)
[  207.790351][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.820844][ T5849] usb 4-1: config 0 has no interfaces?
[  207.923858][ T5849] usb 4-1: config index 3 descriptor too short (expected 65535, got 18)
[  207.974650][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.056228][ T5849] usb 4-1: config 0 has no interfaces?
[  208.056673][ T7369] hsr_slave_0: entered promiscuous mode
[  208.074846][ T7369] hsr_slave_1: entered promiscuous mode
[  208.082981][ T5849] usb 4-1: config index 4 descriptor too short (expected 65535, got 18)
[  208.091357][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.107720][ T7369] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.115346][ T5849] usb 4-1: config 0 has no interfaces?
[  208.120950][ T7369] Cannot create hsr debugfs directory
[  208.137860][ T5849] usb 4-1: config index 5 descriptor too short (expected 65535, got 18)
[  208.177507][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.214341][ T5849] usb 4-1: config 0 has no interfaces?
[  208.216289][ T2127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.252738][ T5849] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  208.262150][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.291561][ T5849] usb 4-1: Product: syz
[  208.325389][ T5849] usb 4-1: Manufacturer: syz
[  208.370570][ T5849] usb 4-1: SerialNumber: syz
[  208.384956][ T2127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.405036][ T5849] usb 4-1: config 0 descriptor??
[  208.441714][ T7395] chnl_net:caif_netlink_parms(): no params data found
[  208.580459][ T2127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.705254][ T5886] usb 4-1: USB disconnect, device number 8
[  208.725952][ T2127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.984583][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.992089][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.002645][ T5142] Bluetooth: hci6: command tx timeout
[  209.013344][ T7395] bridge_slave_0: entered allmulticast mode
[  209.024852][ T7395] bridge_slave_0: entered promiscuous mode
[  209.037072][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.052842][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.069066][ T7395] bridge_slave_1: entered allmulticast mode
[  209.076644][ T7395] bridge_slave_1: entered promiscuous mode
[  209.082862][ T5142] Bluetooth: hci2: command tx timeout
[  209.336325][ T7419] loop0: detected capacity change from 0 to 512
[  209.370139][ T7419] EXT4-fs (loop0): Invalid log block size: 4294967295
[  209.386302][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.446391][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.487655][ T7419] loop0: detected capacity change from 0 to 1024
[  210.379380][ T7395] team0: Port device team_slave_0 added
[  211.106711][ T5844] Bluetooth: hci6: command tx timeout
[  211.152979][ T2127] bridge_slave_1: left allmulticast mode
[  211.162861][ T5844] Bluetooth: hci2: command tx timeout
[  211.232887][ T2127] bridge_slave_1: left promiscuous mode
[  211.240861][ T2127] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.298266][ T2127] bridge_slave_0: left allmulticast mode
[  211.323590][ T2127] bridge_slave_0: left promiscuous mode
[  211.331216][ T2127] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.843951][ T7437] loop3: detected capacity change from 0 to 32768
[  211.856658][ T7437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.471 (7437)
[  211.884062][ T5844] Bluetooth: hci5: command 0x0406 tx timeout
[  211.905611][ T7437] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.934035][ T7437] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  211.967337][ T7437] BTRFS info (device loop3): using free-space-tree
[  212.415805][ T5835] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.838214][ T2127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.863814][ T2127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.878742][ T2127] bond0 (unregistering): Released all slaves
[  212.938019][ T7395] team0: Port device team_slave_1 added
[  213.127244][ T7369] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  213.148406][ T7369] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  213.163293][ T5142] Bluetooth: hci6: command tx timeout
[  213.252982][ T5142] Bluetooth: hci2: command tx timeout
[  213.353291][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.360284][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.396692][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.422987][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.434227][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.460825][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.477578][ T7369] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  213.501606][ T7369] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  213.604544][ T7482] loop5: detected capacity change from 0 to 512
[  213.650930][ T7482] EXT4-fs (loop5): Invalid log block size: 4294967295
[  213.773625][ T7482] loop5: detected capacity change from 0 to 1024
[  214.302965][ T7395] hsr_slave_0: entered promiscuous mode
[  214.326939][ T7395] hsr_slave_1: entered promiscuous mode
[  214.357431][ T7395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.395766][ T7395] Cannot create hsr debugfs directory
[  214.502683][ T2127] hsr_slave_0: left promiscuous mode
[  214.592988][ T2127] hsr_slave_1: left promiscuous mode
[  214.683060][ T2127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.694690][ T2127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.754187][ T2127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.761662][ T2127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.872139][ T2127] veth1_macvtap: left promiscuous mode
[  214.878785][ T7499] sctp: [Deprecated]: syz.3.485 (pid 7499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.878785][ T7499] Use struct sctp_sack_info instead
[  214.896342][ T2127] veth0_macvtap: left promiscuous mode
[  214.904977][ T2127] veth1_vlan: left promiscuous mode
[  214.910570][ T2127] veth0_vlan: left promiscuous mode
[  215.334730][ T5142] Bluetooth: hci2: command tx timeout
[  216.895176][ T2127] team0 (unregistering): Port device team_slave_1 removed
[  216.963936][ T2127] team0 (unregistering): Port device team_slave_0 removed
[  217.493562][   T30] INFO: task syz-executor:5827 blocked for more than 144 seconds.
[  217.501436][   T30]       Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  217.518445][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  217.527578][   T30] task:syz-executor    state:D stack:19568 pid:5827  tgid:5827  ppid:1      flags:0x00004004
[  217.538423][   T30] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  217.541804][   T30]  <TASK>
[  217.581959][   T30]  __schedule+0x1850/0x4c30
[  217.867809][   T30]  ? __pfx___schedule+0x10/0x10
[  217.872807][   T30]  ? __pfx_lock_release+0x10/0x10
[  217.882847][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  217.888801][   T30]  ? __pfx___bch2_print+0x10/0x10
[  217.893928][   T30]  ? schedule+0x90/0x320
[  217.952680][   T30]  schedule+0x14b/0x320
[  217.956895][   T30]  bch2_fs_read_only+0xae8/0x1270
[  217.961995][   T30]  ? __pfx_bch2_fs_read_only+0x10/0x10
[  217.967673][   T30]  ? __bch2_print+0x17a/0x220
[  217.972776][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  217.978875][   T30]  ? down_write+0x18c/0x220
[  217.983997][   T30]  ? __pfx_down_write+0x10/0x10
[  217.988855][   T30]  ? hook_sb_delete+0xaa0/0xbd0
[  218.002640][   T30]  __bch2_fs_stop+0x105/0x5c0
[  218.007369][   T30]  ? __pfx___bch2_fs_stop+0x10/0x10
[  218.012680][   T30]  ? __pfx_evict_inodes+0x10/0x10
[  218.017738][   T30]  ? bch2_sync_fs+0x110/0x300
[  218.022904][   T30]  ? __pfx_bch2_put_super+0x10/0x10
[  218.028143][   T30]  generic_shutdown_super+0x139/0x2d0
[  218.033591][   T30]  bch2_kill_sb+0x41/0x50
[  218.042786][   T30]  deactivate_locked_super+0xc4/0x130
[  218.048203][   T30]  cleanup_mnt+0x41f/0x4b0
[  218.052687][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  218.062749][   T30]  task_work_run+0x24f/0x310
[  218.067379][   T30]  ? __pfx_task_work_run+0x10/0x10
[  218.073052][   T30]  ? __x64_sys_umount+0x123/0x170
[  218.078106][   T30]  ? syscall_exit_to_user_mode+0xa3/0x340
[  218.084482][   T30]  syscall_exit_to_user_mode+0x13f/0x340
[  218.092725][   T30]  do_syscall_64+0x100/0x230
[  218.097359][   T30]  ? clear_bhb_loop+0x35/0x90
[  218.102052][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.112619][   T30] RIP: 0033:0x7f0d45d7fa47
[  218.117075][   T30] RSP: 002b:00007ffdf831ac58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  218.125661][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0d45d7fa47
[  218.133691][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf831ad10
[  218.141682][   T30] RBP: 00007ffdf831ad10 R08: 0000000000000000 R09: 0000000000000000
[  218.149807][   T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf831bd90
[  218.157858][   T30] R13: 00007f0d45df14b4 R14: 00000000000101c7 R15: 00007ffdf831bdd0
[  218.165952][   T30]  </TASK>
[  218.172766][   T30] INFO: task kworker/0:7:5935 blocked for more than 145 seconds.
[  218.181474][   T30]       Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  218.188691][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  218.202656][   T30] task:kworker/0:7     state:D stack:16016 pid:5935  tgid:5935  ppid:2      flags:0x00004000
[  218.213012][   T30] Workqueue: bcachefs_write_ref bch2_delete_dead_snapshots_work (bcachefs-delete-dead-snapshots/)
[  218.232759][   T30] Call Trace:
[  218.236088][   T30]  <TASK>
[  218.239035][   T30]  __schedule+0x1850/0x4c30
[  218.243643][   T30]  ? __pfx___schedule+0x10/0x10
[  218.248513][   T30]  ? __pfx_lock_release+0x10/0x10
[  218.253624][   T30]  ? schedule+0x90/0x320
[  218.262756][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  218.268173][   T30]  ? schedule+0x90/0x320
[  218.272436][   T30]  schedule+0x14b/0x320
[  218.277160][   T30]  schedule_timeout+0x15a/0x290
[  218.283292][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  218.288717][   T30]  ? lock_release+0xbf/0xa30
[  218.293470][   T30]  ? __pfx_process_timeout+0x10/0x10
[  218.302749][   T30]  ? closure_put_after_sub+0x1b0/0x330
[  218.308247][   T30]  __closure_sync_timeout+0x2d8/0x450
[  218.313716][   T30]  ? __pfx_lock_release+0x10/0x10
[  218.318744][   T30]  ? __closure_sync_timeout+0x164/0x450
[  218.332622][   T30]  ? __pfx___closure_sync_timeout+0x10/0x10
[  218.338550][   T30]  ? btree_node_unlock+0x13c/0x270
[  218.343767][   T30]  __bch2_wait_on_allocator+0x11a/0x250
[  218.352798][   T30]  bch2_btree_update_start+0x11a5/0x14e0
[  218.358481][   T30]  ? bch2_btree_split_leaf+0x121/0x880
[  218.364230][   T30]  ? __pfx_bch2_btree_update_start+0x10/0x10
[  218.372752][   T30]  ? bch2_delete_dead_snapshots+0x1d31/0x5ae0
[  218.379811][   T30]  ? run_btree_triggers+0x30f/0x1270
[  218.392682][   T30]  ? __pfx_closure_sync_fn+0x10/0x10
[  218.398015][   T30]  ? __do_six_trylock+0x832/0x9f0
[  218.403105][   T30]  bch2_btree_split_leaf+0x121/0x880
[  218.412744][   T30]  bch2_trans_commit_error+0x212/0x1390
[  218.418326][   T30]  ? bch2_delete_dead_snapshots+0x19b6/0x5ae0
[  218.424503][   T30]  ? six_unlock_ip+0x2ce/0x3e0
[  218.432761][   T30]  ? bch2_trans_unlock_write+0x892/0xce0
[  218.438486][   T30]  ? __pfx_bch2_trans_commit_error+0x10/0x10
[  218.444546][   T30]  ? bch2_trans_unlock_write+0xc2d/0xce0
[  218.450172][   T30]  ? bch2_btree_path_verify_locks+0x633/0x720
[  218.462736][   T30]  ? bch2_trans_verify_locks+0x339/0x3c0
[  218.468441][   T30]  __bch2_trans_commit+0x8069/0x9610
[  218.473861][   T30]  ? bch2_snapshot_equiv+0x1f/0x2c0
[  218.481846][   T30]  ? bch2_delete_dead_snapshots+0x19b6/0x5ae0
[  218.488181][   T30]  ? __pfx___bch2_trans_commit+0x10/0x10
[  218.493902][   T30]  ? __asan_memcpy+0x40/0x70
[  218.498525][   T30]  bch2_delete_dead_snapshots+0x19b6/0x5ae0
[  218.504582][   T30]  ? bch2_delete_dead_snapshots+0x2a5/0x5ae0
[  218.510608][   T30]  ? __pfx_bch2_delete_dead_snapshots+0x10/0x10
[  218.516931][   T30]  ? preempt_count_add+0x93/0x190
[  218.523018][   T30]  ? unwind_next_frame+0x193b/0x22d0
[  218.528348][   T30]  ? ret_from_fork_asm+0x1a/0x30
[  218.533485][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  218.539647][   T30]  ? arch_stack_walk+0x11c/0x150
[  218.544656][   T30]  ? ret_from_fork_asm+0x1a/0x30
[  218.549621][   T30]  ? stack_trace_save+0x118/0x1d0
[  218.562659][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  218.568069][   T30]  ? check_noncircular+0x259/0x4a0
[  218.589674][   T30]  ? __pfx_lockdep_unlock+0x10/0x10
[  218.595030][   T30]  ? validate_chain+0x15c0/0x5920
[  218.600101][   T30]  ? bch2_delete_dead_snapshots+0x2a5/0x5ae0
[  218.615316][   T30]  ? __pfx_validate_chain+0x10/0x10
[  218.620567][   T30]  ? bch2_delete_dead_snapshots+0x2a5/0x5ae0
[  218.626652][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  218.632737][   T30]  ? bch2_delete_dead_snapshots+0x2a5/0x5ae0
[  218.638756][   T30]  ? format_decode+0xc5f/0x1bb0
[  218.643700][   T30]  ? bch2_delete_dead_snapshots+0x16dc/0x5ae0
[  218.652758][   T30]  ? vsnprintf+0x1ccd/0x1da0
[  218.657393][   T30]  ? __pfx_vsnprintf+0x10/0x10
[  218.662637][   T30]  ? set_worker_desc+0x15d/0x1d0
[  218.672768][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  218.677836][   T30]  ? process_scheduled_works+0xa05/0x1850
[  218.683764][   T30]  ? __pfx_set_worker_desc+0x10/0x10
[  218.693342][   T30]  ? process_scheduled_works+0x976/0x1850
[  218.699107][   T30]  bch2_delete_dead_snapshots_work+0x34/0x40
[  218.705197][   T30]  process_scheduled_works+0xa63/0x1850
[  218.712794][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  218.718825][   T30]  ? assign_work+0x364/0x3d0
[  218.723512][   T30]  worker_thread+0x870/0xd30
[  218.732768][   T30]  ? __kthread_parkme+0x169/0x1d0
[  218.737834][   T30]  ? __pfx_worker_thread+0x10/0x10
[  218.743032][   T30]  kthread+0x2f0/0x390
[  218.747110][   T30]  ? __pfx_worker_thread+0x10/0x10
[  218.752225][   T30]  ? __pfx_kthread+0x10/0x10
[  218.761633][   T30]  ret_from_fork+0x4b/0x80
[  218.766245][   T30]  ? __pfx_kthread+0x10/0x10
[  218.770857][   T30]  ret_from_fork_asm+0x1a/0x30
[  218.775724][   T30]  </TASK>
[  218.782780][   T30] INFO: task bch-reclaim/loo:5967 blocked for more than 145 seconds.
[  218.791827][   T30]       Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  218.799207][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  218.808034][   T30] task:bch-reclaim/loo state:D stack:21080 pid:5967  tgid:5967  ppid:2      flags:0x00004000
[  218.818298][   T30] Call Trace:
[  218.821610][   T30]  <TASK>
[  218.824620][   T30]  __schedule+0x1850/0x4c30
[  218.829147][   T30]  ? __pfx___schedule+0x10/0x10
[  218.834089][   T30]  ? __pfx_lock_release+0x10/0x10
[  218.842716][   T30]  ? __closure_wake_up+0xa4/0xb0
[  218.847686][   T30]  ? schedule+0x90/0x320
[  218.852682][   T30]  schedule+0x14b/0x320
[  218.862724][   T30]  schedule_timeout+0x15a/0x290
[  218.867612][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  218.873082][   T30]  ? lock_release+0xbf/0xa30
[  218.882693][   T30]  ? __pfx_process_timeout+0x10/0x10
[  218.888031][   T30]  ? closure_put_after_sub+0x1b0/0x330
[  218.894036][   T30]  __closure_sync_timeout+0x2d8/0x450
[  218.899442][   T30]  ? __pfx_lock_release+0x10/0x10
[  218.905041][   T30]  ? __closure_sync_timeout+0x164/0x450
[  218.912761][   T30]  ? __pfx___closure_sync_timeout+0x10/0x10
[  218.918697][   T30]  ? btree_node_unlock+0x13c/0x270
[  218.923922][   T30]  __bch2_wait_on_allocator+0x11a/0x250
[  218.929497][   T30]  bch2_btree_update_start+0x11a5/0x14e0
[  218.935246][   T30]  ? bch2_btree_split_leaf+0x121/0x880
[  218.940731][   T30]  ? __pfx_bch2_btree_update_start+0x10/0x10
[  218.946822][   T30]  ? bch2_btree_write_buffer_flush_locked+0x4f28/0x5a40
[  218.953855][   T30]  ? __pfx_closure_sync_fn+0x10/0x10
[  218.962705][   T30]  ? __do_six_trylock+0x832/0x9f0
[  218.972686][   T30]  bch2_btree_split_leaf+0x121/0x880
[  218.988032][   T30]  bch2_trans_commit_error+0x212/0x1390
[  219.003147][   T30]  ? bch2_btree_write_buffer_flush_locked+0x4f72/0x5a40
[  219.010221][   T30]  ? six_unlock_ip+0x2ce/0x3e0
[  219.015109][   T30]  ? bch2_trans_unlock_write+0x892/0xce0
[  219.022774][   T30]  ? __pfx_bch2_trans_commit_error+0x10/0x10
[  219.028787][   T30]  ? bch2_trans_unlock_write+0xc2d/0xce0
[  219.042819][   T30]  ? bch2_btree_path_verify_locks+0x633/0x720
[  219.048936][   T30]  ? bch2_trans_verify_locks+0x339/0x3c0
[  219.054736][   T30]  __bch2_trans_commit+0x8069/0x9610
[  219.060068][   T30]  ? bch2_btree_write_buffer_flush_locked+0x4f72/0x5a40
[  219.082490][   T30]  ? __pfx___bch2_trans_commit+0x10/0x10
[  219.088426][   T30]  ? __asan_memset+0x23/0x50
[  219.093362][   T30]  bch2_btree_write_buffer_flush_locked+0x4f72/0x5a40
[  219.101124][   T30]  ? __pfx_bch2_btree_write_buffer_flush_locked+0x10/0x10
[  219.108318][   T30]  ? __pfx___mutex_trylock_common+0x10/0x10
[  219.114284][   T30]  ? bch2_btree_write_buffer_flush_locked+0x4e8b/0x5a40
[  219.121253][   T30]  ? __mutex_lock+0x37f/0xee0
[  219.126014][   T30]  ? __bch2_next_write_buffer_flush_journal_buf+0x287/0x2a0
[  219.133384][   T30]  ? bch2_btree_write_buffer_flush_locked+0x1582/0x5a40
[  219.140343][   T30]  ? __pfx_bch2_next_write_buffer_flush_journal_buf+0x10/0x10
[  219.147889][   T30]  ? bch2_trans_unlock+0x3a6/0x470
[  219.153289][   T30]  btree_write_buffer_flush_seq+0x1a43/0x1bc0
[  219.159398][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  219.164495][   T30]  ? __asan_memset+0x23/0x50
[  219.169106][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  219.174548][   T30]  ? __pfx_btree_write_buffer_flush_seq+0x10/0x10
[  219.180979][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  219.186860][   T30]  ? preempt_schedule_common+0x84/0xd0
[  219.192342][   T30]  ? preempt_schedule+0xe1/0xf0
[  219.197262][   T30]  ? __pfx_preempt_schedule+0x10/0x10
[  219.203693][   T30]  ? __bch2_trans_get+0x981/0xd30
[  219.208763][   T30]  bch2_btree_write_buffer_journal_flush+0x4e/0x80
[  219.215320][   T30]  ? __pfx_bch2_btree_write_buffer_journal_flush+0x10/0x10
[  219.222687][   T30]  journal_flush_pins+0x5f7/0xb20
[  219.227758][   T30]  __bch2_journal_reclaim+0x789/0xdc0
[  219.233234][   T30]  bch2_journal_reclaim_thread+0x17a/0x570
[  219.239064][   T30]  ? bch2_journal_reclaim_thread+0x267/0x570
[  219.245161][   T30]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  219.251511][   T30]  kthread+0x2f0/0x390
[  219.255655][   T30]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  219.262028][   T30]  ? __pfx_kthread+0x10/0x10
[  219.266915][   T30]  ret_from_fork+0x4b/0x80
[  219.271346][   T30]  ? __pfx_kthread+0x10/0x10
[  219.275979][   T30]  ret_from_fork_asm+0x1a/0x30
[  219.280770][   T30]  </TASK>
[  219.283908][   T30] INFO: task bch-copygc/loop:5974 blocked for more than 146 seconds.
[  219.292007][   T30]       Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  219.314396][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  219.323420][   T30] task:bch-copygc/loop state:D stack:20272 pid:5974  tgid:5974  ppid:2      flags:0x00004000
[  219.333849][   T30] Call Trace:
[  219.337155][   T30]  <TASK>
[  219.340105][   T30]  __schedule+0x1850/0x4c30
[  219.345528][   T30]  ? __pfx___schedule+0x10/0x10
[  219.350418][   T30]  ? __pfx_lock_release+0x10/0x10
[  219.355651][   T30]  ? schedule+0x90/0x320
[  219.359955][   T30]  schedule+0x14b/0x320
[  219.364306][   T30]  schedule_timeout+0x15a/0x290
[  219.369183][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  219.374643][   T30]  ? __pfx_process_timeout+0x10/0x10
[  219.379959][   T30]  ? closure_return_sync+0x203/0x420
[  219.385520][   T30]  ? __pfx_lock_release+0x10/0x10
[  219.390585][   T30]  ? closure_put_after_sub+0x1b0/0x330
[  219.396137][   T30]  __closure_sync_timeout+0x2d8/0x450
[  219.401534][   T30]  ? rcu_is_watching+0x15/0xb0
[  219.407199][   T30]  ? __closure_sync_timeout+0x164/0x450
[  219.414648][   T30]  ? __pfx___closure_sync_timeout+0x10/0x10
[  219.420700][   T30]  __bch2_wait_on_allocator+0x11a/0x250
[  219.426413][   T30]  __bch2_write+0x562a/0x5dd0
[  219.431134][   T30]  ? deref_stack_reg+0x17c/0x210
[  219.436159][   T30]  ? __pfx_validate_chain+0x10/0x10
[  219.441374][   T30]  ? lockdep_unlock+0x16a/0x300
[  219.446440][   T30]  ? mark_lock+0x9a/0x360
[  219.450813][   T30]  ? __pfx___bch2_write+0x10/0x10
[  219.455979][   T30]  ? __pfx_validate_chain+0x10/0x10
[  219.461202][   T30]  ? __pfx_validate_chain+0x10/0x10
[  219.466592][   T30]  ? __lock_acquire+0x1397/0x2100
[  219.471666][   T30]  bch2_write+0x9b5/0x1760
[  219.476147][   T30]  ? mark_lock+0x9a/0x360
[  219.481343][   T30]  ? __pfx_bch2_write+0x10/0x10
[  219.486377][   T30]  ? bch2_data_update_read_done+0xfd/0x330
[  219.492229][   T30]  bch2_data_update_read_done+0x22e/0x330
[  219.497999][   T30]  ? __pfx_bch2_data_update_read_done+0x10/0x10
[  219.504439][   T30]  ? bch2_trans_srcu_unlock+0x57/0x5c0
[  219.510432][   T30]  bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0
[  219.517084][   T30]  ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10
[  219.526024][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  219.531979][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.538392][   T30]  ? finish_wait+0xd4/0x1e0
[  219.543068][   T30]  move_buckets_wait+0x2ba/0x1290
[  219.548116][   T30]  ? __pfx_move_buckets_wait+0x10/0x10
[  219.553779][   T30]  ? bch2_get_next_online_dev+0x2b/0x4f0
[  219.559437][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  219.565888][   T30]  ? bch2_get_next_online_dev+0x4b9/0x4f0
[  219.571635][   T30]  ? bch2_get_next_online_dev+0x2b/0x4f0
[  219.577524][   T30]  bch2_copygc_thread+0x7ee/0xba0
[  219.583768][   T30]  ? __pfx_bch2_copygc_thread+0x10/0x10
[  219.589358][   T30]  ? bch2_copygc_thread+0x1ae/0xba0
[  219.594916][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  219.600920][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  219.606227][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  219.612898][   T30]  ? __kthread_parkme+0x169/0x1d0
[  219.617951][   T30]  ? __pfx_bch2_copygc_thread+0x10/0x10
[  219.623585][   T30]  kthread+0x2f0/0x390
[  219.627677][   T30]  ? __pfx_bch2_copygc_thread+0x10/0x10
[  219.633379][   T30]  ? __pfx_kthread+0x10/0x10
[  219.637985][   T30]  ret_from_fork+0x4b/0x80
[  219.642389][   T30]  ? __pfx_kthread+0x10/0x10
[  219.649511][   T30]  ret_from_fork_asm+0x1a/0x30
[  219.654943][   T30]  </TASK>
[  219.658010][   T30] 
[  219.658010][   T30] Showing all locks held in the system:
[  219.666040][   T30] 1 lock held by khungtaskd/30:
[  219.670911][   T30]  #0: ffffffff8e93c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  219.692687][   T30] 3 locks held by kworker/u8:3/52:
[  219.697844][   T30] 2 locks held by kworker/u8:4/62:
[  219.710529][   T30] 4 locks held by kworker/u8:6/2127:
[  219.722581][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  219.742746][   T30]  #1: ffffc90004c0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  219.762777][   T30]  #2: ffffffff8fcc3650 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0
[  219.786940][   T30]  #3: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0
[  219.814055][   T30] 3 locks held by kworker/u8:7/2897:
[  219.819390][   T30]  #0: ffff88814d382148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  219.831133][   T30]  #1: ffffc9000b5ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  219.844136][   T30]  #2: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0
[  219.854023][   T30] 1 lock held by dhcpcd/5497:
[  219.858723][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  219.868539][   T30] 2 locks held by getty/5587:
[  219.873639][   T30]  #0: ffff888030cf70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  219.883510][   T30]  #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  219.913289][   T30] 2 locks held by syz-executor/5827:
[  219.919590][   T30]  #0: ffff88806bde20e0 (&type->s_umount_key#48){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0
[  219.940301][   T30]  #1: ffff88805c400278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0
[  219.949831][   T30] 3 locks held by kworker/1:5/5886:
[  219.955074][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  219.966162][   T30]  #1: ffffc90004317d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  219.976532][   T30]  #2: ffffffff8e941af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  219.987545][   T30] 4 locks held by kworker/0:7/5935:
[  219.992816][   T30]  #0: ffff8881433fa948 ((wq_completion)bcachefs_write_ref){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  220.004950][   T30]  #1: ffffc90004e8fd00 ((work_completion)(&c->snapshot_delete_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  220.018856][   T30]  #2: ffff88805c4043a8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x9a/0x1a0
[  220.029697][   T30]  #3: ffff88805c426710 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x682/0x14e0
[  220.039900][   T30] 4 locks held by bch-reclaim/loo/5967:
[  220.046009][   T30]  #0: ffff88805c44b128 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16d/0x570
[  220.056877][   T30]  #1: ffff88805c4043a8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7e4/0xd30
[  220.067383][   T30]  #2: ffff88805c404750 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1a39/0x1bc0
[  220.078666][   T30]  #3: ffff88805c426710 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x682/0x14e0
[  220.088844][   T30] 3 locks held by kworker/u8:11/6391:
[  220.094285][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  220.106021][   T30]  #1: ffffc9001a1efd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  220.117059][   T30]  #2: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  220.127051][   T30] 1 lock held by syz-executor/7369:
[  220.132268][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  220.141785][   T30] 1 lock held by syz-executor/7395:
[  220.148277][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  220.157979][   T30] 1 lock held by syz.0.488/7505:
[  220.162992][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  220.172430][   T30] 1 lock held by syz.0.488/7509:
[  220.177418][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  220.186985][   T30] 2 locks held by syz.5.491/7525:
[  220.192017][   T30]  #0: ffff888028d10258 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xb7/0xde0
[  220.201215][   T30]  #1: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x399/0x4e0
[  220.210674][   T30] 1 lock held by syz.5.491/7526:
[  220.215637][   T30]  #0: ffffffff8fcd01a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  220.226127][   T30] 3 locks held by syz.3.494/7529:
[  220.231173][   T30]  #0: ffff888062ab4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510
[  220.241142][   T30]  #1: ffff888062ab4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0
[  220.250942][   T30]  #2: ffffffff8fe3dae8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240
[  220.261097][   T30] 
[  220.263517][   T30] =============================================
[  220.263517][   T30] 
[  220.271966][   T30] NMI backtrace for cpu 0
[  220.276318][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  220.286300][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  220.296351][   T30] Call Trace:
[  220.299624][   T30]  <TASK>
[  220.302554][   T30]  dump_stack_lvl+0x241/0x360
[  220.307258][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.312481][   T30]  ? __pfx__printk+0x10/0x10
[  220.317090][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  220.322038][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  220.327502][   T30]  ? _printk+0xd5/0x120
[  220.331677][   T30]  ? __pfx__printk+0x10/0x10
[  220.336301][   T30]  ? __wake_up_klogd+0xcc/0x110
[  220.341166][   T30]  ? __pfx__printk+0x10/0x10
[  220.345788][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  220.350820][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  220.356813][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  220.362807][   T30]  watchdog+0xffb/0x1040
[  220.367050][   T30]  ? watchdog+0x1ea/0x1040
[  220.371460][   T30]  ? __pfx_watchdog+0x10/0x10
[  220.376147][   T30]  kthread+0x2f0/0x390
[  220.380226][   T30]  ? __pfx_watchdog+0x10/0x10
[  220.384906][   T30]  ? __pfx_kthread+0x10/0x10
[  220.389498][   T30]  ret_from_fork+0x4b/0x80
[  220.393914][   T30]  ? __pfx_kthread+0x10/0x10
[  220.398503][   T30]  ret_from_fork_asm+0x1a/0x30
[  220.403279][   T30]  </TASK>
[  220.407655][   T30] Sending NMI from CPU 0 to CPUs 1:
[  220.413532][    C1] NMI backtrace for cpu 1
[  220.413544][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  220.413562][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  220.413572][    C1] Workqueue: bat_events batadv_nc_worker
[  220.413596][    C1] RIP: 0010:trace_irq_disable+0x27/0x120
[  220.413614][    C1] Code: 90 90 90 41 56 53 66 90 65 8b 05 b0 91 5c 7e 83 f8 08 73 3f 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 70 88 1c 90 be 08 00 00 00 <e8> 64 b5 62 00 48 0f a3 1d 2c 45 75 0e 73 12 e8 55 bd dd ff 84 c0
[  220.413626][    C1] RSP: 0018:ffffc900001179e8 EFLAGS: 00000046
[  220.413638][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001
[  220.413648][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901c8870
[  220.413658][    C1] RBP: ffffc90000117ab0 R08: ffff888050854503 R09: 1ffff1100a10a8a0
[  220.413669][    C1] R10: dffffc0000000000 R11: ffffed100a10a8a1 R12: dffffc0000000000
[  220.413680][    C1] R13: 1ffff92000022f48 R14: ffffc90000117a40 R15: 0000000000000201
[  220.413690][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  220.413703][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  220.413713][    C1] CR2: 00007f2cfccc7866 CR3: 000000000e738000 CR4: 00000000003526f0
[  220.413727][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  220.413736][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  220.413745][    C1] Call Trace:
[  220.413751][    C1]  <NMI>
[  220.413757][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  220.413777][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  220.413794][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  220.413813][    C1]  ? nmi_handle+0x2a/0x5a0
[  220.413835][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  220.413854][    C1]  ? nmi_handle+0x14f/0x5a0
[  220.413869][    C1]  ? nmi_handle+0x2a/0x5a0
[  220.413885][    C1]  ? trace_irq_disable+0x27/0x120
[  220.413899][    C1]  ? default_do_nmi+0x63/0x160
[  220.413917][    C1]  ? exc_nmi+0x123/0x1f0
[  220.413935][    C1]  ? end_repeat_nmi+0xf/0x53
[  220.413956][    C1]  ? trace_irq_disable+0x27/0x120
[  220.413970][    C1]  ? trace_irq_disable+0x27/0x120
[  220.413985][    C1]  ? trace_irq_disable+0x27/0x120
[  220.413999][    C1]  </NMI>
[  220.414004][    C1]  <TASK>
[  220.414009][    C1]  __local_bh_enable_ip+0x106/0x200
[  220.414029][    C1]  ? batadv_nc_purge_paths+0x312/0x3b0
[  220.414048][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  220.414068][    C1]  ? batadv_nc_purge_paths+0xe8/0x3b0
[  220.414087][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  220.414108][    C1]  batadv_nc_purge_paths+0x312/0x3b0
[  220.414133][    C1]  batadv_nc_worker+0x328/0x610
[  220.414150][    C1]  ? batadv_nc_worker+0xcb/0x610
[  220.414174][    C1]  ? process_scheduled_works+0x976/0x1850
[  220.414195][    C1]  process_scheduled_works+0xa63/0x1850
[  220.414227][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  220.414250][    C1]  ? assign_work+0x364/0x3d0
[  220.414271][    C1]  worker_thread+0x870/0xd30
[  220.414291][    C1]  ? __kthread_parkme+0x169/0x1d0
[  220.414307][    C1]  ? __pfx_worker_thread+0x10/0x10
[  220.414321][    C1]  kthread+0x2f0/0x390
[  220.414336][    C1]  ? __pfx_worker_thread+0x10/0x10
[  220.414349][    C1]  ? __pfx_kthread+0x10/0x10
[  220.414365][    C1]  ret_from_fork+0x4b/0x80
[  220.414378][    C1]  ? __pfx_kthread+0x10/0x10
[  220.414393][    C1]  ret_from_fork_asm+0x1a/0x30
[  220.414418][    C1]  </TASK>
[  220.801491][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  220.832983][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'.
[  220.848104][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  220.855000][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc6-next-20241108-syzkaller #0
[  220.864997][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  220.875166][   T30] Call Trace:
[  220.878465][   T30]  <TASK>
[  220.881415][   T30]  dump_stack_lvl+0x241/0x360
[  220.886125][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.891347][   T30]  ? __pfx__printk+0x10/0x10
[  220.895953][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  220.901962][   T30]  ? vscnprintf+0x5d/0x90
[  220.906313][   T30]  panic+0x349/0x880
[  220.910211][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  220.916363][   T30]  ? __pfx_panic+0x10/0x10
[  220.920771][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  220.926139][   T30]  ? __irq_work_queue_local+0x137/0x410
[  220.931682][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  220.937045][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  220.943199][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  220.949356][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  220.955511][   T30]  watchdog+0x103a/0x1040
[  220.959837][   T30]  ? watchdog+0x1ea/0x1040
[  220.964253][   T30]  ? __pfx_watchdog+0x10/0x10
[  220.968923][   T30]  kthread+0x2f0/0x390
[  220.972985][   T30]  ? __pfx_watchdog+0x10/0x10
[  220.977757][   T30]  ? __pfx_kthread+0x10/0x10
[  220.982338][   T30]  ret_from_fork+0x4b/0x80
[  220.986744][   T30]  ? __pfx_kthread+0x10/0x10
[  220.991328][   T30]  ret_from_fork_asm+0x1a/0x30
[  220.996098][   T30]  </TASK>
[  220.999360][   T30] Kernel Offset: disabled
[  221.003677][   T30] Rebooting in 86400 seconds..