last executing test programs:

42.922451644s ago: executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0x0, r1, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)

42.717659342s ago: executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000c00), 0x2, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000dc0)={0x4, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

42.511043358s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
r3 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x10, &(0x7f00000001c0)={r2}, &(0x7f0000000280)=0x8)

42.22342965s ago: executing program 3:
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61a0, &(0x7f000000a180)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

41.135082983s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4)
write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000cc0)=""/142, 0x7ffff000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)=""/191, 0xbf}], 0x1}}], 0x2, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e1208001e0000000401a80009000900024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2edfa7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffdfffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

40.613673556s ago: executing program 5:
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0)
close(r0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/iscsi_connection', 0x0, 0x0)
mkdir(0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0)

40.050297526s ago: executing program 0:
personality(0x400000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

40.022697938s ago: executing program 2:
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @random="156307be2ebb", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @ipv4}}}}}}, 0x0)

39.888868109s ago: executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000009c0), 0x4)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000006c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@barrier_val={'barrier', 0x3d, 0x449}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=")
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_socket_connect_nvme_tcp()
renameat2(r2, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f00000002c0)='./file1\x00', 0x0)
listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x20)

39.828105145s ago: executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f0000000080)=0x8)

39.613558038s ago: executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0)

39.582801182s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}}, 0x0)

39.561510858s ago: executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x10000009, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
write$cgroup_type(r0, &(0x7f0000000140), 0x9)

39.418031705s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000b01000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)

39.348802367s ago: executing program 5:
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

39.296628945s ago: executing program 0:
socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

39.231207927s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000200)={0x6})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x2]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000000000000000001000000040000000c000180cafc00000547000008000200000009004c0007"], 0x78}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

39.179477609s ago: executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36)
r1 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f00000004c0)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90)
renameat2(r2, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240)={<r4=>0x0, ""/256, 0x0, <r5=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0, 0x0, 0x0, <r7=>0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x1a4243c, &(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYRES64=r7, @ANYRES8=r4, @ANYBLOB="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", @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYRES64=r6, @ANYRES8=r6, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))

38.896824926s ago: executing program 5:
personality(0x400000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

38.713611955s ago: executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
unshare(0x20000400)
ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x0)

38.144110484s ago: executing program 1:
syz_io_uring_setup(0x239, &(0x7f0000000200), 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xb)

38.022467969s ago: executing program 1:
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2200400, &(0x7f0000000400)=ANY=[], 0xf9, 0x163, &(0x7f00000004c0)="$eJzs0E+LUmEUx/Hvc+/jVUixyECCUmiRJYF/oF2EN5KE7ELRppVgtz+gGAnlLiXatRDaumhmtsPAvAIdXQwz6GrexGzcDczS4d7rOC58B3M+u/s7zznncl4+m2UUV160mt++u+220um3TrX87nQ4LHm5BZ39tbr7MXg/KsEXNCMN8x548SQGn742XKPeanjf8xKEAfvGMqcZv9xnJzQ9DXmC/swDCP6nYbCWje8EvUVCfvWuBjseZDlgsQUPLbBvBZk37wwwQSlrueyeyZ9KNnVbQWeQ3ds9fjM9qjx5/Nz9Wyj3H0WTZvYXbGOryOHk84m57JpNq6+dqjMrFgpPi7n86lrdPvpV9Ad8UKC9eQb+PIvkff0efivNP3/X/EDFgPH/c6cZXt26+9NMg0oN6rVkaKeWuGlgZrRXWbCBXyGylpibngkhhBBCCCGEEEIIIYQQQgghhLiOLgIAAP//QfhPlA==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x27)

37.895682986s ago: executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
unshare(0x22020600)

37.712566954s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d40)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0)

37.598555545s ago: executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x0, 0x300)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x240}, [@IFLA_PORT_SELF={0x4}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0)

32.219228286s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.H'], &(0x7f0000000380)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\n<a\xa2{j\nz=>N\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0xfc, 0x0)
fgetxattr(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='user.]'], 0x0, 0x0)

32.113298396s ago: executing program 4:
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x100000, 0x0, @desc1}})

31.871242395s ago: executing program 4:
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
bind$inet(r0, 0x0, 0x0)

31.255416296s ago: executing program 4:
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0xa}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000001480)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x4b32, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$TCSETS(r7, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
syz_open_pts(r7, 0x141601)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

30.022013827s ago: executing program 4:
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f00000004c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@gid}, {}, {@gid_ignore}, {@lastblock}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@dellinkprop={0x30, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)

13.879263253s ago: executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1, 0x1}, 0xfffffffffffffe6a)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0xc000, &(0x7f0000000480)=ANY=[@ANYBLOB="0088cbc3a41aa15768779de1ccbe2d6dfb322e5bc17a693f6e8ff1c9f2028006d594fe0c1063140021c048936770a3986325b6582bff"], 0x1, 0x2a3, &(0x7f0000000180)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x231, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c1002, 0x0)
ftruncate(r4, 0x0)
fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xbd298bc1dc9a2429, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00'}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r6=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x80802, 0x0)
writev(r8, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000540)="fbca2d3cc61b4690d22b32d63ddcd7e53d18ae3141f729bb42f74f1a427984faabf01991a5542e3f38c4fd8021c9411ec59b36e770be61212ca50d55aec71c612ffe714bdace2863a095c8343126cb1054c415eb9582f7d25ee7c04050465489d7", 0x61}], 0x2)
socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

9.266451519s ago: executing program 0:
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

9.206554489s ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xd, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @private}}}}, &(0x7f00000001c0)=0xb0)

8.688885923s ago: executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)

7.575647367s ago: executing program 1:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe076c02262605c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="99194c85b9"]}]}, 0xe0}], 0x1}, 0x0)

0s ago: executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @private}}}})

kernel console output (not intermixed with test programs):

_slave_0): Enslaving as an active interface with an up link
[  323.267772][ T9868] loop3: detected capacity change from 0 to 256
[  323.315427][ T9868] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  323.396933][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.671544][ T9742] team0: Port device team_slave_0 added
[  324.377804][ T9879] loop2: detected capacity change from 0 to 2048
[  324.393464][ T5120] Bluetooth: hci4: command tx timeout
[  324.432521][ T9742] team0: Port device team_slave_1 added
[  324.473916][ T9879] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  324.492540][ T5120] Bluetooth: hci0: command tx timeout
[  324.515738][ T9879] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  324.576947][ T9879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  324.620760][ T9879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  324.666912][ T9879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  324.678262][ T9879] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  324.753411][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.760416][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.817541][ T9891] loop0: detected capacity change from 0 to 256
[  324.824238][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.875030][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.913163][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.972919][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.996342][ T9899] loop2: detected capacity change from 0 to 1764
[  325.220209][ T9742] hsr_slave_0: entered promiscuous mode
[  325.238691][ T9742] hsr_slave_1: entered promiscuous mode
[  325.254214][ T9742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.266752][ T9742] Cannot create hsr debugfs directory
[  325.269077][ T9911] loop0: detected capacity change from 0 to 1024
[  325.331595][ T9914] loop2: detected capacity change from 0 to 8
[  325.350709][   T51] hfsplus: b-tree write err: -5, ino 4
[  325.452978][ T9916] loop0: detected capacity change from 0 to 256
[  325.497641][ T9916] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  325.527427][ T1091] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.498301][ T1091] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.582227][ T5120] Bluetooth: hci0: command tx timeout
[  326.747466][ T9923] loop3: detected capacity change from 0 to 2048
[  326.758560][ T9927] loop2: detected capacity change from 0 to 256
[  326.768084][ T1091] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.801072][ T9923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  326.826505][ T9837] chnl_net:caif_netlink_parms(): no params data found
[  326.835753][ T9923] UDF-fs: Scanning with blocksize 512 failed
[  326.889267][ T9923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  326.916907][ T1091] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.932142][ T9923] UDF-fs: Scanning with blocksize 1024 failed
[  326.961185][ T9923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515
[  326.992086][ T9923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  327.000901][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  327.013796][ T9923] UDF-fs: Scanning with blocksize 2048 failed
[  327.027980][ T9923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=259, location=259
[  327.068462][ T9923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515
[  327.117959][ T9923] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  327.146781][ T9923] UDF-fs: Scanning with blocksize 4096 failed
[  327.161594][ T9923] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  327.492468][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.507560][ T9947] loop3: detected capacity change from 0 to 1024
[  327.518237][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.550479][ T9837] bridge_slave_0: entered allmulticast mode
[  327.575046][ T9837] bridge_slave_0: entered promiscuous mode
[  327.603829][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.614827][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.633044][ T9837] bridge_slave_1: entered allmulticast mode
[  327.652230][ T9837] bridge_slave_1: entered promiscuous mode
[  327.692680][ T1037] hfsplus: b-tree write err: -5, ino 4
[  327.767847][ T9951] loop2: detected capacity change from 0 to 8
[  327.993354][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.038241][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.110783][ T1091] bridge_slave_1: left allmulticast mode
[  328.122072][ T1091] bridge_slave_1: left promiscuous mode
[  328.127867][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.173414][ T1091] bridge_slave_0: left allmulticast mode
[  328.189683][ T1091] bridge_slave_0: left promiscuous mode
[  328.206774][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.652563][ T5120] Bluetooth: hci0: command tx timeout
[  328.758157][ T9983] loop0: detected capacity change from 0 to 8
[  329.215854][ T9961] loop3: detected capacity change from 0 to 32768
[  329.292675][ T9961] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  329.292675][ T9961] clean (size 2912):
[  329.292675][ T9961] flags:          0
[  329.292675][ T9961] journal_seq:    10
[  329.292675][ T9961] usage: type=inodes v=8
[  329.292675][ T9961] usage: type=key_version v=2
[  329.292675][ T9961] usage: type=reserved v=0
[  329.292675][ T9961] usage: type=reserved v=0
[  329.292675][ T9961] usage: type=reserved v=0
[  329.292675][ T9961] usage: type=reserved v=848128
[  329.292675][ T9961] data_usage: btree: 1/1 [0]=2816
[  329.292675][ T9961] 
[  329.664453][T10016] loop2: detected capacity change from 0 to 8
[  330.008977][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.057552][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.090424][ T1091] bond0 (unregistering): Released all slaves
[  330.284886][T10022] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  330.472932][ T9837] team0: Port device team_slave_0 added
[  330.497764][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.546043][T10015] loop0: detected capacity change from 0 to 32768
[  330.563752][ T9837] team0: Port device team_slave_1 added
[  330.766758][T10015] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  330.801409][T10043] CUSE: DEVNAME unspecified
[  331.702408][T10015] XFS (loop0): Ending clean mount
[  331.802541][ T5115] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.899422][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.939221][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.965847][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.115614][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  332.273019][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.280014][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.306220][    C1] vkms_vblank_simulate: vblank timer overrun
[  332.362578][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.511690][ T1091] hsr_slave_0: left promiscuous mode
[  332.538818][ T1091] hsr_slave_1: left promiscuous mode
[  332.578183][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.604843][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.614156][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.623276][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.700204][ T1091] veth1_macvtap: left promiscuous mode
[  332.712842][ T1091] veth0_macvtap: left promiscuous mode
[  332.723632][ T1091] veth1_vlan: left promiscuous mode
[  332.729117][ T1091] veth0_vlan: left promiscuous mode
[  332.836939][T10083] loop2: detected capacity change from 0 to 8
[  334.088073][T10085] loop3: detected capacity change from 0 to 32768
[  334.158165][T10085] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  334.429343][T10085] XFS (loop3): Ending clean mount
[  334.576459][ T8992] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  334.802237][ T1145] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  334.899977][ T1091] team0 (unregistering): Port device team_slave_1 removed
[  335.025253][ T1145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.040148][ T1145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  335.084845][ T1145] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  335.100517][ T1145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.117478][ T1145] usb 3-1: config 0 descriptor??
[  335.139065][ T1091] team0 (unregistering): Port device team_slave_0 removed
[  335.411512][ T1145] usbhid 3-1:0.0: can't add hid device: -71
[  335.418129][ T1145] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  335.450919][ T1145] usb 3-1: USB disconnect, device number 8
[  336.156775][T10147] loop2: detected capacity change from 0 to 64
[  336.409533][T10143] loop3: detected capacity change from 0 to 32768
[  336.449604][T10143] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  336.550723][T10143] XFS (loop3): Ending clean mount
[  336.649686][T10100] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  336.720846][ T9837] hsr_slave_0: entered promiscuous mode
[  336.729538][ T8992] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  336.786208][ T9837] hsr_slave_1: entered promiscuous mode
[  336.820537][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.839975][ T9837] Cannot create hsr debugfs directory
[  336.852384][ T9742] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  337.102113][ T9742] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  337.193577][T10173] loop1: detected capacity change from 0 to 8
[  338.780596][ T9742] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  338.886043][ T9742] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  338.892918][   T29] audit: type=1804 audit(1718001121.911:5110): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir476312163/syzkaller.RIJeEb/188/bus" dev="sda1" ino=1952 res=1 errno=0
[  338.933415][   T29] audit: type=1804 audit(1718001121.951:5111): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir476312163/syzkaller.RIJeEb/188/bus" dev="sda1" ino=1952 res=1 errno=0
[  339.639873][T10205] loop2: detected capacity change from 0 to 256
[  339.672679][T10205] exFAT-fs (loop2): failed to read sector(0x800000078)
[  339.716376][T10205] exFAT-fs (loop2): failed to load upcase table
[  339.735723][T10205] exFAT-fs (loop2): failed to recognize exfat type
[  339.978474][T10209] loop1: detected capacity change from 0 to 8
[  340.388274][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.787786][ T9742] 8021q: adding VLAN 0 to HW filter on device team0
[  340.835885][   T29] audit: type=1804 audit(1718001123.851:5112): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2835667226/syzkaller.KHn1bB/387/bus" dev="sda1" ino=1943 res=1 errno=0
[  340.902177][   T29] audit: type=1804 audit(1718001123.851:5113): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2835667226/syzkaller.KHn1bB/387/bus" dev="sda1" ino=1943 res=1 errno=0
[  340.931170][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.938401][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.996774][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.003995][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.334881][T10226] loop1: detected capacity change from 0 to 512
[  341.430811][ T9837] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  341.460032][T10231] loop0: detected capacity change from 0 to 1764
[  341.479908][ T9837] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  341.490923][T10195] loop3: detected capacity change from 0 to 32768
[  341.520093][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  341.548609][T10195] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  341.559104][ T9837] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  341.609952][ T9837] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  341.829640][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.945850][T10195] XFS (loop3): Ending clean mount
[  342.159310][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.251618][T10259] loop2: detected capacity change from 0 to 8
[  342.444344][ T8992] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.909568][ T9837] 8021q: adding VLAN 0 to HW filter on device team0
[  343.024878][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.032213][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.149321][  T926] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.156607][  T926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.463978][T10275] loop0: detected capacity change from 0 to 512
[  343.649539][T10279] loop1: detected capacity change from 0 to 8
[  343.786809][T10287] loop3: detected capacity change from 0 to 256
[  344.074675][ T9742] veth0_vlan: entered promiscuous mode
[  344.204855][ T9742] veth1_vlan: entered promiscuous mode
[  344.219358][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.429179][ T9742] veth0_macvtap: entered promiscuous mode
[  344.498655][ T5120] Bluetooth: hci5: command 0x0406 tx timeout
[  344.521925][ T9742] veth1_macvtap: entered promiscuous mode
[  344.555396][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.566271][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.577347][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.588826][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.605393][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.617220][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.667878][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.668129][T10303] loop2: detected capacity change from 0 to 256
[  344.696839][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.722086][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.840645][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.953109][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.984366][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.027989][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.061611][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.312154][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.428547][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  345.460342][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.510857][ T9742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.596190][ T9742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.716854][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.848259][ T9742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.906806][ T9742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.958849][ T9742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.002142][ T9742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.469552][T10296] loop0: detected capacity change from 0 to 32768
[  346.590811][T10296] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  346.717449][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.784277][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.820533][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.868096][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.961858][ T9837] veth0_vlan: entered promiscuous mode
[  346.986746][T10296] XFS (loop0): Ending clean mount
[  347.000763][ T9837] veth1_vlan: entered promiscuous mode
[  347.108132][ T5115] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  347.123263][ T9837] veth0_macvtap: entered promiscuous mode
[  347.158605][ T9837] veth1_macvtap: entered promiscuous mode
[  347.180861][T10344] loop4: detected capacity change from 0 to 256
[  347.213433][T10344] exfat: Deprecated parameter 'namecase'
[  347.315325][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.315450][T10346] loop3: detected capacity change from 0 to 256
[  347.340519][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.358783][T10323] loop2: detected capacity change from 0 to 32768
[  347.369745][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.385749][T10344] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  347.400066][T10346] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  347.401062][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.423950][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.482040][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.502860][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.508795][T10323] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  347.543735][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.560589][T10346] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295)
[  347.560589][T10346] 
[  347.572202][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.583184][T10346] exFAT-fs (loop3): Filesystem has been set read-only
[  347.591587][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.629729][T10355] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'.
[  347.644575][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.678286][T10344] netlink: 44 bytes leftover after parsing attributes in process `���'.
[  347.702380][T10323] XFS (loop2): Ending clean mount
[  347.757835][T10354] sch_fq: defrate 0 ignored.
[  347.815703][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.856962][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.894396][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.915927][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.954272][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.992210][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.002132][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.032324][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.042304][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.074454][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.133733][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.167344][ T9837] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.195000][ T9837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.204283][ T9837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.213160][ T9837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.213164][ T5113] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  348.558512][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  348.907384][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.947697][T10382] loop3: detected capacity change from 0 to 2048
[  348.958688][T10382] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  348.968388][T10382] NILFS (loop3): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  348.985760][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.094201][ T2473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.110551][ T2473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.425489][T10387] loop3: detected capacity change from 0 to 4096
[  349.815724][T10395] loop5: detected capacity change from 0 to 164
[  351.380923][T10413] loop3: detected capacity change from 0 to 512
[  351.700877][T10416] loop0: detected capacity change from 0 to 2048
[  351.714263][T10423] overlayfs: workdir and upperdir must be separate subtrees
[  351.722971][T10416] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  351.736936][T10416] NILFS (loop0): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  352.017866][T10430] loop4: detected capacity change from 0 to 256
[  352.106920][T10434] loop5: detected capacity change from 0 to 164
[  352.194950][T10436] loop2: detected capacity change from 0 to 8
[  352.386603][T10441] loop0: detected capacity change from 0 to 16
[  352.494469][T10441] erofs: (device loop0): mounted with root inode @ nid 36.
[  352.958250][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.004317][T10454] loop3: detected capacity change from 0 to 512
[  353.056451][T10454] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent
[  353.392486][T10461] overlayfs: workdir and upperdir must be separate subtrees
[  353.547210][T10465] xt_CT: You must specify a L4 protocol and not use inversions on it
[  353.599389][T10466] loop3: detected capacity change from 0 to 2048
[  353.644118][T10466] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  353.659721][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  353.664221][T10466] NILFS (loop3): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  353.680469][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  353.840428][T10444] loop5: detected capacity change from 0 to 32768
[  353.879667][T10444] Mount JFS Failure: -22
[  353.908499][T10444] jfs_mount failed w/return code = -22
[  354.007092][T10484] loop2: detected capacity change from 0 to 16
[  354.058515][T10484] erofs: (device loop2): mounted with root inode @ nid 36.
[  354.219349][T10491] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use)
[  354.328747][   T29] audit: type=1326 audit(1718001137.351:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5db07cf69 code=0x0
[  354.496968][T10499] loop2: detected capacity change from 0 to 8
[  354.740812][T10510] overlayfs: workdir and upperdir must be separate subtrees
[  354.787315][T10507] loop5: detected capacity change from 0 to 512
[  354.837072][T10507] EXT4-fs (loop5): blocks per group (34) and clusters per group (32768) inconsistent
[  355.088561][T10515] loop4: detected capacity change from 0 to 1024
[  355.277703][   T51] hfsplus: b-tree write err: -5, ino 4
[  355.375034][T10521] loop1: detected capacity change from 0 to 512
[  355.419240][T10521] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.465323][T10521] ext4: Unknown parameter 'fscontext'
[  355.538946][T10525] loop4: detected capacity change from 0 to 16
[  355.566346][T10525] erofs: (device loop4): mounted with root inode @ nid 36.
[  355.624604][T10529] loop0: detected capacity change from 0 to 164
[  355.677631][T10531] xt_CT: You must specify a L4 protocol and not use inversions on it
[  355.739862][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  355.804253][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  357.031398][T10543] overlayfs: workdir and upperdir must be separate subtrees
[  357.304296][T10548] loop0: detected capacity change from 0 to 512
[  357.363384][T10548] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[  357.398595][T10511] loop3: detected capacity change from 0 to 40427
[  357.436403][T10550] loop1: detected capacity change from 0 to 512
[  357.459621][T10511] F2FS-fs (loop3): invalid crc value
[  357.478380][T10550] FAT-fs (loop1): bogus logical sector size 2175
[  358.345122][T10550] FAT-fs (loop1): Can't find a valid FAT filesystem
[  358.382099][T10511] F2FS-fs (loop3): Found nat_bits in checkpoint
[  358.515271][ T5135] Bluetooth: hci5: unexpected cc 0x2007 length: 100 > 2
[  358.524772][ T5135] Bluetooth: hci5: unexpected event for opcode 0x2007
[  358.599489][T10530] loop5: detected capacity change from 0 to 32768
[  358.978206][T10569] loop2: detected capacity change from 0 to 8
[  359.422539][T10584] loop0: detected capacity change from 0 to 16
[  359.450616][T10584] erofs: (device loop0): mounted with root inode @ nid 36.
[  359.493232][T10584] overlay: Unknown parameter '/'
[  359.840179][T10596] loop2: detected capacity change from 0 to 164
[  359.918134][T10596] isofs: isofs_export_get_parent(): child directory not normalized!
[  359.950761][T10594] loop5: detected capacity change from 0 to 4096
[  360.028252][T10602] loop0: detected capacity change from 0 to 512
[  360.071143][T10602] FAT-fs (loop0): bogus logical sector size 2175
[  360.089580][T10602] FAT-fs (loop0): Can't find a valid FAT filesystem
[  360.227848][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  360.274831][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  360.299134][ T5135] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2
[  360.311113][ T5135] Bluetooth: hci1: unexpected event for opcode 0x2007
[  360.424065][T10620] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  360.452559][T10620] IPv6: NLM_F_CREATE should be specified when creating new route
[  360.516259][T10620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.524363][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[  360.531635][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[  360.538907][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[  361.021509][T10637] loop4: detected capacity change from 0 to 512
[  361.068430][T10639] loop2: detected capacity change from 0 to 164
[  361.074622][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  361.094370][T10637] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent
[  361.190334][T10639] isofs: isofs_export_get_parent(): child directory not normalized!
[  361.599622][T10649] loop3: detected capacity change from 0 to 8
[  362.041411][T10665] loop2: detected capacity change from 0 to 512
[  362.089601][T10606] loop1: detected capacity change from 0 to 40427
[  362.093146][T10665] FAT-fs (loop2): bogus logical sector size 2175
[  362.139746][T10665] FAT-fs (loop2): Can't find a valid FAT filesystem
[  362.163815][T10606] F2FS-fs (loop1): invalid crc value
[  362.251728][T10606] F2FS-fs (loop1): Found nat_bits in checkpoint
[  362.311868][ T5135] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2
[  362.325096][ T5135] Bluetooth: hci2: unexpected event for opcode 0x2007
[  362.552820][T10606] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  362.574143][ T5135] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  362.584593][ T5135] Bluetooth: hci5: Injecting HCI hardware error event
[  362.594976][ T5120] Bluetooth: hci5: hardware error 0x00
[  362.894041][ T7319] syz-executor.1: attempt to access beyond end of device
[  362.894041][ T7319] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  363.130831][ T7319] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  363.930960][T10710] loop0: detected capacity change from 0 to 256
[  363.940683][T10707] tmpfs: Bad value for 'mpol'
[  364.254887][T10713] binder: BINDER_SET_CONTEXT_MGR already set
[  364.274504][T10713] binder: 10712:10713 ioctl 4018620d 20000040 returned -16
[  364.415103][ T5135] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  364.437084][ T5135] Bluetooth: hci1: Injecting HCI hardware error event
[  364.485264][ T5135] Bluetooth: hci1: hardware error 0x00
[  364.764456][ T5120] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  364.888935][   T29] audit: type=1800 audit(1718001147.911:5115): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0
[  364.967882][   T29] audit: type=1800 audit(1718001147.931:5116): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0
[  365.100585][T10723] Bluetooth: MGMT ver 1.22
[  365.241102][T10727] lo speed is unknown, defaulting to 1000
[  365.262135][T10727] lo speed is unknown, defaulting to 1000
[  365.308593][T10727] lo speed is unknown, defaulting to 1000
[  365.336715][T10727] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  365.407473][T10727] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  365.594247][T10727] lo speed is unknown, defaulting to 1000
[  365.633172][T10727] lo speed is unknown, defaulting to 1000
[  365.652877][T10727] lo speed is unknown, defaulting to 1000
[  365.701278][T10727] lo speed is unknown, defaulting to 1000
[  365.740316][T10727] lo speed is unknown, defaulting to 1000
[  365.800102][T10740] loop2: detected capacity change from 0 to 2048
[  365.814237][T10727] lo speed is unknown, defaulting to 1000
[  365.837536][T10740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  365.870424][T10740] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  365.931730][T10740] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002]
[  366.060825][T10740] System zones: 0-19
[  366.304245][T10740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.424812][ T5120] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  366.433852][ T5120] Bluetooth: hci2: Injecting HCI hardware error event
[  366.445027][ T5120] Bluetooth: hci2: hardware error 0x00
[  366.742523][ T5135] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  367.460292][T10757] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.502946][T10757] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  367.549830][T10757] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  367.685154][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.858414][T10770] netlink: 83992 bytes leftover after parsing attributes in process `syz-executor.1'.
[  367.907171][T10732] loop3: detected capacity change from 0 to 40427
[  367.992915][T10732] F2FS-fs (loop3): invalid crc value
[  368.072787][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  368.072816][T10732] F2FS-fs (loop3): Found nat_bits in checkpoint
[  368.120423][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  368.175311][T10785] loop1: detected capacity change from 0 to 256
[  368.300809][   T29] audit: type=1326 audit(1718001151.321:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10787 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x0
[  369.185023][T10802] xt_TCPMSS: Only works on TCP SYN packets
[  369.372277][ T5120] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  369.559910][T10809] loop2: detected capacity change from 0 to 2048
[  369.618035][T10809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  369.710292][T10809] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  369.767479][T10809] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002]
[  369.794335][T10809] System zones: 0-19
[  369.844909][T10809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.918625][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  370.068559][T10775] loop0: detected capacity change from 0 to 32768
[  370.301163][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  370.343455][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  370.726338][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.744136][T10884] loop3: detected capacity change from 0 to 2048
[  372.399917][T10913] tmpfs: Bad value for 'mpol'
[  372.539758][T10916] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
[  372.682393][T10921] loop5: detected capacity change from 0 to 512
[  372.716557][T10921] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent
[  372.763114][T10852] loop4: detected capacity change from 0 to 32768
[  372.841915][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  373.115043][T10852] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  373.302489][T10852] XFS (loop4): Ending clean mount
[  373.830437][T10950] loop5: detected capacity change from 0 to 40427
[  373.839657][T10950] F2FS-fs (loop5): Corrupted extension count (3831 + 1 > 64)
[  373.847148][T10950] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  373.855642][T10950] F2FS-fs (loop5): FLUSH_MERGE not compatible with readonly mode
[  373.857131][  T926] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  373.950415][  T926] XFS (loop4): Unmount and run xfs_repair
[  373.972700][  T926] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  373.993164][  T926] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  374.014874][  T926] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  374.074156][  T926] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  374.139901][  T926] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  374.163050][T10960] tmpfs: Bad value for 'mpol'
[  374.173582][  T926] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  374.208911][  T926] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  374.238966][  T926] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  374.256729][T10966] loop3: detected capacity change from 0 to 64
[  374.286288][  T926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  374.318656][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  374.373148][T10852] XFS (loop4): page discard on page ffffea0001573840, inode 0x426, pos 28672.
[  374.406678][  T926] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  374.418426][  T926] XFS (loop4): Unmount and run xfs_repair
[  374.432793][  T926] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  374.448219][  T926] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  374.463312][  T926] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  374.481353][  T926] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  374.528185][  T926] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  374.584646][  T926] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  374.628335][T10970] lo speed is unknown, defaulting to 1000
[  374.656084][  T926] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  374.682849][  T926] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.561131][  T926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.571407][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  375.582988][T10852] XFS (loop4): page discard on page ffffea000165c400, inode 0x426, pos 32768.
[  375.603579][ T1145] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  375.655867][ T1145] XFS (loop4): Unmount and run xfs_repair
[  375.679811][ T1145] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  375.699735][ T1145] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  375.723529][ T1145] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  375.747659][ T1145] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  375.769719][ T1145] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  375.782968][ T1145] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  375.797860][ T1145] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.815069][ T1145] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.832740][ T1145] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  375.858226][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  375.913691][T10852] XFS (loop4): page discard on page ffffea00015d5800, inode 0x426, pos 65536.
[  375.990273][  T926] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  376.018995][  T926] XFS (loop4): Unmount and run xfs_repair
[  376.033754][  T926] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  376.064322][  T926] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  376.088639][  T926] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  376.111233][  T926] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  376.152376][  T926] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  376.172112][  T926] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  376.181031][  T926] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.209617][  T926] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.243050][  T926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.262172][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  376.302398][T10852] XFS (loop4): page discard on page ffffea0001654800, inode 0x426, pos 131072.
[  376.311082][T11007] loop2: detected capacity change from 0 to 64
[  376.357874][  T926] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  376.386249][  T926] XFS (loop4): Unmount and run xfs_repair
[  376.393333][  T926] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  376.412257][  T926] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  376.421259][  T926] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  376.450381][  T926] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  376.459529][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  376.534578][T11010] loop5: detected capacity change from 0 to 128
[  376.563661][   T29] audit: type=1800 audit(1718001159.531:5118): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  376.602653][T11010] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  376.667314][T11010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.725098][  T926] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  376.735530][  T926] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  376.745035][  T926] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.756516][  T926] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.765504][  T926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  376.774674][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  376.792376][T10852] XFS (loop4): page discard on page ffffea000157c000, inode 0x426, pos 262144.
[  376.802160][ T5121] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  376.828000][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  376.843386][   T29] audit: type=1800 audit(1718001159.851:5119): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=105 res=0 errno=0
[  376.881036][ T5121] XFS (loop4): Unmount and run xfs_repair
[  376.891051][ T5121] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  376.931297][ T5121] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  376.952903][ T5121] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  376.991913][ T5121] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  377.024935][ T5121] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  377.049934][ T5121] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  377.073531][ T5121] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.100296][ T5121] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.125374][ T5121] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.144660][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  377.155301][T11017] loop2: detected capacity change from 0 to 8
[  377.230828][T10852] XFS (loop4): page discard on page ffffea00017c2000, inode 0x426, pos 524288.
[  377.300245][T10852] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  377.350932][T10852] XFS (loop4): Unmount and run xfs_repair
[  377.403843][T10852] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  377.434481][T10852] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  377.453945][T10852] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  377.499911][T10852] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  377.539667][T10852] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  377.580468][T10852] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  377.619983][T10852] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.668026][T10852] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.714023][T11022] loop5: detected capacity change from 0 to 64
[  377.726327][T10852] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  377.763586][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  377.811409][T10852] XFS (loop4): page discard on page ffffea000150c000, inode 0x426, pos 1048576.
[  377.840221][ T5121] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  377.876669][ T5121] XFS (loop4): Unmount and run xfs_repair
[  377.900909][ T5121] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  377.901733][T11026] loop0: detected capacity change from 0 to 8
[  377.911148][ T5121] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  377.930235][ T5121] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  377.960233][T11026] Page size > filesystem block size (0).  This is currently not supported!
[  377.967716][ T5121] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  378.008719][ T5121] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  378.030677][ T5121] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  378.078434][ T5121] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.114616][ T5121] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.148006][ T5121] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.175763][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  378.188331][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  378.199846][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  378.251938][T10852] XFS (loop4): page discard on page ffffea0001458000, inode 0x426, pos 2097152.
[  378.269059][ T1145] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  378.283384][ T1145] XFS (loop4): Unmount and run xfs_repair
[  378.300860][ T1145] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  378.323379][ T1145] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  378.328458][T11045] loop3: detected capacity change from 0 to 512
[  378.337102][T11046] loop5: detected capacity change from 0 to 64
[  378.353334][ T1145] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  378.371810][ T1145] 00000020: a2 f8 2a ab 77 f8 43 90 00 00 a8 f7 47 a7 4b ab  ..*.w.C.....G.K.
[  378.390258][T11045] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 17
[  378.393268][ T1145] 00000030: 00 00 00 00 b3 ba fa 28 00 00 00 05 00 00 00 01  .......(........
[  378.410626][ T1145] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  378.419883][ T1145] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.430260][ T1145] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.440507][ T1145] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  378.449444][T10852] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  378.461754][T10852] XFS (loop4): page discard on page ffffea00015da800, inode 0x426, pos 4194304.
[  378.495804][T11045] ext4_test_bit(bit=16, block=4) = 1
[  378.508572][T11045] is_bad_inode(inode)=0
[  378.539049][T11045] NEXT_ORPHAN(inode)=0
[  378.549059][ T9742] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  378.555845][T11045] max_ino=32
[  378.568381][T11045] i_nlink=1
[  378.575046][T11045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.610984][ T9742] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  378.627726][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  378.683235][T11045] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  378.732925][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  378.872159][T11051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  378.985621][ T8992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.078490][T11060] loop0: detected capacity change from 0 to 8
[  379.593749][T11075] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program
[  379.956976][T11090] loop1: detected capacity change from 0 to 64
[  381.459099][T11108] loop5: detected capacity change from 0 to 512
[  381.479863][T11110] loop0: detected capacity change from 0 to 128
[  381.533462][T11108] EXT4-fs: Ignoring removed mblk_io_submit option
[  381.539936][T11108] ext4: Unknown parameter 'fscontext'
[  381.767216][T11079] loop4: detected capacity change from 0 to 32768
[  381.806151][T11079] XFS: ikeep mount option is deprecated.
[  381.942160][T11079] XFS: noikeep mount option is deprecated.
[  382.925600][T11079] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR
[  383.061311][T11116] loop1: detected capacity change from 0 to 8
[  383.305408][T11129] loop3: detected capacity change from 0 to 512
[  383.415035][T11129] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino
[  383.499259][T11129] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  383.547824][T11129] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.663881][T11142] tipc: Started in network mode
[  383.682630][T11142] tipc: Node identity 08002800ffff, cluster identity 4711
[  383.703462][T11142] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  384.525558][T11173] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  384.636434][ T8992] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  384.738666][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  384.747589][T11177] loop4: detected capacity change from 0 to 128
[  384.788620][T11178] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  384.801915][T11177] ufs: You didn't specify the type of your ufs filesystem
[  384.801915][T11177] 
[  384.801915][T11177] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  384.801915][T11177] 
[  384.801915][T11177] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  384.917370][T11177] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  384.960426][T11180] loop3: detected capacity change from 0 to 2048
[  385.024894][T11180] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: casefold flag without casefold feature
[  385.072627][T11180] EXT4-fs (loop3): get root inode failed
[  385.078301][T11180] EXT4-fs (loop3): mount failed
[  385.476540][T11193] loop1: detected capacity change from 0 to 4096
[  385.502316][T11193] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  385.516228][T11200] loop3: detected capacity change from 0 to 128
[  385.552918][T11200] syz-executor.3: attempt to access beyond end of device
[  385.552918][T11200] loop3: rw=2049, sector=129, nr_sectors = 9 limit=128
[  385.584715][T11193] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  385.629882][T11193] ntfs3: loop1: Failed to load $MFT (-22).
[  385.870225][T11209] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted
[  387.229326][T11242] loop1: detected capacity change from 0 to 4096
[  387.264263][T11242] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  387.289069][T11242] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  387.312420][T11242] ntfs3: loop1: Failed to load $MFT (-22).
[  387.887165][T11222] loop4: detected capacity change from 0 to 40427
[  387.911320][T11268] x_tables: duplicate underflow at hook 3
[  387.945115][T11222] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  388.003381][T11222] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  388.027937][T11269] loop1: detected capacity change from 0 to 512
[  388.100208][T11222] F2FS-fs (loop4): Found nat_bits in checkpoint
[  388.185673][T11269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.232840][T11269] ext4 filesystem being mounted at /root/syzkaller-testdir476312163/syzkaller.RIJeEb/258/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.357765][T11222] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  388.369532][T11222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  388.641288][   T29] audit: type=1804 audit(1718001171.651:5120): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2835667226/syzkaller.KHn1bB/464/file0/bus" dev="hugetlbfs" ino=32865 res=1 errno=0
[  388.752345][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  388.780278][   T29] audit: type=1804 audit(1718001171.661:5121): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2835667226/syzkaller.KHn1bB/464/file0/bus" dev="hugetlbfs" ino=32865 res=1 errno=0
[  388.890394][ T7319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.902606][   T29] audit: type=1804 audit(1718001171.751:5122): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2835667226/syzkaller.KHn1bB/464/file0/bus" dev="hugetlbfs" ino=32865 res=1 errno=0
[  389.436370][T11265] loop2: detected capacity change from 0 to 32768
[  389.480962][T11265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11265)
[  389.562869][T11265] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  389.588765][T11308] tipc: Started in network mode
[  389.617051][T11265] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  389.629492][T11308] tipc: Node identity 08002800ffff, cluster identity 4711
[  389.661499][T11308] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  389.672106][T11265] BTRFS info (device loop2): using free-space-tree
[  390.138925][T11333] loop3: detected capacity change from 0 to 512
[  390.153239][ T5113] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  390.232610][T11333] EXT4-fs: Ignoring removed mblk_io_submit option
[  390.275845][T11333] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  390.320836][T11333] EXT4-fs (loop3): group descriptors corrupted!
[  390.472894][T11336] loop0: detected capacity change from 0 to 1024
[  390.560801][T11336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.706407][T11341] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  390.891771][   T29] audit: type=1804 audit(1718001173.911:5123): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir476312163/syzkaller.RIJeEb/262/file0/bus" dev="hugetlbfs" ino=33840 res=1 errno=0
[  391.014852][   T29] audit: type=1804 audit(1718001173.951:5124): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir476312163/syzkaller.RIJeEb/262/file0/bus" dev="hugetlbfs" ino=33840 res=1 errno=0
[  391.158523][   T29] audit: type=1804 audit(1718001173.971:5125): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir476312163/syzkaller.RIJeEb/262/file0/bus" dev="hugetlbfs" ino=33840 res=1 errno=0
[  391.349459][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.439072][T11346] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  391.954364][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  392.090848][   T29] audit: type=1326 audit(1718001175.091:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6001a7cf69 code=0x7ffc0000
[  392.206478][   T29] audit: type=1326 audit(1718001175.101:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6001a7cf69 code=0x7ffc0000
[  392.330847][T11333] loop3: detected capacity change from 0 to 32768
[  392.338630][   T29] audit: type=1326 audit(1718001175.101:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6001a7cf69 code=0x7ffc0000
[  392.488100][   T29] audit: type=1326 audit(1718001175.111:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6001a7cf69 code=0x7ffc0000
[  392.805045][T11333] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nodiscard,nojournal_transaction_names
[  392.886493][T11333] bcachefs (loop3): recovering from clean shutdown, journal seq 13
[  393.071018][T11333] bcachefs (loop3): alloc_read... done
[  393.101651][T11333] bcachefs (loop3): stripes_read... done
[  393.152100][T11333] bcachefs (loop3): snapshots_read... done
[  393.164554][T11380] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program
[  393.208636][T11333] bcachefs (loop3): journal_replay... done
[  393.255512][T11333] bcachefs (loop3): resume_logged_ops... done
[  393.302987][T11333] bcachefs (loop3): going read-write
[  393.362609][T11333] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR
[  393.399546][T11333] bcachefs (loop3): error starting copygc thread
[  393.422944][T11333] bcachefs (loop3): going read-only
[  393.434109][T11333] bcachefs (loop3): finished waiting for writes to stop
[  393.478914][T11333] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13
[  393.526296][T11333] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13
[  393.615054][T11333] bcachefs (loop3): shutdown complete, journal seq 14
[  393.680645][T11333] bcachefs (loop3): marking filesystem clean
[  393.729869][T11394] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted
[  393.766909][T11333] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  393.782216][T11333] bcachefs (loop3): shutting down
[  393.963462][T11333] bcachefs (loop3): shutdown complete
[  394.044120][T11396] loop2: detected capacity change from 0 to 4096
[  394.082321][T11396] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  394.119404][T11396] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  394.148470][T11396] ntfs3: loop2: Failed to load $MFT (-22).
[  394.475228][T11402] loop1: detected capacity change from 0 to 256
[  394.605328][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  394.618466][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  394.628496][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.654841][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.676309][ T5135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  394.683854][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  394.752274][T11405] lo speed is unknown, defaulting to 1000
[  395.345663][T11417] loop5: detected capacity change from 0 to 2048
[  396.358365][T11405] chnl_net:caif_netlink_parms(): no params data found
[  396.732388][ T5120] Bluetooth: hci1: command tx timeout
[  397.007438][T11405] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.036147][T11405] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.081857][T11405] bridge_slave_0: entered allmulticast mode
[  397.209389][T11405] bridge_slave_0: entered promiscuous mode
[  397.369476][T11457] loop2: detected capacity change from 0 to 512
[  397.379972][T11457] EXT4-fs: Ignoring removed mblk_io_submit option
[  397.405097][T11457] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  397.426938][T11405] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.434296][T11405] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.452403][T11405] bridge_slave_1: entered allmulticast mode
[  397.460070][T11405] bridge_slave_1: entered promiscuous mode
[  397.472884][T11457] EXT4-fs (loop2): group descriptors corrupted!
[  397.666833][ T1145] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  397.708550][ T1145] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  397.816729][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.899087][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.131695][T11405] team0: Port device team_slave_0 added
[  398.178581][T11405] team0: Port device team_slave_1 added
[  398.201182][T11469] loop3: detected capacity change from 0 to 512
[  398.313773][T11469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 131: padding at end of block bitmap is not set
[  398.341280][T11469] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  398.405706][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.413042][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.443311][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.460285][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.470808][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.472519][T11469] EXT4-fs (loop3): 1 truncate cleaned up
[  398.546035][T11469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.613415][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.784918][T11458] loop1: detected capacity change from 0 to 32768
[  398.819555][ T5135] Bluetooth: hci1: command tx timeout
[  399.026882][T11457] loop2: detected capacity change from 0 to 32768
[  399.062926][  T113] blkno = 5002c, nblocks = 1
[  399.067618][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  399.067618][  T113] 
[  399.083713][T11405] hsr_slave_0: entered promiscuous mode
[  399.108021][ T8992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.110878][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  399.132804][T11405] hsr_slave_1: entered promiscuous mode
[  399.145292][T11405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.154108][T11458] JFS: metapage_get_blocks failed
[  399.168690][T11405] Cannot create hsr debugfs directory
[  399.217431][T11458] read_mapping_page failed!
[  399.253365][T11458] bread failed!
[  399.537493][T11457] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nodiscard,nojournal_transaction_names
[  399.617453][T11457] bcachefs (loop2): recovering from clean shutdown, journal seq 13
[  399.671615][T11457] bcachefs (loop2): alloc_read... done
[  399.680733][T11457] bcachefs (loop2): stripes_read... done
[  399.705723][T11457] bcachefs (loop2): snapshots_read... done
[  399.736007][T11457] bcachefs (loop2): journal_replay... done
[  399.772401][T11457] bcachefs (loop2): resume_logged_ops... done
[  399.811787][T11457] bcachefs (loop2): going read-write
[  399.846636][T11457] bcachefs (loop2): done starting filesystem
[  400.012815][ T5113] bcachefs (loop2): shutting down
[  400.035470][ T5113] bcachefs (loop2): going read-only
[  400.062878][ T5113] bcachefs (loop2): finished waiting for writes to stop
[  400.149109][ T5113] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13
[  400.192289][ T5113] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13
[  400.256146][ T5113] bcachefs (loop2): shutdown complete, journal seq 14
[  400.269608][ T5113] bcachefs (loop2): marking filesystem clean
[  400.406203][T11405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.463997][ T5113] bcachefs (loop2): shutdown complete
[  400.593571][T11494] input: syz0 as /devices/virtual/input/input18
[  400.732273][   T53] Bluetooth: hci3: command 0x0406 tx timeout
[  400.815268][T11405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.900576][ T5120] Bluetooth: hci1: command tx timeout
[  401.527277][T11488] loop3: detected capacity change from 0 to 32768
[  401.588948][T11405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.011744][T11485] loop5: detected capacity change from 0 to 32768
[  402.037799][T11405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.065819][T11485] XFS: ikeep mount option is deprecated.
[  402.071499][T11485] XFS: noikeep mount option is deprecated.
[  402.242576][T11485] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  402.409287][T11485] XFS (loop5): Ending clean mount
[  402.436779][T11485] XFS (loop5): Quotacheck needed: Please wait.
[  402.543111][T11485] XFS (loop5): Quotacheck: Done.
[  402.731324][T11405] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  402.787321][T11513] loop1: detected capacity change from 0 to 4096
[  402.801123][T11405] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  402.810926][T11513] ntfs3: Unknown parameter '��18446744073709551615�0x000000000000ee00'
[  402.846409][ T9837] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  402.860348][T11405] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  402.982250][ T5120] Bluetooth: hci1: command tx timeout
[  402.992672][T11405] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  403.434795][T11405] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.598190][T11531] ubi0: attaching mtd0
[  403.623784][T11531] ubi0: scanning is finished
[  403.628959][T11531] ubi0: empty MTD device detected
[  404.398298][T11531] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  404.441757][T11531] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  404.457919][T11531] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  404.468310][T11405] 8021q: adding VLAN 0 to HW filter on device team0
[  404.536028][T11531] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  404.550374][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.557516][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.595171][T11531] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  404.619738][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.626927][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.646919][T11531] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  404.767551][T11531] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 93756694
[  404.840436][T11531] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  404.891593][T11533] ubi0: background thread "ubi_bgt0d" started, PID 11533
[  405.210886][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  405.310308][T11556] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  405.386850][T11556] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  405.446175][T11561] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[  405.485947][T11561] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  405.911689][T11405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.116513][T11405] veth0_vlan: entered promiscuous mode
[  406.196670][T11405] veth1_vlan: entered promiscuous mode
[  406.412831][T11405] veth0_macvtap: entered promiscuous mode
[  406.478281][T11405] veth1_macvtap: entered promiscuous mode
[  406.604626][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.646024][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.684057][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.716014][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.766220][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.797252][T11595] input: syz0 as /devices/virtual/input/input19
[  406.810702][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.832587][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.861517][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.881884][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.893638][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.904243][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.921412][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.977812][T11405] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.026917][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.111029][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.132478][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.161289][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.213957][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.267239][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.298813][T11575] loop3: detected capacity change from 0 to 32768
[  407.307752][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.327499][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.355195][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.379059][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.392791][T11575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11575)
[  407.415629][T11405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.437986][T11405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.451827][T11405] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.471859][T11405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.493507][T11405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.507660][T11405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.518569][T11405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.548820][T11575] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  407.614193][ T1145] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  407.627009][T11575] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  407.689723][T11575] BTRFS info (device loop3): using free-space-tree
[  407.973155][ T1145] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  407.999951][ T1145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.042695][ T1145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.062134][ T1145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  408.089349][ T1145] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  408.108572][ T1145] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  408.162355][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.170217][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.178006][ T1145] usb 3-1: Manufacturer: syz
[  408.221836][ T1145] usb 3-1: config 0 descriptor??
[  408.596003][T11623] loop5: detected capacity change from 0 to 1024
[  408.627628][T11623] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  408.670189][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.696483][T11623] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[  408.822174][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.840390][ T1145] appleir 0003:05AC:8243.0014: unknown main item tag 0x0
[  408.854900][ T8992] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  408.894808][ T1145] appleir 0003:05AC:8243.0014: No inputs registered, leaving
[  408.942977][T11623] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  408.988222][ T1145] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  409.035288][T11623] EXT4-fs error (device loop5): ext4_get_journal_inode:5752: inode #5: comm syz-executor.5: casefold flag without casefold feature
[  409.124781][T11623] EXT4-fs (loop5): no journal found
[  409.685951][T11637] loop0: detected capacity change from 0 to 1764
[  409.700378][T11637] iso9660: Unknown parameter '��������0xffffffffffffffff'
[  409.731347][ T1145] usb 3-1: USB disconnect, device number 9
[  410.725713][T11651] loop1: detected capacity change from 0 to 512
[  410.799245][T11653] loop2: detected capacity change from 0 to 8
[  410.836134][T11653] squashfs: Unknown parameter 'bridge0'
[  411.020218][T11651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.035408][T11651] ext4 filesystem being mounted at /root/syzkaller-testdir476312163/syzkaller.RIJeEb/298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.577573][ T7319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.591841][T11674] loop2: detected capacity change from 0 to 512
[  411.615702][T11676] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  411.660646][T11674] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.698143][T11674] UDF-fs: Scanning with blocksize 512 failed
[  411.720930][T11674] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.737688][T11674] UDF-fs: Scanning with blocksize 1024 failed
[  411.745887][T11669] loop4: detected capacity change from 0 to 8192
[  411.765082][T11674] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.782728][T11674] UDF-fs: Scanning with blocksize 2048 failed
[  411.797852][T11674] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  411.817962][T11679] input: syz0 as /devices/virtual/input/input20
[  411.827804][T11674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.845771][T11669]  loop4: p1 p2 p3 p4
[  411.850692][T11669] loop4: p1 size 108922248 extends beyond EOD, truncated
[  411.882854][T11669] loop4: p2 start 861536256 is beyond EOD, truncated
[  411.906881][T11669] loop4: p3 start 851968 is beyond EOD, truncated
[  411.932203][T11669] loop4: p4 size 65536 extends beyond EOD, truncated
[  413.983810][T11681] loop1: detected capacity change from 0 to 32768
[  414.257307][T11712] 9pnet_fd: Insufficient options for proto=fd
[  414.464377][T11718] loop2: detected capacity change from 0 to 512
[  414.677873][T11718] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino
[  414.708461][T11718] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  414.834910][T11718] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.086105][T11730] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  416.608109][T11740] cifs: Unknown parameter 'no9� ��P��G!8�����E�8-�� ����Ŗ�Eeլ'
[  417.135901][ T5113] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  417.737248][T11765] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  418.456119][T11783] loop3: detected capacity change from 0 to 512
[  418.562354][   T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  418.596874][T11783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.610478][T11783] ext4 filesystem being mounted at /root/syzkaller-testdir2625765708/syzkaller.a6fCCq/153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.833113][   T45] usb 2-1: Using ep0 maxpacket: 32
[  418.871465][   T45] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db
[  418.920319][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.985344][   T45] usb 2-1: config 0 descriptor??
[  419.007687][   T45] pwc: Logitech ViewPort AV 100 webcam detected.
[  419.021124][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.126098][ T8992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.421081][   T45] pwc: send_video_command error -71
[  419.450972][   T45] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  419.520713][   T45] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  419.570687][   T45] usb 2-1: USB disconnect, device number 11
[  419.638287][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.953968][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.134226][T11813] lo speed is unknown, defaulting to 1000
[  420.379132][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.689825][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  420.701128][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  420.724129][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  420.743648][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  420.753126][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  420.760763][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  420.782091][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  421.053288][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.082209][    T9] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  421.105073][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.113627][   T35] bridge_slave_1: left allmulticast mode
[  421.119295][   T35] bridge_slave_1: left promiscuous mode
[  421.133532][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.151926][    T9] usb 4-1: config 0 descriptor??
[  421.164763][   T35] bridge_slave_0: left allmulticast mode
[  421.170429][   T35] bridge_slave_0: left promiscuous mode
[  421.183380][    T9] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22
[  421.200801][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.317586][T11830] ptrace attach of "/root/syz-executor.2 exec"[5113] was attempted by "/root/syz-executor.2 exec"[11830]
[  421.378749][    T9] usb 4-1: USB disconnect, device number 11
[  421.440335][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  421.440356][   T29] audit: type=1804 audit(1718001204.461:5136): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file1" dev="sda1" ino=1959 res=1 errno=0
[  421.618376][   T29] audit: type=1804 audit(1718001204.461:5137): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file1" dev="sda1" ino=1959 res=1 errno=0
[  421.777312][   T29] audit: type=1804 audit(1718001204.541:5138): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file1" dev="sda1" ino=1959 res=1 errno=0
[  422.415000][T11818] loop1: detected capacity change from 0 to 32768
[  422.835301][T11841] 9pnet_fd: Insufficient options for proto=fd
[  422.894012][ T5120] Bluetooth: hci4: command tx timeout
[  424.032322][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.136695][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.194085][   T35] bond0 (unregistering): Released all slaves
[  424.283411][T11826] lo speed is unknown, defaulting to 1000
[  424.533062][ T5121] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  424.920980][   T35] hsr_slave_0: left promiscuous mode
[  424.935734][ T5121] usb 2-1: New USB device found, idVendor=0403, idProduct=8698, bcdDevice=bd.70
[  424.945776][ T5121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.959940][ T5121] usb 2-1: config 0 descriptor??
[  424.969992][ T5121] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG
[  424.972267][ T5120] Bluetooth: hci4: command tx timeout
[  424.985178][   T35] hsr_slave_1: left promiscuous mode
[  425.018309][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.044153][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.063841][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.071277][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.239744][T11851] loop1: detected capacity change from 0 to 256
[  425.269074][   T35] veth1_macvtap: left promiscuous mode
[  425.322385][   T35] veth0_macvtap: left promiscuous mode
[  425.328116][   T35] veth1_vlan: left promiscuous mode
[  425.361822][ T5121] usb 2-1: USB disconnect, device number 12
[  425.400457][   T35] veth0_vlan: left promiscuous mode
[  426.115817][T11878] loop3: detected capacity change from 0 to 47
[  426.180547][T11878] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3.
[  427.052134][ T5120] Bluetooth: hci4: command tx timeout
[  428.003102][T11901] loop3: detected capacity change from 0 to 40427
[  428.018541][T11901] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384)
[  428.026684][T11901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  428.131740][T11901] F2FS-fs (loop3): Found nat_bits in checkpoint
[  428.191278][T11908] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  428.341252][T11901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  428.355385][T11901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  428.482806][ T8992] syz-executor.3: attempt to access beyond end of device
[  428.482806][ T8992] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  428.522862][ T8992] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  428.620986][   T35] team0 (unregistering): Port device team_slave_1 removed
[  429.088656][   T35] team0 (unregistering): Port device team_slave_0 removed
[  429.143368][ T5120] Bluetooth: hci4: command tx timeout
[  430.004809][   T29] audit: type=1326 audit(1718001213.031:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.087906][   T29] audit: type=1326 audit(1718001213.031:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.232472][   T29] audit: type=1326 audit(1718001213.031:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.315163][   T29] audit: type=1326 audit(1718001213.031:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.340251][   T29] audit: type=1326 audit(1718001213.031:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.367199][T11932] overlayfs: failed to clone upperpath
[  430.398446][   T29] audit: type=1326 audit(1718001213.031:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.454176][   T29] audit: type=1326 audit(1718001213.091:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8bc7cf69 code=0x7ffc0000
[  430.517851][   T29] audit: type=1326 audit(1718001213.141:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8bc7a6e7 code=0x7ffc0000
[  430.542604][   T29] audit: type=1326 audit(1718001213.141:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd8bc403b9 code=0x7ffc0000
[  430.565720][   T29] audit: type=1326 audit(1718001213.141:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8bc7a6e7 code=0x7ffc0000
[  431.063657][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  431.082379][    T9] lo speed is unknown, defaulting to 1000
[  431.593314][T11951] loop3: detected capacity change from 0 to 47
[  431.621812][T11951] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3.
[  431.680683][T11826] chnl_net:caif_netlink_parms(): no params data found
[  431.858619][T11962] loop5: detected capacity change from 0 to 512
[  431.972300][T11962] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  432.072868][T11962] UDF-fs: Scanning with blocksize 512 failed
[  432.112688][T11962] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  432.132362][T11962] UDF-fs: Scanning with blocksize 1024 failed
[  432.182512][T11970] loop0: detected capacity change from 0 to 256
[  432.190846][T11962] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  432.203152][T11962] UDF-fs: Scanning with blocksize 2048 failed
[  432.234101][T11962] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  432.263068][T11970] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  432.292301][T11826] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.299735][T11826] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.307834][T11962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.318311][T11826] bridge_slave_0: entered allmulticast mode
[  432.377207][T11826] bridge_slave_0: entered promiscuous mode
[  432.419298][T11826] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.456520][T11826] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.479796][T11826] bridge_slave_1: entered allmulticast mode
[  432.559081][T11826] bridge_slave_1: entered promiscuous mode
[  433.130474][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  433.330737][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.430699][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.575996][T11826] team0: Port device team_slave_0 added
[  433.811211][T11998] loop5: detected capacity change from 0 to 256
[  433.877689][T11826] team0: Port device team_slave_1 added
[  434.077459][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.095696][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.267879][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.300994][T12011] loop0: detected capacity change from 0 to 256
[  434.341840][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.379868][T12011] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  434.384354][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.422975][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.438996][T11826] hsr_slave_0: entered promiscuous mode
[  435.495561][T11826] hsr_slave_1: entered promiscuous mode
[  435.532843][T11826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  435.540451][T11826] Cannot create hsr debugfs directory
[  436.076923][T12035] loop0: detected capacity change from 0 to 512
[  436.132516][T12035] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  436.218413][T12035] EXT4-fs (loop0): 1 truncate cleaned up
[  436.225765][T12035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.358416][T11405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.376081][T12018] loop1: detected capacity change from 0 to 40427
[  436.432143][T12018] F2FS-fs (loop1): invalid crc value
[  436.443750][T12018] F2FS-fs (loop1): Found nat_bits in checkpoint
[  436.458188][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  436.588736][T12047] loop0: detected capacity change from 0 to 256
[  436.641868][T12049] loop5: detected capacity change from 0 to 256
[  436.654206][T12018] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  436.698822][T12049] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  436.744013][T12018] syz-executor.1: attempt to access beyond end of device
[  436.744013][T12018] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  436.993134][ T7319] syz-executor.1: attempt to access beyond end of device
[  436.993134][ T7319] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  437.018112][T12026] loop3: detected capacity change from 0 to 32768
[  437.026280][ T7319] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  437.095831][T11826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  437.145567][T11826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  437.200576][T11826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  437.246005][T11826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  437.370138][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  437.691728][T11826] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.787451][T11826] 8021q: adding VLAN 0 to HW filter on device team0
[  437.840952][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.848646][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.921848][T12071] MTD: Attempt to mount non-MTD device "/dev/nbd5"
[  437.944689][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.951845][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.972761][T12071] cramfs: wrong magic
[  438.126848][T11826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.393446][T12084] loop0: detected capacity change from 0 to 16
[  438.428613][T12084] erofs: (device loop0): mounted with root inode @ nid 36.
[  438.457758][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  438.457778][   T29] audit: type=1800 audit(1718001221.481:5159): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  438.572641][   T29] audit: type=1800 audit(1718001221.491:5160): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  438.593529][    C0] vkms_vblank_simulate: vblank timer overrun
[  438.864931][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.273680][T12112] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  439.448347][T12118] sctp: [Deprecated]: syz-executor.2 (pid 12118) Use of struct sctp_assoc_value in delayed_ack socket option.
[  439.448347][T12118] Use struct sctp_sack_info instead
[  439.615634][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  439.622840][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  439.779308][T12125] syz-executor.0: attempt to access beyond end of device
[  439.779308][T12125] loop0: rw=0, sector=792, nr_sectors = 16 limit=16
[  440.060899][T11826] veth0_vlan: entered promiscuous mode
[  440.089777][T12125] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36
[  440.222898][T11826] veth1_vlan: entered promiscuous mode
[  440.366642][T11826] veth0_macvtap: entered promiscuous mode
[  440.439549][T11826] veth1_macvtap: entered promiscuous mode
[  440.531867][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.563754][T12138] nsfs: Unknown parameter 'fd'
[  440.564751][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.600673][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.629825][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.667274][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.804451][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.822105][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.837302][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.862699][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.882466][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.905494][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.924362][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.949305][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.043942][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.084079][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.114584][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.137155][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.157208][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.172477][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  441.185273][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.200651][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.219582][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.231855][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.252184][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.271912][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.284148][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.305322][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.319566][T11826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.328815][T11826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.350404][T11826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.375248][T11826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.406918][T12145] pim6reg1: entered promiscuous mode
[  441.412525][T12145] pim6reg1: entered allmulticast mode
[  441.721526][T12162] loop3: detected capacity change from 0 to 256
[  441.800090][T12162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d)
[  441.922630][ T2473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.930482][ T2473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.103125][ T2473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.122036][ T2473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.333354][T12188] loop5: detected capacity change from 0 to 64
[  442.430147][T12192] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  442.743349][T12205] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'.
[  442.817088][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  442.898380][T12205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.256380][T12231] loop0: detected capacity change from 0 to 512
[  443.334971][T12231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.412677][T12231] ext4 filesystem being mounted at /root/syzkaller-testdir2620748938/syzkaller.Cz1ow4/24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  443.683532][T12243] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  443.718080][T11405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.188159][T12281] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  444.254872][T12281] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  444.289426][T12283] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  444.345532][T12281] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  444.345942][T12289] loop4: detected capacity change from 0 to 512
[  444.386207][T12281] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  444.613967][T12289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.675312][T12289] ext4 filesystem being mounted at /root/syzkaller-testdir2044074848/syzkaller.yF2ah2/5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  445.020915][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.035981][T12305] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  445.965341][T12337] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  446.004560][T12337] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  446.041646][T12337] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  446.044005][T12336] sctp: [Deprecated]: syz-executor.2 (pid 12336) Use of struct sctp_assoc_value in delayed_ack socket option.
[  446.044005][T12336] Use struct sctp_sack_info instead
[  446.063691][T12337] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  446.154316][T12344] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[  446.225725][T12343] pim6reg1: entered promiscuous mode
[  446.254428][T12343] pim6reg1: entered allmulticast mode
[  446.512235][T12358] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  446.531382][T12358] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  446.813154][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  446.868911][T12372] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  446.973796][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.978151][T12375] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  447.330150][T12394] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  447.345026][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  447.543608][T12400] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  447.572957][T12388] loop4: detected capacity change from 0 to 4096
[  447.590278][T12400] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  447.616386][T12388] ntfs3: Bad value for 'umask'
[  449.284765][T12444] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  449.316969][T12451] loop1: detected capacity change from 0 to 256
[  449.323252][T12444] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  449.365139][T12451] FAT-fs (loop1): Unrecognized mount option "check=relaXed" or missing value
[  449.387406][T12452] sctp: [Deprecated]: syz-executor.3 (pid 12452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.387406][T12452] Use struct sctp_sack_info instead
[  449.417068][T12454] loop5: detected capacity change from 0 to 2048
[  449.428208][T12454] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  449.455789][T12454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  449.496860][T12458] validate_nla: 1 callbacks suppressed
[  449.496880][T12458] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  449.518083][T12458] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  449.538240][T12458] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  449.547856][T12458] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  449.557165][T12458] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  449.639209][T12461] loop4: detected capacity change from 0 to 512
[  449.705237][T12461] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  449.812180][T12461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002]
[  449.820296][T12461] System zones: 1-12
[  450.499179][T12472] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  450.512704][T12461] EXT4-fs (loop4): orphan cleanup on readonly fs
[  450.598064][T12461] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set
[  450.615318][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  450.772462][T12461] EXT4-fs (loop4): Remounting filesystem read-only
[  450.799229][T12461] EXT4-fs (loop4): 1 truncate cleaned up
[  450.836693][T12461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  450.894413][T12481] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  450.895695][T12460] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.010058][T12461] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.041190][T12460] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.087767][T12485] netlink: 658 bytes leftover after parsing attributes in process `syz-executor.2'.
[  451.130229][T12486] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.189418][T12460] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.249647][T12461] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.317172][T12486] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.344698][T12492] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  451.381617][T12492] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  451.387701][T12460] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.421512][T12494] loop1: detected capacity change from 0 to 512
[  451.468227][T12460] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  451.497364][T12494] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  451.522957][T12494] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117)
[  451.553413][T12494] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.702457][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  451.919837][ T7319] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  452.080809][T12463] loop3: detected capacity change from 0 to 32768
[  452.230239][T12463] overlayfs: upper fs needs to support d_type.
[  452.264115][T12463] overlayfs: upper fs does not support tmpfile.
[  452.317254][T12463] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  452.507440][T12527] loop4: detected capacity change from 0 to 512
[  452.544701][T12529] loop1: detected capacity change from 0 to 512
[  452.556487][T12527] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  452.642921][T12527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002]
[  452.651008][T12527] System zones: 1-12
[  452.653623][T12529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.668450][T12527] EXT4-fs (loop4): orphan cleanup on readonly fs
[  452.700301][T12527] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set
[  452.742777][T12539] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[  452.753404][T12529] ext4 filesystem being mounted at /root/syzkaller-testdir476312163/syzkaller.RIJeEb/359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.781233][T12527] EXT4-fs (loop4): Remounting filesystem read-only
[  452.803745][T12527] EXT4-fs (loop4): 1 truncate cleaned up
[  452.832136][T12527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  452.900769][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  452.966050][T12544] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.030908][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.103932][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.134640][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.152379][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.168121][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.218259][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.266484][T12527] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  453.337183][ T7319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.351207][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  453.745124][T12555] loop1: detected capacity change from 0 to 16
[  453.756648][T12555] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  455.043044][T12568] loop4: detected capacity change from 0 to 64
[  455.067722][T12568] hfs: request for non-existent node 293 in B*Tree
[  455.078245][T12568] hfs: request for non-existent node 293 in B*Tree
[  455.086036][T12568] hfs: get root inode failed
[  458.108229][T12571] xt_CT: You must specify a L4 protocol and not use inversions on it
[  458.466635][T12579] loop4: detected capacity change from 0 to 512
[  458.489328][T12579] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  458.504003][T12579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002]
[  458.514617][T12579] System zones: 1-12
[  458.518922][T12579] EXT4-fs (loop4): orphan cleanup on readonly fs
[  458.534101][T12579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set
[  458.562346][T12579] EXT4-fs (loop4): Remounting filesystem read-only
[  458.569189][T12579] EXT4-fs (loop4): 1 truncate cleaned up
[  458.578437][T12579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  458.600132][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.615304][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.632095][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.650269][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.665347][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.681191][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.695426][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.710080][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.725933][T12579] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  458.765744][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  459.033117][T12584] loop4: detected capacity change from 0 to 512
[  459.041865][T12584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  459.090345][T12584] EXT4-fs (loop4): 1 truncate cleaned up
[  459.097705][T12584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.159145][T12584] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value 
[  459.180385][T12584] EXT4-fs (loop4): Remounting filesystem read-only
[  459.199563][T12584] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off
[  459.282343][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.691200][T12593] loop4: detected capacity change from 0 to 2048
[  459.704006][T12593] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  459.736300][T12594] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  459.747939][T12593] syz-executor.4: attempt to access beyond end of device
[  459.747939][T12593] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  461.743068][T12603] loop4: detected capacity change from 0 to 2048
[  461.774547][T12603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  478.507633][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  478.518217][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  478.527726][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  478.536142][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  478.546697][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  478.557752][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  480.652151][   T53] Bluetooth: hci3: command tx timeout
[  482.732404][   T53] Bluetooth: hci3: command tx timeout
[  483.188240][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  483.198755][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  483.208124][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  483.216948][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  483.258737][ T5135] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  483.267691][ T5135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  483.278445][T12614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  483.291570][ T5135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  483.301263][   T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  483.316205][   T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  483.342592][ T5135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  483.350092][ T5135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  483.683011][ T5120] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  483.693839][ T5120] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  483.701783][ T5120] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  483.711495][ T5120] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  483.720173][ T5120] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  483.728452][ T5120] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  484.638813][ T5120] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  484.656221][ T5120] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  484.666386][ T5120] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  484.694774][ T5120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  484.707229][ T5120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  484.714753][ T5120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  484.812444][ T5120] Bluetooth: hci3: command tx timeout
[  485.382438][ T5120] Bluetooth: hci7: command tx timeout
[  485.390209][ T5120] Bluetooth: hci6: command tx timeout
[  485.782768][ T5120] Bluetooth: hci8: command tx timeout
[  486.812291][ T5120] Bluetooth: hci9: command tx timeout
[  486.892084][ T5120] Bluetooth: hci3: command tx timeout
[  487.452322][ T5135] Bluetooth: hci7: command tx timeout
[  487.458561][ T5120] Bluetooth: hci6: command tx timeout
[  487.852203][ T5120] Bluetooth: hci8: command tx timeout
[  488.902191][ T5120] Bluetooth: hci9: command tx timeout
[  489.536732][ T5120] Bluetooth: hci6: command tx timeout
[  489.536750][ T5135] Bluetooth: hci7: command tx timeout
[  489.932142][ T5135] Bluetooth: hci8: command tx timeout
[  490.978137][ T5135] Bluetooth: hci9: command tx timeout
[  491.612252][ T5135] Bluetooth: hci7: command tx timeout
[  491.612519][ T5120] Bluetooth: hci6: command tx timeout
[  492.019612][ T5120] Bluetooth: hci8: command tx timeout
[  492.187841][ T5135] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  492.199795][ T5135] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  492.213467][ T5135] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  492.241506][ T5135] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  492.249660][ T5135] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  492.257379][ T5135] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  493.052052][ T5120] Bluetooth: hci9: command tx timeout
[  494.332392][ T5120] Bluetooth: hci10: command tx timeout
[  496.422198][ T5120] Bluetooth: hci10: command tx timeout
[  498.492347][ T5120] Bluetooth: hci10: command tx timeout
[  500.572026][ T5120] Bluetooth: hci10: command tx timeout
[  501.055706][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  501.062228][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  518.502290][ T5120] Bluetooth: hci1: command 0x0406 tx timeout
[  544.054048][ T5120] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  544.064976][ T5120] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  544.075886][ T5120] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  544.084462][ T5120] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  544.108538][ T5120] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  544.116086][ T5120] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  546.172471][ T5135] Bluetooth: hci11: command tx timeout
[  548.140720][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  548.161774][ T5120] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  548.174299][ T5120] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  548.202732][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  548.222179][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  548.230024][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  548.265987][ T5135] Bluetooth: hci11: command tx timeout
[  548.282108][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  548.295202][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  548.306107][ T5120] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  548.317650][ T5120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  548.325633][ T5120] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  548.333172][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  548.659445][ T5120] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  548.669195][ T5120] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  548.719472][ T5120] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  548.727883][ T5120] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  548.736972][ T5120] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  548.744862][ T5120] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  549.607695][ T5120] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  549.624504][ T5120] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  549.638042][ T5120] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  549.646651][ T5120] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  549.669174][ T5120] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  549.676780][ T5120] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  550.342659][ T5120] Bluetooth: hci11: command tx timeout
[  550.342916][ T5135] Bluetooth: hci12: command tx timeout
[  550.412356][ T5135] Bluetooth: hci13: command tx timeout
[  550.820022][ T5135] Bluetooth: hci14: command tx timeout
[  551.772398][ T5135] Bluetooth: hci15: command tx timeout
[  552.412189][ T5135] Bluetooth: hci12: command tx timeout
[  552.427227][ T5135] Bluetooth: hci11: command tx timeout
[  552.492086][ T5135] Bluetooth: hci13: command tx timeout
[  552.892643][ T5135] Bluetooth: hci14: command tx timeout
[  553.852348][ T5135] Bluetooth: hci15: command tx timeout
[  554.492170][ T5135] Bluetooth: hci12: command tx timeout
[  554.572449][ T5135] Bluetooth: hci13: command tx timeout
[  554.972190][ T5135] Bluetooth: hci14: command tx timeout
[  555.938007][ T5135] Bluetooth: hci15: command tx timeout
[  556.572509][ T5135] Bluetooth: hci12: command tx timeout
[  556.653992][ T5135] Bluetooth: hci13: command tx timeout
[  557.053173][ T5135] Bluetooth: hci14: command tx timeout
[  557.159507][ T5120] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  557.171752][ T5120] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  557.196247][ T5120] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  557.213445][ T5120] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  557.221431][ T5120] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  557.232242][ T5120] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  558.012699][ T5120] Bluetooth: hci15: command tx timeout
[  559.292864][ T5120] Bluetooth: hci16: command tx timeout
[  561.373796][ T5120] Bluetooth: hci16: command tx timeout
[  562.495927][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  562.514987][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  563.452529][ T5120] Bluetooth: hci16: command tx timeout
[  564.581656][ T5120] Bluetooth: hci4: command 0x0406 tx timeout
[  565.532300][ T5135] Bluetooth: hci16: command tx timeout
[  602.812172][   T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds.
[  602.819719][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  602.837694][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  602.849745][   T30] task:kworker/0:1     state:D stack:20816 pid:9     tgid:9     ppid:2      flags:0x00004000
[  602.866605][   T30] Workqueue: events ovs_dp_masks_rebalance
2024/06/10 06:36:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  602.921973][   T30] Call Trace:
[  602.925338][   T30]  <TASK>
[  602.928285][   T30]  __schedule+0x17e8/0x4a20
[  602.944108][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.949846][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.971977][   T30]  ? __pfx___schedule+0x10/0x10
[  602.976930][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.001933][   T30]  ? __pfx_lock_release+0x10/0x10
[  603.007038][   T30]  ? kick_pool+0x45c/0x620
[  603.011491][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.031998][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.037713][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  603.053272][   T30]  ? schedule+0x90/0x320
[  603.059195][   T30]  schedule+0x14b/0x320
[  603.071991][   T30]  schedule_preempt_disabled+0x13/0x30
[  603.077518][   T30]  __mutex_lock+0x6a4/0xd70
[  603.091940][   T30]  ? __mutex_lock+0x527/0xd70
[  603.096673][   T30]  ? ovs_dp_masks_rebalance+0x2f/0xe0
[  603.122126][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  603.127231][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.141933][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  603.148328][   T30]  ovs_dp_masks_rebalance+0x2f/0xe0
[  603.174455][   T30]  ? process_scheduled_works+0x945/0x1830
[  603.180278][   T30]  process_scheduled_works+0xa2e/0x1830
[  603.201977][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  603.208063][   T30]  ? assign_work+0x364/0x3d0
[  603.221964][   T30]  worker_thread+0x86d/0xd70
[  603.226666][   T30]  ? __kthread_parkme+0x169/0x1d0
[  603.231726][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.251993][   T30]  kthread+0x2f2/0x390
[  603.256146][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.272013][   T30]  ? __pfx_kthread+0x10/0x10
[  603.276704][   T30]  ret_from_fork+0x4d/0x80
[  603.281242][   T30]  ? __pfx_kthread+0x10/0x10
[  603.301959][   T30]  ret_from_fork_asm+0x1a/0x30
[  603.306874][   T30]  </TASK>
[  603.322206][   T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds.
[  603.329820][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  603.352018][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  603.360745][   T30] task:kworker/1:0     state:D stack:19856 pid:25    tgid:25    ppid:2      flags:0x00004000
[  603.391994][   T30] Workqueue: events ovs_dp_masks_rebalance
[  603.397893][   T30] Call Trace:
[  603.401186][   T30]  <TASK>
[  603.421989][   T30]  __schedule+0x17e8/0x4a20
[  603.426595][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.441975][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.447682][   T30]  ? __pfx___schedule+0x10/0x10
[  603.502131][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.508201][   T30]  ? __pfx_lock_release+0x10/0x10
[  603.522324][   T30]  ? kick_pool+0x1bd/0x620
[  603.526806][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.561934][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.567656][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  603.609762][   T30]  ? schedule+0x90/0x320
[  603.614242][   T30]  schedule+0x14b/0x320
[  603.618443][   T30]  schedule_preempt_disabled+0x13/0x30
[  603.644849][   T30]  __mutex_lock+0x6a4/0xd70
[  603.649514][   T30]  ? __mutex_lock+0x527/0xd70
[