last executing test programs:

14.77535784s ago: executing program 0 (id=3787):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

14.647173621s ago: executing program 0 (id=3790):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0)

14.375409973s ago: executing program 0 (id=3792):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x20000000, 0x100, 0x0, 0x10001, 0x0, r0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000001c0)="e13b95007c00f514ff49a953", 0xc}], 0x1)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)

14.091169006s ago: executing program 3 (id=3795):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000040)="14000000140005b7ffccca38b9000000040860eb", 0x14)

13.818555109s ago: executing program 2 (id=3798):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

13.579823859s ago: executing program 2 (id=3799):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
getpid()
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1100})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

13.470500167s ago: executing program 3 (id=3800):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.463964828s ago: executing program 4 (id=3801):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

13.429909881s ago: executing program 1 (id=3802):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0)

13.403256623s ago: executing program 3 (id=3803):
clock_gettime(0x4c25726cb16dd79b, 0x0)

13.328228789s ago: executing program 3 (id=3804):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000014000905000000001c17c33b23cd72b5", @ANYRES32], 0x34}}, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

13.327662469s ago: executing program 2 (id=3805):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCXONC(r1, 0x540a, 0x3)

13.282817634s ago: executing program 4 (id=3806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]})
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x0, 0x4)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240))
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12)
pipe2(0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff0520"], 0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

13.261762015s ago: executing program 1 (id=3807):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x8, 0x92a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfff0, 0x4}, {0xfb}}}]}]}}]}, 0x74}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.170439692s ago: executing program 2 (id=3808):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104)

13.128588026s ago: executing program 1 (id=3809):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

12.906428084s ago: executing program 1 (id=3810):
syz_io_uring_setup(0x0, &(0x7f00000035c0), &(0x7f0000000100), &(0x7f0000000040))
mount$bpf(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x8}}], [{@smackfsroot}, {@subj_role={'subj_role', 0x3d, 'iso9660\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0)

12.824657511s ago: executing program 4 (id=3811):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]})
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x0, 0x4)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240))
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff05"], 0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.565243863s ago: executing program 4 (id=3812):
socket$nl_route(0x10, 0x3, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x1f8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x164, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_ctinfo={0x68, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x33, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb"}, {0xc}, {0xc}}}, @m_connmark={0xb0, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x48, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1f8}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff2afc78f0f22fb370384a013106c9b79b1a000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x90)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042292a8"], 0x4)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000540)={{}, 'syz0\x00'})

12.013140838s ago: executing program 2 (id=3813):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12.012450708s ago: executing program 3 (id=3814):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001340)={0x0, 0x1, {0x401, @struct={0x6, 0x7}, 0x0, 0x4, 0x2, 0x4, 0x6, 0x9, 0x0, @struct={0x6, 0xa}, 0x9, 0x7, [0xb, 0xffff, 0x4, 0x400, 0x7fff, 0x8001]}, {0x7, @struct={0x0, 0x6}, 0x0, 0xc, 0x8, 0x3c6, 0x0, 0x80, 0x40, @usage, 0x0, 0x7, [0x2, 0x3, 0x4, 0xf, 0xd8]}, {0xe7, @struct={0x6, 0x3}, 0x0, 0x8, 0x6, 0x6, 0x200, 0x8000000000000000, 0x24, @usage=0x4, 0xc, 0x6, [0xfffffffffffffffd, 0x3, 0x7, 0x0, 0x1, 0x3]}, {0x0, 0xb}})
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES64], 0x1, 0x14f0, &(0x7f0000001580)="$eJzs3Au4jdX2MPAx5pwvm6SV5LIzxxwvK7lMkiSXJLkkSZIkuSUkSZKExCa3JCQh9yT3kNxCcr/fck+SI0mSkJBkfo9O5zjn3/mezv9/+j7nf/b4Pc98zOF9x1xjrrH2Xu+7nr33N+0HVq5bpUJtZoZ/Cf75nzQASAGAPgBwFQBEAFAiW4lsF49n0pj2rz2I+GM9OOVyVyAuJ+l/+ib9T9+k/+mb9D99k/6nb9L/9E36n75J/4VIz7ZMzX21jPQ75PP/9Eze/9M36f9/mLMh/HdOl/6nb9L/9E36n75J//8DmP95qvQ/fZP+p2/SfyHSs8v9+fP/npHx12fsctfxx47L/PITQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJFOnA2XGAD4y/xy1yWEEEIIIYQQQog/Tsh4uSsQQgghhBBCCCHE/3sICjQYiCADZIQUyASZ4QrIAldCVrgKEnA1ZINrIDtcCzkgJ+SC3JAK10EesEDggCGGvJAPknA95IcboAAUhEJQGDwUgaJwIxSDm6A43Awl4BYoCbdCKSgNZaAs3Abl4HYoD3dABbgTKkIlqAxV4C6oCndDNbgHqsO9UAPug5pwP9SCB6A2PAh14CGoCw9DPXgE6kMDaAiNoPH/KP8F6AwvQhfoCmnQDbrDS9ADekIv6A194GXoC69AP3gV+sMAGAivwSB4HQbDGzAEhsIweBOGwwgYCaNgNIyBsfAWjIO3YTy8AxNgIkyCyTAFpsI0eBemwwyYCe/BLHgfZsMcmAvzYD58AAtgISyCD2ExfARLYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFvgY9gK22A77ICdsAt2wyewBz6FvfAZ7IPP/5v5Z/5LfgcEBFSo0KDBDJgBUzAFM2NmzIJZMCtmxQQmMBtm++uLJRfmwlRMxTyYBwkJGRnzYl5MYhLzY34sgAWwEBZCjx6LYlEshjdhcSyOJbAElsSSWApLY2ksi2WxHJbD8lgeK2AFrIgVsTJWxrvwLrwbq2E1rI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxITbExtgYm2ATbIpNsTk2xxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgRO+IL+AK+iC9iV6youmF37I49sAf2wt7YG1/GvvgKvoKvYn8cgAPxNXwNX8fBeBqH4FAchsOwnBqBI3EUshqDY3EsjsNxOB7H4wSciBNxMk7BqTgNp+F0nIEz8D2che/j+zgH5+A8nI/zcQEuxEW4CBfjGVyCS3EZLscVuBJX4Gpcg6txHa7HdbgRN+Jm3Iwf48e4DbfhDtyBu3AXfoKf4Kf4KfbHfbgP9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP4wk8iSfwFJ7C03gGz+JZPIfn8Dw+l/pVnV0F1/YHdZFRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VqlJVHpVHkSLFKlZ5VV6VVEmVX+VXBRSoQqqQ8sqroqqoKqaKqeKquCqhblEl1a2qlCqtmvmyqqwqp5r78uoOVUFVUBVVJVVZVVFVVFVVVVVT1VR1VV3VUDVUTXW/qqW6YS98UF3sTF01AOupgVhfNVANVSP1Oj6qmqjB2FQ1U83V42ooDsGWqolvpZ5SrdVIbKOeUaPwWdVOjcH26nnVQXVUndQLqrNq6ruormoCdlPd1WTsoXqqXqq3mo6V1MWOVVavqv5qgBqoXlPz8HU1WL2hhqihaph6Uw1XI9RINUqNVmPUWPWWGqfeVuPVO2qCmqgmqclqipqqpql31XQ1Q81U76lZ6n01W81Rc9U8NV99oBaohQrgQ7VYfaSWqKVqmVquVqiVapVardaotWqdWq82qI1qk9qstqiP1Va1TW1XO9ROtUvtVp+oPepTtVd9pvapz9V+9Sd1QH2hDqov1SH1lTqsvlZH1DfqqPpWHVPfqePqhDqpvlen1A/qNOKfv4rVT+q8+lldUEGBRq201kZHOoPOqFN0Jp1ZX6Gz6Ct1Vn2VTuirdTZ9jc6ur9U5dE6dS+fWqfo6nUdbTdpp1rHOq41O6ut1fn2DLqAL6kK6sPa6iC6qb9TF9E26uL5Zl9C36JL6Vl1Kl9ZldFl9my6nb9fl9R26gr5TV9SVdGVdRd+lq+q7dTV9j66u79U19H26pr5f19IP6Nr6QV1HP6Tr6od1Pf2Irq8b6Ia6kW6sH9VN9GO6qW6mm+vHdQv9hG6pn9St9FO6tX5at9HP6Lb6Wd1OP6fb6+d1B91Rd9I/6ws66C66q07T3XR3/ZLuoXvqXrq37qNf1n31K7qfflX31wP0QP2aHqRf14P1G3qIHqqH6Tf1cD1Cj9Sj9Gg9Ro/Vb+lx+m09Xr+jJ+iJepKerKfoqbrXryvN/Cfy3/4H+f1+efTNeov+WG/V2/R2vUPv1Lv0br1b79F79F69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WB/RR/RRfVQf08f0cX1C/6i/16f0D/q0PqPP6B/1OX1On//1OQCDRhltjIlMBpPRpJhMJrO5wmQxV5qs5iqTMFebbOYak91ca3KYnCaXyW1SzXUmj7GGjDNsYpPX5DNJc73Jb24wBUxBU8gUNt4UMUXNjf9y/u/V19g0Nk1ME9PUNDXNTXPTwrQwLU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MJ1MJ9PZdDZdTBeTZtJMd/OS6WF6ml6mt+ljXjZ9TV/Tz/Qz/U1/M9AMNIPMIDPYDDZDzBAzzAwzw81wM9KMNKPNaDPWjDXjzDgz3ow3E8wEM8lMMlPMFDPNTDPTzXQz08w0s8wsM9vMNnPNXDPfzDcLzAKzyCwyi81is8QsNUvNcrPcrDQrzWqz2qw1a816s95sNBvNErPFbDFbzVaz3Ww3O81Os9vsNnvMHrPX7DX7zD6z3+w3B8wBc9AcNIfMIXPYHDZHzBFz1Bw1x8wxc9wcNyfNSXPKnDKnzWlz1pw158w5c96cNxfMhYuXfZGKVGQiE2WIMkQpUUqUOcocZYmyRFmjrFEiSkTZomxR9ujaKEeUM8oV5Y5So+uiPJGNKHIRR3GUN8oXJaPro/zRDVGBqGBUKCoc+ahIVDS6MSoW3RQVj26OSkS3RCWjW6NSUemoTFQ2ui0qF90elY/uiCpEd0YVo0pR5ahKdFdUNbo7qhbdE1WP7o1qRPdFNaP7o1rRA1Ht6MGoTvRQVDd6OKoXPRLVjxpEDaNGUeM/dP0QTud8zHexXW2a7Wa725dsD9vT9rK9bR/7su1rX7H97Ku2vx1gB9rX7CD7uh1s37BD7FA7zL5ph9sRdqQdZUfbMXasfcuOs2/b8fYdO8FOtJPsZDvFTrXT7Lt2up1hZ9r37Cz7vp1t59i5dp6dbz+wC+xCu8h+aBfbj+wSu9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFvux3Wq32e12h91pd9nd9hO7x35q99rP7D77ud1v/2QVfGEP2i/tIfuVPWy/tkfsN/ao/dYes9/Z4/aEPWm/t6fsD/a0PWPP2h/tOfuTPW9/thdsuHhxf/HtnQwZykAZKIVSKDNlpiyUhbJSVkpQgrJRNspO2SkH5aBclItSKZXyUB66iIkpL+WlJCUpP+WnAlSAClEh8uSpKBWlYlSMilNxKkElqCSVpFJUispQGbqNbqPb6Xa6g+6gO+lOqkSVqApVoapUlapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9qk/1qSE1pMbUmJpQE2pKTak5NacW1IJaUktqRa2oNbWmNtSG2lJbakftqD21pw7UgTpRJ+pMnakLdaE0SqPu1J16UA/qRb2oD/WhvtSX+lE/6k/9aSANpEE0iAbTYBpCQ2kYvUnDaQSNpFE0msbQWBpL42gcjafxNIEm0CSaRFNoCk2jaTSdptNMmkmzaBbNptk0l+bSfJpPC2gBLaJFtJgW0xJaQstoGa2gFbSKVtEaWkPraB1toA20iTbRFtpCW2krbafttJN20m7aTXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifpJJ2iU3SaTtNZOkvn6Cc6Tz/TBQqU4jK5zO4Kl8Vd6bK6q9x/jXO53C7VXefyOOtyuJx/F5NzroAr6Aq5ws67Iq6ou/E3cSlX2pVxZd1trpy73ZX/TVzV3e2quXtcdXevq+Lu+ru4hrvP1XQPu1ruEVfbNXB1XCNX1z3s6rlHXH3XwDV0jVwL94Rr6Z50rdxTrrV7+jfxArfQrXFr3Tq33u1xn7qz7kd3xH3jzrmfXBfX1fVxL7u+7hXXz73q+rsBv4mHuTfdcDfCjXSj3Gg35jfxJDfZTXFT3TT3rpvuZvwmnu8+cLPcIjfbzXFz3bxf4os1LXIfusXuI7fELXXL3HK3wq10q9zqv9a63G10m9xmt9t94ra6bW672+F2ul2/xBf3sdd95va5z91h97U74L5wB91Rd8h99Ut8cX9H3bfumPvOHXcn3En3vTvlfnCn3Zlf9n9x79+7n90FFxwwsmLNhiPOwBk5hTNxZr6Cs/CVnJWv4gRfzdn4Gs7O13IOzsm5ODen8nWchy0TO2aOOS/n4yRfz/n5Bi7ABbkQF2bPRbgo38jF+CYuzjdzCb6FS/KtXIpLcxkuy7dxOb6dy/MdXIHv5IpciStzFb6Lq/LdXI3v4ep8L9fg+7gm38+1+AGuzQ9yHX6I6/LDXI8f4frcgBtyI27Mj3ITfoybcjNuzo9zC36CW/KT3Iqf4tb8NLfhZ7gtP8vt+Dluz89zB+7InfgF7swvchfuymncjbvzS9yDe3Iv7s19+GXuy69wP36V+/MAHsiv8SB+nQfzGzyEh/IwfpOH8wgeyaN4NI/hsfwWj+O3eTy/wxN4Ik/iyTyFp/I0fpen8wyeye/xLH6fZ/McBpjH8/kDXsALeRF/yIv5I17CS3kZL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sIf81bextt5B+/kXbybP+E9/Cnv5c94H3/O+/lPfIC/4IP8JR/ir/gwf81H+Bs+yt/yMf6Oj/MJPsnf8yn+gU/zGT7LP/I5/onP8898gQNDjLGKdWziKM4QZ4xT4kxx5viKOEt8ZZw1vipOxFfH2eJr4uzxtXGOOGecK84dp8bXxXliG1PsYo7jOG+cL07G18f54xviAnHBuFBcOPZxkbhofGNcLL4pLh7fHJeIb4lLxrfGpeLS8cP3lo1vi8vFt8fl4zviCvGdccW4Ulw5rhLfFVeN746rxffE1eN74+LxfXHN+P64VvxAXDt+MK4TPxTXjR+O68WPxPXjBnHDuFHcOH40bhI/FjeNm8XN48fjFvETccv4ybhV/FTcOn76d4+nxd3i7vFL8UtxCPfoucl5yfnJD5ILkguTi5IfJhcnP0ouSS5NLksuT65IrkyuSq5OrkmuTa5Lrk9uSG5MbkpuToZQJSN49Mprb3zkM/iMPsVn8pn9FT6Lv9Jn9Vf5hL/aZ/PX+Oz+Wp/D5/S5fG6f6q/zebz15J1nH/u8Pp9P+ut9fn+DL+AL+kK+sPe+iC/qG/nGvrFv4h/zTX0z39w/7h/3T/gn/JP+Sf+Ub+2f9m38M76tf9a388/55/zzvoPv6Dv5F3xn/6Lv4rv6NJ/mu/vuvofv4Xv5Xr6P7+P7+r6+n+/n+/v+fqAf6Af5QX6wH+yH+CF+mB/mh/vhfqQf6Uf70X6sH+vH+XF+vB/vJ/gJfpKf5Kf4KX6an+an++l+pp/pZxWY5Wf72X6un+vn+/l+gV/gF/lFfrFf7Jf4JX6ZX+ZX+BV+lV/l1/g1fp1f5zf4DX6T3+S3+C1+q9/qt/vtfqff6Xf73X6P3+P3+r1+n9/n9/v9/oA/4A/6L/0h/5U/7L/2R/w3/qj/1h/z3/nj/oQ/6b/3p/wP/rQ/48/6H/05/5M/73/2F3zwYxNvJcYl3k6MT7yTmJCYmJiUmJyYkpiamJZ4NzE9MSMxM/FeYlbi/cTsxJzE3MS8xPzEB4kFiYWJRYkPE4sTHyWWJJYmliWWJ1YkViZCuC4TAIR8IRmuD/nDDaFAKBgKhcLBhyKhaLgxFAs3heLh5lAi3BJKhltDqVA6lAmPhPqhQWgYGoXG4dHQJDwWmoZmoXl4PLQIT4SW4cnQKjwVWoenQ5vwTGgbng3twnOhfXg+dAgdQ6fwQugcXgxdQteQFrqF7uGl0CP0DL1C79AnvBz6hldCv/Bq6B8GhIHhtTAovB4GhzfCkDA0DAtvhuFhRBgZRoXRYUwYG94K48LbYXx4J0wIE8OkMDlMCVPDtPBumB5mhJnhvTArvB9mhzlhbpgX5ocPwoKwMCwKH4bF4aOwJCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCV8HLaGbWF72BF2hl1hd/gk7Amfhr3hs7AvfB72hz+FA+GLcDB8GQ6Fr8Lh8HU4Er4JR8O34Vj4LhwPJ8LJ8H04FX4Ip8OZcDb8GM6Fn8L58HO4IL+zJoQQQgjxT+nzO8e7/YP/U7+Oi7oDwJXbch/62+MaADbk+PO8p0ptkQCAp7q2f/Avo2LFtLS0X89doiHKNwcAEpfyM8CleCk0hyegFTTL9MuPKvxGT9XxHP/O+slbADL/TU4KXIr/uj7c9A/331ONmPW7688BKJDvUs7FUv8SX1q/+P9l/ZxNfmf9TF+MBWj6NzlZ4FJ8af2i8Bg8Da3+7kwhhBBCCCGEEOLPeqoybX/v/vbi/XmquZSTES7Fl+4/i12W+oUQQgghhBBCCPH7nu3Y6clHW7Vq1lYm/46TXdKmf3IC5t+ijP+cyWX+xiSEEEIIIYT4w1266L/clQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnX/48/J3a59yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcbv8nAAD//51AKls=")
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}]}, 0x0, 0x275, &(0x7f0000000600)="$eJzs3MFrI1UYAPDPdLftdtlNDyIoiA+96CXs1r8gyC6IBaVuRD0IszbV0DEpmViJiLs3r/4di0dvgvoP9OLNu3gpguBlD2Jkk4xNS2B3pXXq5veDMF/mzZf3ZjITvhnIO3z36092d4rGTjaI2mqKWsTduB+x/iCaemq6rI3j5Zh1N165/MfPz7/93vtvNDc3b2yldLN569WNlNLVF77/7ItvXvxxcPmdb69+txIH6x8c/r7xy8EzB88e/nWr/PTeIGXpdq83yG7n7bTdKXYbKb2Vt7OinTrdot0/1r6T9/b2hinrbl9Z2+u3iyJl3WHabQ/ToJcG/WHKPso63dRoNNKVtVg0S4+d0bq3tZU1z2QwVOHSvJX9fjNbmtvYuvdfDAoAOF+qqv8/7hSpU6Tuw+r/Wqj/z476fxE8qP/Xptfvcep/AAAAAAAAAAAAAAD4P7g/GtVHo1G9XJavlYhYjYjyfdXj5Gz4/hfbzB/3ViPyr/Zb+63JctLe3IlO5NGOaxcj/hyfD1OT+ObrmzeupbHl+CG/M82/s99aipUyv7Q+P//6JD8dz78Ya7P9b0Q9np6fvzE3fzlefmkmvxH1+OnD6EUe2+Pz+ij/y+spvfbm5on8S+PtAAAA4EnQSP9YP3n/Pm5vpHLakBPtk5VHzwei/pDnAyfury/Ecxeq228AAABYJMXw890sz9t9weMFDt2ZB7WIqKj33yLifByEUw1+/XRy1T/KxlX/MgEAAKftqOiveiQAAAAAAAAAAAAAAAAAAACwuB518rBy+38z99hMd0vV7CUAAAAAAAAAAAAAAAAAAAAAAACcD38HAAD//3FIIUE=")
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0xee2, &(0x7f0000001e80)="$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")

11.220294714s ago: executing program 2 (id=3815):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006)

7.605545722s ago: executing program 0 (id=3816):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

7.604389193s ago: executing program 1 (id=3817):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0)

7.592599183s ago: executing program 4 (id=3818):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
getpid()
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1100})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

7.39038679s ago: executing program 0 (id=3819):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x8, 0x92a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfff0, 0x4}, {0xfb}}}]}]}}]}, 0x74}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.297151047s ago: executing program 1 (id=3820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, 0x0, 0x0)

7.253875762s ago: executing program 0 (id=3821):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]})
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x0, 0x4)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240))
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12)
pipe2(0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff0520"], 0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.072896506s ago: executing program 3 (id=3822):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]})
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r2=>0x41424344}, 0x0, 0x4)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb)
syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240))
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff05"], 0x7)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=3824):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000eb83e27fa40000000f0001c8d6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = io_uring_setup(0x3dd3, &(0x7f0000001100))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)

kernel console output (not intermixed with test programs):

 device hsr_slave_1 left promiscuous mode
[  784.356835][T15337] loop4: detected capacity change from 0 to 16
[  784.371947][ T3564] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  784.383949][ T3564] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  784.393733][ T3564] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  784.395792][T15337] erofs: (device loop4): mounted with root inode @ nid 36.
[  784.408965][ T3564] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  784.430128][ T3564] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  784.437663][ T3564] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  784.465334][T13457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  784.515321][T13457] asix: probe of 2-1:0.0 failed with error -71
[  784.551992][T13457] usb 2-1: USB disconnect, device number 44
[  784.598339][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  784.621836][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.631801][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  784.649810][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.665979][ T8915] device bridge_slave_1 left promiscuous mode
[  784.683215][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.704810][ T8915] device bridge_slave_0 left promiscuous mode
[  784.715273][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.796627][ T8915] device veth1_macvtap left promiscuous mode
[  784.802717][ T8915] device veth0_macvtap left promiscuous mode
[  784.825765][ T8915] device veth1_vlan left promiscuous mode
[  784.831620][ T8915] device veth0_vlan left promiscuous mode
[  785.246726][T15337] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  785.257920][T15337] syz.4.3319: attempt to access beyond end of device
[  785.257920][T15337] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  785.292130][T15337] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  785.324319][T15337] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  785.357626][T15346] input: syz1 as /devices/virtual/input/input260
[  785.371068][ T3564] Bluetooth: hci7: unexpected event for opcode 0x080c
[  785.516989][ T3564] Bluetooth: hci7: unexpected event for opcode 0x2005
[  786.155110][ T7927] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  786.385572][ T3564] Bluetooth: hci11: command tx timeout
[  786.427602][ T7927] usb 5-1: Using ep0 maxpacket: 8
[  786.465263][ T3564] Bluetooth: hci12: command tx timeout
[  786.555286][ T7927] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  786.585251][ T7927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.647145][ T7927] usb 5-1: config 0 descriptor??
[  786.695468][ T7927] usb 5-1: bad CDC descriptors
[  786.704367][ T7927] usb 5-1: bad CDC descriptors
[  786.876628][T15354] loop1: detected capacity change from 0 to 32768
[  786.958449][T15354] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  786.970352][T15354] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  787.036759][T15354] XFS (loop1): Quotacheck needed: Please wait.
[  787.139061][T15354] XFS (loop1): Quotacheck: Done.
[  787.287617][ T8915] team0 (unregistering): Port device team_slave_1 removed
[  787.357195][T11580] XFS (loop1): Unmounting Filesystem
[  787.449758][ T8915] team0 (unregistering): Port device team_slave_0 removed
[  787.665404][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.850515][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.554997][T15188] Bluetooth: hci12: command tx timeout
[  788.596401][ T7597] usb 5-1: USB disconnect, device number 39
[  789.099071][T15371] loop1: detected capacity change from 0 to 512
[  789.193231][T15371] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  789.235132][T15371] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it
[  789.260419][T15371] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.3326: Corrupt directory, running e2fsck is recommended
[  789.396832][T15371] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  789.446422][T15371] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.3326: corrupted in-inode xattr
[  789.495300][T15371] EXT4-fs (loop1): Remounting filesystem read-only
[  789.511765][T15371] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3326: couldn't read orphan inode 15 (err -117)
[  789.545458][T15371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  789.655788][T15370] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  789.685711][T15370] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it
[  789.722837][T15370] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.3326: Corrupt directory, running e2fsck is recommended
[  789.741792][T15370] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.3326: path /182/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  789.774452][T15370] EXT4-fs (loop1): Remounting filesystem read-only
[  789.784019][ T8915] bond0 (unregistering): Released all slaves
[  790.218678][T15339] lo speed is unknown, defaulting to 1000
[  790.285831][T15375] input: syz1 as /devices/virtual/input/input262
[  790.328371][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c
[  790.435866][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005
[  790.456765][ T3608] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  790.625112][T15188] Bluetooth: hci12: command tx timeout
[  790.935239][ T3608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  790.975083][ T3608] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  791.135256][   T22] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  791.135264][ T3608] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40
[  791.135294][ T3608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.191455][T15185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  791.234540][ T3608] usb 2-1: Product: syz
[  791.238266][T15185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  791.265494][ T3608] usb 2-1: Manufacturer: syz
[  791.275035][ T3608] usb 2-1: SerialNumber: syz
[  791.297944][T15185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  791.331408][T15339] chnl_net:caif_netlink_parms(): no params data found
[  791.352751][T15185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  791.385074][   T22] usb 5-1: Using ep0 maxpacket: 8
[  791.505267][   T22] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  791.554082][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.576724][T10931] usb 2-1: USB disconnect, device number 45
[  791.584687][   T22] usb 5-1: config 0 descriptor??
[  791.699413][T15339] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.728786][T15339] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.768111][T15339] device bridge_slave_0 entered promiscuous mode
[  791.797676][T15339] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.804818][T15339] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.856691][T15339] device bridge_slave_1 entered promiscuous mode
[  791.938677][T15339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  791.980790][T15339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  792.118476][T15339] team0: Port device team_slave_0 added
[  792.191088][T11580] EXT4-fs (loop1): unmounting filesystem.
[  792.257170][T15185] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.265663][T15339] team0: Port device team_slave_1 added
[  792.381275][T15185] 8021q: adding VLAN 0 to HW filter on device team0
[  792.406621][T15339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.423840][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  792.709444][T15339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.786794][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  792.811374][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  792.892074][T15339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.918283][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.150255][T15339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  793.328249][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  793.338033][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  793.388313][T10931] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.395520][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  793.452642][T15188] Bluetooth: hci12: command tx timeout
[  793.496974][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  793.549632][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  793.605482][T10931] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.612640][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  793.666125][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  793.746337][T15420] input: syz1 as /devices/virtual/input/input263
[  793.754048][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  793.762841][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  793.815713][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  793.826094][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  793.840521][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  794.010247][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005
[  794.042164][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  794.078314][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  794.151589][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  794.161921][ T3564] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  794.173118][ T3564] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  794.184590][ T3564] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  794.199784][ T3564] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  794.207920][ T3564] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  794.215882][ T3564] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  794.388754][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  794.436081][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  794.455576][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  794.464222][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  794.499778][T15339] device hsr_slave_0 entered promiscuous mode
[  794.512757][T15339] device hsr_slave_1 entered promiscuous mode
[  794.537725][T12844] EXT4-fs (loop3): unmounting filesystem.
[  794.543827][T15339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  794.572121][T15339] Cannot create hsr debugfs directory
[  794.606944][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  794.643061][T15425] lo speed is unknown, defaulting to 1000
[  794.706604][   T22] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  794.743204][   T22] asix: probe of 5-1:0.0 failed with error -71
[  794.790596][   T22] usb 5-1: USB disconnect, device number 40
[  795.169906][T15429] loop1: detected capacity change from 0 to 32768
[  795.194771][ T8915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.280447][T15429] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  795.308374][T15339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.325973][T15429] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  795.411387][ T8915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.428154][T15429] XFS (loop1): Quotacheck needed: Please wait.
[  795.486635][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  795.494167][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  795.535974][T15429] XFS (loop1): Quotacheck: Done.
[  795.576725][T15339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.616510][T11580] XFS (loop1): Unmounting Filesystem
[  795.673315][ T8915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.689792][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.717869][T15339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.884348][T15339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.940193][ T8915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.985175][T15425] chnl_net:caif_netlink_parms(): no params data found
[  796.080490][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  796.091822][T15452] input: syz1 as /devices/virtual/input/input264
[  796.095928][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  796.117598][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  796.204826][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  796.236289][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  796.254653][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  796.287147][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  796.299967][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  796.307908][T15188] Bluetooth: hci8: command tx timeout
[  796.317978][T15185] device veth0_vlan entered promiscuous mode
[  796.360260][T15425] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.372926][T15425] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.388588][T15425] device bridge_slave_0 entered promiscuous mode
[  796.430046][T15425] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.473822][T15425] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.495485][T15425] device bridge_slave_1 entered promiscuous mode
[  796.646119][T15465] input: syz1 as /devices/virtual/input/input265
[  796.680913][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  798.533102][T15188] Bluetooth: hci8: command tx timeout
[  798.588087][T15185] device veth1_vlan entered promiscuous mode
[  798.601595][T15425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.636252][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005
[  798.658290][T15425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  798.843570][T15339] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  798.879389][T15425] team0: Port device team_slave_0 added
[  798.923856][T15425] team0: Port device team_slave_1 added
[  798.973927][T15339] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  798.989182][T15339] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  799.046558][T15339] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  799.104375][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  799.122139][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  799.139402][T15185] device veth0_macvtap entered promiscuous mode
[  799.161055][T15425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.170086][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.205086][   T22] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  799.295045][T15425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.397527][T15185] device veth1_macvtap entered promiscuous mode
[  799.455022][   T22] usb 5-1: Using ep0 maxpacket: 8
[  799.507548][T15482] input: syz1 as /devices/virtual/input/input266
[  799.528359][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  799.586351][   T22] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  799.605057][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.628676][   T22] usb 5-1: config 0 descriptor??
[  799.665935][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  799.692724][   T22] usb 5-1: bad CDC descriptors
[  799.700873][   T22] usb 5-1: bad CDC descriptors
[  799.714566][T15425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.726015][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  799.854983][T15425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  799.903661][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  799.935245][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  800.104616][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.128664][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.162626][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.197742][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.228218][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.263974][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.307147][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.335033][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.348638][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.361188][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.373455][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.384385][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.362163][T15188] Bluetooth: hci8: command tx timeout
[  801.441765][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.490751][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.521727][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.555122][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.604662][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.630348][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.672908][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.709378][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.732154][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  801.752584][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  801.773376][T15185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.810450][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  801.823615][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  801.867672][T10931] usb 5-1: USB disconnect, device number 41
[  801.968333][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.016954][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.052355][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.095005][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.114994][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.140775][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.166991][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.197707][T15518] input: syz1 as /devices/virtual/input/input267
[  802.204636][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.226988][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  802.238582][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.249222][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.259179][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.269771][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.279838][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.323503][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.359924][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  802.374864][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.405153][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.422714][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.433260][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.444664][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.457099][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.477408][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  802.490067][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  802.507126][T15185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.593118][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  802.617543][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  802.670694][T15523] loop4: detected capacity change from 0 to 512
[  802.763888][T15523] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  802.798051][T15523] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  802.822728][T15523] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3354: Corrupt directory, running e2fsck is recommended
[  802.841286][T15185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.850690][T15185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.859519][T15185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.882690][T15185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.904008][T15425] device hsr_slave_0 entered promiscuous mode
[  802.921333][T15425] device hsr_slave_1 entered promiscuous mode
[  802.930432][T15425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  802.939943][T15425] Cannot create hsr debugfs directory
[  803.435866][T15188] Bluetooth: hci8: command tx timeout
[  803.861359][T15523] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  803.916561][T15523] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.3354: corrupted in-inode xattr
[  803.957851][T15523] EXT4-fs (loop4): Remounting filesystem read-only
[  803.975362][T15523] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3354: couldn't read orphan inode 15 (err -117)
[  804.020070][T15523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  804.147894][T15523] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  804.173840][T15523] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  804.203446][T15523] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3354: Corrupt directory, running e2fsck is recommended
[  804.264605][T15523] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.3354: path /664/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  804.304487][T15523] EXT4-fs (loop4): Remounting filesystem read-only
[  804.436209][T15339] 8021q: adding VLAN 0 to HW filter on device bond0
[  804.681771][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  804.706181][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  804.857360][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.874749][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.889947][T15339] 8021q: adding VLAN 0 to HW filter on device team0
[  804.897866][T15551] input: syz1 as /devices/virtual/input/input268
[  804.915683][ T3561] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  804.943455][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  805.007019][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  805.035956][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  805.065535][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  805.071283][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  805.111008][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.118297][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.187399][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.199799][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.404206][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  805.415097][ T3561] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.416004][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  805.433744][ T3561] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  805.475940][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  805.495791][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.502940][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.519017][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  805.536617][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  805.550040][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  805.586657][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  805.606056][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  805.645598][ T3561] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40
[  805.713223][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.742305][ T3561] usb 5-1: Product: syz
[  805.754634][ T3561] usb 5-1: Manufacturer: syz
[  805.760473][ T3561] usb 5-1: SerialNumber: syz
[  805.793135][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  805.815925][ T3561] usb 5-1: can't set config #1, error -71
[  805.822915][ T4846] EXT4-fs (loop4): unmounting filesystem.
[  805.830839][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  805.838692][ T3561] usb 5-1: USB disconnect, device number 42
[  805.857446][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  805.894581][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  805.925140][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  805.954603][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  805.986132][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  806.062567][T15339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  806.238426][T15575] input: syz1 as /devices/virtual/input/input269
[  807.056948][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  807.070884][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  807.111662][T15594] input: syz1 as /devices/virtual/input/input270
[  807.143558][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c
[  807.276920][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005
[  807.380466][T15339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.499281][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  807.521888][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  807.698920][T15339] device veth0_vlan entered promiscuous mode
[  807.742213][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  807.751616][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  807.793627][T15339] device veth1_vlan entered promiscuous mode
[  807.822744][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  807.833979][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  807.853332][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  807.892978][T15425] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  807.991198][T15425] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  808.059533][T15425] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  808.126504][T15425] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  808.190444][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  808.203900][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  808.256318][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  808.394414][ T8915] device hsr_slave_0 left promiscuous mode
[  808.433969][ T8915] device hsr_slave_1 left promiscuous mode
[  808.448221][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.497184][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.540372][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  808.564414][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  808.592997][ T8915] device bridge_slave_1 left promiscuous mode
[  808.617717][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.628922][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  808.637760][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  808.655872][ T8915] device bridge_slave_0 left promiscuous mode
[  808.664869][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.685605][ T8915] device hsr_slave_0 left promiscuous mode
[  808.704282][ T8915] device hsr_slave_1 left promiscuous mode
[  808.725902][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  808.752431][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  808.772511][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  808.795980][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  808.823732][ T8915] device bridge_slave_1 left promiscuous mode
[  808.849748][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.887543][ T8915] device bridge_slave_0 left promiscuous mode
[  808.908638][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.163279][ T8915] device veth1_macvtap left promiscuous mode
[  809.171421][ T8915] device veth0_macvtap left promiscuous mode
[  809.177662][ T8915] device veth1_vlan left promiscuous mode
[  809.186376][ T8915] device veth0_vlan left promiscuous mode
[  809.212614][ T8915] device veth1_macvtap left promiscuous mode
[  809.251293][ T8915] device veth0_macvtap left promiscuous mode
[  809.272050][ T8915] device veth1_vlan left promiscuous mode
[  809.288942][ T8915] device veth0_vlan left promiscuous mode
[  811.092945][ T8915] team0 (unregistering): Port device team_slave_1 removed
[  811.151796][ T8915] team0 (unregistering): Port device team_slave_0 removed
[  811.221081][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  811.285160][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  812.047143][ T8915] bond0 (unregistering): Released all slaves
[  812.675853][ T8915] team0 (unregistering): Port device team_slave_1 removed
[  812.721526][ T8915] team0 (unregistering): Port device team_slave_0 removed
[  812.775067][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.832936][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.411679][ T8915] bond0 (unregistering): Released all slaves
[  813.548126][T15339] device veth0_macvtap entered promiscuous mode
[  813.558734][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  813.603896][T15339] device veth1_macvtap entered promiscuous mode
[  813.719869][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.749009][T15635] input: syz1 as /devices/virtual/input/input271
[  813.754167][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.795252][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.831114][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.852095][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  813.860141][T15188] Bluetooth: hci7: unexpected event for opcode 0x750c
[  813.945049][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  813.995285][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.033106][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.067286][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005
[  814.071924][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.129726][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.178878][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.200724][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.222731][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.261185][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.296713][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.330540][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.359519][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.403931][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.449887][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.487094][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.584068][T15339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  814.619084][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  814.635979][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  814.670862][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.707132][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.739168][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.770353][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.812257][T15658] input: syz1 as /devices/virtual/input/input272
[  814.821090][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.856752][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  814.860743][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.894318][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.946402][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  814.975102][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.989937][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.000959][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.012174][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.025622][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.039897][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.051109][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.062231][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.073715][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.086893][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.098918][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.124804][T15637] loop4: detected capacity change from 0 to 32768
[  815.129654][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  815.168658][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  815.253391][T15637] XFS (loop4): Mounting V5 Filesystem
[  815.277418][T15339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  815.295783][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  815.335614][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  815.393563][T15339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.404515][T15637] XFS (loop4): Ending clean mount
[  815.445045][T15339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.458971][T15339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.468564][T15339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  815.514254][   T26] audit: type=1800 audit(1721230819.720:139): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3378" name="bus" dev="loop4" ino=4427 res=0 errno=0
[  815.604207][T15425] 8021q: adding VLAN 0 to HW filter on device bond0
[  815.644253][   T26] audit: type=1800 audit(1721230819.750:140): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3378" name="bus" dev="loop4" ino=4428 res=0 errno=0
[  815.715843][ T4846] XFS (loop4): Unmounting Filesystem
[  815.773192][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  815.794647][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  815.834174][T15425] 8021q: adding VLAN 0 to HW filter on device team0
[  815.918354][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  815.948815][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  815.965717][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.972896][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.164643][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  816.222957][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  816.283642][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.290837][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  816.356905][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.377719][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.400133][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  816.430971][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  816.462000][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  816.502335][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  816.524456][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  816.563398][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  816.581187][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  816.627143][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  816.644785][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  816.691392][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  816.707871][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  816.741937][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.750804][T15425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  816.751690][T15425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  816.820284][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.836718][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  816.859977][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  816.944117][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  817.333528][T15709] input: syz1 as /devices/virtual/input/input273
[  817.782868][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  817.796893][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  817.831577][T15425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.933387][T15726] input: syz1 as /devices/virtual/input/input274
[  817.940072][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  817.956089][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  817.983730][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  818.018782][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  818.027483][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  818.037007][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  818.045295][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  818.080818][T15425] device veth0_vlan entered promiscuous mode
[  818.121654][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  818.167302][T15425] device veth1_vlan entered promiscuous mode
[  818.214630][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3395'.
[  818.345603][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  818.354404][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  818.415876][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  818.430611][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  818.472026][T15425] device veth0_macvtap entered promiscuous mode
[  818.512029][T15425] device veth1_macvtap entered promiscuous mode
[  818.589740][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  818.624501][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  818.646229][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  818.689962][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  818.715575][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  818.888162][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.119266][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.307460][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.460787][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.511606][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.541929][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.552527][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.562447][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.572960][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.582900][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.595536][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.626464][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.644969][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.654825][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.684977][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.704946][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  819.725075][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.758060][T15425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  819.774270][T15724] loop2: detected capacity change from 0 to 32768
[  819.826840][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  819.836239][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  819.855583][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  819.886370][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  819.899716][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  819.921123][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  819.931379][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  819.967101][T15724] XFS (loop2): Mounting V5 Filesystem
[  819.991516][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.004381][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.015065][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.025345][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.035946][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.049283][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.081245][T15724] XFS (loop2): Ending clean mount
[  820.096744][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.116943][T15769] input: syz1 as /devices/virtual/input/input275
[  820.129963][   T26] audit: type=1800 audit(1721230824.340:141): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3391" name="bus" dev="loop2" ino=4427 res=0 errno=0
[  820.155921][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  820.173672][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.186045][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.196186][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.208600][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.219790][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.232196][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.242302][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.252935][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.262932][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.274102][   T26] audit: type=1800 audit(1721230824.380:142): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3391" name="bus" dev="loop2" ino=4428 res=0 errno=0
[  820.297405][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.310498][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  820.321656][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.332165][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  820.347059][T15185] XFS (loop2): Unmounting Filesystem
[  820.353275][T15425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  820.364005][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  820.373752][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  820.392819][T15425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  820.423998][T15425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  820.491035][T15425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  820.523690][T15425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.896376][ T9202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.904860][ T9202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.008126][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  821.056068][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.069366][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.911261][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  822.621249][T15806] netlink: 'syz.3.3417': attribute type 10 has an invalid length.
[  822.802429][T15810] input: syz1 as /devices/virtual/input/input276
[  823.236256][T15789] loop0: detected capacity change from 0 to 32768
[  823.441916][T15795] loop4: detected capacity change from 0 to 32768
[  823.862472][T15789] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  823.871420][T15795] XFS (loop4): Mounting V5 Filesystem
[  823.882016][T15789] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  823.960122][T15795] XFS (loop4): Ending clean mount
[  823.967951][T15789] XFS (loop0): Quotacheck needed: Please wait.
[  824.041970][T15789] XFS (loop0): Quotacheck: Done.
[  824.085668][   T26] audit: type=1800 audit(1721230828.300:143): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3415" name="bus" dev="loop4" ino=4427 res=0 errno=0
[  824.169077][ T4846] XFS (loop4): Unmounting Filesystem
[  824.190822][T15339] XFS (loop0): Unmounting Filesystem
[  824.363473][T15858] input: syz1 as /devices/virtual/input/input277
[  825.595432][T11018] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  825.845224][T11018] usb 2-1: Using ep0 maxpacket: 8
[  825.965083][T11018] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  825.983863][T11018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.007315][T15874] device syzkaller1 entered promiscuous mode
[  826.030377][T11018] usb 2-1: config 0 descriptor??
[  826.123319][T11018] usb 2-1: bad CDC descriptors
[  826.133771][T11018] usb 2-1: bad CDC descriptors
[  826.793321][T15898] input: syz1 as /devices/virtual/input/input278
[  827.299268][T15907] loop2: detected capacity change from 0 to 1024
[  827.380377][T11018] usb 2-1: USB disconnect, device number 46
[  827.407083][T15882] loop4: detected capacity change from 0 to 32768
[  827.521568][T15882] XFS (loop4): Mounting V5 Filesystem
[  827.569725][T15882] XFS (loop4): Ending clean mount
[  827.620647][   T26] audit: type=1800 audit(1721230831.830:144): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3443" name="bus" dev="loop4" ino=4427 res=0 errno=0
[  827.712747][ T4846] XFS (loop4): Unmounting Filesystem
[  828.182509][T15942] input: syz1 as /devices/virtual/input/input279
[  828.239293][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  828.365697][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  828.857007][T15960] can0: slcan on ptm0.
[  828.870623][T15964] loop4: detected capacity change from 0 to 256
[  829.089994][T15959] can0 (unregistered): slcan off ptm0.
[  829.227926][T15975] loop1: detected capacity change from 0 to 512
[  829.285957][T15975] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.3475: casefold flag without casefold feature
[  829.376455][T15975] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.3475: missing EA_INODE flag
[  829.443670][T15951] loop3: detected capacity change from 0 to 32768
[  829.460794][T15975] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3475: error while reading EA inode 2 err=-117
[  829.570659][T15975] EXT4-fs (loop1): 1 orphan inode deleted
[  829.577965][T15975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  829.667487][T15951] XFS (loop3): Mounting V5 Filesystem
[  829.847949][T15951] XFS (loop3): Ending clean mount
[  829.857248][T11580] EXT4-fs (loop1): unmounting filesystem.
[  829.934599][T16013] input: syz1 as /devices/virtual/input/input280
[  830.017431][   T26] audit: type=1800 audit(1721230834.230:145): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3468" name="bus" dev="loop3" ino=4427 res=0 errno=0
[  830.113391][T15425] XFS (loop3): Unmounting Filesystem
[  830.545207][T15188] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  830.689767][T16031] can0: slcan on ptm0.
[  830.806469][T16036] loop4: detected capacity change from 0 to 1024
[  834.028766][T16030] can0 (unregistered): slcan off ptm0.
[  834.211662][T16056] device pim6reg1 entered promiscuous mode
[  834.377533][T16069] input: syz1 as /devices/virtual/input/input281
[  840.663230][T16097] can0: slcan on ptm0.
[  840.835308][T16096] can0 (unregistered): slcan off ptm0.
[  840.849470][T16103] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3506'.
[  840.944148][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'.
[  841.150849][T16108] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3509'.
[  841.210363][T16112] input: syz1 as /devices/virtual/input/input282
[  841.239312][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c
[  841.326027][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'.
[  841.342199][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005
[  846.885681][T16164] input: syz1 as /devices/virtual/input/input283
[  846.923639][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  847.012169][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  847.143208][ T3564] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  847.177004][ T3564] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  847.193779][ T3564] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  847.205510][T10933] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  847.217673][ T3564] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  847.225539][ T3564] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  847.236055][ T3564] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  847.468657][T16173] lo speed is unknown, defaulting to 1000
[  847.615248][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.645317][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.675073][T10933] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00
[  847.692428][ T8762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.714799][T10933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.752328][T10933] usb 3-1: config 0 descriptor??
[  847.892199][ T8762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.054835][ T8762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.226858][T10933] smartjoyplus 0003:0925:0005.000F: unknown main item tag 0x0
[  848.234447][T10933] smartjoyplus 0003:0925:0005.000F: unbalanced collection at end of report description
[  848.297560][ T8762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.317175][T10933] smartjoyplus 0003:0925:0005.000F: parse failed
[  848.337533][T10933] smartjoyplus: probe of 0003:0925:0005.000F failed with error -22
[  848.449941][ T7597] usb 3-1: USB disconnect, device number 28
[  849.266767][T15188] Bluetooth: hci13: command tx timeout
[  851.362156][T15188] Bluetooth: hci13: command tx timeout
[  853.425192][T15188] Bluetooth: hci13: command tx timeout
[  853.922491][T16218] input: syz1 as /devices/virtual/input/input284
[  853.998281][T16173] chnl_net:caif_netlink_parms(): no params data found
[  854.155186][T16225] input: syz1 as /devices/virtual/input/input285
[  855.011717][T16173] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.041099][T16245] loop1: detected capacity change from 0 to 128
[  855.073132][T16173] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.107705][T16173] device bridge_slave_0 entered promiscuous mode
[  855.517380][T15188] Bluetooth: hci13: command tx timeout
[  858.285544][T16173] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.327754][T16173] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.376294][T16173] device bridge_slave_1 entered promiscuous mode
[  858.516398][T16265] input: syz1 as /devices/virtual/input/input286
[  858.533254][T16266] input: syz1 as /devices/virtual/input/input287
[  858.567706][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c
[  858.668071][T16173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  858.695567][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005
[  858.704469][T16173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  858.923378][T16173] team0: Port device team_slave_0 added
[  859.017259][T16173] team0: Port device team_slave_1 added
[  859.427460][T16293] loop2: detected capacity change from 0 to 2048
[  859.446910][T16173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  859.453899][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.541088][T16293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  859.572246][T16173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.645262][T16294] netlink: 'syz.3.3557': attribute type 2 has an invalid length.
[  859.690625][T16173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  859.717504][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  859.762436][T15185] EXT4-fs (loop2): unmounting filesystem.
[  859.789260][T16173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.452375][T16321] input: syz1 as /devices/virtual/input/input288
[  861.497011][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c
[  861.507201][T16324] input: syz1 as /devices/virtual/input/input289
[  861.699980][T16173] device hsr_slave_0 entered promiscuous mode
[  861.727357][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005
[  861.738698][T16173] device hsr_slave_1 entered promiscuous mode
[  861.801402][T16173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  861.842759][T16173] Cannot create hsr debugfs directory
[  862.024540][ T8762] device hsr_slave_0 left promiscuous mode
[  862.051007][ T8762] device hsr_slave_1 left promiscuous mode
[  862.088519][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  862.099912][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  862.134276][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  862.155187][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  862.175308][ T8762] device bridge_slave_1 left promiscuous mode
[  862.207410][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.339467][ T8762] device bridge_slave_0 left promiscuous mode
[  862.448888][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.048912][ T8762] device veth1_macvtap left promiscuous mode
[  863.058561][ T8762] device veth0_macvtap left promiscuous mode
[  863.064708][ T8762] device veth1_vlan left promiscuous mode
[  863.081647][ T8762] device veth0_vlan left promiscuous mode
[  864.192086][ T8762] team0 (unregistering): Port device team_slave_1 removed
[  864.254047][ T8762] team0 (unregistering): Port device team_slave_0 removed
[  864.346684][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  864.474848][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.104602][ T8762] bond0 (unregistering): Released all slaves
[  865.225131][T16353] netlink: 'syz.1.3570': attribute type 2 has an invalid length.
[  865.360022][T16366] input: syz1 as /devices/virtual/input/input291
[  865.665132][T11015] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  865.936814][T11015] usb 5-1: Using ep0 maxpacket: 8
[  866.074481][T11015] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  866.089139][T11015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.137389][T11015] usb 5-1: config 0 descriptor??
[  866.821143][T16173] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  866.870596][T16173] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  866.912688][T16173] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  866.970335][T16416] netlink: 'syz.2.3585': attribute type 2 has an invalid length.
[  866.986093][T16173] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  867.246291][T16173] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.294560][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  867.304433][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  867.343576][T16173] 8021q: adding VLAN 0 to HW filter on device team0
[  867.376930][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  867.396559][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  867.427913][T10933] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.435075][T10933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.504703][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  867.525735][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  867.555764][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  867.576901][T10931] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.584047][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.625524][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  867.655399][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  867.697127][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  867.721422][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  867.750919][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  867.806193][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  867.860451][T16173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  867.885141][T16429] input: syz1 as /devices/virtual/input/input293
[  867.901758][T16173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  867.961517][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  867.986997][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  867.995298][T16407] loop1: detected capacity change from 0 to 40427
[  868.021963][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  868.074594][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  868.094411][T16407] F2FS-fs (loop1): Found nat_bits in checkpoint
[  868.114756][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  868.152399][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  868.258355][T16407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  868.504273][T16407] syz.1.3582[16407] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  868.504365][T16407] syz.1.3582[16407] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  868.615404][T11015] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  868.689748][T11015] asix: probe of 5-1:0.0 failed with error -71
[  868.738367][T11015] usb 5-1: USB disconnect, device number 43
[  868.799616][T11580] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0
[  868.832914][T11580] CPU: 0 PID: 11580 Comm: syz-executor Not tainted 6.1.99-syzkaller #0
[  868.841230][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  868.851322][T11580] Call Trace:
[  868.854634][T11580]  <TASK>
[  868.857582][T11580]  dump_stack_lvl+0x1e3/0x2cb
[  868.862308][T11580]  ? nf_tcp_handle_invalid+0x642/0x642
[  868.867817][T11580]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[  868.873681][T11580]  f2fs_is_valid_blkaddr+0xc61/0x1270
[  868.879101][T11580]  f2fs_map_blocks+0x15fd/0x3ab0
[  868.884087][T11580]  ? f2fs_do_map_lock+0x70/0x70
[  868.888957][T11580]  ? page_index+0xff/0x4b0
[  868.893381][T11580]  f2fs_mpage_readpages+0xbd5/0x2b90
[  868.898708][T11580]  ? mark_lock+0x9a/0x340
[  868.903065][T11580]  ? dquot_release_reservation_block+0x90/0x90
[  868.909231][T11580]  ? folio_add_lru+0x34d/0xd70
[  868.914016][T11580]  ? f2fs_is_compress_backend_ready+0x9d/0x130
[  868.920182][T11580]  ? f2fs_readahead+0x18a/0x3a0
[  868.925038][T11580]  ? blk_start_plug+0x95/0x110
[  868.929818][T11580]  read_pages+0x17f/0x830
[  868.934157][T11580]  ? folio_add_lru+0x34d/0xd70
[  868.938925][T11580]  ? folio_add_lru+0x34d/0xd70
[  868.943713][T11580]  ? page_cache_ra_unbounded+0x7b0/0x7b0
[  868.949373][T11580]  ? __filemap_add_folio+0x1ba0/0x1ba0
[  868.954872][T11580]  ? page_cache_ra_order+0xb2a/0xd80
[  868.960206][T11580]  page_cache_ra_unbounded+0x68b/0x7b0
[  868.965704][T11580]  f2fs_readdir+0x5ae/0xc30
[  868.970224][T11580]  ? __might_sleep+0xb0/0xb0
[  868.974861][T11580]  ? f2fs_fill_dentries+0xd60/0xd60
[  868.980089][T11580]  ? iterate_dir+0x10a/0x560
[  868.984689][T11580]  ? __fdget_pos+0x2ba/0x360
[  868.989293][T11580]  ? common_file_perm+0x17d/0x1d0
[  868.994355][T11580]  ? fsnotify_perm+0x439/0x590
[  868.999126][T11580]  iterate_dir+0x224/0x560
[  869.003548][T11580]  ? f2fs_fill_dentries+0xd60/0xd60
[  869.008775][T11580]  __se_sys_getdents64+0x209/0x4f0
[  869.013907][T11580]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  869.019909][T11580]  ? __x64_sys_getdents64+0x80/0x80
[  869.025127][T11580]  ? filldir+0x6f0/0x6f0
[  869.029386][T11580]  ? syscall_enter_from_user_mode+0x2e/0x230
[  869.035388][T11580]  ? lockdep_hardirqs_on+0x94/0x130
[  869.040600][T11580]  ? syscall_enter_from_user_mode+0x2e/0x230
[  869.046590][T11580]  do_syscall_64+0x3b/0xb0
[  869.051019][T11580]  ? clear_bhb_loop+0x45/0xa0
[  869.055715][T11580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  869.061619][T11580] RIP: 0033:0x7f418f5a7ab3
[  869.066048][T11580] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  869.085674][T11580] RSP: 002b:00007ffdd42bae38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  869.094110][T11580] RAX: ffffffffffffffda RBX: 000055555569c600 RCX: 00007f418f5a7ab3
[  869.102093][T11580] RDX: 0000000000008000 RSI: 000055555569c600 RDI: 0000000000000005
[  869.110086][T11580] RBP: 000055555569c5d4 R08: 0000000000000000 R09: 0000000000000000
[  869.118100][T11580] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  869.126085][T11580] R13: 0000000000000010 R14: 000055555569c5d0 R15: 00000000000d394a
[  869.134119][T11580]  </TASK>
[  869.161747][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  869.171389][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  869.197071][T16173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.259728][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  869.273827][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  869.317444][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  869.328510][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  869.368417][T16173] device veth0_vlan entered promiscuous mode
[  869.384460][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  869.423323][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  869.463379][T16173] device veth1_vlan entered promiscuous mode
[  869.555448][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  869.576086][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  869.605856][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  869.635899][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  869.667947][T16173] device veth0_macvtap entered promiscuous mode
[  869.682599][T16173] device veth1_macvtap entered promiscuous mode
[  869.728506][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.759690][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  869.786607][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.817607][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  869.848051][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.904345][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  869.944128][T11580] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0
[  869.962347][T11580] CPU: 0 PID: 11580 Comm: syz-executor Not tainted 6.1.99-syzkaller #0
[  869.970647][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  869.974988][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  869.980710][T11580] Call Trace:
[  869.980724][T11580]  <TASK>
[  869.980734][T11580]  dump_stack_lvl+0x1e3/0x2cb
[  870.002092][T11580]  ? nf_tcp_handle_invalid+0x642/0x642
[  870.007604][T11580]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[  870.013456][T11580]  f2fs_is_valid_blkaddr+0xc61/0x1270
[  870.018877][T11580]  f2fs_get_read_data_page+0x4ec/0x8c0
[  870.024374][T11580]  ? f2fs_get_block+0x1b0/0x1b0
[  870.029267][T11580]  ? PageHeadHuge+0x8e/0x1c0
[  870.033900][T11580]  f2fs_find_data_page+0x99/0x380
[  870.038958][T11580]  f2fs_readdir+0x5c3/0xc30
[  870.043505][T11580]  ? __might_sleep+0xb0/0xb0
[  870.048142][T11580]  ? f2fs_fill_dentries+0xd60/0xd60
[  870.053384][T11580]  ? iterate_dir+0x10a/0x560
[  870.058021][T11580]  ? __fdget_pos+0x2ba/0x360
[  870.062637][T11580]  ? common_file_perm+0x17d/0x1d0
[  870.066795][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  870.067672][T11580]  ? fsnotify_perm+0x439/0x590
[  870.074721][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  870.078643][T11580]  iterate_dir+0x224/0x560
[  870.078671][T11580]  ? f2fs_fill_dentries+0xd60/0xd60
[  870.094684][T11580]  __se_sys_getdents64+0x209/0x4f0
[  870.099831][T11580]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  870.105052][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.105841][T11580]  ? __x64_sys_getdents64+0x80/0x80
[  870.120907][T11580]  ? filldir+0x6f0/0x6f0
[  870.125183][T11580]  ? syscall_enter_from_user_mode+0x2e/0x230
[  870.126144][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.131182][T11580]  ? lockdep_hardirqs_on+0x94/0x130
[  870.131218][T11580]  ? syscall_enter_from_user_mode+0x2e/0x230
[  870.141879][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.146804][T11580]  do_syscall_64+0x3b/0xb0
[  870.146840][T11580]  ? clear_bhb_loop+0x45/0xa0
[  870.146874][T11580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  870.146904][T11580] RIP: 0033:0x7f418f5a7ab3
[  870.153099][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.162770][T11580] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  870.162790][T11580] RSP: 002b:00007ffdd42bae38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  870.162814][T11580] RAX: ffffffffffffffda RBX: 000055555569c600 RCX: 00007f418f5a7ab3
[  870.162829][T11580] RDX: 0000000000008000 RSI: 000055555569c600 RDI: 0000000000000005
[  870.162842][T11580] RBP: 000055555569c5d4 R08: 0000000000000000 R09: 0000000000000000
[  870.162855][T11580] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  870.162869][T11580] R13: 0000000000000010 R14: 000055555569c5d0 R15: 00000000000d394a
[  870.162899][T11580]  </TASK>
[  870.288633][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.309199][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.330506][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.351045][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.375204][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.401684][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.424095][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.439439][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.460471][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.484399][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.512596][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.535833][T16173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.581740][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.654554][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.695140][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.730614][ T8915] kworker/u4:25: attempt to access beyond end of device
[  870.730614][ T8915] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  870.737905][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.796309][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.835345][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.843620][T16501] input: syz1 as /devices/virtual/input/input295
[  870.875146][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.898335][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.925529][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.938484][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.949085][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.959727][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.969608][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.980320][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.990379][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.003248][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.017644][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.028342][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.038464][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.062652][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.082830][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.098137][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.112067][T16173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.178225][T16173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.213542][T16173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.229796][T16173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.241548][T16173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.268942][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  871.296007][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  871.326130][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  871.348125][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  871.370027][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  871.389521][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  871.722759][T16517] device syzkaller1 entered promiscuous mode
[  871.883784][ T9202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.921448][ T9202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.955510][ T7867] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  872.040751][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  872.176728][ T8762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.205759][ T7867] usb 4-1: Using ep0 maxpacket: 8
[  872.219299][ T7935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.245075][ T7935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.323229][ T8762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.325666][ T7867] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  872.373178][ T7867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.415958][ T7867] usb 4-1: config 0 descriptor??
[  872.445703][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  872.558985][ T8762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.705885][ T8762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.746142][T16530] can0: slcan on ptm0.
[  872.867260][T16529] can0 (unregistered): slcan off ptm0.
[  873.075210][T16536] input: syz1 as /devices/virtual/input/input296
[  873.088518][ T3574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  873.109926][ T3574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  873.119014][ T3574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  873.132273][ T3574] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  873.142813][ T3574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  873.155467][ T3574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  873.189490][T16521] loop2: detected capacity change from 0 to 40427
[  873.222419][T16521] F2FS-fs (loop2): invalid crc value
[  873.264313][T16521] F2FS-fs (loop2): Found nat_bits in checkpoint
[  873.444523][T16521] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  873.478561][T16537] lo speed is unknown, defaulting to 1000
[  873.562417][T16521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  875.065230][ T7867] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  875.085121][ T7867] asix: probe of 4-1:0.0 failed with error -71
[  875.114327][ T7867] usb 4-1: USB disconnect, device number 37
[  875.194325][ T3574] Bluetooth: hci7: command tx timeout
[  875.204597][   T14] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  875.400686][T16537] chnl_net:caif_netlink_parms(): no params data found
[  875.569944][T16579] device syzkaller1 entered promiscuous mode
[  875.585351][   T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  875.594433][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.675667][   T14] usb 5-1: config 0 descriptor??
[  875.717816][   T14] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  876.240240][T16605] input: syz1 as /devices/virtual/input/input297
[  876.323908][T16598] can0: slcan on ptm0.
[  876.531959][T16597] can0 (unregistered): slcan off ptm0.
[  876.616718][T16537] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.620458][T16614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3621'.
[  876.645785][T16537] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.663635][T16537] device bridge_slave_0 entered promiscuous mode
[  876.712324][T16537] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.737753][T16537] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.777863][T16537] device bridge_slave_1 entered promiscuous mode
[  876.890226][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.965574][ T8762] device hsr_slave_0 left promiscuous mode
[  876.977600][ T8762] device hsr_slave_1 left promiscuous mode
[  876.985564][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  876.993118][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.008214][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.019448][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.028247][ T8762] device bridge_slave_1 left promiscuous mode
[  877.046256][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.063567][ T8762] device bridge_slave_0 left promiscuous mode
[  877.073489][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.133647][ T8762] device veth0_macvtap left promiscuous mode
[  877.141304][ T8762] device veth1_vlan left promiscuous mode
[  877.147832][ T8762] device veth0_vlan left promiscuous mode
[  877.265011][ T3574] Bluetooth: hci7: command tx timeout
[  877.365167][T10472] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  877.604973][T10472] usb 4-1: Using ep0 maxpacket: 8
[  877.725149][T10472] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  877.744546][T10472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.773148][T10472] usb 4-1: config 0 descriptor??
[  877.793016][   T14] usb 5-1: USB disconnect, device number 44
[  878.402479][T16654] input: syz1 as /devices/virtual/input/input298
[  878.436868][ T3574] Bluetooth: hci6: unexpected event for opcode 0x752f
[  878.532045][ T3574] Bluetooth: hci6: unexpected event for opcode 0x2005
[  878.562225][ T8762] team0 (unregistering): Port device team_slave_1 removed
[  878.624244][ T8762] team0 (unregistering): Port device team_slave_0 removed
[  878.719575][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  878.803250][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  879.346324][ T3574] Bluetooth: hci7: command tx timeout
[  879.444555][ T8762] bond0 (unregistering): Released all slaves
[  879.528497][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.562581][T16647] device syzkaller1 entered promiscuous mode
[  879.583496][T16658] slcan: can't register candev
[  879.589422][T16658] Falling back ldisc for ptm0.
[  879.664075][T16662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3632'.
[  879.748080][T16537] team0: Port device team_slave_0 added
[  879.826599][T16537] team0: Port device team_slave_1 added
[  879.934412][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.972061][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  880.094597][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.130680][T16672] netlink: 'syz.2.3635': attribute type 2 has an invalid length.
[  880.161262][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.180784][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  880.243934][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  880.285215][T10472] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  880.303925][T10472] asix: probe of 4-1:0.0 failed with error -71
[  880.362236][T10472] usb 4-1: USB disconnect, device number 38
[  880.470397][T16537] device hsr_slave_0 entered promiscuous mode
[  880.536708][T16537] device hsr_slave_1 entered promiscuous mode
[  880.561222][T16537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  880.603438][T16537] Cannot create hsr debugfs directory
[  880.688846][T16692] device syzkaller1 entered promiscuous mode
[  880.836237][T16697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3643'.
[  881.424998][ T3574] Bluetooth: hci7: command tx timeout
[  882.615445][T16731] netlink: 'syz.2.3652': attribute type 2 has an invalid length.
[  882.724753][T16735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3654'.
[  882.844942][T10931] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  882.909962][T16537] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  882.958300][T16537] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  882.988099][T16738] device syzkaller1 entered promiscuous mode
[  882.999734][T16537] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  883.093015][T16537] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  883.105187][T10931] usb 5-1: Using ep0 maxpacket: 8
[  883.225400][T10931] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  883.247165][T10931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.303039][T10931] usb 5-1: config 0 descriptor??
[  883.399481][T16537] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.472791][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  883.483214][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  883.516878][T16537] 8021q: adding VLAN 0 to HW filter on device team0
[  883.555511][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  883.574580][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  883.598322][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.605526][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.685017][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  883.694222][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  883.733659][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  883.754039][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.761219][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.811218][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  883.842297][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  883.902539][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  883.918757][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  883.936681][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  883.958296][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  883.972503][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  883.991172][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  884.019856][T16537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  884.051930][T16537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  884.113760][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  884.136456][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  884.172243][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  884.199313][T16775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3664'.
[  884.592638][T16784] device syzkaller1 entered promiscuous mode
[  884.906189][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  884.913722][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  884.979378][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.055752][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  885.065712][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  885.149556][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  885.161546][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  885.190537][T16537] device veth0_vlan entered promiscuous mode
[  885.206720][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  885.218046][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  885.243600][T16537] device veth1_vlan entered promiscuous mode
[  885.322113][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  885.361653][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  885.392400][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  885.427287][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  885.450720][T16537] device veth0_macvtap entered promiscuous mode
[  885.479525][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  885.511537][T16537] device veth1_macvtap entered promiscuous mode
[  885.559543][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.578268][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.590279][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.618279][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.645989][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.664226][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.688593][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.702487][T16814] loop3: detected capacity change from 0 to 1024
[  885.711019][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.755097][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.780223][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.800240][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.822620][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.835200][T10931] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  885.846038][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.874332][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.896709][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.915528][T10931] asix: probe of 5-1:0.0 failed with error -71
[  885.933667][T16818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3675'.
[  885.948298][T10931] usb 5-1: USB disconnect, device number 45
[  885.954944][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  885.980037][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  885.999628][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.021185][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.043018][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.056389][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.069315][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.081665][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.101694][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.165076][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.189950][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.211774][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.234299][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.260328][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.280720][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.303573][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.334631][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.360512][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.381892][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.403644][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.434053][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.485020][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.507380][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.534202][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.554546][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.575033][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.595833][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.606976][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.617263][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.628816][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.670594][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.725573][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  886.746183][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  886.780971][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  886.812612][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  886.850441][T16537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.875025][T16537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  886.883776][T16537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  886.895892][T16537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  886.923835][T16840] device syzkaller1 entered promiscuous mode
[  887.167235][T16851] loop0: detected capacity change from 0 to 2048
[  887.219387][ T7935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.246803][T16851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  887.262636][ T5607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.266964][ T7935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.272076][ T5607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.339205][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  887.367822][   T26] audit: type=1804 audit(1721230891.580:146): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3683" name="/newroot/26/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  887.426243][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  887.450229][T16173] EXT4-fs (loop0): unmounting filesystem.
[  887.673920][ T3574] Bluetooth: hci7: Malformed HCI Event: 0x22
[  887.785385][T16869] netlink: 'syz.4.3688': attribute type 2 has an invalid length.
[  887.885143][T10933] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  888.002111][T16850] loop2: detected capacity change from 0 to 32768
[  888.067544][T16850] XFS (loop2): Mounting V5 Filesystem
[  888.145397][T10933] usb 1-1: Using ep0 maxpacket: 8
[  888.221903][T16850] XFS (loop2): Ending clean mount
[  888.237149][T16850] XFS (loop2): Quotacheck needed: Please wait.
[  888.283844][T10933] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  888.293662][T10933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.307485][T16850] XFS (loop2): Quotacheck: Done.
[  888.323744][T10933] usb 1-1: config 0 descriptor??
[  888.386026][T15185] XFS (loop2): Unmounting Filesystem
[  888.800023][T16887] device syzkaller1 entered promiscuous mode
[  889.332425][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3699'.
[  889.385988][T16903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.136815][T16914] netlink: 'syz.3.3702': attribute type 2 has an invalid length.
[  890.744013][T16913] loop2: detected capacity change from 0 to 32768
[  890.794279][T16913] XFS (loop2): Mounting V5 Filesystem
[  890.825019][T10933] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  890.838279][T10933] asix: probe of 1-1:0.0 failed with error -71
[  890.848115][T10933] usb 1-1: USB disconnect, device number 33
[  890.919864][T16913] XFS (loop2): Ending clean mount
[  890.943586][T16913] XFS (loop2): Quotacheck needed: Please wait.
[  891.082103][T16913] XFS (loop2): Quotacheck: Done.
[  891.131888][T16940] loop3: detected capacity change from 0 to 128
[  891.237691][T16942] fuse: Bad value for 'fd'
[  891.891620][T15185] XFS (loop2): Unmounting Filesystem
[  891.960593][T16945] input: syz1 as /devices/virtual/input/input300
[  896.148453][ T3574] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0
[  896.157431][ T3574] Bluetooth: hci13: Injecting HCI hardware error event
[  896.168790][T15188] Bluetooth: hci13: hardware error 0x00
[  896.189548][T16968] netlink: 'syz.1.3720': attribute type 2 has an invalid length.
[  896.545158][T11017] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  896.795189][T11017] usb 4-1: Using ep0 maxpacket: 8
[  896.915154][T11017] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  896.925663][T11017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.954743][T11017] usb 4-1: config 0 descriptor??
[  897.351120][T16988] fuse: Bad value for 'fd'
[  897.978952][T16990] input: syz1 as /devices/virtual/input/input301
[  898.052903][ T3574] Bluetooth: hci13: unexpected event for opcode 0x080c
[  898.235361][ T3574] Bluetooth: hci13: unexpected event for opcode 0x0005
[  898.305321][T15188] Bluetooth: hci13: Opcode 0x0c03 failed: -110
[  898.841746][T17003] loop2: detected capacity change from 0 to 32768
[  898.856556][T17003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3733 (17003)
[  898.883473][T17003] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  898.904798][T17003] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  898.914054][T17003] BTRFS info (device loop2): setting nodatacow, compression disabled
[  898.932131][T17003] BTRFS info (device loop2): setting datacow
[  898.940082][T17003] BTRFS info (device loop2): doing ref verification
[  898.956476][T17003] BTRFS info (device loop2): force clearing of disk cache
[  898.969394][T17003] BTRFS info (device loop2): turning off barriers
[  898.976922][T17003] BTRFS info (device loop2): enabling ssd optimizations
[  898.984254][T17003] BTRFS info (device loop2): using spread ssd allocation scheme
[  898.992792][T17003] BTRFS info (device loop2): not using ssd optimizations
[  899.000501][T17003] BTRFS info (device loop2): not using spread ssd allocation scheme
[  899.009164][T17003] BTRFS info (device loop2): using free space tree
[  899.081184][T17003] BTRFS info (device loop2): rebuilding free space tree
[  899.251304][   T26] audit: type=1800 audit(1721230903.460:147): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3733" name="bus" dev="loop2" ino=263 res=0 errno=0
[  899.326696][   T26] audit: type=1804 audit(1721230903.500:148): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  899.476499][   T26] audit: type=1804 audit(1721230903.680:149): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  899.545184][T11017] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  899.556787][T11017] asix: probe of 4-1:0.0 failed with error -71
[  899.569202][T11017] usb 4-1: USB disconnect, device number 39
[  899.577830][   T26] audit: type=1804 audit(1721230903.720:150): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  899.663719][T17047] fuse: Bad value for 'fd'
[  900.380077][T17003] BTRFS info (device loop2): balance: start 
[  900.389609][   T26] audit: type=1804 audit(1721230904.600:151): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  900.405728][T17003] BTRFS info (device loop2): balance: ended with status: 0
[  900.630581][T17063] input: syz1 as /devices/virtual/input/input302
[  901.140440][T15185] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  901.498148][T11015] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  901.839363][T17087] fuse: Bad value for 'fd'
[  901.846787][T17087] netlink: 'syz.2.3755': attribute type 1 has an invalid length.
[  901.915059][T11015] usb 1-1: Using ep0 maxpacket: 8
[  902.128089][T11015] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  902.198619][T11015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.437083][T11015] usb 1-1: config 0 descriptor??
[  902.835149][ T7867] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  902.865276][T15188] Bluetooth: hci11: command 0x0406 tx timeout
[  902.946073][T17108] input: syz1 as /devices/virtual/input/input303
[  902.967910][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c
[  903.094350][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005
[  903.215324][ T7867] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  903.231983][ T7867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.259397][ T7867] usb 4-1: config 0 descriptor??
[  903.296645][ T7867] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  904.652986][T17139] loop1: detected capacity change from 0 to 2048
[  904.911550][T17146] input: syz1 as /devices/virtual/input/input304
[  904.922418][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c
[  904.961323][T17139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  905.035119][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005
[  905.197482][   T26] audit: type=1800 audit(1721230909.410:152): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3777" name="file2" dev="loop1" ino=16 res=0 errno=0
[  905.295083][T11015] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[  905.350562][T11015] asix: probe of 1-1:0.0 failed with error -71
[  905.379890][T11015] usb 1-1: USB disconnect, device number 34
[  905.431437][T16537] EXT4-fs (loop1): unmounting filesystem.
[  905.674061][T17168] device syzkaller1 entered promiscuous mode
[  905.770969][   T26] audit: type=1326 audit(1721230909.980:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  905.857877][   T26] audit: type=1326 audit(1721230909.980:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  905.904143][ T7867] usb 4-1: USB disconnect, device number 40
[  905.946299][   T26] audit: type=1326 audit(1721230909.980:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.016899][   T26] audit: type=1326 audit(1721230909.990:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.085563][   T26] audit: type=1326 audit(1721230909.990:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.089076][T17181] input: syz1 as /devices/virtual/input/input306
[  906.136499][   T26] audit: type=1326 audit(1721230909.990:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.160744][   T26] audit: type=1326 audit(1721230909.990:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.183744][   T26] audit: type=1326 audit(1721230909.990:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.226619][   T26] audit: type=1326 audit(1721230910.000:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000
[  906.547372][   T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  906.559542][T17190] input: syz1 as /devices/virtual/input/input307
[  906.596000][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c
[  906.677155][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005
[  906.709855][ T3574] Bluetooth: hci7: Malformed HCI Event: 0x22
[  906.786793][T17201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3797'.
[  906.809199][   T14] usb 1-1: Using ep0 maxpacket: 8
[  906.850918][T17203] device syzkaller1 entered promiscuous mode
[  906.956943][   T14] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  906.984985][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.056208][   T14] usb 1-1: config 0 descriptor??
[  907.396421][T17220] input: syz1 as /devices/virtual/input/input309
[  907.401728][T17222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3804'.
[  907.424403][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c
[  907.556940][T17226] device syzkaller1 entered promiscuous mode
[  907.563306][ T3574] Bluetooth: hci6: unexpected event for opcode 0x2005
[  907.807221][    C0] hrtimer: interrupt took 15518859 ns
[  907.851944][T17233] input: syz1 as /devices/virtual/input/input310
[  907.873203][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c
[  907.989561][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005
[  908.506277][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0c1c
[  908.638138][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0c46
[  908.845070][ T3574] Bluetooth: hci6: Malformed HCI Event: 0x22
[  909.399671][T17238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3812'.
[  909.446211][    C0] vkms_vblank_simulate: vblank timer overrun
[  909.787289][    C0] vkms_vblank_simulate: vblank timer overrun
[  910.126358][    C0] vkms_vblank_simulate: vblank timer overrun
[  910.563035][    C0] vkms_vblank_simulate: vblank timer overrun
[  910.965073][    C0] vkms_vblank_simulate: vblank timer overrun
[  911.338201][    C0] vkms_vblank_simulate: vblank timer overrun
[  911.778082][    C0] vkms_vblank_simulate: vblank timer overrun
[  912.191876][    C0] vkms_vblank_simulate: vblank timer overrun
[  912.580399][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.049738][    C0] vkms_vblank_simulate: vblank timer overrun
[  913.475889][T17261] device syzkaller1 entered promiscuous mode
[  913.684820][    C0] vkms_vblank_simulate: vblank timer overrun
[  914.341153][    C0] vkms_vblank_simulate: vblank timer overrun
[  915.027583][   T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  915.027709][   T14] asix: probe of 1-1:0.0 failed with error -71
[  915.039600][   T14] usb 1-1: USB disconnect, device number 35
[  915.043154][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  915.043177][   T26] audit: type=1326 audit(1721230919.250:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  915.096583][T17264] input: syz1 as /devices/virtual/input/input312
[  915.100091][   T26] audit: type=1326 audit(1721230919.250:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  915.146736][T17260] input: syz1 as /devices/virtual/input/input313
[  917.629917][   T26] audit: type=1326 audit(1721230919.270:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.460118][   T26] audit: type=1326 audit(1721230919.280:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.460164][   T26] audit: type=1326 audit(1721230919.280:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.460200][   T26] audit: type=1326 audit(1721230919.310:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.460235][   T26] audit: type=1326 audit(1721230921.840:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.460271][   T26] audit: type=1326 audit(1721230921.840:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000
[  920.489661][T15188] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0
[  920.489783][T15188] Bluetooth: hci8: Injecting HCI hardware error event
[  920.491640][T15188] Bluetooth: hci8: command 0x0406 tx timeout
[  920.492463][ T3574] Bluetooth: hci8: hardware error 0x00
[  927.625024][ T3574] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  932.171784][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  932.178180][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  937.156921][ T3564] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  937.174388][T15188] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  937.183899][T15188] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  937.195783][ T3564] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  937.205761][ T3564] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  937.213158][ T3564] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  937.409696][ T3564] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  937.421588][ T3564] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  937.430582][   T48] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  937.438876][   T48] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  937.448917][ T3564] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  937.457376][ T3564] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  937.665401][T17282] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  937.731464][T17285] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  937.742667][T17285] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  937.752335][T17285] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  937.766117][T17285] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  937.774950][T17285] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  937.784470][T17285] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  937.795772][T17285] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  937.803152][T17285] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  937.812184][T17285] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  937.819951][T17285] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  937.829961][T17285] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  937.838258][T17285] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  937.845990][T17285] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  937.853221][T17285] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  937.862252][T17285] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  937.871724][T17285] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  937.879103][T17285] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  997.396732][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  997.403112][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  997.971841][T17282] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  997.984670][T17297] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  997.995916][T17297] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  998.007308][T17297] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  998.015752][T17297] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  998.023364][T17297] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  998.347794][T17300] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  998.359038][T17300] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  998.371024][T17300] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  998.381800][T17300] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  998.390361][T17300] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  998.398462][T17300] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  998.407064][T17300] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  998.446984][T17288] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  998.456283][T17288] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  998.464261][T17288] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  998.472486][T17288] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  998.479995][T17288] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  998.591017][T17282] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  998.603351][T17282] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  998.613704][T17282] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  998.622152][T17282] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  998.631828][T17282] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[  998.639445][T17282] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[ 1016.757334][T17309] Bluetooth: hci7: command 0x0406 tx timeout
[ 1016.875882][ T3564] Bluetooth: hci14: command tx timeout
[ 1016.885546][T15188] Bluetooth: hci12: command tx timeout
[ 1016.899005][ T3574] Bluetooth: hci13: command tx timeout
[ 1027.797271][T15188] Bluetooth: hci19: command tx timeout
[ 1027.803731][T15188] Bluetooth: hci20: command tx timeout
[ 1027.810575][T15188] Bluetooth: hci13: command tx timeout
[ 1027.827653][ T3564] Bluetooth: hci18: command tx timeout
[ 1027.834236][ T3564] Bluetooth: hci15: command tx timeout
[ 1027.884232][ T3574] Bluetooth: hci16: command tx timeout
[ 1027.891075][ T3574] Bluetooth: hci17: command tx timeout
[ 1027.899213][T17300] Bluetooth: hci12: command tx timeout
[ 1027.904760][T17300] Bluetooth: hci14: command tx timeout
[ 1039.911897][T15188] Bluetooth: hci13: command tx timeout
[ 1039.917847][T15188] Bluetooth: hci17: command tx timeout
[ 1039.923390][T15188] Bluetooth: hci15: command tx timeout
[ 1039.934986][ T3564] Bluetooth: hci14: command tx timeout
[ 1039.940654][ T3564] Bluetooth: hci12: command tx timeout
[ 1039.956519][ T3574] Bluetooth: hci16: command tx timeout
[ 1039.962054][ T3574] Bluetooth: hci18: command tx timeout
[ 1039.969880][T17300] Bluetooth: hci20: command tx timeout
[ 1039.976528][T17285] Bluetooth: hci19: command tx timeout
[ 1040.130033][ T3574] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1040.145283][ T3564] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1040.155362][ T3564] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1040.165217][ T3574] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1040.174578][ T3574] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1040.183174][ T3564] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1053.246933][ T3564] Bluetooth: hci20: command tx timeout
[ 1053.252491][ T3564] Bluetooth: hci19: command tx timeout
[ 1053.271554][ T3574] Bluetooth: hci16: command tx timeout
[ 1053.277188][ T3574] Bluetooth: hci14: command tx timeout
[ 1053.282697][ T3574] Bluetooth: hci17: command tx timeout
[ 1053.302189][T17300] Bluetooth: hci13: command tx timeout
[ 1053.307915][T17300] Bluetooth: hci15: command tx timeout
[ 1053.313632][T17300] Bluetooth: hci12: command tx timeout
[ 1053.320292][T17297] Bluetooth: hci18: command tx timeout
[ 1054.015882][T17300] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[ 1054.034657][T17300] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[ 1054.044316][T17300] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[ 1054.053037][ T3564] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[ 1054.060790][ T3564] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[ 1054.069516][T17300] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[ 1054.157236][T17297] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[ 1054.168810][   T48] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[ 1054.178457][T17297] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[ 1054.188502][   T48] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[ 1054.196746][T17297] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3
[ 1054.207388][T17297] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[ 1054.243404][   T48] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[ 1054.255329][T17297] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[ 1054.265283][T17297] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[ 1054.273491][T17297] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[ 1054.281574][   T48] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3
[ 1054.294719][T17297] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[ 1068.592190][T17297] Bluetooth: hci17: command tx timeout
[ 1068.598245][T17297] Bluetooth: hci19: command tx timeout
[ 1068.603741][T17297] Bluetooth: hci18: command tx timeout
[ 1068.616057][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1068.622419][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1068.628949][   T48] Bluetooth: hci15: command tx timeout
[ 1068.634499][   T48] Bluetooth: hci16: command tx timeout
[ 1068.659286][T17285] Bluetooth: hci20: command tx timeout
[ 1069.226365][   T48] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[ 1069.238518][   T48] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[ 1069.249407][T17282] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[ 1069.273424][T17282] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[ 1069.283048][T17282] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3
[ 1069.290967][T17285] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[ 1069.323591][T17285] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[ 1069.340334][T17282] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[ 1069.351597][T17285] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[ 1069.365944][T17282] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[ 1069.373628][T17282] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3
[ 1069.381506][T17285] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[ 1123.826843][   T27] INFO: task kworker/0:4:3605 blocked for more than 173 seconds.
[ 1123.834632][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1123.904975][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1123.913712][   T27] task:kworker/0:4     state:D stack:21496 pid:3605  ppid:2      flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1124.064861][   T27] Workqueue: ipv6_addrconf addrconf_verify_work
[ 1124.071216][   T27] Call Trace:
[ 1124.074521][   T27]  <TASK>
[ 1124.134845][   T27]  __schedule+0x142d/0x4550
[ 1124.139465][   T27]  ? __sched_text_start+0x8/0x8
[ 1124.144353][   T27]  ? print_irqtrace_events+0x210/0x210
[ 1124.204902][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1124.210165][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1124.264929][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[ 1124.270199][   T27]  schedule+0xbf/0x180
[ 1124.274291][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1124.334950][   T27]  __mutex_lock+0x6b9/0xd80
[ 1124.339549][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1124.344252][   T27]  ? addrconf_verify_work+0x15/0x30
[ 1124.434890][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1124.439896][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1124.485083][   T27]  ? print_irqtrace_events+0x210/0x210
[ 1124.490610][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1124.535037][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1124.558127][   T27]  ? process_one_work+0x7a9/0x11d0
[ 1124.594829][   T27]  addrconf_verify_work+0x15/0x30
[ 1124.599913][   T27]  process_one_work+0x8a9/0x11d0
[ 1124.644921][   T27]  ? worker_detach_from_pool+0x260/0x260
[ 1124.650620][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1124.704862][   T27]  ? kthread_data+0x4e/0xc0
[ 1124.709443][   T27]  ? wq_worker_running+0x97/0x190
[ 1124.714545][   T27]  worker_thread+0xa47/0x1200
[ 1124.786058][T17282] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[ 1124.797712][T17282] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[ 1124.816539][T17306] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[ 1124.824167][   T27]  ? _raw_spin_unlock+0x40/0x40
[ 1124.831374][T17306] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[ 1124.839402][T17306] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3
[ 1124.849122][T17282] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[ 1124.918575][   T27]  kthread+0x28d/0x320
[ 1124.922722][   T27]  ? worker_clr_flags+0x190/0x190
[ 1124.929668][T17306] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[ 1124.941192][T17306] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[ 1124.951713][T17288] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[ 1124.959953][T17288] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[ 1124.969085][T17306] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3
[ 1124.976551][T17306] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[ 1125.024671][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1125.039231][   T27]  ret_from_fork+0x1f/0x30
[ 1125.043730][   T27]  </TASK>
[ 1125.074637][   T27] INFO: task kworker/0:11:10925 blocked for more than 152 seconds.
[ 1125.084907][T17288] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[ 1125.096502][T17309] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[ 1125.105596][T17309] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[ 1125.113701][T17309] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[ 1125.121973][T17288] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3
[ 1125.129644][T17288] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[ 1125.172513][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1125.185501][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1125.194208][   T27] task:kworker/0:11    state:D stack:24280 pid:10925 ppid:2      flags:0x00004000
[ 1125.224908][   T27] Workqueue: events_power_efficient reg_check_chans_work
[ 1125.232008][   T27] Call Trace:
[ 1125.244884][   T27]  <TASK>
[ 1125.247866][   T27]  __schedule+0x142d/0x4550
[ 1125.264854][   T27]  ? __sched_text_start+0x8/0x8
[ 1125.269773][   T27]  ? print_irqtrace_events+0x210/0x210
[ 1125.284844][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1125.290094][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1125.304827][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[ 1125.310081][   T27]  schedule+0xbf/0x180
[ 1125.314213][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1125.334207][   T27]  __mutex_lock+0x6b9/0xd80
[ 1125.343583][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1125.356468][   T27]  ? reg_check_chans_work+0x8d/0xdb0
[ 1125.361815][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1125.377308][   T27]  ? process_one_work+0x7a9/0x11d0
[ 1125.394924][   T27]  reg_check_chans_work+0x8d/0xdb0
[ 1125.400111][   T27]  ? read_lock_is_recursive+0x10/0x10
[ 1125.414879][   T27]  ? reg_process_ht_flags+0xba0/0xba0
[ 1125.420398][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1125.434907][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1125.440180][   T27]  ? process_one_work+0x7a9/0x11d0
[ 1125.458759][   T27]  process_one_work+0x8a9/0x11d0
[ 1125.463787][   T27]  ? worker_detach_from_pool+0x260/0x260
[ 1125.484944][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1125.490550][   T27]  ? kthread_data+0x4e/0xc0
[ 1125.504815][   T27]  ? wq_worker_running+0x97/0x190
[ 1125.509995][   T27]  worker_thread+0xa47/0x1200
[ 1125.514726][   T27]  kthread+0x28d/0x320
[ 1125.533715][   T27]  ? worker_clr_flags+0x190/0x190
[ 1125.539267][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1125.543888][   T27]  ret_from_fork+0x1f/0x30
[ 1125.561260][   T27]  </TASK>
[ 1125.564339][   T27] INFO: task syz-executor:17274 blocked for more than 175 seconds.
[ 1125.582078][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1125.594967][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1125.603669][   T27] task:syz-executor    state:D stack:24760 pid:17274 ppid:1      flags:0x00004004
[ 1125.629245][   T27] Call Trace:
[ 1125.632580][   T27]  <TASK>
[ 1125.645111][   T27]  __schedule+0x142d/0x4550
[ 1125.649705][   T27]  ? __mutex_lock+0x6b4/0xd80
[ 1125.654408][   T27]  ? __sched_text_start+0x8/0x8
[ 1125.674902][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1125.680432][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1125.700584][   T27]  schedule+0xbf/0x180
[ 1125.704707][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1125.724906][   T27]  __mutex_lock+0x6b9/0xd80
[ 1125.729464][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1125.734212][   T27]  ? register_nexthop_notifier+0x80/0x270
[ 1125.754951][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1125.759962][   T27]  ? memset+0x1f/0x40
[ 1125.763976][   T27]  register_nexthop_notifier+0x80/0x270
[ 1125.784947][   T27]  ? lockdep_softirqs_off+0x420/0x420
[ 1125.795572][   T27]  ? fib_check_nexthop+0x570/0x570
[ 1125.800740][   T27]  ? memset+0x1f/0x40
[ 1125.814812][   T27]  ops_init+0x35d/0x610
[ 1125.819029][   T27]  setup_net+0x4b5/0xb90
[ 1125.823307][   T27]  ? copy_net_ns+0x5d0/0x5d0
[ 1125.842632][   T27]  copy_net_ns+0x392/0x5d0
[ 1125.854147][   T27]  create_new_namespaces+0x425/0x7a0
[ 1125.865048][   T27]  ? bpf_lsm_capable+0x5/0x10
[ 1125.875184][   T27]  unshare_nsproxy_namespaces+0x11e/0x170
[ 1125.880954][   T27]  ksys_unshare+0x580/0xb20
[ 1125.900908][   T27]  ? unshare_fd+0x240/0x240
[ 1125.906480][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[ 1125.912551][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[ 1125.932598][   T27]  __x64_sys_unshare+0x34/0x40
[ 1125.943481][   T27]  do_syscall_64+0x3b/0xb0
[ 1125.948489][   T27]  ? clear_bhb_loop+0x45/0xa0
[ 1125.953217][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1125.974899][   T27] RIP: 0033:0x7fc134577177
[ 1125.979450][   T27] RSP: 002b:00007ffe83fb7328 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[ 1126.003436][   T27] RAX: ffffffffffffffda RBX: 00007fc134703f20 RCX: 00007fc134577177
[ 1126.016840][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[ 1126.034923][   T27] RBP: 00007fc134704a18 R08: 0000000000000000 R09: 0000000000000000
[ 1126.042938][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c
[ 1126.067291][   T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009
[ 1126.084895][   T27]  </TASK>
[ 1126.087955][   T27] INFO: task syz-executor:17278 blocked for more than 176 seconds.
[ 1126.110704][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1126.124313][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1126.144908][   T27] task:syz-executor    state:D stack:25000 pid:17278 ppid:1      flags:0x00004004
[ 1126.154155][   T27] Call Trace:
[ 1126.164838][   T27]  <TASK>
[ 1126.167807][   T27]  __schedule+0x142d/0x4550
[ 1126.172377][   T27]  ? __mutex_lock+0x6b4/0xd80
[ 1126.193077][   T27]  ? __sched_text_start+0x8/0x8
[ 1126.204605][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1126.214921][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1126.220170][   T27]  schedule+0xbf/0x180
[ 1126.224276][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1126.254982][   T27]  __mutex_lock+0x6b9/0xd80
[ 1126.259544][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1126.264330][   T27]  ? rtnetlink_rcv_msg+0x7c1/0xff0
[ 1126.284964][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1126.289962][   T27]  ? rtnetlink_rcv_msg+0x1f9/0xff0
[ 1126.299675][   T27]  rtnetlink_rcv_msg+0x7c1/0xff0
[ 1126.304662][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1126.324932][   T27]  ? stack_trace_save+0x1c0/0x1c0
[ 1126.330011][   T27]  ? kernel_text_address+0x9f/0xd0
[ 1126.344893][   T27]  ? __kernel_text_address+0x9/0x40
[ 1126.350143][   T27]  ? unwind_get_return_address+0x49/0x80
[ 1126.364879][   T27]  ? arch_stack_walk+0xf3/0x140
[ 1126.369779][   T27]  ? mark_lock+0x9a/0x340
[ 1126.374167][   T27]  ? mark_lock+0x9a/0x340
[ 1126.394006][   T27]  ? __lock_acquire+0x125b/0x1f80
[ 1126.414914][   T27]  netlink_rcv_skb+0x1cd/0x410
[ 1126.419742][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1126.424449][   T27]  ? netlink_ack+0x1290/0x1290
[ 1126.443241][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1126.448943][   T27]  netlink_unicast+0x7d8/0x970
[ 1126.453759][   T27]  ? netlink_detachskb+0x90/0x90
[ 1126.473706][   T27]  ? __virt_addr_valid+0x44a/0x520
[ 1126.479300][   T27]  ? __phys_addr_symbol+0x2b/0x70
[ 1126.494820][   T27]  ? __check_object_size+0x4dd/0xa30
[ 1126.500150][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1126.514813][   T27]  netlink_sendmsg+0xa26/0xd60
[ 1126.519637][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1126.534834][   T27]  ? __might_fault+0xa1/0x110
[ 1126.539560][   T27]  ? aa_sock_msg_perm+0x91/0x150
[ 1126.544524][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1126.564732][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[ 1126.573944][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1126.585281][   T27]  __sys_sendto+0x480/0x600
[ 1126.589843][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[ 1126.604920][   T27]  __x64_sys_sendto+0xda/0xf0
[ 1126.624378][   T27]  do_syscall_64+0x3b/0xb0
[ 1126.629305][   T27]  ? clear_bhb_loop+0x45/0xa0
[ 1126.634026][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1126.654682][   T27] RIP: 0033:0x7fbe92f777ac
[ 1126.659470][   T27] RSP: 002b:00007ffc077bc080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1126.674844][   T27] RAX: ffffffffffffffda RBX: 00007fbe93c34620 RCX: 00007fbe92f777ac
[ 1126.682931][   T27] RDX: 0000000000000028 RSI: 00007fbe93c34670 RDI: 0000000000000003
[ 1126.709475][   T27] RBP: 0000000000000000 R08: 00007ffc077bc0d4 R09: 000000000000000c
[ 1126.725040][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1126.733048][   T27] R13: 0000000000000000 R14: 00007fbe93c34670 R15: 0000000000000000
[ 1126.759469][   T27]  </TASK>
[ 1126.762544][   T27] INFO: task syz-executor:17279 blocked for more than 176 seconds.
[ 1126.785117][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1126.792406][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1126.810918][   T27] task:syz-executor    state:D stack:25000 pid:17279 ppid:1      flags:0x00004004
[ 1126.834961][   T27] Call Trace:
[ 1126.838279][   T27]  <TASK>
[ 1126.841227][   T27]  __schedule+0x142d/0x4550
[ 1126.854890][   T27]  ? __mutex_lock+0x6b4/0xd80
[ 1126.859614][   T27]  ? __sched_text_start+0x8/0x8
[ 1126.864497][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1126.885003][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1126.890260][   T27]  schedule+0xbf/0x180
[ 1126.910218][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1126.924946][   T27]  __mutex_lock+0x6b9/0xd80
[ 1126.929510][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1126.934211][   T27]  ? rtnetlink_rcv_msg+0x7c1/0xff0
[ 1126.954327][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1126.959837][   T27]  ? rtnetlink_rcv_msg+0x1f9/0xff0
[ 1126.974960][   T27]  rtnetlink_rcv_msg+0x7c1/0xff0
[ 1126.980166][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1126.995133][   T27]  ? stack_trace_save+0x1c0/0x1c0
[ 1127.000218][   T27]  ? kernel_text_address+0x9f/0xd0
[ 1127.014930][   T27]  ? __kernel_text_address+0x9/0x40
[ 1127.034659][   T27]  ? unwind_get_return_address+0x49/0x80
[ 1127.040949][   T27]  ? arch_stack_walk+0xf3/0x140
[ 1127.054865][   T27]  ? mark_lock+0x9a/0x340
[ 1127.059262][   T27]  ? mark_lock+0x9a/0x340
[ 1127.063629][   T27]  ? __lock_acquire+0x125b/0x1f80
[ 1127.082782][   T27]  netlink_rcv_skb+0x1cd/0x410
[ 1127.088048][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1127.092761][   T27]  ? netlink_ack+0x1290/0x1290
[ 1127.114988][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1127.125230][   T27]  netlink_unicast+0x7d8/0x970
[ 1127.130055][   T27]  ? netlink_detachskb+0x90/0x90
[ 1127.144816][   T27]  ? __virt_addr_valid+0x44a/0x520
[ 1127.149972][   T27]  ? __phys_addr_symbol+0x2b/0x70
[ 1127.164820][   T27]  ? __check_object_size+0x4dd/0xa30
[ 1127.170150][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1127.190219][   T27]  netlink_sendmsg+0xa26/0xd60
[ 1127.195634][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1127.201746][   T27]  ? __might_fault+0xa1/0x110
[ 1127.220534][   T27]  ? aa_sock_msg_perm+0x91/0x150
[ 1127.235012][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1127.240352][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[ 1127.254856][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1127.260183][   T27]  __sys_sendto+0x480/0x600
[ 1127.264725][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[ 1127.280302][   T27]  __x64_sys_sendto+0xda/0xf0
[ 1127.294896][   T27]  do_syscall_64+0x3b/0xb0
[ 1127.299376][   T27]  ? clear_bhb_loop+0x45/0xa0
[ 1127.320704][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1127.334995][   T27] RIP: 0033:0x7f4bf8b777ac
[ 1127.339466][   T27] RSP: 002b:00007ffc674652a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1127.364940][   T27] RAX: ffffffffffffffda RBX: 00007f4bf9834620 RCX: 00007f4bf8b777ac
[ 1127.372966][   T27] RDX: 0000000000000028 RSI: 00007f4bf9834670 RDI: 0000000000000003
[ 1127.394959][   T27] RBP: 0000000000000000 R08: 00007ffc674652f4 R09: 000000000000000c
[ 1127.414886][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1127.422901][   T27] R13: 0000000000000000 R14: 00007f4bf9834670 R15: 0000000000000000
[ 1127.444921][   T27]  </TASK>
[ 1127.447994][   T27] INFO: task syz-executor:17280 blocked for more than 177 seconds.
[ 1127.470135][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1127.484918][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1127.493701][   T27] task:syz-executor    state:D stack:25000 pid:17280 ppid:1      flags:0x00004004
[ 1127.519948][   T27] Call Trace:
[ 1127.523360][   T27]  <TASK>
[ 1127.534977][   T27]  __schedule+0x142d/0x4550
[ 1127.539569][   T27]  ? __mutex_lock+0x6b4/0xd80
[ 1127.544273][   T27]  ? __sched_text_start+0x8/0x8
[ 1127.563918][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1127.574148][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1127.584906][   T27]  schedule+0xbf/0x180
[ 1127.589028][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1127.594419][   T27]  __mutex_lock+0x6b9/0xd80
[ 1127.614979][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1127.619712][   T27]  ? rtnetlink_rcv_msg+0x7c1/0xff0
[ 1127.634910][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1127.639913][   T27]  ? rtnetlink_rcv_msg+0x1f9/0xff0
[ 1127.659680][   T27]  rtnetlink_rcv_msg+0x7c1/0xff0
[ 1127.664680][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1127.684523][   T27]  ? stack_trace_save+0x1c0/0x1c0
[ 1127.690006][   T27]  ? kernel_text_address+0x9f/0xd0
[ 1127.704828][   T27]  ? __kernel_text_address+0x9/0x40
[ 1127.711885][   T27]  ? unwind_get_return_address+0x49/0x80
[ 1127.724829][   T27]  ? arch_stack_walk+0xf3/0x140
[ 1127.729730][   T27]  ? mark_lock+0x9a/0x340
[ 1127.744848][   T27]  ? mark_lock+0x9a/0x340
[ 1127.749266][   T27]  ? __lock_acquire+0x125b/0x1f80
[ 1127.754357][   T27]  netlink_rcv_skb+0x1cd/0x410
[ 1127.774040][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1127.783864][   T27]  ? netlink_ack+0x1290/0x1290
[ 1127.794946][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1127.800219][   T27]  netlink_unicast+0x7d8/0x970
[ 1127.814883][   T27]  ? netlink_detachskb+0x90/0x90
[ 1127.819930][   T27]  ? __virt_addr_valid+0x44a/0x520
[ 1127.841214][   T27]  ? __phys_addr_symbol+0x2b/0x70
[ 1127.854948][   T27]  ? __check_object_size+0x4dd/0xa30
[ 1127.860304][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1127.874910][   T27]  netlink_sendmsg+0xa26/0xd60
[ 1127.879741][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1127.894868][   T27]  ? __might_fault+0xa1/0x110
[ 1127.899602][   T27]  ? aa_sock_msg_perm+0x91/0x150
[ 1127.904577][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1127.924941][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[ 1127.930474][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1127.950204][   T27]  __sys_sendto+0x480/0x600
[ 1127.964070][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[ 1127.970051][   T27]  __x64_sys_sendto+0xda/0xf0
[ 1127.984901][   T27]  do_syscall_64+0x3b/0xb0
[ 1127.989456][   T27]  ? clear_bhb_loop+0x45/0xa0
[ 1127.994164][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1128.014234][   T27] RIP: 0033:0x7f774dd777ac
[ 1128.024964][   T27] RSP: 002b:00007ffd8a62d760 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1128.033430][   T27] RAX: ffffffffffffffda RBX: 00007f774ea34620 RCX: 00007f774dd777ac
[ 1128.059160][   T27] RDX: 0000000000000028 RSI: 00007f774ea34670 RDI: 0000000000000003
[ 1128.074942][   T27] RBP: 0000000000000000 R08: 00007ffd8a62d7b4 R09: 000000000000000c
[ 1128.082951][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1128.108762][   T27] R13: 0000000000000000 R14: 00007f774ea34670 R15: 0000000000000000
[ 1128.124914][   T27]  </TASK>
[ 1128.127986][   T27] INFO: task syz-executor:17286 blocked for more than 178 seconds.
[ 1128.153904][   T27]       Not tainted 6.1.99-syzkaller #0
[ 1128.186798][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1128.196168][   T27] task:syz-executor    state:D stack:25000 pid:17286 ppid:1      flags:0x00004004
[ 1128.214881][   T27] Call Trace:
[ 1128.218194][   T27]  <TASK>
[ 1128.221144][   T27]  __schedule+0x142d/0x4550
[ 1128.241280][   T27]  ? __mutex_lock+0x6b4/0xd80
[ 1128.255006][   T27]  ? __sched_text_start+0x8/0x8
[ 1128.259916][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[ 1128.274910][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1128.280155][   T27]  schedule+0xbf/0x180
[ 1128.284245][   T27]  schedule_preempt_disabled+0xf/0x20
[ 1128.303816][   T27]  __mutex_lock+0x6b9/0xd80
[ 1128.315045][   T27]  ? __mutex_lock+0x53c/0xd80
[ 1128.319773][   T27]  ? rtnetlink_rcv_msg+0x7c1/0xff0
[ 1128.345062][   T27]  ? mutex_lock_nested+0x10/0x10
[ 1128.350903][   T27]  ? rtnetlink_rcv_msg+0x1f9/0xff0
[ 1128.364843][   T27]  rtnetlink_rcv_msg+0x7c1/0xff0
[ 1128.369835][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1128.374536][   T27]  ? stack_trace_save+0x1c0/0x1c0
[ 1128.394955][   T27]  ? kernel_text_address+0x9f/0xd0
[ 1128.400128][   T27]  ? __kernel_text_address+0x9/0x40
[ 1128.414953][   T27]  ? unwind_get_return_address+0x49/0x80
[ 1128.420646][   T27]  ? arch_stack_walk+0xf3/0x140
[ 1128.434947][   T27]  ? mark_lock+0x9a/0x340
[ 1128.439350][   T27]  ? mark_lock+0x9a/0x340
[ 1128.443727][   T27]  ? __lock_acquire+0x125b/0x1f80
[ 1128.464696][   T27]  netlink_rcv_skb+0x1cd/0x410
[ 1128.470590][   T27]  ? rtnetlink_bind+0x80/0x80
[ 1128.484842][   T27]  ? netlink_ack+0x1290/0x1290
[ 1128.489675][   T27]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1128.504824][   T27]  netlink_unicast+0x7d8/0x970
[ 1128.509657][   T27]  ? netlink_detachskb+0x90/0x90
[ 1128.514625][   T27]  ? __virt_addr_valid+0x44a/0x520
[ 1128.534952][   T27]  ? __phys_addr_symbol+0x2b/0x70
[ 1128.540034][   T27]  ? __check_object_size+0x4dd/0xa30
[ 1128.560711][   T27]  ? bpf_lsm_netlink_send+0x5/0x10
[ 1128.566372][   T27]  netlink_sendmsg+0xa26/0xd60
[ 1128.571179][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1128.591141][   T27]  ? __might_fault+0xa1/0x110
[ 1128.603958][   T27]  ? aa_sock_msg_perm+0x91/0x150
[ 1128.609361][   T27]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1128.624834][   T27]  ? security_socket_sendmsg+0x7d/0xa0
[ 1128.630344][   T27]  ? netlink_getsockopt+0x580/0x580
[ 1128.644809][   T27]  __sys_sendto+0x480/0x600
[ 1128.649382][   T27]  ? __ia32_sys_getpeername+0x80/0x80
[ 1128.670296][   T27]  __x64_sys_sendto+0xda/0xf0
[ 1128.684350][   T27]  do_syscall_64+0x3b/0xb0
[ 1128.689309][   T27]  ? clear_bhb_loop+0x45/0xa0
[ 1128.694033][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1128.714934][   T27] RIP: 0033:0x7fac2d1777ac
[ 1128.719394][   T27] RSP: 002b:00007ffdf1d01fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1128.743387][   T27] RAX: ffffffffffffffda RBX: 00007fac2de34620 RCX: 00007fac2d1777ac
[ 1128.754982][   T27] RDX: 0000000000000028 RSI: 00007fac2de34670 RDI: 0000000000000003
[ 1128.774900][   T27] RBP: 0000000000000000 R08: 00007ffdf1d02034 R09: 000000000000000c
[ 1128.782938][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1128.804877][   T27] R13: 0000000000000000 R14: 00007fac2de34670 R15: 0000000000000000
[ 1128.813004][   T27]  </TASK>
[ 1128.830350][   T27] 
[ 1128.830350][   T27] Showing all locks held in the system:
[ 1128.854606][   T27] 1 lock held by rcu_tasks_kthre/12:
[ 1128.860840][   T27]  #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1128.884864][   T27] 1 lock held by rcu_tasks_trace/13:
[ 1128.890196][   T27]  #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[ 1128.914908][   T27] 1 lock held by khungtaskd/27:
[ 1128.919797][   T27]  #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1128.955047][   T27] 4 locks held by kworker/u5:0/48:
[ 1128.960208][   T27]  #0: ffff8880793c5938 ((wq_completion)hci26#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1128.984914][   T27]  #1: ffffc90000b97d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.004834][   T27]  #2: ffff88801fa14078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1129.024863][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1129.055029][   T27] 2 locks held by getty/3311:
[ 1129.059783][   T27]  #0: ffff888028cbf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1129.084639][   T27]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[ 1129.104854][   T27] 5 locks held by kworker/0:3/3561:
[ 1129.110191][   T27] 4 locks held by kworker/u5:3/3564:
[ 1129.124829][   T27]  #0: ffff8880237f6138 ((wq_completion)hci23#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.151637][   T27]  #1: ffffc9000410fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.175005][   T27]  #2: ffff888057d54078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1129.194901][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1129.214877][   T27] 4 locks held by kworker/u5:8/3574:
[ 1129.220205][   T27]  #0: ffff8880298bd138 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.247539][   T27]  #1: ffffc900041bfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.284875][   T27]  #2: ffff88805d6c8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1129.304826][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1129.324833][   T27] 3 locks held by kworker/1:4/3602:
[ 1129.330062][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.364990][   T27]  #1: ffffc9000431fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.384829][   T27]  #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[ 1129.393870][   T27] 2 locks held by kworker/1:5/3603:
[ 1129.414051][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.434973][   T27]  #1: ffffc9000432fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.444723][   T27] 3 locks held by kworker/0:4/3605:
[ 1129.464851][   T27]  #0: ffff88814b335138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.492169][   T27]  #1: ffffc9000464fd20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.514955][   T27]  #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30
[ 1129.524513][   T27] 3 locks held by kworker/1:8/3626:
[ 1129.544822][   T27] 3 locks held by kworker/u4:11/5149:
[ 1129.550228][   T27] 5 locks held by kworker/u4:23/7935:
[ 1129.572163][   T27] 3 locks held by kworker/0:11/10925:
[ 1129.585024][   T27]  #0: ffff888012471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.611188][   T27]  #1: ffffc90004977d20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.634978][   T27]  #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x8d/0xdb0
[ 1129.644649][   T27] 3 locks held by kworker/1:14/11015:
[ 1129.664909][   T27]  #0: ffff88814b335138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.684816][   T27]  #1: ffffc90004a57d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.712111][   T27]  #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30
[ 1129.734940][   T27] 3 locks held by kworker/1:15/11017:
[ 1129.740358][   T27]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.764965][   T27]  #1: ffffc90005057d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.791026][   T27]  #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[ 1129.814869][   T27] 3 locks held by syz-executor/15185:
[ 1129.820281][   T27]  #0: ffff8880776d10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0
[ 1129.844925][   T27]  #1: ffff8880776d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[ 1129.854671][   T27]  #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[ 1129.882878][   T27] 4 locks held by kworker/u5:1/15188:
[ 1129.894938][   T27]  #0: ffff88804109b138 ((wq_completion)hci8#4){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.921501][   T27]  #1: ffffc9000345fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1129.945160][   T27]  #2: ffff888042c44078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1129.964360][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1129.984835][   T27] 1 lock held by syz-executor/15425:
[ 1130.004947][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0
[ 1130.014002][   T27] 2 locks held by syz-executor/16173:
[ 1130.033728][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0
[ 1130.054880][   T27]  #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[ 1130.074868][   T27] 3 locks held by syz.1.3820/17258:
[ 1130.080102][   T27]  #0: ffff88803155d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0
[ 1130.108493][   T27]  #1: ffff88803155c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[ 1130.133105][   T27]  #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[ 1130.154846][   T27] 3 locks held by syz-executor/17271:
[ 1130.160341][   T27]  #0: ffff88805b0710b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0
[ 1130.184898][   T27]  #1: ffff88805b070078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020
[ 1130.204863][   T27]  #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0
[ 1130.225657][   T27] 2 locks held by syz-executor/17274:
[ 1130.231066][   T27]  #0: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0
[ 1130.254891][   T27]  #1: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270
[ 1130.281141][   T27] 1 lock held by syz-executor/17278:
[ 1130.286992][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.312173][   T27] 1 lock held by syz-executor/17279:
[ 1130.324524][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.344861][   T27] 1 lock held by syz-executor/17280:
[ 1130.350183][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.373944][   T27] 4 locks held by kworker/u5:2/17282:
[ 1130.385172][   T27]  #0: ffff88801ecfa938 ((wq_completion)hci27#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.404868][   T27]  #1: ffffc9000a8cfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.433228][   T27]  #2: ffff888023834078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1130.454908][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1130.476259][   T27] 4 locks held by kworker/u5:4/17285:
[ 1130.481754][   T27]  #0: ffff88802356a138 ((wq_completion)hci25#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.513141][   T27]  #1: ffffc9000a91fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.534986][   T27]  #2: ffff888040cfc078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1130.554885][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1130.574877][   T27] 1 lock held by syz-executor/17286:
[ 1130.594901][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.614876][   T27] 1 lock held by syz-executor/17295:
[ 1130.620198][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.644547][   T27] 4 locks held by kworker/u5:6/17297:
[ 1130.654713][   T27]  #0: ffff888076b18938 ((wq_completion)hci24#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.674855][   T27]  #1: ffffc9000302fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.702086][   T27]  #2: ffff8880773e8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1130.724866][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1130.744831][   T27] 1 lock held by syz-executor/17299:
[ 1130.750148][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.773987][   T27] 4 locks held by kworker/u5:7/17300:
[ 1130.794907][   T27]  #0: ffff88802c7bc138 ((wq_completion)hci22#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.814860][   T27]  #1: ffffc9000315fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.834883][   T27]  #2: ffff8880793a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1130.854864][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1130.879775][   T27] 1 lock held by syz-executor/17302:
[ 1130.894954][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.904442][   T27] 1 lock held by syz-executor/17305:
[ 1130.924941][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1130.934441][   T27] 4 locks held by kworker/u5:10/17306:
[ 1130.954254][   T27]  #0: ffff88802d489938 ((wq_completion)hci28#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1130.975007][   T27]  #1: ffffc900033dfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 1131.002368][   T27]  #2: ffff888023830078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0
[ 1131.024956][   T27]  #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0
[ 1131.044843][   T27] 1 lock held by dhcpcd/17311:
[ 1131.049742][   T27]  #0: ffff88805cdf6810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[ 1131.074092][   T27] 1 lock held by dhcpcd/17313:
[ 1131.083682][   T27]  #0: ffff88805cdf2610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[ 1131.105006][   T27] 1 lock held by dhcpcd/17314:
[ 1131.109817][   T27]  #0: ffff88805cdf4a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[ 1131.134949][   T27] 1 lock held by syz-executor/17318:
[ 1131.140282][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.164001][   T27] 1 lock held by syz-executor/17325:
[ 1131.174219][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.187256][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[ 1131.193591][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[ 1131.214125][   T27] 1 lock held by syz-executor/17328:
[ 1131.220661][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.244931][   T27] 1 lock held by syz-executor/17329:
[ 1131.250273][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.274999][   T27] 1 lock held by syz-executor/17335:
[ 1131.280370][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.310227][   T27] 1 lock held by syz-executor/17337:
[ 1131.324945][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.334444][   T27] 1 lock held by syz-executor/17345:
[ 1131.354523][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.374833][   T27] 1 lock held by syz-executor/17348:
[ 1131.380163][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.404976][   T27] 1 lock held by syz-executor/17351:
[ 1131.410837][   T27]  #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[ 1131.445088][   T27] 
[ 1131.447470][   T27] =============================================
[ 1131.447470][   T27] 
[ 1131.464948][   T27] NMI backtrace for cpu 1
[ 1131.469342][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.99-syzkaller #0
[ 1131.477356][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1131.487468][   T27] Call Trace:
[ 1131.490769][   T27]  <TASK>
[ 1131.493725][   T27]  dump_stack_lvl+0x1e3/0x2cb
[ 1131.498445][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1131.503933][   T27]  ? panic+0x764/0x764
[ 1131.508377][   T27]  ? vprintk_emit+0x622/0x740
[ 1131.513094][   T27]  ? printk_sprint+0x490/0x490
[ 1131.518930][   T27]  ? nmi_cpu_backtrace+0x252/0x560
[ 1131.524079][   T27]  nmi_cpu_backtrace+0x4e1/0x560
[ 1131.529053][   T27]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[ 1131.535233][   T27]  ? _printk+0xd1/0x111
[ 1131.539500][   T27]  ? panic+0x764/0x764
[ 1131.543678][   T27]  ? __wake_up_klogd+0xcc/0x100
[ 1131.548546][   T27]  ? panic+0x764/0x764
[ 1131.552634][   T27]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[ 1131.558734][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1131.564831][   T27]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[ 1131.570846][   T27]  watchdog+0xf88/0xfd0
[ 1131.575041][   T27]  ? watchdog+0x1f8/0xfd0
[ 1131.579405][   T27]  kthread+0x28d/0x320
[ 1131.583488][   T27]  ? hungtask_pm_notify+0x50/0x50
[ 1131.588537][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1131.593159][   T27]  ret_from_fork+0x1f/0x30
[ 1131.597619][   T27]  </TASK>
[ 1131.602687][   T27] Sending NMI from CPU 1 to CPUs 0:
[ 1131.608251][    C0] NMI backtrace for cpu 0
[ 1131.608263][    C0] CPU: 0 PID: 3561 Comm: kworker/0:3 Not tainted 6.1.99-syzkaller #0
[ 1131.608282][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1131.608294][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[ 1131.608320][    C0] RIP: 0010:__lock_acquire+0xf4e/0x1f80
[ 1131.608352][    C0] Code: 8b 6c 24 48 0f 85 1a 03 00 00 48 83 7c 24 40 00 0f 84 63 02 00 00 48 8b 44 24 20 48 8d 58 f8 48 89 d8 48 c1 e8 03 0f b6 04 38 <84> c0 0f 85 d9 0d 00 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8
[ 1131.608369][    C0] RSP: 0018:ffffc90000007a60 EFLAGS: 00000802
[ 1131.608384][    C0] RAX: 0000000000000000 RBX: ffff88802734c6f8 RCX: 000000000368637d
[ 1131.608397][    C0] RDX: 00000000726de75e RSI: 000000006f5a8b04 RDI: dffffc0000000000
[ 1131.608410][    C0] RBP: bcc239ac175c4142 R08: dffffc0000000000 R09: fffffbfff209387b
[ 1131.608423][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802734c658
[ 1131.608437][    C0] R13: ffff88802734bb80 R14: 0000000000000001 R15: 1ffff11004e698e4
[ 1131.608450][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 1131.608466][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1131.608479][    C0] CR2: 00007f8cc0704000 CR3: 000000000ce8e000 CR4: 00000000003506f0
[ 1131.608495][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1131.608506][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1131.608518][    C0] Call Trace:
[ 1131.608523][    C0]  <NMI>
[ 1131.608530][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[ 1131.608558][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1131.608586][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[ 1131.608622][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[ 1131.608650][    C0]  ? nmi_handle+0x12e/0x440
[ 1131.608676][    C0]  ? nmi_handle+0x25/0x440
[ 1131.608702][    C0]  ? __lock_acquire+0xf4e/0x1f80
[ 1131.608727][    C0]  ? default_do_nmi+0x62/0x150
[ 1131.608745][    C0]  ? exc_nmi+0xa8/0x100
[ 1131.608762][    C0]  ? end_repeat_nmi+0x16/0x31
[ 1131.608793][    C0]  ? __lock_acquire+0xf4e/0x1f80
[ 1131.608818][    C0]  ? __lock_acquire+0xf4e/0x1f80
[ 1131.608844][    C0]  ? __lock_acquire+0xf4e/0x1f80
[ 1131.608869][    C0]  </NMI>
[ 1131.608874][    C0]  <IRQ>
[ 1131.608887][    C0]  lock_acquire+0x1f8/0x5a0
[ 1131.608911][    C0]  ? advance_sched+0x47/0x970
[ 1131.608938][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1131.608963][    C0]  ? debug_deactivate+0x1d/0x280
[ 1131.608985][    C0]  ? __hrtimer_run_queues+0x4b0/0xe50
[ 1131.609006][    C0]  ? __lock_acquire+0x1f80/0x1f80
[ 1131.609031][    C0]  ? __lock_acquire+0x1f80/0x1f80
[ 1131.609059][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1131.609079][    C0]  _raw_spin_lock+0x2a/0x40
[ 1131.609100][    C0]  ? advance_sched+0x47/0x970
[ 1131.609128][    C0]  advance_sched+0x47/0x970
[ 1131.609151][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1131.609172][    C0]  ? debug_object_deactivate+0x63/0x380
[ 1131.609201][    C0]  ? taprio_free_sched_cb+0x1a0/0x1a0
[ 1131.609224][    C0]  ? taprio_free_sched_cb+0x1a0/0x1a0
[ 1131.609249][    C0]  __hrtimer_run_queues+0x5e5/0xe50
[ 1131.609278][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 1131.609303][    C0]  hrtimer_interrupt+0x392/0x980
[ 1131.609335][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[ 1131.609360][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[ 1131.609381][    C0]  </IRQ>
[ 1131.609387][    C0]  <TASK>
[ 1131.609393][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1131.609419][    C0] RIP: 0010:poly1305_blocks_x86_64+0xd/0x100
[ 1131.609442][    C0] Code: ff ff 0f 48 23 06 48 23 4e 08 48 89 47 18 48 89 4f 20 b8 01 00 00 00 c3 0f 1f 44 00 00 48 c1 ea 04 0f 84 e8 00 00 00 53 41 54 <41> 55 41 56 41 57 57 49 89 d7 4c 8b 5f 18 4c 8b 6f 20 4c 8b 37 48
[ 1131.609457][    C0] RSP: 0018:ffffc900040df118 EFLAGS: 00000202
[ 1131.609471][    C0] RAX: ffffffff814d761d RBX: 0000000000000020 RCX: 0000000000000001
[ 1131.609483][    C0] RDX: 0000000000000002 RSI: ffff88801f2172f8 RDI: ffffc900040df228
[ 1131.609496][    C0] RBP: 0000000000000020 R08: ffffffff814d741b R09: 1ffff9200081be9a
[ 1131.609509][    C0] R10: 000000003b641103 R11: 00000000bb36655b R12: 0000000000000020
[ 1131.609521][    C0] R13: ffff88801f2172f8 R14: ffffc900040df200 R15: 0000000000000000
[ 1131.609537][    C0]  ? poly1305_simd_blocks+0x14b/0x510
[ 1131.609559][    C0]  ? poly1305_simd_blocks+0x34d/0x510
[ 1131.609585][    C0]  poly1305_update_arch+0xf8/0x7d0
[ 1131.609607][    C0]  ? blake2s_final+0xd7/0x180
[ 1131.609627][    C0]  ? irq_fpu_usable+0x83/0xa0
[ 1131.609654][    C0]  __chacha20poly1305_encrypt+0x132/0x2e0
[ 1131.609679][    C0]  ? chacha20poly1305_encrypt+0x7d0/0x7d0
[ 1131.609699][    C0]  ? kernel_fpu_begin_mask+0x3b9/0x4f0
[ 1131.609749][    C0]  ? chacha_init_arch+0x22/0x740
[ 1131.609776][    C0]  chacha20poly1305_encrypt+0x3d2/0x7d0
[ 1131.609800][    C0]  ? blake2s_compress_generic+0x29f0/0x29f0
[ 1131.609827][    C0]  ? blake2s_final+0xd7/0x180
[ 1131.609847][    C0]  ? memset+0x1f/0x40
[ 1131.609869][    C0]  wg_noise_handshake_create_response+0x6a6/0xd30
[ 1131.609903][    C0]  ? wg_noise_handshake_consume_initiation+0xf60/0xf60
[ 1131.609940][    C0]  ? mark_lock+0x9a/0x340
[ 1131.609967][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1131.610000][    C0]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[ 1131.610031][    C0]  ? ktime_get_coarse_with_offset+0x13f/0x190
[ 1131.610057][    C0]  wg_packet_send_handshake_response+0xf5/0x2d0
[ 1131.610078][    C0]  ? wg_packet_send_queued_handshake_initiation+0x350/0x350
[ 1131.610098][    C0]  ? wg_socket_set_peer_endpoint_from_skb+0xc5/0x120
[ 1131.610128][    C0]  ? wg_packet_handshake_receive_worker+0xce/0xf00
[ 1131.610151][    C0]  wg_packet_handshake_receive_worker+0x5de/0xf00
[ 1131.610177][    C0]  ? wg_packet_purge_staged_packets+0x210/0x210
[ 1131.610202][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1131.610228][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1131.610255][    C0]  ? print_irqtrace_events+0x210/0x210
[ 1131.610280][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1131.610304][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[ 1131.610325][    C0]  ? process_one_work+0x7a9/0x11d0
[ 1131.610344][    C0]  process_one_work+0x8a9/0x11d0
[ 1131.610373][    C0]  ? worker_detach_from_pool+0x260/0x260
[ 1131.610396][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1131.610417][    C0]  ? kthread_data+0x4e/0xc0
[ 1131.610445][    C0]  ? wq_worker_running+0x97/0x190
[ 1131.610473][    C0]  worker_thread+0xa47/0x1200
[ 1131.610499][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1131.610526][    C0]  kthread+0x28d/0x320
[ 1131.610540][    C0]  ? worker_clr_flags+0x190/0x190
[ 1131.610560][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1131.610576][    C0]  ret_from_fork+0x1f/0x30
[ 1131.610607][    C0]  </TASK>
[ 1132.298921][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 1132.305809][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.99-syzkaller #0
[ 1132.313629][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1132.323699][   T27] Call Trace:
[ 1132.327070][   T27]  <TASK>
[ 1132.330028][   T27]  dump_stack_lvl+0x1e3/0x2cb
[ 1132.334743][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[ 1132.340229][   T27]  ? panic+0x764/0x764
[ 1132.344314][   T27]  ? llist_add_batch+0x160/0x1d0
[ 1132.349277][   T27]  ? vscnprintf+0x59/0x80
[ 1132.353630][   T27]  panic+0x318/0x764
[ 1132.357545][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[ 1132.363726][   T27]  ? memcpy_page_flushcache+0xfc/0xfc
[ 1132.369122][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[ 1132.375301][   T27]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[ 1132.381487][   T27]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[ 1132.387673][   T27]  watchdog+0xfc7/0xfd0
[ 1132.391854][   T27]  ? watchdog+0x1f8/0xfd0
[ 1132.396209][   T27]  kthread+0x28d/0x320
[ 1132.400292][   T27]  ? hungtask_pm_notify+0x50/0x50
[ 1132.405335][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1132.409938][   T27]  ret_from_fork+0x1f/0x30
[ 1132.414399][   T27]  </TASK>
[ 1133.591569][   T27] Shutting down cpus with NMI
[ 1133.596424][   T27] Kernel Offset: disabled
[ 1133.600750][   T27] Rebooting in 86400 seconds..