last executing test programs:

36.464081946s ago: executing program 2 (id=5894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0)

34.755722644s ago: executing program 2 (id=6033):
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0)

33.367151998s ago: executing program 2 (id=6036):
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@barrier}, {@jqfmt_vfsold}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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")
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="4c3fb6485d93635bb2")
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

29.918184773s ago: executing program 2 (id=6043):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0)

28.030313667s ago: executing program 2 (id=6046):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

23.402537456s ago: executing program 2 (id=6065):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x69a04c8e98d914be)
setsockopt$packet_add_memb(r1, 0x107, 0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r3=>0x0})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

15.70079405s ago: executing program 5 (id=6082):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240)=0x28084)

13.669452907s ago: executing program 5 (id=6086):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3)
recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r2], 0xb)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0)
io_uring_setup(0x1f8, &(0x7f0000000380)={0x0, 0x2cf6, 0x8, 0x3, 0x59})
r5 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0xfff1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f00000001c0)={r9})
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r2)
write$binfmt_misc(r10, 0x0, 0xfffffecc)

13.24874349s ago: executing program 5 (id=6088):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

12.660095383s ago: executing program 5 (id=6091):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca)
splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0)

12.421669428s ago: executing program 3 (id=6093):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0xc3242, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffd)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)

11.454141217s ago: executing program 5 (id=6095):
socket(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0xf2)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

11.064999844s ago: executing program 5 (id=6097):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mincore(&(0x7f0000012000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x40000099, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x16, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0, r2}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18)
sendto$inet6(r6, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000001500)="adf5bd04f01eccec95c1c5ca7fba623735df51cf89844d9bad7429917e03ad4b4cc6ae623ad8c0924b316f0e6d195479b75186ca55315366ef5d0b491b1811e932fb16a15906cab57fa112718bef35405bee39435abc9aa27f44c0fb7d15e1d8dd4b7a59deae296177fe9316e72cbc89f7e7e7c83d3ffae7d847a21894888b3de40826e54e7a0fc7b552c388637004dc3ea210d2c6dfc6283f690afa5b85b25939464a350dcdf1c38d97854aba19593fc884caec", 0xb4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c804)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000023000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76002200bf980003f82eae35e4888bf80722000000000056080500000000000200000005000000b70000000000000095000800000000009d0492eb0eb65e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x939}, 0x90)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f00000000c0)=0x4, 0x4)
getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000340))

9.571573958s ago: executing program 1 (id=6099):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x69a04c8e98d914be)
setsockopt$packet_add_memb(r1, 0x107, 0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r3=>0x0})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.498980865s ago: executing program 4 (id=6101):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

8.305959704s ago: executing program 3 (id=6102):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

7.654313906s ago: executing program 0 (id=6105):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)

7.629712192s ago: executing program 3 (id=6106):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca)
splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0)

7.244504783s ago: executing program 0 (id=6107):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0xc3242, 0x0)
lseek(r0, 0x0, 0x0)

6.174047541s ago: executing program 3 (id=6108):
socket(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0xf2)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

5.67650295s ago: executing program 4 (id=6109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000011000c000780050015000500000014000300686173683a6970b3272ae0742c697000050005000a000000050004"], 0x58}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001180)={0xb, 0x4c})
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0)
splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r7, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', 0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r10=>0x0})
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r11, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c)

4.98976036s ago: executing program 0 (id=6110):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

4.932161801s ago: executing program 3 (id=6111):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x4005)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x20008010)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000180)=0x3fffffd, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903", 0x42, 0x1, 0x0, 0x0)

4.397845286s ago: executing program 0 (id=6112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f000068f000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x5a5a6000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa2802, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@nfs_export_off}], [{@smackfsroot={'smackfsroot', 0x3d, '^,&]['}}, {@dont_hash}, {@audit}, {@subj_role={'subj_role', 0x3d, ']h'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x2f}, &(0x7f0000000000))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0)
syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200))
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="417d0b8e55fd932ace3be0ed35dfd3aa98e3b597599d7efcee0f907366fa5377d90cc256dc3d6ce48ffb46d9acd0e330", 0x30)

3.374996814s ago: executing program 0 (id=6113):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0xc3242, 0x0)
ftruncate(r0, 0x2007ffd)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000001)

2.859022834s ago: executing program 4 (id=6114):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3)
recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0)
io_uring_setup(0x1f8, &(0x7f0000000380)={0x0, 0x2cf6, 0x8, 0x3, 0x59})
r6 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0xfff1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f00000001c0)={r10})
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r2)
write$binfmt_misc(r11, 0x0, 0xfffffecc)

2.609406635s ago: executing program 1 (id=6115):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x0, 0x20}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)

2.264716832s ago: executing program 1 (id=6116):
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0)

2.219487722s ago: executing program 4 (id=6117):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x2019}}}, 0x7)
setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000480), 0x20, &(0x7f00000004c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}], [{@uid_eq}]})

1.721279432s ago: executing program 4 (id=6118):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000)

1.450220293s ago: executing program 1 (id=6119):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca)
splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0)

375.500696ms ago: executing program 1 (id=6121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)

317.65984ms ago: executing program 3 (id=6122):
socket(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0xf2)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0)

300.716855ms ago: executing program 4 (id=6123):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

41.674052ms ago: executing program 1 (id=6124):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f000068f000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x5a5a6000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa2802, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@nfs_export_off}], [{@smackfsroot={'smackfsroot', 0x3d, '^,&]['}}, {@dont_hash}, {@audit}, {@subj_role={'subj_role', 0x3d, ']h'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x2f}, &(0x7f0000000000))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0)
syz_io_uring_setup(0x2c5d, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200))
socket(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="417d0b8e55fd932ace3be0ed35dfd3aa98e3b597599d7efcee0f907366fa5377d90cc256dc3d6ce48ffb46d9acd0e330", 0x30)

0s ago: executing program 0 (id=6125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0400b100"/19], 0x13)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_create_chan_req={{0xc, 0xfb, 0x5}, {0x6, 0xfffe, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x2, 0x8, 0x0, 0x100}}, @l2cap_create_chan_rsp={{0xd, 0xf8, 0x8}, {0x9, 0xf, 0xa, 0x8}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x5, 0x7b}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xc, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0xf1, 0x4}, {0x2, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x5b, 0x2}}]}}, 0x46)
ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000000b00000008000300b855954aff2c2dc08a911d3413d169466806a8c4085bb6cce64dd63a5c4f25f4290f60069147657551acd9fee7e0571a943e147bd5419fa1fe54bab5676a84f159e6639728bdf1b5b08ea46c5395deb5bbbb66cb5fab3b188c2e414f4d25ee0286071b6bcba79d1092a2c195229790d96b8f037cd45b937f4c2bbb6b4c9922995c4c207c47c1aac65ec363afd32e", @ANYRESHEX=r2], 0x44}}, 0x0)
userfaultfd(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000408010100000000000000000000000005000300ff0000000600024000000000409003d3e1025f07eee9e08d73a2d2521b12a3f6e01206fd1571a5610e1af91706c8bc1da94cc118aacaf9b47a516f6383581f3436ba9e6d73845a0cb2543617ab98606c549b897629a1eb5235f046d57e03a44cdc267b91bc61875c7a336e4018d91dc68af2aa844254f32fd548465cf54a571ec2faf3df0a0a932a7c515f5530e9bffc43b3d64ffe4b38e742"], 0x24}}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)
unshare(0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

kernel console output (not intermixed with test programs):

[ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2666.691567][T26800] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5798'.
[ 2666.714557][T26800] 0·: renamed from hsr_slave_1 (while UP)
[ 2666.803105][T26800] 0·: entered allmulticast mode
[ 2666.809976][T26800] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[ 2667.367144][T24859] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2667.374478][T24859] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2668.755196][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2668.968809][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.113575][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2669.126971][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.164888][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2669.301071][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.333031][T26672] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2669.368837][T26680] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2669.508659][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2669.541080][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.601178][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2669.624915][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.651057][T26672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2669.671028][T26672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2669.693562][T26672] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2670.065323][T26672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2670.101666][T26672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2670.131127][T26672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2670.139872][T26672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2670.211517][T26678] veth0_vlan: entered promiscuous mode
[ 2670.282615][T26680] 8021q: adding VLAN 0 to HW filter on device team0
[ 2670.456073][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2670.463407][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2670.495049][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2670.502351][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2670.589475][T26678] veth1_vlan: entered promiscuous mode
[ 2670.665508][T26676] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2671.134229][T26678] veth0_macvtap: entered promiscuous mode
[ 2671.158759][T26676] 8021q: adding VLAN 0 to HW filter on device team0
[ 2671.313855][T26809] loop5: detected capacity change from 0 to 32768
[ 2671.353478][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2671.360744][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2671.368667][T26809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5801 (26809)
[ 2671.410087][T26809] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2671.416281][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2671.427554][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2671.461562][T26809] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[ 2671.470040][T26809] BTRFS info (device loop5): using free-space-tree
[ 2671.481933][T26678] veth1_macvtap: entered promiscuous mode
[ 2671.577622][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2671.601169][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2671.815245][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2671.847669][T26673] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2671.848064][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2671.866534][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2671.880460][   T29] audit: type=1804 audit(2000000427.229:609): pid=26809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5801" name="/newroot/16/file0/bus" dev="loop5" ino=263 res=1 errno=0
[ 2671.883608][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2671.931189][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2671.950669][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2671.978033][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2671.992695][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.002631][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2672.013092][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.062185][T26678] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2672.090726][T26649] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2672.194586][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2672.223661][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.238283][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2672.249032][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.260638][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2672.276215][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.286875][T26678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2672.300718][T26678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2672.323340][T26678] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2672.513349][T26678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.551143][T26678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.560002][T26678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2672.606778][T26678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2673.257610][T26680] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2673.278748][T26673] veth0_vlan: entered promiscuous mode
[ 2673.463039][T24856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2673.503624][T24856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2673.556385][T26673] veth1_vlan: entered promiscuous mode
[ 2673.760384][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2673.790760][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2673.944268][T26847] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2673.968686][T26673] veth0_macvtap: entered promiscuous mode
[ 2674.018129][T26847] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2674.053366][T26847] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2674.094975][T26673] veth1_macvtap: entered promiscuous mode
[ 2674.122857][T26847] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2674.157216][T26676] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2674.199716][T26847] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2674.222052][T26852] netlink: 'syz.0.5803': attribute type 29 has an invalid length.
[ 2674.258096][T26847] trusted_key: encrypted_key: insufficient parameters specified
[ 2674.343454][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2674.392456][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.444217][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2674.509951][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.531274][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2674.568378][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.615778][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2674.675013][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.715801][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2674.733180][T26862] loop0: detected capacity change from 0 to 1024
[ 2674.755913][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.827150][T26673] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2674.933810][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2674.933838][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.933854][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2674.933875][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.933891][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2674.933912][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.933930][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2674.933951][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.933967][T26673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2674.933988][T26673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2674.942982][T26673] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2675.065355][T26673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2675.065408][T26673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2675.065458][T26673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2675.065504][T26673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2675.589445][T26676] veth0_vlan: entered promiscuous mode
[ 2675.754487][T26680] veth0_vlan: entered promiscuous mode
[ 2675.920590][T26676] veth1_vlan: entered promiscuous mode
[ 2676.106235][T26680] veth1_vlan: entered promiscuous mode
[ 2676.128308][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2676.128340][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2676.430845][T24856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2676.465691][T24856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2676.635218][T26676] veth0_macvtap: entered promiscuous mode
[ 2676.682436][T26680] veth0_macvtap: entered promiscuous mode
[ 2676.752551][T26676] veth1_macvtap: entered promiscuous mode
[ 2676.815440][T26680] veth1_macvtap: entered promiscuous mode
[ 2676.986152][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.011751][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.035519][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.061512][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.083533][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.111192][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.131110][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.153138][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.179596][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.215390][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.239809][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.267450][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.328713][T26680] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2677.393552][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.424509][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.449943][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.474189][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.503273][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.539630][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.573553][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.603647][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.621246][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.651067][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.668631][T26869] loop0: detected capacity change from 0 to 32768
[ 2677.676220][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.686973][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.711044][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2677.731061][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.762827][T26676] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2677.798196][T26883] netlink: 'syz.1.5815': attribute type 29 has an invalid length.
[ 2677.852194][T26884] netlink: 'syz.1.5815': attribute type 29 has an invalid length.
[ 2677.867757][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2677.891282][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.932692][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2677.961169][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2677.976005][T26884] trusted_key: encrypted_key: insufficient parameters specified
[ 2678.012458][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.034314][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.053301][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.071564][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.103484][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.118249][T26889] loop5: detected capacity change from 0 to 1024
[ 2678.134412][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.155227][T26680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.172200][T26680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.199816][T26680] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2678.246883][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.281330][T26889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2678.309111][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.371124][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.421200][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.451397][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.527107][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.564346][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.581090][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.601784][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.621037][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.641143][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.661053][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.681611][T26676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2678.692567][T26676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2678.720282][T26676] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2678.730659][T26649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2678.753349][T26887] netlink: 'syz.1.5815': attribute type 29 has an invalid length.
[ 2678.776520][T26680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2678.828192][T26680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2678.837822][T26680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2678.847131][T26680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2678.874717][T26676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2678.957084][T26676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.139909][T26676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.182710][T26676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2681.019702][T24713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2681.052987][T24713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2681.246971][T24713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2681.300153][T24713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2681.467218][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2681.577705][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2681.640081][T24856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2681.709535][T24856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2682.468161][   T29] audit: type=1326 audit(2000000437.819:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2682.566369][   T29] audit: type=1326 audit(2000000437.859:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2682.602021][T26928] loop3: detected capacity change from 0 to 1024
[ 2682.701518][   T29] audit: type=1326 audit(2000000437.949:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2682.759954][   T29] audit: type=1326 audit(2000000437.949:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2682.866096][   T29] audit: type=1326 audit(2000000437.949:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2682.990801][T26928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2683.044670][   T29] audit: type=1326 audit(2000000437.959:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2683.106719][   T29] audit: type=1326 audit(2000000437.959:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2683.241988][   T29] audit: type=1326 audit(2000000437.959:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2683.439901][   T29] audit: type=1326 audit(2000000437.999:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2683.515135][   T29] audit: type=1326 audit(2000000437.999:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26929 comm="syz.0.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x7ffc0000
[ 2683.548557][T26937] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.631521][T26938] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.663666][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2683.717896][T26937] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.762504][T26938] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.815821][T26924] loop5: detected capacity change from 0 to 32768
[ 2683.841229][T26937] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.867125][T26937] trusted_key: encrypted_key: insufficient parameters specified
[ 2683.881243][T26924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5827 (26924)
[ 2683.957377][T26938] netlink: 'syz.0.5831': attribute type 29 has an invalid length.
[ 2683.971920][T26924] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2684.011310][T26924] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[ 2684.091302][T26924] BTRFS info (device loop5): using free-space-tree
[ 2685.303350][T26924] BTRFS error (device loop5): open_ctree failed
[ 2686.063766][T26982] fuse: Bad value for 'fd'
[ 2687.756694][T26993] loop1: detected capacity change from 0 to 1024
[ 2687.877155][T26993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2688.065282][T26993] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.5846: missing EA_INODE flag
[ 2688.312099][T26993] EXT4-fs error (device loop1): ext4_xattr_inode_iget:443: comm syz.1.5846: error while reading EA inode 11 err=-117
[ 2689.655042][T18721] Bluetooth: hci7: Received unexpected HCI Event 0x00
[ 2689.710510][T26993] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2861: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 2690.083574][T26673] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2690.598595][T27032] loop1: detected capacity change from 0 to 256
[ 2690.638524][T27032] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2690.687748][T27032] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 2690.811548][T27032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 2691.853778][T27018] loop2: detected capacity change from 0 to 32768
[ 2691.907416][T27018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5852 (27018)
[ 2691.992844][T27018] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2692.043184][T27018] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[ 2692.063134][T27018] BTRFS info (device loop2): using free-space-tree
[ 2692.598068][T27029] loop5: detected capacity change from 0 to 40427
[ 2692.741439][T27029] F2FS-fs (loop5): invalid crc value
[ 2692.873419][T27029] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2692.915087][T27036] loop4: detected capacity change from 0 to 40427
[ 2692.935694][T27018] BTRFS error (device loop2): open_ctree failed
[ 2693.141661][T27036] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2693.336105][T27029] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 2693.706799][T26649] syz-executor: attempt to access beyond end of device
[ 2693.706799][T26649] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2693.778710][T26649] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 2694.001615][T27036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 2696.277825][T27091] loop0: detected capacity change from 0 to 512
[ 2697.517144][T27107] program syz.4.5879 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2699.033901][T27105] loop0: detected capacity change from 0 to 32768
[ 2700.711434][T18721] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 2700.721460][T18721] Bluetooth: hci0: Injecting HCI hardware error event
[ 2700.742566][T26541] Bluetooth: hci0: hardware error 0x00
[ 2701.132074][T27122] loop0: detected capacity change from 0 to 256
[ 2703.034135][T26541] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2703.681430][T27152] trusted_key: encrypted_key: insufficient parameters specified
[ 2703.814338][T18721] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2703.825957][T18721] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2703.828117][T18721] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2703.833459][T18721] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2703.839527][T18721] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2703.843528][T18721] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2705.080380][T26541] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2705.100897][T26541] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2705.127033][T26541] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2705.147694][T26541] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2705.176733][T26537] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2705.185048][T26537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2705.196737][T26537] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2705.206784][T24879] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2705.219729][T26537] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2705.261847][T24879] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2705.288344][T26537] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2705.299402][T26537] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2705.302708][T18721] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2705.315231][T26537] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 2705.316696][T18721] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2705.330707][T18721] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2705.345949][T26537] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 2705.379947][T26537] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2705.617401][T27170] loop3: detected capacity change from 0 to 1024
[ 2705.715095][T27170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2705.753358][   T29] kauditd_printk_skb: 27 callbacks suppressed
[ 2705.753383][   T29] audit: type=1800 audit(2000000461.109:647): pid=27170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5899" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 2705.911567][T18721] Bluetooth: hci8: command tx timeout
[ 2705.944401][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2707.351482][T18721] Bluetooth: hci7: command tx timeout
[ 2707.441189][T18721] Bluetooth: hci10: command tx timeout
[ 2707.441318][T26537] Bluetooth: hci9: command tx timeout
[ 2708.004761][T26537] Bluetooth: hci8: command tx timeout
[ 2708.392746][T27077] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5866'.
[ 2708.403637][T27142] netlink: 'syz.0.5892': attribute type 29 has an invalid length.
[ 2708.713355][T27190] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5906'.
[ 2709.344248][T27194] loop0: detected capacity change from 0 to 1024
[ 2709.431113][T26537] Bluetooth: hci7: command tx timeout
[ 2709.511208][T26537] Bluetooth: hci9: command tx timeout
[ 2709.521083][T26537] Bluetooth: hci10: command tx timeout
[ 2710.034949][T24856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2710.075673][T26537] Bluetooth: hci8: command tx timeout
[ 2710.653233][T24856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2710.730419][T27204] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5912'.
[ 2710.992943][T24856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2711.231690][T22379] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2711.258567][T24856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2711.453887][T22379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2711.462946][T22379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2711.494947][T22379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2711.520539][T26537] Bluetooth: hci7: command tx timeout
[ 2711.529284][T22379] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2711.544609][T27213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2711.554066][T27213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2711.555027][T22379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2711.570567][T22379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2711.581020][T22379] usb 1-1: Product: syz
[ 2711.589873][T22379] usb 1-1: Manufacturer: syz
[ 2711.594868][T26537] Bluetooth: hci10: command tx timeout
[ 2711.594881][T18721] Bluetooth: hci9: command tx timeout
[ 2711.623126][T22379] cdc_wdm 1-1:1.0: skipping garbage
[ 2711.628387][T22379] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 2711.634269][T27216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5916'.
[ 2711.847599][   T29] audit: type=1326 audit(2000000467.199:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27205 comm="syz.0.5914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce2b75b59 code=0x0
[ 2712.151972][T26537] Bluetooth: hci8: command tx timeout
[ 2712.477449][T27163] chnl_net:caif_netlink_parms(): no params data found
[ 2712.683302][T26537] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 2712.718731][T24856] bridge_slave_1: left allmulticast mode
[ 2712.725015][T24856] bridge_slave_1: left promiscuous mode
[ 2712.730920][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2712.755010][T24856] bridge_slave_0: left allmulticast mode
[ 2712.770951][T24856] bridge_slave_0: left promiscuous mode
[ 2712.785747][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2713.591376][T26537] Bluetooth: hci7: command tx timeout
[ 2713.673087][T26537] Bluetooth: hci10: command tx timeout
[ 2713.680634][T26537] Bluetooth: hci9: command tx timeout
[ 2713.846130][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2713.860442][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2713.875221][T24856] bond0 (unregistering): Released all slaves
[ 2714.180439][T24859] usb 1-1: USB disconnect, device number 63
[ 2714.559928][T27153] chnl_net:caif_netlink_parms(): no params data found
[ 2714.786944][T27240] lo speed is unknown, defaulting to 1000
[ 2714.803308][T27240] lo speed is unknown, defaulting to 1000
[ 2714.810499][T27240] lo speed is unknown, defaulting to 1000
[ 2714.816742][T27162] chnl_net:caif_netlink_parms(): no params data found
[ 2715.129601][T24856] hsr_slave_0: left promiscuous mode
[ 2715.154700][T24856] hsr_slave_1: left promiscuous mode
[ 2715.186304][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2715.213917][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2715.241553][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2715.251994][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2715.339287][T24856] veth1_macvtap: left promiscuous mode
[ 2715.351722][T24856] veth0_macvtap: left promiscuous mode
[ 2715.365707][T24856] veth1_vlan: left promiscuous mode
[ 2715.384636][T24856] veth0_vlan: left promiscuous mode
[ 2715.856380][T27240] infiniband syz0: set active
[ 2715.871940][T27240] infiniband syz0: added lo
[ 2715.877620][T27240] syz0: rxe_create_cq: returned err = -12
[ 2715.901258][T27240] infiniband syz0: Couldn't create ib_mad CQ
[ 2715.907531][T27240] infiniband syz0: Couldn't open port 1
[ 2716.027611][T27240] RDS/IB: syz0: added
[ 2716.041937][T27240] smc: adding ib device syz0 with port count 1
[ 2716.056732][T27240] smc:    ib device syz0 port 1 has pnetid 
[ 2716.939965][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2717.023619][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2718.577129][T27160] chnl_net:caif_netlink_parms(): no params data found
[ 2718.609485][T24921] lo speed is unknown, defaulting to 1000
[ 2718.611062][T27249] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5923'.
[ 2719.044422][T27240] lo speed is unknown, defaulting to 1000
[ 2719.125198][T27163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2719.132772][T27163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2719.140042][T27163] bridge_slave_0: entered allmulticast mode
[ 2719.148778][T27163] bridge_slave_0: entered promiscuous mode
[ 2719.288381][T22379] lo speed is unknown, defaulting to 1000
[ 2719.307546][T27163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2719.314980][T27163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2719.322641][T27163] bridge_slave_1: entered allmulticast mode
[ 2719.344613][T27163] bridge_slave_1: entered promiscuous mode
[ 2719.787281][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5925'.
[ 2719.895504][T27163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2719.925620][T27153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2719.939254][T27153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2719.953622][T27153] bridge_slave_0: entered allmulticast mode
[ 2719.970580][T27153] bridge_slave_0: entered promiscuous mode
[ 2720.173643][T27163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2720.196125][T27162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2720.211299][T27162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2720.221353][T27162] bridge_slave_0: entered allmulticast mode
[ 2720.245581][T27162] bridge_slave_0: entered promiscuous mode
[ 2720.274554][T27153] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2720.283298][T27153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2720.321296][T27153] bridge_slave_1: entered allmulticast mode
[ 2720.329936][T27153] bridge_slave_1: entered promiscuous mode
[ 2720.417515][T27240] lo speed is unknown, defaulting to 1000
[ 2720.463250][T27160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2720.488111][T27160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2720.508392][T27160] bridge_slave_0: entered allmulticast mode
[ 2720.526695][T27160] bridge_slave_0: entered promiscuous mode
[ 2720.705469][T27162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2720.751694][T27162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2720.759070][T27162] bridge_slave_1: entered allmulticast mode
[ 2720.784081][T27162] bridge_slave_1: entered promiscuous mode
[ 2720.894256][T27153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2720.959868][T27160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2720.982020][T27160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2720.989351][T27160] bridge_slave_1: entered allmulticast mode
[ 2721.053899][T27160] bridge_slave_1: entered promiscuous mode
[ 2721.236089][T27163] team0: Port device team_slave_0 added
[ 2721.342807][T27153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2721.498067][T27163] team0: Port device team_slave_1 added
[ 2721.596469][T27240] lo speed is unknown, defaulting to 1000
[ 2721.615754][T27162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2721.713795][T27160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2721.763004][T27160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2721.872672][T27162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2722.038569][T27153] team0: Port device team_slave_0 added
[ 2722.224732][T27163] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2722.261340][T27163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2722.340467][T27163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2722.374818][T27163] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2722.411067][T27163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2722.451037][T27163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2722.522782][T27153] team0: Port device team_slave_1 added
[ 2722.653499][T24856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2722.710470][T27160] team0: Port device team_slave_0 added
[ 2722.737390][T27160] team0: Port device team_slave_1 added
[ 2722.758466][T27240] lo speed is unknown, defaulting to 1000
[ 2722.985860][T27162] team0: Port device team_slave_0 added
[ 2723.198617][T24856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2723.281609][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[ 2723.435027][T27163] hsr_slave_0: entered promiscuous mode
[ 2723.454861][T27163] hsr_slave_1: entered promiscuous mode
[ 2723.471056][T27163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2723.478650][T27163] Cannot create hsr debugfs directory
[ 2723.504598][T27162] team0: Port device team_slave_1 added
[ 2723.607421][T27153] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2723.621431][T27153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2723.681566][T27153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2723.704969][T27153] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2723.716264][T27153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2723.742663][T27153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2723.833294][T24856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2723.905883][T27275] loop3: detected capacity change from 0 to 40427
[ 2723.936988][T27160] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2723.946745][T27160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2723.979156][T27160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2724.027901][T27275] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2724.036871][T27240] lo speed is unknown, defaulting to 1000
[ 2724.196237][T24856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2724.250499][T27160] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2724.277434][T27160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2724.351017][T27160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2724.362596][T27275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2724.418442][T27162] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2724.441002][T27162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2724.505463][T27162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2724.553205][T27162] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2724.580779][T27162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2724.711223][T27162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2725.115843][T27281] fuse: Unknown parameter 'ÿ0x000000000000000800000000000000000000'
[ 2725.771765][T26678] syz-executor: attempt to access beyond end of device
[ 2725.771765][T26678] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2725.829932][T27153] hsr_slave_0: entered promiscuous mode
[ 2725.838512][T26678] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 2725.915358][T27153] hsr_slave_1: entered promiscuous mode
[ 2725.961570][T27153] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2725.969168][T27153] Cannot create hsr debugfs directory
[ 2726.311716][T27240] lo speed is unknown, defaulting to 1000
[ 2726.420682][T27160] hsr_slave_0: entered promiscuous mode
[ 2726.462224][T27160] hsr_slave_1: entered promiscuous mode
[ 2726.490804][T27160] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2726.500002][T27160] Cannot create hsr debugfs directory
[ 2726.539735][T18721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2726.582135][T18721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2726.590551][T18721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2726.621837][T18721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2726.630286][T18721] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2726.653290][T18721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2726.730495][T27162] hsr_slave_0: entered promiscuous mode
[ 2726.747550][T27162] hsr_slave_1: entered promiscuous mode
[ 2726.755832][T27162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2726.771058][T27162] Cannot create hsr debugfs directory
[ 2727.532011][T27240] lo speed is unknown, defaulting to 1000
[ 2728.009417][T24856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2728.317327][T24856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2728.646179][T24856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2728.691968][T27240] lo speed is unknown, defaulting to 1000
[ 2728.711804][T26537] Bluetooth: hci0: command tx timeout
[ 2729.106694][T24856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2729.131103][   T29] audit: type=1326 audit(2000000484.479:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.231114][   T29] audit: type=1326 audit(2000000484.479:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.254865][T27289] loop3: detected capacity change from 0 to 1024
[ 2729.291276][   T29] audit: type=1326 audit(2000000484.479:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.355192][   T29] audit: type=1326 audit(2000000484.479:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.414595][   T29] audit: type=1326 audit(2000000484.529:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.471733][   T29] audit: type=1326 audit(2000000484.529:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.509606][   T29] audit: type=1326 audit(2000000484.529:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.537848][   T29] audit: type=1326 audit(2000000484.539:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.553593][T27289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2729.565374][   T29] audit: type=1326 audit(2000000484.539:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.603291][   T29] audit: type=1326 audit(2000000484.539:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27288 comm="syz.3.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd281975b59 code=0x7ffc0000
[ 2729.831507][T27240] lo speed is unknown, defaulting to 1000
[ 2729.993304][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2730.161522][T24856] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2730.314931][T27163] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2730.360592][T27294] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5932'.
[ 2730.456895][T24856] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2730.501685][T27163] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2730.530209][T27163] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2730.776630][T24856] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2730.791216][T26537] Bluetooth: hci0: command tx timeout
[ 2730.812038][T27163] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2730.858096][T27240] lo speed is unknown, defaulting to 1000
[ 2731.025616][T24856] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2731.532920][T27300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5934'.
[ 2731.687160][T24856] bridge_slave_1: left allmulticast mode
[ 2731.701186][T24856] bridge_slave_1: left promiscuous mode
[ 2731.710469][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2731.740616][T24856] bridge_slave_0: left allmulticast mode
[ 2731.746706][T24856] bridge_slave_0: left promiscuous mode
[ 2731.771508][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2731.802397][T24856] bridge_slave_1: left allmulticast mode
[ 2731.814780][T24856] bridge_slave_1: left promiscuous mode
[ 2731.821689][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2731.843135][T24856] bridge_slave_0: left allmulticast mode
[ 2731.848825][T24856] bridge_slave_0: left promiscuous mode
[ 2731.862989][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2731.888628][T24856] bridge_slave_1: left allmulticast mode
[ 2731.903324][T24856] bridge_slave_1: left promiscuous mode
[ 2731.916404][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2731.940180][T24856] bridge_slave_0: left allmulticast mode
[ 2731.956540][T24856] bridge_slave_0: left promiscuous mode
[ 2731.978874][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2732.872316][T26537] Bluetooth: hci0: command tx timeout
[ 2734.479117][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2734.504314][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2734.532067][T24856] bond0 (unregistering): Released all slaves
[ 2734.842637][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2734.857141][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2734.870741][T24856] bond0 (unregistering): Released all slaves
[ 2734.951709][T26537] Bluetooth: hci0: command tx timeout
[ 2735.160545][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2735.190278][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2735.215557][T24856] bond0 (unregistering): Released all slaves
[ 2735.261045][T27240] lo speed is unknown, defaulting to 1000
[ 2735.518743][T27283] chnl_net:caif_netlink_parms(): no params data found
[ 2736.330666][T27160] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2736.354058][T27160] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2736.626230][T27160] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2736.663145][T27240] lo speed is unknown, defaulting to 1000
[ 2736.664088][T27160] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2736.860718][T27283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2736.885456][T27283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2736.906011][T27283] bridge_slave_0: entered allmulticast mode
[ 2736.923759][T27283] bridge_slave_0: entered promiscuous mode
[ 2736.949432][T27283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2736.971568][T27283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2736.994726][T27283] bridge_slave_1: entered allmulticast mode
[ 2737.021146][T27283] bridge_slave_1: entered promiscuous mode
[ 2737.719691][T27283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2737.876406][T27283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2738.274989][T27163] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2738.338496][T27283] team0: Port device team_slave_0 added
[ 2738.537942][T27283] team0: Port device team_slave_1 added
[ 2738.840844][T27283] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2738.862691][T27283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2738.901230][T27283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2738.936468][T27283] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2738.949156][T27283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2738.989929][T27283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2739.151830][T27163] 8021q: adding VLAN 0 to HW filter on device team0
[ 2739.845064][T27283] hsr_slave_0: entered promiscuous mode
[ 2739.870328][T27283] hsr_slave_1: entered promiscuous mode
[ 2739.884574][T27283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2739.901111][T27283] Cannot create hsr debugfs directory
[ 2740.247546][  T921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2740.254890][  T921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2740.294565][T27323] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5940'.
[ 2740.763789][T22379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2740.771128][T22379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2740.857057][T24856] hsr_slave_0: left promiscuous mode
[ 2740.873026][T24856] hsr_slave_1: left promiscuous mode
[ 2740.881993][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2740.903825][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2740.922819][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2740.930472][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2740.961996][T24856] hsr_slave_0: left promiscuous mode
[ 2740.975890][T24856] hsr_slave_1: left promiscuous mode
[ 2740.993359][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2741.000827][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2741.009636][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2741.019360][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2741.038713][T24856] hsr_slave_0: left promiscuous mode
[ 2741.045477][T24856] 0·: left promiscuous mode
[ 2741.051939][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2741.065482][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2741.084800][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2741.101067][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2741.255508][T24856] veth1_macvtap: left promiscuous mode
[ 2741.263530][T24856] veth0_macvtap: left promiscuous mode
[ 2741.269446][T24856] veth1_vlan: left promiscuous mode
[ 2741.274997][T24856] veth0_vlan: left promiscuous mode
[ 2741.286287][T24856] veth1_macvtap: left promiscuous mode
[ 2741.292045][T24856] veth0_macvtap: left promiscuous mode
[ 2741.297952][T24856] veth1_vlan: left promiscuous mode
[ 2741.303512][T24856] veth0_vlan: left promiscuous mode
[ 2741.311751][T24856] veth1_macvtap: left promiscuous mode
[ 2741.320730][T24856] veth0_macvtap: left promiscuous mode
[ 2741.332485][T24856] veth1_vlan: left promiscuous mode
[ 2741.345098][T24856] veth0_vlan: left promiscuous mode
[ 2743.446887][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2743.510342][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2745.905205][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2745.997314][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2748.145075][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2748.239824][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2749.784722][T27160] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2749.892715][T27153] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2749.946520][T27153] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2750.162812][T27153] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2750.356916][T27153] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2750.607375][T27328] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2750.617944][T27329] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2750.631788][T27160] 8021q: adding VLAN 0 to HW filter on device team0
[ 2750.655512][T27162] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2750.686009][T27162] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2750.812024][T27283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2750.854723][T27328] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2750.864115][T27329] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2750.887027][T27328] trusted_key: encrypted_key: insufficient parameters specified
[ 2750.904366][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2750.911670][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2750.951344][T18721] Bluetooth: hci5: command 0x0406 tx timeout
[ 2750.966774][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2750.974066][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2750.989208][T27162] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2751.034630][T27162] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2751.131208][T27330] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2751.225354][T27283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2751.272838][T27331] netlink: 'syz.3.5942': attribute type 29 has an invalid length.
[ 2751.486386][T27283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2751.781986][T27283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2752.257301][T27163] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2752.673190][T27162] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2752.885072][T27153] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2752.987405][T27283] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2753.116840][T27283] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2753.200286][T27153] 8021q: adding VLAN 0 to HW filter on device team0
[ 2753.230947][T27162] 8021q: adding VLAN 0 to HW filter on device team0
[ 2753.251684][T27283] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2753.290849][T27283] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2753.427549][T24921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2753.434959][T24921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2753.456864][T24921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2753.464161][T24921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2753.554850][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2753.562213][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2753.614959][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2753.622348][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2753.768296][T24856] bridge_slave_1: left allmulticast mode
[ 2753.787011][T24856] bridge_slave_1: left promiscuous mode
[ 2753.803269][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2753.830333][T24856] bridge_slave_0: left allmulticast mode
[ 2753.845984][T24856] bridge_slave_0: left promiscuous mode
[ 2753.866486][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2754.879064][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2754.906795][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2754.939283][T24856] bond0 (unregistering): Released all slaves
[ 2755.157424][T27160] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2755.561068][T27163] veth0_vlan: entered promiscuous mode
[ 2755.719331][T27363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5947'.
[ 2755.724316][T27153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2755.879758][T27163] veth1_vlan: entered promiscuous mode
[ 2755.917621][T27162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2756.539224][T27160] veth0_vlan: entered promiscuous mode
[ 2756.628423][T27163] veth0_macvtap: entered promiscuous mode
[ 2756.709410][T24856] hsr_slave_0: left promiscuous mode
[ 2756.761765][T24856] hsr_slave_1: left promiscuous mode
[ 2756.777850][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2756.801377][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2756.832589][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2756.860263][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2756.911506][T24856] veth1_macvtap: left promiscuous mode
[ 2756.917126][T24856] veth0_macvtap: left promiscuous mode
[ 2756.922989][T24856] veth1_vlan: left promiscuous mode
[ 2756.928436][T24856] veth0_vlan: left promiscuous mode
[ 2757.329205][T24856] infiniband syz0: set down
[ 2758.213248][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2758.343599][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2759.491674][ T2854] smc: removing ib device syz0
[ 2759.565954][T27283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2759.601726][T27371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5948'.
[ 2759.653194][   T25] lo speed is unknown, defaulting to 1000
[ 2759.664679][T27163] veth1_macvtap: entered promiscuous mode
[ 2759.746104][T27160] veth1_vlan: entered promiscuous mode
[ 2760.066097][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2760.079696][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.089749][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2760.100367][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.113699][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2760.131042][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.157119][T27163] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2760.175261][T26537] Bluetooth: hci5: unexpected event for opcode 0x041b
[ 2760.276542][T27283] 8021q: adding VLAN 0 to HW filter on device team0
[ 2760.297529][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2760.326463][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.361045][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2760.381002][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.390840][T27163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2760.436546][T27163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2760.487705][T27163] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2760.547082][T27153] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2760.753660][T27162] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2760.992134][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2760.999419][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2761.101346][T27163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2761.110118][T27163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2761.171047][T27163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2761.179813][T27163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2761.552947][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2761.560259][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2761.579376][T27380] loop3: detected capacity change from 0 to 512
[ 2761.647496][T27380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 2761.898685][T27160] veth0_macvtap: entered promiscuous mode
[ 2761.996892][T27160] veth1_macvtap: entered promiscuous mode
[ 2762.004468][T27380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2762.061655][T27380] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2762.166594][T27153] veth0_vlan: entered promiscuous mode
[ 2762.394660][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2762.451604][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2762.472025][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2762.501822][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2762.522098][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2762.552496][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2762.571066][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2762.621063][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2762.664155][T27160] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2762.687237][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2762.880701][T21161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2762.964455][T21161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2762.987762][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2763.041482][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2763.081540][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2763.101000][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2763.112159][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2763.151911][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2763.188345][T27160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2763.261060][T27160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2763.298201][T27160] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2763.556647][T27160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2763.611343][T27160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2763.632114][T27160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2763.640946][T27160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2763.795043][T27394] netlink: 'syz.3.5951': attribute type 29 has an invalid length.
[ 2764.171502][T27399] netlink: 'syz.3.5951': attribute type 29 has an invalid length.
[ 2764.202373][T27399] trusted_key: encrypted_key: insufficient parameters specified
[ 2764.391791][T24713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2764.416189][T24713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2764.437981][T27398] netlink: 'syz.3.5951': attribute type 29 has an invalid length.
[ 2764.585029][T18721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2764.605711][T18721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2764.619873][T18721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2764.661127][T18721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2764.678737][T18721] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2764.710682][T18721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2764.760439][T27283] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2764.800132][T27162] veth0_vlan: entered promiscuous mode
[ 2765.103379][T27162] veth1_vlan: entered promiscuous mode
[ 2765.842535][T27283] veth0_vlan: entered promiscuous mode
[ 2766.076173][T27283] veth1_vlan: entered promiscuous mode
[ 2766.963662][T26541] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2766.985450][T24875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2766.985940][T26541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2767.003687][T26541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2767.006772][T24875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2767.017888][T26541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2767.019752][T26541] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2767.026677][T24875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2767.032447][T24879] Bluetooth: hci2: command tx timeout
[ 2767.042927][T24875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2767.046313][T26541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2767.099629][T26537] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2767.110533][T26537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2767.214914][T18721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2767.236262][T18721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2767.244758][T18721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2767.324503][T18721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2767.354353][T18721] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2767.373545][T18721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2767.763965][T27283] veth0_macvtap: entered promiscuous mode
[ 2767.853889][T27283] veth1_macvtap: entered promiscuous mode
[ 2768.448542][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2768.459134][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.469167][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2768.485572][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.495439][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2768.506013][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.517712][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2768.541650][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.571041][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2768.581551][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.594729][T27283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2768.695724][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2768.731235][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.754686][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2768.775017][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.787133][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2768.820330][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.851679][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2768.881531][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.889868][T27431] loop3: detected capacity change from 0 to 256
[ 2768.901237][T27431] exfat: Deprecated parameter 'utf8'
[ 2768.906634][T27431] exfat: Deprecated parameter 'namecase'
[ 2768.911009][T27283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2768.912627][T27431] exfat: Deprecated parameter 'namecase'
[ 2768.940054][T27283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2768.941037][T27431] exfat: Deprecated parameter 'utf8'
[ 2768.954357][T27283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2768.978437][T27402] chnl_net:caif_netlink_parms(): no params data found
[ 2769.058344][T27283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2769.091499][T27283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2769.100246][T27283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2769.112320][T26537] Bluetooth: hci2: command tx timeout
[ 2769.118007][T18721] Bluetooth: hci3: command tx timeout
[ 2769.136660][T27431] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[ 2769.138887][T27283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2769.192161][T18721] Bluetooth: hci4: command tx timeout
[ 2769.511380][T18721] Bluetooth: hci7: command tx timeout
[ 2769.739944][T27435] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5956'.
[ 2770.247256][T27442] loop3: detected capacity change from 0 to 4096
[ 2770.281141][T27442] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 2770.404121][T27402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2770.413951][T27402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2770.425490][T27402] bridge_slave_0: entered allmulticast mode
[ 2770.435280][T27442] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 2770.437066][T27402] bridge_slave_0: entered promiscuous mode
[ 2770.453372][T27414] chnl_net:caif_netlink_parms(): no params data found
[ 2770.635480][T27402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2770.661549][T27402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2770.684394][T27442] syz.3.5957: attempt to access beyond end of device
[ 2770.684394][T27442] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0
[ 2770.698994][T27402] bridge_slave_1: entered allmulticast mode
[ 2770.713811][T27402] bridge_slave_1: entered promiscuous mode
[ 2770.744378][T27442] qnx4: unable to read the superblock
[ 2771.108132][T27418] chnl_net:caif_netlink_parms(): no params data found
[ 2771.138708][T27448] loop3: detected capacity change from 0 to 512
[ 2771.155138][T27402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2771.191628][T18721] Bluetooth: hci3: command tx timeout
[ 2771.197096][T18721] Bluetooth: hci2: command tx timeout
[ 2771.253674][T27448] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5958: casefold flag without casefold feature
[ 2771.274463][T18721] Bluetooth: hci4: command tx timeout
[ 2771.301698][T27448] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5958: couldn't read orphan inode 15 (err -117)
[ 2771.319690][T27402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2771.334536][T27448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2771.445639][T27413] chnl_net:caif_netlink_parms(): no params data found
[ 2771.541176][ T2854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2771.549127][ T2854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2771.603224][T18721] Bluetooth: hci7: command tx timeout
[ 2771.605275][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2771.702889][T27402] team0: Port device team_slave_0 added
[ 2771.754826][T27402] team0: Port device team_slave_1 added
[ 2772.270113][T27414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2772.280421][T27414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2772.289877][T27414] bridge_slave_0: entered allmulticast mode
[ 2772.315445][T27414] bridge_slave_0: entered promiscuous mode
[ 2772.336420][T27414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2772.359402][T27414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2772.370760][T27414] bridge_slave_1: entered allmulticast mode
[ 2772.383040][T27414] bridge_slave_1: entered promiscuous mode
[ 2772.485127][T27402] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2772.511071][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2772.597750][T27402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2772.632295][T27402] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2772.648365][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2772.727316][T27402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2772.959361][T27414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2773.063561][T24713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2773.063595][T24713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2773.250266][T24856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2773.271768][T18721] Bluetooth: hci3: command tx timeout
[ 2773.281163][T18721] Bluetooth: hci2: command tx timeout
[ 2773.354354][T18721] Bluetooth: hci4: command tx timeout
[ 2773.408595][T27414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2773.465016][T27418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2773.465181][T27418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2773.465372][T27418] bridge_slave_0: entered allmulticast mode
[ 2773.474841][T27418] bridge_slave_0: entered promiscuous mode
[ 2773.672362][T18721] Bluetooth: hci7: command tx timeout
[ 2773.698075][T24856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2773.860219][T27402] hsr_slave_0: entered promiscuous mode
[ 2773.868128][T27402] hsr_slave_1: entered promiscuous mode
[ 2773.875296][T27402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2773.883164][T27402] Cannot create hsr debugfs directory
[ 2773.891756][T27418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2773.898978][T27418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2773.916106][T27418] bridge_slave_1: entered allmulticast mode
[ 2773.932545][T27418] bridge_slave_1: entered promiscuous mode
[ 2773.940646][T27413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2773.967192][T27413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2773.998446][T27469] netlink: 892 bytes leftover after parsing attributes in process `syz.3.5961'.
[ 2774.002840][T27413] bridge_slave_0: entered allmulticast mode
[ 2774.024102][T27413] bridge_slave_0: entered promiscuous mode
[ 2774.127420][T24856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2774.200481][T27414] team0: Port device team_slave_0 added
[ 2774.401362][T27413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2774.409028][T27413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2774.423456][T27413] bridge_slave_1: entered allmulticast mode
[ 2774.439638][T27413] bridge_slave_1: entered promiscuous mode
[ 2774.450464][T18721] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2774.647481][T27475] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2774.660722][T24856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2774.676859][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0c
[ 2774.683649][T18721] Bluetooth: Wrong link type (-22)
[ 2774.688885][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2774.695590][T18721] Bluetooth: Wrong link type (-22)
[ 2774.700758][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2774.707353][T18721] Bluetooth: Wrong link type (-22)
[ 2774.712729][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0f
[ 2774.719238][T18721] Bluetooth: Wrong link type (-22)
[ 2774.724489][T18721] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 2774.732964][T18721] Bluetooth: Wrong link type (-22)
[ 2774.740000][T18721] Bluetooth: hci0: link tx timeout
[ 2774.746015][T18721] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2774.786201][T27414] team0: Port device team_slave_1 added
[ 2774.849784][T27474] input: syz0 as /devices/virtual/input/input71
[ 2775.122971][T27418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2775.148336][T27413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2775.240334][T27478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.329027][T27418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2775.351888][T18721] Bluetooth: hci3: command tx timeout
[ 2775.461278][T18721] Bluetooth: hci4: command tx timeout
[ 2775.477818][T27413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2775.656641][T27414] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2775.690271][T27414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2775.754241][T27414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2775.756334][T18721] Bluetooth: hci7: command tx timeout
[ 2775.902569][T27418] team0: Port device team_slave_0 added
[ 2775.991714][T27414] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2776.011089][T27414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2776.063074][T27414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2776.146859][T27418] team0: Port device team_slave_1 added
[ 2776.236080][T27413] team0: Port device team_slave_0 added
[ 2776.267024][T27413] team0: Port device team_slave_1 added
[ 2776.461908][T27418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2776.471173][T27418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2776.520169][T27418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2776.718272][T27413] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2776.740173][T27413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2776.798091][T18721] Bluetooth: hci0: command 0x0406 tx timeout
[ 2776.814949][T27413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2777.068844][T27418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2777.079763][T27418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2777.119158][T27418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2777.138000][T27413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2777.145553][T27413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2777.185196][T27413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2777.293334][T27494] loop3: detected capacity change from 0 to 24
[ 2777.411215][T27414] hsr_slave_0: entered promiscuous mode
[ 2777.452048][T27414] hsr_slave_1: entered promiscuous mode
[ 2777.478437][T27414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2777.508762][T27414] Cannot create hsr debugfs directory
[ 2778.753632][T27418] hsr_slave_0: entered promiscuous mode
[ 2778.768296][T27418] hsr_slave_1: entered promiscuous mode
[ 2778.769442][T27418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2778.769471][T27418] Cannot create hsr debugfs directory
[ 2778.923438][T24856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2779.025258][T27413] hsr_slave_0: entered promiscuous mode
[ 2779.033909][T27413] hsr_slave_1: entered promiscuous mode
[ 2779.035652][T27413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2779.035686][T27413] Cannot create hsr debugfs directory
[ 2779.412530][T24856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2779.470922][T27509] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2779.471716][T27510] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2779.472235][T27511] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2779.472683][T27512] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2779.473051][T27513] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2779.530512][T27510] trusted_key: encrypted_key: insufficient parameters specified
[ 2779.815074][T24856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2779.835267][T27509] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[ 2780.022614][T18721] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 2780.158311][T27518] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2780.180660][T24856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2780.198318][T18721] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 2780.248569][T27518] input: syz0 as /devices/virtual/input/input72
[ 2781.173847][T27526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2781.346108][T27402] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2781.384750][T24856] bridge_slave_1: left allmulticast mode
[ 2781.390783][T24856] bridge_slave_1: left promiscuous mode
[ 2781.397458][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2781.417123][T24856] bridge_slave_0: left allmulticast mode
[ 2781.431816][T24856] bridge_slave_0: left promiscuous mode
[ 2781.437714][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2781.468735][T24856] bridge_slave_1: left allmulticast mode
[ 2781.481189][T24856] bridge_slave_1: left promiscuous mode
[ 2781.487063][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2781.519997][T24856] bridge_slave_0: left allmulticast mode
[ 2781.529121][T24856] bridge_slave_0: left promiscuous mode
[ 2781.538598][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2781.564841][T24856] bridge_slave_1: left allmulticast mode
[ 2781.570519][T24856] bridge_slave_1: left promiscuous mode
[ 2781.580209][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2781.645702][T24856] bridge_slave_0: left allmulticast mode
[ 2781.681348][T24856] bridge_slave_0: left promiscuous mode
[ 2781.687262][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2781.737783][T24856] bridge_slave_1: left allmulticast mode
[ 2781.753186][T24856] bridge_slave_1: left promiscuous mode
[ 2781.781368][T24856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2781.834498][T24856] bridge_slave_0: left allmulticast mode
[ 2781.870599][T24856] bridge_slave_0: left promiscuous mode
[ 2781.901787][T24856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2784.417827][T27543] loop0: detected capacity change from 0 to 24
[ 2784.802021][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[ 2786.528212][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2786.579384][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2786.607311][T24856] bond0 (unregistering): Released all slaves
[ 2786.831504][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2786.846577][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2786.862586][T24856] bond0 (unregistering): Released all slaves
[ 2787.120570][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2787.144407][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2787.164894][T24856] bond0 (unregistering): Released all slaves
[ 2787.496916][T24856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2787.520373][T24856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2787.544197][T24856] bond0 (unregistering): Released all slaves
[ 2787.737166][T27402] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2787.922122][T27402] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2788.067425][T27402] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2788.632007][T27552] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.632433][T27554] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.633687][T27552] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.634784][T27552] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.635846][T27552] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.636594][T27552] netlink: 'syz.0.5985': attribute type 29 has an invalid length.
[ 2788.646262][T27552] trusted_key: encrypted_key: insufficient parameters specified
[ 2788.934468][T18721] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2789.038790][T27559] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2789.057233][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0c
[ 2789.057266][T18721] Bluetooth: Wrong link type (-22)
[ 2789.057376][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2789.057400][T18721] Bluetooth: Wrong link type (-22)
[ 2789.057476][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2789.057499][T18721] Bluetooth: Wrong link type (-22)
[ 2789.057578][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0f
[ 2789.057601][T18721] Bluetooth: Wrong link type (-22)
[ 2789.057674][T18721] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 2789.057698][T18721] Bluetooth: Wrong link type (-22)
[ 2789.069420][T27559] input: syz0 as /devices/virtual/input/input73
[ 2789.395395][T24856] hsr_slave_0: left promiscuous mode
[ 2789.410174][T24856] hsr_slave_1: left promiscuous mode
[ 2789.424866][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2789.426719][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2789.449739][T24856] hsr_slave_0: left promiscuous mode
[ 2789.453214][T24856] hsr_slave_1: left promiscuous mode
[ 2789.454759][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2789.454816][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2789.463878][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2789.463927][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2789.589594][T24856] hsr_slave_0: left promiscuous mode
[ 2789.631762][T24856] hsr_slave_1: left promiscuous mode
[ 2789.640761][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2789.640841][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2789.642841][T24856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2789.642892][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2789.700552][T24856] hsr_slave_0: left promiscuous mode
[ 2789.702293][T24856] hsr_slave_1: left promiscuous mode
[ 2789.703491][T24856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2789.704417][T24856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2789.930271][T24856] veth1_vlan: left promiscuous mode
[ 2789.936219][T24856] veth0_vlan: left promiscuous mode
[ 2789.943330][T24856] veth1_macvtap: left promiscuous mode
[ 2789.949059][T24856] veth0_macvtap: left promiscuous mode
[ 2789.955126][T24856] veth1_vlan: left promiscuous mode
[ 2789.961266][T24856] veth0_vlan: left promiscuous mode
[ 2789.973493][T24856] veth1_macvtap: left promiscuous mode
[ 2789.982442][T24856] veth0_macvtap: left promiscuous mode
[ 2789.992100][T24856] veth1_vlan: left promiscuous mode
[ 2790.002336][T24856] veth0_vlan: left promiscuous mode
[ 2790.018887][T24856] veth0_vlan: left promiscuous mode
[ 2790.771363][T27569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2793.283357][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2793.485664][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2793.813678][T27585] loop3: detected capacity change from 0 to 24
[ 2796.523063][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2796.635485][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2798.892319][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2799.056581][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2800.937588][T24856] team0 (unregistering): Port device team_slave_1 removed
[ 2801.053286][T24856] team0 (unregistering): Port device team_slave_0 removed
[ 2802.438015][T27402] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2802.608105][T27402] 8021q: adding VLAN 0 to HW filter on device team0
[ 2802.664533][T27594] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2802.819539][T27595] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2802.857216][T27594] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2802.874436][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2802.881732][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2802.907873][T27596] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2802.918920][T27597] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2802.959543][T27595] trusted_key: encrypted_key: insufficient parameters specified
[ 2803.038118][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2803.045413][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2803.104711][T27594] netlink: 'syz.0.5995': attribute type 29 has an invalid length.
[ 2803.379825][T27402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2803.495024][T18721] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2803.611875][T27603] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2803.637935][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0c
[ 2803.637967][T18721] Bluetooth: Wrong link type (-22)
[ 2803.638085][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2803.638111][T18721] Bluetooth: Wrong link type (-22)
[ 2803.638190][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2803.638216][T18721] Bluetooth: Wrong link type (-22)
[ 2803.638296][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0f
[ 2803.638321][T18721] Bluetooth: Wrong link type (-22)
[ 2803.638399][T18721] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 2803.638424][T18721] Bluetooth: Wrong link type (-22)
[ 2803.672476][T27603] input: syz0 as /devices/virtual/input/input74
[ 2804.170875][T27418] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2804.258079][T27418] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2804.348020][T27418] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2804.411104][T27418] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2804.627292][T27414] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2804.716914][T27414] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2804.785002][T27414] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2804.820093][T27414] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2805.098862][T27402] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2805.285448][T27413] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2805.341398][T27413] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2805.379665][T27413] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2805.461330][T27413] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2805.741390][T27619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2806.089873][T27418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2806.173513][T27402] veth0_vlan: entered promiscuous mode
[ 2806.385783][T27402] veth1_vlan: entered promiscuous mode
[ 2806.466713][T27418] 8021q: adding VLAN 0 to HW filter on device team0
[ 2806.594285][T24921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2806.601618][T24921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2807.007908][T24921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2807.015232][T24921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2807.068937][T27414] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2807.289301][T27402] veth0_macvtap: entered promiscuous mode
[ 2807.348840][T27402] veth1_macvtap: entered promiscuous mode
[ 2807.595268][T27413] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2807.672772][T27414] 8021q: adding VLAN 0 to HW filter on device team0
[ 2807.752070][T18721] Bluetooth: hci5: ACL packet for unknown connection handle 203
[ 2807.777586][T27636] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2807.807287][T27636] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2807.818657][T27636] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2807.830865][  T921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2807.838207][  T921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2807.905194][T17516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2807.912533][T17516] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2807.974566][T27636] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2807.994073][T27637] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2808.024122][T27636] trusted_key: encrypted_key: insufficient parameters specified
[ 2808.035188][T27638] netlink: 'syz.0.6005': attribute type 29 has an invalid length.
[ 2808.124143][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2808.181770][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.211067][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2808.231710][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.271029][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2808.285228][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.301078][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2808.321037][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.356396][T27402] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2808.459553][T27413] 8021q: adding VLAN 0 to HW filter on device team0
[ 2808.517903][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2808.549056][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.574161][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2808.602926][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.616728][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2808.629322][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.639852][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2808.650809][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2808.669830][T27402] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2808.775771][T27402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2808.786588][T27402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2808.803272][T27402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2808.818288][T27402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2808.908290][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2808.915707][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2809.042191][T24921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2809.049522][T24921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2809.242837][T27418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2809.433850][T18721] Bluetooth: hci5: command 0x0406 tx timeout
[ 2809.688833][T24713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2809.734375][T24713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2809.878751][T27663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2809.955212][T24856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2809.994994][T24856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2810.475423][T27414] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2810.922484][T27414] veth0_vlan: entered promiscuous mode
[ 2810.955517][T27683] loop0: detected capacity change from 0 to 24
[ 2811.120994][T27414] veth1_vlan: entered promiscuous mode
[ 2811.521321][T18721] Bluetooth: hci5: command 0x0406 tx timeout
[ 2812.173905][T27413] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2812.619517][T27418] veth0_vlan: entered promiscuous mode
[ 2812.644060][T18721] Bluetooth: hci2: ACL packet for unknown connection handle 203
[ 2812.850633][T27418] veth1_vlan: entered promiscuous mode
[ 2812.900851][T27414] veth0_macvtap: entered promiscuous mode
[ 2812.923906][T27697] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6017'.
[ 2812.964715][T27414] veth1_macvtap: entered promiscuous mode
[ 2813.113635][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2813.147108][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.191304][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2813.223477][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.261392][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2813.304198][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.316817][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2813.327671][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.337652][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2813.358363][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.390662][T27414] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2813.433069][T18721] Bluetooth: hci2: command tx timeout
[ 2813.497023][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2813.562896][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.614599][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2813.661000][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.694687][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2813.723955][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.761829][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2813.811246][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.858261][T27414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2813.901239][T27414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2813.924819][T27414] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2814.044938][T27418] veth0_macvtap: entered promiscuous mode
[ 2814.088815][T27414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2814.137310][T27414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2814.171374][T27414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2814.208493][T27414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2814.332531][T27418] veth1_macvtap: entered promiscuous mode
[ 2814.655182][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.690341][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.720657][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.732452][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.752907][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.761425][T27721] loop0: detected capacity change from 0 to 512
[ 2814.775753][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.793925][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.818115][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.830265][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.851035][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.860867][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2814.888934][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2814.914627][T27418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2815.046666][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.081231][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.104851][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.121616][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.165694][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.198111][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.237539][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.278896][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.316174][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.353008][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.380350][T27418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2815.418622][T27418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2815.467333][T27418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2815.521580][T18721] Bluetooth: hci2: command tx timeout
[ 2815.679474][T27418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.690554][T27418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.721562][T27418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.741038][T27418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.780547][T24856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2815.781797][T27413] veth0_vlan: entered promiscuous mode
[ 2815.807414][T24856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2816.006073][T27733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6028'.
[ 2816.076503][T27413] veth1_vlan: entered promiscuous mode
[ 2816.184174][T21161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2816.214553][T21161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2816.487070][T27413] veth0_macvtap: entered promiscuous mode
[ 2816.586345][T27413] veth1_macvtap: entered promiscuous mode
[ 2816.623729][T24856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2816.661969][T24856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2818.816214][T24713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2818.853240][T24713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2818.956495][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2818.991065][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.042795][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.072958][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.107656][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.165038][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.221211][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.259429][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.279994][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.300102][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.343333][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.371251][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.397491][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2819.427966][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.457228][T27413] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2819.558209][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2819.601267][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.647430][    C1] eth0: bad gso: type: 1, size: 1408
[ 2819.653434][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2819.729854][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.789305][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2819.851114][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.881193][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2819.931218][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2819.973980][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2819.994034][T27766] loop0: detected capacity change from 0 to 512
[ 2820.016416][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.062001][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2820.104390][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.154905][T27413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2820.207338][T27413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2820.261421][T27413] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2820.326988][T27413] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2820.417386][T27413] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2820.451165][T27413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2820.479103][T27413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2820.646861][T18721] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2820.727940][T27771] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2820.791458][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0c
[ 2820.798316][T18721] Bluetooth: Wrong link type (-22)
[ 2820.805335][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2820.812930][T18721] Bluetooth: Wrong link type (-22)
[ 2820.818094][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2820.828891][T18721] Bluetooth: Wrong link type (-22)
[ 2820.835468][T18721] Bluetooth: Unknown BR/EDR signaling command 0x0f
[ 2820.842281][T18721] Bluetooth: Wrong link type (-22)
[ 2820.850712][T18721] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 2820.857348][T18721] Bluetooth: Wrong link type (-22)
[ 2820.937632][T27771] input: syz0 as /devices/virtual/input/input75
[ 2821.391655][T18721] Bluetooth: hci5: unexpected event for opcode 0x041b
[ 2821.590952][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2821.625102][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2821.710200][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6039'.
[ 2821.934414][T27777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2822.066267][T27768] loop4: detected capacity change from 0 to 32768
[ 2822.094118][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2822.115947][T27768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5895 (27768)
[ 2822.139511][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2822.225412][T27768] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2822.271459][T27768] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[ 2822.327341][T27768] BTRFS info (device loop4): using free-space-tree
[ 2822.712535][T27765] loop2: detected capacity change from 0 to 32768
[ 2822.798712][T18721] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 2822.811773][T27765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6036 (27765)
[ 2822.812154][T18721] Bluetooth: hci2: Injecting HCI hardware error event
[ 2822.840412][T18721] Bluetooth: hci2: hardware error 0x00
[ 2823.412045][T27418] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2825.433148][T18721] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 2826.362417][T27829] loop4: detected capacity change from 0 to 1024
[ 2826.687797][T18721] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2827.109889][T27836] loop3: detected capacity change from 0 to 2048
[ 2827.311659][T27836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2827.699704][T27817] loop2: detected capacity change from 0 to 40427
[ 2828.201006][T27817] F2FS-fs (loop2): invalid crc value
[ 2828.357723][T27817] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 2829.525765][T26678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2829.613093][    C1] eth0: bad gso: type: 1, size: 1408
[ 2831.976469][T27884] lo speed is unknown, defaulting to 1000
[ 2832.024431][T27884] lo speed is unknown, defaulting to 1000
[ 2832.044557][T27884] lo speed is unknown, defaulting to 1000
[ 2833.606507][T18721] Bluetooth: hci4: ACL packet for unknown connection handle 203
[ 2833.792896][T27884] infiniband syz0: set active
[ 2833.797604][T27884] infiniband syz0: added lo
[ 2833.812031][T27624] lo speed is unknown, defaulting to 1000
[ 2833.867689][T27884] syz0: rxe_create_cq: returned err = -12
[ 2833.895468][T27884] infiniband syz0: Couldn't create ib_mad CQ
[ 2833.912425][T27884] infiniband syz0: Couldn't open port 1
[ 2834.103851][T27896] loop4: detected capacity change from 0 to 24
[ 2834.302902][T27900] loop5: detected capacity change from 0 to 1024
[ 2834.359876][T27884] RDS/IB: syz0: added
[ 2834.661294][T27884] smc: adding ib device syz0 with port count 1
[ 2834.685505][T27884] smc:    ib device syz0 port 1 has pnetid 
[ 2835.399289][T18721] Bluetooth: hci4: command tx timeout
[ 2835.457690][T27884] lo speed is unknown, defaulting to 1000
[ 2835.510519][T17516] lo speed is unknown, defaulting to 1000
[ 2836.909612][T27918] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6079'.
[ 2837.341723][T27884] lo speed is unknown, defaulting to 1000
[ 2837.477701][T18721] Bluetooth: hci4: command tx timeout
[ 2839.225654][T27884] lo speed is unknown, defaulting to 1000
[ 2839.553316][T18721] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 2840.085621][    C1] eth0: bad gso: type: 1, size: 1408
[ 2840.583160][T27932] loop0: detected capacity change from 0 to 32768
[ 2840.963471][T27884] lo speed is unknown, defaulting to 1000
[ 2841.245662][T26537] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2841.271903][T26537] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2841.280536][T26537] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2841.291189][T26537] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2841.300661][T26537] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 2841.308397][T26537] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2841.681363][T27956] loop1: detected capacity change from 0 to 1024
[ 2843.352538][T26537] Bluetooth: hci8: command tx timeout
[ 2843.494928][T27884] lo speed is unknown, defaulting to 1000
[ 2844.633057][T27953] lo speed is unknown, defaulting to 1000
[ 2845.432150][T26537] Bluetooth: hci8: command tx timeout
[ 2845.460028][T27964] lo speed is unknown, defaulting to 1000
[ 2845.919928][T27884] lo speed is unknown, defaulting to 1000
[ 2846.162337][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[ 2846.521702][T27977] loop4: detected capacity change from 0 to 40427
[ 2846.610270][T27977] F2FS-fs (loop4): invalid crc value
[ 2846.648797][T27977] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 2846.710168][T27953] chnl_net:caif_netlink_parms(): no params data found
[ 2847.032237][T27977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[ 2847.152347][T27977] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[ 2847.208924][T27994] loop0: detected capacity change from 0 to 32768
[ 2847.346068][T27418] syz-executor: attempt to access beyond end of device
[ 2847.346068][T27418] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2847.380924][T27418] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 2847.393827][T27953] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2847.423007][T27953] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2847.461489][T27953] bridge_slave_0: entered allmulticast mode
[ 2847.474346][T27953] bridge_slave_0: entered promiscuous mode
[ 2847.502901][T27953] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2847.510303][T27953] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2847.521495][T26537] Bluetooth: hci8: command tx timeout
[ 2847.540797][T27953] bridge_slave_1: entered allmulticast mode
[ 2847.557632][T27953] bridge_slave_1: entered promiscuous mode
[ 2847.575975][T27884] lo speed is unknown, defaulting to 1000
[ 2847.814144][T27953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2847.888021][T27953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2848.197047][T27953] team0: Port device team_slave_0 added
[ 2848.248875][T27953] team0: Port device team_slave_1 added
[ 2848.594031][T27953] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2848.625580][T27953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2848.721494][T27953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2848.755471][T27953] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2848.771161][T27953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2848.861269][T27953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2848.923501][T27884] lo speed is unknown, defaulting to 1000
[ 2849.234754][T27953] hsr_slave_0: entered promiscuous mode
[ 2849.263685][T27953] hsr_slave_1: entered promiscuous mode
[ 2849.286532][T27953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2849.320782][T27953] Cannot create hsr debugfs directory
[ 2849.592082][T26537] Bluetooth: hci8: command tx timeout
[ 2850.258552][T27953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2850.281408][T27969] rdma_rxe: rxe_newlink: failed to add lo
[ 2850.867936][T27953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2851.677160][T27953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2851.950083][T28020] loop0: detected capacity change from 0 to 32768
[ 2852.320479][T27953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2852.791658][T24713] bridge_slave_1: left allmulticast mode
[ 2852.800865][T24713] bridge_slave_1: left promiscuous mode
[ 2852.841821][T24713] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2852.983049][T24713] bridge_slave_0: left allmulticast mode
[ 2852.988832][T24713] bridge_slave_0: left promiscuous mode
[ 2853.038289][T24713] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2853.251402][T28051] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2853.255870][T24875] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 2853.319441][T24875] Bluetooth: Unknown BR/EDR signaling command 0x0c
[ 2853.326210][T24875] Bluetooth: Wrong link type (-22)
[ 2853.332030][T24875] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2853.338538][T24875] Bluetooth: Wrong link type (-22)
[ 2853.343967][T24875] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 2853.350469][T24875] Bluetooth: Wrong link type (-22)
[ 2853.357488][T24875] Bluetooth: Unknown BR/EDR signaling command 0x0f
[ 2853.364206][T24875] Bluetooth: Wrong link type (-22)
[ 2853.369565][T24875] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 2853.379358][T24875] Bluetooth: Wrong link type (-22)
[ 2853.434425][T28051] input: syz0 as /devices/virtual/input/input76
[ 2853.459138][T24875] ==================================================================
[ 2853.467227][T24875] BUG: KASAN: slab-use-after-free in l2cap_connect.constprop.0+0x10d8/0x1270
[ 2853.476045][T24875] Read of size 8 at addr ffff888062662800 by task kworker/u9:2/24875
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2853.484149][T24875] 
[ 2853.486499][T24875] CPU: 0 PID: 24875 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2853.496514][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2853.506574][T24875] Workqueue: hci0 hci_rx_work
[ 2853.511296][T24875] Call Trace:
[ 2853.514622][T24875]  <TASK>
[ 2853.517553][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2853.522266][T24875]  print_report+0xc3/0x620
[ 2853.526710][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.532354][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.537998][T24875]  ? __phys_addr+0xc6/0x150
[ 2853.542519][T24875]  kasan_report+0xd9/0x110
[ 2853.546964][T24875]  ? l2cap_connect.constprop.0+0x10d8/0x1270
[ 2853.552973][T24875]  ? l2cap_connect.constprop.0+0x10d8/0x1270
[ 2853.558999][T24875]  l2cap_connect.constprop.0+0x10d8/0x1270
[ 2853.564850][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2853.570074][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2853.576270][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.581925][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2853.587616][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2853.593626][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2853.598855][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.604513][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2853.610009][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2853.615001][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.620749][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2853.625472][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2853.630537][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2853.635780][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2853.641191][T24875]  ? trace_contention_end+0xea/0x140
[ 2853.646527][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.652186][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2853.657850][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2853.663858][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2853.668576][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.674238][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2853.680153][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2853.685217][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2853.691513][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2853.696587][T24875]  hci_rx_work+0xaab/0x1610
[ 2853.701149][T24875]  process_one_work+0x9c8/0x1b40
[ 2853.706143][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2853.711214][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2853.716647][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.722315][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2853.727973][T24875]  ? assign_work+0x1a0/0x250
[ 2853.732608][T24875]  worker_thread+0x6c8/0xf20
[ 2853.737259][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2853.742422][T24875]  kthread+0x2c4/0x3a0
[ 2853.746521][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2853.751778][T24875]  ? __pfx_kthread+0x10/0x10
[ 2853.756413][T24875]  ret_from_fork+0x48/0x80
[ 2853.760873][T24875]  ? __pfx_kthread+0x10/0x10
[ 2853.765495][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2853.770316][T24875]  </TASK>
[ 2853.773343][T24875] 
[ 2853.775666][T24875] Allocated by task 26537:
[ 2853.780084][T24875]  kasan_save_stack+0x33/0x60
[ 2853.784797][T24875]  kasan_save_track+0x14/0x30
[ 2853.789509][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2853.794132][T24875]  l2cap_conn_add.part.0+0x60/0xa60
[ 2853.799352][T24875]  l2cap_connect_cfm+0x428/0xf80
[ 2853.804324][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2853.809819][T24875]  hci_event_packet+0x9ee/0x1180
[ 2853.814790][T24875]  hci_rx_work+0x2c6/0x1610
[ 2853.819334][T24875]  process_one_work+0x9c8/0x1b40
[ 2853.824314][T24875]  worker_thread+0x6c8/0xf20
[ 2853.829032][T24875]  kthread+0x2c4/0x3a0
[ 2853.833121][T24875]  ret_from_fork+0x48/0x80
[ 2853.837577][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2853.842384][T24875] 
[ 2853.844712][T24875] Freed by task 26537:
[ 2853.848779][T24875]  kasan_save_stack+0x33/0x60
[ 2853.853494][T24875]  kasan_save_track+0x14/0x30
[ 2853.858206][T24875]  kasan_save_free_info+0x3b/0x60
[ 2853.863257][T24875]  poison_slab_object+0xf7/0x160
[ 2853.868228][T24875]  __kasan_slab_free+0x32/0x50
[ 2853.873029][T24875]  kfree+0x12a/0x3b0
[ 2853.876958][T24875]  l2cap_conn_del+0x59f/0x740
[ 2853.881665][T24875]  l2cap_connect_cfm+0x9e6/0xf80
[ 2853.886636][T24875]  hci_conn_failed+0x1c6/0x370
[ 2853.891416][T24875]  hci_abort_conn_sync+0x75a/0xb50
[ 2853.896574][T24875]  abort_conn_sync+0x197/0x360
[ 2853.901387][T24875]  hci_cmd_sync_work+0x1a7/0x410
[ 2853.906342][T24875]  process_one_work+0x9c8/0x1b40
[ 2853.911318][T24875]  worker_thread+0x6c8/0xf20
[ 2853.915950][T24875]  kthread+0x2c4/0x3a0
[ 2853.920046][T24875]  ret_from_fork+0x48/0x80
[ 2853.924512][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2853.929322][T24875] 
[ 2853.931658][T24875] Last potentially related work creation:
[ 2853.937382][T24875]  kasan_save_stack+0x33/0x60
[ 2853.942097][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2853.947491][T24875]  insert_work+0x36/0x230
[ 2853.951856][T24875]  __queue_work+0x97e/0x1070
[ 2853.956487][T24875]  call_timer_fn+0x1a3/0x610
[ 2853.961113][T24875]  __run_timers+0x567/0xaf0
[ 2853.965729][T24875]  run_timer_base+0x111/0x190
[ 2853.970439][T24875]  run_timer_softirq+0x1a/0x40
[ 2853.975240][T24875]  handle_softirqs+0x219/0x8f0
[ 2853.980022][T24875]  irq_exit_rcu+0xbb/0x120
[ 2853.984457][T24875]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 2853.990112][T24875]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2853.996136][T24875] 
[ 2853.998463][T24875] Second to last potentially related work creation:
[ 2854.005050][T24875]  kasan_save_stack+0x33/0x60
[ 2854.009762][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2854.015158][T24875]  insert_work+0x36/0x230
[ 2854.019525][T24875]  __queue_work+0x3f8/0x1070
[ 2854.024163][T24875]  queue_work_on+0x11a/0x140
[ 2854.028793][T24875]  l2cap_connect_cfm+0x9c9/0xf80
[ 2854.033767][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2854.039347][T24875]  hci_event_packet+0x9ee/0x1180
[ 2854.044317][T24875]  hci_rx_work+0x2c6/0x1610
[ 2854.048860][T24875]  process_one_work+0x9c8/0x1b40
[ 2854.053834][T24875]  worker_thread+0x6c8/0xf20
[ 2854.058466][T24875]  kthread+0x2c4/0x3a0
[ 2854.062556][T24875]  ret_from_fork+0x48/0x80
[ 2854.067018][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2854.071821][T24875] 
[ 2854.074143][T24875] The buggy address belongs to the object at ffff888062662800
[ 2854.074143][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2854.088210][T24875] The buggy address is located 0 bytes inside of
[ 2854.088210][T24875]  freed 1024-byte region [ffff888062662800, ffff888062662c00)
[ 2854.102027][T24875] 
[ 2854.104356][T24875] The buggy address belongs to the physical page:
[ 2854.110767][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62660
[ 2854.119549][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2854.128158][T24875] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2854.136156][T24875] page_type: 0xffffefff(slab)
[ 2854.140848][T24875] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2854.149453][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2854.158059][T24875] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2854.166773][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2854.175470][T24875] head: 00fff00000000003 ffffea0001899801 ffffffffffffffff 0000000000000000
[ 2854.184161][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2854.192838][T24875] page dumped because: kasan: bad access detected
[ 2854.199255][T24875] page_owner tracks the page as allocated
[ 2854.204971][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2854, tgid 2854 (kworker/u8:9), ts 1559074969014, free_ts 1557599401370
[ 2854.226022][T24875]  post_alloc_hook+0x2d1/0x350
[ 2854.230821][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2854.236401][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2854.241738][T24875]  alloc_slab_page+0x56/0x110
[ 2854.246445][T24875]  new_slab+0x84/0x260
[ 2854.250551][T24875]  ___slab_alloc+0xdac/0x1870
[ 2854.255270][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2854.260703][T24875]  __kmalloc_noprof+0x367/0x400
[ 2854.265595][T24875]  ieee802_11_parse_elems_full+0xea/0x1680
[ 2854.271432][T24875]  ieee80211_inform_bss+0xfd/0x1100
[ 2854.276654][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2854.282919][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2854.288571][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2854.294663][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2854.300322][T24875]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[ 2854.306504][T24875]  ieee80211_iface_work+0xc0b/0xf00
[ 2854.311732][T24875] page last free pid 5164 tgid 5164 stack trace:
[ 2854.318090][T24875]  free_unref_page+0x64a/0xe40
[ 2854.322882][T24875]  kasan_depopulate_vmalloc_pte+0x63/0x80
[ 2854.328637][T24875]  __apply_to_page_range+0x798/0xdd0
[ 2854.334043][T24875]  kasan_release_vmalloc+0xac/0xc0
[ 2854.339189][T24875]  purge_vmap_node+0x3fc/0x920
[ 2854.343984][T24875]  __purge_vmap_area_lazy+0x9ca/0xc10
[ 2854.349384][T24875]  drain_vmap_area_work+0x27/0x40
[ 2854.354440][T24875]  process_one_work+0x9c8/0x1b40
[ 2854.359418][T24875]  worker_thread+0x6c8/0xf20
[ 2854.364071][T24875]  kthread+0x2c4/0x3a0
[ 2854.368251][T24875]  ret_from_fork+0x48/0x80
[ 2854.372713][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2854.377519][T24875] 
[ 2854.379844][T24875] Memory state around the buggy address:
[ 2854.385481][T24875]  ffff888062662700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2854.393560][T24875]  ffff888062662780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2854.401725][T24875] >ffff888062662800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2854.409793][T24875]                    ^
[ 2854.413864][T24875]  ffff888062662880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2854.421937][T24875]  ffff888062662900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2854.430007][T24875] ==================================================================
[ 2854.438237][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2854.475553][T24875] Disabling lock debugging due to kernel taint
[ 2854.482044][T24875] ==================================================================
[ 2854.490120][T24875] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x788/0x920
[ 2854.497794][T24875] Read of size 4 at addr ffff888062662810 by task kworker/u9:2/24875
[ 2854.505888][T24875] 
[ 2854.508227][T24875] CPU: 0 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2854.519715][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2854.529794][T24875] Workqueue: hci0 hci_rx_work
[ 2854.534530][T24875] Call Trace:
[ 2854.537828][T24875]  <TASK>
[ 2854.540779][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2854.545522][T24875]  print_report+0xc3/0x620
[ 2854.549996][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.555663][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.561310][T24875]  ? __phys_addr+0xc6/0x150
[ 2854.565830][T24875]  kasan_report+0xd9/0x110
[ 2854.570270][T24875]  ? l2cap_send_cmd+0x788/0x920
[ 2854.575135][T24875]  ? l2cap_send_cmd+0x788/0x920
[ 2854.580004][T24875]  l2cap_send_cmd+0x788/0x920
[ 2854.584722][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2854.590467][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2854.595676][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2854.601853][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.607579][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2854.613228][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2854.619221][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2854.624434][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.630075][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2854.635551][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2854.640521][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.646165][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2854.651051][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2854.656096][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2854.661315][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2854.666711][T24875]  ? trace_contention_end+0xea/0x140
[ 2854.672023][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.677663][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2854.683311][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2854.689304][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2854.694007][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.699647][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2854.705546][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2854.710592][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2854.716888][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2854.721939][T24875]  hci_rx_work+0xaab/0x1610
[ 2854.726480][T24875]  process_one_work+0x9c8/0x1b40
[ 2854.731454][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2854.736503][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2854.741906][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.747556][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2854.753200][T24875]  ? assign_work+0x1a0/0x250
[ 2854.757828][T24875]  worker_thread+0x6c8/0xf20
[ 2854.762452][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2854.767586][T24875]  kthread+0x2c4/0x3a0
[ 2854.771667][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2854.776889][T24875]  ? __pfx_kthread+0x10/0x10
[ 2854.781510][T24875]  ret_from_fork+0x48/0x80
[ 2854.785958][T24875]  ? __pfx_kthread+0x10/0x10
[ 2854.790556][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2854.795362][T24875]  </TASK>
[ 2854.798376][T24875] 
[ 2854.800690][T24875] Allocated by task 26537:
[ 2854.805097][T24875]  kasan_save_stack+0x33/0x60
[ 2854.809791][T24875]  kasan_save_track+0x14/0x30
[ 2854.814486][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2854.819093][T24875]  l2cap_conn_add.part.0+0x60/0xa60
[ 2854.824300][T24875]  l2cap_connect_cfm+0x428/0xf80
[ 2854.829430][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2854.834921][T24875]  hci_event_packet+0x9ee/0x1180
[ 2854.839890][T24875]  hci_rx_work+0x2c6/0x1610
[ 2854.844422][T24875]  process_one_work+0x9c8/0x1b40
[ 2854.849388][T24875]  worker_thread+0x6c8/0xf20
[ 2854.853997][T24875]  kthread+0x2c4/0x3a0
[ 2854.858072][T24875]  ret_from_fork+0x48/0x80
[ 2854.862509][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2854.867295][T24875] 
[ 2854.869613][T24875] Freed by task 26537:
[ 2854.873675][T24875]  kasan_save_stack+0x33/0x60
[ 2854.878368][T24875]  kasan_save_track+0x14/0x30
[ 2854.883061][T24875]  kasan_save_free_info+0x3b/0x60
[ 2854.888093][T24875]  poison_slab_object+0xf7/0x160
[ 2854.893050][T24875]  __kasan_slab_free+0x32/0x50
[ 2854.897832][T24875]  kfree+0x12a/0x3b0
[ 2854.901742][T24875]  l2cap_conn_del+0x59f/0x740
[ 2854.906427][T24875]  l2cap_connect_cfm+0x9e6/0xf80
[ 2854.911389][T24875]  hci_conn_failed+0x1c6/0x370
[ 2854.916157][T24875]  hci_abort_conn_sync+0x75a/0xb50
[ 2854.921290][T24875]  abort_conn_sync+0x197/0x360
[ 2854.926075][T24875]  hci_cmd_sync_work+0x1a7/0x410
[ 2854.931021][T24875]  process_one_work+0x9c8/0x1b40
[ 2854.935991][T24875]  worker_thread+0x6c8/0xf20
[ 2854.940603][T24875]  kthread+0x2c4/0x3a0
[ 2854.944691][T24875]  ret_from_fork+0x48/0x80
[ 2854.949154][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2854.953943][T24875] 
[ 2854.956259][T24875] Last potentially related work creation:
[ 2854.961963][T24875]  kasan_save_stack+0x33/0x60
[ 2854.966658][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2854.972037][T24875]  insert_work+0x36/0x230
[ 2854.976381][T24875]  __queue_work+0x97e/0x1070
[ 2854.980998][T24875]  call_timer_fn+0x1a3/0x610
[ 2854.985627][T24875]  __run_timers+0x567/0xaf0
[ 2854.990145][T24875]  run_timer_base+0x111/0x190
[ 2854.994856][T24875]  run_timer_softirq+0x1a/0x40
[ 2854.999640][T24875]  handle_softirqs+0x219/0x8f0
[ 2855.004408][T24875]  irq_exit_rcu+0xbb/0x120
[ 2855.008828][T24875]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 2855.014471][T24875]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2855.020493][T24875] 
[ 2855.022815][T24875] Second to last potentially related work creation:
[ 2855.029407][T24875]  kasan_save_stack+0x33/0x60
[ 2855.034104][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2855.039484][T24875]  insert_work+0x36/0x230
[ 2855.043831][T24875]  __queue_work+0x3f8/0x1070
[ 2855.048445][T24875]  queue_work_on+0x11a/0x140
[ 2855.053058][T24875]  l2cap_connect_cfm+0x9c9/0xf80
[ 2855.058030][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2855.063504][T24875]  hci_event_packet+0x9ee/0x1180
[ 2855.068473][T24875]  hci_rx_work+0x2c6/0x1610
[ 2855.072995][T24875]  process_one_work+0x9c8/0x1b40
[ 2855.077951][T24875]  worker_thread+0x6c8/0xf20
[ 2855.082921][T24875]  kthread+0x2c4/0x3a0
[ 2855.087005][T24875]  ret_from_fork+0x48/0x80
[ 2855.091468][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2855.096255][T24875] 
[ 2855.098567][T24875] The buggy address belongs to the object at ffff888062662800
[ 2855.098567][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2855.112621][T24875] The buggy address is located 16 bytes inside of
[ 2855.112621][T24875]  freed 1024-byte region [ffff888062662800, ffff888062662c00)
[ 2855.126424][T24875] 
[ 2855.128756][T24875] The buggy address belongs to the physical page:
[ 2855.135154][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62660
[ 2855.143916][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2855.152437][T24875] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2855.160417][T24875] page_type: 0xffffefff(slab)
[ 2855.165096][T24875] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2855.173700][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2855.182305][T24875] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2855.191000][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2855.199689][T24875] head: 00fff00000000003 ffffea0001899801 ffffffffffffffff 0000000000000000
[ 2855.208367][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2855.217031][T24875] page dumped because: kasan: bad access detected
[ 2855.223437][T24875] page_owner tracks the page as allocated
[ 2855.229140][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2854, tgid 2854 (kworker/u8:9), ts 1559074969014, free_ts 1557599401370
[ 2855.250170][T24875]  post_alloc_hook+0x2d1/0x350
[ 2855.254967][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2855.260532][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2855.265832][T24875]  alloc_slab_page+0x56/0x110
[ 2855.270519][T24875]  new_slab+0x84/0x260
[ 2855.274693][T24875]  ___slab_alloc+0xdac/0x1870
[ 2855.279390][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2855.284781][T24875]  __kmalloc_noprof+0x367/0x400
[ 2855.289651][T24875]  ieee802_11_parse_elems_full+0xea/0x1680
[ 2855.295476][T24875]  ieee80211_inform_bss+0xfd/0x1100
[ 2855.300684][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2855.306929][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2855.312568][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2855.318641][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2855.324282][T24875]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[ 2855.330444][T24875]  ieee80211_iface_work+0xc0b/0xf00
[ 2855.335651][T24875] page last free pid 5164 tgid 5164 stack trace:
[ 2855.341971][T24875]  free_unref_page+0x64a/0xe40
[ 2855.346744][T24875]  kasan_depopulate_vmalloc_pte+0x63/0x80
[ 2855.352481][T24875]  __apply_to_page_range+0x798/0xdd0
[ 2855.357779][T24875]  kasan_release_vmalloc+0xac/0xc0
[ 2855.362906][T24875]  purge_vmap_node+0x3fc/0x920
[ 2855.367678][T24875]  __purge_vmap_area_lazy+0x9ca/0xc10
[ 2855.373058][T24875]  drain_vmap_area_work+0x27/0x40
[ 2855.378091][T24875]  process_one_work+0x9c8/0x1b40
[ 2855.383048][T24875]  worker_thread+0x6c8/0xf20
[ 2855.387657][T24875]  kthread+0x2c4/0x3a0
[ 2855.391732][T24875]  ret_from_fork+0x48/0x80
[ 2855.396167][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2855.400951][T24875] 
[ 2855.403277][T24875] Memory state around the buggy address:
[ 2855.408899][T24875]  ffff888062662700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2855.416963][T24875]  ffff888062662780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2855.425022][T24875] >ffff888062662800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2855.433166][T24875]                          ^
[ 2855.437745][T24875]  ffff888062662880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2855.445818][T24875]  ffff888062662900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2855.453874][T24875] ==================================================================
[ 2855.461939][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2855.477679][T18721] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[ 2855.486125][T18721] Bluetooth: hci7: Injecting HCI hardware error event
[ 2855.493876][T18721] Bluetooth: hci7: hardware error 0x00
[ 2855.571851][T24879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2855.590175][T24879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2855.598267][T24879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2855.608177][T24879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2855.618352][T24879] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2855.632148][T24879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2855.649085][T24875] ==================================================================
[ 2855.657171][T24875] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x882/0x920
[ 2855.664931][T24875] Read of size 8 at addr ffff888062662800 by task kworker/u9:2/24875
[ 2855.673025][T24875] 
[ 2855.675367][T24875] CPU: 0 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2855.686854][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2855.696932][T24875] Workqueue: hci0 hci_rx_work
[ 2855.701669][T24875] Call Trace:
[ 2855.704965][T24875]  <TASK>
[ 2855.707909][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2855.712620][T24875]  print_report+0xc3/0x620
[ 2855.717068][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.722718][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.728380][T24875]  ? __phys_addr+0xc6/0x150
[ 2855.732901][T24875]  kasan_report+0xd9/0x110
[ 2855.737357][T24875]  ? l2cap_send_cmd+0x882/0x920
[ 2855.742258][T24875]  ? l2cap_send_cmd+0x882/0x920
[ 2855.747247][T24875]  l2cap_send_cmd+0x882/0x920
[ 2855.752061][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2855.757927][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2855.763165][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2855.769367][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.775010][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2855.780678][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2855.786673][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2855.791888][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.797554][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2855.803026][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2855.808011][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.813656][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2855.818363][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2855.823408][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2855.828629][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2855.834021][T24875]  ? trace_contention_end+0xea/0x140
[ 2855.839336][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.844981][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2855.850650][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2855.856646][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2855.861352][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.867005][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2855.872942][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2855.877994][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2855.884269][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2855.889325][T24875]  hci_rx_work+0xaab/0x1610
[ 2855.893882][T24875]  process_one_work+0x9c8/0x1b40
[ 2855.898850][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2855.903895][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2855.909290][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.914939][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2855.920578][T24875]  ? assign_work+0x1a0/0x250
[ 2855.925276][T24875]  worker_thread+0x6c8/0xf20
[ 2855.929901][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2855.935121][T24875]  kthread+0x2c4/0x3a0
[ 2855.939200][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2855.944425][T24875]  ? __pfx_kthread+0x10/0x10
[ 2855.949071][T24875]  ret_from_fork+0x48/0x80
[ 2855.953515][T24875]  ? __pfx_kthread+0x10/0x10
[ 2855.958116][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2855.962924][T24875]  </TASK>
[ 2855.965952][T24875] 
[ 2855.968632][T24875] Allocated by task 26537:
[ 2855.973054][T24875]  kasan_save_stack+0x33/0x60
[ 2855.977746][T24875]  kasan_save_track+0x14/0x30
[ 2855.982440][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2855.987043][T24875]  l2cap_conn_add.part.0+0x60/0xa60
[ 2855.992246][T24875]  l2cap_connect_cfm+0x428/0xf80
[ 2855.997214][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2856.002690][T24875]  hci_event_packet+0x9ee/0x1180
[ 2856.007641][T24875]  hci_rx_work+0x2c6/0x1610
[ 2856.012164][T24875]  process_one_work+0x9c8/0x1b40
[ 2856.017119][T24875]  worker_thread+0x6c8/0xf20
[ 2856.021729][T24875]  kthread+0x2c4/0x3a0
[ 2856.025802][T24875]  ret_from_fork+0x48/0x80
[ 2856.030235][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2856.035018][T24875] 
[ 2856.037331][T24875] Freed by task 26537:
[ 2856.041483][T24875]  kasan_save_stack+0x33/0x60
[ 2856.046176][T24875]  kasan_save_track+0x14/0x30
[ 2856.050865][T24875]  kasan_save_free_info+0x3b/0x60
[ 2856.055900][T24875]  poison_slab_object+0xf7/0x160
[ 2856.060852][T24875]  __kasan_slab_free+0x32/0x50
[ 2856.065635][T24875]  kfree+0x12a/0x3b0
[ 2856.069546][T24875]  l2cap_conn_del+0x59f/0x740
[ 2856.074233][T24875]  l2cap_connect_cfm+0x9e6/0xf80
[ 2856.079185][T24875]  hci_conn_failed+0x1c6/0x370
[ 2856.083951][T24875]  hci_abort_conn_sync+0x75a/0xb50
[ 2856.089107][T24875]  abort_conn_sync+0x197/0x360
[ 2856.093889][T24875]  hci_cmd_sync_work+0x1a7/0x410
[ 2856.098829][T24875]  process_one_work+0x9c8/0x1b40
[ 2856.103786][T24875]  worker_thread+0x6c8/0xf20
[ 2856.108401][T24875]  kthread+0x2c4/0x3a0
[ 2856.112481][T24875]  ret_from_fork+0x48/0x80
[ 2856.116919][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2856.121703][T24875] 
[ 2856.124017][T24875] Last potentially related work creation:
[ 2856.129719][T24875]  kasan_save_stack+0x33/0x60
[ 2856.134412][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2856.139789][T24875]  insert_work+0x36/0x230
[ 2856.144136][T24875]  __queue_work+0x97e/0x1070
[ 2856.148746][T24875]  call_timer_fn+0x1a3/0x610
[ 2856.153359][T24875]  __run_timers+0x567/0xaf0
[ 2856.157878][T24875]  run_timer_base+0x111/0x190
[ 2856.162572][T24875]  run_timer_softirq+0x1a/0x40
[ 2856.167368][T24875]  handle_softirqs+0x219/0x8f0
[ 2856.172157][T24875]  irq_exit_rcu+0xbb/0x120
[ 2856.176599][T24875]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 2856.182238][T24875]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2856.188239][T24875] 
[ 2856.190552][T24875] Second to last potentially related work creation:
[ 2856.197124][T24875]  kasan_save_stack+0x33/0x60
[ 2856.201819][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2856.207197][T24875]  insert_work+0x36/0x230
[ 2856.211541][T24875]  __queue_work+0x3f8/0x1070
[ 2856.216149][T24875]  queue_work_on+0x11a/0x140
[ 2856.220756][T24875]  l2cap_connect_cfm+0x9c9/0xf80
[ 2856.225708][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2856.231182][T24875]  hci_event_packet+0x9ee/0x1180
[ 2856.236148][T24875]  hci_rx_work+0x2c6/0x1610
[ 2856.240672][T24875]  process_one_work+0x9c8/0x1b40
[ 2856.245647][T24875]  worker_thread+0x6c8/0xf20
[ 2856.250255][T24875]  kthread+0x2c4/0x3a0
[ 2856.254328][T24875]  ret_from_fork+0x48/0x80
[ 2856.258770][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2856.263557][T24875] 
[ 2856.265871][T24875] The buggy address belongs to the object at ffff888062662800
[ 2856.265871][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2856.279923][T24875] The buggy address is located 0 bytes inside of
[ 2856.279923][T24875]  freed 1024-byte region [ffff888062662800, ffff888062662c00)
[ 2856.293637][T24875] 
[ 2856.295952][T24875] The buggy address belongs to the physical page:
[ 2856.302356][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62660
[ 2856.311134][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2856.319633][T24875] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2856.327612][T24875] page_type: 0xffffefff(slab)
[ 2856.332293][T24875] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2856.340878][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2856.349468][T24875] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2856.358142][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2856.366818][T24875] head: 00fff00000000003 ffffea0001899801 ffffffffffffffff 0000000000000000
[ 2856.375496][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2856.384161][T24875] page dumped because: kasan: bad access detected
[ 2856.390582][T24875] page_owner tracks the page as allocated
[ 2856.396283][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2854, tgid 2854 (kworker/u8:9), ts 1559074969014, free_ts 1557599401370
[ 2856.417332][T24875]  post_alloc_hook+0x2d1/0x350
[ 2856.422116][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2856.427674][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2856.432971][T24875]  alloc_slab_page+0x56/0x110
[ 2856.437659][T24875]  new_slab+0x84/0x260
[ 2856.441746][T24875]  ___slab_alloc+0xdac/0x1870
[ 2856.446440][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2856.451833][T24875]  __kmalloc_noprof+0x367/0x400
[ 2856.456703][T24875]  ieee802_11_parse_elems_full+0xea/0x1680
[ 2856.462522][T24875]  ieee80211_inform_bss+0xfd/0x1100
[ 2856.467729][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2856.473983][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2856.479734][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2856.485828][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2856.491475][T24875]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[ 2856.497648][T24875]  ieee80211_iface_work+0xc0b/0xf00
[ 2856.502864][T24875] page last free pid 5164 tgid 5164 stack trace:
[ 2856.509182][T24875]  free_unref_page+0x64a/0xe40
[ 2856.513960][T24875]  kasan_depopulate_vmalloc_pte+0x63/0x80
[ 2856.519693][T24875]  __apply_to_page_range+0x798/0xdd0
[ 2856.524991][T24875]  kasan_release_vmalloc+0xac/0xc0
[ 2856.530114][T24875]  purge_vmap_node+0x3fc/0x920
[ 2856.534885][T24875]  __purge_vmap_area_lazy+0x9ca/0xc10
[ 2856.540266][T24875]  drain_vmap_area_work+0x27/0x40
[ 2856.545298][T24875]  process_one_work+0x9c8/0x1b40
[ 2856.550264][T24875]  worker_thread+0x6c8/0xf20
[ 2856.554874][T24875]  kthread+0x2c4/0x3a0
[ 2856.558948][T24875]  ret_from_fork+0x48/0x80
[ 2856.563383][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2856.568165][T24875] 
[ 2856.570479][T24875] Memory state around the buggy address:
[ 2856.576111][T24875]  ffff888062662700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2856.584196][T24875]  ffff888062662780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2856.592269][T24875] >ffff888062662800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2856.600323][T24875]                    ^
[ 2856.604390][T24875]  ffff888062662880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2856.612451][T24875]  ffff888062662900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2856.620593][T24875] ==================================================================
[ 2856.628701][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2856.687386][T24875] ==================================================================
[ 2856.695490][T24875] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x7c7/0x920
[ 2856.703143][T24875] Read of size 1 at addr ffff88807f1d583b by task kworker/u9:2/24875
[ 2856.711228][T24875] 
[ 2856.713568][T24875] CPU: 1 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2856.725054][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2856.735133][T24875] Workqueue: hci0 hci_rx_work
[ 2856.739867][T24875] Call Trace:
[ 2856.743162][T24875]  <TASK>
[ 2856.746109][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2856.750844][T24875]  print_report+0xc3/0x620
[ 2856.755323][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.760974][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.766636][T24875]  ? __phys_addr+0xc6/0x150
[ 2856.771178][T24875]  kasan_report+0xd9/0x110
[ 2856.775706][T24875]  ? l2cap_send_cmd+0x7c7/0x920
[ 2856.780568][T24875]  ? l2cap_send_cmd+0x7c7/0x920
[ 2856.785449][T24875]  l2cap_send_cmd+0x7c7/0x920
[ 2856.790172][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2856.795948][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2856.801183][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2856.807365][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.813012][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2856.818692][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2856.824711][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2856.829956][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.835621][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2856.841120][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2856.846114][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.851777][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2856.856495][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2856.861558][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2856.866793][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2856.872201][T24875]  ? trace_contention_end+0xea/0x140
[ 2856.877533][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.883186][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2856.888848][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2856.894867][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2856.899592][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.905250][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2856.911166][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2856.916230][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2856.922524][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2856.927593][T24875]  hci_rx_work+0xaab/0x1610
[ 2856.932145][T24875]  process_one_work+0x9c8/0x1b40
[ 2856.937137][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2856.942197][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2856.947610][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.953270][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2856.958921][T24875]  ? assign_work+0x1a0/0x250
[ 2856.963548][T24875]  worker_thread+0x6c8/0xf20
[ 2856.968191][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2856.973346][T24875]  kthread+0x2c4/0x3a0
[ 2856.977438][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2856.982680][T24875]  ? __pfx_kthread+0x10/0x10
[ 2856.987294][T24875]  ret_from_fork+0x48/0x80
[ 2856.991761][T24875]  ? __pfx_kthread+0x10/0x10
[ 2856.996385][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2857.001208][T24875]  </TASK>
[ 2857.004264][T24875] 
[ 2857.006585][T24875] Allocated by task 24713:
[ 2857.011001][T24875]  kasan_save_stack+0x33/0x60
[ 2857.015720][T24875]  kasan_save_track+0x14/0x30
[ 2857.020427][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2857.025047][T24875]  __kmalloc_node_track_caller_noprof+0x20f/0x430
[ 2857.031482][T24875]  kmalloc_reserve+0xef/0x2c0
[ 2857.036178][T24875]  __alloc_skb+0x164/0x380
[ 2857.040624][T24875]  inet6_rt_notify+0xf0/0x2c0
[ 2857.045340][T24875]  fib6_del+0xf08/0x17b0
[ 2857.049614][T24875]  fib6_clean_node+0x426/0x5b0
[ 2857.054425][T24875]  fib6_walk_continue+0x452/0x8d0
[ 2857.059465][T24875]  fib6_walk+0x182/0x370
[ 2857.063723][T24875]  fib6_clean_tree+0xd7/0x120
[ 2857.068424][T24875]  __fib6_clean_all+0x100/0x2d0
[ 2857.073295][T24875]  rt6_disable_ip+0x765/0x980
[ 2857.078013][T24875]  addrconf_ifdown.isra.0+0x117/0x1b40
[ 2857.083496][T24875]  addrconf_notify+0x223/0x19e0
[ 2857.088381][T24875]  notifier_call_chain+0xbc/0x410
[ 2857.093426][T24875]  call_netdevice_notifiers_info+0xbe/0x140
[ 2857.099337][T24875]  dev_close_many+0x333/0x6a0
[ 2857.104038][T24875]  unregister_netdevice_many_notify+0x477/0x1e40
[ 2857.110402][T24875]  cleanup_net+0x58c/0xbf0
[ 2857.114829][T24875]  process_one_work+0x9c8/0x1b40
[ 2857.119802][T24875]  worker_thread+0x6c8/0xf20
[ 2857.124424][T24875]  kthread+0x2c4/0x3a0
[ 2857.128512][T24875]  ret_from_fork+0x48/0x80
[ 2857.132964][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2857.137762][T24875] 
[ 2857.140082][T24875] Freed by task 24713:
[ 2857.144153][T24875]  kasan_save_stack+0x33/0x60
[ 2857.148862][T24875]  kasan_save_track+0x14/0x30
[ 2857.153571][T24875]  kasan_save_free_info+0x3b/0x60
[ 2857.158621][T24875]  poison_slab_object+0xf7/0x160
[ 2857.163592][T24875]  __kasan_slab_free+0x32/0x50
[ 2857.168418][T24875]  kfree+0x12a/0x3b0
[ 2857.172343][T24875]  skb_free_head+0x108/0x1d0
[ 2857.176964][T24875]  skb_release_data+0x75c/0x980
[ 2857.181851][T24875]  consume_skb+0xd0/0x170
[ 2857.186218][T24875]  netlink_broadcast_filtered+0x3d5/0xf10
[ 2857.191959][T24875]  nlmsg_notify+0x9e/0x220
[ 2857.196398][T24875]  inet6_rt_notify+0x1f4/0x2c0
[ 2857.201212][T24875]  fib6_del+0xf08/0x17b0
[ 2857.205484][T24875]  fib6_clean_node+0x426/0x5b0
[ 2857.210269][T24875]  fib6_walk_continue+0x452/0x8d0
[ 2857.215308][T24875]  fib6_walk+0x182/0x370
[ 2857.219583][T24875]  fib6_clean_tree+0xd7/0x120
[ 2857.224273][T24875]  __fib6_clean_all+0x100/0x2d0
[ 2857.229140][T24875]  rt6_disable_ip+0x765/0x980
[ 2857.233851][T24875]  addrconf_ifdown.isra.0+0x117/0x1b40
[ 2857.239333][T24875]  addrconf_notify+0x223/0x19e0
[ 2857.244214][T24875]  notifier_call_chain+0xbc/0x410
[ 2857.249261][T24875]  call_netdevice_notifiers_info+0xbe/0x140
[ 2857.255172][T24875]  dev_close_many+0x333/0x6a0
[ 2857.259874][T24875]  unregister_netdevice_many_notify+0x477/0x1e40
[ 2857.266246][T24875]  cleanup_net+0x58c/0xbf0
[ 2857.270672][T24875]  process_one_work+0x9c8/0x1b40
[ 2857.275649][T24875]  worker_thread+0x6c8/0xf20
[ 2857.280274][T24875]  kthread+0x2c4/0x3a0
[ 2857.284364][T24875]  ret_from_fork+0x48/0x80
[ 2857.288817][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2857.293616][T24875] 
[ 2857.295940][T24875] The buggy address belongs to the object at ffff88807f1d5800
[ 2857.295940][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2857.310003][T24875] The buggy address is located 59 bytes inside of
[ 2857.310003][T24875]  freed 1024-byte region [ffff88807f1d5800, ffff88807f1d5c00)
[ 2857.323902][T24875] 
[ 2857.326223][T24875] The buggy address belongs to the physical page:
[ 2857.332635][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f1d0
[ 2857.341495][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2857.350004][T24875] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2857.357563][T24875] page_type: 0xffffefff(slab)
[ 2857.362257][T24875] raw: 00fff00000000040 ffff888015441dc0 ffffea0000b5aa00 dead000000000002
[ 2857.370857][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2857.379550][T24875] head: 00fff00000000040 ffff888015441dc0 ffffea0000b5aa00 dead000000000002
[ 2857.388243][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2857.396936][T24875] head: 00fff00000000003 ffffea0001fc7401 ffffffffffffffff 0000000000000000
[ 2857.405630][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2857.414308][T24875] page dumped because: kasan: bad access detected
[ 2857.420722][T24875] page_owner tracks the page as allocated
[ 2857.426437][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4762, tgid 4762 (dhcpcd), ts 74550015043, free_ts 74407549516
[ 2857.446704][T24875]  post_alloc_hook+0x2d1/0x350
[ 2857.451497][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2857.457070][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2857.462556][T24875]  alloc_slab_page+0x56/0x110
[ 2857.467258][T24875]  new_slab+0x84/0x260
[ 2857.471367][T24875]  ___slab_alloc+0xdac/0x1870
[ 2857.476078][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2857.481487][T24875]  __kmalloc_node_track_caller_noprof+0x355/0x430
[ 2857.487917][T24875]  kmalloc_reserve+0xef/0x2c0
[ 2857.492613][T24875]  __alloc_skb+0x164/0x380
[ 2857.497060][T24875]  inet6_rt_notify+0xf0/0x2c0
[ 2857.501775][T24875]  fib6_add+0x2503/0x4ba0
[ 2857.506127][T24875]  ip6_route_add+0x8d/0x190
[ 2857.510662][T24875]  addrconf_prefix_route+0x2fe/0x510
[ 2857.515965][T24875]  inet6_addr_add+0x609/0xbe0
[ 2857.520668][T24875]  inet6_rtm_newaddr+0x11e7/0x1ab0
[ 2857.525808][T24875] page last free pid 4893 tgid 4893 stack trace:
[ 2857.532138][T24875]  free_unref_page+0x64a/0xe40
[ 2857.536924][T24875]  __put_partials+0x14c/0x170
[ 2857.541634][T24875]  qlist_free_all+0x4e/0x140
[ 2857.546252][T24875]  kasan_quarantine_reduce+0x192/0x1e0
[ 2857.551742][T24875]  __kasan_slab_alloc+0x69/0x90
[ 2857.556627][T24875]  kmem_cache_alloc_noprof+0x121/0x2f0
[ 2857.562125][T24875]  getname_flags.part.0+0x4c/0x550
[ 2857.567257][T24875]  getname_flags+0x93/0xf0
[ 2857.571702][T24875]  vfs_fstatat+0x86/0x160
[ 2857.576046][T24875]  __do_sys_newfstatat+0xa2/0x130
[ 2857.581118][T24875]  do_syscall_64+0xcd/0x250
[ 2857.585645][T24875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2857.591577][T24875] 
[ 2857.593898][T24875] Memory state around the buggy address:
[ 2857.599530][T24875]  ffff88807f1d5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2857.607605][T24875]  ffff88807f1d5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2857.615685][T24875] >ffff88807f1d5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2857.623754][T24875]                                         ^
[ 2857.629648][T24875]  ffff88807f1d5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2857.637720][T24875]  ffff88807f1d5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2857.645786][T24875] ==================================================================
[ 2857.673965][T24875] ==================================================================
[ 2857.682055][T24875] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x90a/0x920
[ 2857.689729][T24875] Read of size 8 at addr ffff888062662800 by task kworker/u9:2/24875
[ 2857.697822][T24875] 
[ 2857.700158][T24875] CPU: 1 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2857.722772][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2857.732861][T24875] Workqueue: hci0 hci_rx_work
[ 2857.737600][T24875] Call Trace:
[ 2857.740895][T24875]  <TASK>
[ 2857.743843][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2857.748585][T24875]  print_report+0xc3/0x620
[ 2857.753057][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.758728][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.764480][T24875]  ? __phys_addr+0xc6/0x150
[ 2857.769116][T24875]  kasan_report+0xd9/0x110
[ 2857.773590][T24875]  ? l2cap_send_cmd+0x90a/0x920
[ 2857.778478][T24875]  ? l2cap_send_cmd+0x90a/0x920
[ 2857.783374][T24875]  l2cap_send_cmd+0x90a/0x920
[ 2857.788089][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2857.793832][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2857.799040][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2857.805217][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.810866][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2857.816533][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2857.822532][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2857.827766][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.833410][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2857.838880][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2857.843847][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.849485][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2857.854184][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2857.859229][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2857.864450][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2857.869841][T24875]  ? trace_contention_end+0xea/0x140
[ 2857.875154][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.880792][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2857.886440][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2857.892432][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2857.897131][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.902769][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2857.908668][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2857.913721][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2857.920022][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2857.925074][T24875]  hci_rx_work+0xaab/0x1610
[ 2857.929607][T24875]  process_one_work+0x9c8/0x1b40
[ 2857.934576][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2857.939621][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2857.945015][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.950660][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2857.956299][T24875]  ? assign_work+0x1a0/0x250
[ 2857.960920][T24875]  worker_thread+0x6c8/0xf20
[ 2857.965560][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2857.970695][T24875]  kthread+0x2c4/0x3a0
[ 2857.974775][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2857.979996][T24875]  ? __pfx_kthread+0x10/0x10
[ 2857.984597][T24875]  ret_from_fork+0x48/0x80
[ 2857.989037][T24875]  ? __pfx_kthread+0x10/0x10
[ 2857.993636][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2857.998433][T24875]  </TASK>
[ 2858.001448][T24875] 
[ 2858.003759][T24875] Allocated by task 26537:
[ 2858.008164][T24875]  kasan_save_stack+0x33/0x60
[ 2858.012857][T24875]  kasan_save_track+0x14/0x30
[ 2858.017561][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2858.022191][T24875]  l2cap_conn_add.part.0+0x60/0xa60
[ 2858.027394][T24875]  l2cap_connect_cfm+0x428/0xf80
[ 2858.032349][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2858.037823][T24875]  hci_event_packet+0x9ee/0x1180
[ 2858.042795][T24875]  hci_rx_work+0x2c6/0x1610
[ 2858.047317][T24875]  process_one_work+0x9c8/0x1b40
[ 2858.052278][T24875]  worker_thread+0x6c8/0xf20
[ 2858.056886][T24875]  kthread+0x2c4/0x3a0
[ 2858.060960][T24875]  ret_from_fork+0x48/0x80
[ 2858.065423][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2858.070204][T24875] 
[ 2858.072518][T24875] Freed by task 26537:
[ 2858.076577][T24875]  kasan_save_stack+0x33/0x60
[ 2858.081270][T24875]  kasan_save_track+0x14/0x30
[ 2858.085962][T24875]  kasan_save_free_info+0x3b/0x60
[ 2858.091001][T24875]  poison_slab_object+0xf7/0x160
[ 2858.095977][T24875]  __kasan_slab_free+0x32/0x50
[ 2858.100756][T24875]  kfree+0x12a/0x3b0
[ 2858.104664][T24875]  l2cap_conn_del+0x59f/0x740
[ 2858.109349][T24875]  l2cap_connect_cfm+0x9e6/0xf80
[ 2858.114306][T24875]  hci_conn_failed+0x1c6/0x370
[ 2858.119082][T24875]  hci_abort_conn_sync+0x75a/0xb50
[ 2858.124241][T24875]  abort_conn_sync+0x197/0x360
[ 2858.129024][T24875]  hci_cmd_sync_work+0x1a7/0x410
[ 2858.133962][T24875]  process_one_work+0x9c8/0x1b40
[ 2858.138921][T24875]  worker_thread+0x6c8/0xf20
[ 2858.143529][T24875]  kthread+0x2c4/0x3a0
[ 2858.147604][T24875]  ret_from_fork+0x48/0x80
[ 2858.152041][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2858.156841][T24875] 
[ 2858.159168][T24875] Last potentially related work creation:
[ 2858.164874][T24875]  kasan_save_stack+0x33/0x60
[ 2858.169572][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2858.174953][T24875]  insert_work+0x36/0x230
[ 2858.179299][T24875]  __queue_work+0x97e/0x1070
[ 2858.183932][T24875]  call_timer_fn+0x1a3/0x610
[ 2858.188540][T24875]  __run_timers+0x567/0xaf0
[ 2858.193059][T24875]  run_timer_base+0x111/0x190
[ 2858.197750][T24875]  run_timer_softirq+0x1a/0x40
[ 2858.202529][T24875]  handle_softirqs+0x219/0x8f0
[ 2858.207296][T24875]  irq_exit_rcu+0xbb/0x120
[ 2858.211715][T24875]  sysvec_apic_timer_interrupt+0x95/0xb0
[ 2858.217354][T24875]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2858.223363][T24875] 
[ 2858.225677][T24875] Second to last potentially related work creation:
[ 2858.232252][T24875]  kasan_save_stack+0x33/0x60
[ 2858.236945][T24875]  __kasan_record_aux_stack+0xba/0xd0
[ 2858.242323][T24875]  insert_work+0x36/0x230
[ 2858.246670][T24875]  __queue_work+0x3f8/0x1070
[ 2858.251280][T24875]  queue_work_on+0x11a/0x140
[ 2858.255887][T24875]  l2cap_connect_cfm+0x9c9/0xf80
[ 2858.260836][T24875]  hci_remote_features_evt+0x54b/0x9e0
[ 2858.266309][T24875]  hci_event_packet+0x9ee/0x1180
[ 2858.271266][T24875]  hci_rx_work+0x2c6/0x1610
[ 2858.275789][T24875]  process_one_work+0x9c8/0x1b40
[ 2858.280745][T24875]  worker_thread+0x6c8/0xf20
[ 2858.285355][T24875]  kthread+0x2c4/0x3a0
[ 2858.289434][T24875]  ret_from_fork+0x48/0x80
[ 2858.293871][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2858.298656][T24875] 
[ 2858.300972][T24875] The buggy address belongs to the object at ffff888062662800
[ 2858.300972][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2858.315060][T24875] The buggy address is located 0 bytes inside of
[ 2858.315060][T24875]  freed 1024-byte region [ffff888062662800, ffff888062662c00)
[ 2858.328774][T24875] 
[ 2858.331100][T24875] The buggy address belongs to the physical page:
[ 2858.337499][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62660
[ 2858.346259][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2858.354777][T24875] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2858.362770][T24875] page_type: 0xffffefff(slab)
[ 2858.367469][T24875] raw: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2858.376057][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2858.384647][T24875] head: 00fff00000000040 ffff888015441dc0 0000000000000000 dead000000000001
[ 2858.393322][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2858.402006][T24875] head: 00fff00000000003 ffffea0001899801 ffffffffffffffff 0000000000000000
[ 2858.410679][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2858.419350][T24875] page dumped because: kasan: bad access detected
[ 2858.425763][T24875] page_owner tracks the page as allocated
[ 2858.431507][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2854, tgid 2854 (kworker/u8:9), ts 1559074969014, free_ts 1557599401370
[ 2858.452554][T24875]  post_alloc_hook+0x2d1/0x350
[ 2858.457329][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2858.462891][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2858.468207][T24875]  alloc_slab_page+0x56/0x110
[ 2858.472896][T24875]  new_slab+0x84/0x260
[ 2858.476983][T24875]  ___slab_alloc+0xdac/0x1870
[ 2858.481677][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2858.487069][T24875]  __kmalloc_noprof+0x367/0x400
[ 2858.491939][T24875]  ieee802_11_parse_elems_full+0xea/0x1680
[ 2858.497754][T24875]  ieee80211_inform_bss+0xfd/0x1100
[ 2858.502960][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2858.509205][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2858.514860][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2858.520930][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2858.526585][T24875]  ieee80211_ibss_rx_queued_mgmt+0x1898/0x2f40
[ 2858.532748][T24875]  ieee80211_iface_work+0xc0b/0xf00
[ 2858.537955][T24875] page last free pid 5164 tgid 5164 stack trace:
[ 2858.544273][T24875]  free_unref_page+0x64a/0xe40
[ 2858.549046][T24875]  kasan_depopulate_vmalloc_pte+0x63/0x80
[ 2858.554781][T24875]  __apply_to_page_range+0x798/0xdd0
[ 2858.560079][T24875]  kasan_release_vmalloc+0xac/0xc0
[ 2858.565204][T24875]  purge_vmap_node+0x3fc/0x920
[ 2858.569976][T24875]  __purge_vmap_area_lazy+0x9ca/0xc10
[ 2858.575377][T24875]  drain_vmap_area_work+0x27/0x40
[ 2858.580409][T24875]  process_one_work+0x9c8/0x1b40
[ 2858.585368][T24875]  worker_thread+0x6c8/0xf20
[ 2858.589975][T24875]  kthread+0x2c4/0x3a0
[ 2858.594049][T24875]  ret_from_fork+0x48/0x80
[ 2858.598486][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2858.603269][T24875] 
[ 2858.605580][T24875] Memory state around the buggy address:
[ 2858.611212][T24875]  ffff888062662700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2858.619285][T24875]  ffff888062662780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2858.627378][T24875] >ffff888062662800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2858.635436][T24875]                    ^
[ 2858.639513][T24875]  ffff888062662880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2858.647573][T24875]  ffff888062662900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2858.655627][T24875] ==================================================================
[ 2858.671636][T24875] ==================================================================
[ 2858.679735][T24875] BUG: KASAN: slab-out-of-bounds in l2cap_send_cmd+0x8b7/0x920
[ 2858.687295][T24875] Read of size 8 at addr ffff88807f1d67e0 by task kworker/u9:2/24875
[ 2858.695369][T24875] 
[ 2858.697686][T24875] CPU: 1 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2858.709146][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2858.719201][T24875] Workqueue: hci0 hci_rx_work
[ 2858.723905][T24875] Call Trace:
[ 2858.727179][T24875]  <TASK>
[ 2858.730107][T24875]  dump_stack_lvl+0x116/0x1f0
[ 2858.734824][T24875]  print_report+0xc3/0x620
[ 2858.739319][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.744970][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.750610][T24875]  ? __phys_addr+0xc6/0x150
[ 2858.755128][T24875]  kasan_report+0xd9/0x110
[ 2858.759569][T24875]  ? l2cap_send_cmd+0x8b7/0x920
[ 2858.764429][T24875]  ? l2cap_send_cmd+0x8b7/0x920
[ 2858.769294][T24875]  l2cap_send_cmd+0x8b7/0x920
[ 2858.773990][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2858.779730][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2858.784942][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2858.791157][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.796814][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2858.802463][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2858.808454][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2858.813665][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.819307][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2858.824784][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2858.829747][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.835396][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2858.840123][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2858.845171][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2858.850389][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2858.855780][T24875]  ? trace_contention_end+0xea/0x140
[ 2858.861095][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.866732][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2858.872379][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2858.878370][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2858.883070][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.888708][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2858.894607][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2858.899653][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2858.905926][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2858.910983][T24875]  hci_rx_work+0xaab/0x1610
[ 2858.915542][T24875]  process_one_work+0x9c8/0x1b40
[ 2858.920529][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2858.925662][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2858.931062][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.936707][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2858.942352][T24875]  ? assign_work+0x1a0/0x250
[ 2858.946964][T24875]  worker_thread+0x6c8/0xf20
[ 2858.951591][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2858.956725][T24875]  kthread+0x2c4/0x3a0
[ 2858.960801][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2858.966025][T24875]  ? __pfx_kthread+0x10/0x10
[ 2858.970626][T24875]  ret_from_fork+0x48/0x80
[ 2858.975066][T24875]  ? __pfx_kthread+0x10/0x10
[ 2858.979670][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2858.984469][T24875]  </TASK>
[ 2858.987487][T24875] 
[ 2858.989802][T24875] Allocated by task 5169:
[ 2858.994119][T24875]  kasan_save_stack+0x33/0x60
[ 2858.998814][T24875]  kasan_save_track+0x14/0x30
[ 2859.003509][T24875]  __kasan_kmalloc+0xaa/0xb0
[ 2859.008114][T24875]  __kmalloc_noprof+0x1e8/0x400
[ 2859.012985][T24875]  ieee802_11_parse_elems_full+0xea/0x1680
[ 2859.018801][T24875]  ieee80211_inform_bss+0xfd/0x1100
[ 2859.024008][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2859.030252][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2859.035888][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2859.041962][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2859.047602][T24875]  ieee80211_scan_rx+0x474/0xac0
[ 2859.052550][T24875]  ieee80211_rx_list+0x1be3/0x2e90
[ 2859.057673][T24875]  ieee80211_rx_napi+0xdd/0x400
[ 2859.062534][T24875]  ieee80211_handle_queued_frames+0xd5/0x130
[ 2859.068531][T24875]  tasklet_action_common.constprop.0+0x24f/0x3e0
[ 2859.074888][T24875]  handle_softirqs+0x219/0x8f0
[ 2859.079655][T24875]  do_softirq+0xb2/0xf0
[ 2859.083814][T24875]  __local_bh_enable_ip+0x100/0x120
[ 2859.089014][T24875]  wg_packet_encrypt_worker+0x27d/0xbb0
[ 2859.094568][T24875]  process_one_work+0x9c8/0x1b40
[ 2859.099524][T24875]  worker_thread+0x6c8/0xf20
[ 2859.104132][T24875]  kthread+0x2c4/0x3a0
[ 2859.108205][T24875]  ret_from_fork+0x48/0x80
[ 2859.112645][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2859.117428][T24875] 
[ 2859.119738][T24875] Freed by task 5169:
[ 2859.123707][T24875]  kasan_save_stack+0x33/0x60
[ 2859.128399][T24875]  kasan_save_track+0x14/0x30
[ 2859.133111][T24875]  kasan_save_free_info+0x3b/0x60
[ 2859.138145][T24875]  poison_slab_object+0xf7/0x160
[ 2859.143106][T24875]  __kasan_slab_free+0x32/0x50
[ 2859.147913][T24875]  kfree+0x12a/0x3b0
[ 2859.151825][T24875]  ieee80211_inform_bss+0x76e/0x1100
[ 2859.157116][T24875]  cfg80211_inform_single_bss_data+0x8e5/0x1dc0
[ 2859.163364][T24875]  cfg80211_inform_bss_data+0x205/0x39c0
[ 2859.168999][T24875]  cfg80211_inform_bss_frame_data+0x271/0x7b0
[ 2859.175092][T24875]  ieee80211_bss_info_update+0x311/0xab0
[ 2859.180751][T24875]  ieee80211_scan_rx+0x474/0xac0
[ 2859.185696][T24875]  ieee80211_rx_list+0x1be3/0x2e90
[ 2859.190835][T24875]  ieee80211_rx_napi+0xdd/0x400
[ 2859.195696][T24875]  ieee80211_handle_queued_frames+0xd5/0x130
[ 2859.201682][T24875]  tasklet_action_common.constprop.0+0x24f/0x3e0
[ 2859.208016][T24875]  handle_softirqs+0x219/0x8f0
[ 2859.212781][T24875]  do_softirq+0xb2/0xf0
[ 2859.216939][T24875]  __local_bh_enable_ip+0x100/0x120
[ 2859.222142][T24875]  wg_packet_encrypt_worker+0x27d/0xbb0
[ 2859.227797][T24875]  process_one_work+0x9c8/0x1b40
[ 2859.232756][T24875]  worker_thread+0x6c8/0xf20
[ 2859.237366][T24875]  kthread+0x2c4/0x3a0
[ 2859.241465][T24875]  ret_from_fork+0x48/0x80
[ 2859.245910][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2859.250717][T24875] 
[ 2859.253033][T24875] The buggy address belongs to the object at ffff88807f1d6000
[ 2859.253033][T24875]  which belongs to the cache kmalloc-1k of size 1024
[ 2859.267085][T24875] The buggy address is located 992 bytes to the right of
[ 2859.267085][T24875]  allocated 1024-byte region [ffff88807f1d6000, ffff88807f1d6400)
[ 2859.281840][T24875] 
[ 2859.284152][T24875] The buggy address belongs to the physical page:
[ 2859.290559][T24875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f1d0
[ 2859.299319][T24875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2859.307819][T24875] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2859.315370][T24875] page_type: 0xffffefff(slab)
[ 2859.320049][T24875] raw: 00fff00000000040 ffff888015441dc0 ffffea0000b5aa00 dead000000000002
[ 2859.328636][T24875] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2859.337311][T24875] head: 00fff00000000040 ffff888015441dc0 ffffea0000b5aa00 dead000000000002
[ 2859.345988][T24875] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 2859.354665][T24875] head: 00fff00000000003 ffffea0001fc7401 ffffffffffffffff 0000000000000000
[ 2859.363340][T24875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 2859.372007][T24875] page dumped because: kasan: bad access detected
[ 2859.378408][T24875] page_owner tracks the page as allocated
[ 2859.384111][T24875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4762, tgid 4762 (dhcpcd), ts 74550015043, free_ts 74407549516
[ 2859.404362][T24875]  post_alloc_hook+0x2d1/0x350
[ 2859.409137][T24875]  get_page_from_freelist+0x1353/0x2e50
[ 2859.414694][T24875]  __alloc_pages_noprof+0x22b/0x2460
[ 2859.419990][T24875]  alloc_slab_page+0x56/0x110
[ 2859.424677][T24875]  new_slab+0x84/0x260
[ 2859.428763][T24875]  ___slab_alloc+0xdac/0x1870
[ 2859.433475][T24875]  __slab_alloc.constprop.0+0x56/0xb0
[ 2859.438867][T24875]  __kmalloc_node_track_caller_noprof+0x355/0x430
[ 2859.445286][T24875]  kmalloc_reserve+0xef/0x2c0
[ 2859.449976][T24875]  __alloc_skb+0x164/0x380
[ 2859.454431][T24875]  inet6_rt_notify+0xf0/0x2c0
[ 2859.459216][T24875]  fib6_add+0x2503/0x4ba0
[ 2859.463552][T24875]  ip6_route_add+0x8d/0x190
[ 2859.468071][T24875]  addrconf_prefix_route+0x2fe/0x510
[ 2859.473369][T24875]  inet6_addr_add+0x609/0xbe0
[ 2859.478054][T24875]  inet6_rtm_newaddr+0x11e7/0x1ab0
[ 2859.483177][T24875] page last free pid 4893 tgid 4893 stack trace:
[ 2859.489494][T24875]  free_unref_page+0x64a/0xe40
[ 2859.494265][T24875]  __put_partials+0x14c/0x170
[ 2859.498963][T24875]  qlist_free_all+0x4e/0x140
[ 2859.503566][T24875]  kasan_quarantine_reduce+0x192/0x1e0
[ 2859.509039][T24875]  __kasan_slab_alloc+0x69/0x90
[ 2859.513909][T24875]  kmem_cache_alloc_noprof+0x121/0x2f0
[ 2859.519408][T24875]  getname_flags.part.0+0x4c/0x550
[ 2859.524527][T24875]  getname_flags+0x93/0xf0
[ 2859.528954][T24875]  vfs_fstatat+0x86/0x160
[ 2859.533287][T24875]  __do_sys_newfstatat+0xa2/0x130
[ 2859.538313][T24875]  do_syscall_64+0xcd/0x250
[ 2859.542829][T24875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2859.548740][T24875] 
[ 2859.551058][T24875] Memory state around the buggy address:
[ 2859.556690][T24875]  ffff88807f1d6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2859.564752][T24875]  ffff88807f1d6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2859.572813][T24875] >ffff88807f1d6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2859.580868][T24875]                                                        ^
[ 2859.588146][T24875]  ffff88807f1d6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2859.596208][T24875]  ffff88807f1d6880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2859.604281][T24875] ==================================================================
[ 2859.620262][T24879] Bluetooth: hci3: command tx timeout
[ 2859.625852][T24875] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000064: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 2859.638644][T24875] KASAN: null-ptr-deref in range [0x0000000000000320-0x0000000000000327]
[ 2859.647070][T24875] CPU: 1 PID: 24875 Comm: kworker/u9:2 Tainted: G    B              6.10.0-syzkaller-09703-gd7e78951a8b8 #0
[ 2859.658558][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 2859.668631][T24875] Workqueue: hci0 hci_rx_work
[ 2859.673368][T24875] RIP: 0010:l2cap_send_cmd+0x5d0/0x920
[ 2859.678865][T24875] Code: 80 3c 02 00 0f 85 02 03 00 00 49 8b ac 24 e0 0f 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd 22 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 ea 02 00 00
[ 2859.698505][T24875] RSP: 0018:ffffc90008b377f8 EFLAGS: 00010212
[ 2859.704603][T24875] RAX: dffffc0000000000 RBX: ffff88807d4c18c0 RCX: ffffc90013b1e000
[ 2859.712601][T24875] RDX: 0000000000000064 RSI: ffffffff81e8788e RDI: 0000000000000322
[ 2859.720593][T24875] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 2859.728589][T24875] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807f1d5800
[ 2859.736590][T24875] R13: ffff888066642548 R14: ffffc90008b378f0 R15: ffff888062662800
[ 2859.744591][T24875] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 2859.753555][T24875] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2859.760168][T24875] CR2: 00007f7559958400 CR3: 0000000062e3c000 CR4: 0000000000350ef0
[ 2859.768164][T24875] Call Trace:
[ 2859.771455][T24875]  <TASK>
[ 2859.774408][T24875]  ? show_regs+0x8c/0xa0
[ 2859.778709][T24875]  ? die_addr+0x4f/0xd0
[ 2859.782936][T24875]  ? exc_general_protection+0x155/0x230
[ 2859.788546][T24875]  ? asm_exc_general_protection+0x26/0x30
[ 2859.794334][T24875]  ? end_report+0x8e/0x180
[ 2859.798809][T24875]  ? l2cap_send_cmd+0x5d0/0x920
[ 2859.803697][T24875]  ? l2cap_send_cmd+0x8b7/0x920
[ 2859.808587][T24875]  l2cap_connect.constprop.0+0x6f7/0x1270
[ 2859.814362][T24875]  ? do_raw_spin_unlock+0x172/0x230
[ 2859.819594][T24875]  ? __pfx_l2cap_connect.constprop.0+0x10/0x10
[ 2859.825800][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.831464][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2859.837135][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2859.843149][T24875]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2859.848386][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.854050][T24875]  ? __entry_text_end+0xfdfc7/0x1020c9
[ 2859.859549][T24875]  l2cap_recv_frame+0xf0b/0x8eb0
[ 2859.864555][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.870221][T24875]  ? hci_rx_work+0xa87/0x1610
[ 2859.874950][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2859.880018][T24875]  ? __pfx___lock_acquire+0x10/0x10
[ 2859.885262][T24875]  ? __pfx_l2cap_recv_frame+0x10/0x10
[ 2859.890678][T24875]  ? trace_contention_end+0xea/0x140
[ 2859.896023][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.901687][T24875]  ? __mutex_unlock_slowpath+0x164/0x650
[ 2859.907355][T24875]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2859.913371][T24875]  ? hci_rx_work+0xa73/0x1610
[ 2859.918097][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.923757][T24875]  ? hci_conn_enter_active_mode+0x219/0x360
[ 2859.929675][T24875]  ? __pfx_lock_release+0x10/0x10
[ 2859.934747][T24875]  ? __pfx_hci_conn_enter_active_mode+0x10/0x10
[ 2859.941051][T24875]  l2cap_recv_acldata+0x9b4/0xb70
[ 2859.946129][T24875]  hci_rx_work+0xaab/0x1610
[ 2859.950692][T24875]  process_one_work+0x9c8/0x1b40
[ 2859.955694][T24875]  ? __pfx_lock_acquire+0x10/0x10
[ 2859.960763][T24875]  ? __pfx_process_one_work+0x10/0x10
[ 2859.966187][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.971858][T24875]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2859.977520][T24875]  ? assign_work+0x1a0/0x250
[ 2859.982164][T24875]  worker_thread+0x6c8/0xf20
[ 2859.986822][T24875]  ? __pfx_worker_thread+0x10/0x10
[ 2859.991987][T24875]  kthread+0x2c4/0x3a0
[ 2859.996088][T24875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2860.001340][T24875]  ? __pfx_kthread+0x10/0x10
[ 2860.005967][T24875]  ret_from_fork+0x48/0x80
[ 2860.010439][T24875]  ? __pfx_kthread+0x10/0x10
[ 2860.015064][T24875]  ret_from_fork_asm+0x1a/0x30
[ 2860.019894][T24875]  </TASK>
[ 2860.022923][T24875] Modules linked in:
[ 2860.035351][T24875] ---[ end trace 0000000000000000 ]---
[ 2860.040825][T24875] RIP: 0010:l2cap_send_cmd+0x5d0/0x920
[ 2860.046370][T24875] Code: 80 3c 02 00 0f 85 02 03 00 00 49 8b ac 24 e0 0f 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd 22 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 ea 02 00 00
[ 2860.069258][T24875] RSP: 0018:ffffc90008b377f8 EFLAGS: 00010212
[ 2860.075517][T24875] RAX: dffffc0000000000 RBX: ffff88807d4c18c0 RCX: ffffc90013b1e000
[ 2860.083571][T24875] RDX: 0000000000000064 RSI: ffffffff81e8788e RDI: 0000000000000322
[ 2860.091653][T24875] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 2860.099646][T24875] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807f1d5800
[ 2860.107856][T24875] R13: ffff888066642548 R14: ffffc90008b378f0 R15: ffff888062662800
[ 2860.115906][T24875] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 2860.126684][T24875] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2860.133337][T24875] CR2: 00007f7559958400 CR3: 0000000062e3c000 CR4: 0000000000350ef0
[ 2860.142803][T24875] Kernel panic - not syncing: Fatal exception
[ 2860.149090][T24875] Kernel Offset: disabled
[ 2860.153433][T24875] Rebooting in 86400 seconds..