last executing test programs:

50.227420437s ago: executing program 0 (id=4642):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff)

49.894120781s ago: executing program 0 (id=4644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

49.610394457s ago: executing program 0 (id=4645):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @local, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8004000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

49.310543194s ago: executing program 0 (id=4647):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x552d, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f0000000e40)=[{&(0x7f0000000a00)="faae4346", 0x4}, {0x0, 0x1f}], 0x2, 0x7fff, 0x0, 0x0)

45.022153718s ago: executing program 0 (id=4675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e7ffffff000000000300000018000180040002800e0001006590513a76"], 0x2c}}, 0x0)

44.435425371s ago: executing program 0 (id=4678):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$eJzs3UFrE0EYxvFnNrFGW+raVgTxINWCJ2nrRbwI0m/gxZOoTYRiqKAV1IvVs/gBvPsV/BCexLPgzZPee6vMuxOzSbPZNCZOEv8/SNhk5915Jzvp7JtQIgD/rdtb3z9e/+FvTqqoIummlEiqSVVJ53S+9nx3b2ev2aj3O1DFIvzNKYt0R9ps7zZ6hfo4iwhS/6iqhfxzGI/at9gZYBLYuz/zK/98Ip0M707bX4uS3ejtx04gMnegA73QYuw8AABxhfU/Cev8Qrh+TxJpLSz7nev/lC+gB7ETiCy3/luVdej8+T1ju9r1npVwfn/SqhKH6WtO2cyqdCRQVlVaLsmpRzvNxrXtJ816ore6FeSardh9PZu6Lfls3xw99GqP2rSP4cc+b2M44cewWZD/8mh7LOc+uy/unkv1QfU/13/VQ+dPk52ptOtMZfmvFx/RRplmrQpGedY6uRB6CPqOsqKuNPLmwjE7PiBIy/K0qKWuqGx0GyVRyz2jNkuiVrqj2rO5OHLc3Ht3163qpz5pK3f9n/hXe02DvDN9G2sZZkbf8VStZWrribtkT+1f7NkyGXpIOL53eqgbWnz28tXjB81m4ykbQ2y8Di/mpOQz6EZrEkxKPjO74V/kKL1X/3pmRvmrhH+sfdKPGch3M7PCX3e5rP7L1SvrViL5u7TPdfph2cFzR9woqA2W7P50cQXXwdlHD/NyRV9FDFpzXb4qXRmkx0wa8pwRbktfdZ/P/wEAAAAAAAAAAAAAAAAAAKbN6P7loKaiXbHHCAAAAAAAAAAAAAAAAAAAAADAtJu43/+9o+wRv/8LjN3vAAAA//9nXXUi")
sync()
unlink(&(0x7f0000000280)='./file1\x00')

34.803622052s ago: executing program 5 (id=4737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

34.185756446s ago: executing program 5 (id=4742):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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")
sched_setaffinity(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)

28.771217559s ago: executing program 5 (id=4762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0)

27.407916637s ago: executing program 5 (id=4766):
unshare(0x22020600)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)

27.037932595s ago: executing program 5 (id=4768):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37]}}})

26.868828202s ago: executing program 1 (id=4769):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r1=>0x0}, &(0x7f0000000500)=0xc)
ioprio_set$uid(0x3, r1, 0x6000)

26.663994933s ago: executing program 5 (id=4770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'})

26.510746699s ago: executing program 1 (id=4771):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

26.0699649s ago: executing program 1 (id=4773):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60)
getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000140)=""/192, 0x20000057)

25.772010201s ago: executing program 1 (id=4776):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0xd, 0x6ab, &(0x7f0000001ec0)="$eJzs3cFvHGfdB/DvrNcbb94qr9MmbYSKiBKpIEUkTqwUwgWDEPKhQlU5cLYSp7GycSrbRW6FwAUEJyQO/QMKkm+ckLgHhXO59epjJSQuEYeIi9HMztpr7zq2Y8d24POJxvPMPDPP/Oa3z8zszmY1Af5nTV9J81GKTF95Z7mcXlud7KytTp6qqztJynIjaXZHKeaT4nEyVdYX3fnlOP3jAZ/O3XrviydrX3anmulbr/Gs9YYYsuxKPeRikpF6PGh0r5vY0t7tJK8MLNLaa1tbFiyTdrkew7FbH7Cyn9X3c9wCJ0zv6lR0r5sDxpPTScbq9wGpzw6No4vwxdjXWQ4AAABeHlvu1X3+8PgCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJdV/fz/oh4avecFXkzRe/5/q+8Zgq3jjfbgHh13AAAAAAAAAABwCL72NE+znDO96fWi+s7/UjVxLv9eT/4vH2Yxs1nI1SxnJktZykKuJxnva6i1PLO0tHB9Y83S8DVvDF3zxlHtMQAAAAAAAAD8V/plpje//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJOgSEa6o2o41yuPp9FMt65VLreS/L1XfkkUw2Y+Ovo4AAAA4EDGnmOd/3+ap1nOmd70elF95n+9+rw8lg8zn6XMZSmdzOZO/Rm6/NTfWFud7KytTj4oh8F2v/fPfYVRtVjfXxi+5QvVEu3czVw152puV8HcSaNas3ShF8/wuD4pYyq+W9tjZM06reXGfr/TXYRDsd9bEeNlcMlGRibq2MpsnO1moKhu1CTbM7Hrq9PcvqU0MrqxpetpbNz5OfcCcn66Hpf785sXmvP92shEI1UmbvT1vtefnYnk63/500/udebv37u7eOXk7NIuRrbPaG8W+/vEZF8m3nipM9Hc5/ITVSbOb0xP54f5ca7kYt7NQuby08xkKbNZr+tn6v5c/h1/dqamtky9u1skrbqHdl+zvcR0MT+oSjO5VK17JnMp8jB3Mpu3q383cj3fys3czK2+V/j8jnFX+1Yd9Y3tR33vlf7r0OAvf6MulB3st5sdbepZezzQOw9Z99xf5vVsX167vf7JxlJn+46Dib4svdrLzujQxp/n3Nj8Sl0ot/GrenwyjNeZKA+g3lWiF91r3Uw0q2vRYD//Q3VsLHbm7y/cm/lgh/ZXtk2/VY/LbrX61b1GOfylOFxlf3k1Y/WZZGvvKOte2zjLnN1yVW3V37h06xoDdeeruqLoHak/2vFIbdXv4QZbulHVvTG0brKqu9BXt+X9Vh6mkztHkD8ADmg8p1vtf7Q/b3/W/nX7Xvudse+f+vapN1sZ/dvod5oTI2813iz+nM/y883P/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPNb/Ojj+zOdzuzC8EJj56pdCru1vK1Q1A/0ea5tncDCWJItc0bLGUceRnt7GAOF9V8kZaE4ysB6DxEcvszvykIze2lwqldo79CfPzn2nnDSCyPpdoDtVcd4UgKOxLWlBx9cW/zo42/OPZh5f/b92fnRmzdvTdy6+fbktbtzndmJ7t/jjhJ4ETYv+scdCQAAAAAAAAAAALBXw34YcOmV3X40sqffePifhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChmL6S5qMUuT5xdaKcXlud7JRDr7y5ZDNJo5EUP0uKx8lUukPG+5or8sfHWR+ynU/nbr33xZO1LzfbanaXTxr1+ABW6iEXk4zU48Nq7/aB2yv+1dvDMmGXe4mD4/afAAAA///d5vDU")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00')

25.260874835s ago: executing program 1 (id=4779):
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x0)

25.003696318s ago: executing program 1 (id=4780):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000068000100000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32=r1, @ANYBLOB="060007"], 0x34}}, 0x0)

21.398299096s ago: executing program 4 (id=4795):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$key(0xf, 0x3, 0x2)
fchmod(r0, 0x90)

21.025414981s ago: executing program 4 (id=4798):
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0)
set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

20.736204073s ago: executing program 4 (id=4801):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0))

19.651161627s ago: executing program 4 (id=4809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="554b00000000000000000800000014000180060001"], 0x28}}, 0x0)

19.350347874s ago: executing program 4 (id=4813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x26, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0)

19.229671781s ago: executing program 3 (id=4814):
unshare(0x400)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00')
lseek(r0, 0x7ff, 0x4)

19.105981714s ago: executing program 4 (id=4816):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x42}], 0x2, 0x0, 0x0)

19.006733375s ago: executing program 3 (id=4817):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080))

18.823479789s ago: executing program 3 (id=4819):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10144d4, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp737,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00ileset=0000\v\x00\x00\x00\x00\x00\x00\x0000000125,gid=forget,iop932,gid=forget,uid=forget,\x00'/80], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

18.319250333s ago: executing program 3 (id=4821):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

18.096107864s ago: executing program 3 (id=4823):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)

17.979519728s ago: executing program 3 (id=4824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002240)={0x3c, r1, 0xc1d, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x3c}}, 0x0)

12.499962144s ago: executing program 2 (id=4835):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0)
timer_create(0xc0000000, 0x0, &(0x7f0000bbdffc))

12.373760351s ago: executing program 2 (id=4836):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])

12.27837294s ago: executing program 2 (id=4837):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000300)=""/45, 0x2d}], 0x4}, 0x6654851f}], 0x1, 0x20, 0x0)

2.349754863s ago: executing program 2 (id=4840):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x3000851, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@nossd}, {@barrier}, {@discard}, {@space_cache_v1}, {@usebackuproot}, {@nossd_spread}]}, 0x1, 0x5103, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H15vAj8R8kOwQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgP6hSFJGmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jzW9jre9PORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/m/oD5/7m1bx+397yeNPXT7x6YMbL3/+i5ec+3AIk7OPV7JwZeCaGyd+fuvFtx28a/1Nd5y49J19ebk8HgZrf7ryO1+OtZ5YHsKdlRB60sCaoSzQm98fivW9aSiEc8JcoF5iaiArkTYcvt8fwuEwF6hX9b3+EIYKgcseue/er9YSN/SHsDKEUE3beLKatdGfBi7oywIDaWBnTxb41SuZeuC7XVkATll8M9Rf9EcnGzOMzF+u+PrbfaBc3RKXvr26Y2Kkeb6fbVzkThX0pQ9MLvxpa1Udi6L09jh2Sk+bd9uZUdrO13vail+k8m8or8yFqqFr29T2LVfN7I2PdIWxse5mNS3S8/zYi1/YupD0knkdxg6MnJbX4XUPrby1e/WHHrxjzcpnj7zr0HOn2s0fFTZpMb3YqiF/zS2Z5zGa8HmyBN5+pW9Jo750hRC2f+p3PtwqXpr/j7Se/8eXc7ztasgda315OJubx0eGYuKF4WxuDgAAAEvGUthrunPsnve1qq80/x/t7Ph/POSfT+az0R4LYWI2cWhFCOfNPp4FbonNfXJFCG+dTU02BjYmgWMhvHE2sbpeVVJiWSwxmgR+MpwHJpLA8RiYTALfioHrk8CXY+BoEtgaA8eSwMUxEKYbx/G7w/k4Og70x8DmbCMejWch/GI4tpZsqyfqVQEAAJwm+eywt/Fu4VyHU80Qp5dH+9tliGdgN81QTWpIZ7D1aVXTGnra1dDVrob6uPe3Hn6p5koI9xfPICnVXDoNo9KY4cZf/tVHQgul+f946/l/dZ6OVErH/0PYNPs35u7KIzP1+ObJhgwAAADAKRj8n6e/2Spemv9PdHb+f9wn0l3IHB6IuyF2rAhhvDGQVfv75UB21HswDwAAAMBSUD8eXz8WPp3fZqdop/Ppcv7JBeaPB/4n5s3fd+zuza36W5r/T3Z2/v9A423WieOxF19bEcKyQuAHsZe1wKzRGPjx+xsD+fiPxw1wbawqPzGhXtW1scTmGBhPAoeblfhhvcR5jYH8yao3fqg+jum8RCEAAAAAZ1zcHRCPy8fz/9/2m/Wfa1WuNP/fvLDz/2fnwaXT+2cGQ1jbE0J3+sOABwayhQFjYKiSJ+4ZyOrqTqs6MBDCRbWBpVU9na//35OuMfhIf1ZVDJz3tiMvXlBLfLM/hLXFwKMfu/ndtcTeJFBv/M/7Q3hLbbRp499ZljXemzb+9WUhvLkQqFf1yWUh1BrrS6u6r5pfxyCt6p+qIbyuEKhX9Z5qCPsCAEtU/K90W/HBPfuu3rFlZmZq9yIm4j78/rB9emZqbOvOmW3VJn3alvS5YRmjA+UxdXrlmyfyJYo+evumoU7S9d8Jjhfbyvfjl04czO/H70K9s+Nc39twd0M65He8vdxEKHyTajbkrkUe8kCxkrknsVR/zN8XBsOyq/ZM7R77/Ja9e3evy/52mn199jceZsq21bp0Ww3M17cOXh5NV8tKnOy2WlWsZO3eK3et3bPv6jXTV265YuqKqc+se8/68QvHN4y/98K1tVGNZ3/bDHXVfFUnQ33l5g7HdRqHen5PoZIz8akhISGx1BI7B1e1/D+5NP/f1Xr+Hz914id/vj5Ds+P/I/Ewf/b43GH+zTFwuNPj/yPNjubXTwwYTQL7Y2C/w/wAAAC8NsRJftybGfdK/3T1d55tVa40/9/f2e//T9P6//Wl6y9ttsz/6lhivNn6/+ky//X1//c3W/8/Xea/vv7/4Vdh/f+r6oFkk/zC+v8AAMBrwSmv/5+fXdR+/f+2y/unFwgoZWi7vH96gYBShkq7DJ1eIGDB6/8/+R9/8V+hhdL8//rO5v8W7gcAAICzx5f+5HP/r1W8NP8/3Nn8/8yv/xeanf8/2iww2WxhQOv/AQAAsEQ1W/9v5JqBT7QqV5r/H+1s/h9Pu+hqyB1rfXk4W9MupGvavTBc/8kAAAAALA1dYWyst8O8DSujbjz5Nh/LlwJtlS56+o9OLOz8/2Odzf8bfpdx3UMrb+1e/aEHX75jzcpnj7zr0HNzx/8BAACAxdPpfgkAAAAAAAAAAAAAAODV9/S/H9zQKl76/X/YNPt4s9//x+v+xd8XvL4hd6y1/fp/+f3LPnjbvtklCx8YDuHtxcCOgzvOCfm1+VcVA/d+fPUbaomDaYm7n7r4mVriE2ngA2vOfamWuCgJbI6LJL4xDcSrKr60PAnE5RX/LQ3E7XE0DfTlga8sz8ZRSbfVT4eybVVJt9XjQyGsKATq2+rOoayNSjrAG5JAfYCfTQNxgH+aB7rSXt02mPUqBoZi0ZsGs14BAHDWit8Ce8P26Zmp8fgVPt6e39N4GzUsWXagXG2lw+afyJcm++jtm4Y6SXen30XnrjXeG6q1IawrfV0tZqnMjvL01NJm072+yZDbrfbW1aRcaqGbrq/5iPqzEY1t3TmzrbftwDe0z7K+p22WdaXJTjFL1+wm7aCWDvrSwYg63DYddDne7wpjY91Jrt+LwZHQoN0rotPf6xfX+Wv2Kijm+cyJQ79qVV9p/j/S2fy/WhzXS/nFAPbHK+v97QrL/AMAAMDi+srGX38j/vvINfc/2ipvaf4/2tn8P+7Byg8FZ3s7jsXr/x9aEcLspfVHssAtsblPrgjhrbOpyVgiu6D+pbHEeBa4Je4wWR1LbJ5srGpZDBxNAj8ZzgPHksDxGMj3UhwJ+a6cvxsO4d2zqU2NJXbFEiNJ4MMxMJoExmJgPAksj4GJJPD88jwwmQT+NQbCdOO2un15vq0AAAAWIp9n9TbeDek872hPuwyVdhkG2mXoapeh2i5Ds1HE+9+OGXqTk1cqhUy9aa39SS2lDPFi+AvuVylD+GFjzrRgqel4/kH9fINKY4a73tdTDS2U5v/jnc3/Bxpvs9aPx/n/3PX/ssAPYve+Fk8dH42BH7+/MZDvGDgeJ7vX1quazEvkk/ZrY4mJGBhNArtiYCIJbN6UBw6/oTGQz7TrjR+qNz6dlygEAAAA4IyLOwjibpo4/79pz18PtipXmv9PdDb/j+0NFhv7cqz1xPIQ7qzM9aYeWDOUBeJ+jKH48/g3DYVwTmEHR73E1EBWoi9pOHy/P/uFel9a1ff6sx8fxPuXPXLfvV+tJW7oD2FlYe9LvY0nq1kb/Wnggr4sMJAGdvZkgbjnpx74blcWgFNW3ysYX1D5qS51I/OXa/L6e61cEzQdXmkf6Dz55vvN1WIp7XDN96nWLexpa7n/ltOm9PY45t22FN9tI95txS9S+TeUV+ZC1dC1bWr7lqtm9sZHir9kLVmk57n4K9VO0qfhdbj/5HvbXjXtwHjy8TE+f7n5X4eVWN11D628tXv1hx68Y83KZ4+869BzHXejifhD4fu++C9DPyps3sVWDflrbsl9nkz6PFmK/w2MetpCCJue//q1reKl+f9kZ/P/nuR21q/jxtyzIoR3FDbuA3Hz/+GK7HOwEMg+JV9XDmSH3P9zuOknJwAAAJxu9d0d9f0F0/ltdkJ4Ok8u559cYP64v2Ji3vyd9nvgLz++slW8NP/f3Hr+vyzppuP/jv+zSBz/n9fZvit6WfrA/lPaFV2qjkXh+P+8zvZ3m+P/83L83/H/+Tj+34bj//M625+20rekXb50hRCe/YN7Hm8VL83/d3U2/7f+3/yL9tXX/9vcbP2/Xc3W/9tv/T8AAGBRNVloLp3nlVbvK2VIV+8rZWi7QGDbJQat/7fg9f+eOf/J34QWSvP//Z3N/+PLYbDY+lJZ/290U5Oqro+BXRYGBAAA4GzUbAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr667/v6/t7WK3//bSx5/6vKJTx/cePnzX7zk3IdDmJ59vJKFKwPX3Djx81svvu3gXetvuuPEpe+s5uV689v/35A71vrycAiHC48MxcQLw7U7c4HLPnjbvp5a4oHhEN5eDOw4uOOcWuJbwyGsKgbu/fjqN9QSB9MSdz918TO1xCfSwAfWnPtSLXFRHqik3f2H5Vl3K2l3v7o8hBWFQL27n17eWFW9jT/OA11pG/84lLURA0Ox6DeGsjZiYCaWmF4WwtqeELrTqu6vZlV1p1X9czWrqjut6kvVEC4KIfSkVT3Vl1XVk4784b6sqhg4721HXrygljjcF8LaYuDRj9387lris0mg3vif9YXwltpLJm38271Z471p4zf0hvDmEEJfWuKXPVmJvrTE0z0hvK4QqDf+qZ4Q9gVeE+KHT8Mn2p59V+/YMjMztXsRE315W/1h+/TM1NjWnTPbqkmfmqkU0q8cOPmxP/HiF7bWbj96+6ahTtI9ebne2S6v7224u+Fs733s10Cxkrnno1R/zN8XBsOyq/ZM7R77/Ja9e3evy/52mn199rc7j2bbat1S2VaripWs3XvlrrV79l29ZvrKLVdMXTH1mXXvWT9+4fiG8fdeuLY2qvHs7+kY6s1nfqjn9xQqORMfABISEkst0dXw6TZ+tn+Ql77oz3W0N1RnP6BL04pilsrsKE/HoDee5IhP5ntK2xGtK00cSlnWz5PlQGOWDaXJxFwt/VmW2e91pclhsbGu2U0a73eFsbHuZtthpPFucfP+7BQ272P5pus0DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//9ekCSP")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x0, @unused, @subvolid})

819.397275ms ago: executing program 2 (id=4841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x713, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0)

0s ago: executing program 2 (id=4842):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

T15457] netlink: 'syz.0.4135': attribute type 10 has an invalid length.
[  360.406271][T15450] loop5: detected capacity change from 0 to 32768
[  360.428528][T15450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4129 (15450)
[  360.446190][T15450] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  360.456563][T15450] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  360.465114][T15450] BTRFS info (device loop5): using free-space-tree
[  360.517381][T15471] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[  360.831870][T15497] loop1: detected capacity change from 0 to 2048
[  360.853599][T15497] EXT4-fs: Ignoring removed orlov option
[  360.898454][T15497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.979877][ T5216] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.044570][ T5218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.049674][T15513] loop4: detected capacity change from 0 to 128
[  361.142528][T15513] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  361.163719][T15515] Option '                                                                                                 ' to dns_resolver key: bad/missing value
[  361.187254][T15517] Bluetooth: hci3: expected 2 bytes, got 7 bytes
[  361.418735][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  361.506304][T15531] loop2: detected capacity change from 0 to 256
[  361.542783][T15531] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  361.560113][T15531] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  361.585196][T15531] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  361.849661][   T29] audit: type=1800 audit(1726959172.423:143): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4159" name="bus" dev="loop2" ino=1048848 res=0 errno=0
[  361.987565][T15523] loop1: detected capacity change from 0 to 32768
[  362.039889][T15523] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  362.255595][T15523] XFS (loop1): Ending clean mount
[  362.319925][ T5218] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  362.344282][T15570] loop3: detected capacity change from 0 to 512
[  362.376347][T15570] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  362.408789][T15570] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4174: invalid indirect mapped block 2683928664 (level 1)
[  362.475548][T15570] EXT4-fs (loop3): 1 truncate cleaned up
[  362.498507][T15570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.545028][T15579] loop5: detected capacity change from 0 to 256
[  362.552561][T15579] exfat: Deprecated parameter 'namecase'
[  362.586606][T15570] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  362.587318][T15579] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  362.641946][ T5226] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  362.701445][ T5226] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[  362.749061][ T5226] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  362.767940][ T5226] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  362.798571][ T5226] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  362.971610][T15589] loop1: detected capacity change from 0 to 4096
[  363.006915][T15591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.041850][T15589] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  363.067029][T15589] Remounting filesystem read-only
[  363.108504][ T5226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.158294][ T1116] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.350745][ T1116] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.460197][ T1116] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.688755][ T1116] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.732982][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.743707][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.765063][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.800044][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.823345][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  363.830817][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.946388][T15622] loop2: detected capacity change from 0 to 256
[  364.002860][T15614] lo speed is unknown, defaulting to 1000
[  364.088009][T15626] loop5: detected capacity change from 0 to 256
[  364.231028][T15626] FAT-fs (loop5): Directory bread(block 64) failed
[  364.241034][T15626] FAT-fs (loop5): Directory bread(block 65) failed
[  364.249476][T15626] FAT-fs (loop5): Directory bread(block 66) failed
[  364.256847][T15626] FAT-fs (loop5): Directory bread(block 67) failed
[  364.265344][T15626] FAT-fs (loop5): Directory bread(block 68) failed
[  364.275755][T15626] FAT-fs (loop5): Directory bread(block 69) failed
[  364.283219][T15626] FAT-fs (loop5): Directory bread(block 70) failed
[  364.290007][T15626] FAT-fs (loop5): Directory bread(block 71) failed
[  364.307617][T15626] FAT-fs (loop5): Directory bread(block 72) failed
[  364.322522][T15626] FAT-fs (loop5): Directory bread(block 73) failed
[  364.366471][ T1116] bridge_slave_1: left allmulticast mode
[  364.376202][ T1116] bridge_slave_1: left promiscuous mode
[  364.383510][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.466937][ T1116] bridge_slave_0: left allmulticast mode
[  364.482584][ T1116] bridge_slave_0: left promiscuous mode
[  364.491861][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.516133][ T1116] tipc: Resetting bearer <eth:xfrm0>
[  364.552029][T15638] loop2: detected capacity change from 0 to 64
[  364.701210][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  364.708930][T15645] coredump: 1466(syz.2.4209): written to core: VMAs: 3, size 4096; core: 2771 bytes, pos 8192
[  364.883596][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.905825][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.946470][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  365.012822][    T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  365.045949][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.096297][    T9] usb 2-1: config 0 descriptor??
[  365.228338][ T1116] tipc: Disabling bearer <eth:xfrm0>
[  365.548188][T15649] loop2: detected capacity change from 0 to 32768
[  365.623679][T15649] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  365.703262][T15649] XFS (loop2): Ending clean mount
[  365.711199][    T9] corsair-cpro 0003:1B1C:1D00.0071: unknown main item tag 0x0
[  365.732780][ T5230] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  365.751636][T15649] XFS (loop2): Quotacheck needed: Please wait.
[  365.758961][    T9] corsair-cpro 0003:1B1C:1D00.0071: unknown main item tag 0x0
[  365.801030][    T9] corsair-cpro 0003:1B1C:1D00.0071: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.1-1/input0
[  365.878539][    T9] corsair-cpro 0003:1B1C:1D00.0071: probe with driver corsair-cpro failed with error -38
[  365.886334][T15649] XFS (loop2): Quotacheck: Done.
[  365.896735][ T5236] Bluetooth: hci4: command tx timeout
[  365.913688][ T5230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.933970][ T5230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.948314][    T9] usb 2-1: USB disconnect, device number 34
[  365.957637][ T5230] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  365.969100][ T5230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.980390][ T5230] usb 6-1: config 0 descriptor??
[  366.067034][ T5222] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  366.084101][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.124219][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.185041][ T1116] bond0 (unregistering): Released all slaves
[  366.272111][ T1116] tipc: Left network mode
[  366.308998][T15614] chnl_net:caif_netlink_parms(): no params data found
[  366.427129][ T5230] ryos 0003:1E7D:3138.0072: unknown main item tag 0x0
[  366.437211][ T5230] ryos 0003:1E7D:3138.0072: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0
[  366.550579][T15614] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.560807][T15614] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.584339][T15614] bridge_slave_0: entered allmulticast mode
[  366.591466][T15614] bridge_slave_0: entered promiscuous mode
[  366.611598][T15686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  366.623560][ T5236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  366.646970][ T5230] usb 6-1: USB disconnect, device number 35
[  366.694683][T15614] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.701924][T15614] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.722445][T15614] bridge_slave_1: entered allmulticast mode
[  366.729780][T15614] bridge_slave_1: entered promiscuous mode
[  366.772400][ T1116] hsr_slave_0: left promiscuous mode
[  366.780400][ T1116] hsr_slave_1: left promiscuous mode
[  366.795196][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.809114][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.820653][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.831462][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.862293][   T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  366.871652][ T1116] veth1_macvtap: left promiscuous mode
[  366.889176][ T1116] veth0_macvtap: left promiscuous mode
[  366.896220][ T1116] veth1_vlan: left promiscuous mode
[  366.901670][ T1116] veth0_vlan: left promiscuous mode
[  367.014378][   T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  367.033008][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.045521][   T25] usb 3-1: config 0 descriptor??
[  367.052858][   T25] cp210x 3-1:0.0: cp210x converter detected
[  367.132433][ T5285] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  367.177312][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  367.299081][T15696] loop5: detected capacity change from 0 to 1024
[  367.302039][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.339403][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.354784][ T5285] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  367.371492][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.391234][ T5285] usb 2-1: config 0 descriptor??
[  367.397381][   T12] hfsplus: b-tree write err: -5, ino 4
[  367.479561][   T25] usb 3-1: cp210x converter now attached to ttyUSB0
[  367.687335][ T5230] usb 3-1: USB disconnect, device number 32
[  367.707511][ T5230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  367.723023][ T5230] cp210x 3-1:0.0: device disconnected
[  367.733467][ T1116] team0 (unregistering): Port device team_slave_1 removed
[  367.797894][ T1116] team0 (unregistering): Port device team_slave_0 removed
[  367.825368][ T5285] viewsonic 0003:0543:E621.0073: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0
[  367.972729][ T5236] Bluetooth: hci4: command tx timeout
[  368.031384][ T5285] usb 2-1: USB disconnect, device number 35
[  368.410356][T15706] loop4: detected capacity change from 0 to 1024
[  368.609860][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.643957][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.701086][T15716] loop1: detected capacity change from 0 to 1764
[  368.728537][T15716] iso9660: Corrupted directory entry in block 2 of inode 1920
[  368.760276][T15614] team0: Port device team_slave_0 added
[  368.794846][T15614] team0: Port device team_slave_1 added
[  368.920592][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.938871][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.978625][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.006701][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.018314][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.051922][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.311283][ T1116] IPVS: stop unused estimator thread 0...
[  369.327655][T15614] hsr_slave_0: entered promiscuous mode
[  369.365267][T15614] hsr_slave_1: entered promiscuous mode
[  369.399972][T15614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.428874][T15614] Cannot create hsr debugfs directory
[  369.483097][T15737] loop1: detected capacity change from 0 to 4096
[  369.856846][T15729] loop5: detected capacity change from 0 to 32768
[  370.006730][T15749] loop4: detected capacity change from 0 to 8192
[  370.032702][T15729] JBD2: Ignoring recovery information on journal
[  370.055331][ T5236] Bluetooth: hci4: command tx timeout
[  370.076242][T15749] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  370.119876][   T29] audit: type=1800 audit(1726959180.703:144): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4254" name="bus" dev="loop4" ino=1048871 res=0 errno=0
[  370.168527][T15729] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  370.311444][ T5216] ocfs2: Unmounting device (7,5) on (node local)
[  370.333618][T15768] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  370.733531][T15789] tmpfs: Bad value for 'mpol'
[  370.751632][T15791] loop4: detected capacity change from 0 to 1024
[  370.803630][T15791] hfsplus: bad catalog entry type
[  370.832981][T15614] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  370.868484][T15614] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  370.876219][ T5285] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  370.917315][   T36] hfsplus: b-tree write err: -5, ino 4
[  370.920288][T15614] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  370.983504][T15614] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  371.032301][ T5285] usb 2-1: Using ep0 maxpacket: 8
[  371.058443][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  371.098495][ T5285] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  371.128007][ T5285] usb 2-1: Product: syz
[  371.136469][ T5285] usb 2-1: Manufacturer: syz
[  371.141563][ T5285] usb 2-1: SerialNumber: syz
[  371.156093][ T5285] usb 2-1: config 0 descriptor??
[  371.166061][ T5285] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  371.260821][T15614] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.364362][T15614] 8021q: adding VLAN 0 to HW filter on device team0
[  371.485683][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.492914][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.540080][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.547449][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.730115][T15793] loop2: detected capacity change from 0 to 32768
[  371.873275][T15793] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  371.873275][T15793] 
[  371.993937][ T5285] gspca_zc3xx: reg_w_i err -71
[  371.998933][ T5285] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  372.014352][ T5285] usb 2-1: USB disconnect, device number 36
[  372.133024][ T5236] Bluetooth: hci4: command tx timeout
[  372.186239][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.217065][T15837] loop4: detected capacity change from 0 to 256
[  372.333377][T15614] veth0_vlan: entered promiscuous mode
[  372.363224][T15614] veth1_vlan: entered promiscuous mode
[  372.450749][T15614] veth0_macvtap: entered promiscuous mode
[  372.506477][T15614] veth1_macvtap: entered promiscuous mode
[  372.575352][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.621133][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.672194][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.709781][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.732325][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.757830][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.757857][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.757879][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.757896][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.757914][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.760875][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.793432][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.918819][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.930049][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.951641][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.982068][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.002628][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  373.032197][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.082290][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.132720][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.182304][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.199723][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.211327][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.389648][T15614] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.399127][T15614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.416158][T15614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.427399][T15869] loop5: detected capacity change from 0 to 512
[  373.443609][T15614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.606047][T15869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.641114][T15869] ext4 filesystem being mounted at /759/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.776942][T15857] loop4: detected capacity change from 0 to 32768
[  373.831588][  T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.861759][  T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.911078][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.937546][T15862] loop1: detected capacity change from 0 to 32768
[  373.951295][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.031956][T15857] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  374.036648][T15862] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  374.088903][T15895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4319'.
[  374.103687][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.145571][ T5234] ocfs2: Unmounting device (7,4) on (node local)
[  374.228438][T15901] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4191'.
[  374.511473][T15908] loop3: detected capacity change from 0 to 512
[  374.527385][T15908] EXT4-fs (loop3): DAX unsupported by block device.
[  374.641353][T15862] XFS (loop1): Ending clean mount
[  374.652470][T15862] XFS (loop1): Quotacheck needed: Please wait.
[  374.749451][T15862] XFS (loop1): Quotacheck: Done.
[  374.792345][ T5285] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  374.849171][T15899] loop2: detected capacity change from 0 to 32768
[  374.963834][ T5285] usb 4-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config
[  374.972556][ T5218] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  374.976653][ T5285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  374.991939][T15899] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  375.003220][ T5285] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  375.012856][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  375.021881][ T5285] usb 4-1: SerialNumber: syz
[  375.026794][T15924] openvswitch: netlink: Actions may not be safe on all matching packets
[  375.170036][T15899] XFS (loop2): Ending clean mount
[  375.237095][ T5285] usb 4-1: 0:2 : does not exist
[  375.263041][ T5285] usb 4-1: unit 109 not found!
[  375.267988][ T5285] usb 4-1: unit 247 not found!
[  375.279128][ T5285] usb 4-1: unit 73 not found!
[  375.299249][ T5285] usb 4-1: unit 189 not found!
[  375.323083][ T5285] usb 4-1: unit 147 not found!
[  375.327921][ T5285] usb 4-1: unit 254 not found!
[  375.362242][ T5285] usb 4-1: unit 85 not found!
[  375.384183][ T5285] usb 4-1: unit 204 not found!
[  375.406360][ T5222] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  375.432393][ T5284] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  375.441009][ T5285] usb 4-1: USB disconnect, device number 36
[  375.528617][T15932] loop1: detected capacity change from 0 to 512
[  375.632345][ T5284] usb 6-1: Using ep0 maxpacket: 32
[  375.646443][ T5284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.650920][T15915] loop4: detected capacity change from 0 to 32768
[  375.691953][T15915] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4326 (15915)
[  375.702210][ T5284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.718670][T15915] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  375.719363][T15932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.744457][T15915] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  375.753763][T15915] BTRFS info (device loop4): using free-space-tree
[  375.772266][ T5284] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  375.782452][T15932] ext4 filesystem being mounted at /659/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.792344][ T5284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.862828][T15932] EXT4-fs: Cannot specify journal on remount
[  375.904977][ T5218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.908972][ T5284] usb 6-1: config 0 descriptor??
[  375.961697][ T5284] hub 6-1:0.0: USB hub found
[  376.016652][T15950] loop3: detected capacity change from 0 to 1024
[  376.100739][T15953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4332'.
[  376.122038][   T61] hfsplus: b-tree write err: -5, ino 4
[  376.151257][T15958] loop2: detected capacity change from 0 to 64
[  376.184515][ T5284] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  376.188572][T15956] ieee802154 phy0 wpan0: encryption failed: -22
[  376.386783][ T5284] usbhid 6-1:0.0: can't add hid device: -71
[  376.393353][ T5284] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  376.429765][ T5284] usb 6-1: USB disconnect, device number 36
[  376.446080][ T5234] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  376.856576][T15990] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  377.538519][T15998] loop3: detected capacity change from 0 to 32768
[  377.706156][T16010] dvmrp5: entered allmulticast mode
[  377.725054][T16010] dvmrp5: left allmulticast mode
[  377.813810][T15998] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  377.857593][T16021] loop4: detected capacity change from 0 to 256
[  377.868887][T15998] (syz.3.4353,15998,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  377.908190][T15998] (syz.3.4353,15998,0):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 137438953611 failed -12
[  377.952472][T15998] (syz.3.4353,15998,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12
[  377.961967][T15998] (syz.3.4353,15998,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12
[  378.017353][T15998] (syz.3.4353,15998,1):ocfs2_test_inode_bit:2941 ERROR: status = -12
[  378.022576][    T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  378.037493][T15998] (syz.3.4353,15998,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  378.054973][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  378.061312][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  378.109921][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'.
[  378.197607][T15614] ocfs2: Unmounting device (7,3) on (node local)
[  378.212754][    T9] usb 6-1: Using ep0 maxpacket: 32
[  378.347046][    T9] usb 6-1: config index 0 descriptor too short (expected 164, got 36)
[  378.356686][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.368944][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.378864][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  378.388059][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.400075][    T9] usb 6-1: config 0 descriptor??
[  378.695402][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  378.817088][    T9] logitech 0003:046D:C29C.0074: unknown main item tag 0xe
[  378.840907][T16054] loop4: detected capacity change from 0 to 512
[  378.849116][    T9] logitech 0003:046D:C29C.0074: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  378.900310][T16054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.932461][T16054] ext4 filesystem being mounted at /669/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.016296][    T9] logitech 0003:046D:C29C.0074: no inputs found
[  379.048827][    T9] usb 6-1: USB disconnect, device number 37
[  379.073416][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.527378][T16046] loop3: detected capacity change from 0 to 32768
[  379.562686][T16046] read_mapping_page failed!
[  379.567300][T16046] ERROR: (device loop3): txCommit: 
[  379.567300][T16046] 
[  379.587140][T16046] ERROR: (device loop3): remounting filesystem as read-only
[  379.925725][T16052] loop2: detected capacity change from 0 to 40427
[  379.970976][T16052] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  379.972647][T16087] loop5: detected capacity change from 0 to 256
[  379.985215][T16052] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  380.016424][T16052] F2FS-fs (loop2): Found nat_bits in checkpoint
[  380.124719][T16052] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  380.139422][T16052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  380.157331][T16087] FAT-fs (loop5): Directory bread(block 64) failed
[  380.164145][T16087] FAT-fs (loop5): Directory bread(block 65) failed
[  380.186960][T16087] FAT-fs (loop5): Directory bread(block 66) failed
[  380.216212][T16087] FAT-fs (loop5): Directory bread(block 67) failed
[  380.233234][T16087] FAT-fs (loop5): Directory bread(block 68) failed
[  380.241922][T16087] FAT-fs (loop5): Directory bread(block 69) failed
[  380.249642][T16087] FAT-fs (loop5): Directory bread(block 70) failed
[  380.256772][T16087] FAT-fs (loop5): Directory bread(block 71) failed
[  380.263960][T16087] FAT-fs (loop5): Directory bread(block 72) failed
[  380.270667][T16087] FAT-fs (loop5): Directory bread(block 73) failed
[  380.753204][T16117] CIFS mount error: No usable UNC path provided in device string!
[  380.753204][T16117] 
[  380.796159][T16117] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  380.842449][T16123] loop2: detected capacity change from 0 to 256
[  380.869816][T16123] exfat: Deprecated parameter 'utf8'
[  380.927945][T16123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  381.117235][T16135] netlink: 'syz.4.4416': attribute type 10 has an invalid length.
[  381.189293][T16135] team0: Device ipvlan1 failed to register rx_handler
[  381.374014][T16143] loop5: detected capacity change from 0 to 128
[  381.534444][T16111] loop3: detected capacity change from 0 to 32768
[  381.590084][T16111] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  381.679836][T16111] XFS (loop3): Ending clean mount
[  381.691196][T16111] XFS (loop3): Quotacheck needed: Please wait.
[  381.756786][T16161] loop1: detected capacity change from 0 to 512
[  381.794183][T16161] EXT4-fs (loop1): bad block size 65536
[  381.842080][T16111] XFS (loop3): Quotacheck: Done.
[  381.945716][T15614] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  381.958225][T16163] netlink: 'syz.1.4426': attribute type 9 has an invalid length.
[  381.966388][T16163] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4426'.
[  382.041493][T16164] netlink: 'syz.1.4426': attribute type 9 has an invalid length.
[  382.068399][T16164] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4426'.
[  382.365384][T16149] loop4: detected capacity change from 0 to 32768
[  382.412409][T16149] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.438568][T16139] loop2: detected capacity change from 0 to 32768
[  382.460080][T16139] XFS: ikeep mount option is deprecated.
[  382.469083][T16139] XFS: noikeep mount option is deprecated.
[  382.527443][   T29] audit: type=1326 audit(2000000001.169:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.543382][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'.
[  382.571855][T16139] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  382.599698][T16156] loop5: detected capacity change from 0 to 32768
[  382.607981][   T29] audit: type=1326 audit(2000000001.199:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.632583][T16156] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4424 (16156)
[  382.645663][   T29] audit: type=1326 audit(2000000001.209:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.670989][   T29] audit: type=1326 audit(2000000001.209:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.695180][   T29] audit: type=1326 audit(2000000001.209:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.717670][   T29] audit: type=1326 audit(2000000001.229:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.721889][T16139] XFS (loop2): Ending clean mount
[  382.740312][   T29] audit: type=1326 audit(2000000001.229:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.740366][   T29] audit: type=1326 audit(2000000001.229:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  382.747472][T16156] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  382.843021][T16156] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  382.854390][T16149] XFS (loop4): Ending clean mount
[  382.859236][T16156] BTRFS info (device loop5): using free-space-tree
[  382.869941][T16139] XFS (loop2): Quotacheck needed: Please wait.
[  382.873647][T16149] XFS (loop4): Quotacheck needed: Please wait.
[  382.938192][T16203] loop1: detected capacity change from 0 to 256
[  382.971667][T16203] FAT-fs (loop1): Directory bread(block 64) failed
[  382.980266][T16203] FAT-fs (loop1): Directory bread(block 65) failed
[  382.993009][T16203] FAT-fs (loop1): Directory bread(block 66) failed
[  383.000188][T16203] FAT-fs (loop1): Directory bread(block 67) failed
[  383.011076][T16203] FAT-fs (loop1): Directory bread(block 68) failed
[  383.018400][T16203] FAT-fs (loop1): Directory bread(block 69) failed
[  383.025304][T16203] FAT-fs (loop1): Directory bread(block 70) failed
[  383.031859][T16203] FAT-fs (loop1): Directory bread(block 71) failed
[  383.038615][T16203] FAT-fs (loop1): Directory bread(block 72) failed
[  383.045277][T16203] FAT-fs (loop1): Directory bread(block 73) failed
[  383.057353][T16139] XFS (loop2): Quotacheck: Done.
[  383.065677][T16149] XFS (loop4): Quotacheck: Done.
[  383.117752][ T5222] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  383.211264][ T5234] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.232884][ T5216] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  383.265056][ T5284] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  383.490930][ T5284] usb 4-1: Using ep0 maxpacket: 16
[  383.629833][T16214] loop4: detected capacity change from 0 to 512
[  383.678618][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.689981][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.699923][ T5284] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  383.709029][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.763516][ T5284] usb 4-1: config 0 descriptor??
[  383.807959][T16214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.824102][T16214] ext4 filesystem being mounted at /685/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.955487][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.046553][T16225] netlink: 'syz.2.4441': attribute type 10 has an invalid length.
[  384.090431][T16225] team0: Device ipvlan1 failed to register rx_handler
[  384.162676][ T5285] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  384.203152][ T5284] elecom 0003:056E:00FC.0075: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0
[  384.322795][ T5285] usb 2-1: Using ep0 maxpacket: 32
[  384.338256][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.374660][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  384.391721][ T5285] usb 2-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00
[  384.410483][ T5284] usb 4-1: USB disconnect, device number 37
[  384.427751][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.439662][ T5285] usb 2-1: config 0 descriptor??
[  384.455575][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  384.558826][T16240] loop5: detected capacity change from 0 to 1024
[  384.691430][   T36] hfsplus: b-tree write err: -5, ino 4
[  384.942896][ T5285] thrustmaster 0003:044F:B320.0076: unknown main item tag 0x0
[  384.951317][ T5285] thrustmaster 0003:044F:B320.0076: unknown main item tag 0x0
[  384.959691][ T5285] thrustmaster 0003:044F:B320.0076: unknown main item tag 0x0
[  384.967248][ T5285] thrustmaster 0003:044F:B320.0076: unknown main item tag 0x0
[  384.974919][ T5285] thrustmaster 0003:044F:B320.0076: unknown main item tag 0x0
[  385.002376][ T5285] thrustmaster 0003:044F:B320.0076: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.1-1/input0
[  385.022273][ T5285] thrustmaster 0003:044F:B320.0076: no inputs found
[  385.143086][    T9] usb 2-1: USB disconnect, device number 37
[  385.620733][T16267] sp0: Synchronizing with TNC
[  385.621041][T16250] loop2: detected capacity change from 0 to 40427
[  385.642939][T16250] F2FS-fs (loop2): invalid crc value
[  385.656644][T16269] usb usb8: usbfs: process 16269 (syz.3.4461) did not claim interface 0 before use
[  385.660697][T16250] F2FS-fs (loop2): Found nat_bits in checkpoint
[  385.793708][T16250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  385.819112][   T29] audit: type=1800 audit(2000000004.459:153): pid=16250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4451" name="file0" dev="loop2" ino=10 res=0 errno=0
[  385.931274][ T5222] syz-executor: attempt to access beyond end of device
[  385.931274][ T5222] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  385.983057][ T5222] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  386.709427][T16313] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  387.360758][T16355] loop3: detected capacity change from 0 to 16
[  387.396768][T16355] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  387.410207][T16352] loop5: detected capacity change from 0 to 2048
[  387.589075][T16368] loop1: detected capacity change from 0 to 64
[  387.669311][T16370] loop3: detected capacity change from 0 to 1024
[  387.689268][T16352] hpfs: filesystem error: improperly stopped; already mounted read-only
[  387.699189][T16352] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  387.721568][T16370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.793605][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.822313][ T5284] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  387.934007][T16379] loop5: detected capacity change from 0 to 64
[  387.982424][ T5284] usb 3-1: Using ep0 maxpacket: 8
[  387.989779][ T5284] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  388.033240][T16385] loop1: detected capacity change from 0 to 256
[  388.040994][ T5284] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  388.053705][T16385] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  388.061493][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.102490][ T5284] usb 3-1: Product: syz
[  388.106732][ T5284] usb 3-1: Manufacturer: syz
[  388.111357][ T5284] usb 3-1: SerialNumber: syz
[  388.126235][ T5284] usb 3-1: config 0 descriptor??
[  388.141206][ T5284] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  388.181469][T16391] nbd: illegal input index 1966080
[  388.254501][T16393] loop3: detected capacity change from 0 to 512
[  388.269201][T16393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  388.286671][T16393] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4518: invalid indirect mapped block 4294967295 (level 0)
[  388.307277][T16393] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.4518: invalid indirect mapped block 4294967295 (level 1)
[  388.356864][T16393] EXT4-fs (loop3): 1 orphan inode deleted
[  388.363862][T16393] EXT4-fs (loop3): 1 truncate cleaned up
[  388.370878][T16393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.435304][T16393] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.4518: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  388.498664][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4521'.
[  388.522753][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.642994][ T5284] gspca_zc3xx: reg_w_i err -71
[  388.909864][T16405] loop1: detected capacity change from 0 to 32768
[  388.917158][T16405] XFS: ikeep mount option is deprecated.
[  389.001717][T16405] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  389.155692][T16405] XFS (loop1): Ending clean mount
[  389.172697][T16405] XFS (loop1): Quotacheck needed: Please wait.
[  389.198124][T16438] loop5: detected capacity change from 0 to 64
[  389.216413][T16405] XFS (loop1): Quotacheck: Done.
[  389.232398][ T5284] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  389.239342][ T5284] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  389.270728][ T5284] usb 3-1: USB disconnect, device number 33
[  389.303239][ T5218] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  389.373869][ T5368] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  389.592277][ T5368] usb 4-1: Using ep0 maxpacket: 32
[  389.608775][T16447] loop2: detected capacity change from 0 to 64
[  389.615957][ T5368] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.636132][ T5368] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.649633][T16447] hfs: bad catalog entry type 0
[  389.683905][ T5368] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  389.702213][ T5368] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  389.721778][ T5368] usb 4-1: Product: syz
[  389.728550][ T5368] usb 4-1: Manufacturer: syz
[  389.742058][ T5368] hub 4-1:4.0: USB hub found
[  389.790021][T16452] loop2: detected capacity change from 0 to 64
[  389.842663][   T29] audit: type=1400 audit(2000000008.489:154): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  389.941930][T16456] loop2: detected capacity change from 0 to 512
[  389.972893][ T5368] hub 4-1:4.0: 2 ports detected
[  390.085662][T16456] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  390.097871][T16456] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  390.108227][T16456] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4543: Corrupt directory, running e2fsck is recommended
[  390.140717][T16456] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  390.151323][T16456] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.4543: corrupted in-inode xattr: invalid ea_ino
[  390.173149][T16456] EXT4-fs (loop2): Remounting filesystem read-only
[  390.180644][T16456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.213455][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.223869][T16444] loop1: detected capacity change from 0 to 32768
[  390.239033][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.374610][ T5368] hub 4-1:4.0: set hub depth failed
[  390.378028][ T5368] usb 4-1: USB disconnect, device number 38
[  390.463255][T16444] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  390.567837][T16472] loop2: detected capacity change from 0 to 16
[  390.670599][T16444] XFS (loop1): Ending clean mount
[  390.700359][T16444] XFS (loop1): Quotacheck needed: Please wait.
[  390.841579][T16444] XFS (loop1): Quotacheck: Done.
[  390.930106][T16486] loop4: detected capacity change from 0 to 1764
[  390.932320][ T5368] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  391.083310][T16493] loop3: detected capacity change from 0 to 512
[  391.090397][T16493] EXT4-fs: inline encryption not supported
[  391.098862][ T5368] usb 6-1: Using ep0 maxpacket: 8
[  391.105528][ T5368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11
[  391.117786][ T5368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.128782][ T5368] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  391.138847][ T5368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.149605][ T5368] usb 6-1: config 0 descriptor??
[  391.159192][ T5218] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  391.233712][T16493] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  391.282845][T16493] EXT4-fs (loop3): 1 truncate cleaned up
[  391.289703][T16493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.370775][T16493] EXT4-fs (loop3): Online resizing not supported with sparse_super2
[  391.467799][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.549887][T16507] loop2: detected capacity change from 0 to 256
[  391.559182][T16507] exfat: Deprecated parameter 'utf8'
[  391.579712][T16507] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d)
[  391.583651][ T5368] hid-alps 0003:044E:1215.0077: hidraw0: USB HID v40.00 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0
[  391.696896][   T29] audit: type=1804 audit(2000000010.339:155): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4563" name="/newroot/764/file1/bus" dev="loop2" ino=1048888 res=1 errno=0
[  391.883228][ T5284] usb 6-1: USB disconnect, device number 38
[  392.121823][   T29] audit: type=1400 audit(2000000010.759:156): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16528 comm="syz.3.4572"
[  392.249484][T16536] loop4: detected capacity change from 0 to 1024
[  392.500991][T16545] loop3: detected capacity change from 0 to 256
[  392.521870][T16545] exfat: Deprecated parameter 'utf8'
[  392.554823][T16545] exfat: Deprecated parameter 'utf8'
[  392.560380][T16545] exfat: Deprecated parameter 'utf8'
[  392.612567][T16545] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  392.678847][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4585'.
[  392.894851][T16566] loop4: detected capacity change from 0 to 8
[  392.918684][T16566] SQUASHFS error: Unable to read directory block [629:46]
[  393.294699][T16575] netlink: 'syz.0.4593': attribute type 29 has an invalid length.
[  393.366051][T16575] netlink: 'syz.0.4593': attribute type 29 has an invalid length.
[  393.850046][T16541] loop2: detected capacity change from 0 to 32768
[  393.888694][T16541] btrfs: Deprecated parameter 'usebackuproot'
[  393.932470][T16541] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  393.962522][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  394.031747][T16541] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4578 (16541)
[  394.120003][T16541] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  394.164544][    T9] usb 2-1: Using ep0 maxpacket: 8
[  394.187612][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec
[  394.223303][T16541] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  394.244790][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.287010][T16541] BTRFS info (device loop2): using free-space-tree
[  394.315184][    T9] usb 2-1: config 0 descriptor??
[  394.337870][    T9] ttusb_dec_send_command: command bulk message failed: error -22
[  394.394373][    T9] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22
[  394.481922][T16541] BTRFS info (device loop2): rebuilding free space tree
[  394.538943][    T9] usb 2-1: USB disconnect, device number 38
[  394.662373][ T5368] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  394.810860][   T29] audit: type=1800 audit(2000000013.399:157): pid=16541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4578" name="bus" dev="loop2" ino=263 res=0 errno=0
[  394.852361][ T5368] usb 6-1: Using ep0 maxpacket: 8
[  394.898053][ T5368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.949553][ T5368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.991376][ T5368] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  395.046705][ T5222] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  395.077828][ T5368] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  395.142286][ T5368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.213275][ T5368] usb 6-1: config 0 descriptor??
[  395.223377][T16623] loop4: detected capacity change from 0 to 256
[  395.339331][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  395.641388][ T5368] maltron 0003:058F:9410.0078: unknown main item tag 0x0
[  395.700226][ T5368] maltron 0003:058F:9410.0078: unknown main item tag 0x0
[  395.773244][ T5368] maltron 0003:058F:9410.0078: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.5-1/input0
[  395.860801][ T5368] usb 6-1: USB disconnect, device number 39
[  395.908936][T16629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4613'.
[  396.028068][T16629] vlan2: entered promiscuous mode
[  396.072370][T16629] gretap0: entered promiscuous mode
[  396.865261][T16619] loop3: detected capacity change from 0 to 32768
[  396.942407][T16619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4607 (16619)
[  397.041452][T16619] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  397.104027][T16619] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  397.191700][T16619] BTRFS info (device loop3): using free-space-tree
[  397.372411][T16656] program syz.0.4619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  397.477089][   T29] audit: type=1800 audit(2000000016.119:158): pid=16619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4607" name="file1" dev="loop3" ino=260 res=0 errno=0
[  397.726070][T15614] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.414849][T16627] loop4: detected capacity change from 0 to 40427
[  398.506321][T16627] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  398.572862][T16627] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  398.654757][T16627] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff
[  398.792844][T16627] F2FS-fs (loop4): invalid crc value
[  398.825684][T16627] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4)
[  398.859302][T16635] loop2: detected capacity change from 0 to 32768
[  398.918235][T16671] netlink: 'syz.1.4627': attribute type 3 has an invalid length.
[  399.019227][T16635] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.395465][T16635] XFS (loop2): Ending clean mount
[  399.442439][T16688] netlink: 'syz.1.4629': attribute type 4 has an invalid length.
[  399.458359][T16635] XFS (loop2): Quotacheck needed: Please wait.
[  399.682894][T16635] XFS (loop2): Quotacheck: Done.
[  399.931180][ T5222] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  400.052370][ T5230] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  400.282400][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  400.363057][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.462299][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  400.563242][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  400.642328][ T5230] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  400.662140][    C1] sched: DL replenish lagged too much
[  400.726564][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.816159][ T5230] usb 4-1: config 0 descriptor??
[  401.094454][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  401.296043][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: unknown main item tag 0x0
[  401.353142][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: unknown main item tag 0x0
[  401.387394][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: unknown main item tag 0x0
[  401.430473][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: unknown main item tag 0x0
[  401.472947][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: unknown main item tag 0x0
[  401.539144][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0
[  401.616123][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: U2F Zero LED initialised
[  401.660375][ T5230] hid-u2fzero 0003:10C4:8ACF.0079: U2F Zero RNG initialised
[  401.721869][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4643'.
[  401.747764][ T5230] usb 4-1: USB disconnect, device number 39
[  402.062632][T16696] loop5: detected capacity change from 0 to 32768
[  402.123619][T16696] XFS: ikeep mount option is deprecated.
[  402.250624][T16696] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  402.474224][T16696] XFS (loop5): Ending clean mount
[  402.804045][T16696] XFS (loop5): Quotacheck needed: Please wait.
[  402.965966][T16696] XFS (loop5): Quotacheck: Done.
[  403.074799][T16751] loop1: detected capacity change from 0 to 256
[  403.199955][ T5216] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  403.269671][T16751] FAT-fs (loop1): Directory bread(block 64) failed
[  403.327899][T16751] FAT-fs (loop1): Directory bread(block 65) failed
[  403.386459][T16751] FAT-fs (loop1): Directory bread(block 66) failed
[  403.421687][T16755] MTD: Couldn't look up 'mountinfo': -2
[  403.451118][T16751] FAT-fs (loop1): Directory bread(block 67) failed
[  403.498159][T16751] FAT-fs (loop1): Directory bread(block 68) failed
[  403.569242][T16751] FAT-fs (loop1): Directory bread(block 69) failed
[  403.640711][T16751] FAT-fs (loop1): Directory bread(block 70) failed
[  403.722404][T16751] FAT-fs (loop1): Directory bread(block 71) failed
[  403.729157][T16751] FAT-fs (loop1): Directory bread(block 72) failed
[  403.842407][T16751] FAT-fs (loop1): Directory bread(block 73) failed
[  403.975991][T16763] loop3: detected capacity change from 0 to 128
[  404.042698][T16763] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  404.944761][T16775] netlink: 'syz.5.4665': attribute type 3 has an invalid length.
[  404.984671][T16775] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.4665'.
[  405.662330][ T5230] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  405.882828][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  405.934667][ T5230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  406.014514][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  406.102296][ T5230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  406.208760][ T5230] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  406.244474][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.318111][ T5230] usb 2-1: Product: syz
[  406.339433][T16790] loop5: detected capacity change from 0 to 64
[  406.352490][ T5230] usb 2-1: Manufacturer: syz
[  406.357126][ T5230] usb 2-1: SerialNumber: syz
[  406.480702][ T5230] usb 2-1: config 0 descriptor??
[  406.554610][ T5230] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  406.785223][ T5230] scsi host1: usb-storage 2-1:0.0
[  406.809773][T16766] loop4: detected capacity change from 0 to 32768
[  406.833018][T16796] tipc: Enabling of bearer <e�Q:v> rejected, media not registered
[  406.862613][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  406.989500][ T5230] usb 2-1: USB disconnect, device number 39
[  407.104991][T16769] loop3: detected capacity change from 0 to 32768
[  407.152564][T16769] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  407.394128][T16769] XFS (loop3): Ending clean mount
[  407.674152][T15614] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  408.737267][T16832] netlink: 'syz.3.4682': attribute type 4 has an invalid length.
[  408.872396][ T5230] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  408.952416][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  409.052413][ T5230] usb 3-1: Using ep0 maxpacket: 16
[  409.063670][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.098531][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.141313][T16800] loop5: detected capacity change from 0 to 32768
[  409.147951][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  409.161163][    T9] usb 2-1: Using ep0 maxpacket: 16
[  409.195778][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.217303][T16800] XFS: ikeep mount option is deprecated.
[  409.223541][ T5230] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  409.250851][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.280454][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.294750][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  409.323503][T16800] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  409.340069][ T5283] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  409.350730][ T5230] usb 3-1: config 0 descriptor??
[  409.362221][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.411013][    T9] usb 2-1: config 0 descriptor??
[  409.526008][T16800] XFS (loop5): Ending clean mount
[  409.533891][ T5283] usb 4-1: Using ep0 maxpacket: 16
[  409.570397][ T5283] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.603020][T16800] XFS (loop5): Quotacheck needed: Please wait.
[  409.641866][ T5283] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.731648][T16800] XFS (loop5): Quotacheck: Done.
[  409.737379][ T5283] usb 4-1: config 0 interface 0 has no altsetting 0
[  409.778083][ T5283] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  409.825691][ T5230] logitech 0003:046D:C287.007A: unknown main item tag 0x0
[  409.855500][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.874881][T16850] loop4: detected capacity change from 0 to 16
[  409.887183][ T5230] logitech 0003:046D:C287.007A: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0
[  409.905893][    T9] lua 0003:1E7D:2C2E.007B: unknown main item tag 0x0
[  409.931500][ T5283] usb 4-1: config 0 descriptor??
[  409.948117][T16850] erofs: (device loop4): mounted with root inode @ nid 36.
[  409.972560][ T5230] logitech 0003:046D:C287.007A: no inputs found
[  409.979306][    T9] lua 0003:1E7D:2C2E.007B: hidraw1: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  410.031594][ T5236] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[  410.055433][ T5230] usb 3-1: USB disconnect, device number 34
[  410.095360][ T5216] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  410.114255][T16850] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  410.149057][    T9] usb 2-1: USB disconnect, device number 40
[  410.182905][T16850] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  410.225343][   T29] audit: type=1800 audit(2000000028.869:159): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4693" name="file3" dev="loop4" ino=89 res=0 errno=0
[  410.449989][ T5283] kye 0003:0458:500F.007C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  410.481287][ T5283] kye 0003:0458:500F.007C: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0
[  410.522307][ T5283] kye 0003:0458:500F.007C: tablet-enabling feature report not found
[  410.548020][ T5283] kye 0003:0458:500F.007C: tablet enabling failed
[  410.712808][ T5283] usb 4-1: USB disconnect, device number 40
[  410.807432][T16857] loop4: detected capacity change from 0 to 128
[  410.858895][T16857] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  410.909681][T16857] ext4 filesystem being mounted at /734/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  411.057112][ T5234] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  411.142256][ T5230] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  411.363024][ T5230] usb 2-1: Using ep0 maxpacket: 16
[  411.391633][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.429784][T16869] loop2: detected capacity change from 0 to 512
[  411.479036][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.557987][ T5230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.595462][T16869] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  411.665075][ T5230] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00
[  411.680212][T16869] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  411.728939][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.763008][T16869] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4702: Corrupt directory, running e2fsck is recommended
[  411.800657][ T5230] usb 2-1: config 0 descriptor??
[  411.849423][T16869] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  411.952529][T16869] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.4702: corrupted in-inode xattr: invalid ea_ino
[  412.039530][T16869] EXT4-fs (loop2): Remounting filesystem read-only
[  412.096879][T16869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.267894][T16869] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  412.283572][ T5230] asus 0003:0B05:1866.007D: unknown main item tag 0x0
[  412.334328][T16869] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  412.363925][ T5230] asus 0003:0B05:1866.007D: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.1-1/input0
[  412.386651][T16869] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4702: Corrupt directory, running e2fsck is recommended
[  412.418399][ T5230] asus 0003:0B05:1866.007D: Asus input not registered
[  412.443665][ T5230] asus 0003:0B05:1866.007D: probe with driver asus failed with error -12
[  412.472425][    T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  412.503141][ T5230] usb 2-1: USB disconnect, device number 41
[  412.588066][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.612727][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  412.644615][    T9] usb 6-1: Using ep0 maxpacket: 16
[  412.689358][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.728347][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.774018][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  412.820252][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  412.850722][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.889805][    T9] usb 6-1: config 0 descriptor??
[  413.347175][    T9] HID 045e:07da: Invalid code 65791 type 1
[  413.429979][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.007E/input/input60
[  413.518874][    T9] microsoft 0003:045E:07DA.007E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  413.586382][    T9] usb 6-1: USB disconnect, device number 40
acpid: input device has been disconnected, fd 3
[  413.854656][T16903] loop2: detected capacity change from 0 to 512
[  414.437773][T16911] sp0: Synchronizing with TNC
[  414.474926][T16911] sp0: Found TNC
[  415.051861][T16925] loop3: detected capacity change from 0 to 4096
[  415.088290][T16925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.122393][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  415.164644][   T29] audit: type=1800 audit(2000000033.799:160): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4727" name="bus" dev="loop3" ino=18 res=0 errno=0
[  415.282299][    T9] usb 2-1: Using ep0 maxpacket: 8
[  415.316234][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.347485][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.387370][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.463896][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  415.505556][    T9] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  415.558508][    T9] usb 2-1: Manufacturer: syz
[  415.586704][    T9] usb 2-1: config 0 descriptor??
[  415.650380][T16931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4730'.
[  416.026715][    T9] wacom 0003:056A:00C5.007F: unknown main item tag 0x0
[  416.098694][    T9] wacom 0003:056A:00C5.007F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  416.283634][    T9] usb 2-1: USB disconnect, device number 42
[  416.369810][T16939] loop5: detected capacity change from 0 to 512
[  416.420993][T16939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.487435][T16939] ext4 filesystem being mounted at /830/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.612407][ T5368] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  416.718272][ T5216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.833746][ T5368] usb 4-1: Using ep0 maxpacket: 16
[  416.886035][ T5368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.981336][ T5368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.036833][T16927] loop2: detected capacity change from 0 to 40427
[  417.050991][ T5368] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  417.067344][T16951] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  417.102325][T16927] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff
[  417.122559][ T5368] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  417.131655][ T5368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.168926][T16927] F2FS-fs (loop2): Image doesn't support compression
[  417.204270][T16927] F2FS-fs (loop2): Image doesn't support compression
[  417.258740][ T5368] usb 4-1: config 0 descriptor??
[  417.272478][T16927] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2
[  417.372340][T16927] F2FS-fs (loop2): invalid crc value
[  417.416503][T16927] F2FS-fs (loop2): Found nat_bits in checkpoint
[  417.757152][ T5368] HID 045e:07da: Invalid code 65791 type 1
[  417.893244][ T5368] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0080/input/input64
[  417.939606][T16927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  417.991326][ T5368] microsoft 0003:045E:07DA.0080: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  418.102629][ T5368] usb 4-1: USB disconnect, device number 41
acpid: input device has been disconnected, fd 3
[  418.385800][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  418.852986][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  418.882554][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  418.893463][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  418.902639][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  418.910377][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  418.918619][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  419.083232][T16967] lo speed is unknown, defaulting to 1000
[  419.461231][   T29] audit: type=1326 audit(2000000038.099:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  419.625294][   T29] audit: type=1326 audit(2000000038.099:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  419.814074][   T29] audit: type=1326 audit(2000000038.099:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  419.862827][T16961] loop1: detected capacity change from 0 to 32768
[  419.923661][T16961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4743 (16961)
[  420.012684][   T29] audit: type=1326 audit(2000000038.229:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  420.065445][T16961] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  420.112390][T16977] macvlan2: entered promiscuous mode
[  420.132465][T16977] macvlan2: entered allmulticast mode
[  420.142342][T16961] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  420.175235][T16967] chnl_net:caif_netlink_parms(): no params data found
[  420.212610][   T29] audit: type=1326 audit(2000000038.229:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a95f7def9 code=0x7ffc0000
[  420.236437][T16961] BTRFS info (device loop1): using free-space-tree
[  420.447227][T16960] loop5: detected capacity change from 0 to 40427
[  420.542643][T16960] F2FS-fs (loop5): Found nat_bits in checkpoint
[  420.661165][T16966] loop4: detected capacity change from 0 to 32768
[  420.719825][T16961] BTRFS error (device loop1): open_ctree failed
[  420.874903][T16967] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.882055][T16967] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.002615][T16967] bridge_slave_0: entered allmulticast mode
[  421.013024][   T54] Bluetooth: hci6: command tx timeout
[  421.058859][T16967] bridge_slave_0: entered promiscuous mode
[  421.127239][T16967] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.195509][T16967] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.246821][T16967] bridge_slave_1: entered allmulticast mode
[  421.297008][T16967] bridge_slave_1: entered promiscuous mode
[  421.744209][T16967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.823321][T16967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.175038][T16967] team0: Port device team_slave_0 added
[  422.238548][T16967] team0: Port device team_slave_1 added
[  422.365621][T17017] loop4: detected capacity change from 0 to 16
[  422.423729][T17017] erofs: (device loop4): mounted with root inode @ nid 36.
[  422.733645][T16967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.740655][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.803122][ T5234] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  422.901558][ T5234] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  422.972451][ T5234] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  423.019740][T16967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.092419][   T54] Bluetooth: hci6: command tx timeout
[  423.104757][T16967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.181975][T16967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.374720][T16967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.430467][T17025] loop1: detected capacity change from 0 to 4096
[  423.496255][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  423.848807][T16967] hsr_slave_0: entered promiscuous mode
[  423.975118][T16967] hsr_slave_1: entered promiscuous mode
[  424.012958][T16967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  424.077844][T16967] Cannot create hsr debugfs directory
[  424.809041][T17020] loop2: detected capacity change from 0 to 32768
[  424.891561][T17020] JBD2: Ignoring recovery information on journal
[  425.106460][T17020] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  425.172514][   T54] Bluetooth: hci6: command tx timeout
[  425.244842][   T29] audit: type=1800 audit(2000000043.889:166): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4758" name="file1" dev="loop2" ino=16946 res=0 errno=0
[  425.289934][T17021] loop3: detected capacity change from 0 to 40427
[  425.339981][T17021] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  425.372093][   T29] audit: type=1800 audit(2000000043.919:167): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4758" name="file1" dev="loop2" ino=16946 res=0 errno=0
[  425.411013][T17021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  425.487998][T17021] F2FS-fs (loop3): Found nat_bits in checkpoint
[  425.512698][ T5222] ocfs2: Unmounting device (7,2) on (node local)
[  425.812353][T17021] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  425.841991][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4775'.
[  425.864193][T17021] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  425.890499][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4775'.
[  425.963184][T17059] loop1: detected capacity change from 0 to 1024
[  426.018752][T17059] hfsplus: request for non-existent node 3 in B*Tree
[  426.064746][T17059] hfsplus: request for non-existent node 3 in B*Tree
[  427.252506][   T54] Bluetooth: hci6: command tx timeout
[  427.394970][T17061] loop4: detected capacity change from 0 to 32768
[  427.425531][T17061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4778 (17061)
[  427.454271][T17063] loop2: detected capacity change from 0 to 32768
[  427.470538][T17061] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  427.512564][T17061] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  427.541858][T17061] BTRFS info (device loop4): using free-space-tree
[  427.751630][   T29] audit: type=1800 audit(2000000046.379:168): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4778" name="file1" dev="loop4" ino=260 res=0 errno=0
[  427.933354][ T5234] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  429.002049][T17096] loop2: detected capacity change from 0 to 512
[  429.059604][T17096] EXT4-fs: Ignoring removed mblk_io_submit option
[  429.107910][T17096] EXT4-fs (loop2): orphan cleanup on readonly fs
[  429.143022][T17096] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  429.190073][T17096] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  429.253692][T17096] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4786: attempt to clear invalid blocks 2 len 1
[  429.320010][T17096] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4786: invalid indirect mapped block 1819239214 (level 0)
[  429.397224][T17096] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4786: invalid indirect mapped block 1819239214 (level 1)
[  429.459664][T17096] EXT4-fs (loop2): 1 truncate cleaned up
[  429.492835][T17096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.623051][T17096] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  429.665851][T17096] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  429.799522][T17107] loop4: detected capacity change from 0 to 4096
[  429.824140][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.046598][   T29] audit: type=1326 audit(2000000048.689:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.169919][   T29] audit: type=1326 audit(2000000048.689:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.299382][   T29] audit: type=1326 audit(2000000048.729:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.396827][   T29] audit: type=1326 audit(2000000048.729:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.537330][   T29] audit: type=1326 audit(2000000048.729:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.657471][   T29] audit: type=1326 audit(2000000048.729:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.735862][T17126] loop2: detected capacity change from 0 to 1024
[  430.775929][   T29] audit: type=1326 audit(2000000048.729:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  430.871961][T17126] hfsplus: bad catalog entry type
[  430.915822][   T29] audit: type=1326 audit(2000000048.729:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17112 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ad97def9 code=0x7ffc0000
[  431.021652][ T1116] hfsplus: b-tree write err: -5, ino 4
[  431.235033][T17137] loop3: detected capacity change from 0 to 512
[  431.282627][T17137] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  431.321609][T17137] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  431.358317][T17137] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.4804: Failed to acquire dquot type 1
[  431.410277][T17137] EXT4-fs (loop3): 1 truncate cleaned up
[  431.430706][T17137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.481648][T17137] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.661627][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.986874][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4809'.
[  432.860804][T17171] loop3: detected capacity change from 0 to 2048
[  432.896137][T17171] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  432.936550][T17171] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  432.964764][T17173] loop2: detected capacity change from 0 to 2048
[  432.979986][T17171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  433.022567][T17173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.100393][T17173] EXT4-fs error (device loop2): __ext4_iget:4952: inode #14: block 1886221359: comm syz.2.4820: invalid block
[  433.264361][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.682349][ T5283] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  433.852502][ T5283] usb 3-1: Using ep0 maxpacket: 8
[  433.864054][ T5283] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  433.881312][ T5283] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  433.902996][ T5283] usb 3-1: config 0 interface 0 has no altsetting 0
[  433.919538][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58
[  433.939305][ T5283] usb 3-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3
[  433.949926][ T5283] usb 3-1: Product: syz
[  433.960779][ T5283] usb 3-1: Manufacturer: syz
[  433.968324][ T5283] usb 3-1: SerialNumber: syz
[  433.988529][ T5283] usb 3-1: config 0 descriptor??
[  434.001486][ T5283] hub 3-1:0.0: bad descriptor, ignoring hub
[  434.019460][ T5283] hub 3-1:0.0: probe with driver hub failed with error -5
[  434.029985][ T5283] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  434.232479][ T5283] gspca_zc3xx: reg_w_i err -71
[  434.822419][ T5283] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  434.832442][ T5283] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  435.042418][ T5283] usb 3-1: reset high-speed USB device number 35 using dummy_hcd
[  435.496205][ T5283] usb 3-1: failed to restore interface 0 altsetting 6 (error=-71)
[  435.521157][ T5283] usb 3-1: USB disconnect, device number 35
[  435.668615][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  435.687670][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  435.696738][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  435.706293][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  435.716579][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  435.725617][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  436.841696][T17188] loop2: detected capacity change from 0 to 32768
[  436.921750][T17188] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[  436.921750][T17188] 
[  437.358462][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  437.384322][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  437.395150][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  437.404151][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  437.414214][   T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  437.421514][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  437.812513][   T54] Bluetooth: hci7: command tx timeout
[  439.494985][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  439.501433][   T54] Bluetooth: hci8: command tx timeout
[  439.511228][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  439.892415][   T54] Bluetooth: hci7: command tx timeout
[  441.572616][   T54] Bluetooth: hci8: command tx timeout
[  441.972517][   T54] Bluetooth: hci7: command tx timeout
[  442.694411][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  443.022473][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  443.037605][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  443.046013][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  443.056894][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  443.064721][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  443.073710][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  443.652469][ T5236] Bluetooth: hci8: command tx timeout
[  444.041780][   T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  444.052420][ T5242] Bluetooth: hci7: command tx timeout
[  444.072363][   T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  444.085765][   T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  444.096657][   T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  444.106015][   T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  444.113908][   T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  444.338762][T16967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.182308][   T54] Bluetooth: hci9: command tx timeout
[  445.732492][   T54] Bluetooth: hci8: command tx timeout
[  446.212864][   T54] Bluetooth: hci10: command tx timeout
[  447.252531][   T54] Bluetooth: hci9: command tx timeout
[  448.292572][   T54] Bluetooth: hci10: command tx timeout
[  448.452972][  T289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  449.120886][T17190] lo speed is unknown, defaulting to 1000
[  449.332640][   T54] Bluetooth: hci9: command tx timeout
[  449.656889][T17190] chnl_net:caif_netlink_parms(): no params data found
[  450.098233][T17190] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.129472][T17190] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.148606][T17190] bridge_slave_0: entered allmulticast mode
[  450.166640][T17190] bridge_slave_0: entered promiscuous mode
[  450.214269][T17190] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.223458][T17190] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.230771][T17190] bridge_slave_1: entered allmulticast mode
[  450.264748][T17190] bridge_slave_1: entered promiscuous mode
[  450.360702][T17221] loop2: detected capacity change from 0 to 32768
[  450.375415][   T54] Bluetooth: hci10: command tx timeout
[  450.384983][T17221] btrfs: Deprecated parameter 'usebackuproot'
[  450.391143][T17221] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  450.414643][T17221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4840 (17221)
[  450.449175][T17221] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  450.472465][T17221] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  450.481246][T17221] BTRFS info (device loop2): disk space caching is enabled
[  450.499495][T17221] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  450.578405][T17190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.603951][T17190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.791322][ T5222] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  450.907187][T17190] team0: Port device team_slave_0 added
[  450.935805][T17190] team0: Port device team_slave_1 added
[  451.151126][T17190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.170749][T17190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.271508][T17190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.324095][T17190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.350943][T17190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.429078][   T54] Bluetooth: hci9: command tx timeout
[  451.461388][T17190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.898412][T17190] hsr_slave_0: entered promiscuous mode
[  451.927925][T17190] hsr_slave_1: entered promiscuous mode
[  451.946582][T17190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  451.961579][T17190] Cannot create hsr debugfs directory
[  452.452659][   T54] Bluetooth: hci10: command tx timeout
[  454.217620][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  459.334322][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  462.489296][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  462.502434][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  462.511005][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  462.519916][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  462.527642][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  462.536438][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  462.619387][T17249] lo speed is unknown, defaulting to 1000
[  462.878953][T17249] chnl_net:caif_netlink_parms(): no params data found
[  463.086284][T17249] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.106420][T17249] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.123193][T17249] bridge_slave_0: entered allmulticast mode
[  463.140639][T17249] bridge_slave_0: entered promiscuous mode
[  463.150421][T17249] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.169690][T17249] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.192638][T17249] bridge_slave_1: entered allmulticast mode
[  463.200002][T17249] bridge_slave_1: entered promiscuous mode
[  463.333102][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.359722][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.474080][T17249] team0: Port device team_slave_0 added
[  463.493927][T17249] team0: Port device team_slave_1 added
[  463.591343][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.610440][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.654569][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.679365][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.697796][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.737058][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.886871][T17249] hsr_slave_0: entered promiscuous mode
[  463.918543][T17249] hsr_slave_1: entered promiscuous mode
[  463.947833][T17249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  463.961908][T17249] Cannot create hsr debugfs directory
[  464.612444][   T54] Bluetooth: hci0: command tx timeout
[  465.099209][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  466.692467][   T54] Bluetooth: hci0: command tx timeout
[  468.772451][   T54] Bluetooth: hci0: command tx timeout
[  470.852574][   T54] Bluetooth: hci0: command tx timeout
[  470.872659][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  476.612915][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.536856][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  478.547575][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  478.556417][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  478.568878][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  478.579446][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  478.587337][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  478.661713][T17258] lo speed is unknown, defaulting to 1000
[  478.951558][T17258] chnl_net:caif_netlink_parms(): no params data found
[  479.164587][T17258] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.171740][T17258] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.206491][T17258] bridge_slave_0: entered allmulticast mode
[  479.221832][T17258] bridge_slave_0: entered promiscuous mode
[  479.247742][T17258] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.267795][T17258] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.282588][T17258] bridge_slave_1: entered allmulticast mode
[  479.302369][T17258] bridge_slave_1: entered promiscuous mode
[  479.407017][T17258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.438261][T17258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.567314][T17258] team0: Port device team_slave_0 added
[  479.591406][T17258] team0: Port device team_slave_1 added
[  479.689056][T17258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.701535][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.766184][T17258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.793076][T17258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.800068][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.860634][T17258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.037733][T17258] hsr_slave_0: entered promiscuous mode
[  480.064871][T17258] hsr_slave_1: entered promiscuous mode
[  480.082011][T17258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.101732][T17258] Cannot create hsr debugfs directory
[  480.692648][ T5236] Bluetooth: hci1: command tx timeout
[  482.373403][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  482.774583][ T5236] Bluetooth: hci1: command tx timeout
[  484.852751][ T5236] Bluetooth: hci1: command tx timeout
[  486.932714][ T5236] Bluetooth: hci1: command tx timeout
[  488.147247][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  493.901782][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  495.939382][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  495.954902][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  495.967762][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  495.976014][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  495.985939][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  495.994162][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  496.060822][T17273] lo speed is unknown, defaulting to 1000
[  496.338867][T17273] chnl_net:caif_netlink_parms(): no params data found
[  496.548832][T17273] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.563204][T17273] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.584780][T17273] bridge_slave_0: entered allmulticast mode
[  496.602325][T17273] bridge_slave_0: entered promiscuous mode
[  496.624200][T17273] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.631330][T17273] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.651297][T17273] bridge_slave_1: entered allmulticast mode
[  496.667696][T17273] bridge_slave_1: entered promiscuous mode
[  496.949114][T17273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.978658][T17273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.130532][T17273] team0: Port device team_slave_0 added
[  497.158487][T17273] team0: Port device team_slave_1 added
[  497.428730][T17273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.462142][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.532395][T17273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.588499][T17273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.612413][T17273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.690519][T17273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.789996][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  497.801854][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  497.811354][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  497.829385][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  497.837911][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  497.850065][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  498.054585][ T5236] Bluetooth: hci4: command tx timeout
[  498.068506][T17273] hsr_slave_0: entered promiscuous mode
[  498.108341][T17273] hsr_slave_1: entered promiscuous mode
[  498.176273][T17273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.190456][T17273] Cannot create hsr debugfs directory
[  499.653170][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  499.892514][ T5236] Bluetooth: hci5: command tx timeout
[  500.132690][ T5236] Bluetooth: hci4: command tx timeout
[  500.938616][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  500.949390][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  501.972495][ T5236] Bluetooth: hci5: command tx timeout
[  502.212581][ T5236] Bluetooth: hci4: command tx timeout
[  503.174985][   T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  503.184955][   T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  503.194984][   T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  503.204320][   T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  503.212039][   T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  503.221270][   T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  503.298240][T17285] lo speed is unknown, defaulting to 1000
[  503.602329][T17285] chnl_net:caif_netlink_parms(): no params data found
[  503.901151][T17285] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.922356][T17285] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.929741][T17285] bridge_slave_0: entered allmulticast mode
[  503.951192][T17285] bridge_slave_0: entered promiscuous mode
[  503.976271][T17285] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.992362][T17285] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.999645][T17285] bridge_slave_1: entered allmulticast mode
[  504.023118][T17285] bridge_slave_1: entered promiscuous mode
[  504.052488][   T54] Bluetooth: hci5: command tx timeout
[  504.255352][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.292712][   T54] Bluetooth: hci4: command tx timeout
[  504.301553][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.658975][T17285] team0: Port device team_slave_0 added
[  504.697692][T17285] team0: Port device team_slave_1 added
[  504.768324][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  504.782177][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  504.791008][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  504.800378][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  504.808892][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  504.816939][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  505.041803][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.062235][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.111082][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.134829][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.141806][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.189785][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.258054][   T54] Bluetooth: hci11: command tx timeout
[  505.419991][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  505.463324][T17285] hsr_slave_0: entered promiscuous mode
[  505.481344][T17285] hsr_slave_1: entered promiscuous mode
[  505.498620][T17285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.512422][T17285] Cannot create hsr debugfs directory
[  506.132459][   T54] Bluetooth: hci5: command tx timeout
[  506.852634][   T54] Bluetooth: hci12: command tx timeout
[  507.332909][   T54] Bluetooth: hci11: command tx timeout
[  508.932605][   T54] Bluetooth: hci12: command tx timeout
[  509.412337][   T54] Bluetooth: hci11: command tx timeout
[  511.012579][   T54] Bluetooth: hci12: command tx timeout
[  511.182905][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  511.492685][   T54] Bluetooth: hci11: command tx timeout
[  513.092831][   T54] Bluetooth: hci12: command tx timeout
[  516.295171][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  522.052890][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  523.095102][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  523.105324][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  523.115064][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  523.129473][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  523.137996][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  523.146006][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  523.224618][T17298] lo speed is unknown, defaulting to 1000
[  523.531544][T17298] chnl_net:caif_netlink_parms(): no params data found
[  523.944679][T17298] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.963388][T17298] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.970693][T17298] bridge_slave_0: entered allmulticast mode
[  524.003794][T17298] bridge_slave_0: entered promiscuous mode
[  524.023709][T17298] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.030833][T17298] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.052760][T17298] bridge_slave_1: entered allmulticast mode
[  524.073003][T17298] bridge_slave_1: entered promiscuous mode
[  524.227331][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.257011][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.479687][T17298] team0: Port device team_slave_0 added
[  524.506570][T17298] team0: Port device team_slave_1 added
[  524.615285][T17298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.632347][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.697637][T17298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.725806][T17298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.742219][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.800921][T17298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  525.006942][T17298] hsr_slave_0: entered promiscuous mode
[  525.030559][T17298] hsr_slave_1: entered promiscuous mode
[  525.046599][T17298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  525.063494][T17298] Cannot create hsr debugfs directory
[  525.172525][ T5236] Bluetooth: hci13: command tx timeout
[  527.252543][ T5236] Bluetooth: hci13: command tx timeout
[  527.822715][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  529.332545][ T5236] Bluetooth: hci13: command tx timeout
[  531.417773][ T5236] Bluetooth: hci13: command tx timeout
[  533.579280][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  538.693031][ T1116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  539.131070][   T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  539.140708][   T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  539.151927][   T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  539.160326][   T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  539.170564][   T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  539.178296][   T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  539.251091][T17307] lo speed is unknown, defaulting to 1000
[  539.536402][T17307] chnl_net:caif_netlink_parms(): no params data found
[  539.912423][T17307] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.919708][T17307] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.942891][T17307] bridge_slave_0: entered allmulticast mode
[  539.962420][T17307] bridge_slave_0: entered promiscuous mode
[  539.970964][T17307] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.002410][T17307] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.009761][T17307] bridge_slave_1: entered allmulticast mode
[  540.033772][T17307] bridge_slave_1: entered promiscuous mode
[  540.208291][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.236538][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  540.467658][T17307] team0: Port device team_slave_0 added
[  540.485120][T17307] team0: Port device team_slave_1 added
[  540.788817][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  540.800817][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  540.850225][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  540.884187][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  540.891200][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  540.938891][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.247483][T17307] hsr_slave_0: entered promiscuous mode
[  541.270869][ T5236] Bluetooth: hci14: command tx timeout
[  541.310402][T17307] hsr_slave_1: entered promiscuous mode
[  541.327505][T17307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  541.343101][T17307] Cannot create hsr debugfs directory
[  543.332610][   T54] Bluetooth: hci14: command tx timeout
[  544.456150][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  545.412510][   T54] Bluetooth: hci14: command tx timeout
[  547.492408][   T54] Bluetooth: hci14: command tx timeout
[  549.100148][   T54] Bluetooth: hci6: command 0x0405 tx timeout
[  550.213343][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  556.411037][   T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  556.436540][   T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  556.451693][   T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  556.462189][   T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  556.470994][   T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  556.478972][   T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  556.540759][T17316] lo speed is unknown, defaulting to 1000
[  556.821447][T17316] chnl_net:caif_netlink_parms(): no params data found
[  557.102885][T17316] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.110139][T17316] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.132568][T17316] bridge_slave_0: entered allmulticast mode
[  557.152577][T17316] bridge_slave_0: entered promiscuous mode
[  557.161073][T17316] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.182747][T17316] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.202458][T17316] bridge_slave_1: entered allmulticast mode
[  557.209870][T17316] bridge_slave_1: entered promiscuous mode
[  557.415422][T17316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.456095][T17316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.794959][T17316] team0: Port device team_slave_0 added
[  557.821314][ T5242] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  557.831243][ T5242] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  557.841277][ T5242] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  557.850484][ T5242] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  557.861866][ T5242] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  557.869672][ T5242] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  557.903651][T17316] team0: Port device team_slave_1 added
[  558.137006][T17316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.162422][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.210644][T17316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.242617][T17316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.249635][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.298878][T17316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.533728][ T5242] Bluetooth: hci15: command tx timeout
[  558.592714][T17316] hsr_slave_0: entered promiscuous mode
[  558.623535][T17316] hsr_slave_1: entered promiscuous mode
[  558.648027][T17316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  558.672406][T17316] Cannot create hsr debugfs directory
[  559.332710][ T5242] Bluetooth: hci7: command 0x0406 tx timeout
[  559.972598][ T5236] Bluetooth: hci16: command tx timeout
[  560.612778][ T5236] Bluetooth: hci15: command tx timeout
[  562.052671][ T5236] Bluetooth: hci16: command tx timeout
[  562.392684][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  562.399434][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  562.692626][ T5236] Bluetooth: hci15: command tx timeout
[  564.132477][ T5236] Bluetooth: hci16: command tx timeout
[  564.275886][   T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  564.296157][   T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  564.306285][   T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  564.314762][   T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  564.325687][   T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  564.334136][   T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  564.409354][T17329] lo speed is unknown, defaulting to 1000
[  564.459591][   T54] Bluetooth: hci8: command 0x0406 tx timeout
[  564.706105][T17329] chnl_net:caif_netlink_parms(): no params data found
[  564.772820][ T5242] Bluetooth: hci15: command tx timeout
[  565.221340][T17329] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.252607][T17329] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.259945][T17329] bridge_slave_0: entered allmulticast mode
[  565.310780][T17329] bridge_slave_0: entered promiscuous mode
[  565.325030][T17329] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.352392][T17329] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.359781][T17329] bridge_slave_1: entered allmulticast mode
[  565.403685][T17329] bridge_slave_1: entered promiscuous mode
[  565.457386][   T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  565.467682][   T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  565.477825][   T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  565.488643][   T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  565.500321][   T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  565.511384][   T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  565.744723][T17329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.775242][T17329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.923921][T17329] team0: Port device team_slave_0 added
[  565.945404][T17329] team0: Port device team_slave_1 added
[  566.072536][T17329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.079609][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.130307][T17329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.164441][T17329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.171447][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.212981][ T5242] Bluetooth: hci16: command tx timeout
[  566.240390][T17329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.372717][ T5242] Bluetooth: hci17: command tx timeout
[  566.519949][T17329] hsr_slave_0: entered promiscuous mode
[  566.585729][T17329] hsr_slave_1: entered promiscuous mode
[  566.662343][T17329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.670005][T17329] Cannot create hsr debugfs directory
[  567.572476][ T5236] Bluetooth: hci18: command tx timeout
[  568.452497][ T5236] Bluetooth: hci17: command tx timeout
[  569.413585][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  569.581667][ T5236] Bluetooth: hci9: command 0x0406 tx timeout
[  569.589442][ T5236] Bluetooth: hci10: command 0x0406 tx timeout
[  569.652446][ T5242] Bluetooth: hci18: command tx timeout
[  570.532459][ T5242] Bluetooth: hci17: command tx timeout
[  571.732711][ T5242] Bluetooth: hci18: command tx timeout
[  572.614054][ T5242] Bluetooth: hci17: command tx timeout
[  573.812709][ T5242] Bluetooth: hci18: command tx timeout
[  574.452998][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  579.572912][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  583.725265][T17340] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  583.742358][T17340] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  583.751727][T17340] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  583.760094][T17340] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  583.768009][T17340] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  583.775602][T17340] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  583.854273][T17342] lo speed is unknown, defaulting to 1000
[  584.131848][T17342] chnl_net:caif_netlink_parms(): no params data found
[  584.384603][T17342] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.391762][T17342] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.422518][T17342] bridge_slave_0: entered allmulticast mode
[  584.431660][T17342] bridge_slave_0: entered promiscuous mode
[  584.455123][T17342] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.472453][T17342] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.479838][T17342] bridge_slave_1: entered allmulticast mode
[  584.506088][T17342] bridge_slave_1: entered promiscuous mode
[  584.629792][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.670506][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.793998][T17342] team0: Port device team_slave_0 added
[  584.820824][T17342] team0: Port device team_slave_1 added
[  584.935364][T17340] Bluetooth: hci0: command 0x0406 tx timeout
[  584.945532][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.962126][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.024840][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.055154][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.072230][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.121621][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.274802][T17342] hsr_slave_0: entered promiscuous mode
[  585.290059][T17342] hsr_slave_1: entered promiscuous mode
[  585.305904][T17342] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  585.319540][T17342] Cannot create hsr debugfs directory
[  585.413435][   T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  585.812493][   T54] Bluetooth: hci19: command tx timeout
[  587.892564][   T54] Bluetooth: hci19: command tx timeout
[  589.254715][   T30] INFO: task syz.0.4678:16809 blocked for more than 143 seconds.
[  589.264696][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  589.272014][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  589.312292][   T30] task:syz.0.4678      state:D stack:25968 pid:16809 tgid:16807 ppid:5217   flags:0x00004004
[  589.381532][   T30] Call Trace:
[  589.385012][   T30]  <TASK>
[  589.387972][   T30]  __schedule+0x1895/0x4b30
[  589.412602][   T30]  ? __pfx___schedule+0x10/0x10
[  589.417535][   T30]  ? __pfx_lock_release+0x10/0x10
[  589.522235][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  589.528323][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.632487][   T30]  ? schedule+0x90/0x320
[  589.636821][   T30]  schedule+0x14b/0x320
[  589.641048][   T30]  jbd2_log_wait_commit+0x29f/0x4a0
[  589.669873][   T30]  ? __pfx_lock_release+0x10/0x10
[  589.683627][   T30]  ? __pfx_jbd2_log_wait_commit+0x10/0x10
[  589.689534][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  589.712416][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.718132][   T30]  ? __jbd2_log_start_commit+0x5e/0x320
[  589.752372][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.758118][   T30]  ? _raw_write_unlock+0x28/0x50
[  589.772189][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.777911][   T30]  ext4_sync_fs+0x45c/0x710
[  589.802351][   T30]  ? __pfx_super_lock+0x10/0x10
[  589.807302][   T30]  ? __pfx_ext4_sync_fs+0x10/0x10
[  589.822222][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.827936][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  589.850409][   T30]  iterate_supers+0xc8/0x190
[  589.862300][   T30]  ? __pfx_sync_fs_one_sb+0x10/0x10
[  589.867565][   T30]  ksys_sync+0xdb/0x1c0
[  589.871763][   T30]  ? __pfx_ksys_sync+0x10/0x10
[  589.892619][   T30]  ? do_syscall_64+0x100/0x230
[  589.897463][   T30]  ? do_syscall_64+0xb6/0x230
[  589.912236][   T30]  __do_sys_sync+0xe/0x20
[  589.916636][   T30]  do_syscall_64+0xf3/0x230
[  589.921182][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.953059][   T30] RIP: 0033:0x7f7d7cd7def9
[  589.957543][   T30] RSP: 002b:00007f7d7db01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  589.972338][   T54] Bluetooth: hci19: command tx timeout
[  589.982609][   T30] RAX: ffffffffffffffda RBX: 00007f7d7cf35f80 RCX: 00007f7d7cd7def9
[  589.991279][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  590.013712][   T30] RBP: 00007f7d7cdf0b76 R08: 0000000000000000 R09: 0000000000000000
[  590.021745][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  590.055538][   T30] R13: 0000000000000000 R14: 00007f7d7cf35f80 R15: 00007ffca548d8d8
[  590.072317][   T30]  </TASK>
[  590.075447][   T30] INFO: task syz-executor:16967 blocked for more than 144 seconds.
[  590.092986][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  590.100393][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  590.132696][   T30] task:syz-executor    state:D stack:21728 pid:16967 tgid:16967 ppid:1      flags:0x00004006
[  590.152408][   T30] Call Trace:
[  590.155864][   T30]  <TASK>
[  590.172296][   T30]  __schedule+0x1895/0x4b30
[  590.176891][   T30]  ? __pfx___schedule+0x10/0x10
[  590.181783][   T30]  ? __pfx_lock_release+0x10/0x10
[  590.202323][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  590.207887][   T30]  ? schedule+0x90/0x320
[  590.222907][   T30]  schedule+0x14b/0x320
[  590.227138][   T30]  schedule_preempt_disabled+0x13/0x30
[  590.262133][   T30]  __mutex_lock+0x6a7/0xd70
[  590.266727][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.294504][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  590.299795][   T30]  ? __mutex_lock+0x52a/0xd70
[  590.312375][   T30]  ? nsim_destroy+0x71/0x5c0
[  590.317031][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  590.332307][   T30]  ? __pfx_mntput_no_expire+0x10/0x10
[  590.337753][   T30]  ? _raw_spin_unlock+0x28/0x50
[  590.352289][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.358031][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.383455][   T30]  nsim_destroy+0x71/0x5c0
[  590.387951][   T30]  ? nsim_dev_reload_destroy+0x28a/0x490
[  590.402648][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.408529][   T30]  __nsim_dev_port_del+0x14b/0x1b0
[  590.432498][   T30]  nsim_dev_reload_destroy+0x28a/0x490
[  590.438129][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[  590.453792][   T30]  nsim_drv_remove+0x58/0x160
[  590.458536][   T30]  device_release_driver_internal+0x4ab/0x7c0
[  590.482381][   T30]  bus_remove_device+0x34f/0x420
[  590.487441][   T30]  device_del+0x57a/0x9b0
[  590.491824][   T30]  ? __pfx_device_del+0x10/0x10
[  590.509034][   T30]  device_unregister+0x20/0xc0
[  590.522270][   T30]  del_device_store+0x363/0x480
[  590.527195][   T30]  ? __pfx_del_device_store+0x10/0x10
[  590.533646][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  590.563693][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.572761][   T30]  ? sysfs_kf_write+0x182/0x2a0
[  590.577681][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.601702][   T30]  ? bus_attr_store+0x4f/0xa0
[  590.612638][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  590.618087][   T30]  kernfs_fop_write_iter+0x3a2/0x500
[  590.642410][   T30]  vfs_write+0xa6f/0xc90
[  590.646782][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  590.662129][   T30]  ? __pfx_vfs_write+0x10/0x10
[  590.667080][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.692552][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.698265][   T30]  ? __fdget_pos+0x265/0x320
[  590.708275][   T30]  ksys_write+0x1a0/0x2c0
[  590.722183][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  590.727895][   T30]  ? __pfx_ksys_write+0x10/0x10
[  590.744829][   T30]  ? do_syscall_64+0x100/0x230
[  590.749671][   T30]  ? do_syscall_64+0xb6/0x230
[  590.771867][   T30]  do_syscall_64+0xf3/0x230
[  590.778138][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.792473][   T30] RIP: 0033:0x7fb3e957c9df
[  590.796938][   T30] RSP: 002b:00007ffc29ceaf90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  590.823447][   T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb3e957c9df
[  590.831571][   T30] RDX: 0000000000000001 RSI: 00007ffc29ceafe0 RDI: 0000000000000005
[  590.862205][   T30] RBP: 00007fb3e95f1c15 R08: 0000000000000000 R09: 00007ffc29ceade7
[  590.870250][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  590.893507][   T30] R13: 00007ffc29ceafe0 R14: 00007fb3ea264620 R15: 0000000000000003
[  590.901564][   T30]  </TASK>
[  590.922409][   T30] INFO: task syz.5.4770:17046 blocked for more than 145 seconds.
[  590.930186][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  590.952390][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  590.961117][   T30] task:syz.5.4770      state:D stack:24824 pid:17046 tgid:17045 ppid:5216   flags:0x00004002
[  590.992399][   T30] Call Trace:
[  590.995748][   T30]  <TASK>
[  590.998705][   T30]  __schedule+0x1895/0x4b30
[  591.018458][   T30]  ? __pfx___schedule+0x10/0x10
[  591.032402][   T30]  ? __pfx_lock_release+0x10/0x10
[  591.037503][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  591.056776][   T30]  ? schedule+0x90/0x320
[  591.061175][   T30]  schedule+0x14b/0x320
[  591.079229][   T30]  schedule_preempt_disabled+0x13/0x30
[  591.092589][   T30]  __mutex_lock+0x6a7/0xd70
[  591.097174][   T30]  ? __mutex_lock+0x52a/0xd70
[  591.101895][   T30]  ? tun_chr_close+0x3b/0x1b0
[  591.122280][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  591.127421][   T30]  ? __pfx_call_rcu+0x10/0x10
[  591.142158][   T30]  tun_chr_close+0x3b/0x1b0
[  591.146733][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  591.151890][   T30]  __fput+0x241/0x880
[  591.173380][   T30]  task_work_run+0x251/0x310
[  591.178044][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  591.202203][   T30]  ? __pfx_task_work_run+0x10/0x10
[  591.207392][   T30]  ? do_exit+0xa2a/0x28e0
[  591.211756][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  591.232346][   T30]  ? kmem_cache_free+0x1a2/0x420
[  591.237468][   T30]  ? do_exit+0xa2a/0x28e0
[  591.241843][   T30]  do_exit+0xa2f/0x28e0
[  591.263450][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  591.269215][   T30]  ? __pfx_do_exit+0x10/0x10
[  591.282160][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  591.302531][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  591.308322][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  591.322143][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  591.328579][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  591.352365][   T30]  do_group_exit+0x207/0x2c0
[  591.357035][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  591.373349][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  591.379053][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  591.402291][   T30]  get_signal+0x176f/0x1810
[  591.406881][   T30]  ? __pfx_get_signal+0x10/0x10
[  591.411784][   T30]  arch_do_signal_or_restart+0x96/0x860
[  591.432363][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  591.438586][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  591.462250][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  591.468056][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  591.483359][   T30]  do_syscall_64+0x100/0x230
[  591.488016][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.512379][   T30] RIP: 0033:0x7f0f22d7def9
[  591.516861][   T30] RSP: 002b:00007f0f23b31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  591.542264][   T30] RAX: 0000000000000000 RBX: 00007f0f22f35f80 RCX: 00007f0f22d7def9
[  591.550313][   T30] RDX: 0000000020000000 RSI: 0000000000008b24 RDI: 0000000000000003
[  591.572493][   T30] RBP: 00007f0f22df0b76 R08: 0000000000000000 R09: 0000000000000000
[  591.580543][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.612383][   T30] R13: 0000000000000000 R14: 00007f0f22f35f80 R15: 00007fffd6804b88
[  591.620455][   T30]  </TASK>
[  591.632388][   T30] INFO: task syz.1.4780:17067 blocked for more than 145 seconds.
[  591.652434][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  591.659776][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  591.691889][   T30] task:syz.1.4780      state:D stack:25616 pid:17067 tgid:17066 ppid:5218   flags:0x00004002
[  591.712228][   T30] Call Trace:
[  591.715571][   T30]  <TASK>
[  591.718533][   T30]  __schedule+0x1895/0x4b30
[  591.742414][   T30]  ? __pfx___schedule+0x10/0x10
[  591.747366][   T30]  ? __pfx_lock_release+0x10/0x10
[  591.762299][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  591.767853][   T30]  ? schedule+0x90/0x320
[  591.782304][   T30]  schedule+0x14b/0x320
[  591.786542][   T30]  schedule_preempt_disabled+0x13/0x30
[  591.811295][   T30]  __mutex_lock+0x6a7/0xd70
[  591.820424][   T30]  ? __mutex_lock+0x52a/0xd70
[  591.842684][   T30]  ? tun_chr_close+0x3b/0x1b0
[  591.847462][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  591.863037][   T30]  ? __pfx_call_rcu+0x10/0x10
[  591.867792][   T30]  tun_chr_close+0x3b/0x1b0
[  591.883276][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  591.888748][   T30]  __fput+0x241/0x880
[  591.902353][   T30]  task_work_run+0x251/0x310
[  591.907022][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  591.923401][   T30]  ? __pfx_task_work_run+0x10/0x10
[  591.928594][   T30]  ? do_exit+0xa2a/0x28e0
[  591.952354][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  591.958080][   T30]  ? kmem_cache_free+0x1a2/0x420
[  591.972490][   T30]  ? do_exit+0xa2a/0x28e0
[  591.976919][   T30]  do_exit+0xa2f/0x28e0
[  591.981139][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.002353][   T30]  ? __pfx_do_exit+0x10/0x10
[  592.007034][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  592.033514][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.039252][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.052332][   T54] Bluetooth: hci19: command tx timeout
[  592.058238][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  592.072233][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  592.077421][   T30]  do_group_exit+0x207/0x2c0
[  592.092317][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  592.097581][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.122509][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  592.127798][   T30]  get_signal+0x176f/0x1810
[  592.143479][   T30]  ? __pfx_get_signal+0x10/0x10
[  592.148423][   T30]  arch_do_signal_or_restart+0x96/0x860
[  592.172301][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  592.178622][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.202337][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  592.208856][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  592.222273][   T30]  do_syscall_64+0x100/0x230
[  592.226937][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.253452][   T30] RIP: 0033:0x7f67ac77def9
[  592.258126][   T30] RSP: 002b:00007f67ad563038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.282332][   T30] RAX: 0000000000000034 RBX: 00007f67ac935f80 RCX: 00007f67ac77def9
[  592.290366][   T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  592.312407][   T30] RBP: 00007f67ac7f0b76 R08: 0000000000000000 R09: 0000000000000000
[  592.320451][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.350819][   T30] R13: 0000000000000000 R14: 00007f67ac935f80 R15: 00007ffe2c799968
[  592.372702][   T30]  </TASK>
[  592.375855][   T30] INFO: task syz.3.4824:17183 blocked for more than 146 seconds.
[  592.402178][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  592.409521][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  592.443045][   T30] task:syz.3.4824      state:D stack:25472 pid:17183 tgid:17182 ppid:15614  flags:0x00004002
[  592.462134][   T30] Call Trace:
[  592.465477][   T30]  <TASK>
[  592.468440][   T30]  __schedule+0x1895/0x4b30
[  592.482221][   T30]  ? __pfx___schedule+0x10/0x10
[  592.487240][   T30]  ? __pfx_lock_release+0x10/0x10
[  592.512921][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  592.518517][   T30]  ? schedule+0x90/0x320
[  592.530107][   T30]  schedule+0x14b/0x320
[  592.542805][   T30]  schedule_preempt_disabled+0x13/0x30
[  592.562301][   T30]  __mutex_lock+0x6a7/0xd70
[  592.566897][   T30]  ? __mutex_lock+0x52a/0xd70
[  592.571706][   T30]  ? tun_chr_close+0x3b/0x1b0
[  592.592302][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  592.597424][   T30]  ? __pfx_call_rcu+0x10/0x10
[  592.612439][   T30]  tun_chr_close+0x3b/0x1b0
[  592.622793][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  592.627964][   T30]  __fput+0x241/0x880
[  592.632005][   T30]  task_work_run+0x251/0x310
[  592.646837][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  592.672335][   T30]  ? __pfx_task_work_run+0x10/0x10
[  592.677528][   T30]  ? do_exit+0xa2a/0x28e0
[  592.681886][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.702322][   T30]  ? kmem_cache_free+0x1a2/0x420
[  592.707339][   T30]  ? do_exit+0xa2a/0x28e0
[  592.711703][   T30]  do_exit+0xa2f/0x28e0
[  592.732231][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.737953][   T30]  ? __pfx_do_exit+0x10/0x10
[  592.752975][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  592.759093][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.773072][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.779125][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  592.803431][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  592.808628][   T30]  do_group_exit+0x207/0x2c0
[  592.832340][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  592.837617][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.852621][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  592.857891][   T30]  get_signal+0x176f/0x1810
[  592.872729][   T30]  ? __pfx_get_signal+0x10/0x10
[  592.877635][   T30]  ? call_rcu+0x731/0xa70
[  592.882008][   T30]  arch_do_signal_or_restart+0x96/0x860
[  592.907924][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  592.922607][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.928666][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  592.952303][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  592.957923][   T30]  do_syscall_64+0x100/0x230
[  592.972187][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.978138][   T30] RIP: 0033:0x7f8a95f7def9
[  592.993000][   T30] RSP: 002b:00007f8a96dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.001482][   T30] RAX: 000000000000003c RBX: 00007f8a96135f80 RCX: 00007f8a95f7def9
[  593.032383][   T30] RDX: 0000000000000000 RSI: 0000000020002340 RDI: 0000000000000003
[  593.040409][   T30] RBP: 00007f8a95ff0b76 R08: 0000000000000000 R09: 0000000000000000
[  593.065499][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.082204][   T30] R13: 0000000000000000 R14: 00007f8a96135f80 R15: 00007ffeeda2d378
[  593.090332][   T30]  </TASK>
[  593.122301][   T30] INFO: task syz-executor:17185 blocked for more than 147 seconds.
[  593.130879][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  593.153107][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  593.161830][   T30] task:syz-executor    state:D stack:24128 pid:17185 tgid:17185 ppid:1      flags:0x00004006
[  593.192485][   T30] Call Trace:
[  593.195836][   T30]  <TASK>
[  593.198801][   T30]  __schedule+0x1895/0x4b30
[  593.222216][   T30]  ? __pfx___schedule+0x10/0x10
[  593.227157][   T30]  ? __pfx_lock_release+0x10/0x10
[  593.243374][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  593.248917][   T30]  ? schedule+0x90/0x320
[  593.275099][   T30]  schedule+0x14b/0x320
[  593.279348][   T30]  schedule_preempt_disabled+0x13/0x30
[  593.285770][   T30]  __mutex_lock+0x6a7/0xd70
[  593.290417][   T30]  ? __mutex_lock+0x52a/0xd70
[  593.312943][   T30]  ? register_nexthop_notifier+0x84/0x290
[  593.318765][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  593.332804][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.338524][   T30]  ? __asan_memset+0x23/0x50
[  593.362250][   T30]  register_nexthop_notifier+0x84/0x290
[  593.367892][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  593.382111][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  593.388519][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  593.412504][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.418222][   T30]  ? __asan_memset+0x23/0x50
[  593.433097][   T30]  ops_init+0x320/0x590
[  593.442692][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  593.448133][   T30]  setup_net+0x287/0x9e0
[  593.466530][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  593.482172][   T30]  ? __pfx_setup_net+0x10/0x10
[  593.487010][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.502167][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.507874][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.532902][   T30]  copy_net_ns+0x33f/0x570
[  593.538050][   T30]  create_new_namespaces+0x425/0x7b0
[  593.552478][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  593.558358][   T30]  ksys_unshare+0x619/0xc10
[  593.582265][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  593.587389][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  593.602152][   T30]  ? do_syscall_64+0x100/0x230
[  593.607001][   T30]  __x64_sys_unshare+0x38/0x40
[  593.611817][   T30]  do_syscall_64+0xf3/0x230
[  593.632432][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.638403][   T30] RIP: 0033:0x7fe18197f6f7
[  593.653241][   T30] RSP: 002b:00007fff03577978 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  593.661730][   T30] RAX: ffffffffffffffda RBX: 00007fe181b35f40 RCX: 00007fe18197f6f7
[  593.692418][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  593.700544][   T30] RBP: 00007fe181b36a38 R08: 0000000000000000 R09: 0000000000000000
[  593.732956][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  593.741012][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  593.760909][   T30]  </TASK>
[  593.772872][   T30] INFO: task syz-executor:17215 blocked for more than 147 seconds.
[  593.793512][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  593.801020][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  593.832449][   T30] task:syz-executor    state:D stack:24128 pid:17215 tgid:17215 ppid:1      flags:0x00000004
[  593.852342][   T30] Call Trace:
[  593.855872][   T30]  <TASK>
[  593.858836][   T30]  __schedule+0x1895/0x4b30
[  593.874173][   T30]  ? __pfx___schedule+0x10/0x10
[  593.879125][   T30]  ? __pfx_lock_release+0x10/0x10
[  593.903428][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  593.909003][   T30]  ? schedule+0x90/0x320
[  593.922174][   T30]  schedule+0x14b/0x320
[  593.926409][   T30]  schedule_preempt_disabled+0x13/0x30
[  593.931905][   T30]  __mutex_lock+0x6a7/0xd70
[  593.952329][   T30]  ? __mutex_lock+0x52a/0xd70
[  593.957102][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  593.975537][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  593.980717][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  594.002273][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  594.007482][   T30]  ? __lock_acquire+0x1384/0x2050
[  594.022217][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.027777][   T30]  netlink_rcv_skb+0x1e5/0x430
[  594.048837][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.062287][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  594.067821][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.082877][   T30]  netlink_unicast+0x7f8/0x990
[  594.087719][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  594.112341][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.118056][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.134911][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.140620][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.162479][   T30]  ? __check_object_size+0x48e/0x900
[  594.167870][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  594.182226][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.187590][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.212775][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  594.217983][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.233515][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.238870][   T30]  __sock_sendmsg+0x223/0x270
[  594.253625][   T30]  __sys_sendto+0x398/0x4f0
[  594.258199][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  594.282328][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.288038][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  594.313095][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  594.319513][   T30]  ? exc_page_fault+0x590/0x8c0
[  594.332271][   T30]  __x64_sys_sendto+0xde/0x100
[  594.337107][   T30]  do_syscall_64+0xf3/0x230
[  594.341654][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.374027][   T30] RIP: 0033:0x7fb1e9f7fd8c
[  594.378536][   T30] RSP: 002b:00007ffeda0aca00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  594.402158][   T30] RAX: ffffffffffffffda RBX: 00007fb1eac64620 RCX: 00007fb1e9f7fd8c
[  594.410192][   T30] RDX: 0000000000000028 RSI: 00007fb1eac64670 RDI: 0000000000000003
[  594.433071][   T30] RBP: 0000000000000000 R08: 00007ffeda0aca54 R09: 000000000000000c
[  594.441097][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  594.472452][   T30] R13: 0000000000000000 R14: 00007fb1eac64670 R15: 0000000000000000
[  594.480511][   T30]  </TASK>
[  594.502291][   T30] INFO: task syz-executor:17218 blocked for more than 148 seconds.
[  594.510244][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  594.542228][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  594.550993][   T30] task:syz-executor    state:D stack:24128 pid:17218 tgid:17218 ppid:1      flags:0x00000004
[  594.582358][   T30] Call Trace:
[  594.585710][   T30]  <TASK>
[  594.588672][   T30]  __schedule+0x1895/0x4b30
[  594.612618][   T30]  ? __pfx___schedule+0x10/0x10
[  594.617651][   T30]  ? __pfx_lock_release+0x10/0x10
[  594.632830][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  594.638374][   T30]  ? schedule+0x90/0x320
[  594.653048][   T30]  schedule+0x14b/0x320
[  594.657261][   T30]  schedule_preempt_disabled+0x13/0x30
[  594.672354][   T30]  __mutex_lock+0x6a7/0xd70
[  594.676920][   T30]  ? __mutex_lock+0x52a/0xd70
[  594.681726][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  594.712372][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  594.717497][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  594.732318][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  594.737526][   T30]  ? __lock_acquire+0x1384/0x2050
[  594.753063][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.758591][   T30]  netlink_rcv_skb+0x1e5/0x430
[  594.782185][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.787706][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  594.800220][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.812341][   T30]  netlink_unicast+0x7f8/0x990
[  594.817160][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  594.833467][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.839168][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.862931][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.869173][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.882125][   T30]  ? __check_object_size+0x48e/0x900
[  594.887465][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  594.903781][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.909126][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.932693][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  594.937693][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  594.952984][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.958325][   T30]  __sock_sendmsg+0x223/0x270
[  594.982215][   T30]  __sys_sendto+0x398/0x4f0
[  594.986798][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  594.991938][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.014094][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  595.020170][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  595.042250][   T30]  ? exc_page_fault+0x590/0x8c0
[  595.047437][   T30]  __x64_sys_sendto+0xde/0x100
[  595.062183][   T30]  do_syscall_64+0xf3/0x230
[  595.066754][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.092655][   T30] RIP: 0033:0x7f39b197fd8c
[  595.097186][   T30] RSP: 002b:00007ffcb58fc8c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  595.122150][   T30] RAX: ffffffffffffffda RBX: 00007f39b2664620 RCX: 00007f39b197fd8c
[  595.130178][   T30] RDX: 0000000000000028 RSI: 00007f39b2664670 RDI: 0000000000000003
[  595.152514][   T30] RBP: 0000000000000000 R08: 00007ffcb58fc914 R09: 000000000000000c
[  595.160583][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  595.193165][   T30] R13: 0000000000000000 R14: 00007f39b2664670 R15: 0000000000000000
[  595.201236][   T30]  </TASK>
[  595.212453][   T30] 
[  595.212453][   T30] Showing all locks held in the system:
[  595.232322][   T30] 3 locks held by kworker/u8:0/11:
[  595.237491][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  595.277758][   T30]  #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  595.302923][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  595.312013][   T30] 1 lock held by khungtaskd/30:
[  595.327058][   T30]  #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  595.361686][   T30] 3 locks held by kworker/u8:5/289:
[  595.372416][   T30]  #0: ffff88814b96e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  595.402716][   T30]  #1: ffffc90002f7fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  595.432341][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  595.452332][   T30] 2 locks held by getty/4969:
[  595.457138][   T30]  #0: ffff88802e88b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  595.482551][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  595.512908][   T30] 3 locks held by kworker/1:5/5284:
[  595.518163][   T30] 4 locks held by kworker/1:6/5285:
[  595.532305][   T30] 3 locks held by kworker/1:7/5303:
[  595.537600][   T30]  #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  595.572466][   T30]  #1: ffffc90003be7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  595.592318][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  595.601999][   T30] 1 lock held by syz.0.4678/16809:
[  595.612964][   T30]  #0: ffff88814cac20e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x27c/0x400
[  595.642203][   T30] 7 locks held by syz-executor/16967:
[  595.647635][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  595.672334][   T30]  #1: ffff888049091888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  595.693416][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  595.712378][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  595.735610][   T30]  #4: ffff88805f72f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  595.762200][   T30]  #5: ffff88805f790250 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  595.782142][   T30]  #6: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  595.803349][   T30] 1 lock held by syz.5.4770/17046:
[  595.808586][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  595.841796][   T30] 1 lock held by syz.1.4780/17067:
[  595.847665][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  595.872529][   T30] 1 lock held by syz.4.4816/17164:
[  595.877688][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  595.902939][   T30] 1 lock held by syz.3.4824/17183:
[  595.908097][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  595.942162][   T30] 2 locks held by syz-executor/17185:
[  595.947593][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  595.972605][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  595.992356][   T30] 4 locks held by syz-executor/17190:
[  596.002628][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.011629][   T30]  #1: ffff88807df90c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.052508][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.073015][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.092746][   T30] 1 lock held by syz-executor/17215:
[  596.112370][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  596.121890][   T30] 1 lock held by syz-executor/17218:
[  596.143380][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  596.162223][   T30] 2 locks held by syz.2.4842/17246:
[  596.167538][   T30]  #0: ffff88807b5706c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790
[  596.199235][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200
[  596.222238][   T30] 4 locks held by syz-executor/17249:
[  596.227687][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.253385][   T30]  #1: ffff88802c523c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.272289][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.294295][T17296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  596.307170][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.332375][   T30] 4 locks held by syz-executor/17258:
[  596.337820][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.363371][   T30]  #1: ffff88804985e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.382188][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.412376][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.432316][   T30] 4 locks held by syz-executor/17273:
[  596.437741][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.462285][   T30]  #1: ffff88805331fc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.482190][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.506422][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.532905][   T30] 1 lock held by syz-executor/17282:
[  596.538248][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  596.562256][   T30] 4 locks held by syz-executor/17285:
[  596.567678][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.602272][   T30]  #1: ffff8880416cdc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.622964][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.642682][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.672373][   T30] 1 lock held by syz-executor/17294:
[  596.677723][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  596.702287][   T30] 4 locks held by syz-executor/17298:
[  596.707703][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.733014][   T30]  #1: ffff888069bcf488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.765753][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.782219][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.812355][   T30] 4 locks held by syz-executor/17307:
[  596.823661][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.842981][   T30]  #1: ffff88807c85ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.862930][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.892296][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  596.913446][   T30] 4 locks held by syz-executor/17316:
[  596.919505][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  596.942324][   T30]  #1: ffff88803f5d0c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  596.972843][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  596.992277][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  597.012657][   T30] 1 lock held by syz-executor/17325:
[  597.025915][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  597.052256][   T30] 4 locks held by syz-executor/17329:
[  597.057698][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  597.082831][   T30]  #1: ffff888052f44c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  597.102347][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  597.122268][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  597.152379][   T30] 1 lock held by syz-executor/17338:
[  597.158526][   T30]  #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  597.182274][   T30] 4 locks held by syz-executor/17342:
[  597.187714][   T30]  #0: ffff8880326de420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  597.212472][   T30]  #1: ffff88803ee78488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  597.232285][   T30]  #2: ffff8880277e4c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  597.262817][   T30]  #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  597.283884][   T30] 
[  597.286250][   T30] =============================================
[  597.286250][   T30] 
[  597.312311][   T30] NMI backtrace for cpu 0
[  597.316780][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  597.327048][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  597.337216][   T30] Call Trace:
[  597.340515][   T30]  <TASK>
[  597.343463][   T30]  dump_stack_lvl+0x241/0x360
[  597.348186][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  597.353421][   T30]  ? __pfx__printk+0x10/0x10
[  597.358058][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  597.363043][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  597.368543][   T30]  ? _printk+0xd5/0x120
[  597.372731][   T30]  ? __pfx__printk+0x10/0x10
[  597.377354][   T30]  ? __wake_up_klogd+0xcc/0x110
[  597.382241][   T30]  ? __pfx__printk+0x10/0x10
[  597.386874][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.392546][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  597.397612][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  597.403631][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  597.409659][   T30]  watchdog+0xff4/0x1040
[  597.413939][   T30]  ? watchdog+0x1ea/0x1040
[  597.418399][   T30]  ? __pfx_watchdog+0x10/0x10
[  597.423111][   T30]  kthread+0x2f2/0x390
[  597.427384][   T30]  ? __pfx_watchdog+0x10/0x10
[  597.432098][   T30]  ? __pfx_kthread+0x10/0x10
[  597.436715][   T30]  ret_from_fork+0x4d/0x80
[  597.441172][   T30]  ? __pfx_kthread+0x10/0x10
[  597.445787][   T30]  ret_from_fork_asm+0x1a/0x30
[  597.450606][   T30]  </TASK>
[  597.455213][   T30] Sending NMI from CPU 0 to CPUs 1:
[  597.460455][    C1] NMI backtrace for cpu 1
[  597.460471][    C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:6 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  597.460499][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  597.460515][    C1] Workqueue: events_power_efficient neigh_periodic_work
[  597.460558][    C1] RIP: 0010:_raw_spin_lock_irqsave+0xe9/0x120
[  597.460589][    C1] Code: f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 e8 9b 8d a4 f5 48 83 c4 08 4c 89 f7 e8 9f f2 a5 f5 48 c7 04 24 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40
[  597.460609][    C1] RSP: 0018:ffffc90000a17e60 EFLAGS: 00000046
[  597.460628][    C1] RAX: ecda37f4eb00f000 RBX: 1ffff92000142fd0 RCX: 0000000000000001
[  597.460646][    C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000a17de0
[  597.460663][    C1] RBP: ffffc90000a17ef0 R08: 0000000000000003 R09: fffff52000142fbc
[  597.460680][    C1] R10: dffffc0000000000 R11: fffff52000142fbc R12: 0000000000000246
[  597.460698][    C1] R13: 1ffff92000142fcc R14: ffffffff9a5b0088 R15: dffffc0000000000
[  597.460720][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  597.460740][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  597.460757][    C1] CR2: 00007f8a961052d8 CR3: 000000000e734000 CR4: 0000000000350ef0
[  597.460776][    C1] Call Trace:
[  597.460785][    C1]  <NMI>
[  597.460795][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  597.460832][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  597.460870][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  597.460906][    C1]  ? nmi_handle+0x2a/0x5a0
[  597.460940][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  597.460972][    C1]  ? nmi_handle+0x151/0x5a0
[  597.460996][    C1]  ? nmi_handle+0x2a/0x5a0
[  597.461020][    C1]  ? _raw_spin_lock_irqsave+0xe9/0x120
[  597.461051][    C1]  ? default_do_nmi+0x63/0x160
[  597.461089][    C1]  ? exc_nmi+0x123/0x1f0
[  597.461125][    C1]  ? end_repeat_nmi+0xf/0x53
[  597.461161][    C1]  ? _raw_spin_lock_irqsave+0xe9/0x120
[  597.461187][    C1]  ? _raw_spin_lock_irqsave+0xe9/0x120
[  597.461214][    C1]  ? _raw_spin_lock_irqsave+0xe9/0x120
[  597.461240][    C1]  </NMI>
[  597.461248][    C1]  <IRQ>
[  597.461258][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  597.461287][    C1]  ? skb_release_data+0x6a0/0x8a0
[  597.461323][    C1]  debug_check_no_obj_freed+0x234/0x580
[  597.461361][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.461392][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  597.461431][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  597.461468][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.461499][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  597.461526][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.461560][    C1]  ? skb_release_data+0x6a0/0x8a0
[  597.461592][    C1]  ? skb_release_data+0x6a0/0x8a0
[  597.461626][    C1]  kfree+0x11f/0x440
[  597.461652][    C1]  ? rcuref_put+0x1e3/0x240
[  597.461685][    C1]  skb_release_data+0x6a0/0x8a0
[  597.461724][    C1]  consume_skb+0x9f/0xf0
[  597.461755][    C1]  nft_synproxy_eval_v4+0x3d2/0x610
[  597.461787][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  597.461814][    C1]  ? NF_HOOK+0x29e/0x450
[  597.461848][    C1]  ? nf_ip_checksum+0x13a/0x500
[  597.461880][    C1]  nft_synproxy_do_eval+0x362/0xa60
[  597.461911][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  597.461940][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.461971][    C1]  ? __lock_acquire+0x1384/0x2050
[  597.462007][    C1]  ? __pfx_validate_chain+0x10/0x10
[  597.462043][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462081][    C1]  nft_do_chain+0x4af/0x1da0
[  597.462110][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462152][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  597.462179][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  597.462217][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462268][    C1]  nft_do_chain_inet+0x418/0x6b0
[  597.462298][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  597.462325][    C1]  ? ipt_do_table+0x312/0x1860
[  597.462363][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  597.462389][    C1]  nf_hook_slow+0xc5/0x220
[  597.462412][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  597.462447][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  597.462483][    C1]  NF_HOOK+0x29e/0x450
[  597.462514][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462548][    C1]  ? NF_HOOK+0x9a/0x450
[  597.462580][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  597.462615][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  597.462654][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462685][    C1]  ? ip_rcv_finish+0x406/0x560
[  597.462720][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  597.462754][    C1]  NF_HOOK+0x3a6/0x450
[  597.462786][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.462816][    C1]  ? __lock_acquire+0x1384/0x2050
[  597.462852][    C1]  ? NF_HOOK+0x9a/0x450
[  597.462885][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  597.462917][    C1]  ? ip_rcv_core+0x801/0xd10
[  597.462951][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  597.462991][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  597.463030][    C1]  __netif_receive_skb+0x2bf/0x650
[  597.463070][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  597.463105][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  597.463140][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  597.463176][    C1]  ? __pfx_lock_release+0x10/0x10
[  597.463212][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  597.463245][    C1]  process_backlog+0x662/0x15b0
[  597.463268][    C1]  ? raise_softirq+0x108/0x1b0
[  597.463302][    C1]  ? process_backlog+0x33b/0x15b0
[  597.463330][    C1]  ? __pfx_process_backlog+0x10/0x10
[  597.463354][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  597.463390][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  597.463425][    C1]  ? invoke_rcu_core+0xbc/0x260
[  597.463455][    C1]  __napi_poll+0xcd/0x490
[  597.463494][    C1]  net_rx_action+0x89b/0x1240
[  597.463531][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  597.463555][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.463586][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  597.463633][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  597.463676][    C1]  handle_softirqs+0x2c7/0x980
[  597.463711][    C1]  ? do_softirq+0x11b/0x1e0
[  597.463743][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  597.463778][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.463812][    C1]  do_softirq+0x11b/0x1e0
[  597.463841][    C1]  </IRQ>
[  597.463850][    C1]  <TASK>
[  597.463859][    C1]  ? __pfx_do_softirq+0x10/0x10
[  597.463890][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  597.463928][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.463958][    C1]  ? rcu_is_watching+0x15/0xb0
[  597.463985][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  597.464017][    C1]  ? neigh_periodic_work+0xb35/0xd50
[  597.464059][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  597.464090][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.464121][    C1]  ? neigh_destroy+0x423/0x580
[  597.464156][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.464191][    C1]  neigh_periodic_work+0xb35/0xd50
[  597.464234][    C1]  ? process_scheduled_works+0x976/0x1850
[  597.464268][    C1]  process_scheduled_works+0xa65/0x1850
[  597.464318][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  597.464357][    C1]  ? assign_work+0x364/0x3d0
[  597.464391][    C1]  worker_thread+0x870/0xd30
[  597.464427][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.464460][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  597.464493][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  597.464523][    C1]  ? __kthread_parkme+0x169/0x1d0
[  597.464563][    C1]  ? __pfx_worker_thread+0x10/0x10
[  597.464598][    C1]  kthread+0x2f2/0x390
[  597.464621][    C1]  ? __pfx_worker_thread+0x10/0x10
[  597.464656][    C1]  ? __pfx_kthread+0x10/0x10
[  597.464679][    C1]  ret_from_fork+0x4d/0x80
[  597.464715][    C1]  ? __pfx_kthread+0x10/0x10
[  597.464738][    C1]  ret_from_fork_asm+0x1a/0x30
[  597.464786][    C1]  </TASK>
[  598.332339][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  598.339266][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  598.349451][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  598.359525][   T30] Call Trace:
[  598.362994][   T30]  <TASK>
[  598.365943][   T30]  dump_stack_lvl+0x241/0x360
[  598.370662][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  598.375897][   T30]  ? __pfx__printk+0x10/0x10
[  598.380534][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  598.386565][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  598.392234][   T30]  ? vscnprintf+0x5d/0x90
[  598.396612][   T30]  panic+0x349/0x880
[  598.400539][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  598.406211][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  598.412411][   T30]  ? __pfx_panic+0x10/0x10
[  598.416941][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  598.422513][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  598.428180][   T30]  ? __irq_work_queue_local+0x137/0x410
[  598.433761][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  598.439426][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  598.444826][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  598.451022][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  598.457218][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  598.462887][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  598.469294][   T30]  watchdog+0x1033/0x1040
[  598.473685][   T30]  ? watchdog+0x1ea/0x1040
[  598.478148][   T30]  ? __pfx_watchdog+0x10/0x10
[  598.482867][   T30]  kthread+0x2f2/0x390
[  598.486964][   T30]  ? __pfx_watchdog+0x10/0x10
[  598.492030][   T30]  ? __pfx_kthread+0x10/0x10
[  598.496650][   T30]  ret_from_fork+0x4d/0x80
[  598.501105][   T30]  ? __pfx_kthread+0x10/0x10
[  598.505722][   T30]  ret_from_fork_asm+0x1a/0x30
[  598.510539][   T30]  </TASK>
[  598.513697][   T30] Kernel Offset: disabled
[  598.518196][   T30] Rebooting in 86400 seconds..