last executing test programs: 3.747110022s ago: executing program 0 (id=138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4004af07, &(0x7f0000000000)) 3.497138796s ago: executing program 0 (id=140): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xf, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) 3.241402512s ago: executing program 0 (id=150): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) 3.126394668s ago: executing program 3 (id=143): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.09091063s ago: executing program 0 (id=144): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1, 0xfeca}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x40000000000001, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000200)={{r0}, "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"}) 2.634642476s ago: executing program 3 (id=145): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r1, r0, 0x0) 2.505422484s ago: executing program 2 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x4000, {[@mptcp=@mp_join={0x1e, 0x3, 0x9}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) 2.314696435s ago: executing program 3 (id=147): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000400, &(0x7f00000001c0)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496cbbb807f395fd1fa1b9b784390a296f41cd1a0d6fe36ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8496b14211ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058352dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cfc2a14a3d980d6a37926d88c7c32c4b2531e78e0c8693ded07ac17c49a8bc4cfe434b818197f66a1cc56b4f14d97aa438500000000000000083020c8347647eda9ce76f38c28d3cd37153352d5efe5785c9f19a9527869f4642d1d29a7ea10e3da51121d309e4a7a7fdaccfa203a1fa4fd61722e386806c161545e2d00c2f6e07081dd61822e8e83bd4f9cab70f728f56f48f597966cc35d2a6d000000004000"/402], 0x1, 0x2f5, &(0x7f00000007c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0x0, 0xbb) 2.283579427s ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 2.032346182s ago: executing program 2 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.923302768s ago: executing program 3 (id=152): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f00000022c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB="50cbc23edd95d137412bb3124ae9971d394135726821661707580f1605ff1facab9f4c92e26f8550136aa9db31af9e5b11147220f0530014d68d608d9fbccdc49526e0ce2b4e98c6c7bf01f07fb68066fdaba4a865aa9aa96b2f5afcc054053dea9a90b87222ea36091dd5e6716572857d6993c8161e45794f42a0651982b2733aeeb564e20cc21d149bd5baa9fbf93e556bf4cbb811e9e48de4a1d996ad7993e2e5604791c01e19af871927f549c354", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES64], 0x2, 0x212, &(0x7f00000008c0)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80284511, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xf8) 1.7162973s ago: executing program 1 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e95d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a956773a90a0f4e62d86d00000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4fa34274ab1ee31cc0cc461605390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b9988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bc32052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb77000000c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520526f21de11c56d59f35d367632952a93466ae595c6aacda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5100000000100000007a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b8382000000006936b7e4746e92dea6c5d1d33d84d96b3572de50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3819b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe7f445fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b723853bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1bae210baf3551b8dea8879e13859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a378700000000000000000000000000631ffc86fe0c8124536afbfc6300ee2c00000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a8693055e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e3570000000000000000009afb8e2221e1959e7421ac6d99c6902c0c73edb2e19eda0306aee0264f0dbe06b7848f9dda251fc662e1f65e96c80baf18e52beb9b606134b58474efcf1a11f2c06839ddba8a98ded151f45254007a0863b39547aed5baadafb7fc222ff9d12dd941460416cc6b987ec77329928d99e3d0ce03d16feb27bea30b7acf895e1bfedcb1d45754435aaf642ea992"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000006c77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.434573827s ago: executing program 3 (id=155): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) 1.075241877s ago: executing program 0 (id=156): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.075096487s ago: executing program 1 (id=157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) 935.671115ms ago: executing program 1 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 689.86544ms ago: executing program 1 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 658.839751ms ago: executing program 2 (id=160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008000}}], 0x1, 0x4000000) 460.797313ms ago: executing program 2 (id=161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x17, 0x38011, r1, 0x2000) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x820e06d, 0x80, 0x0, 0x911}, 0x0, 0x0) 379.265838ms ago: executing program 3 (id=162): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x1, &(0x7f0000000000)) 218.350627ms ago: executing program 1 (id=163): r0 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0xcd6, 0x4) sendto$unix(r0, 0x0, 0x0, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 132.452742ms ago: executing program 2 (id=164): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x84, 0x4a, 0x0, 0x0) 35.974347ms ago: executing program 0 (id=165): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 0s ago: executing program 1 (id=166): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)='C!9') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 77.265856][ T5758] cgroup: Unknown subsys name 'net' [ 77.410068][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.164612][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.204518][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.221213][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.229218][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.238562][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.247208][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.254713][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.354241][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.365017][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.373816][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.382367][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.390383][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.398495][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.441199][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.449872][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.458351][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.467091][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.475956][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.486390][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.494485][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.503054][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.529696][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.542378][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.551126][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.558827][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.006224][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 82.024510][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.103659][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.276092][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.287442][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.295195][ T5770] bridge_slave_0: entered allmulticast mode [ 82.303076][ T5770] bridge_slave_0: entered promiscuous mode [ 82.331243][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.338437][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.346352][ T5776] bridge_slave_0: entered allmulticast mode [ 82.353996][ T5776] bridge_slave_0: entered promiscuous mode [ 82.362980][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.370155][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.377610][ T5776] bridge_slave_1: entered allmulticast mode [ 82.384981][ T5776] bridge_slave_1: entered promiscuous mode [ 82.392906][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.404967][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.412268][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.419483][ T5770] bridge_slave_1: entered allmulticast mode [ 82.428984][ T5770] bridge_slave_1: entered promiscuous mode [ 82.436047][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.443293][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.452902][ T5774] bridge_slave_0: entered allmulticast mode [ 82.460173][ T5774] bridge_slave_0: entered promiscuous mode [ 82.468670][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.476058][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.483776][ T5774] bridge_slave_1: entered allmulticast mode [ 82.491256][ T5774] bridge_slave_1: entered promiscuous mode [ 82.585689][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.608677][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.620951][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.634004][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.663231][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.685840][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.731744][ T5770] team0: Port device team_slave_0 added [ 82.757761][ T5776] team0: Port device team_slave_0 added [ 82.768900][ T5770] team0: Port device team_slave_1 added [ 82.799559][ T5774] team0: Port device team_slave_0 added [ 82.807557][ T5776] team0: Port device team_slave_1 added [ 82.828816][ T5774] team0: Port device team_slave_1 added [ 82.879814][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.886914][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.914098][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.937622][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.945076][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.952693][ T5779] bridge_slave_0: entered allmulticast mode [ 82.959651][ T5779] bridge_slave_0: entered promiscuous mode [ 82.978484][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.986015][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.012239][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.025197][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.032517][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.059098][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.072195][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.079211][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.105926][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.132428][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.140094][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.155354][ T5779] bridge_slave_1: entered allmulticast mode [ 83.162811][ T5779] bridge_slave_1: entered promiscuous mode [ 83.199126][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.208651][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.235612][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.283538][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.291378][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.319076][ T51] Bluetooth: hci0: command tx timeout [ 83.325387][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.346882][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.365379][ T5770] hsr_slave_0: entered promiscuous mode [ 83.372843][ T5770] hsr_slave_1: entered promiscuous mode [ 83.407900][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.447203][ T5776] hsr_slave_0: entered promiscuous mode [ 83.453915][ T5776] hsr_slave_1: entered promiscuous mode [ 83.460193][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.468770][ T51] Bluetooth: hci1: command tx timeout [ 83.474959][ T5776] Cannot create hsr debugfs directory [ 83.520984][ T5774] hsr_slave_0: entered promiscuous mode [ 83.527431][ T5774] hsr_slave_1: entered promiscuous mode [ 83.534374][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.542091][ T5774] Cannot create hsr debugfs directory [ 83.553737][ T5779] team0: Port device team_slave_0 added [ 83.620780][ T51] Bluetooth: hci3: command tx timeout [ 83.626602][ T51] Bluetooth: hci2: command tx timeout [ 83.634851][ T5779] team0: Port device team_slave_1 added [ 83.732175][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.739184][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.765482][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.817539][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.824861][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.851273][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.963341][ T5779] hsr_slave_0: entered promiscuous mode [ 83.969925][ T5779] hsr_slave_1: entered promiscuous mode [ 83.976805][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.984539][ T5779] Cannot create hsr debugfs directory [ 84.209904][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.222524][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.233173][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.251005][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.373620][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.394257][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.405926][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.433645][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.520033][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.531633][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.554003][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.564894][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.656361][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.689433][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.704095][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.717022][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.728734][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.805807][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.836847][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.844336][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.875258][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.917077][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.924307][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.966907][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.023150][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.030415][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.049115][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.063374][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.074384][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.081629][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.135039][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.156536][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.163786][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.208174][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.232388][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.239564][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.255363][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.262627][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.289941][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.312841][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.381557][ T51] Bluetooth: hci0: command tx timeout [ 85.399161][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.406958][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.537835][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.542782][ T51] Bluetooth: hci1: command tx timeout [ 85.638573][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.683260][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.702324][ T51] Bluetooth: hci2: command tx timeout [ 85.707898][ T51] Bluetooth: hci3: command tx timeout [ 85.885107][ T5774] veth0_vlan: entered promiscuous mode [ 85.923637][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.973317][ T5774] veth1_vlan: entered promiscuous mode [ 86.121730][ T5774] veth0_macvtap: entered promiscuous mode [ 86.134697][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.154827][ T5770] veth0_vlan: entered promiscuous mode [ 86.163512][ T5774] veth1_macvtap: entered promiscuous mode [ 86.176152][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.212547][ T5770] veth1_vlan: entered promiscuous mode [ 86.259553][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.283863][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.326256][ T5776] veth0_vlan: entered promiscuous mode [ 86.344074][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.353877][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.363804][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.372705][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.390033][ T5779] veth0_vlan: entered promiscuous mode [ 86.412250][ T5770] veth0_macvtap: entered promiscuous mode [ 86.423706][ T5770] veth1_macvtap: entered promiscuous mode [ 86.468724][ T5779] veth1_vlan: entered promiscuous mode [ 86.484935][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.497941][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.514622][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.525929][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.536705][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548048][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.557960][ T5776] veth1_vlan: entered promiscuous mode [ 86.602578][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612513][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.623656][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.632597][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.668015][ T5776] veth0_macvtap: entered promiscuous mode [ 86.707330][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.722635][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.765352][ T5776] veth1_macvtap: entered promiscuous mode [ 86.788291][ T5779] veth0_macvtap: entered promiscuous mode [ 86.805504][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.816029][ T5779] veth1_macvtap: entered promiscuous mode [ 86.822626][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.861660][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.878270][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.891011][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.904313][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.919391][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.975079][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.987629][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.999218][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.020524][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.035586][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.059481][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.084994][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.114826][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.143403][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.162160][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.180332][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.195875][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.206768][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.229027][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.245229][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.257839][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.270881][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.279674][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.366138][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.387028][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.398223][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.409680][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.421045][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.434886][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.452464][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.461073][ T51] Bluetooth: hci0: command tx timeout [ 87.472641][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.485972][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.503380][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.519572][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.528778][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.542950][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.625153][ T51] Bluetooth: hci1: command tx timeout [ 87.660983][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.668893][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.781762][ T51] Bluetooth: hci3: command tx timeout [ 87.787941][ T51] Bluetooth: hci2: command tx timeout [ 87.850527][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.889770][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.101965][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.110141][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.200131][ T5860] syz.2.6[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.223248][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.252670][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.262862][ T5861] syz.3.5 (5861): /proc/5858/oom_adj is deprecated, please use /proc/5858/oom_score_adj instead. [ 88.596402][ T5866] loop3: detected capacity change from 0 to 128 [ 88.770404][ T27] audit: type=1800 audit(1769024881.331:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="bus" dev="loop3" ino=1048592 res=0 errno=0 [ 89.106619][ T5860] loop2: detected capacity change from 0 to 32768 [ 89.168410][ T5860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6 (5860) [ 89.249096][ T5860] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.272135][ T5860] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 89.301350][ T5860] BTRFS info (device loop2): force clearing of disk cache [ 89.309411][ T5860] BTRFS info (device loop2): force zlib compression, level 3 [ 89.330067][ T5860] BTRFS info (device loop2): enabling auto defrag [ 89.341584][ T5860] BTRFS info (device loop2): metadata ratio 257 [ 89.362045][ T5860] BTRFS info (device loop2): enabling disk space caching [ 89.369164][ T5860] BTRFS info (device loop2): disk space caching is enabled [ 89.542644][ T51] Bluetooth: hci0: command tx timeout [ 89.700508][ T51] Bluetooth: hci1: command tx timeout [ 89.708301][ T5860] BTRFS info (device loop2): enabling ssd optimizations [ 89.722072][ T5860] BTRFS info (device loop2): auto enabling async discard [ 89.761614][ T5860] BTRFS info (device loop2): rebuilding free space tree [ 89.814394][ T5869] loop0: detected capacity change from 0 to 32768 [ 89.862117][ T51] Bluetooth: hci2: command tx timeout [ 89.867729][ T51] Bluetooth: hci3: command tx timeout [ 89.934257][ T5869] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.989390][ T5860] BTRFS info (device loop2): disabling free space tree [ 90.049878][ T5860] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.092532][ T5869] XFS (loop0): Ending clean mount [ 90.096942][ T5860] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.372146][ T5906] loop3: detected capacity change from 0 to 1024 [ 90.525325][ T5779] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.553980][ T1091] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 90.784942][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.486461][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.830999][ T5834] Process accounting resumed [ 91.898524][ T5926] Process accounting resumed [ 92.272588][ T968] cfg80211: failed to load regulatory.db [ 92.368150][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'. [ 92.400488][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'. [ 92.434242][ T5941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'. [ 92.453643][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'. [ 92.699836][ T5943] loop0: detected capacity change from 0 to 2048 [ 92.745115][ T5943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.807513][ T5943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.943990][ T5943] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 9: comm syz.0.26: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 92.993106][ T5943] EXT4-fs (loop0): Remounting filesystem read-only [ 93.166834][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.816959][ T5966] loop3: detected capacity change from 0 to 1024 [ 93.900004][ T5966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.946905][ T5972] loop0: detected capacity change from 0 to 1024 [ 93.954981][ T5972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.981478][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.046636][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.085444][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.172951][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.415556][ T5834] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 94.430505][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.463318][ T5834] usb 2-1: config 0 descriptor?? [ 94.713217][ T5834] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 94.742620][ T5834] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 94.957093][ T5834] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 94.982410][ T5834] [drm] Initialized udl on minor 2 [ 95.124609][ T5978] loop3: detected capacity change from 0 to 40427 [ 95.156951][ T5978] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 95.183678][ T5978] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.226602][ T5978] F2FS-fs (loop3): invalid crc value [ 95.296291][ T5978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.325049][ T5834] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 95.373209][ T5834] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 95.409092][ T968] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 95.424735][ T5995] loop2: detected capacity change from 0 to 256 [ 95.466815][ T5834] usb 2-1: USB disconnect, device number 2 [ 95.473488][ T968] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 95.569252][ T5978] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.603834][ T5995] FAT-fs (loop2): Directory bread(block 64) failed [ 95.611231][ T5978] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.612280][ T5995] FAT-fs (loop2): Directory bread(block 65) failed [ 95.640675][ T5995] FAT-fs (loop2): Directory bread(block 66) failed [ 95.647309][ T5995] FAT-fs (loop2): Directory bread(block 67) failed [ 95.682679][ T5995] FAT-fs (loop2): Directory bread(block 68) failed [ 95.689311][ T5995] FAT-fs (loop2): Directory bread(block 69) failed [ 95.726682][ T5995] FAT-fs (loop2): Directory bread(block 70) failed [ 95.760627][ T5995] FAT-fs (loop2): Directory bread(block 71) failed [ 95.767371][ T5995] FAT-fs (loop2): Directory bread(block 72) failed [ 95.800409][ T5995] FAT-fs (loop2): Directory bread(block 73) failed [ 95.953349][ T5770] syz-executor: attempt to access beyond end of device [ 95.953349][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.984787][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.003331][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.777097][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 96.894077][ T6006] Zero length message leads to an empty skb [ 97.007776][ T5980] syz.0.41 (5980): drop_caches: 1 [ 97.750189][ T6024] loop1: detected capacity change from 0 to 8192 [ 97.886325][ T6009] loop2: detected capacity change from 0 to 40427 [ 97.900658][ T788] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.949203][ T6009] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 97.975139][ T6009] F2FS-fs (loop2): invalid crc value [ 97.994677][ T6009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.114128][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.160369][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.187447][ T6009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.200403][ T788] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 98.209529][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.272021][ T6036] mmap: syz.3.63 (6036) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.273127][ T788] usb 1-1: config 0 descriptor?? [ 98.410051][ T5774] syz-executor: attempt to access beyond end of device [ 98.410051][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.452048][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 98.655880][ T6043] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 98.655880][ T6043] The task syz.3.65 (6043) triggered the difference, watch for misbehavior. [ 98.793443][ T788] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 99.267341][ T23] usb 1-1: USB disconnect, device number 2 [ 99.684583][ T6055] loop3: detected capacity change from 0 to 8192 [ 99.714234][ T6055] ======================================================= [ 99.714234][ T6055] WARNING: The mand mount option has been deprecated and [ 99.714234][ T6055] and is ignored by this kernel. Remove the mand [ 99.714234][ T6055] option from the mount to silence this warning. [ 99.714234][ T6055] ======================================================= [ 100.231850][ T6069] netlink: 72 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.367668][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 100.559330][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 101.346388][ T6077] loop0: detected capacity change from 0 to 32768 [ 101.824579][ T6106] loop1: detected capacity change from 0 to 256 [ 101.841184][ T6106] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.864754][ T6106] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 101.890457][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.904090][ T6106] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 102.082873][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 102.122491][ T968] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 102.150441][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.164965][ T968] usb 3-1: Product: syz [ 102.169308][ T968] usb 3-1: Manufacturer: syz [ 102.179217][ T968] usb 3-1: SerialNumber: syz [ 102.366220][ T2932] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.386880][ T6113] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 102.410115][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.423081][ T968] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 102.450803][ T968] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.469242][ T968] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 102.479886][ T968] usb 3-1: media controller created [ 102.525900][ T968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.764420][ T968] zl10353_read_register: readreg error (reg=127, ret==-110) [ 102.848149][ T968] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 102.879567][ T968] usb 3-1: USB disconnect, device number 2 [ 103.016329][ T6127] loop3: detected capacity change from 0 to 4096 [ 103.032156][ T6127] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 103.084301][ T6127] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 103.379574][ T6133] loop0: detected capacity change from 0 to 64 [ 103.781683][ T5084] Bluetooth: hci3: command tx timeout [ 103.924082][ T6149] capability: warning: `syz.3.111' uses 32-bit capabilities (legacy support in use) [ 103.928028][ T6148] loop2: detected capacity change from 0 to 512 [ 103.978814][ T6148] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.000664][ T6148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.018929][ T6149] program syz.3.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.104545][ T6148] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.124943][ T6148] EXT4-fs (loop2): 1 truncate cleaned up [ 104.132887][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.276145][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.420621][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 104.428121][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.228545][ T6191] loop1: detected capacity change from 0 to 512 [ 105.242401][ T6185] loop0: detected capacity change from 0 to 2048 [ 105.306668][ T6185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.558620][ T6197] loop1: detected capacity change from 0 to 1024 [ 106.670191][ T6226] loop1: detected capacity change from 0 to 512 [ 106.696472][ T6226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.770579][ T6226] EXT4-fs (loop1): 1 truncate cleaned up [ 106.777704][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.810734][ T6232] loop3: detected capacity change from 0 to 1024 [ 106.990150][ T6205] loop2: detected capacity change from 0 to 40427 [ 107.027727][ T6205] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 107.069232][ T6205] F2FS-fs (loop2): build fault injection attr: rate: 27487, type: 0x7ffff [ 107.107185][ T6205] F2FS-fs (loop2): heap/no_heap options were deprecated [ 107.123094][ T6205] F2FS-fs (loop2): Image doesn't support compression [ 107.137937][ T6205] F2FS-fs (loop2): Unrecognized mount option "e" or missing value [ 107.169809][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.387193][ T6236] loop1: detected capacity change from 0 to 128 [ 107.427037][ T6236] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.533781][ T6236] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.616697][ T6241] loop3: detected capacity change from 0 to 64 [ 107.782435][ T6230] loop0: detected capacity change from 0 to 32768 [ 107.829807][ T6230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.144 (6230) [ 107.925646][ T6230] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.971509][ T6230] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 108.012656][ T6249] loop3: detected capacity change from 0 to 16 [ 108.025293][ T6230] BTRFS info (device loop0): using free space tree [ 108.069920][ T6249] erofs: (device loop3): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 108.279692][ T6230] BTRFS info (device loop0): enabling ssd optimizations [ 108.298839][ T6230] BTRFS info (device loop0): auto enabling async discard [ 108.571670][ T2932] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 108.954897][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.298523][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 109.353018][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 109.400819][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 109.898832][ T6293] syz.0.165: attempt to access beyond end of device [ 109.898832][ T6293] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 109.933755][ T6293] syz.0.165: attempt to access beyond end of device [ 109.933755][ T6293] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 109.967295][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 110.019843][ T6293] syz.0.165: attempt to access beyond end of device [ 110.019843][ T6293] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 110.043321][ T6297] [ 110.045738][ T6297] ====================================================== [ 110.052938][ T6297] WARNING: possible circular locking dependency detected [ 110.060109][ T6297] syzkaller #0 Not tainted [ 110.064656][ T6297] ------------------------------------------------------ [ 110.071834][ T6297] syz.0.165/6297 is trying to acquire lock: [ 110.077853][ T6297] ffff88802f9f20e0 (&type->s_umount_key#96){++++}-{3:3}, at: super_lock+0x17f/0x3a0 [ 110.087326][ T6297] [ 110.087326][ T6297] but task is already holding lock: [ 110.095095][ T6297] ffff888148950108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 110.104823][ T6297] [ 110.104823][ T6297] which lock already depends on the new lock. [ 110.104823][ T6297] [ 110.115283][ T6297] [ 110.115283][ T6297] the existing dependency chain (in reverse order) is: [ 110.124353][ T6297] [ 110.124353][ T6297] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 110.132582][ T6297] __mutex_lock+0x136/0xcc0 [ 110.137671][ T6297] bd_finish_claiming+0x22f/0x3f0 [ 110.143369][ T6297] blkdev_get_by_dev+0x45c/0x600 [ 110.148895][ T6297] bdev_open_by_dev+0x77/0x100 [ 110.154420][ T6297] setup_bdev_super+0x59/0x660 [ 110.159759][ T6297] mount_bdev+0x1d3/0x2d0 [ 110.164658][ T6297] legacy_get_tree+0xea/0x180 [ 110.169916][ T6297] vfs_get_tree+0x8c/0x280 [ 110.174909][ T6297] do_new_mount+0x24b/0xa40 [ 110.180067][ T6297] init_mount+0xde/0x130 [ 110.184979][ T6297] do_mount_root+0x97/0x230 [ 110.190155][ T6297] mount_root_generic+0x1a6/0x3e0 [ 110.195793][ T6297] prepare_namespace+0xc2/0x100 [ 110.201323][ T6297] kernel_init_freeable+0x42e/0x580 [ 110.205191][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 110.207082][ T6297] kernel_init+0x1d/0x1c0 [ 110.221469][ T6297] ret_from_fork+0x48/0x80 [ 110.226545][ T6297] ret_from_fork_asm+0x11/0x20 [ 110.231897][ T6297] [ 110.231897][ T6297] -> #3 (bdev_lock){+.+.}-{3:3}: [ 110.239074][ T6297] __mutex_lock+0x136/0xcc0 [ 110.244233][ T6297] bd_prepare_to_claim+0x1c0/0x490 [ 110.249926][ T6297] truncate_bdev_range+0x4e/0x260 [ 110.255731][ T6297] blkdev_common_ioctl+0x1c6b/0x2570 [ 110.261596][ T6297] blkdev_ioctl+0x512/0x730 [ 110.266675][ T6297] __se_sys_ioctl+0xfd/0x170 [ 110.271825][ T6297] do_syscall_64+0x55/0xa0 [ 110.276933][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.283406][ T6297] [ 110.283406][ T6297] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 110.291790][ T6297] down_write+0x97/0x200 [ 110.296593][ T6297] set_blocksize+0x247/0x4b0 [ 110.301825][ T6297] sb_min_blocksize+0xbe/0x190 [ 110.307226][ T6297] ext4_fill_super+0x6f0/0x6790 [ 110.312718][ T6297] get_tree_bdev+0x3f3/0x520 [ 110.317868][ T6297] vfs_get_tree+0x8c/0x280 [ 110.322831][ T6297] do_new_mount+0x24b/0xa40 [ 110.327880][ T6297] init_mount+0xde/0x130 [ 110.332675][ T6297] do_mount_root+0x97/0x230 [ 110.337731][ T6297] mount_root_generic+0x1a6/0x3e0 [ 110.343448][ T6297] prepare_namespace+0xc2/0x100 [ 110.348947][ T6297] kernel_init_freeable+0x42e/0x580 [ 110.354704][ T6297] kernel_init+0x1d/0x1c0 [ 110.359596][ T6297] ret_from_fork+0x48/0x80 [ 110.364562][ T6297] ret_from_fork_asm+0x11/0x20 [ 110.369889][ T6297] [ 110.369889][ T6297] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 110.378541][ T6297] down_write+0x97/0x200 [ 110.383341][ T6297] set_blocksize+0x1ff/0x4b0 [ 110.388475][ T6297] sb_set_blocksize+0x4a/0x100 [ 110.393827][ T6297] udf_load_vrs+0xe3/0xf20 [ 110.398788][ T6297] udf_fill_super+0x69b/0x1790 [ 110.404187][ T6297] mount_bdev+0x221/0x2d0 [ 110.409077][ T6297] legacy_get_tree+0xea/0x180 [ 110.414308][ T6297] vfs_get_tree+0x8c/0x280 [ 110.419272][ T6297] do_new_mount+0x24b/0xa40 [ 110.424322][ T6297] __se_sys_mount+0x2e7/0x3d0 [ 110.429714][ T6297] do_syscall_64+0x55/0xa0 [ 110.434711][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.441183][ T6297] [ 110.441183][ T6297] -> #0 (&type->s_umount_key#96){++++}-{3:3}: [ 110.449471][ T6297] __lock_acquire+0x2df1/0x7d40 [ 110.454872][ T6297] lock_acquire+0x19e/0x420 [ 110.459922][ T6297] down_read+0x46/0x2e0 [ 110.464636][ T6297] super_lock+0x17f/0x3a0 [ 110.469512][ T6297] fs_bdev_mark_dead+0xad/0x1f0 [ 110.474919][ T6297] bdev_mark_dead+0x83/0x1a0 [ 110.480055][ T6297] disk_force_media_change+0x14e/0x1d0 [ 110.486085][ T6297] nbd_ioctl+0x433/0xf10 [ 110.490886][ T6297] blkdev_ioctl+0x5b2/0x730 [ 110.496056][ T6297] __se_sys_ioctl+0xfd/0x170 [ 110.501209][ T6297] do_syscall_64+0x55/0xa0 [ 110.506182][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.512668][ T6297] [ 110.512668][ T6297] other info that might help us debug this: [ 110.512668][ T6297] [ 110.523089][ T6297] Chain exists of: [ 110.523089][ T6297] &type->s_umount_key#96 --> bdev_lock --> &bdev->bd_holder_lock [ 110.523089][ T6297] [ 110.536977][ T6297] Possible unsafe locking scenario: [ 110.536977][ T6297] [ 110.544450][ T6297] CPU0 CPU1 [ 110.549930][ T6297] ---- ---- [ 110.555492][ T6297] lock(&bdev->bd_holder_lock); [ 110.560463][ T6297] lock(bdev_lock); [ 110.566918][ T6297] lock(&bdev->bd_holder_lock); [ 110.574489][ T6297] rlock(&type->s_umount_key#96); [ 110.579638][ T6297] [ 110.579638][ T6297] *** DEADLOCK *** [ 110.579638][ T6297] [ 110.587814][ T6297] 2 locks held by syz.0.165/6297: [ 110.592905][ T6297] #0: ffff888022587998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x134/0xf10 [ 110.602262][ T6297] #1: ffff888148950108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 110.612449][ T6297] [ 110.612449][ T6297] stack backtrace: [ 110.618379][ T6297] CPU: 0 PID: 6297 Comm: syz.0.165 Not tainted syzkaller #0 [ 110.625691][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.635783][ T6297] Call Trace: [ 110.639084][ T6297] [ 110.642033][ T6297] dump_stack_lvl+0x18c/0x250 [ 110.646747][ T6297] ? load_image+0x400/0x400 [ 110.651724][ T6297] ? show_regs_print_info+0x20/0x20 [ 110.656983][ T6297] ? print_circular_bug+0x12b/0x1a0 [ 110.662217][ T6297] check_noncircular+0x2fc/0x400 [ 110.667194][ T6297] ? print_deadlock_bug+0x5d0/0x5d0 [ 110.672423][ T6297] ? lockdep_lock+0xf5/0x230 [ 110.677087][ T6297] ? _find_first_zero_bit+0xd3/0x100 [ 110.682486][ T6297] __lock_acquire+0x2df1/0x7d40 [ 110.687374][ T6297] ? __lock_acquire+0x1273/0x7d40 [ 110.692441][ T6297] ? verify_lock_unused+0x140/0x140 [ 110.697677][ T6297] ? verify_lock_unused+0x140/0x140 [ 110.702903][ T6297] lock_acquire+0x19e/0x420 [ 110.707438][ T6297] ? super_lock+0x17f/0x3a0 [ 110.712002][ T6297] ? __might_sleep+0xe0/0xe0 [ 110.716627][ T6297] ? __mutex_trylock_common+0x159/0x260 [ 110.722371][ T6297] ? read_lock_is_recursive+0x20/0x20 [ 110.727853][ T6297] ? trace_raw_output_contention_end+0xd0/0xd0 [ 110.734032][ T6297] down_read+0x46/0x2e0 [ 110.738227][ T6297] ? super_lock+0x17f/0x3a0 [ 110.742765][ T6297] super_lock+0x17f/0x3a0 [ 110.747142][ T6297] ? user_get_super+0x180/0x180 [ 110.752020][ T6297] ? mutex_lock_nested+0x20/0x20 [ 110.757057][ T6297] fs_bdev_mark_dead+0xad/0x1f0 [ 110.762032][ T6297] ? super_s_dev_set+0xa0/0xa0 [ 110.766824][ T6297] bdev_mark_dead+0x83/0x1a0 [ 110.771448][ T6297] disk_force_media_change+0x14e/0x1d0 [ 110.776938][ T6297] ? disk_check_media_change+0x310/0x310 [ 110.782630][ T6297] ? blk_mq_unquiesce_queue+0xbe/0x120 [ 110.788126][ T6297] nbd_ioctl+0x433/0xf10 [ 110.792404][ T6297] ? nbd_release+0x140/0x140 [ 110.797127][ T6297] ? nbd_release+0x140/0x140 [ 110.801750][ T6297] blkdev_ioctl+0x5b2/0x730 [ 110.806283][ T6297] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 110.811867][ T6297] ? bpf_lsm_file_ioctl+0x9/0x10 [ 110.816857][ T6297] ? security_file_ioctl+0x80/0xa0 [ 110.822097][ T6297] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 110.827589][ T6297] __se_sys_ioctl+0xfd/0x170 [ 110.832212][ T6297] do_syscall_64+0x55/0xa0 [ 110.836662][ T6297] ? clear_bhb_loop+0x40/0x90 [ 110.841410][ T6297] ? clear_bhb_loop+0x40/0x90 [ 110.846142][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.852165][ T6297] RIP: 0033:0x7f1164f9acb9 [ 110.856635][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.876447][ T6297] RSP: 002b:00007f1165ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.885054][ T6297] RAX: ffffffffffffffda RBX: 00007f1165216090 RCX: 00007f1164f9acb9 [ 110.893055][ T6297] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000004 [ 110.901059][ T6297] RBP: 00007f1165008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 110.909104][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.917232][ T6297] R13: 00007f1165216128 R14: 00007f1165216090 R15: 00007ffc44a65bd8 [ 110.925511][ T6297] [ 110.936608][ T6293] syz.0.165: attempt to access beyond end of device [ 110.936608][ T6293] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 110.949880][ T6293] syz.0.165: attempt to access beyond end of device [ 110.949880][ T6293] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 110.969504][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 110.979673][ T6293] syz.0.165: attempt to access beyond end of device [ 110.979673][ T6293] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 111.034400][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 111.045578][ T6293] syz.0.165: attempt to access beyond end of device [ 111.045578][ T6293] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 111.059456][ T6293] syz.0.165: attempt to access beyond end of device [ 111.059456][ T6293] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 111.073409][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 111.084847][ T6293] syz.0.165: attempt to access beyond end of device [ 111.084847][ T6293] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 111.099806][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 111.110460][ T6293] syz.0.165: attempt to access beyond end of device [ 111.110460][ T6293] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 111.123914][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 111.134090][ T6293] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 111.144070][ T6293] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)