last executing test programs:

11m26.951165751s ago: executing program 0 (id=1):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008800)
gettid()
timer_create(0x4, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
getpid()
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20048000)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

11m23.149249482s ago: executing program 0 (id=10):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000ec0100000800000002"], 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001ec0)={&(0x7f0000000380)="5577c56c79f06640a0897fb5b688e2b7a2165038447a1570157866a81c35ee346b04e8153533429c0711d781ff0b7a7fe4ec459cb849707f00d1b553f2d219d02bc12a9b34e5f3504e90df28fcc97691471a8e458bb3c0affa7efeab16324f740931ce5131", 0x0, 0x0, 0x0, 0x850, r0}, 0x38)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)

11m21.910486635s ago: executing program 0 (id=13):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000011c0)=ANY=[], 0xb0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14)
write$char_usb(r0, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40)

11m21.244308354s ago: executing program 0 (id=14):
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11e8d)
write$P9_RREADDIR(r4, 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x100, 0x2, 0xfffffffb, 0xfffffffffffffffe, 0x802})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0xfffffe01, 0x7fff, 0xb2, "fe67a000", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000))
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f0000000080)={0x80, 0x3, 0x17, 0x8}, 0x8, 0x20, 0x6, 0x0, 0x4bf, 0x404, 0x0})

11m18.811987407s ago: executing program 0 (id=16):
clock_adjtime(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

11m3.554228974s ago: executing program 32 (id=16):
clock_adjtime(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

10m45.706778699s ago: executing program 2 (id=56):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008800)
gettid()
timer_create(0x4, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
getpid()
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20048000)

10m43.125478617s ago: executing program 2 (id=59):
move_mount(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)

10m42.735859966s ago: executing program 2 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
preadv(r3, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0)
r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000})
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x20}}, 0x880)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)

10m37.022177452s ago: executing program 2 (id=65):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}])
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

10m31.325090461s ago: executing program 2 (id=71):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020"], 0x0, 0x0, 0x0}, 0x0)

10m27.952178045s ago: executing program 2 (id=77):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0)
r1 = open(0x0, 0x101080, 0x0)
getdents(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x800)
get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000100))
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init1(0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b8ff45e5d7cb4affc1c539a764f5", @ANYRES32, @ANYRES64], 0x23, 0x318, &(0x7f0000000780)="$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")
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)

10m12.378301191s ago: executing program 33 (id=77):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0)
r1 = open(0x0, 0x101080, 0x0)
getdents(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x800)
get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000100))
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init1(0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64], 0x23, 0x318, &(0x7f0000000780)="$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")
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)

28.660596328s ago: executing program 1 (id=859):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)

24.625939749s ago: executing program 1 (id=861):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00'})
modify_ldt$write2(0x11, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_AIE_ON(r1, 0x7001)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})

9.895673174s ago: executing program 1 (id=873):
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6020400)
r0 = socket(0x1e, 0x4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c)
sendmmsg(r0, &(0x7f00000030c0), 0x400000000000181, 0x20004050)
ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}})
syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r1, 0xbd1db000)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300))

9.527053097s ago: executing program 1 (id=875):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x263, 0x8000}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ustat(0x801, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
io_setup(0x1, &(0x7f00000000c0))
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit'])
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r3)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)

7.699932486s ago: executing program 4 (id=877):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

4.157312914s ago: executing program 4 (id=880):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x48000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000003c0)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x3, 0x2c3}})
tkill(r0, 0x7)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x7f, 0x9, 0x2, 0x0, 0x7, 0x0, 0x0, 0x3, 0xff, [0x3, 0xfffffff8, 0x2, 0x5, 0x5, 0x9, 0xe3f, 0x7fffffff]}})
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0)
get_robust_list(0x0, &(0x7f00000027c0)=&(0x7f0000002780)={&(0x7f0000000480)={&(0x7f0000000440)={&(0x7f0000000000)}}, 0x0, &(0x7f0000002740)={&(0x7f0000002700)={&(0x7f00000026c0)}}}, &(0x7f0000002800)=0x18)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002a80)={0x0, "de4380d8bf0f90322dbd1772d5f55e26"})
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002680)={0x5, 0x4, {r0}, {r4}, 0x7, 0x4})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
close(0x3)

4.137810026s ago: executing program 3 (id=881):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

3.724986396s ago: executing program 3 (id=882):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
memfd_create(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

3.664789484s ago: executing program 4 (id=883):
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6020400)
r0 = socket(0x1e, 0x4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c)
sendmmsg(r0, &(0x7f00000030c0), 0x400000000000181, 0x20004050)
ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}})
syz_open_dev$dri(0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r1, 0xbd1db000)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300))

3.417020215s ago: executing program 4 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

3.377013082s ago: executing program 1 (id=885):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905010000060000000905"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.934937842s ago: executing program 3 (id=886):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
socket(0x10, 0x803, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffe)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.794193958s ago: executing program 4 (id=887):
getpid()
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(0x0, 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}], 0x1})

1.006189958s ago: executing program 3 (id=888):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00')
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

601.818806ms ago: executing program 3 (id=889):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x340, 0x3a8, 0x3a8, 0x340, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xa8, 0xc8, 0x700}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = fcntl$dupfd(r1, 0x406, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x1a)
fcntl$setlease(r5, 0x400, 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000005c0)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1}}, 0x28)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2)

407.879003ms ago: executing program 1 (id=890):
syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010410e4942400001020301090291000301090008080b00020100201009040000000101200009240100080731000611240804050100010002000300020000000b2406020406000600f2000c24030600040805"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

69.225902ms ago: executing program 4 (id=891):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
close(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
socket(0x10, 0x803, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffe)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

0s ago: executing program 3 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)=0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
io_setup(0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)

kernel console output (not intermixed with test programs):

179][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  441.501206][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'.
[  443.644071][ T5622] Bluetooth: hci5: command tx timeout
[  443.644133][ T5622] Bluetooth: hci3: command tx timeout
[  443.944082][ T7753] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  443.948226][ T7753] block (null): Could not allocate knbd recv work queue.
[  444.154199][ T7753] nbd: failed to add new device
[  444.263212][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11
[  444.583918][ T5628] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  444.764874][ T5628] usb 4-1: Using ep0 maxpacket: 8
[  444.785863][ T5628] usb 4-1: unable to get BOS descriptor or descriptor too short
[  444.787152][ T5628] usb 4-1: config 2 has an invalid interface number: 80 but max is 3
[  444.787179][ T5628] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  444.787199][ T5628] usb 4-1: config 2 has an invalid interface number: 29 but max is 3
[  444.787220][ T5628] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  444.787239][ T5628] usb 4-1: config 2 has an invalid interface number: 132 but max is 3
[  444.787261][ T5628] usb 4-1: config 2 has an invalid interface number: 66 but max is 3
[  444.787284][ T5628] usb 4-1: config 2 has no interface number 0
[  444.787300][ T5628] usb 4-1: config 2 has no interface number 1
[  444.787317][ T5628] usb 4-1: config 2 has no interface number 2
[  444.787334][ T5628] usb 4-1: config 2 has no interface number 3
[  444.787432][ T5628] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xF has invalid maxpacket 63716, setting to 64
[  444.787461][ T5628] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  444.787490][ T5628] usb 4-1: config 2 interface 29 altsetting 67 has an endpoint descriptor with address 0xD8, changing to 0x88
[  444.787516][ T5628] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0x88 has invalid maxpacket 41639, setting to 1024
[  444.787547][ T5628] usb 4-1: config 2 interface 29 altsetting 67 has a duplicate endpoint with address 0x5, skipping
[  444.787571][ T5628] usb 4-1: config 2 interface 29 altsetting 67 has an invalid descriptor for endpoint zero, skipping
[  444.787592][ T5628] usb 4-1: config 2 interface 29 altsetting 67 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  444.787635][ T5628] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  444.787662][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.787687][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  444.787709][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.787732][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  444.787755][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.787779][ T5628] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  444.787815][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  444.787840][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  444.787864][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  444.787887][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  444.787912][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has an endpoint descriptor with address 0x38, changing to 0x8
[  444.787938][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.787961][ T5628] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  444.788027][ T5628] usb 4-1: config 2 interface 66 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64
[  444.788056][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  444.788079][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  444.788102][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.788125][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.788149][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  444.788172][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  444.788195][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  444.788218][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  444.788241][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  444.788264][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  444.788287][ T5628] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  444.788312][ T5628] usb 4-1: config 2 interface 80 has no altsetting 0
[  444.788331][ T5628] usb 4-1: config 2 interface 29 has no altsetting 0
[  444.788349][ T5628] usb 4-1: config 2 interface 132 has no altsetting 0
[  444.788368][ T5628] usb 4-1: config 2 interface 66 has no altsetting 0
[  444.835389][ T5628] usb 4-1: string descriptor 0 read error: -22
[  444.835573][ T5628] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=91.c6
[  444.835598][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.684636][ T5629] Bluetooth: hci3: command tx timeout
[  445.684654][ T5622] Bluetooth: hci5: command tx timeout
[  447.228015][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.305089][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.806885][ T5629] Bluetooth: hci3: command tx timeout
[  450.011988][  T822] usb 4-1: USB disconnect, device number 13
[  450.307835][ T7710] lo speed is unknown, defaulting to 1000
[  450.390313][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12
[  451.258900][ T7746] lo speed is unknown, defaulting to 1000
[  451.857814][ T5629] Bluetooth: hci3: command tx timeout
[  454.993963][ T3364] bridge_slave_1: left allmulticast mode
[  454.994001][ T3364] bridge_slave_1: left promiscuous mode
[  454.994282][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.588020][ T3364] bridge_slave_0: left allmulticast mode
[  456.588048][ T3364] bridge_slave_0: left promiscuous mode
[  456.588332][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.063932][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  458.994100][   T10] usb 2-1: Using ep0 maxpacket: 16
[  458.996459][   T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  458.996494][   T10] usb 2-1: config 0 has no interface number 0
[  458.996541][   T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  458.996568][   T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  459.050510][   T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  459.050541][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.050562][   T10] usb 2-1: Product: syz
[  459.050579][   T10] usb 2-1: Manufacturer: syz
[  459.050595][   T10] usb 2-1: SerialNumber: syz
[  459.091447][   T10] usb 2-1: config 0 descriptor??
[  459.093274][ T7831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.093450][ T7831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.329608][ T7831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.329739][ T7831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.564053][   T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  459.564078][   T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  459.564283][   T10] asix 2-1:0.251: probe with driver asix failed with error -5
[  459.571435][   T10] usb 2-1: USB disconnect, device number 13
[  466.335249][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.415069][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.470159][ T3364] bond0 (unregistering): Released all slaves
[  471.154596][ T3364] hsr_slave_0: left promiscuous mode
[  471.273981][ T3364] hsr_slave_1: left promiscuous mode
[  471.275177][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.497879][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.644337][ T5752] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  471.794235][ T5752] usb 2-1: Using ep0 maxpacket: 8
[  471.796844][ T5752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.796900][ T5752] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  471.796927][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.862061][ T5752] usb 2-1: config 0 descriptor??
[  472.078056][ T5752] usb 2-1: USB disconnect, device number 14
[  472.956415][ T3364] team0 (unregistering): Port device team_slave_1 removed
[  472.957189][ T7897] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  472.957215][ T7897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  473.063050][ T7897] vhci_hcd vhci_hcd.0: Device attached
[  473.094903][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  473.112432][ T3364] team0 (unregistering): Port device team_slave_0 removed
[  473.256249][   T10] usb 2-1: Using ep0 maxpacket: 32
[  473.268806][   T10] usb 2-1: config 0 has no interfaces?
[  473.272820][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  473.272896][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.272953][   T10] usb 2-1: Product: syz
[  473.272987][   T10] usb 2-1: Manufacturer: syz
[  473.273024][   T10] usb 2-1: SerialNumber: syz
[  473.303948][ T5752] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  473.456255][   T10] usb 2-1: config 0 descriptor??
[  473.629293][ T7891] =======================================================
[  473.629293][ T7891] WARNING: The mand mount option has been deprecated and
[  473.629293][ T7891]          and is ignored by this kernel. Remove the mand
[  473.629293][ T7891]          option from the mount to silence this warning.
[  473.629293][ T7891] =======================================================
[  473.714378][ T7899] vhci_hcd: unknown pdu 2
[  473.718282][   T10] usb 2-1: USB disconnect, device number 15
[  473.763103][ T1031] vhci_hcd vhci_hcd.1: stop threads
[  473.782605][ T1031] vhci_hcd vhci_hcd.1: release socket
[  473.782948][ T1031] vhci_hcd vhci_hcd.1: disconnect device
[  474.104013][ T5739] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  474.155545][ T5629] Bluetooth: hci2: unexpected event for opcode 0x007f
[  474.293118][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  474.293143][ T5739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.293170][ T5739] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  474.293188][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.379552][ T5739] usb 5-1: config 0 descriptor??
[  474.730009][ T7917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  474.730039][ T7917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  474.730555][ T7917] vhci_hcd vhci_hcd.0: Device attached
[  474.932273][ T5739] hid_parser_main: 469 callbacks suppressed
[  474.932350][ T5739] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  474.932382][ T5739] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  474.932408][ T5739] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  474.932434][ T5739] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  474.932459][ T5739] elan 0003:04F3:0755.0002: unknown main item tag 0x0
[  474.933627][ T5739] elan 0003:04F3:0755.0002: failed to start in urb: -90
[  475.044373][ T5725] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  475.236232][ T5725] usb 2-1: Using ep0 maxpacket: 32
[  475.239164][ T5725] usb 2-1: config 0 has no interfaces?
[  475.294648][ T5725] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  475.294681][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.294702][ T5725] usb 2-1: Product: syz
[  475.294717][ T5725] usb 2-1: Manufacturer: syz
[  475.294732][ T5725] usb 2-1: SerialNumber: syz
[  475.433134][ T5739] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  475.457058][ T5725] usb 2-1: config 0 descriptor??
[  475.681444][   T10] usb 2-1: USB disconnect, device number 16
[  475.702132][ T7918] vhci_hcd: connection closed
[  475.758155][ T1191] vhci_hcd vhci_hcd.1: stop threads
[  475.758183][ T1191] vhci_hcd vhci_hcd.1: release socket
[  475.789666][ T1191] vhci_hcd vhci_hcd.1: disconnect device
[  479.448265][ T5752] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  479.505767][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.505994][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.506238][ T7710] bridge_slave_0: entered allmulticast mode
[  479.535298][ T7710] bridge_slave_0: entered promiscuous mode
[  479.710305][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'.
[  479.846869][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.847227][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.850202][ T7710] bridge_slave_1: entered allmulticast mode
[  479.899497][ T7710] bridge_slave_1: entered promiscuous mode
[  480.630595][ T3364] bridge_slave_1: left allmulticast mode
[  480.630621][ T3364] bridge_slave_1: left promiscuous mode
[  480.630876][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.800820][ T3364] bridge_slave_0: left allmulticast mode
[  480.800856][ T3364] bridge_slave_0: left promiscuous mode
[  480.801151][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.193912][ T5725] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  481.215290][ T5752] usb 5-1: USB disconnect, device number 14
[  481.221671][ T3364] bridge_slave_1: left allmulticast mode
[  481.221700][ T3364] bridge_slave_1: left promiscuous mode
[  481.221896][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.359599][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.359638][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.359679][ T5725] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  481.359703][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.422250][ T5725] usb 4-1: config 0 descriptor??
[  481.489145][ T3364] bridge_slave_0: left allmulticast mode
[  481.489187][ T3364] bridge_slave_0: left promiscuous mode
[  481.489507][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.368224][ T5725] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0
[  482.716691][ T7969] Zero length message leads to an empty skb
[  482.746495][ T5725] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized
[  483.548188][ T7974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  483.548210][ T7974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  483.548320][ T7974] vhci_hcd vhci_hcd.0: Device attached
[  483.593673][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.684764][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.751212][ T3364] bond0 (unregistering): Released all slaves
[  483.844780][ T5725] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[  483.864051][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  484.034889][    T9] usb 2-1: Using ep0 maxpacket: 32
[  484.037141][    T9] usb 2-1: config 0 has no interfaces?
[  484.060619][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  484.060650][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.060672][    T9] usb 2-1: Product: syz
[  484.060687][    T9] usb 2-1: Manufacturer: syz
[  484.060701][    T9] usb 2-1: SerialNumber: syz
[  484.116004][    T9] usb 2-1: config 0 descriptor??
[  484.210478][ T5629] Bluetooth: hci4: unexpected event for opcode 0x007f
[  484.330889][    T9] usb 2-1: USB disconnect, device number 17
[  484.349466][ T7975] vhci_hcd: connection reset by peer
[  484.350560][  T153] vhci_hcd vhci_hcd.1: stop threads
[  484.350584][  T153] vhci_hcd vhci_hcd.1: release socket
[  484.377172][  T153] vhci_hcd vhci_hcd.1: disconnect device
[  484.383396][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.495757][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.559620][ T3364] bond0 (unregistering): Released all slaves
[  484.786596][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13
[  484.884394][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.364167][ T5739] usb 4-1: USB disconnect, device number 14
[  486.271627][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.800941][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.802547][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.802884][ T7746] bridge_slave_0: entered allmulticast mode
[  486.856659][ T7746] bridge_slave_0: entered promiscuous mode
[  488.391237][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.391543][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.391879][ T7746] bridge_slave_1: entered allmulticast mode
[  488.443368][ T7746] bridge_slave_1: entered promiscuous mode
[  488.487546][ T7710] team0: Port device team_slave_0 added
[  488.630480][ T7710] team0: Port device team_slave_1 added
[  488.857068][ T3364] hsr_slave_0: left promiscuous mode
[  488.910931][ T3364] hsr_slave_1: left promiscuous mode
[  488.912071][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.954137][ T5725] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  488.966178][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.057048][ T3364] hsr_slave_0: left promiscuous mode
[  489.096679][ T3364] hsr_slave_1: left promiscuous mode
[  489.097550][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.147632][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.043335][ T3364] team0 (unregistering): Port device team_slave_1 removed
[  490.156228][ T3364] team0 (unregistering): Port device team_slave_0 removed
[  491.718599][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  491.758042][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  491.759913][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  491.762919][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  491.773566][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  495.680612][ T5629] Bluetooth: hci0: command tx timeout
[  496.073918][ T5629] Bluetooth: hci1: unexpected event for opcode 0x007f
[  496.097811][ T3364] team0 (unregistering): Port device team_slave_1 removed
[  496.200826][ T3364] team0 (unregistering): Port device team_slave_0 removed
[  496.838393][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.051907][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.398047][ T7746] team0: Port device team_slave_0 added
[  497.443138][ T7746] team0: Port device team_slave_1 added
[  497.720403][ T5629] Bluetooth: hci1: unexpected event for opcode 0x007f
[  497.769927][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.769941][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.769962][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.774462][ T5629] Bluetooth: hci0: command tx timeout
[  497.870519][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.870534][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.870556][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.483567][ T8015] lo speed is unknown, defaulting to 1000
[  501.152044][ T5629] Bluetooth: hci0: command tx timeout
[  502.000874][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  502.000990][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  502.616602][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  502.637482][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  502.654660][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  502.691116][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14
[  502.703984][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  502.707979][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  503.186141][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'.
[  503.220214][ T5622] Bluetooth: hci0: command tx timeout
[  504.913944][ T5725] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  505.061950][ T5622] Bluetooth: hci5: command tx timeout
[  505.261834][ T5725] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  505.261866][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.334202][ T5725] usb 4-1: config 0 descriptor??
[  505.354112][ T5725] cp210x 4-1:0.0: cp210x converter detected
[  505.385951][ T8070] udevd[8070]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  505.542571][ T5725] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[  505.542604][ T5725] cp210x 4-1:0.0: querying part number failed
[  505.596434][ T5725] usb 4-1: cp210x converter now attached to ttyUSB0
[  507.124018][ T5622] Bluetooth: hci5: command tx timeout
[  508.842438][   T37] usb 4-1: USB disconnect, device number 15
[  508.963557][   T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  508.986019][   T37] cp210x 4-1:0.0: device disconnected
[  509.178943][ T5622] Bluetooth: hci2: unexpected event for opcode 0x007f
[  509.203878][ T5622] Bluetooth: hci5: command tx timeout
[  509.615616][ T3364] bridge_slave_1: left allmulticast mode
[  509.615655][ T3364] bridge_slave_1: left promiscuous mode
[  509.615948][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.793613][ T3364] bridge_slave_0: left allmulticast mode
[  509.793651][ T3364] bridge_slave_0: left promiscuous mode
[  509.794936][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.265070][ T3364] bridge_slave_1: left allmulticast mode
[  510.265110][ T3364] bridge_slave_1: left promiscuous mode
[  510.265431][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.418008][ T3364] bridge_slave_0: left allmulticast mode
[  510.418047][ T3364] bridge_slave_0: left promiscuous mode
[  510.419949][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.283841][ T5622] Bluetooth: hci5: command tx timeout
[  511.324051][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.444791][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.684458][ T3364] bond0 (unregistering): Released all slaves
[  511.713944][   T37] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  512.683885][   T37] usb 2-1: Using ep0 maxpacket: 32
[  512.691984][   T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.692013][   T37] usb 2-1: config 0 has no interfaces?
[  512.711747][   T37] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  512.711780][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.711802][   T37] usb 2-1: Product: syz
[  512.711818][   T37] usb 2-1: Manufacturer: syz
[  512.711834][   T37] usb 2-1: SerialNumber: syz
[  512.753660][   T37] usb 2-1: config 0 descriptor??
[  513.778674][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.312371][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.366162][ T3364] bond0 (unregistering): Released all slaves
[  514.498399][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15
[  514.532395][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.542574][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.542912][ T8015] bridge_slave_0: entered allmulticast mode
[  514.571266][ T8015] bridge_slave_0: entered promiscuous mode
[  514.651198][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.651641][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.651954][ T8015] bridge_slave_1: entered allmulticast mode
[  514.687470][ T8015] bridge_slave_1: entered promiscuous mode
[  514.759095][ T5622] Bluetooth: hci2: unexpected event for opcode 0x007f
[  514.919046][ T8066] lo speed is unknown, defaulting to 1000
[  514.923603][ T5606] usb 2-1: USB disconnect, device number 18
[  515.016951][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.261366][ T5739] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  516.473350][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.582176][ T5739] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  516.583353][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.626177][ T5739] usb 5-1: config 0 descriptor??
[  516.640754][ T5739] cp210x 5-1:0.0: cp210x converter detected
[  516.858759][ T5739] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  516.858791][ T5739] cp210x 5-1:0.0: querying part number failed
[  516.900377][ T5739] usb 5-1: cp210x converter now attached to ttyUSB0
[  517.042474][ T8015] team0: Port device team_slave_0 added
[  517.131676][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.169667][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.497093][ T3364] team0 (unregistering): Port device team_slave_1 removed
[  517.555426][ T3364] team0 (unregistering): Port device team_slave_0 removed
[  518.130369][   T37] usb 5-1: USB disconnect, device number 15
[  518.171297][   T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  518.224517][   T37] cp210x 5-1:0.0: device disconnected
[  518.592036][ T8189] program syz.1.509 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  518.636185][ T3364] team0 (unregistering): Port device team_slave_1 removed
[  519.465284][ T3364] team0 (unregistering): Port device team_slave_0 removed
[  519.723869][ T5606] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  519.913352][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.913389][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.913430][ T5606] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  519.913454][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.470794][ T5606] usb 2-1: config 0 descriptor??
[  520.642898][ T8015] team0: Port device team_slave_1 added
[  520.826024][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16
[  521.509518][ T5606] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0
[  521.678084][ T8205] loop8: detected capacity change from 0 to 7
[  521.721751][ T5606] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized
[  521.738680][ T8205] Dev loop8: unable to read RDB block 7
[  521.738728][ T8205]  loop8: unable to read partition table
[  521.738943][ T8205] loop8: partition table beyond EOD, truncated
[  521.738978][ T8205] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  521.921404][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.921425][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.921459][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.948460][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.948510][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.948596][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.189966][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.516'.
[  523.457693][ T8212] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  523.682253][ T8212] block (null): Could not allocate knbd recv work queue.
[  523.888530][ T5606] usb 2-1: USB disconnect, device number 19
[  524.093299][ T8015] hsr_slave_0: entered promiscuous mode
[  524.118698][ T8015] hsr_slave_1: entered promiscuous mode
[  524.262690][ T8212] nbd: failed to add new device
[  525.548325][ T8226] program syz.1.520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  530.997727][ T8254] loop8: detected capacity change from 0 to 8
[  531.020849][ T8254] Dev loop8: unable to read RDB block 8
[  531.021078][ T8254]  loop8: unable to read partition table
[  531.045921][ T8254] loop8: partition table beyond EOD, truncated
[  531.045970][ T8254] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  531.570775][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  532.226689][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  532.226725][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.233946][    T9] usb 4-1: config 0 descriptor??
[  532.238735][    T9] cp210x 4-1:0.0: cp210x converter detected
[  532.542416][    T9] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[  532.542449][    T9] cp210x 4-1:0.0: querying part number failed
[  532.598503][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  532.709178][ T8263] program syz.1.527 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  533.597401][ T8268] program syz.1.529 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  534.522995][    T9] usb 4-1: USB disconnect, device number 16
[  534.602211][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  534.624397][    T9] cp210x 4-1:0.0: device disconnected
[  534.699226][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.699619][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.699951][ T8066] bridge_slave_0: entered allmulticast mode
[  534.740603][ T8066] bridge_slave_0: entered promiscuous mode
[  534.975292][ T8283] loop8: detected capacity change from 0 to 8
[  534.983312][ T8283] Dev loop8: unable to read RDB block 8
[  534.983358][ T8283]  loop8: unable to read partition table
[  534.983582][ T8283] loop8: partition table beyond EOD, truncated
[  534.983603][ T8283] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  535.941289][ T8291] program syz.1.536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  536.168959][ T8295] program syz.1.538 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  536.354754][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.354972][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.355240][ T8066] bridge_slave_1: entered allmulticast mode
[  536.358072][ T8066] bridge_slave_1: entered promiscuous mode
[  536.624336][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  536.809208][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  536.809243][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.849348][    T9] usb 2-1: config 0 descriptor??
[  536.946973][    T9] cp210x 2-1:0.0: cp210x converter detected
[  537.155477][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.242221][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  540.554339][    T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  540.554939][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  540.554990][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  540.787776][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  540.914117][    T9] usb 2-1: USB disconnect, device number 20
[  541.074261][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  541.075074][    T9] cp210x 2-1:0.0: device disconnected
[  543.479510][ T8066] team0: Port device team_slave_0 added
[  543.510949][ T8066] team0: Port device team_slave_1 added
[  543.719274][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.719293][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.719324][ T8066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.722851][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.722868][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.722898][ T8066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.127850][ T8066] hsr_slave_0: entered promiscuous mode
[  544.144255][ T8066] hsr_slave_1: entered promiscuous mode
[  544.148354][ T8066] debugfs: 'hsr0' already exists in 'hsr'
[  544.148375][ T8066] Cannot create hsr debugfs directory
[  548.004610][ T5752] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  548.167038][ T5752] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  548.167073][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.267930][ T5752] usb 2-1: config 0 descriptor??
[  548.290737][ T5752] cp210x 2-1:0.0: cp210x converter detected
[  548.495697][ T5752] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[  548.495730][ T5752] cp210x 2-1:0.0: querying part number failed
[  548.559608][ T5752] usb 2-1: cp210x converter now attached to ttyUSB0
[  548.889718][ T8015] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  548.939795][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  548.956954][ T8015] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  548.985288][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  549.032177][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.150493][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  549.150527][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.600844][    T9] usb 5-1: config 0 descriptor??
[  549.633082][    T9] cp210x 5-1:0.0: cp210x converter detected
[  550.105946][    T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  550.148776][    T9] usb 5-1: cp210x converter now attached to ttyUSB1
[  550.339285][   T37] usb 5-1: USB disconnect, device number 16
[  550.358365][   T37] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  550.592426][ T8015] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  550.604904][   T37] cp210x 5-1:0.0: device disconnected
[  550.689765][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  550.699409][ T8015] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  550.770670][    T9] usb 2-1: USB disconnect, device number 21
[  550.794719][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  550.796517][ T8015] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  550.796524][    T9] cp210x 2-1:0.0: device disconnected
[  552.729010][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  552.821197][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  552.863182][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  552.926346][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  552.927207][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  555.469315][ T5629] Bluetooth: hci3: command tx timeout
[  557.524058][ T5629] Bluetooth: hci3: command tx timeout
[  558.244795][ T5752] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  558.739419][ T5752] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  558.739443][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.742931][ T5752] usb 5-1: config 0 descriptor??
[  558.781919][ T5752] cp210x 5-1:0.0: cp210x converter detected
[  558.971996][ T5752] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  558.972020][ T5752] cp210x 5-1:0.0: querying part number failed
[  558.990676][ T5752] usb 5-1: cp210x converter now attached to ttyUSB0
[  559.604084][ T5629] Bluetooth: hci3: command tx timeout
[  559.943540][ T8463] lo speed is unknown, defaulting to 1000
[  561.341571][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'.
[  561.472917][  T822] usb 5-1: USB disconnect, device number 17
[  562.377680][ T5629] Bluetooth: hci3: command tx timeout
[  562.510956][  T822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  562.516798][  T822] cp210x 5-1:0.0: device disconnected
[  562.960249][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  562.968528][ T5752] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  563.019420][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  563.028311][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  563.053421][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  563.053535][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  563.069873][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  563.074629][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  563.244765][ T5752] usb 4-1: Using ep0 maxpacket: 16
[  563.263190][ T5752] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  563.263236][ T5752] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  563.263261][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.358968][ T5752] usb 4-1: config 0 descriptor??
[  564.541719][ T8089] block nbd64: NBD_DISCONNECT
[  565.023006][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.023385][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.023683][ T8463] bridge_slave_0: entered allmulticast mode
[  565.050530][ T8463] bridge_slave_0: entered promiscuous mode
[  565.063337][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.078412][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.078749][ T8463] bridge_slave_1: entered allmulticast mode
[  565.088347][ T8463] bridge_slave_1: entered promiscuous mode
[  565.293934][ T5622] Bluetooth: hci0: command tx timeout
[  565.418821][ T8089] udevd[8089]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  565.580201][ T5752] usb 4-1: USB disconnect, device number 17
[  567.645237][ T5622] Bluetooth: hci0: command tx timeout
[  567.838567][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.861929][ T8637] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  567.950935][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.490720][ T8463] team0: Port device team_slave_0 added
[  568.871412][ T8463] team0: Port device team_slave_1 added
[  568.871621][ T8575] lo speed is unknown, defaulting to 1000
[  569.690628][ T5622] Bluetooth: hci0: command tx timeout
[  570.556858][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.556876][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.556909][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.664922][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.664941][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.664973][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.763826][ T5622] Bluetooth: hci0: command tx timeout
[  571.944071][ T1500] bridge_slave_1: left allmulticast mode
[  571.944106][ T1500] bridge_slave_1: left promiscuous mode
[  571.944348][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.107079][ T1500] bridge_slave_0: left allmulticast mode
[  572.107107][ T1500] bridge_slave_0: left promiscuous mode
[  572.107335][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.477387][ T1500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.674721][ T1500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.774394][ T1500] bond0 (unregistering): Released all slaves
[  574.738303][ T1500] hsr_slave_0: left promiscuous mode
[  574.778714][ T1500] hsr_slave_1: left promiscuous mode
[  574.779599][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.836751][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.624328][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  577.786107][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.786149][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.786179][   T10] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  577.786196][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.825593][   T10] usb 5-1: config 0 descriptor??
[  577.868376][ T5635] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  578.066454][ T5635] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  578.066552][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.133307][ T5635] usb 2-1: config 0 descriptor??
[  578.185703][ T5635] cp210x 2-1:0.0: cp210x converter detected
[  578.441637][ T5635] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[  578.441669][ T5635] cp210x 2-1:0.0: querying part number failed
[  578.584560][ T5635] usb 2-1: cp210x converter now attached to ttyUSB0
[  578.740162][   T10] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0
[  578.848942][ T1500] team0 (unregistering): Port device team_slave_1 removed
[  578.982414][   T10] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized
[  579.074728][ T1500] team0 (unregistering): Port device team_slave_0 removed
[  579.699168][ T8463] hsr_slave_0: entered promiscuous mode
[  579.705788][ T8463] hsr_slave_1: entered promiscuous mode
[  580.313894][  T822] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  580.483850][  T822] usb 4-1: Using ep0 maxpacket: 8
[  580.487000][  T822] usb 4-1: unable to get BOS descriptor or descriptor too short
[  580.488515][  T822] usb 4-1: config 2 has an invalid interface number: 80 but max is 3
[  580.488546][  T822] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  580.488566][  T822] usb 4-1: config 2 has an invalid interface number: 29 but max is 3
[  580.488589][  T822] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  580.488608][  T822] usb 4-1: config 2 has an invalid interface number: 132 but max is 3
[  580.488629][  T822] usb 4-1: config 2 has an invalid interface number: 66 but max is 3
[  580.488651][  T822] usb 4-1: config 2 has no interface number 0
[  580.488672][  T822] usb 4-1: config 2 has no interface number 1
[  580.488777][  T822] usb 4-1: config 2 has no interface number 2
[  580.488796][  T822] usb 4-1: config 2 has no interface number 3
[  580.488897][  T822] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xF has invalid maxpacket 63716, setting to 64
[  580.488926][  T822] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  580.488956][  T822] usb 4-1: config 2 interface 29 altsetting 67 has an endpoint descriptor with address 0xD8, changing to 0x88
[  580.488984][  T822] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0x88 has invalid maxpacket 41639, setting to 1024
[  580.489017][  T822] usb 4-1: config 2 interface 29 altsetting 67 has a duplicate endpoint with address 0x5, skipping
[  580.489042][  T822] usb 4-1: config 2 interface 29 altsetting 67 has an invalid descriptor for endpoint zero, skipping
[  580.489065][  T822] usb 4-1: config 2 interface 29 altsetting 67 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  580.489109][  T822] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  580.489136][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489160][  T822] usb 4-1: config 2 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  580.489182][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489206][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  580.489229][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489254][  T822] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  580.489281][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  580.489304][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  580.489337][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  580.489361][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  580.489387][  T822] usb 4-1: config 2 interface 132 altsetting 3 has an endpoint descriptor with address 0x38, changing to 0x8
[  580.489414][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489438][  T822] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  580.489477][  T822] usb 4-1: config 2 interface 66 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64
[  580.489505][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  580.489530][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  580.489553][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489577][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489601][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  580.489626][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  580.489650][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  580.489674][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  580.489698][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  580.489721][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  580.489746][  T822] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  580.489771][  T822] usb 4-1: config 2 interface 80 has no altsetting 0
[  580.489792][  T822] usb 4-1: config 2 interface 29 has no altsetting 0
[  580.489894][  T822] usb 4-1: config 2 interface 132 has no altsetting 0
[  580.489915][  T822] usb 4-1: config 2 interface 66 has no altsetting 0
[  580.517466][  T822] usb 4-1: string descriptor 0 read error: -22
[  580.518078][  T822] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=91.c6
[  580.518146][  T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.078483][ T5752] usb 2-1: USB disconnect, device number 22
[  581.127423][ T5752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  581.141674][ T5752] cp210x 2-1:0.0: device disconnected
[  581.265143][   T37] usb 5-1: USB disconnect, device number 18
[  583.538656][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.551299][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.883918][ T8794] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  583.952321][  T822] usb 4-1: USB disconnect, device number 18
[  584.844087][ T1500] bridge_slave_1: left allmulticast mode
[  584.844123][ T1500] bridge_slave_1: left promiscuous mode
[  584.844465][ T1500] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.964006][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  585.008471][ T1500] bridge_slave_0: left allmulticast mode
[  585.008509][ T1500] bridge_slave_0: left promiscuous mode
[  585.008813][ T1500] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.123936][   T10] usb 5-1: Using ep0 maxpacket: 8
[  585.127399][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.127459][   T10] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  585.127486][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.213069][   T10] usb 5-1: config 0 descriptor??
[  585.281338][   T10] uvcvideo 5-1:0.0: Found UVC 0.00 device <unnamed> (05a9:2630)
[  585.281384][   T10] uvcvideo 5-1:0.0: No valid video chain found.
[  586.039173][   T10] usb 5-1: USB disconnect, device number 19
[  587.390485][ T1500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  587.508191][ T1500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  587.678749][ T1500] bond0 (unregistering): Released all slaves
[  587.748293][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.628'.
[  588.960480][ T8735] udevd[8735]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  589.210762][ T8857] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  589.883880][ T1500] hsr_slave_0: left promiscuous mode
[  589.932523][ T1500] hsr_slave_1: left promiscuous mode
[  589.935666][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.964881][ T1500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.893207][ T8884] program syz.3.640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  594.021409][ T1500] team0 (unregistering): Port device team_slave_1 removed
[  594.114745][ T1500] team0 (unregistering): Port device team_slave_0 removed
[  595.168922][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.171642][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.171919][ T8575] bridge_slave_0: entered allmulticast mode
[  595.207442][ T8575] bridge_slave_0: entered promiscuous mode
[  595.245364][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.247807][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.248269][ T8575] bridge_slave_1: entered allmulticast mode
[  595.281319][ T8575] bridge_slave_1: entered promiscuous mode
[  596.006012][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.050454][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.143148][ T8575] team0: Port device team_slave_0 added
[  599.349988][ T8575] team0: Port device team_slave_1 added
[  599.657586][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  599.657605][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  599.657636][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  599.660799][ T5622] Bluetooth: hci4: unexpected event for opcode 0x4889
[  599.681624][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  599.681667][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  599.681743][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.278832][ T8575] hsr_slave_0: entered promiscuous mode
[  600.296847][ T8575] hsr_slave_1: entered promiscuous mode
[  600.308656][ T8575] debugfs: 'hsr0' already exists in 'hsr'
[  600.308688][ T8575] Cannot create hsr debugfs directory
[  601.913498][ T8463] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  602.130316][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  602.211505][ T8463] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  602.308057][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.339530][ T8463] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  604.092900][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  604.623156][ T8463] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  604.720966][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  605.708575][ T8974] loop8: detected capacity change from 0 to 8
[  605.724334][ T8974] Dev loop8: unable to read RDB block 8
[  605.724384][ T8974]  loop8: unable to read partition table
[  605.724655][ T8974] loop8: partition table beyond EOD, truncated
[  605.724677][ T8974] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  605.774953][ T8575] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  605.936260][ T8575] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  605.963511][ T8575] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  606.052478][ T8575] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  606.068644][ T8575] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  606.094495][ T8575] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  606.101964][ T8575] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  606.131396][ T8575] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  607.602000][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.864849][ T8463] 8021q: adding VLAN 0 to HW filter on device team0
[  607.918857][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.953587][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.962534][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.056656][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.056821][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.149163][ T8575] 8021q: adding VLAN 0 to HW filter on device team0
[  608.238181][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.238443][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.361799][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.362018][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.914005][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.374118][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.140555][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  613.209509][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  613.218836][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  613.249652][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  613.250610][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  615.526249][ T5622] Bluetooth: hci5: command tx timeout
[  616.509834][ T8575] veth0_vlan: entered promiscuous mode
[  616.536313][ T8575] veth1_vlan: entered promiscuous mode
[  617.609789][ T5622] Bluetooth: hci5: command tx timeout
[  618.144659][ T8575] veth0_macvtap: entered promiscuous mode
[  618.197193][ T8575] veth1_macvtap: entered promiscuous mode
[  620.112148][   T37] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  620.349485][ T5622] Bluetooth: hci5: command tx timeout
[  620.446755][   T37] usb 5-1: config 0 has no interfaces?
[  620.468083][   T37] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  620.468116][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  620.468139][   T37] usb 5-1: Product: syz
[  620.468154][   T37] usb 5-1: Manufacturer: syz
[  620.468169][   T37] usb 5-1: SerialNumber: syz
[  620.522840][   T37] usb 5-1: config 0 descriptor??
[  620.631763][ T9046] lo speed is unknown, defaulting to 1000
[  621.449962][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  621.487569][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  621.508832][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  621.518643][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  621.528902][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  622.264347][ T5725] usb 5-1: USB disconnect, device number 20
[  622.404069][ T5622] Bluetooth: hci5: command tx timeout
[  623.962896][ T5622] Bluetooth: hci0: command tx timeout
[  624.214196][ T9112] lo speed is unknown, defaulting to 1000
[  624.494830][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  624.494940][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  624.655620][ T1438] bridge_slave_1: left allmulticast mode
[  624.655659][ T1438] bridge_slave_1: left promiscuous mode
[  624.655981][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.847278][ T1438] bridge_slave_0: left allmulticast mode
[  624.847317][ T1438] bridge_slave_0: left promiscuous mode
[  624.847602][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.184687][ T5622] Bluetooth: hci0: command tx timeout
[  629.206785][ T5629] Bluetooth: hci0: command tx timeout
[  630.344657][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  631.283934][ T5629] Bluetooth: hci0: command tx timeout
[  631.454264][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  631.482635][ T1438] bond0 (unregistering): Released all slaves
[  631.701791][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9
[  631.781596][ T9207] program syz.1.705 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  631.874036][ T5635] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  632.033335][ T5635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  632.033360][ T5635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  632.033387][ T5635] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  632.033406][ T5635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.092759][ T5635] usb 5-1: config 0 descriptor??
[  632.343895][ T1438] hsr_slave_0: left promiscuous mode
[  632.383829][ T1438] hsr_slave_1: left promiscuous mode
[  632.386182][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.408416][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.772525][ T5635] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0
[  632.919493][ T5635] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized
[  635.275597][ T1438] team0 (unregistering): Port device team_slave_1 removed
[  637.874600][ T1438] team0 (unregistering): Port device team_slave_0 removed
[  638.588977][ T5635] usb 5-1: USB disconnect, device number 21
[  638.613930][ T5752] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  638.886446][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.886807][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.890435][ T9046] bridge_slave_0: entered allmulticast mode
[  638.901461][ T9046] bridge_slave_0: entered promiscuous mode
[  638.938969][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.939324][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.939672][ T9046] bridge_slave_1: entered allmulticast mode
[  638.954562][ T9046] bridge_slave_1: entered promiscuous mode
[  639.063553][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.063588][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.063628][ T5752] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  639.063653][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.641084][ T5752] usb 2-1: config 0 descriptor??
[  639.918446][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.063165][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.783311][ T5752] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -71
[  641.829693][ T5752] usb 2-1: USB disconnect, device number 23
[  642.212846][ T9046] team0: Port device team_slave_0 added
[  642.219482][ T9046] team0: Port device team_slave_1 added
[  643.759727][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.759746][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.759778][ T9046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  645.939597][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.939616][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  645.939648][ T9046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.164901][ T9046] hsr_slave_0: entered promiscuous mode
[  647.175522][ T9046] hsr_slave_1: entered promiscuous mode
[  648.795173][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.797930][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.798219][ T9112] bridge_slave_0: entered allmulticast mode
[  648.810729][ T9112] bridge_slave_0: entered promiscuous mode
[  648.930374][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.930682][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.931011][ T9112] bridge_slave_1: entered allmulticast mode
[  648.971270][ T9112] bridge_slave_1: entered promiscuous mode
[  649.266723][ T9308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  649.266744][ T9308] IPv6: NLM_F_CREATE should be set when creating new route
[  649.295491][ T9308] IPv6: NLM_F_CREATE should be set when creating new route
[  649.736303][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10
[  649.766475][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.175520][ T5739] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  654.213208][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.026973][ T5739] usb 4-1: Using ep0 maxpacket: 8
[  656.029834][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short
[  656.031659][ T5739] usb 4-1: config 2 has an invalid interface number: 80 but max is 3
[  656.031690][ T5739] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  656.031709][ T5739] usb 4-1: config 2 has an invalid interface number: 29 but max is 3
[  656.031731][ T5739] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  656.031750][ T5739] usb 4-1: config 2 has an invalid interface number: 132 but max is 3
[  656.031772][ T5739] usb 4-1: config 2 has an invalid interface number: 66 but max is 3
[  656.031795][ T5739] usb 4-1: config 2 has no interface number 0
[  656.031811][ T5739] usb 4-1: config 2 has no interface number 1
[  656.031828][ T5739] usb 4-1: config 2 has no interface number 2
[  656.031844][ T5739] usb 4-1: config 2 has no interface number 3
[  656.031957][ T5739] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xF has invalid maxpacket 63716, setting to 64
[  656.031988][ T5739] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  656.032017][ T5739] usb 4-1: config 2 interface 29 altsetting 67 has an endpoint descriptor with address 0xD8, changing to 0x88
[  656.032043][ T5739] usb 4-1: config 2 interface 29 altsetting 67 endpoint 0x88 has invalid maxpacket 41639, setting to 1024
[  656.032075][ T5739] usb 4-1: config 2 interface 29 altsetting 67 has a duplicate endpoint with address 0x5, skipping
[  656.032098][ T5739] usb 4-1: config 2 interface 29 altsetting 67 has an invalid descriptor for endpoint zero, skipping
[  656.032119][ T5739] usb 4-1: config 2 interface 29 altsetting 67 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  656.032161][ T5739] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  656.032188][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032222][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  656.032245][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032269][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  656.032292][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032316][ T5739] usb 4-1: config 2 interface 132 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  656.032343][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  656.032367][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  656.032390][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  656.032413][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  656.032437][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has an endpoint descriptor with address 0x38, changing to 0x8
[  656.032463][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032487][ T5739] usb 4-1: config 2 interface 132 altsetting 3 has a duplicate endpoint with address 0xC, skipping
[  656.032539][ T5739] usb 4-1: config 2 interface 66 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64
[  656.032566][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  656.032590][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  656.032613][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032636][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032660][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  656.032685][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  656.032708][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  656.032732][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  656.032755][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  656.032777][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  656.032799][ T5739] usb 4-1: config 2 interface 66 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  656.032823][ T5739] usb 4-1: config 2 interface 80 has no altsetting 0
[  656.032841][ T5739] usb 4-1: config 2 interface 29 has no altsetting 0
[  656.032859][ T5739] usb 4-1: config 2 interface 132 has no altsetting 0
[  656.032877][ T5739] usb 4-1: config 2 interface 66 has no altsetting 0
[  656.356465][ T5739] usb 4-1: string descriptor 0 read error: -22
[  656.356947][ T5739] usb 4-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=91.c6
[  656.357013][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.996352][  T822] usb 4-1: USB disconnect, device number 19
[  659.683445][ T9112] team0: Port device team_slave_0 added
[  659.739251][ T9112] team0: Port device team_slave_1 added
[  659.859304][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.859323][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.859353][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.862342][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.862356][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.862381][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.686414][ T9112] hsr_slave_0: entered promiscuous mode
[  660.691912][ T9112] hsr_slave_1: entered promiscuous mode
[  660.713448][ T9112] debugfs: 'hsr0' already exists in 'hsr'
[  660.713470][ T9112] Cannot create hsr debugfs directory
[  663.559762][ T9367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  663.559782][ T9367] IPv6: NLM_F_CREATE should be set when creating new route
[  663.559858][ T9367] IPv6: NLM_F_CREATE should be set when creating new route
[  665.535962][ T9371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  665.535981][ T9371] IPv6: NLM_F_CREATE should be set when creating new route
[  665.536036][ T9371] IPv6: NLM_F_CREATE should be set when creating new route
[  672.910200][ T9421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  673.705154][   T44] bridge_slave_1: left allmulticast mode
[  673.705193][   T44] bridge_slave_1: left promiscuous mode
[  673.707008][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.555907][   T44] bridge_slave_0: left allmulticast mode
[  675.555944][   T44] bridge_slave_0: left promiscuous mode
[  675.556249][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.893795][ T5628] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  676.099325][ T5628] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  676.099360][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.137662][ T5628] usb 5-1: config 0 descriptor??
[  676.168137][ T5628] cp210x 5-1:0.0: cp210x converter detected
[  676.317591][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  677.169587][ T5628] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  677.179592][ T5628] cp210x 5-1:0.0: GPIO initialisation failed: -524
[  677.182927][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  677.190063][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  677.199991][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  677.203024][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  677.237413][ T5628] usb 5-1: cp210x converter now attached to ttyUSB0
[  677.431794][ T5628] usb 5-1: USB disconnect, device number 22
[  677.637201][ T5628] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  677.638040][ T5628] cp210x 5-1:0.0: device disconnected
[  680.637609][ T5622] Bluetooth: hci3: command tx timeout
[  682.644443][ T5629] Bluetooth: hci3: command tx timeout
[  683.310362][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  683.362673][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  683.366495][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  683.381903][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  683.407375][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  683.898411][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.999371][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  684.067722][   T44] bond0 (unregistering): Released all slaves
[  684.741576][ T5629] Bluetooth: hci3: command tx timeout
[  685.533867][ T5629] Bluetooth: hci6: command tx timeout
[  686.533020][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  686.559957][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  686.775453][   T44] hsr_slave_0: left promiscuous mode
[  686.800323][ T9528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  686.804611][ T5629] Bluetooth: hci3: command tx timeout
[  686.823232][   T44] hsr_slave_1: left promiscuous mode
[  688.444459][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.713368][ T5629] Bluetooth: hci6: command tx timeout
[  688.754570][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.044533][   T44] veth1_macvtap: left promiscuous mode
[  690.044644][   T44] veth0_macvtap: left promiscuous mode
[  690.044938][   T44] veth1_vlan: left promiscuous mode
[  690.045133][   T44] veth0_vlan: left promiscuous mode
[  690.429938][ T9538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  690.429958][ T9538] IPv6: NLM_F_CREATE should be set when creating new route
[  690.430012][ T9538] IPv6: NLM_F_CREATE should be set when creating new route
[  690.743785][ T5629] Bluetooth: hci6: command tx timeout
[  692.205292][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  692.356361][   T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  692.356392][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.393700][   T10] usb 2-1: config 0 descriptor??
[  692.399891][   T10] cp210x 2-1:0.0: cp210x converter detected
[  692.804577][ T5629] Bluetooth: hci6: command tx timeout
[  692.810749][   T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  692.813390][   T10] cp210x 2-1:0.0: GPIO initialisation failed: -524
[  692.866026][   T10] usb 2-1: cp210x converter now attached to ttyUSB0
[  693.121272][   T10] usb 2-1: USB disconnect, device number 24
[  693.141703][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  693.142502][   T10] cp210x 2-1:0.0: device disconnected
[  693.841590][   T44] team0 (unregistering): Port device team_slave_1 removed
[  694.168905][   T44] team0 (unregistering): Port device team_slave_0 removed
[  698.339668][ T9490] lo speed is unknown, defaulting to 1000
[  698.358465][ T9448] lo speed is unknown, defaulting to 1000
[  701.701433][ T9614] program syz.4.781 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  701.987208][ T9616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  701.987237][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  701.987332][ T9616] vhci_hcd vhci_hcd.0: Device attached
[  702.134858][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  703.599634][    T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  703.653943][   T10] usb 4-1: Using ep0 maxpacket: 32
[  703.657139][   T10] usb 4-1: config 0 has no interfaces?
[  703.683447][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  703.683482][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.683504][   T10] usb 4-1: Product: syz
[  703.683519][   T10] usb 4-1: Manufacturer: syz
[  703.683535][   T10] usb 4-1: SerialNumber: syz
[  703.793544][   T10] usb 4-1: config 0 descriptor??
[  704.058606][ T9452] usb 4-1: USB disconnect, device number 20
[  704.080770][ T9623] usbip_core: unknown command
[  704.080858][ T9623] vhci_hcd: unknown pdu 302055426
[  704.080872][ T9623] usbip_core: unknown command
[  704.230389][ T8318] vhci_hcd vhci_hcd.3: stop threads
[  704.230418][ T8318] vhci_hcd vhci_hcd.3: release socket
[  704.267791][ T8318] vhci_hcd vhci_hcd.3: disconnect device
[  705.262883][ T9637] binder: 9636:9637 ioctl c0306201 0 returned -14
[  705.534925][ T9643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  708.724044][    T9] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  708.783315][ T9664] program syz.1.791 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  710.063855][  T822] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  710.234844][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.235695][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.236003][ T9448] bridge_slave_0: entered allmulticast mode
[  710.240227][  T822] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  710.240258][  T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.240281][  T822] usb 4-1: Product: syz
[  710.240297][  T822] usb 4-1: Manufacturer: syz
[  710.240312][  T822] usb 4-1: SerialNumber: syz
[  710.298820][ T9448] bridge_slave_0: entered promiscuous mode
[  710.645569][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.645919][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.646271][ T9448] bridge_slave_1: entered allmulticast mode
[  710.651959][ T9448] bridge_slave_1: entered promiscuous mode
[  710.778530][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  711.626320][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  711.626351][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.674603][    T9] usb 2-1: config 0 descriptor??
[  711.678213][    T9] cp210x 2-1:0.0: cp210x converter detected
[  711.688413][  T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  711.688516][  T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  712.261774][ T9693] binder: 9692:9693 ioctl c0306201 0 returned -14
[  712.353603][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  712.353698][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  712.388314][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  712.392235][    T9] usb 2-1: USB disconnect, device number 25
[  712.434529][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  712.435338][    T9] cp210x 2-1:0.0: device disconnected
[  713.247375][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.249216][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.251151][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.265706][ T9490] bridge_slave_0: entered allmulticast mode
[  713.339063][ T9490] bridge_slave_0: entered promiscuous mode
[  713.378235][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  713.381769][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.382103][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.382471][ T9490] bridge_slave_1: entered allmulticast mode
[  713.416622][ T9490] bridge_slave_1: entered promiscuous mode
[  713.634894][  T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  713.634939][  T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  713.667018][  T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  713.712147][  T822] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  713.898927][ T9705] program syz.4.800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  714.046615][  T822] usb 4-1: USB disconnect, device number 21
[  714.076773][ T9708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  716.396682][ T9448] team0: Port device team_slave_0 added
[  716.412722][ T9448] team0: Port device team_slave_1 added
[  716.431053][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.471731][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.544141][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.544168][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.544198][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  716.693316][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  716.693336][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.693368][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  716.747193][ T9490] team0: Port device team_slave_0 added
[  717.125472][ T9490] team0: Port device team_slave_1 added
[  717.431389][ T9719] binder: 9718:9719 ioctl c0306201 0 returned -14
[  717.723427][ T9722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  719.692384][ T5629] Bluetooth: hci4: unexpected event for opcode 0x007f
[  720.299653][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.299675][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.299706][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.943086][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.943106][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.943139][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.999765][ T9448] hsr_slave_0: entered promiscuous mode
[  721.002208][ T9448] hsr_slave_1: entered promiscuous mode
[  721.017570][ T9448] debugfs: 'hsr0' already exists in 'hsr'
[  721.017599][ T9448] Cannot create hsr debugfs directory
[  721.450365][ T9452] kernel write not supported for file /dsp (pid: 9452 comm: kworker/0:5)
[  721.528048][ T9745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  721.530461][ T9743] program syz.4.811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  723.665018][ T9751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  726.044086][   T44] bridge_slave_1: left allmulticast mode
[  726.044124][   T44] bridge_slave_1: left promiscuous mode
[  726.044427][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.093979][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  726.185550][   T44] bridge_slave_0: left allmulticast mode
[  726.185588][   T44] bridge_slave_0: left promiscuous mode
[  726.193062][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.246909][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  726.246942][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.274964][    T9] usb 2-1: config 0 descriptor??
[  726.291905][    T9] cp210x 2-1:0.0: cp210x converter detected
[  726.693458][    T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  726.702897][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -524
[  726.719374][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  727.038110][    T9] usb 2-1: USB disconnect, device number 26
[  727.059729][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  727.061765][    T9] cp210x 2-1:0.0: device disconnected
[  728.799272][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  728.980011][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  729.518563][   T44] bond0 (unregistering): Released all slaves
[  730.972567][ T9490] hsr_slave_0: entered promiscuous mode
[  730.976400][ T9490] hsr_slave_1: entered promiscuous mode
[  730.979375][ T9490] debugfs: 'hsr0' already exists in 'hsr'
[  730.979402][ T9490] Cannot create hsr debugfs directory
[  731.645283][   T44] hsr_slave_0: left promiscuous mode
[  731.684059][   T44] hsr_slave_1: left promiscuous mode
[  731.686455][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  731.724940][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  731.763930][   T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  731.915024][   T37] usb 5-1: Using ep0 maxpacket: 16
[  731.917400][   T37] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  731.917427][   T37] usb 5-1: config 0 has no interface number 0
[  731.917473][   T37] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.917500][   T37] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.917539][   T37] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  731.917565][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.989609][   T37] usb 5-1: config 0 descriptor??
[  732.193987][ T9452] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  732.354305][ T9452] usb 4-1: Using ep0 maxpacket: 32
[  732.356762][ T9452] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  732.356791][ T9452] usb 4-1: config 0 has no interface number 0
[  732.360151][ T9452] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  732.360182][ T9452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.360204][ T9452] usb 4-1: Product: syz
[  732.360218][ T9452] usb 4-1: Manufacturer: syz
[  732.360233][ T9452] usb 4-1: SerialNumber: syz
[  732.425059][ T9452] usb 4-1: config 0 descriptor??
[  732.456038][ T9452] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  732.456113][ T9452] usb 4-1: selecting invalid altsetting 1
[  732.456133][ T9452] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  732.613310][ T9452] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  732.654281][   T37] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71
[  732.654348][   T37] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71
[  732.654440][   T37] uclogic 0003:28BD:0071.0008: pen probing failed: -71
[  732.654481][   T37] uclogic 0003:28BD:0071.0008: failed probing parameters: -71
[  732.654605][   T37] uclogic 0003:28BD:0071.0008: probe with driver uclogic failed with error -71
[  732.684151][ T9452] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  732.684514][ T9452] usb 4-1: media controller created
[  732.716652][   T37] usb 5-1: USB disconnect, device number 23
[  732.824554][ T9452] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  732.843812][ T5725] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  732.915405][   T44] team0 (unregistering): Port device team_slave_1 removed
[  732.942822][ T9452] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  732.942864][ T9452] zl10353_read_register: readreg error (reg=127, ret==-71)
[  732.943356][ T9452] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  732.969613][   T44] team0 (unregistering): Port device team_slave_0 removed
[  733.009008][ T5725] usb 2-1: Using ep0 maxpacket: 32
[  733.012876][ T5725] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  733.012904][ T5725] usb 2-1: config 0 has no interface number 0
[  733.038557][ T5725] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  733.038590][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.038612][ T5725] usb 2-1: Product: syz
[  733.038627][ T5725] usb 2-1: Manufacturer: syz
[  733.038642][ T5725] usb 2-1: SerialNumber: syz
[  733.085285][ T5725] usb 2-1: config 0 descriptor??
[  733.103003][ T9452] usb 4-1: USB disconnect, device number 22
[  733.132586][ T5725] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  733.132615][ T5725] usb 2-1: selecting invalid altsetting 1
[  733.132633][ T5725] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  733.192543][ T5725] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  733.192997][ T5725] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  733.193058][ T5725] usb 2-1: media controller created
[  733.249293][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  734.576358][ T5725] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  734.576418][ T5725] zl10353_read_register: readreg error (reg=127, ret==-71)
[  735.524200][ T5725] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  735.995768][ T5725] usb 2-1: USB disconnect, device number 27
[  737.022619][ T9801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  739.530498][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  739.599014][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  739.601357][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  739.627160][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  739.629678][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  739.732933][ T9819] program syz.3.832 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  740.495523][   T37] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  740.644240][   T37] usb 4-1: Using ep0 maxpacket: 32
[  740.665395][   T37] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  740.687286][   T37] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  740.687320][   T37] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  740.687342][   T37] usb 4-1: Product: syz
[  740.687357][   T37] usb 4-1: Manufacturer: syz
[  740.687372][   T37] usb 4-1: SerialNumber: syz
[  740.787512][   T37] usb 4-1: config 0 descriptor??
[  740.801288][ T9826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  742.100578][ T5622] Bluetooth: hci0: command tx timeout
[  742.729258][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9
[  742.985911][ T9838] usb usb7: usbfs: process 9838 (syz.4.835) did not claim interface 0 before use
[  743.221453][   T37] usb 4-1: USB disconnect, device number 23
[  744.674668][ T5622] Bluetooth: hci0: command tx timeout
[  745.059241][   T44] bridge_slave_1: left allmulticast mode
[  745.059277][   T44] bridge_slave_1: left promiscuous mode
[  745.062153][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.846564][ T5622] Bluetooth: hci0: command tx timeout
[  747.172196][   T44] bridge_slave_0: left allmulticast mode
[  747.172238][   T44] bridge_slave_0: left promiscuous mode
[  747.172559][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.372994][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  747.373110][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  747.455534][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  747.508035][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  747.509530][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  747.511095][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  747.515331][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  747.787484][ T9862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  747.794364][   T44] bridge_slave_1: left allmulticast mode
[  747.794461][   T44] bridge_slave_1: left promiscuous mode
[  747.795217][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.466827][ T5622] Bluetooth: hci0: command tx timeout
[  749.690914][ T5629] Bluetooth: hci3: command tx timeout
[  749.832673][   T44] bridge_slave_0: left allmulticast mode
[  749.832713][   T44] bridge_slave_0: left promiscuous mode
[  749.833017][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.962683][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  751.092190][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  751.173929][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  751.345611][   T44] bond0 (unregistering): Released all slaves
[  751.438474][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  751.438518][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  751.442818][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  751.442852][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.442875][    T9] usb 4-1: Product: syz
[  751.442891][    T9] usb 4-1: Manufacturer: syz
[  751.442907][    T9] usb 4-1: SerialNumber: syz
[  751.763988][ T5629] Bluetooth: hci3: command tx timeout
[  751.780941][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.796794][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.819771][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  751.873028][    T9] usb 4-1: USB disconnect, device number 24
[  752.418925][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  752.538691][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  752.636237][   T44] bond0 (unregistering): Released all slaves
[  752.755395][ T9882] program syz.4.841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  753.256961][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10
[  753.433539][ T9814] lo speed is unknown, defaulting to 1000
[  753.464608][ T5725] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  753.623846][ T5725] usb 4-1: Using ep0 maxpacket: 32
[  753.626383][ T5725] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  753.629394][ T5725] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  753.629437][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  753.629461][ T5725] usb 4-1: Product: syz
[  753.629478][ T5725] usb 4-1: Manufacturer: syz
[  753.629493][ T5725] usb 4-1: SerialNumber: syz
[  753.654972][ T5725] usb 4-1: config 0 descriptor??
[  753.657939][ T9892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  753.847465][ T5629] Bluetooth: hci3: command tx timeout
[  754.301358][ T5725] usb 4-1: USB disconnect, device number 25
[  754.318644][   T44] hsr_slave_0: left promiscuous mode
[  754.423395][   T44] hsr_slave_1: left promiscuous mode
[  754.432890][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  755.921952][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  755.924239][ T5629] Bluetooth: hci3: command tx timeout
[  757.933826][   T44] hsr_slave_0: left promiscuous mode
[  757.995246][   T44] hsr_slave_1: left promiscuous mode
[  757.996206][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.088450][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.005476][   T44] team0 (unregistering): Port device team_slave_1 removed
[  762.187728][   T44] team0 (unregistering): Port device team_slave_0 removed
[  764.134134][ T9949] input: syz0 as /devices/virtual/input/input5
[  765.296719][ T9964] loop1: detected capacity change from 0 to 40427
[  765.378271][ T9964] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  765.378296][ T9964] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  765.479947][ T9964] F2FS-fs (loop1): invalid crc value
[  765.674935][ T9964] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  765.810743][ T9964] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  765.811010][ T9964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  766.297176][ T5617] syz-executor: attempt to access beyond end of device
[  766.297176][ T5617] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  766.394909][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  766.394947][ T5617] Tainted: [L]=SOFTLOCKUP
[  766.394955][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  766.394975][ T5617] Call Trace:
[  766.395037][ T5617]  <TASK>
[  766.395103][ T5617]  dump_stack_lvl+0xe8/0x150
[  766.395185][ T5617]  f2fs_stop_checkpoint+0x3cd/0x590
[  766.395230][ T5617]  f2fs_write_end_io+0x1274/0x1740
[  766.395281][ T5617]  __submit_merged_bio+0x256/0x6a0
[  766.395313][ T5617]  __submit_merged_write_cond+0x3c9/0x4e0
[  766.395360][ T5617]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  766.395432][ T5617]  f2fs_write_data_pages+0x287e/0x34f0
[  766.395498][ T5617]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.395571][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.395603][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.395651][ T5617]  ? do_raw_spin_lock+0x12b/0x2f0
[  766.395687][ T5617]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  766.395715][ T5617]  ? lockdep_hardirqs_on+0x7a/0x110
[  766.395741][ T5617]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  766.395769][ T5617]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.395807][ T5617]  do_writepages+0x32e/0x550
[  766.395843][ T5617]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  766.395879][ T5617]  ? rt_spin_unlock+0x14f/0x200
[  766.395925][ T5617]  filemap_fdatawrite+0x1ec/0x2f0
[  766.395965][ T5617]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  766.395998][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.396060][ T5617]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  766.396103][ T5617]  ? rt_spin_unlock+0x160/0x200
[  766.396140][ T5617]  f2fs_sync_dirty_inodes+0x30e/0x830
[  766.396185][ T5617]  f2fs_write_checkpoint+0x9df/0x26a0
[  766.396214][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.396274][ T5617]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  766.396361][ T5617]  kill_f2fs_super+0x314/0x730
[  766.396397][ T5617]  ? __pfx_kill_f2fs_super+0x10/0x10
[  766.396439][ T5617]  ? lockdep_hardirqs_on+0x7a/0x110
[  766.396480][ T5617]  deactivate_locked_super+0xbc/0x130
[  766.396518][ T5617]  cleanup_mnt+0x437/0x4d0
[  766.396541][ T5617]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.396571][ T5617]  task_work_run+0x1d9/0x270
[  766.396605][ T5617]  ? __pfx_task_work_run+0x10/0x10
[  766.396646][ T5617]  exit_to_user_mode_loop+0xf3/0x4d0
[  766.396670][ T5617]  ? rcu_is_watching+0x15/0xb0
[  766.396700][ T5617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.396724][ T5617]  do_syscall_64+0x33e/0x560
[  766.396749][ T5617]  ? trace_irq_disable+0x3b/0x140
[  766.396773][ T5617]  ? clear_bhb_loop+0x40/0x90
[  766.396808][ T5617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.396832][ T5617] RIP: 0033:0x7f9dcb1fe097
[  766.396893][ T5617] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  766.396920][ T5617] RSP: 002b:00007ffd0a356258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  766.396970][ T5617] RAX: 0000000000000000 RBX: 00007f9dcb2921ca RCX: 00007f9dcb1fe097
[  766.396985][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0a356310
[  766.396999][ T5617] RBP: 00007ffd0a356310 R08: 00007ffd0a357310 R09: 00000000ffffffff
[  766.397013][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0a3573a0
[  766.397027][ T5617] R13: 00007f9dcb2921ca R14: 00000000000bae19 R15: 00007ffd0a3573e0
[  766.397061][ T5617]  </TASK>
[  766.401669][ T5617] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  766.524974][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  766.525032][ T5617] Tainted: [L]=SOFTLOCKUP
[  766.525041][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  766.525055][ T5617] Call Trace:
[  766.525085][ T5617]  <TASK>
[  766.525116][ T5617]  dump_stack_lvl+0xe8/0x150
[  766.525234][ T5617]  f2fs_stop_checkpoint+0x3cd/0x590
[  766.525350][ T5617]  f2fs_write_end_io+0x1274/0x1740
[  766.525490][ T5617]  __submit_merged_bio+0x256/0x6a0
[  766.525568][ T5617]  __submit_merged_write_cond+0x3c9/0x4e0
[  766.525676][ T5617]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  766.525829][ T5617]  f2fs_write_data_pages+0x287e/0x34f0
[  766.525991][ T5617]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.526134][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.526209][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.526329][ T5617]  ? do_raw_spin_lock+0x12b/0x2f0
[  766.526415][ T5617]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  766.526487][ T5617]  ? lockdep_hardirqs_on+0x7a/0x110
[  766.526566][ T5617]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  766.526645][ T5617]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.526719][ T5617]  do_writepages+0x32e/0x550
[  766.526807][ T5617]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  766.526898][ T5617]  ? rt_spin_unlock+0x14f/0x200
[  766.527004][ T5617]  filemap_fdatawrite+0x1ec/0x2f0
[  766.527102][ T5617]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  766.527196][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.527346][ T5617]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  766.527445][ T5617]  ? rt_spin_unlock+0x160/0x200
[  766.527539][ T5617]  f2fs_sync_dirty_inodes+0x30e/0x830
[  766.527617][ T5617]  f2fs_write_checkpoint+0x9df/0x26a0
[  766.527695][ T5617]  ? __lock_acquire+0x6b5/0x2d10
[  766.527842][ T5617]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  766.528083][ T5617]  kill_f2fs_super+0x314/0x730
[  766.528183][ T5617]  ? __pfx_kill_f2fs_super+0x10/0x10
[  766.528286][ T5617]  ? lockdep_hardirqs_on+0x7a/0x110
[  766.528386][ T5617]  deactivate_locked_super+0xbc/0x130
[  766.528483][ T5617]  cleanup_mnt+0x437/0x4d0
[  766.528547][ T5617]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.528631][ T5617]  task_work_run+0x1d9/0x270
[  766.528712][ T5617]  ? __pfx_task_work_run+0x10/0x10
[  766.528807][ T5617]  exit_to_user_mode_loop+0xf3/0x4d0
[  766.528871][ T5617]  ? rcu_is_watching+0x15/0xb0
[  766.528947][ T5617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.529014][ T5617]  do_syscall_64+0x33e/0x560
[  766.529079][ T5617]  ? trace_irq_disable+0x3b/0x140
[  766.529152][ T5617]  ? clear_bhb_loop+0x40/0x90
[  766.529226][ T5617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.529289][ T5617] RIP: 0033:0x7f9dcb1fe097
[  766.529365][ T5617] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  766.529423][ T5617] RSP: 002b:00007ffd0a356258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  766.529487][ T5617] RAX: 0000000000000000 RBX: 00007f9dcb2921ca RCX: 00007f9dcb1fe097
[  766.529529][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0a356310
[  766.529563][ T5617] RBP: 00007ffd0a356310 R08: 00007ffd0a357310 R09: 00000000ffffffff
[  766.529605][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0a3573a0
[  766.529644][ T5617] R13: 00007f9dcb2921ca R14: 00000000000bae19 R15: 00007ffd0a3573e0
[  766.529734][ T5617]  </TASK>
[  766.558192][ T5617] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  767.951695][   T44] team0 (unregistering): Port device team_slave_1 removed
[  768.098029][   T44] team0 (unregistering): Port device team_slave_0 removed
[  768.730273][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11
[  772.498609][ T9993] loop3: detected capacity change from 0 to 40427
[  772.605642][ T9993] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  772.605667][ T9993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  772.616288][ T9993] F2FS-fs (loop3): invalid crc value
[  772.763720][ T9993] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  772.830033][ T9993] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  772.830077][ T9993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  772.906388][ T9856] lo speed is unknown, defaulting to 1000
[  773.257176][ T5767] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  773.412690][ T5620] syz-executor: attempt to access beyond end of device
[  773.412690][ T5620] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  773.442532][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  773.442571][ T5620] Tainted: [L]=SOFTLOCKUP
[  773.442579][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  773.442592][ T5620] Call Trace:
[  773.442601][ T5620]  <TASK>
[  773.442612][ T5620]  dump_stack_lvl+0xe8/0x150
[  773.442649][ T5620]  f2fs_stop_checkpoint+0x3cd/0x590
[  773.442693][ T5620]  f2fs_write_end_io+0x1274/0x1740
[  773.442746][ T5620]  __submit_merged_bio+0x256/0x6a0
[  773.442777][ T5620]  __submit_merged_write_cond+0x3c9/0x4e0
[  773.442824][ T5620]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  773.442896][ T5620]  f2fs_write_data_pages+0x287e/0x34f0
[  773.442962][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  773.442988][ T5620]  ? __enqueue_entity+0x27f/0xb70
[  773.443057][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.443085][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.443117][ T5620]  ? do_raw_spin_lock+0x12b/0x2f0
[  773.443144][ T5620]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  773.443164][ T5620]  ? lockdep_hardirqs_on+0x7a/0x110
[  773.443181][ T5620]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  773.443200][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  773.443220][ T5620]  do_writepages+0x32e/0x550
[  773.443246][ T5620]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  773.443297][ T5620]  ? rt_spin_unlock+0x14f/0x200
[  773.443338][ T5620]  filemap_fdatawrite+0x1ec/0x2f0
[  773.443374][ T5620]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  773.443404][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.443465][ T5620]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  773.443496][ T5620]  ? rt_spin_unlock+0x160/0x200
[  773.443522][ T5620]  f2fs_sync_dirty_inodes+0x30e/0x830
[  773.443553][ T5620]  f2fs_write_checkpoint+0x9df/0x26a0
[  773.443573][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.443631][ T5620]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  773.443712][ T5620]  kill_f2fs_super+0x314/0x730
[  773.443753][ T5620]  ? __pfx_kill_f2fs_super+0x10/0x10
[  773.443778][ T5767] usb 5-1: Using ep0 maxpacket: 16
[  773.443793][ T5620]  ? lockdep_hardirqs_on+0x7a/0x110
[  773.443833][ T5620]  deactivate_locked_super+0xbc/0x130
[  773.443868][ T5620]  cleanup_mnt+0x437/0x4d0
[  773.443900][ T5620]  ? _raw_spin_unlock_irq+0x23/0x50
[  773.443928][ T5620]  task_work_run+0x1d9/0x270
[  773.443961][ T5620]  ? __pfx_task_work_run+0x10/0x10
[  773.443989][ T5620]  exit_to_user_mode_loop+0xf3/0x4d0
[  773.444006][ T5620]  ? rcu_is_watching+0x15/0xb0
[  773.444047][ T5620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.444073][ T5620]  do_syscall_64+0x33e/0x560
[  773.444098][ T5620]  ? trace_irq_disable+0x3b/0x140
[  773.444119][ T5620]  ? clear_bhb_loop+0x40/0x90
[  773.444147][ T5620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.444169][ T5620] RIP: 0033:0x7f132a28e097
[  773.444192][ T5620] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  773.444206][ T5620] RSP: 002b:00007ffc7ba10a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  773.444223][ T5620] RAX: 0000000000000000 RBX: 00007f132a3221ca RCX: 00007f132a28e097
[  773.444234][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ba10ad0
[  773.444245][ T5620] RBP: 00007ffc7ba10ad0 R08: 00007ffc7ba11ad0 R09: 00000000ffffffff
[  773.444270][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7ba11b60
[  773.444285][ T5620] R13: 00007f132a3221ca R14: 00000000000bc9d3 R15: 00007ffc7ba11ba0
[  773.444322][ T5620]  </TASK>
[  773.469793][ T5620] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  773.528960][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  773.529008][ T5620] Tainted: [L]=SOFTLOCKUP
[  773.529029][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  773.529070][ T5620] Call Trace:
[  773.529092][ T5620]  <TASK>
[  773.529108][ T5620]  dump_stack_lvl+0xe8/0x150
[  773.529147][ T5620]  f2fs_stop_checkpoint+0x3cd/0x590
[  773.529242][ T5620]  f2fs_write_end_io+0x1274/0x1740
[  773.529308][ T5620]  __submit_merged_bio+0x256/0x6a0
[  773.529368][ T5620]  __submit_merged_write_cond+0x3c9/0x4e0
[  773.529455][ T5620]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  773.529573][ T5620]  f2fs_write_data_pages+0x287e/0x34f0
[  773.529641][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  773.529723][ T5620]  ? __enqueue_entity+0x27f/0xb70
[  773.529840][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.529923][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.529980][ T5620]  ? do_raw_spin_lock+0x12b/0x2f0
[  773.530067][ T5620]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  773.530102][ T5620]  ? lockdep_hardirqs_on+0x7a/0x110
[  773.530129][ T5620]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  773.530194][ T5620]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  773.530249][ T5620]  do_writepages+0x32e/0x550
[  773.530285][ T5620]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  773.530372][ T5620]  ? rt_spin_unlock+0x14f/0x200
[  773.530430][ T5620]  filemap_fdatawrite+0x1ec/0x2f0
[  773.530492][ T5620]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  773.530569][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.530653][ T5620]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  773.530745][ T5620]  ? rt_spin_unlock+0x160/0x200
[  773.530790][ T5620]  f2fs_sync_dirty_inodes+0x30e/0x830
[  773.530900][ T5620]  f2fs_write_checkpoint+0x9df/0x26a0
[  773.530929][ T5620]  ? __lock_acquire+0x6b5/0x2d10
[  773.531057][ T5620]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  773.531211][ T5620]  kill_f2fs_super+0x314/0x730
[  773.531248][ T5620]  ? __pfx_kill_f2fs_super+0x10/0x10
[  773.531329][ T5620]  ? lockdep_hardirqs_on+0x7a/0x110
[  773.531403][ T5620]  deactivate_locked_super+0xbc/0x130
[  773.531464][ T5620]  cleanup_mnt+0x437/0x4d0
[  773.531502][ T5620]  ? _raw_spin_unlock_irq+0x23/0x50
[  773.531546][ T5620]  task_work_run+0x1d9/0x270
[  773.531581][ T5620]  ? __pfx_task_work_run+0x10/0x10
[  773.531638][ T5620]  exit_to_user_mode_loop+0xf3/0x4d0
[  773.531677][ T5620]  ? rcu_is_watching+0x15/0xb0
[  773.531730][ T5620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.531757][ T5620]  do_syscall_64+0x33e/0x560
[  773.531791][ T5620]  ? trace_irq_disable+0x3b/0x140
[  773.531885][ T5620]  ? clear_bhb_loop+0x40/0x90
[  773.531915][ T5620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.531938][ T5620] RIP: 0033:0x7f132a28e097
[  773.532001][ T5620] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  773.532054][ T5620] RSP: 002b:00007ffc7ba10a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  773.532080][ T5620] RAX: 0000000000000000 RBX: 00007f132a3221ca RCX: 00007f132a28e097
[  773.532096][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ba10ad0
[  773.532111][ T5620] RBP: 00007ffc7ba10ad0 R08: 00007ffc7ba11ad0 R09: 00000000ffffffff
[  773.532154][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7ba11b60
[  773.532188][ T5620] R13: 00007f132a3221ca R14: 00000000000bc9d3 R15: 00007ffc7ba11ba0
[  773.532243][ T5620]  </TASK>
[  773.568458][ T5620] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  773.605839][ T5767] usb 5-1: config 6 has an invalid interface number: 7 but max is 1
[  773.605869][ T5767] usb 5-1: config 6 has an invalid interface number: 104 but max is 1
[  773.605892][ T5767] usb 5-1: config 6 has no interface number 0
[  773.605908][ T5767] usb 5-1: config 6 has no interface number 1
[  773.605958][ T5767] usb 5-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  773.605988][ T5767] usb 5-1: config 6 interface 7 has no altsetting 0
[  773.606002][ T5767] usb 5-1: config 6 interface 104 has no altsetting 0
[  773.741217][ T5767] usb 5-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  773.741251][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.741273][ T5767] usb 5-1: Product: syz
[  773.741288][ T5767] usb 5-1: Manufacturer: syz
[  773.741304][ T5767] usb 5-1: SerialNumber: syz
[  774.786582][ T5767] ch341 5-1:6.7: ch341-uart converter detected
[  774.792476][ T5767] usb 5-1: failed to receive control message: -71
[  774.792518][ T5767] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  774.966328][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  774.992925][ T5725] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  774.992965][ T5725] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  775.025066][ T5767] ch341 5-1:6.104: ch341-uart converter detected
[  775.031410][ T5767] usb 5-1: failed to receive control message: -71
[  775.031470][ T5767] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  775.076503][ T5767] usb 5-1: USB disconnect, device number 24
[  775.106065][ T5767] ch341 5-1:6.7: device disconnected
[  775.114534][ T5767] ch341 5-1:6.104: device disconnected
[  778.738083][ T5725] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  778.738109][ T5725] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  778.741684][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  779.024843][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12
[  780.057231][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.059083][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.059451][ T9814] bridge_slave_0: entered allmulticast mode
[  780.119629][ T9814] bridge_slave_0: entered promiscuous mode
[  780.195072][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.195377][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.195687][ T9814] bridge_slave_1: entered allmulticast mode
[  780.203562][ T9814] bridge_slave_1: entered promiscuous mode
[  780.496799][T10038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  780.840344][ T9814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.958389][ T9814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.342173][ T5725] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  782.342201][ T5725] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  782.712076][ T5629] Bluetooth: hci4: command 0x0406 tx timeout
[  784.210151][T10052] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  784.850707][ T9814] team0: Port device team_slave_0 added
[  784.853110][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.906625][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.907012][ T9856] bridge_slave_0: entered allmulticast mode
[  784.911888][ T9856] bridge_slave_0: entered promiscuous mode
[  785.383381][ T9814] team0: Port device team_slave_1 added
[  785.394155][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.394507][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.394844][ T9856] bridge_slave_1: entered allmulticast mode
[  785.398382][ T9856] bridge_slave_1: entered promiscuous mode
[  785.436400][T10078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  787.043880][ T5635] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  787.203881][ T5635] usb 4-1: Using ep0 maxpacket: 16
[  787.206700][ T5635] usb 4-1: unable to get BOS descriptor or descriptor too short
[  787.207925][ T5635] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  787.207951][ T5635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  787.210546][ T5635] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  787.210574][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.210600][ T5635] usb 4-1: Product: syz
[  787.210611][ T5635] usb 4-1: Manufacturer: syz
[  787.210622][ T5635] usb 4-1: SerialNumber: syz
[  787.560126][ T5635] usb 4-1: 0:1 : does not exist
[  787.560346][ T5635] usb 4-1: unit 0 not found!
[  787.737516][ T5635] usb 4-1: USB disconnect, device number 26
[  789.118731][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.137736][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  789.137749][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.137770][ T9814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.739455][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  790.742365][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  790.742382][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.742415][ T9814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.804586][T10111] 9p: Bad value for 'rfdno'
[  791.291736][ T9856] team0: Port device team_slave_0 added
[  791.391083][ T9856] team0: Port device team_slave_1 added
[  791.596891][ T9814] hsr_slave_0: entered promiscuous mode
[  791.602568][ T9814] hsr_slave_1: entered promiscuous mode
[  791.730795][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  791.730814][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.730846][ T9856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.661214][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.661233][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.661267][ T9856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  792.714074][ T5628] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  792.731800][ T5725] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  792.731822][ T5725] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  792.734253][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  792.943922][ T5628] usb 2-1: Using ep0 maxpacket: 8
[  792.946770][ T5628] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  792.946805][ T5628] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  792.946827][ T5628] usb 2-1: config 0 interface 0 has no altsetting 0
[  792.951904][ T5628] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  792.951937][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.951968][ T5628] usb 2-1: Product: syz
[  792.951985][ T5628] usb 2-1: Manufacturer: syz
[  792.952000][ T5628] usb 2-1: SerialNumber: syz
[  793.051712][ T5628] usb 2-1: config 0 descriptor??
[  793.126924][ T5628] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  793.331511][ T5767] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  793.336606][ T5628] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[  793.376553][ T5628] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  793.392570][ T5628] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  793.506621][ T5767] usb 5-1: Using ep0 maxpacket: 32
[  793.509036][ T5767] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  793.509063][ T5767] usb 5-1: config 0 has no interface number 0
[  793.512375][ T5767] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  793.512405][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.512426][ T5767] usb 5-1: Product: syz
[  793.512441][ T5767] usb 5-1: Manufacturer: syz
[  793.512457][ T5767] usb 5-1: SerialNumber: syz
[  793.596828][ T5628] usb 2-1: USB disconnect, device number 28
[  793.640420][ T5767] usb 5-1: config 0 descriptor??
[  793.695850][ T5767] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  793.695882][ T5767] usb 5-1: selecting invalid altsetting 1
[  793.695899][ T5767] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  793.728701][ T5767] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  793.729090][ T5767] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  793.729145][ T5767] usb 5-1: media controller created
[  793.777986][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  793.870790][ T5767] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  793.870850][ T5767] zl10353_read_register: readreg error (reg=127, ret==-71)
[  793.871315][ T5767] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  794.047057][ T5767] usb 5-1: USB disconnect, device number 25
[  794.261454][T10161] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  794.500316][ T9856] hsr_slave_0: entered promiscuous mode
[  794.502558][ T9856] hsr_slave_1: entered promiscuous mode
[  794.506670][ T9856] debugfs: 'hsr0' already exists in 'hsr'
[  794.506759][ T9856] Cannot create hsr debugfs directory
[  794.673959][ T5767] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  794.823756][ T5767] usb 2-1: Using ep0 maxpacket: 16
[  794.851532][ T5767] usb 2-1: unable to get BOS descriptor or descriptor too short
[  794.878731][ T5767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  794.878770][ T5767] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  794.883548][ T5767] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  794.883581][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.925967][ T5767] usb 2-1: Product: syz
[  794.925987][ T5767] usb 2-1: Manufacturer: syz
[  794.926004][ T5767] usb 2-1: SerialNumber: syz
[  795.124544][ T5725] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  795.124569][ T5725] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  795.125304][    C0] ------------[ cut here ]------------
[  795.125316][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci3
[  795.125342][    C0] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd87/0x1090, CPU#0: ktimers/0/16
[  795.125377][    C0] Modules linked in:
[  795.125399][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  795.125429][    C0] Tainted: [L]=SOFTLOCKUP
[  795.125435][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  795.125446][    C0] RIP: 0010:__queue_work+0xda4/0x1090
[  795.125463][    C0] Code: 81 c7 68 01 00 00 4c 8d 35 59 18 01 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f6 f5 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[  795.125479][    C0] RSP: 0018:ffffc90000157998 EFLAGS: 00010046
[  795.125493][    C0] RAX: 1ffff1100bbce953 RBX: 0000000000000008 RCX: ffff88801d680000
[  795.125507][    C0] RDX: ffff888036994968 RSI: ffffffff8a1d5fd0 RDI: ffffffff8f8e76e0
[  795.125520][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  795.125530][    C0] R10: dffffc0000000000 R11: ffffffff818d6560 R12: dffffc0000000000
[  795.125543][    C0] R13: ffff88805de74a80 R14: ffffffff8f8e76e0 R15: ffff888036994968
[  795.125557][    C0] FS:  0000000000000000(0000) GS:ffff888125efc000(0000) knlGS:0000000000000000
[  795.125571][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  795.125583][    C0] CR2: 0000001b34219ff8 CR3: 000000002abea000 CR4: 00000000003526f0
[  795.125601][    C0] Call Trace:
[  795.125608][    C0]  <TASK>
[  795.125621][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  795.125648][    C0]  call_timer_fn+0x192/0x5e0
[  795.125672][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  795.125691][    C0]  ? call_timer_fn+0xd4/0x5e0
[  795.125714][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  795.125747][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  795.125763][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  795.125782][    C0]  __run_timer_base+0x764/0x9f0
[  795.125815][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  795.125839][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  795.125877][    C0]  run_timer_softirq+0xb7/0x170
[  795.125901][    C0]  handle_softirqs+0x1de/0x6d0
[  795.125939][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  795.125958][    C0]  run_ktimerd+0x69/0x100
[  795.125978][    C0]  smpboot_thread_fn+0x541/0xa50
[  795.126000][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  795.126028][    C0]  kthread+0x389/0x470
[  795.126053][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  795.126073][    C0]  ? __pfx_kthread+0x10/0x10
[  795.126096][    C0]  ret_from_fork+0x514/0xb70
[  795.126125][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  795.126151][    C0]  ? __switch_to+0xc79/0x1410
[  795.126177][    C0]  ? __pfx_kthread+0x10/0x10
[  795.126212][    C0]  ret_from_fork_asm+0x1a/0x30
[  795.126271][    C0]  </TASK>
[  795.126290][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  795.126310][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  795.126341][    C0] Tainted: [L]=SOFTLOCKUP
[  795.126349][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  795.126363][    C0] Call Trace:
[  795.126371][    C0]  <TASK>
[  795.126380][    C0]  vpanic+0x56c/0xa60
[  795.126413][    C0]  ? __pfx__printk+0x10/0x10
[  795.126437][    C0]  ? __pfx_vpanic+0x10/0x10
[  795.126466][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  795.126496][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  795.126532][    C0]  panic+0xc5/0xd0
[  795.126562][    C0]  ? __pfx_panic+0x10/0x10
[  795.126604][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  795.126644][    C0]  __warn+0x315/0x4c0
[  795.126676][    C0]  ? __queue_work+0xd87/0x1090
[  795.126701][    C0]  ? __queue_work+0xd87/0x1090
[  795.126725][    C0]  __report_bug+0x339/0x540
[  795.126761][    C0]  ? __queue_work+0xd87/0x1090
[  795.126783][    C0]  ? __pfx___report_bug+0x10/0x10
[  795.126809][    C0]  ? try_to_take_rt_mutex+0x840/0xb00
[  795.126847][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  795.126877][    C0]  ? look_up_lock_class+0x57/0x110
[  795.126905][    C0]  ? register_lock_class+0x31/0x2e0
[  795.126933][    C0]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  795.126977][    C0]  report_bug_entry+0x19a/0x290
[  795.127007][    C0]  ? __queue_work+0xda4/0x1090
[  795.127028][    C0]  ? __queue_work+0xda9/0x1090
[  795.127048][    C0]  handle_bug+0xce/0x200
[  795.127077][    C0]  exc_invalid_op+0x1a/0x50
[  795.127109][    C0]  asm_exc_invalid_op+0x1a/0x20
[  795.127147][    C0] RIP: 0010:__queue_work+0xda4/0x1090
[  795.127171][    C0] Code: 81 c7 68 01 00 00 4c 8d 35 59 18 01 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f6 f5 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[  795.127192][    C0] RSP: 0018:ffffc90000157998 EFLAGS: 00010046
[  795.127213][    C0] RAX: 1ffff1100bbce953 RBX: 0000000000000008 RCX: ffff88801d680000
[  795.127236][    C0] RDX: ffff888036994968 RSI: ffffffff8a1d5fd0 RDI: ffffffff8f8e76e0
[  795.127253][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  795.127269][    C0] R10: dffffc0000000000 R11: ffffffff818d6560 R12: dffffc0000000000
[  795.127287][    C0] R13: ffff88805de74a80 R14: ffffffff8f8e76e0 R15: ffff888036994968
[  795.127303][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  795.127346][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  795.127375][    C0]  ? __queue_work+0xd53/0x1090
[  795.127402][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  795.127431][    C0]  call_timer_fn+0x192/0x5e0
[  795.127464][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  795.127479][    C0]  ? call_timer_fn+0xd4/0x5e0
[  795.127518][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  795.127560][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  795.127583][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  795.127608][    C0]  __run_timer_base+0x764/0x9f0
[  795.127650][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  795.127673][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  795.127736][    C0]  run_timer_softirq+0xb7/0x170
[  795.127765][    C0]  handle_softirqs+0x1de/0x6d0
[  795.127809][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  795.127833][    C0]  run_ktimerd+0x69/0x100
[  795.127851][    C0]  smpboot_thread_fn+0x541/0xa50
[  795.127887][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  795.127923][    C0]  kthread+0x389/0x470
[  795.127950][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  795.127972][    C0]  ? __pfx_kthread+0x10/0x10
[  795.128017][    C0]  ret_from_fork+0x514/0xb70
[  795.128054][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  795.128085][    C0]  ? __switch_to+0xc79/0x1410
[  795.128114][    C0]  ? __pfx_kthread+0x10/0x10
[  795.128141][    C0]  ret_from_fork_asm+0x1a/0x30
[  795.128190][    C0]  </TASK>
[  795.128809][    C0] Kernel Offset: disabled