last executing test programs:

5.173441465s ago: executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setregid(0x0, 0x0)

4.994733777s ago: executing program 4:
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
unshare(0x20000400)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6}]})
syz_open_dev$usbfs(0x0, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
write$P9_RRENAME(r0, &(0x7f0000000080)={0x7}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

4.014884929s ago: executing program 3:
poll(0x0, 0x0, 0xffffffc1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
poll(0x0, 0x0, 0x64)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x6}, 0x69ff9a93bfc25838)
write$P9_RLERRORu(r1, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
close(r1)
rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8)
rt_sigreturn()
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)

3.988099905s ago: executing program 4:
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
uname(0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, 0x0, 0xfdef)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r5=>0x0, 0x80, 0x700, 0x6a84, 0x80, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xc7, 0x3, 0x1, [{@local, 0x7fff}, {@empty, 0xfff}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x2}, {@loopback}]}, @ssrr={0x89, 0x7, 0xea, [@loopback]}]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)={0x15c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x89c}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x49}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, 0x6a4, &(0x7f0000001980)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

3.817435034s ago: executing program 2:
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r0, &(0x7f0000000500)=[{0x0}], 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)

2.7303483s ago: executing program 3:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})

2.729804914s ago: executing program 0:
r0 = eventfd(0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x25, 0x0, 0x0)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
r4 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
r5 = dup3(r4, r0, 0x0)
rt_sigreturn()
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10)
r6 = msgget$private(0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
msgrcv(r6, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)

2.622553189s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x9, 0x4)
listen(0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

2.59607032s ago: executing program 2:
syz_emit_vhci(0x0, 0x11)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.453241141s ago: executing program 3:
r0 = inotify_init1(0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x5452, &(0x7f0000000140)={@id={0x2, 0x0, @a}})

2.368832665s ago: executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0)

2.333014273s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380))
ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x300})

2.300241587s ago: executing program 2:
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x82, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0)
accept4$unix(r2, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000c00)={0x601, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0xfffffff8, 0x0, 0x8], 0x0, &(0x7f0000000bc0)=[0xe6, 0xffffffff]})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x1008040, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")

2.258487231s ago: executing program 3:
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
unshare(0x20000400)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6}]})
syz_open_dev$usbfs(0x0, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
write$P9_RRENAME(r0, &(0x7f0000000080)={0x7}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2.182839908s ago: executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"})
r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x10dc, 0x0, 0x0, 0x0, 0x17)
write(r0, &(0x7f00000001c0)='u', 0x1)
r3 = syz_open_pts(r0, 0x0)
r4 = dup(r3)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cd3165308dad42c22d6f78e986730fcfe6cf9a"})
read$FUSE(r4, &(0x7f00000038c0)={0x2020}, 0x2020)

2.092246815s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setregid(0x0, 0x0)

1.983175442s ago: executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}})

1.293712188s ago: executing program 3:
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file1\x00', 0x10, &(0x7f0000006100)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x1, 0x5d5e, &(0x7f0000000000)="$eJzs3X2QHOWZGPDumVntSquPlSybFRJiMbIdccEWKBDLd442ztmxHdnIwgIsTicJWGEdQhL6QCBdwlcOCCYpVUEdBOKUDihylbpKcOkSwp1SJWPAV74qCpn4D458HRWcP+IjqrPEEcnlTe1u9+5Mb7/Ts9OzQuDfr0o78/Y+87zv0/NOd7+j3dkIAACAXwmv/N6ed79+/hd/dO/Qqbu+/Ce33hP1Vke396QBfcntHe/XCJlOy398puGZ7a71j95m58V5f7rw3b771nztoVVf+vHmP5s/uHTZ0JXfO3LV/fe9+PlfvPjYE2uK+knn0yUT7fiv4iha+vaRx+5/+c/PG9kWj/Qf990dzZ8fL/j+/DiTYsXpKIpuGh9n4zePnFq5deT2nu90N2yfl0livv9q60nm2cFNNzx17JbBl48M7Fr5s5NX7Lx7IiTuqZtPUTR3c/3ju6Iompn8G5HOtv70wcnt2iiKZtU97rMF47q4xfFfGmgvSW5nJLe9BXnS71+UaddaHEctc9vd4uPaVZnm/FnZ/Zc9GE2XtM65ye3zye0lU8xTTf/FUSWOauPD3x5PzJGo7nmLo3h0bveMtyuj7Wi8HWXbcaZdybSrXZm6RvtNdmw1jhu3p3GZ7enhuJZsv6j+WJ1jXWD7ouS2J3mhvpe2o+ydMb2T7kzUEdWN68TZmhgBlcBrL90+PrzkyehNtvXGCyY9ZjhH+r0TP9yy4Z03DjzfFxhH/Fyc5I/byj849OSxZ687uqg/lH9zJclfaSv/K9VXTz9zsn92MP+hNH+1rfzrf/nTB++9ev/C4P45ke6fWlv5lz08++Cp/eu6B0L5D6f5e9rKf+XGpasuOLnv9uD4V6T7Z2Zb+X/yyPIzGw+9cDSYP0rzz2or/5tPPr2kuujR48H8x9L909tW/mtWPr76q4vveyK4/19L889pK/+G4/dv3vXUS8uD83Ntun/62sp/evXrb53pW/N06NgZHz7bZ1iAD5ePJNdYDybtdteZZdWtFx4fqI1d881O/s3pZEcZcd3aBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa9ejq/3BbffsT/+f29cf/49JttaTdXYuiOIqid6pj7XT7jCiKZ0ZRtGfvlt17t+24eeB3du7bvWPL9oEteweGduzdfefA3/nbA7uHdm3fcufId1dcunLscQtGs0XRgviCSWMZHh4ejqJooH5b2t8ffOW5/7f+ib/+VhSt+OjrS2vBej7zX9/64sKcrxnx4PDaf3XFIwdm/K95Yxv6knH1hcbV17gtHUHv4Gt/8YXn3xgZ18eajeuxV6/9vw0DGt0wkSdR6Y4qo3e641m54xgf9cR4RvdXbeu27UMrivdvHNi/n3rpj0/++zvW//Ox/dsTrKPF/TuyV2vDD/383k/d/YWhz53Dz3vR/q4rYXR86f7rSfb33KSuuYG6KoG6bh9488S/+Hf/+Zm7oxW1n184ue+iurqSCdAVL2qp37SHWfH8htieJD59xtPHfWbvrbs+s+fOA5duu3XLzUM3D+1YufKKVZetvOzyVSs/M1r62NeO1Z/2/6kW65+dZJodL87db9mtab8Xjn6tRsmw05u6O426ot6x28x+TsOzVfcm3+uNF0zKNZwj/d6JH27Z8M4bB54PvfLi58Z6nBnNGbuNlwQit2ceWB0fcF7/Z+d1ufP3e7anX1t7XRaNq2hejYyreF7Vj6jJcezVix/8+VMP/MvrWzhe1IWOji8d56yRl8tlUd3rdvK+yqurhednMG8/3Hjp7j++c9uGQ0XH8/pnpv5rRjw4/D+XxF/bt+cvdo9tOCvny/oBtXm+HB/1xHhG91dP8nycq/u3O6omdfXmjmtd/NTnP3Xr0V8bH9+MGdEdW/bu3X3Z2NcPal1/OWPewm33LL5gUl2Xj30tOu5fmGkXHvcr+fUVHfez/UzE5+cbyLR7o2pb54n1v/zpg/devX9h8DxxotXzxO82tKolzxOVwOv9ob/+7sC713/z3aL5dNWexXctzPmaLW9w+IU/+vXLPnft1V8a23BWjkP1A2rzODQ+6mQ86f4aPQ5dfu7U8f49zw0vxHhw+MLvffKaM6du+8bYhqL9Ox6dt39XFh/nq4G6ru/6+PxHfrb4452bv3s2/c3Fn541+xybvz3J/u0J7N/xUSfjqdbv30/fuHP7TWPtc/e6bUx3wfonPe/sufPALVu2bx/avae1ulo9n6b9ZPdyu+fT9OyxoKCu9PmaqGv67rSyv1p9vaXjvymTo93XG0Bq4rwwo2F79viZvu+3dG60/tMP/ODVeGDsfNmp91vTfs7PnJjbfb+1aJ308Uy7cZ1Ui+rqHjN5nTT6kKJ1UrafonXSxZl28TrmwdxKQs9fV3LmzXvfNDPe2kiG0PzoT/L3J+30enPpp6Mrqs9/4ivxYGvzo9Xr6bSfv5XZQe1eTxfNj2VR/rg6PT8+mXlQ8fN9KHdkPYHno+j5XtaQaHi47Lq8LzDqdF3eG8Vt5R8cevLYs9cdXRTMv7mS5K+0lf+V6qunnznZPzuY/1Cav9ZW/mUPzz54av+67mD+w+n+6Wkr/5Ubl6664OS+24P5V6Tjn9lW/p88svzMxkMvHA3mj9L8vW3lv2bl46u/uvi+J4L5X4uTfkZeu1F05NTKrWPtOOpK5n86jq6GcUXZdpxpVzLtan27MvZ/veMdVOO4cXsal9me1lFLtl9UN8Y86wPb01dtT/LCfi9tR9k7zbenh6d0XCcC55+zpVJ37ZG3vej9yU555+3+P6hvp///n86B7trYc3d5Zn8VnT+yR+80X/B92MBbGEXXC5P//21WW6+/N598ekl10aPHg++rHmv1fdVdDa1ZBe+rlh1v8HhxLD2eljse9Yfyv5bmL3c+COZPzgdF8+wTmXbhPOvK769onmWvU3qjOW3VveH4/Zt3PfXS8uA8Wzv2gi+eZ482tOYUzrNy/y8dnGfPxR3ZH8H8aztzXROcZ8l1TdE8uyTTLj/PGq9Hv5bc3pGJ703eIZ5q3adXv/7Wmb41Twfn2eFW59kfNrT6CudZuevb4PM0fn073dfnH+zrz/ft+jD579zpuj5cF9g+1evD3kl3JuqIPojXh4HjDAA086OH7vzf9e10/Z+eu9P1/w8yjyu7rsz+PFSqU+vKYP7DnVmvBK9Tx9cr073emu7r7Oldb7mOD+Qffx95ut8Xmt51pXVI0o6yd8ZYhwAA8H646N989zfr2+n6f/zn3pLf/38pbWceb50byH/W1rnT/T6JdXRu/g79fEXx+2DT/T6V9wG8D1DM+wAAAB8Om7buHhras2vLjUObtu3Ytnd8e9foymnyz6n+3eR2bSZP0c9P58XPahL/jWD+xvF8NhAfUhv9mdcouuHGb1++6aah26daf6i/ovrz4pvVn11fhOpfFYgPKVt/qL+i+vPim9V/dTB/43g+F4gPKVt/qL+i+vPim9X/zWD+xvH8eiA+pGz9of6K6s+Lb1Z/9vfBQvX/RiA+pGz9of6K6s+Lb1b/NcH8jeP5fCA+pGz9of6K6s+Lb1b/tcH8jeP5e4H4kLL1h/orqj8vvln91wXzN45ndSA+pGz9of6K6s+Lb1b/t4L5G8czGIgPKVt/qL+i+vPim9W/IZi/cTx/PxAfUrb+UH9F9efFN6v/+mD+xvF8IRAfUrb+UH9F9efFN6v/t4L5G8fzDwLxIWXrD/VXVH9efLP6NwbzN47nNwPxIWXrD/VXVH9efLP6fzuYv3E8XwzEh5StP9RfUf158c3q3xTM3zieLwXiQ8rWH+qvqP68+Gb1bw7mbxzPPwzEh5StP9RfUf158c3q3xLM3zieLwfiQ8rWH+qvqP68+Gb13xDM3zierwTiQ8rWH+qvqP68+Gb13xjM3zierwbiQ8rWH+qvqP68+Gb1Zz/vMFT/PwrEh5StP9RfUf158c3qHwrmbxzPmkB8SNn6Q/0V1Z8X36z+rcH8+Z8bkI0PKVt/qL+i+vPim9V/czB/43i+HogPKVt/qL+i+vPim9X/7WD+xvFcFYgPKVt/qL+i+vPim9W/LZi/cTxrA/EhZesP9VdUf158s/p/J5i/cTzfCMSHlK0/1F9R/Xnxzeq/JZi/cTzrAvEhZesP9VdUf158s/q3B/M3jufqQHxI2fpD/RXVnxffrP5bg/kbx/PNQHxI2fpD/RXVnxffrP4dwfyN41kfiA8pW3+ov6L68+Kb1b8zmL9xPNcE4kPK1h/qr6j+vPhm9e8K5m8cz7WB+JCy9Yf6K6o/L75Z/bcF8zeO57pAfEjZ+kP9FdWfF9+s/t3B/I3j+VYgPqRs/aH+iurPi29W/55g/sbxbAjEh5StP9RfUf158c3q3xvM3zie6wPxIWXrD/VXVH9efLP69wXzN47ntwLxIWXrD/VXVH9efLP6bw/mbxzPxkB8SNn6Q/0V1Z8X36z+/cH8jeP57UB8SNn6Q/0V1Z8X36z+7OdAhurfFIgPGa9/7+6hoU37dt20Ze/Qph07bxras2n/7m179w4lF2plf68s/HtB7/MvstBUw+tjbJJs27FnaPfk4/fMpvO3fk5Eo7/2NHPsNv5YS/HZj71ud9acK/O9K6o13V/nZ9rzks+jnRf4PNpsfJp28eidyZ9Hm+22VvA5rkXHp2z/oeNT3CQ+7/gaOp4Vnf+mfPwrnN89TevPbu5OfrGvO/5oS/FRk7/v1tp8Lfd7p8H5+lpr8zX7uetF8zUbP9X52ltyvmb7D82nSpP4ZtdDrc7XDYH4VOvzMw7Wmzevpvp3BtO0U/o7g5kvk7Txtwxafz2U+z3y4OshGXTR6yH7e9xFr4ds/FRfDzNLvh6y/Re9HvLim62PW309XBuID2l9PpT73ILgfFjR2nzI/h2rovmQjZ/qfOgpOR+y/RfNh7z4Zu8XtjofvhmIb1Xr86Pc54oE58fm1uZH9u9JFM2PbPxU50dccn5k+y+aH3nxzf4/pdX58Y1AfKrh/Ll1z+iiftuW7dsOZH4Aoy85f77f58Ozcl7+m9/4y/fGviTjqEwaR9H1RJwZx/xkJPNDf/cwMO4b/8u/Xf+DXzzw3Sha8dHqkvC4J4Y88SUjHhxecNeyZ6/72PEvjIy/0nT845Hp3y0u+HvH2fi0ntr2nXv2/trWnft2tPoTV82ln4dSGW9P0+ehJBurLX6+Sej3Cab6+SZdk+6cm1r+fBOAD4l5h5+bU99OP/8vPR/1J8e+mckBMN3e+nV2uc/XC15nH2rtOnt5tt6C6+xsfFpvq9fZlZLX2dn+i66z8+Kb/dxeq9fZXw/ET1XjPBmZIKPzY2jT/p27638mbrr/bm3nxzu9f8e3/Pim93Mb29X6+Kf3cyGnf/zT+3eAp3/80/t3ntt11tZLyYdFFn1+ZNE6KvR76VNdR82YdOfcZB0FAOe+f7b77X9d307X/8kqdnz9/52kXe1w/9O9jprudeV0Xyd/8D9/f3rXQdYDTTo7B1gPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOT7w//+n75f3+6u9Y/evvJ7e979+vlf/NG9Q6fu+vKf3HrPeX+68N2++9Z87aFVX/rx5j+bP7h02dCV3zty1f33vfj5X7z42BNrCjvqG7u5JGn2RFH8V3EULX37yGP3v/zn541si0f6j/vujubPjxd8f36cybDidBRFN42Ps/GbR06t3Dpye893uhu2z8skydYV9VbT8TSMM7qjsCI+gHqSeXZw0w1PHbtl8OUjA7tW/uzkFTvvngiJe+rmUxTN3Vz/+K4oimYm/0aks60/fXByuzaKoll1j/tswbgubnH8lwbaS5LbGcltb0Ge9PsXZdq1FsdRy9x2t/i4dlWmOX9Wdv9lD0bTJa1zbnL7fHJ7yRTzVNN/cVSJo9r48LfHE3Mkqnve4igends94+3KaDsab0fZdpxpVzLtalemrtF+kx1bjePG7WlcZnt6OK4l2y+qP1bnWBfYvii57UleqO+l7Sh7Z0zvpDsTdUR14zpxtiZGQCXw2ku3jw8veTJ6k2298YJJjxnOkX7vxA+3bHjnjQPP9wXGET8XJ/njtvIPDj157Nnrji7qD+XfXEnyV9rK/0r11dPPnOyfHcx/KM1fbSv/+l/+9MF7r96/MLh/TqT7p9ZW/mUPzz54av+67oFQ/sNp/p628l+5cemqC07uuz04/hXp/pnZVv6fPLL8zMZDLxwN5o/S/LPayv/mk08vqS569Hgw/7F0//S2lf+alY+v/uri+54I7v/X0vxz2sq/4fj9m3c99dLy4Pxcm+6fvrbyn179+ltn+tY8HTp2xofP9hkW4MPlI8k11oNJu911Zll164XHB2pj13yzk39zOtlRRly3dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJCdw9V99e23jj501bf/x6b/VoujKA48ZjhH+r3qjMHBgTbGsezh2QdP7V/XnbZH+u5vIw8AAAAw2eI3H7itvp2uwytJO456ov5ofzwzWpz7+PQ9gsVpK27cnn0PYeZEZEfyVDqUp9qhPLUO5enqUJ4ZHcrT3aE8PQV5eqLW8sxsmqfS8nhmdShPb4fyzO5QnjkdyjO3Q3nmdShPX9M8rc/D+R3Ks6BDeT7SoTwLO5Tnox3K87EO5TmvQ3my7ylPdR7OSSLPD+UZvVMtzFOLq+PfyHs/Pe3ngpL99LbYT/Y9+6n2M7PFfi4u2U9Pi/18smQ/cYv9LM88rjLFfioF/aTz9o5QPWmrxfl/Z4fyHOhQnoMdyvO7HcrzjzuU5590KM9dJfMAhPz+i5f8UX07Xf+n68846ou6a5dHs5IjTvZdgHS9e+Ho18nnu9ABKc23JLO9qyhfdoGdyXfhVMeXfQMhk+/jTfPVJq1Xc/LV6vMt61A+AAAAmIp/evpgw3/NTV7/90fdtYXj69dPZB5fuF7P/kd2Is13SYfyAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m11xi5yvIB4O/ZmZ2Z/3LpQtoypbdN2z+FEHqhqRFUmDSRBCNsEVsuDVkrLGzD0kK3BVo1RTC22QSDFi/cPliQGEIEEpIGXRMMKPGDjQ1iuLgurAS+EEF6A4qOmd1zds/OzrDLKK3V3y/knHnOeZ73ec8hIXnOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/+f74/b89m44H+3rbuwY6+kMUKv/UVK4huZfJlUptDezjnefWXvnXl7buTuJK73y2gYUAAACAcR4/b8bp6TiZw5PROwqFkM8uDfkoN6auGH8HKMZxU+vwec6isDyz+/8vjEpNQ/HJ0Ulj6gpxXSGOM3Fdz5at16/t7u7c+An+qPSpfo7q/UQhDH2+mHNiWLVo+zN7orbh52iZ4Dma4rrFm264cXHPlq1nrbth7XWd13WuX7Zs+TlLly09+5xli69d1925ZPgY8hOsF0IojX0vE/yLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI2Dbb3d/Kx0P9vW2dw109LdEIUR1aso1JPcyuVKprYF9vHLfg7MyM+7em8SV3vlsAwsBAAAA4/zq8Rnnp+NkDk9G7ygUQj6bC5kwYyieN5qaDaFcTq4vqLp+JPYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcWfsOtv85HQ/29bZ3DXT0HxeFENWpKdeQ3MvkSqW2BvaxetmPzv/CzDvuTeJK72ID6wAAAADjvXB68x3pOJnDm+I4CoVQDPNDczRjTF3ybeDUqvWq85J1Zk8yr/rbQb28+ZPMO22SeWdMkHdxfL41AAAAwLHnitbfrU7HyfzfHMdRaA35bDFk4niiOT75LjC3Ki+pn2i+T+rn1amfaO5P6qvnfgAAAPhfdtabT3yYjsfP/8WQzxZG5u+J/p5+UXz2d3IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ5fH7zwF+l4sK+3vWugoz8ThRDVqSnXkNzL5Eqltgb2seofb+y4/dJbpiZxpXc+28BCAAAAwDiP5j59SzpO5vBk9I5CIeSzLaE5HDc097+WmzJ13Tdnzg4hlIYScrlw69pNmzaePXxM8r4U7frcwhv6zhyXt3T4eOSfFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Fcte2TnmnQ82Nfb3jXQ0f9/UQhRnZpyDcm9TK5UamtgHy/sPOPwVXc91ZfEld7FBtYBAAAAxpvV/fRf0nEyhyezfxQKoRhyIRemD8XpWb+iqWq9et8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8ePVu2Xr+2u7tzox9++OHHyI+j/V8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaPn5+u+9nY4H+3rbuwY6+gtRCFGdmnINyb1MrlRqa2Afn7pqzjmz92++OYkrvYsNrAMAAACMt+atzfvTcTKHJ7N/FAqhGJpDc5gWx+MNzf+tR2K3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0TQ3RKH8MZ2y8mjvGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgkHHhx1X3peLCvt71roKP/hCiEqE5NuYbkXiZXKrU1sI8r9377KzfuevaMJK70zmcbWAgAAAAYp/nNF7+ajpM5PBm9o1AI+eyskA+z4ivdYxeIMklize8Co3VfH1OWmXTdjqodD++sEH+HKIzsMwx9dhitu+sj64rx1abWyb0nAAAAOJZN23HxN9JxMv83x3EUWkM+Oy01V984pr5l0nP83WPqTph03U/H1LVOUPdveCUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIPuXPncKel4sK+3vWugoz+KQojq1JRrSO5lcqVSWwP7KHXe9/TDl/fNSOJK72ID6wAAAADjXfpG4bvpOJnDk9k/CoVQDLPDiWH20NwfWsfWJ3nHlX7/8ordL10RwpLpz8/J1u33wz2XvR0Offa194YPQ2EITWOTmkKYEveL6vS7+g+PrHrmw+0PhLBkWmZW/X6jrUYPVaJS+eRtCx6+fPreFXWXAQAAgGNa4cEDP0nHyfyfTNRRaA357Pq683+S97Hm//aemdumxsf4C0BVRVNr3K+pTr/edx9oO7jmywcr8//zcwoj/6/A6fPH5qdbpY9V3xyiUnnuE6etPnzgpkuGLyT9M3X6r2med9LOt2bOS/oX4uvXhMn2D1X9ezoOzV/UcvwFY/uHENpq9f/xhY+/v+red68Y7l//fS/+0+Dnp4YNPyh0J8fhK+P7r7x/+c6tudenjO0f1em/8Nkn9z9266o7q5//1Gyt/uOPVSpds+XefbcvvG1F57mp/k11+t/c9so73/nZLx+q9N83t2Wk/8KPeP4J+++Zv2Pfru33rBn7/ku1+l991sYnt6y78q7q52+pWjj95tPH8e//1VnRRZt7Xt5YfQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODY1vHYB4fS8WBfb3vXQEd/UxRCVKemXENyL5Mrldoa2MdvMns+eGh/8fgkrvQuNrAOAAAAMN4lK169Lh0nc3gy+0ehEIohF3KhZWjuP3nbgocvn753RWiN78fnbPeGnk1nXrth8/prjvQjAAAAABPYdd77K9JxMv9n4zgKrSGfXRCa4/l/5f3Ld27NvT4lmf9DCEN/7s9eu667c0kY+U7Q03Fo/qKW4y9I8jLxuVDJW3T1hu74M0Gy7lOPfmbpuZddOpLflM4/ezRv7hOnrT584KZLauYtG817dVZ00eaelzem9lkayVs6mte77/aFt63oPDd5jig+F+LnSfL2zN+xb9f2e9YkeU3xuSVeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI4aT3/v61dDzY19veNdDRHzIhRHVqyjUk9zK5UqmtgX18cP7zg4dbv/hgEld657MNLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzXT2gcVRwH8Pd2t2bbTeumFppoDSn20oJQCBZ7kObiHyRqqShaKEYxXlQsiFbswbbBUNRDQaGlvZRWPCs5FLWHWGwVBbGKB/GkoCeVHJIiqagkmbfZTDskjraU8vnA8Pb3Zuc7b96+nd0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBr2uM/3ltrrztq3bPtuddfvPDgzXd/cWB46rX7Pnp+/9qP11xojgw+8MbWe74Z+rxroHfD8JYPxh4aHTlz159nDh8dXPREr8w1m7KyHkL8LYbQ+/PY4dGzX66d6Ysz54/NfaGrK67+pCvmEjZPhxCebo1z4c6xqf5nZtr9b3Ys6L8xF5K/rtCopvHMaS4cL9eXerbO9j7x1InxZwfOjvXt7v918o4X9s2/Jdbb1lMIq4baj18WQliebTPSautOB2ft9hDCirbj7lxkXLctcfy3F9TrsvaGrG0skpP2r8/VtSWOo5ZrO5Z4XFmVK5yfl5+//M3oSknXuSprT2Xtpn+ZU01bDJUYaq3hPxfn10ho+9xiiLNru96qK7N1aNUhX8dcXcnV1WW565o9bzax1RgX9qf35frT7biW9a9vv1dfxo6C/p6srWdf1D9SHfIv5jQueTF/HaFtXBNXa2EUqBR891J/a3jZh9HI+hpx9SXH/H0Zad/EZ0/u/P37V081C8YR349ZfiyVPzB8bPy9x073dBflD1Wy/Eqp/HPVr6bfnezuLMw/lPKrpfIf+euXgwce3rOmcH4m0vzUSuVveKtz79SeHR19RfnHU369VP6WXb1bb5186eXC8W9O87O8VP53b2+8uOvQh6cL80PKX1Eq/4djJ9dVe945X5g/nuanUSr/0f4j2+6/ZeRo4fx/nfJXlsrfeX50aPeJTzcWrs/taX6apfKnt33708Xm4Mmie2c8frV/YQGuLzdl/7EOZnXZ58z/qu154Uhfbe4/X2e2rfw/T5QT255dAAAAAAD+YQeOBQAAAACE+Vt3ZbEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAoAAP//pgBmrg==")
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000005e80)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0xfd, 0x5}, &(0x7f0000005e00)=0x98)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000), 0xffe000)
socket$igmp(0x2, 0x3, 0x2)
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0)
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)})
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @private=0xa010101}})
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000005f40)="da35bc722c5ac8f9ef06198696b2dac6008e7975f45145a9702b89136684249af51c56687a86fd74a276c57572729448d45ace64ded64200d82197ce6747c3b8c366a8caf9ac88ed1d32227ef3aea1b34a706399c0e57a5b397d453fd65ac89248c3268884b03cab31a3eacc049d40b3c2aee182fa0bc61a573951beb62de7c6acaa64170a8f14d3754b5e073e4d033c6daaca452b382a924cd7916593a7bd120d36a51826791451847df75c0e05789d4d9f9722c211", 0xb6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c2100", @ANYBLOB], 0x448}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)

1.072214293s ago: executing program 1:
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r0, &(0x7f0000000500)=[{0x0}], 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)

1.028104453s ago: executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x1066, 0x0, 0x0, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvfrom$inet6(r5, 0x0, 0x1000000, 0x0, 0x0, 0x0)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/80, 0x50}], 0x1}, 0x0)
r6 = dup(r0)
ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000080))

986.959692ms ago: executing program 0:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})

830.568915ms ago: executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f000055e000/0x4000)=nil, 0x4000, 0x0, 0x13012, r0, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61"}, 0x28)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="038b769722bb35c5819224ba6891172da9bf26ead5ee3bff1de2fc89a566b54f60ed89"], 0x28)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000003b010000a98504ccb2665d5521aa677df019512ab9fa2b910cdbe58c62746f25c06b941813d7cb2a15b771584a679f9303e301969ec8863b21c4265ab9a85bc7b02df62c4d6a9a619cb278fca3b5739eb7f88bd40591ad35bfede060712addad53402b31b8c4c35a08000000000000001a54a8f204192a5294a3f940964d8ed231c89c23ad048f416d77e93c6d08181af61b6ff94e2267a2a410e8682710bc60a76034fc425e546fd175798e7c866bf0c4fc9b9b47c5d5f3499007caa2ce9c03523a81c58195567c230439e0f3b05e5cb7e9"], &(0x7f00000000c0)=0x5f)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x1, r3, 0x3f})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r5, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r6=>0xffffffffffffffff})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x5, <r8=>r6})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000100)=0x1)

772.3319ms ago: executing program 2:
syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x11)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

711.680211ms ago: executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

669.44181ms ago: executing program 0:
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
uname(0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, 0x0, 0xfdef)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r5=>0x0, 0x80, 0x700, 0x6a84, 0x80, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xc7, 0x3, 0x1, [{@local, 0x7fff}, {@empty, 0xfff}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x2}, {@loopback}]}, @ssrr={0x89, 0x7, 0xea, [@loopback]}]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)={0x15c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x89c}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x49}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, 0x6a4, &(0x7f0000001980)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

413.934052ms ago: executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c726f6469722c696f636861727365743d6b6f69382d72752c726f6469722c757466383d302c726f6469722c756e695f786c6174653d312c00f33077e3f7081ce08ebcbcda5598f4e8c5a36da6d79dbc001c80e42473c9c78e2be90000000000003f329376458ae5d8aac5c6320f480bc276ab8dcf1de08ac47046df3afc9e7fe8e98c8061c3fca5d464a353cd163334d5a5"], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)

311.517555ms ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380))
ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000140)={0x0, 0x300})

181.693641ms ago: executing program 1:
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
unshare(0x20000400)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6}]})
syz_open_dev$usbfs(0x0, 0x0, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
write$P9_RRENAME(r0, &(0x7f0000000080)={0x7}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

4.65765ms ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_START_REQ(r2, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$isdn(0xffffffffffffffff, 0x0, 0xbf, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140), 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast2, 0x0, 0x6c}}}, 0xe8)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0)

0s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x9, 0x4)
listen(0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

t descriptors, different from the interface descriptor's value: 18
[  428.696714][ T5115] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  428.710021][ T5115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.738078][T10874] veth1_macvtap: entered promiscuous mode
[  428.828103][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.849101][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.869891][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.891766][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.909599][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.914671][ T5115] usb 5-1: config 0 descriptor??
[  428.928653][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.938845][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.950220][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.960388][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.972592][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.032511][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.075349][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.133388][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.314378][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.361606][ T4490] Bluetooth: hci3: command tx timeout
[  429.392551][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.442127][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.488861][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.549619][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.574426][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.593189][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.617363][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.638814][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.650887][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.674470][ T5115] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  429.700436][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.711096][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.723334][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.746806][   T29] audit: type=1804 audit(1719237693.755:310): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2215810575/syzkaller.WzgGT0/2/file0" dev="sda1" ino=1962 res=1 errno=0
[  429.772924][ T5163] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  429.790077][T10874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.814215][T10874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.837193][T10874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.846419][T10874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.977422][ T5163] usb 4-1: no configurations
[  429.977660][T10975] veth0_vlan: entered promiscuous mode
[  429.988057][ T5163] usb 4-1: can't read configurations, error -22
[  430.050077][T10975] veth1_vlan: entered promiscuous mode
[  430.154297][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.177484][ T5163] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  430.183952][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.298104][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.316866][T10975] veth0_macvtap: entered promiscuous mode
[  430.322884][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.353590][T10975] veth1_macvtap: entered promiscuous mode
[  430.383850][ T5163] usb 4-1: no configurations
[  430.394742][ T5163] usb 4-1: can't read configurations, error -22
[  430.403969][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.420475][ T5163] usb usb4-port1: attempt power cycle
[  430.444933][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.466960][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.496455][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.508380][T11089] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'.
[  430.513499][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.536521][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.538674][ T5297] usb 5-1: USB disconnect, device number 12
[  430.554853][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.567618][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.577825][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.590224][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.621348][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.622024][ T5297] usblp0: removed
[  430.651557][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.701529][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.743038][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.769508][T10975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.817238][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.838172][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.851550][ T5163] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  430.868473][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.899815][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.940523][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.951825][T11098] loop4: detected capacity change from 0 to 2048
[  430.952395][ T5163] usb 4-1: no configurations
[  430.971347][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.983017][ T5163] usb 4-1: can't read configurations, error -22
[  430.996829][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.013680][T11098] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  431.015404][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.052369][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.078127][T11098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  431.091832][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.103857][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.130764][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.151166][T10975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.164001][ T5163] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  431.193131][T10975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.218651][ T5163] usb 4-1: no configurations
[  431.232421][ T5163] usb 4-1: can't read configurations, error -22
[  431.240868][T10975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.280435][ T5163] usb usb4-port1: unable to enumerate USB device
[  431.356744][T10975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.435226][T10975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.455121][T10975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.475367][T10975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.911335][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.953737][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.062882][T11107] syz-executor.4: attempt to access beyond end of device
[  432.062882][T11107] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0
[  432.148068][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.194292][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.310168][T11110] loop2: detected capacity change from 0 to 2048
[  432.391933][T11110] NILFS (loop2): invalid segment: Sequence number mismatch
[  432.423878][T11110] NILFS (loop2): trying rollback from an earlier position
[  432.480834][T11110] NILFS (loop2): recovery complete
[  432.498114][T11116] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  432.791548][ T5165] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  433.000097][ T5165] usb 5-1: Using ep0 maxpacket: 8
[  433.023559][ T5165] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  433.034315][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  433.056089][ T5165] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  433.076455][ T5165] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  433.096733][ T5165] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  433.141533][ T5165] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  433.165342][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.192555][ T5165] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  433.944837][T11135] loop2: detected capacity change from 0 to 2048
[  433.970640][T11135] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576
[  434.030066][T11135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.811639][T11144] loop1: detected capacity change from 0 to 1024
[  434.845054][T11144] hfsplus: trying to free free bnode 0(1)
[  435.317777][T11157] loop3: detected capacity change from 0 to 128
[  435.467970][T11157] affs: Unrecognized mount option "" or missing value
[  435.489524][T11157] affs: Error parsing options
[  435.558494][  T927] usb 5-1: USB disconnect, device number 13
[  435.734901][T11167] loop4: detected capacity change from 0 to 2048
[  435.756097][T11167] NILFS (loop4): invalid segment: Sequence number mismatch
[  435.808890][T11167] NILFS (loop4): trying rollback from an earlier position
[  435.923550][T11167] NILFS (loop4): recovery complete
[  435.959813][T11170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  436.031299][T11172] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  436.608289][   T61] hfsplus: b-tree write err: -5, ino 4
[  436.979576][T11180] loop1: detected capacity change from 0 to 2048
[  437.019065][T11180] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  437.073469][T11180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.199225][   T29] audit: type=1800 audit(1719237702.205:311): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1974 res=0 errno=0
[  438.822909][T11206] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'.
[  439.192825][T11213] loop4: detected capacity change from 0 to 2048
[  439.201103][T11213] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  439.272714][T11213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.147242][T11227] 9pnet_fd: Insufficient options for proto=fd
[  440.207812][   T29] audit: type=1804 audit(1719237704.215:312): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1222702534/syzkaller.tauGcV/17/file0" dev="sda1" ino=1955 res=1 errno=0
[  440.492500][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  440.498936][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  440.716782][T11238] loop2: detected capacity change from 0 to 2048
[  440.779898][T11238] NILFS (loop2): invalid segment: Sequence number mismatch
[  440.788033][   T29] audit: type=1326 audit(1719237704.785:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f487d0a9 code=0x0
[  440.851655][T11238] NILFS (loop2): trying rollback from an earlier position
[  440.884686][T11245] 9pnet_fd: Insufficient options for proto=fd
[  440.897338][T11246] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'.
[  440.901665][T11238] NILFS (loop2): recovery complete
[  440.931546][T11247] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  441.551207][T11257] loop4: detected capacity change from 0 to 2048
[  441.573271][T11257] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  441.615566][T11257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.679348][T11260] 9pnet_fd: Insufficient options for proto=fd
[  441.847614][   T29] audit: type=1804 audit(1719237705.775:314): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1713283401/syzkaller.QyLqsH/9/file0" dev="sda1" ino=1975 res=1 errno=0
[  441.872787][    C0] vkms_vblank_simulate: vblank timer overrun
[  443.763988][T11281] loop4: detected capacity change from 0 to 1024
[  443.881926][   T52] hfsplus: b-tree write err: -5, ino 4
[  444.708022][T11287] syz-executor.1[11287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.708273][T11287] syz-executor.1[11287] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.936805][   T29] audit: type=1326 audit(1719237708.945:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f566627d0a9 code=0x0
[  445.040917][T11303] 9pnet_fd: Insufficient options for proto=fd
[  446.861160][T11296] loop4: detected capacity change from 0 to 32768
[  446.914271][T11323] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'.
[  446.917969][T11296] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11296)
[  446.943737][T11296] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  446.957574][T11296] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  446.969828][T11296] BTRFS info (device loop4): using free-space-tree
[  447.272771][T11350] loop2: detected capacity change from 0 to 2048
[  447.319562][T10188] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  447.330984][T11350] NILFS (loop2): invalid segment: Sequence number mismatch
[  447.359161][T11360] syz-executor.3[11360] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  447.359393][T11360] syz-executor.3[11360] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  447.372950][T11350] NILFS (loop2): trying rollback from an earlier position
[  447.478890][T11350] NILFS (loop2): recovery complete
[  447.632717][T11363] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  449.047748][T11380] ubi1: attaching mtd0
[  449.052369][T11380] ubi1 error: ubi_attach_mtd_dev: bad VID header (6) or data offsets (70)
[  449.785029][T11388] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'.
[  449.805207][T11389] 9pnet_fd: Insufficient options for proto=fd
[  449.994023][T11395] binder: 11394:11395 ioctl 4018620d 0 returned -22
[  450.123184][T11404] loop3: detected capacity change from 0 to 128
[  450.559357][T11412] loop4: detected capacity change from 0 to 2048
[  450.790401][T11412] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  450.791978][T11404] affs: Unrecognized mount option "" or missing value
[  450.818556][T11404] affs: Error parsing options
[  450.861058][T11412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  451.767978][T11423] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'.
[  451.987656][T11437] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'.
[  453.350582][T11464] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'.
[  453.608476][T11473] loop2: detected capacity change from 0 to 2048
[  453.682557][T11473]  loop2: p1 < > p3
[  453.698985][T11473] loop2: p3 size 134217728 extends beyond EOD, truncated
[  453.785387][ T4546]  loop2: p1 < > p3
[  453.803580][ T4546] loop2: p3 size 134217728 extends beyond EOD, truncated
[  454.460344][T11494] syz-executor.3[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  454.460566][T11494] syz-executor.3[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  454.546803][T11496] loop2: detected capacity change from 0 to 1024
[  454.879167][T11502] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'.
[  455.272044][   T52] hfsplus: b-tree write err: -5, ino 4
[  455.351236][T11520] loop1: detected capacity change from 0 to 2048
[  455.413297][T11520]  loop1: p1 < > p3
[  455.436581][T11520] loop1: p3 size 134217728 extends beyond EOD, truncated
[  455.549768][T11529] loop2: detected capacity change from 0 to 128
[  455.565164][T11529] affs: Unrecognized mount option "" or missing value
[  455.573712][T11529] affs: Error parsing options
[  455.616894][ T8486] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  455.739769][T11534] loop2: detected capacity change from 0 to 512
[  455.755790][T11534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  455.780737][T11534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  455.789129][T11534] System zones: 1-12
[  455.834898][T11534] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  455.891038][T11534] EXT4-fs (loop2): 1 truncate cleaned up
[  455.917135][T11534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.020520][T11537] loop1: detected capacity change from 0 to 1024
[  456.158076][T11537] hfsplus: trying to free free bnode 0(1)
[  456.272860][T11534] loop2: detected capacity change from 512 to 64
[  456.299840][   T29] audit: type=1326 audit(1719237720.305:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f487d0a9 code=0x0
[  456.353198][T11550] syz-executor.2: attempt to access beyond end of device
[  456.353198][T11550] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64
[  456.403019][T11555] 9pnet_fd: Insufficient options for proto=fd
[  456.410488][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36)
[  456.447525][T11550] Buffer I/O error on device loop2, logical block 36
[  456.511736][T11550] syz-executor.2: attempt to access beyond end of device
[  456.511736][T11550] loop2: rw=2049, sector=76, nr_sectors = 2 limit=64
[  456.581512][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 38)
[  456.593171][T11550] Buffer I/O error on device loop2, logical block 38
[  456.600049][T11550] syz-executor.2: attempt to access beyond end of device
[  456.600049][T11550] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64
[  456.624312][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255)
[  456.638704][T11550] Buffer I/O error on device loop2, logical block 255
[  456.645890][T11550] syz-executor.2: attempt to access beyond end of device
[  456.645890][T11550] loop2: rw=2049, sector=78, nr_sectors = 4 limit=64
[  456.659810][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 39)
[  456.689831][T11550] Buffer I/O error on device loop2, logical block 39
[  456.728787][T11550] Buffer I/O error on device loop2, logical block 40
[  456.742692][T11550] syz-executor.2: attempt to access beyond end of device
[  456.742692][T11550] loop2: rw=2049, sector=506, nr_sectors = 4 limit=64
[  456.776740][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 253)
[  456.794506][T11550] Buffer I/O error on device loop2, logical block 253
[  456.801329][T11550] Buffer I/O error on device loop2, logical block 254
[  456.809327][T11550] syz-executor.2: attempt to access beyond end of device
[  456.809327][T11550] loop2: rw=2049, sector=498, nr_sectors = 8 limit=64
[  456.840955][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 249)
[  456.857557][T11550] Buffer I/O error on device loop2, logical block 249
[  456.864535][T11550] Buffer I/O error on device loop2, logical block 250
[  456.871329][T11550] Buffer I/O error on device loop2, logical block 251
[  456.925881][T11550] syz-executor.2: attempt to access beyond end of device
[  456.925881][T11550] loop2: rw=2049, sector=82, nr_sectors = 2 limit=64
[  456.957679][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 41)
[  456.981651][T11550] syz-executor.2: attempt to access beyond end of device
[  456.981651][T11550] loop2: rw=2049, sector=86, nr_sectors = 8 limit=64
[  457.006541][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 43)
[  457.027182][T11550] syz-executor.2: attempt to access beyond end of device
[  457.027182][T11550] loop2: rw=2049, sector=418, nr_sectors = 32 limit=64
[  457.069570][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 209)
[  457.112476][T11550] syz-executor.2: attempt to access beyond end of device
[  457.112476][T11550] loop2: rw=2049, sector=130, nr_sectors = 64 limit=64
[  457.170745][T11550] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 65)
[  457.265347][T11565] 9pnet_fd: Insufficient options for proto=fd
[  457.280436][   T29] audit: type=1800 audit(1719237721.275:317): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0
[  458.219360][T10874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.289536][   T52] hfsplus: b-tree write err: -5, ino 4
[  458.475803][ T2810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.497803][   T29] audit: type=1804 audit(1719237722.475:318): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1713283401/syzkaller.QyLqsH/33/bus" dev="sda1" ino=1965 res=1 errno=0
[  458.797416][ T2810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.001143][ T2810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.125979][ T2810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.264645][   T29] audit: type=1326 audit(1719237723.275:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  459.372891][T11588] 9pnet_fd: Insufficient options for proto=fd
[  459.481273][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  459.496173][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  459.506595][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  459.516679][T11595] loop3: detected capacity change from 0 to 128
[  459.524611][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  459.549614][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  459.560400][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  459.587394][T11595] affs: Unrecognized mount option "" or missing value
[  459.629741][T11595] affs: Error parsing options
[  459.735665][ T2810] bridge_slave_1: left allmulticast mode
[  459.741389][ T2810] bridge_slave_1: left promiscuous mode
[  459.757060][ T8492] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  459.783537][ T2810] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.877531][ T2810] bridge_slave_0: left allmulticast mode
[  459.893270][ T2810] bridge_slave_0: left promiscuous mode
[  459.968480][ T2810] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.366611][   T29] audit: type=1326 audit(1719237725.375:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11632 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  461.468592][T11636] 9pnet_fd: Insufficient options for proto=fd
[  461.492602][ T2810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.528293][ T2810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.564528][ T2810] bond0 (unregistering): Released all slaves
[  461.606403][ T5116] Bluetooth: hci6: command tx timeout
[  462.606678][ T2810] hsr_slave_0: left promiscuous mode
[  462.631264][ T2810] hsr_slave_1: left promiscuous mode
[  462.683101][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.725250][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.818916][ T2810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.862972][ T2810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.987008][ T2810] veth1_macvtap: left promiscuous mode
[  463.009518][ T2810] veth0_macvtap: left promiscuous mode
[  463.027434][ T2810] veth1_vlan: left promiscuous mode
[  463.035355][ T2810] veth0_vlan: left promiscuous mode
[  463.421635][   T51] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  463.623386][   T51] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  463.648299][   T51] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 1
[  463.666936][   T51] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99
[  463.684483][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.685373][ T5116] Bluetooth: hci6: command tx timeout
[  465.761641][ T5116] Bluetooth: hci6: command tx timeout
[  467.696626][  T927] usb 1-1: USB disconnect, device number 11
[  467.844184][ T5116] Bluetooth: hci6: command tx timeout
[  468.164040][    C1] DEBUG: holding rtnl_mutex for 561 jiffies.
[  468.170110][    C1] task:kworker/u8:9    state:R  running task     stack:22736 pid:2810  tgid:2810  ppid:2      flags:0x00004008
[  468.181906][    C1] Workqueue: netns cleanup_net
[  468.186721][    C1] Call Trace:
[  468.190026][    C1]  <IRQ>
[  468.192947][    C1]  sched_show_task+0x578/0x740
[  468.197789][    C1]  ? report_rtnl_holders+0x183/0x2d0
[  468.203145][    C1]  ? __pfx__printk+0x10/0x10
[  468.207864][    C1]  ? __pfx_sched_show_task+0x10/0x10
[  468.213213][    C1]  report_rtnl_holders+0x1ba/0x2d0
[  468.218342][    C1]  ? report_rtnl_holders+0x20/0x2d0
[  468.223607][    C1]  call_timer_fn+0x18e/0x650
[  468.228214][    C1]  ? call_timer_fn+0xc0/0x650
[  468.232932][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  468.238595][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  468.243788][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  468.249633][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  468.255337][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  468.261007][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.266288][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  468.271569][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  468.277241][    C1]  __run_timer_base+0x66a/0x8e0
[  468.282183][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  468.287598][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  468.294106][    C1]  run_timer_softirq+0xb7/0x170
[  468.298991][    C1]  handle_softirqs+0x2c4/0x970
[  468.303921][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  468.308712][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  468.314055][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  468.319370][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  468.324007][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  468.329243][    C1]  irq_exit_rcu+0x9/0x30
[  468.333558][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  468.339246][    C1]  </IRQ>
[  468.342234][    C1]  <TASK>
[  468.345188][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  468.351206][    C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0
[  468.357189][    C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 f5 d2 cb f5 e8 70 6e 04 f6 fb bf 01 00 00 00 <e8> 95 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 95 27 63 f6 48
[  468.376909][    C1] RSP: 0018:ffffc90009827500 EFLAGS: 00000286
[  468.383102][    C1] RAX: bf1f68097e090000 RBX: 1ffff92001304ea8 RCX: ffffffff816fd09a
[  468.391144][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcac8a0 RDI: 0000000000000001
[  468.399222][    C1] RBP: ffffc900098275b0 R08: ffffffff92fe474f R09: 1ffffffff25fc8e9
[  468.407311][    C1] R10: dffffc0000000000 R11: fffffbfff25fc8ea R12: 1ffff92001304ea0
[  468.415396][    C1] R13: 1ffff92001304ea4 R14: ffffc90009827520 R15: dffffc0000000000
[  468.423489][    C1]  ? mark_lock+0x9a/0x360
[  468.427914][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  468.433759][    C1]  irqentry_exit+0x5e/0x90
[  468.438261][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  468.443821][    C1] RIP: 0010:synchronize_rcu+0x0/0x360
[  468.449350][    C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 a5 15 80 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  468.469111][    C1] RSP: 0018:ffffc90009827678 EFLAGS: 00000206
[  468.475296][    C1] RAX: dffffc0000000000 RBX: 1ffff92001304ed8 RCX: ffffffff947dc803
[  468.483350][    C1] RDX: 0000000000000001 RSI: ffffffff8bcad580 RDI: ffffffff8c206c80
[  468.491444][    C1] RBP: ffffc90009827758 R08: ffffffff947d247f R09: 1ffffffff28fa48f
[  468.499487][    C1] R10: dffffc0000000000 R11: fffffbfff28fa490 R12: ffffffff947cfe08
[  468.507556][    C1] R13: 1ffff92001304ed4 R14: 0000000000000a02 R15: ffffc900098276c0
[  468.515643][    C1]  lockdep_unregister_key+0x4b7/0x540
[  468.521104][    C1]  ? __pfx_lockdep_unregister_key+0x10/0x10
[  468.527120][    C1]  ? rcu_is_watching+0x15/0xb0
[  468.532004][    C1]  ? qdisc_reset+0x3bf/0x5b0
[  468.536659][    C1]  __qdisc_destroy+0x165/0x410
[  468.541550][    C1]  dev_shutdown+0x357/0x440
[  468.546118][    C1]  unregister_netdevice_many_notify+0x977/0x16b0
[  468.552554][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  468.559488][    C1]  ? unregister_netdevice_queue+0x26b/0x370
[  468.565508][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  468.571905][    C1]  ? batadv_softif_destroy_netlink+0x1e0/0x270
[  468.578133][    C1]  default_device_exit_batch+0xa0f/0xa90
[  468.583886][    C1]  ? __pfx___might_resched+0x10/0x10
[  468.589254][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  468.595541][    C1]  ? cfg802154_pernet_exit+0xc3/0xe0
[  468.602089][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  468.609128][    C1]  cleanup_net+0x89d/0xcc0
[  468.613668][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  468.618678][    C1]  ? process_scheduled_works+0x945/0x1830
[  468.624484][    C1]  process_scheduled_works+0xa2c/0x1830
[  468.630113][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  468.636215][    C1]  ? assign_work+0x364/0x3d0
[  468.640840][    C1]  worker_thread+0x86d/0xd50
[  468.645547][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  468.651536][    C1]  ? __kthread_parkme+0x169/0x1d0
[  468.656605][    C1]  ? __pfx_worker_thread+0x10/0x10
[  468.661869][    C1]  kthread+0x2f0/0x390
[  468.666051][    C1]  ? __pfx_worker_thread+0x10/0x10
[  468.671225][    C1]  ? __pfx_kthread+0x10/0x10
[  468.675904][    C1]  ret_from_fork+0x4b/0x80
[  468.680350][    C1]  ? __pfx_kthread+0x10/0x10
[  468.685015][    C1]  ret_from_fork_asm+0x1a/0x30
[  468.689913][    C1]  </TASK>
[  468.693029][    C1] DEBUG: waiting rtnl_mutex for 610 jiffies.
[  468.699052][    C1] task:syz-executor.2  state:D stack:21024 pid:11592 tgid:11592 ppid:11580  flags:0x00004002
[  468.709347][    C1] Call Trace:
[  468.712685][    C1]  <TASK>
[  468.715646][    C1]  __schedule+0x17e8/0x4a20
[  468.720227][    C1]  ? __pfx___schedule+0x10/0x10
[  468.725203][    C1]  ? __pfx_lock_release+0x10/0x10
[  468.730265][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  468.735847][    C1]  ? schedule+0x90/0x320
[  468.740131][    C1]  schedule+0x14b/0x320
[  468.744392][    C1]  schedule_preempt_disabled+0x13/0x30
[  468.749895][    C1]  __mutex_lock+0x6a4/0xd70
[  468.754508][    C1]  ? __mutex_lock+0x527/0xd70
[  468.759224][    C1]  ? rtnl_newlink+0xb5d/0x22b0
[  468.764092][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  468.769259][    C1]  ? __rtnl_unlock+0x178/0x1a0
[  468.774147][    C1]  rtnl_newlink+0xb5d/0x22b0
[  468.778777][    C1]  ? rtnl_newlink+0x451/0x22b0
[  468.784146][    C1]  ? rtnl_newlink+0x651/0x22b0
[  468.788954][    C1]  ? rtnl_newlink+0x451/0x22b0
[  468.793921][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  468.798993][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  468.804313][    C1]  ? __mutex_lock+0x527/0xd70
[  468.809044][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  468.814243][    C1]  rtnetlink_rcv_msg+0x892/0x1170
[  468.819336][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  468.824656][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  468.830202][    C1]  ? is_bpf_text_address+0x285/0x2a0
[  468.835573][    C1]  ? __pfx_validate_chain+0x10/0x10
[  468.840827][    C1]  ? __pfx_validate_chain+0x10/0x10
[  468.846120][    C1]  ? arch_stack_walk+0x16d/0x1b0
[  468.851140][    C1]  ? mark_lock+0x9a/0x360
[  468.855596][    C1]  ? __pfx_validate_chain+0x10/0x10
[  468.860834][    C1]  ? __lock_acquire+0x1359/0x2000
[  468.865964][    C1]  ? mark_lock+0x9a/0x360
[  468.870356][    C1]  ? __lock_acquire+0x1359/0x2000
[  468.875494][    C1]  netlink_rcv_skb+0x1e3/0x430
[  468.880318][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  468.885932][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.891380][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  468.896718][    C1]  netlink_unicast+0x7f0/0x990
[  468.901569][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  468.906897][    C1]  ? __virt_addr_valid+0x183/0x520
[  468.912129][    C1]  ? __check_object_size+0x49c/0x900
[  468.917469][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  468.922701][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  468.927538][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.932949][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  468.937936][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  468.943315][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  468.948839][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.954322][    C1]  __sock_sendmsg+0x221/0x270
[  468.959031][    C1]  __sys_sendto+0x3a4/0x4f0
[  468.963605][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  468.968687][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  468.974773][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  468.981156][    C1]  __x64_sys_sendto+0xde/0x100
[  468.986043][    C1]  do_syscall_64+0xf3/0x230
[  468.990585][    C1]  ? clear_bhb_loop+0x35/0x90
[  468.995368][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.001335][    C1] RIP: 0033:0x7f58f447ed9c
[  469.005812][    C1] RSP: 002b:00007ffc5b658fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  469.014316][    C1] RAX: ffffffffffffffda RBX: 00007f58f50e4620 RCX: 00007f58f447ed9c
[  469.022380][    C1] RDX: 000000000000003c RSI: 00007f58f50e4670 RDI: 0000000000000003
[  469.030393][    C1] RBP: 0000000000000000 R08: 00007ffc5b659034 R09: 000000000000000c
[  469.038427][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  469.046461][    C1] R13: 0000000000000000 R14: 00007f58f50e4670 R15: 0000000000000000
[  469.054545][    C1]  </TASK>
[  469.057589][    C1] DEBUG: waiting rtnl_mutex for 632 jiffies.
[  469.063651][    C1] task:kworker/1:5     state:D stack:20760 pid:5297  tgid:5297  ppid:2      flags:0x00004000
[  469.073889][    C1] Workqueue: events linkwatch_event
[  469.079184][    C1] Call Trace:
[  469.082554][    C1]  <TASK>
[  469.085505][    C1]  __schedule+0x17e8/0x4a20
[  469.090072][    C1]  ? __pfx___schedule+0x10/0x10
[  469.095031][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  469.101058][    C1]  ? __pfx_lock_release+0x10/0x10
[  469.106194][    C1]  ? kick_pool+0x45c/0x620
[  469.110668][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.115997][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  469.121263][    C1]  ? schedule+0x90/0x320
[  469.125580][    C1]  schedule+0x14b/0x320
[  469.129792][    C1]  schedule_preempt_disabled+0x13/0x30
[  469.135375][    C1]  __mutex_lock+0x6a4/0xd70
[  469.139913][    C1]  ? __mutex_lock+0x527/0xd70
[  469.144690][    C1]  ? linkwatch_event+0xe/0x60
[  469.149436][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  469.154671][    C1]  ? process_scheduled_works+0x945/0x1830
[  469.160438][    C1]  ? rtnl_lock+0xe7/0x130
[  469.164835][    C1]  ? process_scheduled_works+0x945/0x1830
[  469.170594][    C1]  linkwatch_event+0xe/0x60
[  469.175202][    C1]  process_scheduled_works+0xa2c/0x1830
[  469.180812][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.186904][    C1]  ? assign_work+0x364/0x3d0
[  469.191583][    C1]  worker_thread+0x86d/0xd50
[  469.196324][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  469.202387][    C1]  ? __kthread_parkme+0x169/0x1d0
[  469.207451][    C1]  ? __pfx_worker_thread+0x10/0x10
[  469.212632][    C1]  kthread+0x2f0/0x390
[  469.216742][    C1]  ? __pfx_worker_thread+0x10/0x10
[  469.221948][    C1]  ? __pfx_kthread+0x10/0x10
[  469.226597][    C1]  ret_from_fork+0x4b/0x80
[  469.231072][    C1]  ? __pfx_kthread+0x10/0x10
[  469.235734][    C1]  ret_from_fork_asm+0x1a/0x30
[  469.240570][    C1]  </TASK>
[  469.243653][    C1] 
[  469.243653][    C1] Showing all locks held in the system:
[  469.251463][    C1] 7 locks held by kworker/u8:9/2810:
[  469.256798][    C1]  #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  469.267783][    C1]  #1: ffffc90009827d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  469.278461][    C1]  #2: ffffffff8f5eb450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  469.287998][    C1]  #3: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90
[  469.298122][    C1]  #4: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650
[  469.308411][    C1]  #5: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0
[  469.318288][    C1]  #6: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  469.328247][    C1] 2 locks held by getty/4845:
[  469.333002][    C1]  #0: ffff88802ae460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  469.342947][    C1]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  469.353201][    C1] 3 locks held by kworker/1:5/5297:
[  469.358430][    C1]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  469.369520][    C1]  #1: ffffc900044a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  469.380632][    C1]  #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  469.389742][    C1] 1 lock held by syz-executor.2/11592:
[  469.395254][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xb5d/0x22b0
[  469.404465][    C1] 1 lock held by syz-executor.3/11675:
[  469.409974][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170
[  469.419570][    C1] 1 lock held by syz-executor.4/11678:
[  469.425064][    C1]  #0: ffffffff8e33aa40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  469.435131][    C1] 3 locks held by syz-executor.1/11686:
[  469.440709][    C1]  #0: ffff88802ab30420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x61/0x200
[  469.450607][    C1]  #1: ffff8880773e5db0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x139/0xd50
[  469.461466][    C1]  #2: ffff88802ab32b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ind_migrate+0x253/0x890
[  469.472094][    C1] 1 lock held by syz-executor.1/11689:
[  469.477599][    C1]  #0: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  469.488611][    C1] 2 locks held by syz-executor.1/11690:
[  469.494234][    C1]  #0: ffffffff8e1f0308 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x51/0x180
[  469.503964][    C1]  #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  469.515074][    C1] 1 lock held by syz-executor.1/11693:
[  469.520546][    C1]  #0: ffffffff8eb3dae8 (reading_mutex){+.+.}-{3:3}, at: rng_dev_read+0x171/0x6d0
[  469.529893][    C1] 1 lock held by syz-executor.0/11692:
[  469.535416][    C1]  #0: ffffffff8e1f0308 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x51/0x180
[  469.545110][    C1] 
[  469.547456][    C1] =============================================
[  469.547456][    C1] 
[  469.926789][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  469.941925][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  469.949617][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  469.957221][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  469.964822][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  469.987825][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.010159][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.029550][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.037581][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.054564][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.070214][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.089605][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.117984][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.131518][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.138306][ T2810] team0 (unregistering): Port device team_slave_1 removed
[  470.160295][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.186121][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.194587][T11720] loop1: detected capacity change from 0 to 128
[  470.211708][ T5165] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  470.221708][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.239904][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.248428][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.256174][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.262509][T11720] affs: Unrecognized mount option "" or missing value
[  470.263856][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.280075][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.290617][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.305895][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.309903][T11720] affs: Error parsing options
[  470.316889][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.330869][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.340858][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.352780][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.360640][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.372627][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.373350][ T2810] team0 (unregistering): Port device team_slave_0 removed
[  470.380231][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.409342][ T5115] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  470.453984][ T5165] usb 1-1: unable to read config index 0 descriptor/start: -61
[  470.461856][ T5165] usb 1-1: can't read configurations, error -61
[  470.468658][ T5115] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  470.561536][    C1] DEBUG: holding rtnl_mutex for 801 jiffies.
[  470.567614][    C1] task:kworker/u8:9    state:R  running task     stack:22736 pid:2810  tgid:2810  ppid:2      flags:0x00004000
[  470.579452][    C1] Workqueue: netns cleanup_net
[  470.584316][    C1] Call Trace:
[  470.587609][    C1]  <TASK>
[  470.590654][    C1]  __schedule+0x17e8/0x4a20
[  470.595295][    C1]  ? __pfx___schedule+0x10/0x10
[  470.600187][    C1]  ? __pfx_lock_release+0x10/0x10
[  470.605298][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  470.611231][    C1]  ? kthread_data+0x52/0xd0
[  470.615804][    C1]  ? wq_worker_sleeping+0x66/0x240
[  470.620935][    C1]  ? schedule+0x90/0x320
[  470.625316][    C1]  schedule+0x14b/0x320
[  470.629509][    C1]  synchronize_rcu_expedited+0x684/0x830
[  470.635244][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  470.641506][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  470.641727][ T5165] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  470.646808][    C1]  ? __pfx___might_resched+0x10/0x10
[  470.659732][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  470.665797][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  470.671976][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  470.678356][    C1]  synchronize_rcu+0x11b/0x360
[  470.683208][    C1]  ? __pfx_synchronize_rcu+0x10/0x10
[  470.688553][    C1]  lockdep_unregister_key+0x4b7/0x540
[  470.694103][    C1]  ? __pfx_lockdep_unregister_key+0x10/0x10
[  470.700038][    C1]  ? rcu_is_watching+0x15/0xb0
[  470.704880][    C1]  ? qdisc_reset+0x3bf/0x5b0
[  470.709508][    C1]  __qdisc_destroy+0x165/0x410
[  470.714366][    C1]  dev_shutdown+0x357/0x440
[  470.718901][    C1]  unregister_netdevice_many_notify+0x977/0x16b0
[  470.725316][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  470.732149][    C1]  ? unregister_netdevice_queue+0x26b/0x370
[  470.738060][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  470.744356][    C1]  ? batadv_softif_destroy_netlink+0x1e0/0x270
[  470.750530][    C1]  default_device_exit_batch+0xa0f/0xa90
[  470.756218][    C1]  ? __pfx___might_resched+0x10/0x10
[  470.761544][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  470.767737][    C1]  ? cfg802154_pernet_exit+0xc3/0xe0
[  470.773070][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  470.779218][    C1]  cleanup_net+0x89d/0xcc0
[  470.783656][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  470.788590][    C1]  ? process_scheduled_works+0x945/0x1830
[  470.794361][    C1]  process_scheduled_works+0xa2c/0x1830
[  470.799966][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  470.806085][    C1]  ? assign_work+0x364/0x3d0
[  470.810947][    C1]  worker_thread+0x86d/0xd50
[  470.815621][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  470.821592][    C1]  ? __kthread_parkme+0x169/0x1d0
[  470.826654][    C1]  ? __pfx_worker_thread+0x10/0x10
[  470.831808][    C1]  kthread+0x2f0/0x390
[  470.835868][    C1]  ? __pfx_worker_thread+0x10/0x10
[  470.841053][    C1]  ? __pfx_kthread+0x10/0x10
[  470.845676][    C1]  ret_from_fork+0x4b/0x80
[  470.850093][    C1]  ? __pfx_kthread+0x10/0x10
[  470.854738][    C1]  ret_from_fork_asm+0x1a/0x30
[  470.859534][    C1]  </TASK>
[  470.862580][    C1] DEBUG: waiting rtnl_mutex for 827 jiffies.
[  470.868551][    C1] task:syz-executor.2  state:D stack:21024 pid:11592 tgid:11592 ppid:11580  flags:0x00004002
[  470.874687][ T5165] usb 1-1: unable to read config index 0 descriptor/start: -61
[  470.878764][    C1] Call Trace:
[  470.889617][    C1]  <TASK>
[  470.892607][    C1]  __schedule+0x17e8/0x4a20
[  470.894660][ T5165] usb 1-1: can't read configurations, error -61
[  470.897134][    C1]  ? __pfx___schedule+0x10/0x10
[  470.897164][    C1]  ? __pfx_lock_release+0x10/0x10
[  470.897191][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  470.897229][    C1]  ? schedule+0x90/0x320
[  470.897252][    C1]  schedule+0x14b/0x320
[  470.897279][    C1]  schedule_preempt_disabled+0x13/0x30
[  470.897300][    C1]  __mutex_lock+0x6a4/0xd70
[  470.897328][    C1]  ? __mutex_lock+0x527/0xd70
[  470.897356][    C1]  ? rtnl_newlink+0xb5d/0x22b0
[  470.897379][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  470.897418][    C1]  ? __rtnl_unlock+0x178/0x1a0
[  470.897447][    C1]  rtnl_newlink+0xb5d/0x22b0
[  470.897470][    C1]  ? rtnl_newlink+0x451/0x22b0
[  470.897492][    C1]  ? rtnl_newlink+0x651/0x22b0
[  470.897517][    C1]  ? rtnl_newlink+0x451/0x22b0
[  470.897551][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  470.897575][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  470.897615][    C1]  ? __mutex_lock+0x527/0xd70
[  470.897667][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  470.897688][    C1]  rtnetlink_rcv_msg+0x892/0x1170
[  470.897718][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  470.897746][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  470.897769][    C1]  ? is_bpf_text_address+0x285/0x2a0
[  470.897806][    C1]  ? __pfx_validate_chain+0x10/0x10
[  470.897837][    C1]  ? __pfx_validate_chain+0x10/0x10
[  470.897868][    C1]  ? arch_stack_walk+0x16d/0x1b0
[  470.897901][    C1]  ? mark_lock+0x9a/0x360
[  470.897927][    C1]  ? __pfx_validate_chain+0x10/0x10
[  470.897960][    C1]  ? __lock_acquire+0x1359/0x2000
[  470.898002][    C1]  ? mark_lock+0x9a/0x360
[  470.898034][    C1]  ? __lock_acquire+0x1359/0x2000
[  470.898083][    C1]  netlink_rcv_skb+0x1e3/0x430
[  470.898115][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  470.911181][ T5165] usb usb1-port1: attempt power cycle
[  470.914299][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  470.914356][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  470.914383][    C1]  netlink_unicast+0x7f0/0x990
[  471.087515][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  471.092844][    C1]  ? __virt_addr_valid+0x183/0x520
[  471.097958][    C1]  ? __check_object_size+0x49c/0x900
[  471.103405][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  471.108549][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  471.113383][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.118684][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  471.123675][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  471.128953][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  471.134556][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.139859][    C1]  __sock_sendmsg+0x221/0x270
[  471.144576][    C1]  __sys_sendto+0x3a4/0x4f0
[  471.149086][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  471.154187][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  471.160197][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  471.166562][    C1]  __x64_sys_sendto+0xde/0x100
[  471.171358][    C1]  do_syscall_64+0xf3/0x230
[  471.175901][    C1]  ? clear_bhb_loop+0x35/0x90
[  471.180577][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.186607][    C1] RIP: 0033:0x7f58f447ed9c
[  471.191031][    C1] RSP: 002b:00007ffc5b658fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  471.199483][    C1] RAX: ffffffffffffffda RBX: 00007f58f50e4620 RCX: 00007f58f447ed9c
[  471.207522][    C1] RDX: 000000000000003c RSI: 00007f58f50e4670 RDI: 0000000000000003
[  471.215568][    C1] RBP: 0000000000000000 R08: 00007ffc5b659034 R09: 000000000000000c
[  471.223612][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  471.231632][    C1] R13: 0000000000000000 R14: 00007f58f50e4670 R15: 0000000000000000
[  471.239654][    C1]  </TASK>
[  471.242718][    C1] DEBUG: waiting rtnl_mutex for 851 jiffies.
[  471.248693][    C1] task:kworker/1:5     state:D stack:20760 pid:5297  tgid:5297  ppid:2      flags:0x00004000
[  471.258878][    C1] Workqueue: events linkwatch_event
[  471.264135][    C1] Call Trace:
[  471.267417][    C1]  <TASK>
[  471.270337][    C1]  __schedule+0x17e8/0x4a20
[  471.274878][    C1]  ? __pfx___schedule+0x10/0x10
[  471.279719][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  471.285733][    C1]  ? __pfx_lock_release+0x10/0x10
[  471.290758][    C1]  ? kick_pool+0x45c/0x620
[  471.295332][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.300572][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  471.305943][    C1]  ? schedule+0x90/0x320
[  471.310217][    C1]  schedule+0x14b/0x320
[  471.314438][    C1]  schedule_preempt_disabled+0x13/0x30
[  471.319918][    C1]  __mutex_lock+0x6a4/0xd70
[  471.324476][    C1]  ? __mutex_lock+0x527/0xd70
[  471.329182][    C1]  ? linkwatch_event+0xe/0x60
[  471.333882][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  471.338905][    C1]  ? process_scheduled_works+0x945/0x1830
[  471.344671][    C1]  ? rtnl_lock+0xe7/0x130
[  471.349030][    C1]  ? process_scheduled_works+0x945/0x1830
[  471.351629][ T5165] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  471.354800][    C1]  linkwatch_event+0xe/0x60
[  471.366856][    C1]  process_scheduled_works+0xa2c/0x1830
[  471.372469][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  471.378445][    C1]  ? assign_work+0x364/0x3d0
[  471.383060][    C1]  worker_thread+0x86d/0xd50
[  471.387713][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  471.393692][    C1]  ? __kthread_parkme+0x169/0x1d0
[  471.398749][    C1]  ? __pfx_worker_thread+0x10/0x10
[  471.403934][    C1]  kthread+0x2f0/0x390
[  471.404390][ T5165] usb 1-1: unable to read config index 0 descriptor/start: -61
[  471.408019][    C1]  ? __pfx_worker_thread+0x10/0x10
[  471.408048][    C1]  ? __pfx_kthread+0x10/0x10
[  471.408077][    C1]  ret_from_fork+0x4b/0x80
[  471.408099][    C1]  ? __pfx_kthread+0x10/0x10
[  471.408127][    C1]  ret_from_fork_asm+0x1a/0x30
[  471.408171][    C1]  </TASK>
[  471.408184][    C1] 
[  471.408184][    C1] Showing all locks held in the system:
[  471.408229][    C1] 5 locks held by kworker/u8:9/2810:
[  471.408285][    C1]  #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  471.408352][    C1]  #1: ffffc90009827d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  471.408412][    C1]  #2: ffffffff8f5eb450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  471.408475][    C1]  #3: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90
[  471.408537][    C1]  #4: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  471.408606][    C1] 2 locks held by getty/4845:
[  471.408619][    C1]  #0: ffff88802ae460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  471.408681][    C1]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  471.408745][    C1] 5 locks held by kworker/0:7/5165:
[  471.408757][    C1] 3 locks held by kworker/1:5/5297:
[  471.408768][    C1]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  471.408829][    C1]  #1: ffffc900044a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  471.408887][    C1]  #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  471.408956][    C1] 1 lock held by syz-executor.2/11592:
[  471.408966][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xb5d/0x22b0
[  471.409024][    C1] 1 lock held by syz-executor.3/11675:
[  471.409035][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170
[  471.409092][    C1] 1 lock held by syz-executor.4/11716:
[  471.409104][    C1]  #0: ffffffff8e33aa40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  471.409150][    C1] 3 locks held by syz-executor.1/11723:
[  471.409162][    C1]  #0: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650
[  471.409217][    C1]  #1: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0
[  471.409273][    C1]  #2: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  471.409334][    C1] 
[  471.409341][    C1] =============================================
[  471.409341][    C1] 
[  471.680064][ T5165] usb 1-1: can't read configurations, error -61
[  471.861522][ T5165] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  471.896270][ T5165] usb 1-1: unable to read config index 0 descriptor/start: -61
[  471.904338][ T5165] usb 1-1: can't read configurations, error -61
[  471.939219][ T5165] usb usb1-port1: unable to enumerate USB device
[  472.090429][   T29] audit: type=1800 audit(1719237736.095:321): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0
[  472.367015][T11723] loop1: detected capacity change from 0 to 40427
[  472.377021][T11723] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  472.386334][T11723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  472.422616][T11723] F2FS-fs (loop1): Found nat_bits in checkpoint
[  472.487276][    C1] DEBUG: holding rtnl_mutex for 993 jiffies.
[  472.493391][    C1] task:kworker/u8:9    state:R  running task     stack:22736 pid:2810  tgid:2810  ppid:2      flags:0x00004008
[  472.497995][T11723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  472.505199][    C1] Workqueue: netns cleanup_net
[  472.505237][    C1] Call Trace:
[  472.505247][    C1]  <IRQ>
[  472.505257][    C1]  sched_show_task+0x578/0x740
[  472.505282][    C1]  ? report_rtnl_holders+0x183/0x2d0
[  472.521581][T11723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  472.523334][    C1]  ? __pfx__printk+0x10/0x10
[  472.545646][    C1]  ? __pfx_sched_show_task+0x10/0x10
[  472.550991][    C1]  report_rtnl_holders+0x1ba/0x2d0
[  472.556185][    C1]  ? report_rtnl_holders+0x20/0x2d0
[  472.561469][    C1]  call_timer_fn+0x18e/0x650
[  472.566122][    C1]  ? call_timer_fn+0xc0/0x650
[  472.570840][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  472.576559][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  472.581763][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  472.587472][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  472.593244][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  472.598951][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  472.604227][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  472.609503][    C1]  ? __pfx_report_rtnl_holders+0x10/0x10
[  472.615302][    C1]  __run_timer_base+0x66a/0x8e0
[  472.620210][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  472.625696][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  472.632150][    C1]  run_timer_softirq+0xb7/0x170
[  472.637140][    C1]  handle_softirqs+0x2c4/0x970
[  472.642017][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  472.646830][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  472.652229][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  472.657578][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  472.662362][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  472.667599][    C1]  irq_exit_rcu+0x9/0x30
[  472.671937][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  472.677613][    C1]  </IRQ>
[  472.680565][    C1]  <TASK>
[  472.683576][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  472.689665][    C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0
[  472.695653][    C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 f5 d2 cb f5 e8 70 6e 04 f6 fb bf 01 00 00 00 <e8> 95 ad ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 95 27 63 f6 48
[  472.715408][    C1] RSP: 0018:ffffc90009827500 EFLAGS: 00000286
[  472.721514][    C1] RAX: bf1f68097e090000 RBX: 1ffff92001304ea8 RCX: ffffffff816fd09a
[  472.729682][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcac8a0 RDI: 0000000000000001
[  472.737803][    C1] RBP: ffffc900098275b0 R08: ffffffff92fe474f R09: 1ffffffff25fc8e9
[  472.745918][    C1] R10: dffffc0000000000 R11: fffffbfff25fc8ea R12: 1ffff92001304ea0
[  472.753941][    C1] R13: 1ffff92001304ea4 R14: ffffc90009827520 R15: dffffc0000000000
[  472.761959][    C1]  ? mark_lock+0x9a/0x360
[  472.766289][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  472.772047][    C1]  ? kvm_kick_cpu+0x26/0xb0
[  472.776563][    C1]  irqentry_exit+0x5e/0x90
[  472.780986][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  472.786497][    C1] RIP: 0010:synchronize_rcu+0x0/0x360
[  472.791921][    C1] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 a5 15 80 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  472.811611][    C1] RSP: 0018:ffffc90009827678 EFLAGS: 00000206
[  472.817676][    C1] RAX: dffffc0000000000 RBX: 1ffff92001304ed8 RCX: ffffffff947dc803
[  472.825713][    C1] RDX: 0000000000000001 RSI: ffffffff8bcad580 RDI: ffffffff8c206c80
[  472.833762][    C1] RBP: ffffc90009827758 R08: ffffffff947ca46f R09: 1ffffffff28f948d
[  472.842051][    C1] R10: dffffc0000000000 R11: fffffbfff28f948e R12: ffffffff947c7df8
[  472.850129][    C1] R13: 1ffff92001304ed4 R14: 0000000000000207 R15: ffffc900098276c0
[  472.858170][    C1]  lockdep_unregister_key+0x4b7/0x540
[  472.863600][    C1]  ? __pfx_lockdep_unregister_key+0x10/0x10
[  472.869526][    C1]  ? rcu_is_watching+0x15/0xb0
[  472.874339][    C1]  ? qdisc_reset+0x3bf/0x5b0
[  472.878948][    C1]  __qdisc_destroy+0x165/0x410
[  472.883739][    C1]  dev_shutdown+0x9b/0x440
[  472.888150][    C1]  unregister_netdevice_many_notify+0x977/0x16b0
[  472.894528][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  472.901323][    C1]  ? unregister_netdevice_queue+0x26b/0x370
[  472.907304][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  472.913623][    C1]  ? batadv_softif_destroy_netlink+0x1e0/0x270
[  472.919901][    C1]  default_device_exit_batch+0xa0f/0xa90
[  472.925634][    C1]  ? __pfx___might_resched+0x10/0x10
[  472.930961][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  472.937201][    C1]  ? cfg802154_pernet_exit+0xc3/0xe0
[  472.942570][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  472.948770][    C1]  cleanup_net+0x89d/0xcc0
[  472.953275][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  472.958254][    C1]  ? process_scheduled_works+0x945/0x1830
[  472.964052][    C1]  process_scheduled_works+0xa2c/0x1830
[  472.969666][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  472.975731][    C1]  ? assign_work+0x364/0x3d0
[  472.980365][    C1]  worker_thread+0x86d/0xd50
[  472.985050][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  472.990969][    C1]  ? __kthread_parkme+0x169/0x1d0
[  472.996267][    C1]  ? __pfx_worker_thread+0x10/0x10
[  473.001440][    C1]  kthread+0x2f0/0x390
[  473.005534][    C1]  ? __pfx_worker_thread+0x10/0x10
[  473.010654][    C1]  ? __pfx_kthread+0x10/0x10
[  473.015264][    C1]  ret_from_fork+0x4b/0x80
[  473.019670][    C1]  ? __pfx_kthread+0x10/0x10
[  473.024301][    C1]  ret_from_fork_asm+0x1a/0x30
[  473.029104][    C1]  </TASK>
[  473.032183][    C1] DEBUG: waiting rtnl_mutex for 1044 jiffies.
[  473.038352][    C1] task:syz-executor.2  state:D stack:21024 pid:11592 tgid:11592 ppid:11580  flags:0x00004002
[  473.048572][    C1] Call Trace:
[  473.051895][    C1]  <TASK>
[  473.054841][    C1]  __schedule+0x17e8/0x4a20
[  473.059350][    C1]  ? __pfx___schedule+0x10/0x10
[  473.064358][    C1]  ? __pfx_lock_release+0x10/0x10
[  473.069444][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  473.074966][    C1]  ? schedule+0x90/0x320
[  473.079204][    C1]  schedule+0x14b/0x320
[  473.083404][    C1]  schedule_preempt_disabled+0x13/0x30
[  473.088978][    C1]  __mutex_lock+0x6a4/0xd70
[  473.093567][    C1]  ? __mutex_lock+0x527/0xd70
[  473.098273][    C1]  ? rtnl_newlink+0xb5d/0x22b0
[  473.103105][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  473.108167][    C1]  ? __rtnl_unlock+0x178/0x1a0
[  473.113001][    C1]  rtnl_newlink+0xb5d/0x22b0
[  473.117612][    C1]  ? rtnl_newlink+0x451/0x22b0
[  473.122433][    C1]  ? rtnl_newlink+0x651/0x22b0
[  473.127219][    C1]  ? rtnl_newlink+0x451/0x22b0
[  473.132052][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  473.137096][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  473.142372][    C1]  ? __mutex_lock+0x527/0xd70
[  473.147103][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  473.152199][    C1]  rtnetlink_rcv_msg+0x892/0x1170
[  473.157261][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  473.162534][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  473.168039][    C1]  ? is_bpf_text_address+0x285/0x2a0
[  473.173418][    C1]  ? __pfx_validate_chain+0x10/0x10
[  473.178669][    C1]  ? __pfx_validate_chain+0x10/0x10
[  473.183953][    C1]  ? arch_stack_walk+0x16d/0x1b0
[  473.188938][    C1]  ? mark_lock+0x9a/0x360
[  473.193370][    C1]  ? __pfx_validate_chain+0x10/0x10
[  473.198608][    C1]  ? __lock_acquire+0x1359/0x2000
[  473.203725][    C1]  ? mark_lock+0x9a/0x360
[  473.208077][    C1]  ? __lock_acquire+0x1359/0x2000
[  473.213167][    C1]  netlink_rcv_skb+0x1e3/0x430
[  473.217948][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  473.223464][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  473.228883][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  473.234110][    C1]  netlink_unicast+0x7f0/0x990
[  473.239011][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  473.244337][    C1]  ? __virt_addr_valid+0x183/0x520
[  473.249471][    C1]  ? __check_object_size+0x49c/0x900
[  473.254810][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  473.259943][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  473.264744][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.270043][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  473.275037][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  473.280364][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  473.285849][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.291131][    C1]  __sock_sendmsg+0x221/0x270
[  473.295836][    C1]  __sys_sendto+0x3a4/0x4f0
[  473.300427][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  473.305532][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  473.311591][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  473.317941][    C1]  __x64_sys_sendto+0xde/0x100
[  473.322756][    C1]  do_syscall_64+0xf3/0x230
[  473.327288][    C1]  ? clear_bhb_loop+0x35/0x90
[  473.332015][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.337956][    C1] RIP: 0033:0x7f58f447ed9c
[  473.342412][    C1] RSP: 002b:00007ffc5b658fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  473.350853][    C1] RAX: ffffffffffffffda RBX: 00007f58f50e4620 RCX: 00007f58f447ed9c
[  473.358869][    C1] RDX: 000000000000003c RSI: 00007f58f50e4670 RDI: 0000000000000003
[  473.366873][    C1] RBP: 0000000000000000 R08: 00007ffc5b659034 R09: 000000000000000c
[  473.374902][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  473.382948][    C1] R13: 0000000000000000 R14: 00007f58f50e4670 R15: 0000000000000000
[  473.390944][    C1]  </TASK>
[  473.394028][    C1] DEBUG: waiting rtnl_mutex for 1066 jiffies.
[  473.400099][    C1] task:kworker/1:5     state:D stack:20760 pid:5297  tgid:5297  ppid:2      flags:0x00004000
[  473.410287][    C1] Workqueue: events linkwatch_event
[  473.415515][    C1] Call Trace:
[  473.418786][    C1]  <TASK>
[  473.421764][    C1]  __schedule+0x17e8/0x4a20
[  473.426297][    C1]  ? __pfx___schedule+0x10/0x10
[  473.431138][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  473.437143][    C1]  ? __pfx_lock_release+0x10/0x10
[  473.442209][    C1]  ? kick_pool+0x45c/0x620
[  473.446620][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.451854][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  473.457210][    C1]  ? schedule+0x90/0x320
[  473.461519][    C1]  schedule+0x14b/0x320
[  473.465696][    C1]  schedule_preempt_disabled+0x13/0x30
[  473.471236][    C1]  __mutex_lock+0x6a4/0xd70
[  473.475779][    C1]  ? __mutex_lock+0x527/0xd70
[  473.480553][    C1]  ? linkwatch_event+0xe/0x60
[  473.485280][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  473.490331][    C1]  ? process_scheduled_works+0x945/0x1830
[  473.496072][    C1]  ? rtnl_lock+0xe7/0x130
[  473.500398][    C1]  ? process_scheduled_works+0x945/0x1830
[  473.506172][    C1]  linkwatch_event+0xe/0x60
[  473.510691][    C1]  process_scheduled_works+0xa2c/0x1830
[  473.516311][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  473.522365][    C1]  ? assign_work+0x364/0x3d0
[  473.527037][    C1]  worker_thread+0x86d/0xd50
[  473.531679][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  473.537590][    C1]  ? __kthread_parkme+0x169/0x1d0
[  473.542654][    C1]  ? __pfx_worker_thread+0x10/0x10
[  473.547778][    C1]  kthread+0x2f0/0x390
[  473.551912][    C1]  ? __pfx_worker_thread+0x10/0x10
[  473.557040][    C1]  ? __pfx_kthread+0x10/0x10
[  473.561683][    C1]  ret_from_fork+0x4b/0x80
[  473.566167][    C1]  ? __pfx_kthread+0x10/0x10
[  473.570824][    C1]  ret_from_fork_asm+0x1a/0x30
[  473.575626][    C1]  </TASK>
[  473.578635][    C1] DEBUG: waiting rtnl_mutex for 568 jiffies.
[  473.584627][    C1] task:syz-executor.3  state:D stack:25504 pid:11675 tgid:11673 ppid:10570  flags:0x00000006
[  473.594833][    C1] Call Trace:
[  473.598121][    C1]  <TASK>
[  473.601044][    C1]  __schedule+0x17e8/0x4a20
[  473.605607][    C1]  ? __pfx___schedule+0x10/0x10
[  473.610458][    C1]  ? __pfx_lock_release+0x10/0x10
[  473.615543][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  473.621036][    C1]  ? schedule+0x90/0x320
[  473.625348][    C1]  schedule+0x14b/0x320
[  473.629531][    C1]  schedule_preempt_disabled+0x13/0x30
[  473.635056][    C1]  __mutex_lock+0x6a4/0xd70
[  473.639614][    C1]  ? __mutex_lock+0x527/0xd70
[  473.644525][    C1]  ? rtnetlink_rcv_msg+0x839/0x1170
[  473.649749][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  473.654855][    C1]  ? rtnl_lock+0xe7/0x130
[  473.659209][    C1]  rtnetlink_rcv_msg+0x839/0x1170
[  473.664296][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  473.669519][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  473.675035][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  473.681123][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  473.687611][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  473.693044][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  473.698274][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  473.703698][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[  473.709037][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  473.714171][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  473.719890][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  473.725053][    C1]  ? __dev_queue_xmit+0x16c9/0x3d30
[  473.730289][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  473.735537][    C1]  ? ref_tracker_free+0x643/0x7e0
[  473.740569][    C1]  netlink_rcv_skb+0x1e3/0x430
[  473.745362][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  473.751049][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  473.756431][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  473.761703][    C1]  netlink_unicast+0x7f0/0x990
[  473.766516][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  473.771863][    C1]  ? __virt_addr_valid+0x183/0x520
[  473.777102][    C1]  ? __check_object_size+0x49c/0x900
[  473.782460][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  473.787590][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  473.792423][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.797900][    C1]  ? __import_iovec+0x536/0x820
[  473.802813][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  473.807770][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  473.813156][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  473.818637][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.823974][    C1]  __sock_sendmsg+0x221/0x270
[  473.828664][    C1]  ____sys_sendmsg+0x525/0x7d0
[  473.833476][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  473.838781][    C1]  __sys_sendmsg+0x2b0/0x3a0
[  473.843421][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  473.848564][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  473.854943][    C1]  ? do_syscall_64+0x100/0x230
[  473.859716][    C1]  ? do_syscall_64+0xb6/0x230
[  473.864411][    C1]  do_syscall_64+0xf3/0x230
[  473.868908][    C1]  ? clear_bhb_loop+0x35/0x90
[  473.873679][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.879585][    C1] RIP: 0033:0x7f53db47d0a9
[  473.884052][    C1] RSP: 002b:00007f53dc1b20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  473.892540][    C1] RAX: ffffffffffffffda RBX: 00007f53db5b3f80 RCX: 00007f53db47d0a9
[  473.900530][    C1] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003
[  473.908562][    C1] RBP: 00007f53db4ec074 R08: 0000000000000000 R09: 0000000000000000
[  473.916578][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.924593][    C1] R13: 000000000000000b R14: 00007f53db5b3f80 R15: 00007fff81d61e48
[  473.932639][    C1]  </TASK>
[  473.935679][    C1] 
[  473.935679][    C1] Showing all locks held in the system:
[  473.943471][    C1] 7 locks held by kworker/u8:9/2810:
[  473.948745][    C1]  #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  473.959653][    C1]  #1: ffffc90009827d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  473.970216][    C1]  #2: ffffffff8f5eb450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  473.979679][    C1]  #3: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90
[  473.989718][    C1]  #4: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650
[  473.999849][    C1]  #5: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0
[  474.009627][    C1]  #6: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  474.019500][    C1] 2 locks held by getty/4845:
[  474.024189][    C1]  #0: ffff88802ae460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  474.033986][    C1]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  474.044252][    C1] 3 locks held by kworker/1:5/5297:
[  474.049452][    C1]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  474.060483][    C1]  #1: ffffc900044a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  474.071508][    C1]  #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  474.080537][    C1] 1 lock held by syz-executor.1/10802:
[  474.086039][    C1]  #0: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  474.097005][    C1] 1 lock held by syz-executor.2/11592:
[  474.102499][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xb5d/0x22b0
[  474.111650][    C1] 1 lock held by syz-executor.3/11675:
[  474.117110][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170
[  474.126618][    C1] 2 locks held by syz-executor.4/11724:
[  474.132194][    C1]  #0: ffff88801d636208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  474.142477][    C1]  #1: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  474.153435][    C1] 1 lock held by syz-executor.0/11734:
[  474.158872][    C1]  #0: ffffffff8e1f0308 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x51/0x180
[  474.168472][    C1] 
[  474.170784][    C1] =============================================
[  474.170784][    C1] 
[  475.181521][   T29] audit: type=1800 audit(1719237738.615:322): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1954 res=0 errno=0
[  475.202001][    C1] DEBUG: holding rtnl_mutex for 1265 jiffies.
[  475.208391][    C1] task:kworker/u8:9    state:R  running task     stack:22736 pid:2810  tgid:2810  ppid:2      flags:0x00004000
[  475.220209][    C1] Workqueue: netns cleanup_net
[  475.224999][    C1] Call Trace:
[  475.228263][    C1]  <TASK>
[  475.231201][    C1]  __schedule+0x17e8/0x4a20
[  475.235759][    C1]  ? __pfx___schedule+0x10/0x10
[  475.240606][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  475.246704][    C1]  ? preempt_schedule+0xe1/0xf0
[  475.251586][    C1]  preempt_schedule_common+0x84/0xd0
[  475.256871][    C1]  preempt_schedule+0xe1/0xf0
[  475.261556][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  475.266921][    C1]  preempt_schedule_thunk+0x1a/0x30
[  475.272129][    C1]  _raw_spin_unlock_irqrestore+0x130/0x140
[  475.277920][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  475.284265][    C1]  kthread_queue_work+0x110/0x180
[  475.289583][    C1]  synchronize_rcu_expedited+0x5ad/0x830
[  475.295235][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  475.301466][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  475.306769][    C1]  ? __pfx___might_resched+0x10/0x10
[  475.312082][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  475.318049][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  475.324387][    C1]  synchronize_rcu+0x11b/0x360
[  475.329146][    C1]  ? __pfx_synchronize_rcu+0x10/0x10
[  475.334465][    C1]  lockdep_unregister_key+0x4b7/0x540
[  475.339825][    C1]  ? __pfx_lockdep_unregister_key+0x10/0x10
[  475.345727][    C1]  ? rcu_is_watching+0x15/0xb0
[  475.350482][    C1]  ? qdisc_reset+0x3bf/0x5b0
[  475.355081][    C1]  __qdisc_destroy+0x165/0x410
[  475.359831][    C1]  dev_shutdown+0x9b/0x440
[  475.364258][    C1]  unregister_netdevice_many_notify+0x977/0x16b0
[  475.370669][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  475.377446][    C1]  ? unregister_netdevice_queue+0x26b/0x370
[  475.383367][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  475.389610][    C1]  ? batadv_softif_destroy_netlink+0x1e0/0x270
[  475.395781][    C1]  default_device_exit_batch+0xa0f/0xa90
[  475.401457][    C1]  ? __pfx___might_resched+0x10/0x10
[  475.406762][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  475.412940][    C1]  ? cfg802154_pernet_exit+0xc3/0xe0
[  475.418217][    C1]  ? __pfx_default_device_exit_batch+0x10/0x10
[  475.424482][    C1]  cleanup_net+0x89d/0xcc0
[  475.429161][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  475.434112][    C1]  ? process_scheduled_works+0x945/0x1830
[  475.439816][    C1]  process_scheduled_works+0xa2c/0x1830
[  475.445384][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  475.451355][    C1]  ? assign_work+0x364/0x3d0
[  475.455961][    C1]  worker_thread+0x86d/0xd50
[  475.460544][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  475.466450][    C1]  ? __kthread_parkme+0x169/0x1d0
[  475.471494][    C1]  ? __pfx_worker_thread+0x10/0x10
[  475.476591][    C1]  kthread+0x2f0/0x390
[  475.480648][    C1]  ? __pfx_worker_thread+0x10/0x10
[  475.485773][    C1]  ? __pfx_kthread+0x10/0x10
[  475.490613][    C1]  ret_from_fork+0x4b/0x80
[  475.495058][    C1]  ? __pfx_kthread+0x10/0x10
[  475.499655][    C1]  ret_from_fork_asm+0x1a/0x30
[  475.504473][    C1]  </TASK>
[  475.507669][    C1] DEBUG: waiting rtnl_mutex for 1291 jiffies.
[  475.513767][    C1] task:syz-executor.2  state:D stack:21024 pid:11592 tgid:11592 ppid:11580  flags:0x00004002
[  475.523937][    C1] Call Trace:
[  475.527223][    C1]  <TASK>
[  475.530161][    C1]  __schedule+0x17e8/0x4a20
[  475.534694][    C1]  ? __pfx___schedule+0x10/0x10
[  475.539532][    C1]  ? __pfx_lock_release+0x10/0x10
[  475.544567][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  475.550037][    C1]  ? schedule+0x90/0x320
[  475.554288][    C1]  schedule+0x14b/0x320
[  475.558430][    C1]  schedule_preempt_disabled+0x13/0x30
[  475.563896][    C1]  __mutex_lock+0x6a4/0xd70
[  475.568387][    C1]  ? __mutex_lock+0x527/0xd70
[  475.573074][    C1]  ? rtnl_newlink+0xb5d/0x22b0
[  475.577911][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  475.582963][    C1]  ? __rtnl_unlock+0x178/0x1a0
[  475.587721][    C1]  rtnl_newlink+0xb5d/0x22b0
[  475.592337][    C1]  ? rtnl_newlink+0x451/0x22b0
[  475.597110][    C1]  ? rtnl_newlink+0x651/0x22b0
[  475.601888][    C1]  ? rtnl_newlink+0x451/0x22b0
[  475.606657][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  475.611722][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  475.616940][    C1]  ? __mutex_lock+0x527/0xd70
[  475.621733][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  475.626760][    C1]  rtnetlink_rcv_msg+0x892/0x1170
[  475.631803][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  475.636987][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  475.642452][    C1]  ? is_bpf_text_address+0x285/0x2a0
[  475.647734][    C1]  ? __pfx_validate_chain+0x10/0x10
[  475.652945][    C1]  ? __pfx_validate_chain+0x10/0x10
[  475.658134][    C1]  ? arch_stack_walk+0x16d/0x1b0
[  475.663090][    C1]  ? mark_lock+0x9a/0x360
[  475.667407][    C1]  ? __pfx_validate_chain+0x10/0x10
[  475.672714][    C1]  ? __lock_acquire+0x1359/0x2000
[  475.677738][    C1]  ? mark_lock+0x9a/0x360
[  475.682115][    C1]  ? __lock_acquire+0x1359/0x2000
[  475.687156][    C1]  netlink_rcv_skb+0x1e3/0x430
[  475.691970][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  475.697422][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  475.702737][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  475.707923][    C1]  netlink_unicast+0x7f0/0x990
[  475.712744][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  475.718044][    C1]  ? __virt_addr_valid+0x183/0x520
[  475.723168][    C1]  ? __check_object_size+0x49c/0x900
[  475.728525][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  475.733647][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  475.738411][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.743709][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  475.748639][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  475.754020][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  475.759468][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.764781][    C1]  __sock_sendmsg+0x221/0x270
[  475.769451][    C1]  __sys_sendto+0x3a4/0x4f0
[  475.773969][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  475.778996][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  475.785103][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  475.791616][    C1]  __x64_sys_sendto+0xde/0x100
[  475.796478][    C1]  do_syscall_64+0xf3/0x230
[  475.800990][    C1]  ? clear_bhb_loop+0x35/0x90
[  475.805735][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.811700][    C1] RIP: 0033:0x7f58f447ed9c
[  475.816152][    C1] RSP: 002b:00007ffc5b658fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  475.824601][    C1] RAX: ffffffffffffffda RBX: 00007f58f50e4620 RCX: 00007f58f447ed9c
[  475.832702][    C1] RDX: 000000000000003c RSI: 00007f58f50e4670 RDI: 0000000000000003
[  475.840705][    C1] RBP: 0000000000000000 R08: 00007ffc5b659034 R09: 000000000000000c
[  475.848737][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  475.856754][    C1] R13: 0000000000000000 R14: 00007f58f50e4670 R15: 0000000000000000
[  475.864760][    C1]  </TASK>
[  475.867767][    C1] DEBUG: waiting rtnl_mutex for 1313 jiffies.
[  475.873860][    C1] task:kworker/1:5     state:D stack:20760 pid:5297  tgid:5297  ppid:2      flags:0x00004000
[  475.884065][    C1] Workqueue: events linkwatch_event
[  475.889283][    C1] Call Trace:
[  475.892590][    C1]  <TASK>
[  475.895520][    C1]  __schedule+0x17e8/0x4a20
[  475.900033][    C1]  ? __pfx___schedule+0x10/0x10
[  475.904930][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  475.910900][    C1]  ? __pfx_lock_release+0x10/0x10
[  475.916033][    C1]  ? kick_pool+0x45c/0x620
[  475.920445][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  475.925683][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  475.930893][    C1]  ? schedule+0x90/0x320
[  475.935161][    C1]  schedule+0x14b/0x320
[  475.939305][    C1]  schedule_preempt_disabled+0x13/0x30
[  475.944779][    C1]  __mutex_lock+0x6a4/0xd70
[  475.949365][    C1]  ? __mutex_lock+0x527/0xd70
[  475.954051][    C1]  ? linkwatch_event+0xe/0x60
[  475.958720][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  475.963765][    C1]  ? process_scheduled_works+0x945/0x1830
[  475.969468][    C1]  ? rtnl_lock+0xe7/0x130
[  475.973837][    C1]  ? process_scheduled_works+0x945/0x1830
[  475.979568][    C1]  linkwatch_event+0xe/0x60
[  475.984083][    C1]  process_scheduled_works+0xa2c/0x1830
[  475.989680][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  475.995678][    C1]  ? assign_work+0x364/0x3d0
[  476.000260][    C1]  worker_thread+0x86d/0xd50
[  476.004882][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  476.010761][    C1]  ? __kthread_parkme+0x169/0x1d0
[  476.015829][    C1]  ? __pfx_worker_thread+0x10/0x10
[  476.020952][    C1]  kthread+0x2f0/0x390
[  476.025042][    C1]  ? __pfx_worker_thread+0x10/0x10
[  476.030141][    C1]  ? __pfx_kthread+0x10/0x10
[  476.034748][    C1]  ret_from_fork+0x4b/0x80
[  476.039156][    C1]  ? __pfx_kthread+0x10/0x10
[  476.043761][    C1]  ret_from_fork_asm+0x1a/0x30
[  476.048522][    C1]  </TASK>
[  476.051548][    C1] DEBUG: waiting rtnl_mutex for 816 jiffies.
[  476.057504][    C1] task:syz-executor.3  state:D stack:25504 pid:11675 tgid:11673 ppid:10570  flags:0x00000006
[  476.067682][    C1] Call Trace:
[  476.070950][    C1]  <TASK>
[  476.073895][    C1]  __schedule+0x17e8/0x4a20
[  476.078398][    C1]  ? __pfx___schedule+0x10/0x10
[  476.083256][    C1]  ? __pfx_lock_release+0x10/0x10
[  476.088268][    C1]  ? __mutex_trylock_common+0x92/0x2e0
[  476.093743][    C1]  ? schedule+0x90/0x320
[  476.097970][    C1]  schedule+0x14b/0x320
[  476.102134][    C1]  schedule_preempt_disabled+0x13/0x30
[  476.107751][    C1]  __mutex_lock+0x6a4/0xd70
[  476.112269][    C1]  ? __mutex_lock+0x527/0xd70
[  476.116930][    C1]  ? rtnetlink_rcv_msg+0x839/0x1170
[  476.122144][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  476.127170][    C1]  ? rtnl_lock+0xe7/0x130
[  476.131511][    C1]  rtnetlink_rcv_msg+0x839/0x1170
[  476.136541][    C1]  ? rtnetlink_rcv_msg+0x208/0x1170
[  476.141834][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  476.147300][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  476.153305][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  476.159628][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  476.165011][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  476.170215][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  476.175599][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[  476.180876][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  476.186016][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  476.191748][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  476.196845][    C1]  ? __dev_queue_xmit+0x16c9/0x3d30
[  476.202050][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  476.207151][    C1]  ? ref_tracker_free+0x643/0x7e0
[  476.212189][    C1]  netlink_rcv_skb+0x1e3/0x430
[  476.216938][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  476.222410][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  476.227699][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  476.232929][    C1]  netlink_unicast+0x7f0/0x990
[  476.237907][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  476.243199][    C1]  ? __virt_addr_valid+0x183/0x520
[  476.248297][    C1]  ? __check_object_size+0x49c/0x900
[  476.253586][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  476.258685][    C1]  netlink_sendmsg+0x8e4/0xcb0
[  476.263465][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.268735][    C1]  ? __import_iovec+0x536/0x820
[  476.273683][    C1]  ? aa_sock_msg_perm+0x91/0x160
[  476.278622][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  476.283937][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  476.289381][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.294673][    C1]  __sock_sendmsg+0x221/0x270
[  476.299426][    C1]  ____sys_sendmsg+0x525/0x7d0
[  476.304206][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  476.309479][    C1]  __sys_sendmsg+0x2b0/0x3a0
[  476.314074][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  476.319190][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  476.325534][    C1]  ? do_syscall_64+0x100/0x230
[  476.330283][    C1]  ? do_syscall_64+0xb6/0x230
[  476.334970][    C1]  do_syscall_64+0xf3/0x230
[  476.339461][    C1]  ? clear_bhb_loop+0x35/0x90
[  476.344142][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.350018][    C1] RIP: 0033:0x7f53db47d0a9
[  476.354463][    C1] RSP: 002b:00007f53dc1b20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.362887][    C1] RAX: ffffffffffffffda RBX: 00007f53db5b3f80 RCX: 00007f53db47d0a9
[  476.370841][    C1] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003
[  476.378819][    C1] RBP: 00007f53db4ec074 R08: 0000000000000000 R09: 0000000000000000
[  476.386808][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.394789][    C1] R13: 000000000000000b R14: 00007f53db5b3f80 R15: 00007fff81d61e48
[  476.402777][    C1]  </TASK>
[  476.405783][    C1] 
[  476.405783][    C1] Showing all locks held in the system:
[  476.413491][    C1] 2 locks held by kworker/0:0/8:
[  476.418406][    C1] 2 locks held by kworker/u8:1/12:
[  476.423534][    C1] 3 locks held by kworker/u8:2/35:
[  476.428655][    C1] 5 locks held by kworker/u8:9/2810:
[  476.433954][    C1] 2 locks held by getty/4845:
[  476.438608][    C1]  #0: ffff88802ae460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  476.448373][    C1]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  476.458507][    C1] 1 lock held by udevd/5103:
[  476.463117][    C1] 3 locks held by kworker/1:4/5167:
[  476.468297][    C1] 3 locks held by kworker/1:5/5297:
[  476.473525][    C1]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  476.484502][    C1]  #1: ffffc900044a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  476.495471][    C1]  #2: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  476.504462][    C1] 1 lock held by syz-executor.1/10802:
[  476.509900][    C1] 1 lock held by syz-executor.2/11592:
[  476.515357][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xb5d/0x22b0
[  476.524411][    C1] 1 lock held by syz-executor.3/11675:
[  476.529849][    C1]  #0: ffffffff8f5f7d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x839/0x1170
[  476.539441][    C1] 1 lock held by syz-executor.4/11739:
[  476.544920][    C1] 4 locks held by syz-executor.0/11742:
[  476.550442][    C1]  #0: ffff888015f30b18 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120
[  476.559770][    C1]  #1: ffffc90000a18c00 (net/core/rtnetlink.c:82){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650
[  476.569869][    C1]  #2: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: report_rtnl_holders+0x20/0x2d0
[  476.579632][    C1]  #3: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  476.589480][    C1] 
[  476.591806][    C1] =============================================
[  476.591806][    C1] 
[  477.100526][T11592] chnl_net:caif_netlink_parms(): no params data found
[  477.370315][   T29] audit: type=1326 audit(1719237741.375:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11761 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  477.480014][T11769] 9pnet_fd: Insufficient options for proto=fd
[  477.515310][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.559093][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.603888][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.631659][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.677999][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.701776][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.718566][T11592] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.725950][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.736200][T11592] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.750858][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.757226][T11592] bridge_slave_0: entered allmulticast mode
[  477.761292][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.773182][T11592] bridge_slave_0: entered promiscuous mode
[  477.783830][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.796346][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.809795][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.818438][T11592] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.821607][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.831768][T11592] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.833810][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  477.848078][T11592] bridge_slave_1: entered allmulticast mode
[  477.871644][T11592] bridge_slave_1: entered promiscuous mode
[  477.879823][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.895317][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.902968][ T5115] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  477.912360][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.919938][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.928696][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.936414][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.944038][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.952372][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.959988][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.976176][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  477.987224][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.002127][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.004040][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.014493][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.028166][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.036806][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.044482][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.052194][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.060669][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.065577][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.071284][ T5165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  478.088203][    T8] usb 2-1: unable to read config index 0 descriptor/start: -61
[  478.095786][T11768] loop3: detected capacity change from 0 to 40427
[  478.099803][T11768] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  478.110990][T11768] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  478.120502][ T5115] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  478.145390][    T8] usb 2-1: can't read configurations, error -61
[  478.147032][T11768] F2FS-fs (loop3): Found nat_bits in checkpoint
[  478.153213][ T5115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.174421][ T5165] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  478.192159][ T5115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.207268][ T5115] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  478.222343][ T5115] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  478.231871][ T5115] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  478.240034][ T5115] usb 1-1: Manufacturer: syz
[  478.280636][ T5115] usb 1-1: config 0 descriptor??
[  478.341856][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  478.391895][T11768] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  478.406214][T11768] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  478.443546][T11592] team0: Port device team_slave_0 added
[  478.489489][T11592] team0: Port device team_slave_1 added
[  478.553966][    T8] usb 2-1: unable to read config index 0 descriptor/start: -61
[  478.564564][    T8] usb 2-1: can't read configurations, error -61
[  478.594172][   T29] audit: type=1800 audit(1719237742.585:324): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  478.625883][    T8] usb usb2-port1: attempt power cycle
[  478.670546][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.705682][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.744739][ T5115] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1
[  478.770051][ T5115] appleir 0003:05AC:8243.000C: parse failed
[  478.794156][ T5115] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22
[  478.814302][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.873007][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.879992][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.907941][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.956892][ T5115] usb 1-1: USB disconnect, device number 16
[  479.038619][T11592] hsr_slave_0: entered promiscuous mode
[  479.053056][T11592] hsr_slave_1: entered promiscuous mode
[  479.072272][T11592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  479.079880][T11592] Cannot create hsr debugfs directory
[  479.206516][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  479.253616][    T8] usb 2-1: unable to read config index 0 descriptor/start: -61
[  479.262259][    T8] usb 2-1: can't read configurations, error -61
[  479.421642][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  479.489064][    T8] usb 2-1: unable to read config index 0 descriptor/start: -61
[  479.532600][    T8] usb 2-1: can't read configurations, error -61
[  479.570365][    T8] usb usb2-port1: unable to enumerate USB device
[  479.966286][   T29] audit: type=1326 audit(1719237743.975:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11810 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f487d0a9 code=0x0
[  480.079243][T11812] 9pnet_fd: Insufficient options for proto=fd
[  480.144793][T11592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  480.165188][T11592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  480.182572][T11592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  480.198780][T11592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  480.450600][T11592] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.501185][T11592] 8021q: adding VLAN 0 to HW filter on device team0
[  480.578538][  T927] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.585712][  T927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.655448][   T29] audit: type=1800 audit(1719237744.655:326): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1939 res=0 errno=0
[  480.797712][  T927] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.804957][  T927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.389399][T11829] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
[  481.493023][ T4490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  481.527434][ T4490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  481.540980][ T4490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  481.555815][ T4490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  481.565296][ T4490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  481.572819][ T4490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  481.804406][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.070409][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.327641][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.356607][   T29] audit: type=1326 audit(1719237746.365:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f487d0a9 code=0x0
[  482.458565][T11857] 9pnet_fd: Insufficient options for proto=fd
[  482.506550][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.712177][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.090219][   T29] audit: type=1800 audit(1719237747.095:328): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  483.176744][   T12] bridge_slave_1: left allmulticast mode
[  483.207091][   T12] bridge_slave_1: left promiscuous mode
[  483.238518][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.266087][T11868] loop4: detected capacity change from 0 to 2048
[  483.292665][   T12] bridge_slave_0: left allmulticast mode
[  483.312036][   T12] bridge_slave_0: left promiscuous mode
[  483.330240][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.342843][T11868]  loop4: p1 < > p3
[  483.370171][T11868] loop4: p3 size 134217728 extends beyond EOD, truncated
[  483.580908][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  483.594286][ T5103] udevd[5103]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  483.600809][T11872] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'.
[  483.664985][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  483.688999][ T4490] Bluetooth: hci5: command tx timeout
[  483.689538][ T5103] udevd[5103]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  484.450931][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.478375][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.503444][   T12] bond0 (unregistering): Released all slaves
[  484.772896][T11830] chnl_net:caif_netlink_parms(): no params data found
[  484.991718][  T927] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  485.323330][  T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.335974][  T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.346256][  T927] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  485.355556][  T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.407746][  T927] usb 4-1: config 0 descriptor??
[  485.771525][ T4490] Bluetooth: hci5: command tx timeout
[  485.892018][T11830] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.899271][T11830] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.913917][T11830] bridge_slave_0: entered allmulticast mode
[  485.928554][T11830] bridge_slave_0: entered promiscuous mode
[  485.957958][   T12] hsr_slave_0: left promiscuous mode
[  485.968457][   T12] hsr_slave_1: left promiscuous mode
[  485.980167][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  485.996917][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.011103][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.020612][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.063823][   T12] veth1_macvtap: left promiscuous mode
[  486.069677][   T12] veth0_macvtap: left promiscuous mode
[  486.075851][   T12] veth1_vlan: left promiscuous mode
[  486.081759][   T12] veth0_vlan: left promiscuous mode
[  486.759942][  T927] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #100: -71
[  486.770826][  T927] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71
[  486.779662][  T927] uclogic 0003:256C:006D.000D: failed probing pen v1 parameters: -71
[  486.788113][  T927] uclogic 0003:256C:006D.000D: failed probing parameters: -71
[  486.796479][  T927] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71
[  486.841803][  T927] usb 4-1: USB disconnect, device number 17
[  487.232956][   T12] team0 (unregistering): Port device team_slave_1 removed
[  487.340167][   T12] team0 (unregistering): Port device team_slave_0 removed
[  487.400775][   T29] audit: type=1326 audit(1719237751.405:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11899 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53db47d0a9 code=0x0
[  487.533072][T11901] 9pnet_fd: Insufficient options for proto=fd
[  487.726453][T11903] fuse: Unknown parameter '0x0000000000000004'
[  487.850735][ T4490] Bluetooth: hci5: command tx timeout
[  488.145525][T11830] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.159799][T11830] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.167748][T11830] bridge_slave_1: entered allmulticast mode
[  488.182263][T11830] bridge_slave_1: entered promiscuous mode
[  488.269833][T11830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.348879][T11830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.972966][T11830] team0: Port device team_slave_0 added
[  488.994779][T11592] veth0_vlan: entered promiscuous mode
[  489.046404][T11830] team0: Port device team_slave_1 added
[  489.136863][T11592] veth1_vlan: entered promiscuous mode
[  489.174848][T11830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.192576][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.236771][T11830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.386854][T11830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.394989][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.423669][T11830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.602697][T11930] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  489.650200][T11830] hsr_slave_0: entered promiscuous mode
[  489.658475][T11830] hsr_slave_1: entered promiscuous mode
[  489.670054][T11830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.678927][T11830] Cannot create hsr debugfs directory
[  489.883241][T11592] veth0_macvtap: entered promiscuous mode
[  489.921684][ T4490] Bluetooth: hci5: command tx timeout
[  490.325555][T11592] veth1_macvtap: entered promiscuous mode
[  490.366383][T11933] fuse: Unknown parameter '0x0000000000000004'
[  490.596728][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.627318][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.651694][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.663979][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.674160][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.686339][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.697095][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.727885][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.747085][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.760337][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.769538][   T29] audit: type=1326 audit(1719237754.775:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11942 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  490.779085][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.803723][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.816381][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.880455][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.908569][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.919268][T11944] 9pnet_fd: Insufficient options for proto=fd
[  490.921751][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.956620][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.979711][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.005812][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.027010][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.047975][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.059122][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.071193][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.081317][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.099968][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.115097][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.179596][T11592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.197736][T11592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.212033][T11592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.221035][T11592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.468206][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.493798][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.643107][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.650973][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.663836][T11946] loop3: detected capacity change from 0 to 40427
[  491.677822][T11830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  491.700916][T11946] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  491.713133][T11946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  491.737525][T11830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.739097][T11946] F2FS-fs (loop3): invalid crc value
[  491.757277][T11830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.769708][T11830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  491.865406][T11946] F2FS-fs (loop3): Found nat_bits in checkpoint
[  492.176308][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.206191][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.234691][T11946] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  492.249832][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.266276][T11946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  492.280417][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.315326][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.338815][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.346702][T11964] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  492.347370][T11830] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.373986][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.387267][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.396661][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.417016][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.430105][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.445395][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.453129][   T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  492.464013][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.473336][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.479765][T11830] 8021q: adding VLAN 0 to HW filter on device team0
[  492.488439][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.496504][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.507225][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.516126][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.528419][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.539361][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.632160][  T927] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.639339][  T927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.651799][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.660950][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.669819][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.677527][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.685394][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.693741][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.701797][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.710721][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.719036][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.727692][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.735470][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.743199][ T5297] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  492.755711][   T51] usb 3-1: config 0 has no interfaces?
[  492.761239][   T51] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  492.772809][ T5297] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  492.782532][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.795162][   T51] usb 3-1: config 0 descriptor??
[  492.811244][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.818484][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.025349][   T51] usb 3-1: USB disconnect, device number 8
[  493.128784][T11974] fuse: Unknown parameter '0x0000000000000004'
[  493.621524][   T29] audit: type=1326 audit(1719237757.625:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  493.698584][T11995] 9pnet_fd: Insufficient options for proto=fd
[  493.738856][T11830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.869283][T11830] veth0_vlan: entered promiscuous mode
[  493.932338][T11830] veth1_vlan: entered promiscuous mode
[  494.102463][T11830] veth0_macvtap: entered promiscuous mode
[  494.126103][T11830] veth1_macvtap: entered promiscuous mode
[  494.206972][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.217850][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.243747][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.261668][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.281474][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.301457][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.311322][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.341457][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.359058][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.370598][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.389631][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.400134][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.421465][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.440716][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.464064][T11830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.567163][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.588781][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.609305][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.642450][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.701938][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.751075][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.791460][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.811964][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.822229][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.833010][T12007] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  494.843960][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.867180][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.877937][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.895236][T11830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.905950][T11830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.923064][T11830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.941421][T12009] fuse: Unknown parameter '0x0000000000000004'
[  495.035065][T11830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.050227][T11830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.070690][T11830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.084245][T11830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.786581][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.817095][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.917026][   T29] audit: type=1326 audit(1719237759.925:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53db47d0a9 code=0x0
[  495.986347][ T2409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.002329][ T2409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.023518][T12032] 9pnet_fd: Insufficient options for proto=fd
[  497.807969][   T29] audit: type=1326 audit(1719237761.815:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67f487d0a9 code=0x0
[  497.916217][T12071] 9pnet_fd: Insufficient options for proto=fd
[  498.338319][T12054] loop2: detected capacity change from 0 to 40427
[  498.358041][T12054] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  498.411941][T12054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  498.492494][T12054] F2FS-fs (loop2): Found nat_bits in checkpoint
[  498.696227][T12054] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  498.722404][T12054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  500.824912][   T29] audit: type=1326 audit(1719237764.835:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd854e7d0a9 code=0x0
[  500.955408][T12119] 9pnet_fd: Insufficient options for proto=fd
[  501.935377][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  501.944064][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  501.951897][T12139] loop4: detected capacity change from 0 to 1024
[  502.998657][T12139] hfsplus: trying to free free bnode 0(1)
[  503.492697][   T12] hfsplus: b-tree write err: -5, ino 4
[  503.514624][   T29] audit: type=1326 audit(1719237767.525:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12172 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53db47d0a9 code=0x0
[  503.627753][T12179] 9pnet_fd: Insufficient options for proto=fd
[  504.011613][T12148] Bluetooth: hci1: command 0x0406 tx timeout
[  504.245185][T12185] loop2: detected capacity change from 0 to 128
[  504.418638][T12185] affs: Unrecognized mount option "" or missing value
[  504.428924][T12185] affs: Error parsing options
[  505.338736][T12211] loop1: detected capacity change from 0 to 256
[  505.475878][T12188] loop3: detected capacity change from 0 to 32768
[  505.732003][T12188] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  505.737619][   T29] audit: type=1326 audit(1719237769.735:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e77a7d0a9 code=0x0
[  505.766136][T12188] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[  505.766291][T12188] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2
[  505.766291][T12188]   running recovery passes: check_allocations
[  505.843534][T12188] bcachefs (loop3): accounting_read... done
[  505.851478][T12188] bcachefs (loop3): alloc_read... done
[  505.862089][T12188] bcachefs (loop3): stripes_read... done
[  505.867898][T12188] bcachefs (loop3): snapshots_read... done
[  505.883244][T12229] 9pnet_fd: Insufficient options for proto=fd
[  505.894133][T12188] bcachefs (loop3): check_allocations...
[  505.933197][T12188] btree ptr not marked in member info btree allocated bitmap
[  505.933220][T12188]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down
[  506.055012][T12188] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 7
[  506.093902][T12188] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed
[  506.123607][T12188] bcachefs (loop3): bch2_gc_btree(): error fsck_errors_not_fixed
[  506.151539][T12188] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed
[  506.170308][T12188] bcachefs (loop3): bch2_check_allocations(): error fsck_errors_not_fixed
[  506.186806][T12188] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed
[  506.200838][T12188] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[  506.213342][T12188] bcachefs (loop3): shutting down
[  506.304086][T12188] bcachefs (loop3): shutdown complete
[  506.413001][   T30] INFO: task syz-executor.3:9996 blocked for more than 143 seconds.
[  506.424426][   T30]       Not tainted 6.10.0-rc4-next-20240621-syzkaller #0
[  506.438745][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.448337][   T30] task:syz-executor.3  state:D stack:24672 pid:9996  tgid:9996  ppid:5119   flags:0x00004006
2024/06/24 14:02:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  506.460809][   T30] Call Trace:
[  506.492057][   T30]  <TASK>
[  506.504811][   T30]  __schedule+0x17e8/0x4a20
[  506.526561][   T30]  ? __pfx___schedule+0x10/0x10
[  506.541019][   T30]  ? __pfx_lock_release+0x10/0x10
[  506.570983][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  506.615909][   T30]  ? schedule+0x90/0x320
[  506.620212][   T30]  schedule+0x14b/0x320
[  506.643438][   T30]  fuse_simple_request+0x1199/0x1b90
[  506.648803][   T30]  ? __pfx_fuse_simple_request+0x10/0x10
[  506.660132][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  506.667135][   T30]  ? up_write+0x1a9/0x590
[  506.671610][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  506.677714][   T30]  ? __pfx_up_write+0x10/0x10
[  506.684707][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  506.689936][   T30]  ? filemap_check_errors+0xe1/0x140
[  506.700844][   T30]  fuse_flush+0x69f/0x950
[  506.721237][   T30]  ? __pfx_fuse_flush+0x10/0x10
[  506.727685][   T30]  ? __pfx_lock_release+0x10/0x10
[  506.741441][   T30]  ? __pfx_fuse_flush+0x10/0x10
[  506.752813][   T30]  filp_flush+0xb5/0x160
[  506.757100][   T30]  filp_close+0x1e/0x40
[  506.761301][   T30]  __close_range+0x35e/0x940
[  506.792649][   T30]  ? __pfx___close_range+0x10/0x10
[  506.806581][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  506.821544][   T30]  ? exc_page_fault+0x590/0x8c0
[  506.826426][   T30]  __x64_sys_close_range+0x7a/0x90
[  506.847295][   T30]  do_syscall_64+0xf3/0x230
[  506.857935][   T30]  ? clear_bhb_loop+0x35/0x90
[  506.877991][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.912541][   T30] RIP: 0033:0x7f595ce7d0a9
[  506.926524][   T30] RSP: 002b:00007fffaa1057c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  506.959729][   T30] RAX: ffffffffffffffda RBX: 000000000005744c RCX: 00007f595ce7d0a9
[  506.990206][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  507.017124][   T30] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001700000000
[  507.038960][   T30] R10: 00007f595ce00000 R11: 0000000000000246 R12: 00007f595cfb4120
[  507.079624][   T30] R13: 00007f595cfb412c R14: 0000000000000032 R15: 00007f595cfb5980
[  507.119782][   T30]  </TASK>
[  507.130677][   T30] 
[  507.130677][   T30] Showing all locks held in the system:
[  507.166871][   T30] 3 locks held by kworker/0:0/8:
[  507.189682][   T30] 1 lock held by khungtaskd/30:
[  507.200040][   T30]  #0: ffffffff8e3357a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  507.282723][   T30] 2 locks held by getty/4845:
[  507.287452][   T30]  #0: ffff88802ae460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  507.358276][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  507.401521][   T30] 2 locks held by syz-fuzzer/5083:
[  507.406685][   T30] 3 locks held by kworker/1:3/5166:
[  507.441855][   T30]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  507.481577][   T30]  #1: ffffc9000363fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  507.532395][   T30]  #2: ffffffff8e33ab78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  507.581427][   T30] 3 locks held by kworker/1:4/5167:
[  507.596893][   T30]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  507.664327][   T30]  #1: ffffc90003fe7d00 (slab_caches_to_rcu_destroy_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830