last executing test programs: 6.850053899s ago: executing program 5 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10694, &(0x7f00000004c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) 4.630416968s ago: executing program 2 (id=124): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000, 0x800000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x5, 0x0, 0x3, 0x6a9, 0x20000}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 4.193105314s ago: executing program 1 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x118, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe2, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x17, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d2"}]}}}}}}, 0x0) 3.745918467s ago: executing program 5 (id=129): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 3.737967382s ago: executing program 1 (id=130): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01", 0x1, 0x2a25}]) 3.597556082s ago: executing program 4 (id=131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='vegas', 0x55) sendto$inet6(r0, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffd, @empty, 0xfffffffd}, 0x1c) 3.405724181s ago: executing program 1 (id=134): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 3.325367355s ago: executing program 2 (id=135): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffff51, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.239900465s ago: executing program 4 (id=136): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") gettid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x7}, {0x2, 0x4}]}, 0x34, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 2.994657641s ago: executing program 2 (id=138): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.920483292s ago: executing program 5 (id=141): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x6bd7, 0xfffa, 0x6, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.469417416s ago: executing program 2 (id=142): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x810000, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@uid_forget}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@nostrict}]}, 0xfe, 0xc32, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x1, 0xd61, "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", 0xf8, 0xed, 0xee, 0x1, 0xe, 0x3, 0x3}}}, 0x120) 2.402507658s ago: executing program 3 (id=144): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 2.279312167s ago: executing program 5 (id=145): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e2400001400050000000000000000000000000000000001080002"], 0x1f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.060866416s ago: executing program 4 (id=146): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) 2.038390263s ago: executing program 3 (id=147): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) 1.980178221s ago: executing program 0 (id=148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1e0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xf8, 0x1, [@m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x0, 0x3, 0x4, 0x1}}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xd4, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xa4, 0xd, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x20000000, 0x9, 0xf970a43}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1273, 0x20000000}}]}, {0x16, 0x6, "f138b42c4edb552afebd27b44c8ea514f2ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.969591721s ago: executing program 1 (id=149): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='\v', 0x1, 0x0, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.742387966s ago: executing program 5 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048c5}, 0x80) 1.660872792s ago: executing program 2 (id=151): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="24002d80080003002600000005000100050000000800020003000000050004"], 0x40}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) 1.494807374s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x10001d}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) 1.398364389s ago: executing program 5 (id=155): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@quota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@uid}]}, 0x1, 0x61fd, &(0x7f000000c900)="$eJzs3c9vHGf9B/DP7C//6Let1UPVb4SQ24YfpTQ/SwgUaIoEBy4cUK4oketWESmgJKC0iogrXzjwR4CQOCLEkRN/QA9cufEHECkBgXrqoLGfxxlP11477u6sPa+X5Mx85pnJPpP3jnc3M7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxg+//6HwREdd+mRasRPxf9CN6EUtVvRoRS6sref1BRLwQW83xfEQMFyKq7bf+eDbi9Yj46JmIh4/urVWLLxywH9/7099//+Onfvi3Pw7P/vfPd/pv7LXe3bu/+c9f7h9tnwEAAKBryrIsi/Qx/1T6fN9ru1MAwEzk1/8yycvVc1dvzFl/1Gq1Wn0M67pyvPv1IiI26ttU7xmcjgeAY2YjPm67C7RI/p02iIin2u4EMNeKtjvAVDx8dG+tSPkW9deD1e32fC3Irvw3ip37O/aaTtK8xmRWz6/N6Mdze/RnaUZ9mCc5/14z/2vb7aO03rTzn5W98h9t3/rUOTn/fjP/hpOTf29s/l2V8x8cKv++/AEAAAAAYI7l//9fafn878LRd+VA9jv/uzqjPgAAAAAAAADAZ+2o4//tMP4fAAAAzK3qs3rlt888XrbXd7FVy68WEU831gc6Jt0ss9x2PwAAAAAAAAAAAACgSwbb1/BeLSKGEfH08nJZltVPXbM+rKNuf9x1ff+hy9r+JQ8AANs+eqZxL38RsRgRV9N3/Q2Xl5fLcnFpuVwulxby+9nRwmK5VPtcm6fVsoXRAd4QD0Zl9Zct1rarm/R5eVJ78++rHmtU9g/QsdloMXAAiIjtV6OHXpFOmLJ8Ntp+l8Px4Pg/eRz/HETbz1MAAABg+sqyLIv0dd6n0jn/XtudAgBmIr/+N88LHOe6qC2bh/6o1Wq1Wj0vdV053v16EREb9W2q9wyG4weAY2YjPm67C7ToSfL/7uZUusLsDSLihbY7Acy1ou0OMBUPH91bK1K+Rf31II3vnq8F2ZX/RrG1Xd5+3HSS5jUms3p+bUY/ntujP8/PqA/zJOffa+Z/bbt9lNabdv6zslf+1X6utNCftuX8+838G05O/r2x+XdVzn9wqPz78gcAAAAAgDmW//9/Za7O/46edHcm2u/87+rUHhUAAAAAAAAApuvho3tr+b7XfP7/c2PWc//nyZTzL+TfSTn/XiP/LzfW69fmH7z1OP9/Pbq39oc7//z/PD1o/gt5pkjPrCI9I4r0SMUgTY+yd5+2OeyPqkcaFr3+IF3zUw7fiRtxM9bj3K51e+nf43H7+V3tVU+HW+1lf7v9wq72wU573v7irvZhutKpXMrtZ2ItfhY34+2t9qptYcL+L05oLye05/z78e+dPjv+uyPnP6j9VPkvp/aiMa08+LD3qeO+Ph33OFdufP7X56a/OxNtRn9n3+qq/Xuphf5s/Zs8NYpf3F6/debu9Tt3bp2PNNm19EKkyWcs5z9MPzu//1/ebs+/9+vH64MPR4fOf15sxmDP/F+uzVf7+8qM+9aGnP8o/eT8307t44//Y5l/9fTe9/h/dfZ9AgAAAAAAAAAAAAAAgH2VZbl1i+iViLiU7v9p695MAGC2rqSv3CiTvHxWdX/Gj6dWH/O6mLP+zLT+pJyv/qjVx7GuK8d7s15ExF/r21yKiF+N+8sAgHn2SUT8o+1O0Br5d1j+vr9qerrtzgAzdfv9D35y/ebN9Vu32+4JAAAAAAAAAPCk8vifq7Xxv0+XZXm/sd6u8V/fitWjjv85yDM7A4zuMVB1//D7tJ/N3qjfqw03/mLsNf73cGduv/G/B80HaHx5wnBCf0YT2hcmtC9OaB97o0dNzv/F2njnpyPiVGP49RMw/uuW/cZ/bY553wU5/5dqz+cq/y811qvnX/7uOOff25X/2Tvv/fzs7fc/eO3Ge9ffXX93/acXz58/d/HSpcuXL59958bN9XPbf7bY4+nK+eexr10H2i05/5y5/Lsl5/+FVMu/W3L+X0y1/Lsl55/f78m/W3L++bOP/Lsl5/9KquXfLTn/r6Ra/t2S83811fLvlpz/V1Mt/27J+b+Wavl3S87/TKrl3y05/7OpPmD+S9PuF7OR889nuBz/3ZLzz1c2yL9bcv4XUi3/bsn5X0y1/Lsl5/96quXfLTn/r6Va/t2S87+Uavl3S87/66mWf7fk/C+nWv7dkvP/Rqrl3y05/2+m+lD5r0yvX8xGzv+NVDv+uyXn/61Uy79bcv7fTrX8uyXn/51Uy79bcv5vplr+3fL4+//NmDFjJs+0/ZsJAAAAAAAAAAAAAGiaxeXEbe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkeuu7wB+9uq1czMQUic1sHaMMc4mu77EF1oXE25pwqW5UdLS2K537Sz4Fq9dkjSSHQVKJIwaVbQND20BRW1eKqwqD7QKKA+oVaVKpH2gLygVKg9RFVCCVKmtQraaM///f2dmZ2d2veP1zDmfjxT/vDNn5pw5c+bsftf5zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQa8OHp77Sl2VZ5b/8j7VZdnXl76tH1+aXfeBKbyEAAACwXL/M/3z9unTB/kXcqGaZf3r3D1+YnZ2dzT478KdDX5+dTVeMZtnQqizLr4su/uTBvtplgqeykb7+mq/726x+oM31g22uH2pz/XCb61e1uX6kyWWra/4+bwc0Wbov3dmm/K9rq7s0uz4byq/b1ORWT/Wt6u+Pv8vJ9eW3mR06kk1nx7KpbKJu+eqyffnyL26orOvOLK6rv2Zd6ytHyBtPHI7b0Bf28aa6dc3dZ/SzD2Wjv3jjicN/fea1G5vNtruh7v6q27llY2U7vxQuqW5rX7Yq7ZO4nf0127m+yXMyULedffntKn9v3M7XF7mdA3ObuaIan/ORrD//+8v5fhqs/bVe2k/rw2X/c3OWZefnNrtxmXnryvqzNXWX9M89PyPVI7JyH5VD6e3Z4JKO0w2LOE4rc3JT/XHa+JqIz/+GcLvBBbah9mn62ZPDNc/7m7OXcpxGlUe90Gul8Rjs9GulW47BeFy8nD/op5seg5vC439i88LHYNNjp8kxmB53zTG4sd0x2D88kG9zehL68tvMHYPb6pYfyNfUl89XN7c+BsfPHD81PvPY47dOHz90dOro1Ikd27ZN7Ni1a8+ePeNHpo9NTVT/vMS93f3WZP3pNbAx7Lv4Gnhfw7K1h+rst4bnnX8v9XU40uJ1uLZh2U6/DgcbH1zfyrwg5x/T1dfG/ZWdPnKhP1vgNZY/P1uX/zpMj7vmdThY8zps+j2lyetwcBGvw8oyp7Yu7meWwZr/mm3Dwt8LlncMrq05Bht/Hmk8Bjv980i3HIMj4bj48daFvxesD9v79NhSfx4ZmHcMpocbzj2VS9LP+yN78tHsuLypcsVVw9nZmanTtz166MyZ09uyMFbEO2qOlcbjdU3NY8rmHa/9Sz5e90+/++mbmly+NuyrkVsrf4ws+FxVltl5W+vnKv/u1nx/1l26PQujw1Z6fzb7bl7Zn8NZ9o0fPHnv9574xocX3J+VvPml8eX/LJ5yac35d2iB82/M/W9V15fu6qmBocHq63cg7Z2huvNx/VM1mJ+7+vJ1vz6+uPPxUPhvpc/H17c4H69rWLbT5+OhxgcXz8d97X7bsTyNz+dIOE6OTbQ+H1eWWbd9qcfkYMvz8c1h9oX9//6QFFIuqjl2Fjpu07oGB4fC4xqMa6g/TnfULT8UslllXc9vv7TjdMvN1fsaSI9uzkodp6MNy3b6OE2/+1roOO1r99u3S9P4fI6E4+L6Ha2P08oyL+1c/rkz/X6u5tw53O4YHBoYrmzzUDoI8/N9Nrs6HoO3ZYezk9mxbDK/djg/nvrydY3dvrhjcDj8t9LnynUtjsEtDct2+hhM38cWOvb6Buc/+A5ofD5HwnHx7O2tj8HKMh/Z3dmfXbeES9IyNT+7Nv5+baHfed3UsJsu17EyGLbzB7tb/262ssyxPUvNma330y3hkqua7KfG1+9Cr6nJbGX207qwna/tWXg/VbansszX9y7yeNqfZdm5R+7If98b/n3l787+6IW6f3dp9m865x654+fXHPnHpWw/AL3vrepYU/1eV/MvU4v5938AAACgJ8Tc3x9mIv8DAABAYcTcH/+v8ET+BwAAgMKIuX8wzKQk+X/dR16bfutclpr5s0G8Pu2Gu6rLxY7rRPh6dHZO5fI7npv67384t7h192dZ9uZdf9h0+XV3xe2qGg3befGj9ZfP88Kti1r3wQfOpfXW9te/Ge4/Pp7FHgbNKrgTWZa9eN3X8vWMPnghny/ddTCf955/+qnKMq/vrX4db//qO6rL/0Uo/+4/cqju9q+G/fDTMCfubr4/4u2+c+H963d/Zm598XZ9G6/NH/azD1XvN75PzjNPVZeP+3mh7f/eV5//TmX5R9/bfPvP9Tff/ufD/T4X5v++q7p87XNQ+Tre7sth++P64u1u+/b3m27/xa9Ulz/1sepyB8OM698Svt70sdema/fXo32H6h5X9vHqcnH9Ez/64/z6eH/x/hu3f+TAhbr90Xh8vPRv1fsZb1g+Xh7XE/19w/or91N7fMb1P/9HB+v2c7v1X7z31XdV7rdx/bc0LHfqka35+ufur/4dm/7yy19rur64Pfv/9lTd49l/T3gdh/U/+1A4HsP1/3exen+N765w8J76809c/ptrz9U9nujOX1TXf/GDR/O5amT1mquuvuba8++p7Lsse3lV9f7arf/oX52s2/5v3VDdH/H62NFvXP9C4vpPf3HsxMmZs9OTaa8+cV3+3jmfqG5P3N7rwrm18esDJ888PHV6dGJ0IstGi/sWepfs22H+vDrOt156dt4ZdOsD4fm86c9fXLP5X78aL//3+6uXX7i7+n3rfWG5Z8Lla8Pzt7T1z/fshhvy13ffS2ELZ+e/X/ByrN/0X3sWtWB4/I0/F8Tj/dQ7H873Q+W6/PtGfF0vc/tfmazez3fDfp0N78y88Ya59dUuH98b4cJ91df7svdfOM3F5/VvwvP9yZ9W7z9uV3y8r4SfY76/rv58F4+P757rb7z//F08zofzSXa+en1cKu7vC6/f0HTz4vuQZOdvzL/+k3Q/Ny7pYS5k5rGZ8WPTJ84+On5maubM+Mxjjx84fvLsiTMH8vfyPPD5drefOz+tyc9Pk1O7dmb52epkdVxmV3r7Tz1weHL3xObJqSOHzh4588CpqdNHD8/MHJ6anNl86MiRqS+2u/305L5t2/fu2L197Oj05L49e/fu2Ds2feJkZTOqG9XGrokvjJ04fSC/ycy+nXu33X77zomx4ycnp/btnpgYO9vu9vn3prHKrf9g7PTUsUNnpo9Pjc1MPz61b9veXbu2t303wOOnjsyMjp8+e2L87MzU6fHqYxk9k19c+d7X7vYU08x/VH+ebdRXfSO+7NO37Ervz1rx3JML3lV1kYY3EH0tvBfNP7/t1J7FfB1z/1CYSUnyPwAAAJRBzP3DYSbyPwAAABRGzP2rwkzkfwAAACiMmPtHwkxKkv8L1/9fd25R69f/1/+v3V/6/yXr/9/Xbf3/6vlC/78zltu/1/8P9P/1//X/9f/1/+mAbuv/x9y/OsuWlv/721wPAAAAdI2Y+9eEmZTk3/8BAACgDGLuvyrMRP4HAACAwoi5/+owk5Lkf/1//X/9f/1//f/m69f/7036/63p/7eh/z+eNfTnX8myrMD9//Od3H79f/1/5uu2/n/M/deEmZQk/wMAAEAZxNx/bZiJ/A8AAACFEXP/dWEm8j8AAAD0ptXzL4q5f22YSUnyv/6//r/+v/6//n/z9ev/9yb9/9b0/9vQ//f5//r/+v90VLf1/2Puf1uYSUnyPwAAAJRBzP1vDzOR/wEAAKD7DF7azWLuf0eYybz8f4krAAAAAK64mPuvzxqK4CX593/9f/1//X/9f/3/5utffP9/INP/7x76/63p/7eh/6//r/+v/09HdVv/P8/92Uj2zjCTkuR/AAAAKIOY+28IM5H/AQAAoLuNLH7RmPt/pfGG8j8AAAAURsz968JMSpL/9f/1//X/9f/1/5uv3+f/9yb9/9b0/9votv5/wxGk/9/d26//r//PfN3W/4+5/8Ywk5LkfwAAACiDmPtvCjOR/wEAAKAwYu7/1TAT+R8AAAAKI+b+9WEmJcn/+v9d3v+PvT/9f/1//X/9f/3/RdH/b03/v41u6/830P/v7u3X/9f/Z75u6//H3P+uMJOS5H8AAAAog5j73x1mIv8DAABAYcTc/54wE/kfAAAACiPm/tEwk5Lkf/3/Lu//+/x//X/9f/1//f8l0f9vTf+/Df1//X/9f/1/Oqrb+v8x928IMylJ/gcAAIAyiLl/Y5iJ/A8AAACFEXP/zWEm8j8AAAAURsz9m8JMSpL/9f/1//X/9f/1/5uvX/+/N+n/t7aY/n9+TtP/1//X/9f/1/+nA7qt/x9z/3vDTEqS/wEAAKAMYu7fHGYi/wMAAEBhxNz/vjAT+R8AAAAKI+b+LWEmJcn/+v/6/2Xt/6+qWaf+v/5/s/Xr//cm/f/WfP5/G/r/+v/6//r/dFS39f9j7n9/mElJ8j8AAACUQcz9W8NM5H8AAAAojJj7bwkzkf8BAACgMGLuHwszKUn+vzL9/zfyP/X/9f99/r/+v/6//n+nlaH//7ml3mkN/f829P/1//X/9f/pqG7r/8fcf2uYSUnyPwAAAJRBzP23hZnI/wAAAFAYMfePh5nI/wAAAFAYMfdPhJmUJP/7/H/9f/1//f8l9f/fM3e/+v9V+v/dpQz9/+XQ/29D/1///4r3/4f0/ymUbuv/x9y/LcykJPkfAAAAyiDm/u1hJvI/AAAAFEbM/TvCTOR/AAAAKIyY+3eGmZQk/+v/6//r/+v/+/z/5uvX/+9N+v+tdb7/Hx+i/r/+v/6/z//X/2e+buv/x9x/e5hJSfI/AAAAlEHM/bvCTOR/AAAAKIyY+3eHmcj/AAAAUBgx9+8JMylJ/tf/70D/f7D5xfr/+v+R/n84HvT/9f9XgP5/az7/vw39f/1//X/9fzqq2/r/MffvDTMpSf4HAACAMoi5/wNhJvI/AAAAFEbM/b8WZiL/AwAAQGHE3P/rYSYlyf/6/z7/X/9f//8K9P9HMv1//f/LRP+/Nf3/NvT/9f/1//X/6ahu6//H3L8vzKQk+R8AAADKIOb+3wgzkf8BAACgMGLu/2CYifwPAAAAhRFz//4wk5Lkf/1//X/9f/1/n//ffP36/71J/781/f829P/1//X/9f/pqG7r/8fc/6Ewk5LkfwAAACiDmPvvCDOR/wEAAKAwYu7/cJiJ/A8AAACFEXP/R8JMSpL/9f/1//X/9f/1/5uvX/+/N+n/t6b/34b+v/6//r/+Px3Vbf3/mPs/GmZSkvwPAAAAZRBz/8fCTOR/AAAAKIyY+z8eZiL/AwAAQGHE3H9nmElJ8r/+v/6//r/+v/5/8/Xr//cm/f/W9P/b0P8vWP9/9Br9f/1/LpdmCWi+S+v/X/3mgitcZv8/5v7fDDMpSf4HAACAMoi5/64wE/kfAAAACiPm/rvDTOR/AAAAKIyY+z8RZlKS/K//r/+v/6//r//ffP36/71J/7+1Huv///LacLn+f5X+f3dvf1f2/3+yUP9/dlXj7fX/uRwurf/fVEf6/zH3fzLMpCT5HwAAAMog5v5PhZnI/wAAAFAYMfd/OsxE/gcAAIDCiLn/t8JMSpL/9f8r2zHXXtb/1//PL9D/1//X/+9Z+v+t9Vj/3+f/N9D/7+7t78r+v8//5wrrtv5/zP33hJmUJP8DAABAGcTcf2+YifwPAAAAhRFz/31hJvI/AAAAFEbM/feHmZQk/+v/+/x//X/9f/3/5uvX/+9N+v+t6f+3of+v/99t/f//1P+nt3Vb/z/m/gfCTEqS/wEAAKAMYu7/TJiJ/A8AAACFEXP/b4eZyP8AAABQGDH3fzbMpCT5X/+/V/r/oyvS/8/0//X/9f/1/3uc/n9r+v9t6P/r/3db/9/n/9Pjuq3/H3P/g2Emi8//I4teEgAAALgiYu7/nTCTkvz7PwAAAJRBzP2/G2Yi/wMAAEBhxNz/uTCTkuT/y9P/b9aGn0//3+f/6//r/+v/6/932sr1/+OZR/9f/1//P9L/X1z/f7bxG12g/08RdVv/P+b+3wszKUn+BwAAgDKIuf+hMBP5HwAAAHrCYv4v9Jj7D4SZyP8AAABQGDH3HwwzKUn+9/n/+v/6/13a//+zjf/y4x9+6uC2K9P/z6f+v/5/L7qs/f94somf/1958fv8f/1//f9E/9/n/+v/06jb+v8x9x8KMylJ/gcAAIAyiLn/98NM5H8AAAAojJj7D4eZyP8AAABQGDH3T4aZlCT/6//r/+v/d2n/v4c//z/uD/3/eh3r/8eTrv5/Uyv3+f/Vr5/R/7/E/v9w00v1//X/e3n79f/1/5nvsvT/Z1elC5fa/4+5fyrMpCT5HwAAAMog5P7+I9U5d4X8DwAAAIURc//RMBP5HwAAAAoj5v6Hw0xKkv/1//X/9f/1/zvd//f5/835/P+Vof/fWvf0/5vT/9f/v1LbPxSm/r/+P53VbZ//H3P/dJhJSfI/AAAAlEHM/Z8PM5H/AQAAoDBi7v9CmIn8DwAAAIURc/+xMJOS5H/9f/1//X/9f/3/5uvX/+9N+v+t6f+3of9f2v5/J7Zf/1//n/m6rf8fc//xMJOS5H/4f/bu5Nnyurzj+OlOU+ku/oAssqEqy+yyyIZFsk7+gCyyySZVqVQKkpA4K42zojjPA84zDqCIEyqKAzihOIvzLDjgjFht6X2ep2/fe+7v3G7Pvfd3vs/rtXmS1vYclBI+dr/rCwAA0EHu/sviFvsfAAAAhpG7//K4xf4HAACAYeTu/++4pcn+1//r/4ft//9B/7/X5+v/9f8j0/9PO9r+f++oM+n/9f+b/P31//p/dptb/5+7/3/ilib7HwAAADrI3f+/cYv9DwAAAMPI3X9F3GL/AwAAwDBy9/9f3NJk/+/o/48tevb/mfHq/w+y/z/u/X/9v/5f/3/wDrf/v+qP/82n//f+v/4/6P/1//p/dppb/5+7///jlib7HwAAADrI3f+AuMX+BwAAgGHk7n9g3GL/AwAAwDBy9z8obmmy/73/7/3/Yd//1//v+fn6f/3/yLz/P61T/3/FnRdfdu+Nf33T+Xy+/r9D/3/rgX1//b/+n93m1v/n7n9w3NJk/wMAAEAHufsfErfY/wAAADCM3P0PjVvsfwAAABhG7v6HxS1N9r/+X/+v/9f/6/+Xf77+fzPp/6d16v8v5PP1/x36/4P7/vp//T+7za3/z93/8Lilyf4HAACADnL3PyJusf8BAABgGLn7r4xb7H8AAAAYRu7+03FLk/2v/z/4/v/3+n/9f1z9v/5f/3/w9P/T9P8r6P/1//p//T9rNbf+P3f/VXFLk/0PAAAAHeTuf2TcYv8DAADAMHL3Pypusf8BAABgGLn7Hx23NNn/+n/v/+v/9f/6/+Wfr//fTPr/aYff/y/7K+Te9P8b3/9fpP/X/+v/2e48+//7Jv5rey39f+7+x8QtTfY/AAAAdJC7/7Fxi/0PAAAAw8jd/7i4xf4HAACAYeTuf3zc0mT/6//1//vq/+M/4yv1//r/bfT/W/T/86L/nzab9/+PnVj6w/r/je//vf+v/9f/c465vf+fu/8JcUsMv8v//oL+MAEAAIAZyd3/xLilya//AwAAQAe5+6+OW+x/AAAAGEbu/ifFLU32v/5f/+/9f/2//n/550/1/zdt+376/3nR/0+bTf+/B/2//n+Tv7/+X//PbnPr/3P3PzluabL/AQAAoIPc/dfELfY/AAAADCN3/1PiFvsfAAAAhpG7/6lxS5P9v7z/P/uP6//3R/9/7vfX/y//82Nd/X/+K+r/J/v/f/T+f0/6/2n6/xX0//p//f9e/f+pVT9f/88yc+v/c/c/LW5psv8BAACgg9z9T49b7H8AAAAYRu7+Z8Qt9j8AAAAMI3f/M+OWJvvf+//6f/3/5vX/3v/fcpTv/y8Ovf8/of/fJ/3/NP3/Cvp//b/+3/v/rNXc+v/c/c+KW5rsfwAAAOggd/+z4xb7HwAAADbD9t87sPM3lIbc/c+JW+x/AAAAGEbu/ufGLU32v/5f/9+7/9/6mfr/zv3/yQ3p/73/v1/6/2n6/xWOtv8/Nmj/f2Kw/v/avX7+HPr/K/X/zMw5/f/NZ3/8qPr/3P3Pi1ua7H8AAADoIHf/8+MW+x8AAACGkbv/BXGL/Q8AAADDyN3/wrilyf4/8P7/1N6frf/X/x99/79F/9+5/9+U9//1//ul/5+m/1/B+//e//f+v/6ftTqn/9/mqPr/3P0vilv/E0CT/Q8AAAAd5O5/cdxi/wMAAMAwcvdfG7fY/wAAADCM3P0viVua7H/v/+v/9f/6f/3/8s/X/28m/f80/f8K+n/9v/5f/89aza3/z93/0rilyf4HAACADnL3vyxusf8BAABgGLn7Xx632P8AAAAwjNz9r4hbmux//f/B9v/54/p//f9C/6//1/8firb9/7FlfyXabY/+//b/OP3P5/6I/l//r//X/+v/WYNZ9P9nzv7dZe7+V8YtTfY/AAAAdJC7/1Vxi/0PAAAAw8jd/+q4xf4HAACAYeTuf03c8qf9v7NC3TwnV/zj+n/v/+v/9f/6/+Wfr//fTG37/33y/v8K+n/9v/5f/89azaL/3/b/5+5/bdzi1/8BAABgGLn7Xxe32P8AAAAwjNz9r49b7H8AAAAYRu7+N8QtTfa//l//r//X/+v/l3++/n8z6f+n6f9X0P/r/9fS//9X/Ij+X//P3Pr/3P3XxS1N9j8AAAB0kLv/jXGL/Q8AAADDyN3/prjF/gcAAID5uX9HoLZPufvfHLc02f/6f/2//l//r/9f/vn6/82k/5+m/18sFtdPfIFl/f+Zv9T/6/+9/6//5wLNrf/P3f+WuKXJ/gcAAIAOcvdfH7fY/wAAADCM3P03xC32PwAAAAwjd/9b45Ym+1//r//X/+v/G/X/x/T/49P/T9P/r+D9f/2//l//z1rNrf/P3f+2uKXJ/gcAAIAOcvffGLfY/wAAADCM3P1vj1vsfwAAABhG7v6b4pY99//xQ/hWh0f/r//X/+v/G/X/A77/f3L1BzdzcP3/Qv+v/9f/r6D/1//r/9lpbv1/7v53xC1+/R8AAACGkbv/nXGL/Q8AAADDyN3/rrjF/gcAAIBh5O5/d9zSZP/r//X/+n/9v/5/+edvRv+/+nO78f7/NP3/Cvp//b/+X//PWs2t/8/d/564pcn+BwAAgA5y998ct9j/AAAAMIzc/e+NW+x/AAAAGEbu/vfFLU32/1H0/8e3Xf3/3Pr/xUL/r//X/285hP7/5EL/v3b6/2n6/xX0/2P2/8cXA/X/p/b8+fp/5mhu/X/u/vfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9A3GL/AwAAwDBy938wbmmy/73/r//f2Pf/L4qfoP/X/29u/1//rur/10f/P03/v4L+/6D6/7vX8gWP7vvPqP/fm/6fOZpb/5+7/9a4pcn+BwAAgA5y938obrH/AQAAYBi5+z8ct9j/AAAAMIzc/R+JW5rsf/2//n9j+3/v/+v/9f/6/yX0/9P0/yvo/8d8/1//r//nyMyt/8/d/9G4pcn+BwAAgA5y998Wt9j/AAAAMIzc/bfHLfY/AAAADCN3/8filib7X/+v/9f/b2b/f1L/r//X/y81l/7/0kv/6Q79v/5f/6//1//r/7ubW/+fu//jcUuT/Q8AAAAd5O7/RNxi/wMAAMAwcvd/Mm6x/wEAAGAYufs/Fbc02f+7+/+LFluF6pZl/X80avr/bfT/535//f/yPz+8/6//1/8fvLn0/97/v7Dvr//X/2/y9z+v/v+S3T9f/8+I5tb/5+6/I25psv8BAACgg9z9n45b7H8AAAAYRu7+z8Qt9j8AAAAMI3f/nXFLk/2/me//H5/4A9L/L/T/+v8Vn6//1/+PbL39/yn9v/5f/6//7/f+/1/o/1mfufX/ufs/G7c02f8AAADQQe7+z8Ut9j8AAAAMI3f/5+MW+x8AAACGkbv/C3FLk/2/mf3/1B+Q/n+h/9f/7/X5f7fQ/+v/h+f9/2kj9/9X3ztu/59/h6r/n/f3H6b/9/4/a7TW/n/nX5QuoP/P3f/FuKXJ/gcAAIAOcvd/KW6x/wEAAGAYufu/HLfY/wAAADCM3P1fiVua7P/19/+X6P+D/n8u/f+/6f93fL7+X/8/Mv1//hV9uZH7//W9/39idv1/0v/P+/vr//X/7LbW/n+x629Hz7v/z91/V9zSZP8DAABAB7n7vxq32P8AAAAwjNz9X4tb7H8AAAAYRu7+r8ctTfa/9/979f/HFh37f+//6//1/53o/6fp/1eY6fv/Sf8/7++v/9f/s9vc+v/c/d+IW5rsfwAAANhU//K3/3nXfv+5ufu/GbfY/wAAADCM3P3filvsfwAAABhG7v5vxy1N9r/+v1f/3/P9f/2//l//34n+f5r+fwX9v/5f/6//Z63m1v/n7v9O3LJt+J047z9KAAAAYE5y9383bmny6/8AAADQQe7+78Utu/b/mX3+rnYAAABgbnL3fz9u2ePX/7f9MxZ/c6Df7HDo/2fe/y/G7//vWej/9f9b9P/6/3XQ/0/7M/v/M8f0//r/Cfp//b/+n53m1v/n7v9B3OL3/wMAAMAmO+d/Ucjd/8O4xf4HAACAYeTu/1HcYv8DAADAMHL33x23NNn/+v+Z9/8X9P7/qfq/NqH/9/7/Afb/15xc+vn6f/3/yPT/07z/v4L+X/+v/9f/s1Zz6/9z998TtzTZ/wAAANBB7v4fxy32PwAAAAwjd/9P4hb7HwAAAIaRu/+ncUuT/a//H7H/36z3//X/3v+/8P7/ry4+fdu//vsN1+n/OWvt/X/8rcGy/j//XND/H0r/f8uyfz39v/5/Tt9f/6//Z7e59f+5+38WtzTZ/wAAANBB7v574xb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuKXJ/tf/6//n0v/nv9dH0P+f3rz+P5vi7v2/9//1/7t5/3/aBvf/3v/X/8/+++v/9f/sNrf+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAYeTu/3XcYv8DAADAMHL3/yZuabL/9f/6/7n0/8n7/2d/nvf/t+j/9f/nQ/8/Tf+/gv5f/6//1/+zVnPr/3P3/zZuabL/AQAAoIPc/ffFLfY/AAAADCN3/+/iFvsfAAAAhpG7//64pcn+1//r//X/+n/9//LP1/9vJv3/NP3/Cvp//b/+X//PWs2t/8/d/4cAAAD//+XfeZY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.315869059s ago: executing program 1 (id=156): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x1, r0, 0x0}]) 1.206860306s ago: executing program 0 (id=157): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r1, 0xffffff4c}}, 0x10) 1.20471542s ago: executing program 4 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7, 0x6}, {0xf}}}, 0x24}}, 0x0) 1.199658948s ago: executing program 3 (id=159): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xe249, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0xc0045878, 0x0) 953.301906ms ago: executing program 0 (id=160): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={0x0, &(0x7f0000000840)=[{}], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}) 880.950891ms ago: executing program 3 (id=161): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 788.838379ms ago: executing program 1 (id=162): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/3, 0x3, 0x4, 0x4, 0xffff0001, 0xb3, 0xac}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 564.109457ms ago: executing program 0 (id=163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 543.471625ms ago: executing program 3 (id=164): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 452.392811ms ago: executing program 2 (id=165): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 93.456338ms ago: executing program 4 (id=166): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 0s ago: executing program 0 (id=167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 93.870524][ T5801] cgroup: Unknown subsys name 'net' [ 93.967963][ T5801] cgroup: Unknown subsys name 'cpuset' [ 93.977979][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.483311][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.609194][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.621555][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.644458][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.653771][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.653940][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.673212][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.681437][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.688985][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.696886][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.704419][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.712362][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.722683][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.724366][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.731644][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.739222][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.744236][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.744525][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.746296][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.756237][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.760798][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.767064][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.774194][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.784648][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.788168][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.796088][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.806480][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.817039][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.825487][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.836773][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.852107][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.020949][ T790] cfg80211: failed to load regulatory.db [ 100.696753][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 100.835423][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 100.875863][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 101.076529][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 101.150361][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 101.164824][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 101.240196][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.248782][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.256375][ T5825] bridge_slave_0: entered allmulticast mode [ 101.264895][ T5825] bridge_slave_0: entered promiscuous mode [ 101.324362][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.331620][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.339469][ T5825] bridge_slave_1: entered allmulticast mode [ 101.347676][ T5825] bridge_slave_1: entered promiscuous mode [ 101.463489][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.470893][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.478659][ T5829] bridge_slave_0: entered allmulticast mode [ 101.486481][ T5829] bridge_slave_0: entered promiscuous mode [ 101.508515][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.515801][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.523314][ T5822] bridge_slave_0: entered allmulticast mode [ 101.530848][ T5822] bridge_slave_0: entered promiscuous mode [ 101.573797][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.581339][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.588931][ T5829] bridge_slave_1: entered allmulticast mode [ 101.597069][ T5829] bridge_slave_1: entered promiscuous mode [ 101.608521][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.617902][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.625909][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.633316][ T5822] bridge_slave_1: entered allmulticast mode [ 101.640982][ T5822] bridge_slave_1: entered promiscuous mode [ 101.709224][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.732381][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.739603][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.747976][ T5828] bridge_slave_0: entered allmulticast mode [ 101.756239][ T5828] bridge_slave_0: entered promiscuous mode [ 101.828235][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.835662][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.842926][ T5828] bridge_slave_1: entered allmulticast mode [ 101.850704][ T5828] bridge_slave_1: entered promiscuous mode [ 101.859239][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.866941][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.874596][ T5821] bridge_slave_0: entered allmulticast mode [ 101.882533][ T5821] bridge_slave_0: entered promiscuous mode [ 101.891281][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.898498][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.905817][ T5820] bridge_slave_0: entered allmulticast mode [ 101.913603][ T5820] bridge_slave_0: entered promiscuous mode [ 101.924839][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.934267][ T5826] Bluetooth: hci5: command tx timeout [ 101.934428][ T5842] Bluetooth: hci3: command tx timeout [ 101.940347][ T5839] Bluetooth: hci4: command tx timeout [ 101.946060][ T5831] Bluetooth: hci1: command tx timeout [ 101.952690][ T5135] Bluetooth: hci0: command tx timeout [ 101.958175][ T50] Bluetooth: hci2: command tx timeout [ 101.967989][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.995686][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.018525][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.026068][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.033444][ T5821] bridge_slave_1: entered allmulticast mode [ 102.041014][ T5821] bridge_slave_1: entered promiscuous mode [ 102.048543][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.055763][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.063199][ T5820] bridge_slave_1: entered allmulticast mode [ 102.070760][ T5820] bridge_slave_1: entered promiscuous mode [ 102.094834][ T5825] team0: Port device team_slave_0 added [ 102.104993][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.181883][ T5825] team0: Port device team_slave_1 added [ 102.203393][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.242820][ T5829] team0: Port device team_slave_0 added [ 102.264414][ T5822] team0: Port device team_slave_0 added [ 102.272904][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.285564][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.298537][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.310550][ T5829] team0: Port device team_slave_1 added [ 102.333324][ T5822] team0: Port device team_slave_1 added [ 102.354724][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.366675][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.389274][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.396376][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.422420][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.499485][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.507046][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.533119][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.560346][ T5828] team0: Port device team_slave_0 added [ 102.595212][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.602308][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.629273][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.651128][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.658370][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.684650][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.698521][ T5828] team0: Port device team_slave_1 added [ 102.706570][ T5821] team0: Port device team_slave_0 added [ 102.714595][ T5820] team0: Port device team_slave_0 added [ 102.720970][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.728245][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.754513][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.786104][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.793242][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.819805][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.844989][ T5821] team0: Port device team_slave_1 added [ 102.852593][ T5820] team0: Port device team_slave_1 added [ 102.892285][ T5825] hsr_slave_0: entered promiscuous mode [ 102.899168][ T5825] hsr_slave_1: entered promiscuous mode [ 102.970001][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.977513][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.003924][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.015990][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.023340][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.049414][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.151096][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.158724][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.185548][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.198044][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.205328][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.231630][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.244250][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.251188][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.277702][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.307647][ T5822] hsr_slave_0: entered promiscuous mode [ 103.314627][ T5822] hsr_slave_1: entered promiscuous mode [ 103.321238][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 103.327147][ T5822] Cannot create hsr debugfs directory [ 103.358829][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.365989][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.392424][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.410558][ T5829] hsr_slave_0: entered promiscuous mode [ 103.417603][ T5829] hsr_slave_1: entered promiscuous mode [ 103.424058][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 103.429896][ T5829] Cannot create hsr debugfs directory [ 103.541118][ T5820] hsr_slave_0: entered promiscuous mode [ 103.548876][ T5820] hsr_slave_1: entered promiscuous mode [ 103.555286][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 103.561034][ T5820] Cannot create hsr debugfs directory [ 103.713998][ T5828] hsr_slave_0: entered promiscuous mode [ 103.721123][ T5828] hsr_slave_1: entered promiscuous mode [ 103.728021][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 103.734057][ T5828] Cannot create hsr debugfs directory [ 103.762196][ T5821] hsr_slave_0: entered promiscuous mode [ 103.768893][ T5821] hsr_slave_1: entered promiscuous mode [ 103.775423][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 103.781173][ T5821] Cannot create hsr debugfs directory [ 104.013355][ T50] Bluetooth: hci0: command tx timeout [ 104.019151][ T5842] Bluetooth: hci4: command tx timeout [ 104.024665][ T5831] Bluetooth: hci5: command tx timeout [ 104.024724][ T5839] Bluetooth: hci3: command tx timeout [ 104.030831][ T50] Bluetooth: hci1: command tx timeout [ 104.035782][ T5135] Bluetooth: hci2: command tx timeout [ 104.429901][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.441735][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.450261][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.462811][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.471129][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.482159][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.490510][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.502136][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.584042][ T5822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.601974][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.615246][ T5822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.626758][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.636997][ T5822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.648206][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.657143][ T5822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.667330][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.776453][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.791077][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.800380][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.811071][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.820110][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.832024][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.847802][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.860664][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.006696][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.018266][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.035062][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.047932][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.068439][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.080346][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.091017][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.115548][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.127717][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.187599][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.238024][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.246095][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.272940][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.292894][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.306749][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.317861][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.330361][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.338849][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.349558][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.359342][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.370196][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.394518][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.401705][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.472086][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.532133][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.539324][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.570648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.578047][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.622008][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.629948][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.642620][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.663946][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.675205][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.704271][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.715225][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.726107][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.738310][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.759559][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.857276][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.907588][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.914872][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.985811][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.993537][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.028978][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.094689][ T5839] Bluetooth: hci4: command tx timeout [ 106.095342][ T50] Bluetooth: hci2: command tx timeout [ 106.100581][ T5135] Bluetooth: hci1: command tx timeout [ 106.110874][ T5842] Bluetooth: hci3: command tx timeout [ 106.112561][ T5831] Bluetooth: hci5: command tx timeout [ 106.117245][ T5842] Bluetooth: hci0: command tx timeout [ 106.161592][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.200091][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.232936][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.276944][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.284563][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.326172][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.354839][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.362080][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.414947][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.422311][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.460592][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.467886][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.556038][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.584742][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.745743][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.829834][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.871194][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.878796][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.969344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.976566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.127097][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.220072][ T5825] veth0_vlan: entered promiscuous mode [ 107.305502][ T5825] veth1_vlan: entered promiscuous mode [ 107.368504][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.466534][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.541351][ T5825] veth0_macvtap: entered promiscuous mode [ 107.552337][ T5822] veth0_vlan: entered promiscuous mode [ 107.560110][ T5820] veth0_vlan: entered promiscuous mode [ 107.573417][ T5825] veth1_macvtap: entered promiscuous mode [ 107.621320][ T5820] veth1_vlan: entered promiscuous mode [ 107.652354][ T5822] veth1_vlan: entered promiscuous mode [ 107.660918][ T5821] veth0_vlan: entered promiscuous mode [ 107.684209][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.710720][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.728394][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.751227][ T5821] veth1_vlan: entered promiscuous mode [ 107.764687][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.775267][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.790718][ T5829] veth0_vlan: entered promiscuous mode [ 107.805596][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.814538][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.859494][ T5829] veth1_vlan: entered promiscuous mode [ 107.897344][ T5822] veth0_macvtap: entered promiscuous mode [ 107.909803][ T5820] veth0_macvtap: entered promiscuous mode [ 107.939042][ T5822] veth1_macvtap: entered promiscuous mode [ 107.994550][ T5820] veth1_macvtap: entered promiscuous mode [ 108.029280][ T5828] veth0_vlan: entered promiscuous mode [ 108.087088][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.095353][ T5821] veth0_macvtap: entered promiscuous mode [ 108.112696][ T5829] veth0_macvtap: entered promiscuous mode [ 108.127849][ T5821] veth1_macvtap: entered promiscuous mode [ 108.128838][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.142762][ T5828] veth1_vlan: entered promiscuous mode [ 108.148893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.167544][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.173672][ T5831] Bluetooth: hci2: command tx timeout [ 108.175478][ T5839] Bluetooth: hci3: command tx timeout [ 108.180198][ T5831] Bluetooth: hci5: command tx timeout [ 108.180229][ T5831] Bluetooth: hci1: command tx timeout [ 108.180256][ T5831] Bluetooth: hci4: command tx timeout [ 108.190991][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.191287][ T5135] Bluetooth: hci0: command tx timeout [ 108.242949][ T5829] veth1_macvtap: entered promiscuous mode [ 108.261630][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.285765][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.294554][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.326096][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.346415][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.355879][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.382758][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.384556][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.418880][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.428533][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.461032][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.470247][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.505619][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.540639][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.596825][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.620406][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.678183][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.687619][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.726750][ T5967] sp0: Synchronizing with TNC [ 108.749962][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.759261][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.769788][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.781448][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.823535][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.832158][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.837742][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.848869][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.862545][ T5828] veth0_macvtap: entered promiscuous mode [ 108.868053][ T5968] Falling back ldisc for ttyS3. [ 108.992039][ T5828] veth1_macvtap: entered promiscuous mode [ 109.035782][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.044694][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.079441][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.104577][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.177587][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.207853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.220954][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.249680][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.348057][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.365360][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.420921][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442591][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495237][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523783][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.570806][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.608140][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.636202][ T5980] loop4: detected capacity change from 0 to 256 [ 109.676424][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.726108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.806302][ T5980] FAT-fs (loop4): Directory bread(block 64) failed [ 109.843817][ T5980] FAT-fs (loop4): Directory bread(block 65) failed [ 109.884435][ T5980] FAT-fs (loop4): Directory bread(block 66) failed [ 109.911099][ T5980] FAT-fs (loop4): Directory bread(block 67) failed [ 109.956217][ T5980] FAT-fs (loop4): Directory bread(block 68) failed [ 109.980616][ T5980] FAT-fs (loop4): Directory bread(block 69) failed [ 110.001859][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.008368][ T5980] FAT-fs (loop4): Directory bread(block 70) failed [ 110.039001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.040342][ T5980] FAT-fs (loop4): Directory bread(block 71) failed [ 110.062672][ T5980] FAT-fs (loop4): Directory bread(block 72) failed [ 110.072560][ T5980] FAT-fs (loop4): Directory bread(block 73) failed [ 110.144494][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.188110][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.346870][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.399901][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.468239][ T6007] loop2: detected capacity change from 0 to 256 [ 111.512123][ T5997] nbd0: detected capacity change from 0 to 63 [ 111.535075][ T6007] exfat: Deprecated parameter 'utf8' [ 111.564995][ T6007] exfat: Deprecated parameter 'namecase' [ 111.607706][ T5839] block nbd0: Receive control failed (result -32) [ 111.615485][ T5135] block nbd0: Receive control failed (result -32) [ 111.636412][ T5969] block nbd0: Send control failed (result -32) [ 111.718653][ T5969] block nbd0: Request send failed, requeueing [ 111.739879][ T6007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 111.784580][ T6009] loop0: detected capacity change from 0 to 4096 [ 111.807520][ T5150] block nbd0: Dead connection, failed to find a fallback [ 111.816262][ T5150] block nbd0: shutting down sockets [ 111.822545][ T5150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.833437][ T5150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.849414][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.864079][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 111.872932][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.882740][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 111.898696][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.908489][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 111.916870][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.928367][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.938628][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.982315][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 111.998766][ T117] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.044973][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.102798][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 112.102830][ T6014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.144191][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.160473][ T6015] loop4: detected capacity change from 0 to 128 [ 112.202536][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 112.213260][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 112.226787][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.240096][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.250668][ T117] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 112.261783][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.298137][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.320428][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.381609][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 112.432340][ T117] usb 2-1: config 0 descriptor?? [ 112.439199][ T6003] loop5: detected capacity change from 0 to 32768 [ 112.495726][ T5969] ldm_validate_partition_table(): Disk read failed. [ 112.549160][ T6003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.18 (6003) [ 112.558031][ T5969] Dev nbd0: unable to read RDB block 0 [ 112.600076][ T117] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 112.636423][ T5969] nbd0: unable to read partition table [ 112.741657][ T5969] ldm_validate_partition_table(): Disk read failed. [ 112.784268][ T5170] bcm5974 2-1:0.0: could not read from device [ 112.799941][ T5969] Dev nbd0: unable to read RDB block 0 [ 112.851325][ T6011] bcm5974 2-1:0.0: could not read from device [ 112.875164][ T5969] nbd0: unable to read partition table [ 112.888006][ T6003] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.976146][ T6003] BTRFS info (device loop5): using crc32c checksum algorithm [ 112.988133][ T5170] bcm5974 2-1:0.0: could not read from device [ 113.049128][ T6005] loop3: detected capacity change from 0 to 32768 [ 113.078449][ T117] usb 2-1: USB disconnect, device number 2 [ 113.144176][ T5883] bcm5974 2-1:0.0: could not read from device [ 113.314644][ T6005] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.522777][ T6003] BTRFS info (device loop5): allowing degraded mounts [ 113.529930][ T6003] BTRFS info (device loop5): enabling ssd optimizations [ 113.541085][ T6003] BTRFS info (device loop5): turning on async discard [ 113.542771][ T6027] loop0: detected capacity change from 0 to 4096 [ 113.547979][ T6003] BTRFS info (device loop5): enabling free space tree [ 113.565992][ T6003] BTRFS info (device loop5): enabling auto defrag [ 113.566202][ T6005] XFS (loop3): Ending clean mount [ 113.784990][ T30] audit: type=1800 audit(1776263052.627:2): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18" name="file3" dev="loop5" ino=261 res=0 errno=0 [ 113.806358][ T6027] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 113.834528][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.006613][ T6027] ntfs3(loop0): Failed to load $Extend (-22). [ 114.025595][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 114.028876][ T6027] ntfs3(loop0): Failed to initialize $Extend. [ 114.066458][ T10] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.090603][ T5821] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.120085][ T6003] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 114.148919][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.178542][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.233982][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.354233][ T10] usb 5-1: config 0 descriptor?? [ 114.900875][ T10] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 114.976152][ T5822] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.082891][ T6066] loop3: detected capacity change from 0 to 8 [ 115.198358][ T6068] loop0: detected capacity change from 0 to 512 [ 115.251783][ T6068] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.306180][ T790] usb 5-1: USB disconnect, device number 2 [ 115.352365][ T6070] netlink: 47 bytes leftover after parsing attributes in process `syz.2.33'. [ 115.406957][ T6068] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 115.497414][ T6059] loop1: detected capacity change from 0 to 32768 [ 115.524262][ T6068] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 115.586655][ T6068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.671521][ T30] audit: type=1800 audit(1776263054.517:3): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.28" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 115.914591][ T6068] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 115.997975][ T6081] gretap0: entered promiscuous mode [ 116.082007][ T6081] gretap0: left promiscuous mode [ 116.240210][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.359194][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35'. [ 117.030737][ T6104] loop6: detected capacity change from 0 to 7 [ 117.113482][ T6095] nbd1: detected capacity change from 0 to 63 [ 117.139804][ T6104] Dev loop6: unable to read RDB block 7 [ 117.151203][ T5135] block nbd1: Receive control failed (result -32) [ 117.158399][ T5839] block nbd1: Receive control failed (result -32) [ 117.174968][ T6104] loop6: unable to read partition table [ 117.221171][ T6104] loop6: partition table beyond EOD, truncated [ 117.246738][ T6104] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 117.265165][ T5883] block nbd1: Dead connection, failed to find a fallback [ 117.312159][ T6077] loop3: detected capacity change from 0 to 32768 [ 117.325516][ T5883] block nbd1: shutting down sockets [ 117.344157][ T5883] blk_print_req_error: 138 callbacks suppressed [ 117.344200][ T5883] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.404648][ T6077] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.431313][ T5883] buffer_io_error: 138 callbacks suppressed [ 117.431335][ T5883] Buffer I/O error on dev nbd1, logical block 0, async page read [ 117.465693][ T5883] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.485339][ T5883] Buffer I/O error on dev nbd1, logical block 1, async page read [ 117.494335][ T5883] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.504658][ T5883] Buffer I/O error on dev nbd1, logical block 2, async page read [ 117.534685][ T6120] loop1: detected capacity change from 0 to 1024 [ 117.557127][ T5883] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.567847][ T5883] Buffer I/O error on dev nbd1, logical block 3, async page read [ 117.575407][ T6120] ======================================================= [ 117.575407][ T6120] WARNING: The mand mount option has been deprecated and [ 117.575407][ T6120] and is ignored by this kernel. Remove the mand [ 117.575407][ T6120] option from the mount to silence this warning. [ 117.575407][ T6120] ======================================================= [ 117.576239][ T5883] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.626603][ T5883] Buffer I/O error on dev nbd1, logical block 0, async page read [ 117.638671][ T5883] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.647927][ T5883] Buffer I/O error on dev nbd1, logical block 1, async page read [ 117.656538][ T5883] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.665750][ T5883] Buffer I/O error on dev nbd1, logical block 2, async page read [ 117.673876][ T5883] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.683233][ T5883] Buffer I/O error on dev nbd1, logical block 3, async page read [ 117.691449][ T5883] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.708477][ T5883] Buffer I/O error on dev nbd1, logical block 0, async page read [ 117.718604][ T5883] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.728940][ T6077] XFS (loop3): Ending clean mount [ 117.752452][ T5883] Buffer I/O error on dev nbd1, logical block 1, async page read [ 117.789769][ T5883] ldm_validate_partition_table(): Disk read failed. [ 117.802950][ T6077] XFS (loop3): Quotacheck needed: Please wait. [ 117.812742][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.815623][ T5883] Dev nbd1: unable to read RDB block 0 [ 117.837117][ T5883] nbd1: unable to read partition table [ 117.861508][ T6120] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.961083][ T5883] ldm_validate_partition_table(): Disk read failed. [ 118.044714][ T5883] Dev nbd1: unable to read RDB block 0 [ 118.090431][ T5883] nbd1: unable to read partition table [ 118.101101][ T6077] XFS (loop3): Quotacheck: Done. [ 118.216043][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.314134][ T9] Process accounting resumed [ 118.479613][ T5821] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.514757][ T6134] Process accounting resumed [ 118.546154][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 118.675936][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.820267][ T6146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.086100][ T6156] netlink: 'syz.4.61': attribute type 8 has an invalid length. [ 119.399372][ T6158] loop0: detected capacity change from 0 to 4096 [ 120.007789][ T6179] loop2: detected capacity change from 0 to 512 [ 120.063734][ T6179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.264246][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.336691][ T6179] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.628052][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.844833][ T6182] loop5: detected capacity change from 0 to 32768 [ 120.932738][ T6182] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.972739][ T6162] loop4: detected capacity change from 0 to 40427 [ 120.997776][ T6162] F2FS-fs (loop4): invalid crc value [ 121.246586][ T6182] XFS (loop5): Ending clean mount [ 121.290407][ T6182] XFS (loop5): Quotacheck needed: Please wait. [ 121.348328][ T6219] loop1: detected capacity change from 0 to 128 [ 121.367362][ T6217] loop2: detected capacity change from 0 to 512 [ 121.413726][ T6217] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.440413][ T6217] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.524678][ T6217] EXT4-fs (loop2): orphan file too big: 4294967295 [ 121.530907][ T6219] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.540893][ T6182] XFS (loop5): Quotacheck: Done. [ 121.546032][ T6162] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 121.566707][ T6217] EXT4-fs (loop2): mount failed [ 121.602792][ T6219] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.639962][ T6162] F2FS-fs (loop4): Start checkpoint disabled! [ 121.669475][ T6162] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 121.680125][ T6162] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 121.705976][ T6219] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 121.816699][ T5822] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.986535][ T1148] kworker/u8:7: attempt to access beyond end of device [ 121.986535][ T1148] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.018109][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.111379][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 122.111415][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.111432][ T1148] Workqueue: writeback wb_workfn (flush-7:4) [ 122.111481][ T1148] Call Trace: [ 122.111497][ T1148] [ 122.111513][ T1148] dump_stack_lvl+0xe8/0x150 [ 122.111561][ T1148] f2fs_handle_critical_error+0x37c/0x540 [ 122.111600][ T1148] f2fs_write_end_io+0xcdb/0xff0 [ 122.111681][ T1148] __submit_merged_bio+0x256/0x6a0 [ 122.111719][ T1148] __submit_merged_write_cond+0x3c9/0x4e0 [ 122.111759][ T1148] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 122.111807][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.111847][ T1148] f2fs_write_data_pages+0x2975/0x35e0 [ 122.111880][ T1148] ? f2fs_build_free_nids+0xdc/0x1810 [ 122.111946][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 122.111995][ T1148] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 122.112072][ T1148] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 122.112128][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112158][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 122.112210][ T1148] ? set_shrinker_bit+0x7c/0x350 [ 122.112238][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112276][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 122.112311][ T1148] do_writepages+0x32e/0x550 [ 122.112351][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112380][ T1148] ? reacquire_held_locks+0x104/0x190 [ 122.112418][ T1148] ? writeback_sb_inodes+0x463/0x19d0 [ 122.112457][ T1148] __writeback_single_inode+0x133/0x10e0 [ 122.112490][ T1148] ? do_raw_spin_unlock+0xf5/0x210 [ 122.112523][ T1148] writeback_sb_inodes+0x979/0x19d0 [ 122.112556][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 122.112668][ T1148] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 122.112696][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.112767][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112796][ T1148] ? rcu_is_watching+0x15/0xb0 [ 122.112834][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.112874][ T1148] wb_writeback+0x445/0xb00 [ 122.112909][ T1148] ? queue_io+0x291/0x470 [ 122.112946][ T1148] ? __pfx_wb_writeback+0x10/0x10 [ 122.112974][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 122.113018][ T1148] wb_workfn+0x3f8/0xf10 [ 122.113040][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113067][ T1148] ? look_up_lock_class+0x57/0x110 [ 122.113129][ T1148] ? __pfx_wb_workfn+0x10/0x10 [ 122.113169][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113200][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113234][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113263][ T1148] ? do_raw_spin_unlock+0xf5/0x210 [ 122.113297][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113330][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113365][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113398][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 122.113434][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 122.113472][ T1148] process_scheduled_works+0xb5d/0x1860 [ 122.113507][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113576][ T1148] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.113620][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113650][ T1148] ? assign_work+0x3d5/0x5e0 [ 122.113693][ T1148] worker_thread+0xa53/0xfc0 [ 122.113731][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113779][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.113820][ T1148] kthread+0x388/0x470 [ 122.113847][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 122.113880][ T1148] ? __pfx_kthread+0x10/0x10 [ 122.113907][ T1148] ret_from_fork+0x514/0xb70 [ 122.113949][ T1148] ? __pfx_ret_from_fork+0x10/0x10 [ 122.113985][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.114017][ T1148] ? __switch_to+0xc79/0x1410 [ 122.114056][ T1148] ? __pfx_kthread+0x10/0x10 [ 122.114083][ T1148] ret_from_fork_asm+0x1a/0x30 [ 122.114149][ T1148] [ 122.530067][ T1148] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 122.809256][ T6237] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 123.112349][ T6243] loop3: detected capacity change from 0 to 128 [ 123.289654][ T6249] loop1: detected capacity change from 0 to 512 [ 123.357067][ T6249] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.454802][ T6249] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 123.491964][ T24] kernel write not supported for file /admmidi2 (pid: 24 comm: kworker/1:0) [ 123.496422][ T6249] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.95: bad orphan inode 4 [ 123.538786][ T6254] loop4: detected capacity change from 0 to 1024 [ 123.553372][ T6249] loop1: lost filesystem error report for type 5 error -117 [ 123.563075][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 123.577789][ C1] EXT4-fs (loop1): initial error at time 1776263062: ext4_orphan_get:1423 [ 123.586575][ C1] EXT4-fs (loop1): last error at time 1776263062: ext4_orphan_get:1423 [ 123.611570][ T6249] EXT4-fs (loop1): 1 orphan inode deleted [ 123.661399][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.804914][ T6260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.99'. [ 123.889930][ T6254] hfsplus: bad catalog file entry [ 124.071865][ T48] hfsplus: bad catalog file entry [ 124.082116][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.159166][ T6265] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 124.407632][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 124.438449][ T6271] loop1: detected capacity change from 0 to 1024 [ 124.478507][ T6271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.534826][ T6271] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.548828][ T6272] ipvlan2: entered allmulticast mode [ 124.554337][ T6271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ee118, mo2=0000] [ 124.570915][ T6246] loop5: detected capacity change from 0 to 40427 [ 124.594066][ T30] audit: type=1326 audit(1776263063.427:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7879c819 code=0x7ffc0000 [ 124.620557][ T6246] F2FS-fs (loop5): Image doesn't support compression [ 124.626504][ T6272] syz_tun: entered allmulticast mode [ 124.628946][ T6246] F2FS-fs (loop5): build fault injection rate: 690 [ 124.639700][ T6246] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 124.647369][ T6271] System zones: 0-1, 3-12 [ 124.652404][ T6271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.656958][ T6246] F2FS-fs (loop5): invalid crc value [ 124.699074][ T6271] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.101: Invalid inode table block 0 in block_group 0 [ 124.752359][ T30] audit: type=1326 audit(1776263063.427:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7879c819 code=0x7ffc0000 [ 124.756484][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 124.806145][ T6277] loop2: detected capacity change from 0 to 4096 [ 124.833226][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.838466][ T30] audit: type=1326 audit(1776263063.517:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7879c819 code=0x7ffc0000 [ 124.840507][ C1] EXT4-fs (loop1): initial error at time 1776263063: __ext4_get_inode_loc:4799 [ 124.871244][ C1] EXT4-fs (loop1): last error at time 1776263063: __ext4_get_inode_loc:4799 [ 124.887838][ T6271] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 124.899785][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 124.900118][ T30] audit: type=1326 audit(1776263063.517:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7879c819 code=0x7ffc0000 [ 124.933398][ T6271] EXT4-fs error (device loop1): ext4_quota_write:7417: inode #3: comm syz.1.101: mark_inode_dirty error [ 124.946246][ T6271] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 124.947914][ T6271] Quota error (device loop1): write_blk: dquota write failed [ 125.010599][ T30] audit: type=1326 audit(1776263063.517:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab7879c819 code=0x7ffc0000 [ 125.049142][ T6271] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 125.082009][ T6277] NILFS (loop2): mounting unchecked fs [ 125.083070][ T30] audit: type=1326 audit(1776263063.517:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab7879c582 code=0x7ffc0000 [ 125.118111][ T6277] NILFS (loop2): invalid segment: Sequence number mismatch [ 125.123595][ T6246] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.136270][ T6271] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.101: Failed to acquire dquot type 0 [ 125.164922][ T6246] F2FS-fs (loop5): Start checkpoint disabled! [ 125.166954][ T6277] NILFS (loop2): trying rollback from an earlier position [ 125.189144][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.192104][ T30] audit: type=1326 audit(1776263063.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab7875d04e code=0x7ffc0000 [ 125.237646][ T6271] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.101: Invalid inode table block 0 in block_group 0 [ 125.247795][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 125.258178][ T6277] NILFS (loop2): recovery complete [ 125.260430][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.270959][ T6246] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 125.276200][ T30] audit: type=1326 audit(1776263063.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab7879c647 code=0x7ffc0000 [ 125.320104][ T6280] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.331047][ T6271] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 125.350632][ T6246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 125.371648][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.385210][ T6271] EXT4-fs error (device loop1): ext4_ext_truncate:4557: inode #15: comm syz.1.101: mark_inode_dirty error [ 125.478408][ T6271] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.480208][ T6271] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.101: Invalid inode table block 0 in block_group 0 [ 125.549808][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.566058][ T6271] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 125.611086][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.612329][ T6271] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 125.663966][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.664569][ T6271] EXT4-fs error (device loop1): __ext4_get_inode_loc:4799: comm syz.1.101: Invalid inode table block 0 in block_group 0 [ 125.741715][ T6271] loop1: lost filesystem error report for type 5 error -117 [ 125.747971][ T6271] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6293: Corrupt filesystem [ 125.784594][ T6271] EXT4-fs error (device loop1): ext4_truncate:4604: inode #15: comm syz.1.101: mark_inode_dirty error [ 125.807864][ T6271] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.808354][ T6271] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 125.843542][ T6271] EXT4-fs (loop1): 1 truncate cleaned up [ 125.896952][ T6271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.193228][ T6296] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 126.368496][ T1148] kworker/u8:7: attempt to access beyond end of device [ 126.368496][ T1148] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 126.369264][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.397763][ T6300] loop3: detected capacity change from 0 to 512 [ 126.412239][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 126.412275][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.412292][ T1148] Workqueue: writeback wb_workfn (flush-7:5) [ 126.412330][ T1148] Call Trace: [ 126.412340][ T1148] [ 126.412352][ T1148] dump_stack_lvl+0xe8/0x150 [ 126.412394][ T1148] f2fs_handle_critical_error+0x37c/0x540 [ 126.412436][ T1148] f2fs_write_end_io+0xcdb/0xff0 [ 126.412500][ T1148] __submit_merged_bio+0x256/0x6a0 [ 126.412541][ T1148] __submit_merged_write_cond+0x3c9/0x4e0 [ 126.412586][ T1148] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 126.412637][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.412682][ T1148] f2fs_write_data_pages+0x2975/0x35e0 [ 126.412716][ T1148] ? f2fs_build_free_nids+0xdc/0x1810 [ 126.412797][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.412861][ T1148] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 126.412951][ T1148] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 126.413012][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413042][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 126.413101][ T1148] ? set_shrinker_bit+0x7c/0x350 [ 126.413131][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413166][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.413204][ T1148] do_writepages+0x32e/0x550 [ 126.413247][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413275][ T1148] ? reacquire_held_locks+0x104/0x190 [ 126.413312][ T1148] ? writeback_sb_inodes+0x463/0x19d0 [ 126.413352][ T1148] __writeback_single_inode+0x133/0x10e0 [ 126.413387][ T1148] ? do_raw_spin_unlock+0xf5/0x210 [ 126.413421][ T1148] writeback_sb_inodes+0x979/0x19d0 [ 126.413451][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 126.413522][ T1148] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 126.413551][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.413635][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413665][ T1148] ? rcu_is_watching+0x15/0xb0 [ 126.413704][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413765][ T1148] wb_writeback+0x445/0xb00 [ 126.413803][ T1148] ? queue_io+0x291/0x470 [ 126.413846][ T1148] ? __pfx_wb_writeback+0x10/0x10 [ 126.413881][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.413934][ T1148] wb_workfn+0x3f8/0xf10 [ 126.413955][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.413984][ T1148] ? look_up_lock_class+0x57/0x110 [ 126.414045][ T1148] ? __pfx_wb_workfn+0x10/0x10 [ 126.414092][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414121][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.414147][ T1148] ? lock_acquire+0x106/0x350 [ 126.414191][ T1148] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.414224][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414259][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414297][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414332][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 126.414368][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 126.414408][ T1148] process_scheduled_works+0xb5d/0x1860 [ 126.414445][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414521][ T1148] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.414567][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414597][ T1148] ? assign_work+0x3d5/0x5e0 [ 126.414642][ T1148] worker_thread+0xa53/0xfc0 [ 126.414682][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414734][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414779][ T1148] kthread+0x388/0x470 [ 126.414807][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 126.414841][ T1148] ? __pfx_kthread+0x10/0x10 [ 126.414876][ T1148] ret_from_fork+0x514/0xb70 [ 126.414918][ T1148] ? __pfx_ret_from_fork+0x10/0x10 [ 126.414954][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.414983][ T1148] ? __switch_to+0xc79/0x1410 [ 126.415019][ T1148] ? __pfx_kthread+0x10/0x10 [ 126.415048][ T1148] ret_from_fork_asm+0x1a/0x30 [ 126.415115][ T1148] [ 126.848802][ T6300] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 126.860679][ T1148] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 126.868023][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 126.868053][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.868070][ T1148] Workqueue: writeback wb_workfn (flush-7:5) [ 126.868106][ T1148] Call Trace: [ 126.868117][ T1148] [ 126.868134][ T1148] dump_stack_lvl+0xe8/0x150 [ 126.868177][ T1148] f2fs_handle_critical_error+0x37c/0x540 [ 126.868219][ T1148] f2fs_write_end_io+0xcdb/0xff0 [ 126.868284][ T1148] __submit_merged_bio+0x256/0x6a0 [ 126.868326][ T1148] __submit_merged_write_cond+0x3c9/0x4e0 [ 126.868370][ T1148] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 126.868422][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.868468][ T1148] f2fs_write_data_pages+0x2975/0x35e0 [ 126.868502][ T1148] ? f2fs_build_free_nids+0xdc/0x1810 [ 126.868588][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.868644][ T1148] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 126.868735][ T1148] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 126.868796][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.868825][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 126.868883][ T1148] ? set_shrinker_bit+0x7c/0x350 [ 126.868926][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.868962][ T1148] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.869003][ T1148] do_writepages+0x32e/0x550 [ 126.869046][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.869076][ T1148] ? reacquire_held_locks+0x104/0x190 [ 126.869116][ T1148] ? writeback_sb_inodes+0x463/0x19d0 [ 126.869163][ T1148] __writeback_single_inode+0x133/0x10e0 [ 126.869199][ T1148] ? do_raw_spin_unlock+0xf5/0x210 [ 126.869235][ T1148] writeback_sb_inodes+0x979/0x19d0 [ 126.869265][ T1148] ? __lock_acquire+0x6b5/0x2cf0 [ 126.869343][ T1148] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 126.869372][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.869460][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.869490][ T1148] ? rcu_is_watching+0x15/0xb0 [ 126.869530][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.869573][ T1148] wb_writeback+0x445/0xb00 [ 126.869612][ T1148] ? queue_io+0x291/0x470 [ 126.869655][ T1148] ? __pfx_wb_writeback+0x10/0x10 [ 126.869683][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.869736][ T1148] wb_workfn+0x3f8/0xf10 [ 126.869758][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.869788][ T1148] ? look_up_lock_class+0x57/0x110 [ 126.869850][ T1148] ? __pfx_wb_workfn+0x10/0x10 [ 126.869897][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.869928][ T1148] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.869953][ T1148] ? lock_acquire+0x106/0x350 [ 126.869991][ T1148] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.870025][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870060][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870098][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870142][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 126.870179][ T1148] ? process_scheduled_works+0xa70/0x1860 [ 126.870219][ T1148] process_scheduled_works+0xb5d/0x1860 [ 126.870255][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870333][ T1148] ? __pfx_process_scheduled_works+0x10/0x10 [ 126.870382][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870412][ T1148] ? assign_work+0x3d5/0x5e0 [ 126.870457][ T1148] worker_thread+0xa53/0xfc0 [ 126.870497][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870550][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870595][ T1148] kthread+0x388/0x470 [ 126.870623][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 126.870658][ T1148] ? __pfx_kthread+0x10/0x10 [ 126.870689][ T1148] ret_from_fork+0x514/0xb70 [ 126.870731][ T1148] ? __pfx_ret_from_fork+0x10/0x10 [ 126.870768][ T1148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 126.870798][ T1148] ? __switch_to+0xc79/0x1410 [ 126.870836][ T1148] ? __pfx_kthread+0x10/0x10 [ 126.870866][ T1148] ret_from_fork_asm+0x1a/0x30 [ 126.870933][ T1148] [ 126.872109][ T1148] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 126.949692][ T6305] netlink: 92 bytes leftover after parsing attributes in process `syz.1.116'. [ 127.290588][ T6300] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.119: Invalid inode bitmap blk 4 in block_group 0 [ 127.413029][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.419579][ C1] EXT4-fs (loop3): initial error at time 1776263066: ext4_read_inode_bitmap:139 [ 127.428701][ C1] EXT4-fs (loop3): last error at time 1776263066: ext4_read_inode_bitmap:139 [ 127.446094][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.674834][ T6300] EXT4-fs (loop3): shut down requested (2) [ 127.937727][ T6315] loop4: detected capacity change from 0 to 256 [ 128.223647][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.270928][ T6315] FAT-fs (loop4): Directory bread(block 64) failed [ 128.321394][ T6315] FAT-fs (loop4): Directory bread(block 65) failed [ 128.388615][ T6308] loop5: detected capacity change from 0 to 131072 [ 128.390429][ T6315] FAT-fs (loop4): Directory bread(block 66) failed [ 128.422060][ T6308] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 128.428945][ T6308] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 128.441542][ T6315] FAT-fs (loop4): Directory bread(block 67) failed [ 128.448707][ T6315] FAT-fs (loop4): Directory bread(block 68) failed [ 128.455465][ T6308] F2FS-fs (loop5): invalid crc value [ 128.463491][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 128.474306][ T6315] FAT-fs (loop4): Directory bread(block 69) failed [ 128.485564][ T6315] FAT-fs (loop4): Directory bread(block 70) failed [ 128.564508][ T6315] FAT-fs (loop4): Directory bread(block 71) failed [ 128.582246][ T6315] FAT-fs (loop4): Directory bread(block 72) failed [ 128.595996][ T6315] FAT-fs (loop4): Directory bread(block 73) failed [ 128.643735][ T6308] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.667884][ T6308] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 128.675399][ T6308] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 129.165454][ T6341] netlink: 108 bytes leftover after parsing attributes in process `syz.3.132'. [ 129.383474][ T6348] loop1: detected capacity change from 0 to 512 [ 129.458080][ T6348] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.531873][ T6353] loop4: detected capacity change from 0 to 512 [ 129.611515][ T6353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.694562][ T6348] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.134: bg 0: block 104: invalid block bitmap [ 129.700168][ T6353] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.136: iget: bad i_size value: 38620345925642 [ 129.735512][ T6348] fserror_report: 3 callbacks suppressed [ 129.735536][ T6348] loop1: lost filesystem error report for type 5 error -117 [ 129.735767][ T6353] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.744201][ T6348] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 129.757912][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 129.757941][ C1] EXT4-fs (loop1): initial error at time 1776263068: ext4_validate_block_bitmap:432 [ 129.757989][ C1] EXT4-fs (loop1): last error at time 1776263068: ext4_validate_block_bitmap:432 [ 129.793887][ T6348] loop1: lost filesystem error report for type 5 error -117 [ 129.805565][ T6348] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.134: invalid indirect mapped block 1 (level 1) [ 129.853074][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 129.859761][ C1] EXT4-fs (loop4): initial error at time 1776263068: ext4_orphan_get:1397: inode 15 [ 129.869443][ C1] EXT4-fs (loop4): last error at time 1776263068: ext4_orphan_get:1397: inode 15 [ 129.879321][ T6353] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.136: couldn't read orphan inode 15 (err -117) [ 129.901041][ T6353] loop4: lost filesystem error report for type 5 error -117 [ 129.919256][ T6353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.965179][ T6348] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.973157][ T6348] EXT4-fs (loop1): 1 truncate cleaned up [ 130.013051][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.141'. [ 130.098250][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.141'. [ 130.110417][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.231180][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.136: bg 0: block 5: invalid block bitmap [ 130.304892][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 130.304924][ T30] audit: type=1800 audit(1776263069.157:35): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.134" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 130.392401][ T6373] loop2: detected capacity change from 0 to 2048 [ 130.464117][ T6379] netlink: 'syz.5.145': attribute type 3 has an invalid length. [ 130.469419][ T6373] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.503888][ T6379] netlink: 64 bytes leftover after parsing attributes in process `syz.5.145'. [ 130.539000][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.568887][ T6373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.725196][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.125801][ T6393] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.152'. [ 131.483938][ T6404] Zero length message leads to an empty skb [ 131.535370][ T6400] loop2: detected capacity change from 0 to 4096 [ 131.587210][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 132.110630][ T24] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 132.131436][ T24] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 132.173915][ T24] hid-generic 0004:0004:FFFF0001.0002: unknown main item tag 0x0 [ 132.245456][ T24] hid-generic 0004:0004:FFFF0001.0002: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 132.561244][ T6424] [ 132.563647][ T6424] ====================================================== [ 132.570851][ T6424] WARNING: possible circular locking dependency detected [ 132.577899][ T6424] syzkaller #0 Not tainted [ 132.582333][ T6424] ------------------------------------------------------ [ 132.589462][ T6424] syz.2.165/6424 is trying to acquire lock: [ 132.595386][ T6424] ffff88805312b660 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 132.604419][ T6424] [ 132.604419][ T6424] but task is already holding lock: [ 132.611802][ T6424] ffff88803421a268 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 132.617123][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.620981][ T6424] [ 132.620981][ T6424] which lock already depends on the new lock. [ 132.620981][ T6424] [ 132.620992][ T6424] [ 132.620992][ T6424] the existing dependency chain (in reverse order) is: [ 132.621001][ T6424] [ 132.621001][ T6424] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 132.621066][ T6424] __mutex_lock+0x1a3/0x1550 [ 132.621106][ T6424] nbd_queue_rq+0x37b/0x1100 [ 132.621138][ T6424] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 132.621162][ T6424] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 132.621197][ T6424] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 132.638909][ T6402] loop5: detected capacity change from 0 to 32768 [ 132.645154][ T6424] blk_mq_run_hw_queue+0x348/0x4f0 [ 132.645203][ T6424] blk_mq_dispatch_list+0xd16/0xe10 [ 132.645228][ T6424] blk_mq_flush_plug_list+0x48d/0x570 [ 132.716185][ T6424] __blk_flush_plug+0x3ed/0x4d0 [ 132.721566][ T6424] __submit_bio+0x28d/0x580 [ 132.726722][ T6424] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 132.732877][ T6424] block_read_full_folio+0x599/0x830 [ 132.738725][ T6424] filemap_read_folio+0x137/0x3b0 [ 132.744360][ T6424] do_read_cache_folio+0x358/0x590 [ 132.749997][ T6424] read_part_sector+0xb6/0x2b0 [ 132.755364][ T6424] adfspart_check_ICS+0xb1/0x960 [ 132.760904][ T6424] bdev_disk_changed+0x817/0x1770 [ 132.766443][ T6424] blkdev_get_whole+0x380/0x510 [ 132.771895][ T6424] bdev_open+0x31e/0xd30 [ 132.776733][ T6424] blkdev_open+0x470/0x610 [ 132.781663][ T6424] do_dentry_open+0x785/0x14e0 [ 132.786960][ T6424] vfs_open+0x3b/0x340 [ 132.791556][ T6424] path_openat+0x2e08/0x3860 [ 132.796677][ T6424] do_file_open+0x23e/0x4a0 [ 132.801715][ T6424] do_sys_openat2+0x113/0x200 [ 132.806917][ T6424] __x64_sys_openat+0x138/0x170 [ 132.812300][ T6424] do_syscall_64+0x15f/0xf80 [ 132.817426][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.823855][ T6424] [ 132.823855][ T6424] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 132.831081][ T6424] __mutex_lock+0x1a3/0x1550 [ 132.836253][ T6424] nbd_queue_rq+0xc6/0x1100 [ 132.841276][ T6424] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 132.847338][ T6424] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 132.854199][ T6424] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 132.860887][ T6424] blk_mq_run_hw_queue+0x348/0x4f0 [ 132.866533][ T6424] blk_mq_dispatch_list+0xd16/0xe10 [ 132.872422][ T6424] blk_mq_flush_plug_list+0x48d/0x570 [ 132.878309][ T6424] __blk_flush_plug+0x3ed/0x4d0 [ 132.883854][ T6424] __submit_bio+0x28d/0x580 [ 132.888907][ T6424] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 132.895069][ T6424] block_read_full_folio+0x599/0x830 [ 132.900892][ T6424] filemap_read_folio+0x137/0x3b0 [ 132.906437][ T6424] do_read_cache_folio+0x358/0x590 [ 132.912106][ T6424] read_part_sector+0xb6/0x2b0 [ 132.917478][ T6424] adfspart_check_ICS+0xb1/0x960 [ 132.922978][ T6424] bdev_disk_changed+0x817/0x1770 [ 132.928518][ T6424] blkdev_get_whole+0x380/0x510 [ 132.933979][ T6424] bdev_open+0x31e/0xd30 [ 132.938734][ T6424] blkdev_open+0x470/0x610 [ 132.943665][ T6424] do_dentry_open+0x785/0x14e0 [ 132.949118][ T6424] vfs_open+0x3b/0x340 [ 132.953729][ T6424] path_openat+0x2e08/0x3860 [ 132.958850][ T6424] do_file_open+0x23e/0x4a0 [ 132.963900][ T6424] do_sys_openat2+0x113/0x200 [ 132.969099][ T6424] __x64_sys_openat+0x138/0x170 [ 132.974560][ T6424] do_syscall_64+0x15f/0xf80 [ 132.980288][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.986703][ T6424] [ 132.986703][ T6424] -> #4 (set->srcu){.+.+}-{0:0}: [ 132.993935][ T6424] __synchronize_srcu+0xca/0x300 [ 132.999400][ T6424] elevator_switch+0x1e8/0x7a0 [ 133.004858][ T6424] elevator_change+0x2cc/0x450 [ 133.010140][ T6424] elevator_set_default+0x36c/0x430 [ 133.015853][ T6424] blk_register_queue+0x3e9/0x4e0 [ 133.021396][ T6424] __add_disk+0x677/0xd50 [ 133.026418][ T6424] add_disk_fwnode+0xfb/0x480 [ 133.031612][ T6424] nbd_dev_add+0x72c/0xb50 [ 133.036546][ T6424] nbd_init+0x168/0x1f0 [ 133.041250][ T6424] do_one_initcall+0x250/0x870 [ 133.046557][ T6424] do_initcall_level+0x104/0x190 [ 133.052028][ T6424] do_initcalls+0x59/0xa0 [ 133.056902][ T6424] kernel_init_freeable+0x2a6/0x3e0 [ 133.062624][ T6424] kernel_init+0x1d/0x1d0 [ 133.067484][ T6424] ret_from_fork+0x514/0xb70 [ 133.072604][ T6424] ret_from_fork_asm+0x1a/0x30 [ 133.077900][ T6424] [ 133.077900][ T6424] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 133.086078][ T6424] __mutex_lock+0x1a3/0x1550 [ 133.091206][ T6424] elevator_change+0x1b3/0x450 [ 133.096549][ T6424] elevator_set_none+0xb5/0x140 [ 133.101921][ T6424] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 133.108245][ T6424] nbd_start_device+0x17f/0xb10 [ 133.113619][ T6424] nbd_genl_connect+0x165b/0x1cf0 [ 133.119157][ T6424] genl_family_rcv_msg_doit+0x22a/0x330 [ 133.125248][ T6424] genl_rcv_msg+0x61c/0x7a0 [ 133.130269][ T6424] netlink_rcv_skb+0x232/0x4b0 [ 133.135568][ T6424] genl_rcv+0x28/0x40 [ 133.140066][ T6424] netlink_unicast+0x75c/0x8e0 [ 133.145418][ T6424] netlink_sendmsg+0x813/0xb40 [ 133.150794][ T6424] ____sys_sendmsg+0x972/0x9f0 [ 133.156086][ T6424] ___sys_sendmsg+0x2a5/0x360 [ 133.161300][ T6424] __x64_sys_sendmsg+0x1bd/0x2a0 [ 133.166794][ T6424] do_syscall_64+0x15f/0xf80 [ 133.171908][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.178318][ T6424] [ 133.178318][ T6424] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 133.186957][ T6424] blk_alloc_queue+0x546/0x680 [ 133.192258][ T6424] __blk_mq_alloc_disk+0x197/0x390 [ 133.197913][ T6424] nbd_dev_add+0x499/0xb50 [ 133.202865][ T6424] nbd_init+0x168/0x1f0 [ 133.207553][ T6424] do_one_initcall+0x250/0x870 [ 133.212869][ T6424] do_initcall_level+0x104/0x190 [ 133.218336][ T6424] do_initcalls+0x59/0xa0 [ 133.223196][ T6424] kernel_init_freeable+0x2a6/0x3e0 [ 133.228918][ T6424] kernel_init+0x1d/0x1d0 [ 133.233859][ T6424] ret_from_fork+0x514/0xb70 [ 133.238978][ T6424] ret_from_fork_asm+0x1a/0x30 [ 133.244292][ T6424] [ 133.244292][ T6424] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 133.251780][ T6424] fs_reclaim_acquire+0x71/0x100 [ 133.257326][ T6424] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 133.263776][ T6424] __alloc_skb+0x1d0/0x7d0 [ 133.268717][ T6424] tcp_stream_alloc_skb+0x3f/0x580 [ 133.274434][ T6424] tcp_sendmsg_locked+0x1345/0x5450 [ 133.280237][ T6424] tcp_sendmsg+0x2f/0x50 [ 133.284995][ T6424] sock_write_iter+0x406/0x4f0 [ 133.290274][ T6424] vfs_write+0x61d/0xb90 [ 133.295079][ T6424] ksys_write+0x150/0x270 [ 133.299971][ T6424] do_syscall_64+0x15f/0xf80 [ 133.305083][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.311499][ T6424] [ 133.311499][ T6424] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 133.319152][ T6424] __lock_acquire+0x15a5/0x2cf0 [ 133.324534][ T6424] lock_acquire+0x106/0x350 [ 133.329556][ T6424] lock_sock_nested+0x41/0x100 [ 133.334930][ T6424] inet_shutdown+0x6a/0x390 [ 133.339951][ T6424] nbd_mark_nsock_dead+0x2e9/0x560 [ 133.345930][ T6424] sock_shutdown+0x15e/0x260 [ 133.351128][ T6424] nbd_clear_sock+0x24/0x170 [ 133.356237][ T6424] nbd_config_put+0x2dd/0x580 [ 133.361430][ T6424] nbd_release+0xfe/0x140 [ 133.366279][ T6424] bdev_release+0x536/0x650 [ 133.371294][ T6424] blkdev_release+0x15/0x20 [ 133.376312][ T6424] __fput+0x44f/0xa60 [ 133.380818][ T6424] task_work_run+0x1d9/0x270 [ 133.385927][ T6424] exit_to_user_mode_loop+0xed/0x480 [ 133.391729][ T6424] do_syscall_64+0x33e/0xf80 [ 133.396875][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.403294][ T6424] [ 133.403294][ T6424] other info that might help us debug this: [ 133.403294][ T6424] [ 133.413505][ T6424] Chain exists of: [ 133.413505][ T6424] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 133.413505][ T6424] [ 133.426134][ T6424] Possible unsafe locking scenario: [ 133.426134][ T6424] [ 133.433570][ T6424] CPU0 CPU1 [ 133.439062][ T6424] ---- ---- [ 133.444454][ T6424] lock(&nsock->tx_lock); [ 133.448881][ T6424] lock(&cmd->lock); [ 133.455387][ T6424] lock(&nsock->tx_lock); [ 133.462353][ T6424] lock(sk_lock-AF_INET); [ 133.466772][ T6424] [ 133.466772][ T6424] *** DEADLOCK *** [ 133.466772][ T6424] [ 133.475008][ T6424] 3 locks held by syz.2.165/6424: [ 133.480021][ T6424] #0: ffff888026ef1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 133.490147][ T6424] #1: ffff888026f01a60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 133.500881][ T6424] #2: ffff88803421a268 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 133.510441][ T6424] [ 133.510441][ T6424] stack backtrace: [ 133.516327][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.2.165 Not tainted syzkaller #0 PREEMPT(full) [ 133.516353][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.516367][ T6424] Call Trace: [ 133.516379][ T6424] [ 133.516389][ T6424] dump_stack_lvl+0xe8/0x150 [ 133.516427][ T6424] print_circular_bug+0x2e1/0x300 [ 133.516466][ T6424] check_noncircular+0x12e/0x150 [ 133.516505][ T6424] __lock_acquire+0x15a5/0x2cf0 [ 133.516541][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.516568][ T6424] ? rcu_is_watching+0x15/0xb0 [ 133.516601][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.516626][ T6424] ? trace_contention_end+0x3d/0x140 [ 133.516647][ T6424] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.516673][ T6424] ? __mutex_lock+0x319/0x1550 [ 133.516704][ T6424] ? inet_shutdown+0x6a/0x390 [ 133.516725][ T6424] lock_acquire+0x106/0x350 [ 133.516753][ T6424] ? inet_shutdown+0x6a/0x390 [ 133.516776][ T6424] ? sock_shutdown+0x14f/0x260 [ 133.516805][ T6424] lock_sock_nested+0x41/0x100 [ 133.516862][ T6424] ? inet_shutdown+0x6a/0x390 [ 133.516883][ T6424] inet_shutdown+0x6a/0x390 [ 133.516906][ T6424] nbd_mark_nsock_dead+0x2e9/0x560 [ 133.516936][ T6424] sock_shutdown+0x15e/0x260 [ 133.516963][ T6424] nbd_clear_sock+0x24/0x170 [ 133.516991][ T6424] nbd_config_put+0x2dd/0x580 [ 133.517020][ T6424] nbd_release+0xfe/0x140 [ 133.517045][ T6424] ? __pfx_nbd_release+0x10/0x10 [ 133.517069][ T6424] bdev_release+0x536/0x650 [ 133.517099][ T6424] ? __pfx_blkdev_release+0x10/0x10 [ 133.517124][ T6424] blkdev_release+0x15/0x20 [ 133.517148][ T6424] __fput+0x44f/0xa60 [ 133.517184][ T6424] task_work_run+0x1d9/0x270 [ 133.517211][ T6424] ? __pfx_task_work_run+0x10/0x10 [ 133.517239][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.517262][ T6424] exit_to_user_mode_loop+0xed/0x480 [ 133.517289][ T6424] ? rcu_is_watching+0x15/0xb0 [ 133.517322][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.517344][ T6424] do_syscall_64+0x33e/0xf80 [ 133.517372][ T6424] ? trace_irq_disable+0x3b/0x140 [ 133.517399][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.517422][ T6424] RIP: 0033:0x7fab7879c819 [ 133.517452][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.517474][ T6424] RSP: 002b:00007ffc4b28c308 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 133.517500][ T6424] RAX: 0000000000000000 RBX: 00007ffc4b28c3f0 RCX: 00007fab7879c819 [ 133.517515][ T6424] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 133.517527][ T6424] RBP: 0000000000020537 R08: 0000000000000001 R09: 0000000000000000 [ 133.517540][ T6424] R10: 0000001b2f720000 R11: 0000000000000246 R12: 00007ffc4b28c430 [ 133.517555][ T6424] R13: 00007fab78a15fac R14: 00000000000205b6 R15: 00007fab78a15fa0 [ 133.517580][ T6424] [ 133.870095][ T6424] block nbd2: shutting down sockets [ 133.987799][ T5822] read_mapping_page failed! [ 133.996529][ T5822] ERROR: (device loop5): txCommit: [ 133.996529][ T5822] [ 134.011051][ T5822] read_mapping_page failed! [ 134.020898][ T5822] ERROR: (device loop5): txCommit: [ 134.020898][ T5822] [ 134.267916][ T5822] ERROR: (device loop5): diFree: numfree > numinos [ 134.267916][ T5822] [ 134.277788][ T108] ERROR: (device loop5): diFree: numfree > numinos [ 134.277788][ T108] [ 134.288906][ T1148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.336149][ T1148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.379296][ T1148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.437870][ T1148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.554039][ T1148] bridge_slave_1: left allmulticast mode [ 134.559722][ T1148] bridge_slave_1: left promiscuous mode [ 134.566205][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.576880][ T1148] bridge_slave_0: left allmulticast mode [ 134.582651][ T1148] bridge_slave_0: left promiscuous mode [ 134.589659][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.709674][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.720872][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.732116][ T1148] bond0 (unregistering): Released all slaves [ 134.947313][ T1148] hsr_slave_0: left promiscuous mode [ 134.961309][ T1148] hsr_slave_1: left promiscuous mode [ 134.984881][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.003036][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.023411][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.030978][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.044966][ T1148] veth1_macvtap: left promiscuous mode [ 135.050507][ T1148] veth0_macvtap: left promiscuous mode [ 135.061830][ T1148] veth1_vlan: left promiscuous mode [ 135.070272][ T1148] veth0_vlan: left promiscuous mode [ 135.333572][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 135.379987][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 135.501128][ T5480] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.859278][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.866282][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.971114][ T5480] 8021q: adding VLAN 0 to HW filter on device eth2 [ 136.406774][ T5480] 8021q: adding VLAN 0 to HW filter on device eth3 [ 136.832675][ T5480] 8021q: adding VLAN 0 to HW filter on device eth4