last executing test programs: 15.08663084s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKBeYKqxnyceT3a7ThzvrD2fj2TP/OaZsZ/xd2dfvDP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD1Y6EXHt52nBUsRnohfRjVgo6+WIWFheyuv3I+K52GmOZyNiMBdRbr/z7emIVyPio9MRW9vrq+Xiiwfsx3f/+Pff/fDUW3/7w+D8f/90p/fauPXu3v3Vf/5873D7DAAAAG1TFEXRSS/zz6TX992mOwUATEV+/C+SvPzE17/+51t/maX+qNVqtVo9hbqqGO1etYiIjeo25XMGb8cDwDGzER833QUaJP9W60fEqaY7Acy0TtMd4Ehsba+vdlK+nerjwfJuez4XZF/+G50H13eMm05SP8dkWrevzejFM2P6szClPsySnH+3nv+13fZhWu+o85+WcfkPdy99ap2cf6+ef83Jyb87Mv+2yvn3Hyn/nvwBAAAAAGCG5f//LzX8/u/c4XflQD7t/d/lKfUBAAAAAAAAAJ60w47/94Dx/wAAAGBmla/VS785vbds3GexlcuvdiKeqq0PtEy6WGax6X4AAAAAAAAAAAAAQJv0d8/hvdqJGETEU4uLRVGUX1X1+lEddvvjru37D23W9J08AADs+uh07Vr+TsR8RFxNn/U3WFxcLIr5hcVisViYy89nh3PzxULldW2elsvmhgd4QtwfFuUPm69sVzXp9fKk9vrPK3/XsOgdoGNPyCD9Ncc0NxQ2ACS7j0ZbHpFOmKJ4etyTD9jH8X8CLcVS07crZl/TN1MAAADg6BVFUXTSx3mfSe/5d5vuFAAwFfnxv/6+wKHq7pj2iCfz89VqtVqtVj9WXVWMdq9aRMRGdZvyOYPh+AHgmNmIj5vuAg2Sf6v1I+K5pjsBzLRO0x3gSGxtr692Ur6d6uNBGt89nwuyL/+Nzs52eftR00nq55hM6/a1Gb14Zkx/np1SH2ZJzr9bz//abvswrXfU+U/LuPyHO5fMtU/Ov1fPv+bk5N8dmX9b5fz7j5R/T/4AAAAAADDD8v//l7z/m3cZAAAAAAAAAI6dre311Xzda37//3Mj1nP958mU8+88av4LaV7+x1rOv1vL/8u19XqV+ftv7h3//95eX/39nX99Nk8Pmv9cnumkW1Yn3SI66Td1+ml6mL172OagNyx/06DT7fXTOT/F4J24ETdjLS7sW7eb/h577Sv72sueDva1X9zX3n+o/dK+9kH63IFiIbefi9X4SdyMt3fay7a5Cfs/P6G9mNCe8++5/2+lnH+/8lXmv5jaO7Vp6f6H3YeO++p01O9548bnf3nh6Hdnos3oPdi3qnL/zjbQn52/yalh/Oz22q1zd6/fuXNrJdJk39KLkSZPWM5/sPM1t3f//8Jue77frx6v9z8cPnL+s2Iz+mPzf6EyX+7vS1PuWxNy/sP0lfN/O7WPPv6Pc/7jj/+XG+gPAAAAAAAAAAAAAAAAfJqiKHYuEX0jIi6n63+aujYTAJiu/PhfJHm5Wq1Wq9Xqk1dXFaO9Xi0i4q/VbcrnDL8Y9cMAgFn2/4j4R9OdoDHyb7H8eX/l9MWmOwNM1e33P/jR9Zs3127dbronAAAAAAAAAMDjyuN/LlfGf34xIpZq6+0b//XNWD7s+J/9PPNggNEnPND3GJvdYa9bGW78+dgZn/vcuPG/z8bD43/nMXF71f0YYzChfTihfW5C+/zIpXtpjbzQoyLn/3xlvPMy/zO14dfbMP5rfcz7Nsj5n63cnsv8v1Rbr5p/8duZy3/joCtuRndf/ufvvPfT87ff/+CVG+9df3ft3bUfX1pZuXDp8uUrV66cf+fGzbULu9+PptczIOefx752Hmi75Pxz5vJvl5z/F1It/3bJ+X8x1fJvl5x/fr4n/3bJ+efXPvJvl5z/S6mWf7vk/L+Savm3y9b2+lyZ/8upruQ/nX/I0qh8/H811Y7/dsn5v5Jq+bdLzv9cquXfLjn/86k+QP4+Hv4Eyfnnd7gc/+2S819JtfzbJed/MdXyb5ec/6VUy79dcv6vplr+7ZLz/1qq5d8uOf/LqZZ/u+T8v55q+bdLzv9KquXfLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7vsff7/4878ryiKQ2xuxoyZGZxp+p4JAAAAAAAAAAAAAKibxunETe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3bzFy3fUdwM/sxV47hBgIwUkNrB1jjLNk15f4QutiwrUBSoGEQi/YrndtFnzDa5dAkWwaKJEwKqqomj60BYTaSFWFVfFAK0rzUPXy1LQP9KWiqoTUqApRQEVqK5qtZs7///fM7OzMrne8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzrW+e+XytKIr6n8Zfm4riRfWPN4xvalz2hlu9hQAAAMBK/V/j7+fvSBccWcKNmpb5u1f94zfn5+fniw8O/+7ol+fn0xXjRTG6viga10XX/v1DteZlgseKsdpQ0+dDPVY/3OP6kR7Xj/a4fl2P69f3uH6sx/ULdsACG8qfxzTubHvjw03lLi3uLEYb123vcKvHauuHhuLPchpqjdvMj54sZovTxUwx1bJ8uWytsfy3t9bX9Y4irmuoaV1b6kfIDz99Im5DLezj7S3run6f0Q/eVIz/6IefPvHHF5+9u9PsuRta7q/czp3b6tv52XBJua21Yn3aJ3E7h5q2c0uH52S4ZTtrjdvVP27fzueXuJ3D1zdzVbU/52PFUOPjpxv7aaT5x3ppP20Jl/33vUVRXLm+2e3LLFhXMVRsbLlk6PrzM1YekfX7qB9KLy1GlnWcbl3CcVqf09tbj9P210R8/reG240ssg3NT9MPPrNuwfO+3OM0qj/qxV4r7cdgv18rg3IMxuPi6caDfrzjMbg9PP5P71j8GOx47HQ4BtPjbjoGt/U6BofWDTe2OT0JtcZtrh+Du1uWH26sqdaYz+zofgxOXjxzfnLuk596/eyZ46dmTs2c3bt799Te/fsPHjw4eXL29MxU+fcN7u3Bt7EYSq+BbWHfxdfAa9uWbT5U57/av9fhWJfX4aa2Zfv9Ohxpf3C11XlBLjymy9fGw/WdPnZ1qFjkNdZ4fnat/HWYHnfT63Ck6XXY8WtKh9fhyBJeh/Vlzu9a2vcsI01/Om3DzfpasKnpGGz/fqT9GOz39yODcgyOhePiX3ct/rVgS9jexyeW+/3I8IJjMD3c8N5TvyR9vz92sDE6HZf31K+4bV1xaW7mwv2PHr948cLuIoxV8bKmY6X9eN3Y9JiKBcfr0LKP1yOzr3r8ng6Xbwr7auz19b/GFn2u6svsu7/7c9X46tZ5f7ZcuqcIo89We392+mpe358pS3bZn/VlPju58u/FUy5tev8dXeT9N+b+F8r1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/P7m09+PR8Ge134/v7PJ+vLlt2X6/H4+2P7j4flzr9dOOlWl/PsfCcXJ6qvv7cX2ZzXuWe0yOdH0/vjfMWtj/rwtJIeWipmNnseM2rWtkZDQ8rpG4htbjdG/L8qMhm9XX9eSeGztOd95b3tdwenTXrdZxOt62bL+P0/R+tdhxWuv107cb0/58joXj4s693Y/T+jJP7Vv5e+eG+GHTe+e6Xsfg6PC6+jaPpoOwfL+f3xCPwfuLE8W54nQx3bh2XeN4qjXWNfHA0o7BdeHPar9Xbu5yDO5sW7bfx2D6OrbYsVcbWfjg+6D9+RwLx8UTD3Q/BuvLvOVAf7933RkuScs0fe/a/vO1xX7mdU/bbrqZP/Oqb+ffHOj+s9n6MqcPLjdndt9P94VLbuuwn9pfv4u9pqaL1dlPm8N2Pntw8f1U3576Ml8+tMTj6UhRFJc//mDj573h31f+/NJ3v9ny7y6d/k3n8scffO72k3+7nO0HYO17oRwby691Tf8ytZR//wcAAADWhJj7h8JM5H8AAACojJj74/8KT+R/AAAAqIyY+0fCTDLJ/5vf8uzsC5eL1MyfD+L1aTc8VC4XO65T4fPx+evqlz/49Zkf/+Xlpa17qCiKnzz0Gx2X3/xQ3K7SeNjOa29tvXzhDS8vaf3HHrm+XHN//Svh/uPjWeph0KmCO1UUxbfv+GJjPeMfutqYTz10rDHfd+Xxx+rLPH+o/Dze/pmXlcv/QSj/Hjl5vOX2z4T98P0wp97ZeX/E233j6uu2HPjA9fXF29W2vbjxsJ/4cHm/8ffkfOmxcvm4nxfb/r/6wpPfqC//6Gs6b//loc7b/2S436+H+T+vLJdvfg7qn8fbfS5sf1xfvN39X/tOx+2/9vly+fNvK5c7FmZc/87w+fa3PTvbvL8erR1veVzF28vl4vqnvvvbjevj/cX7b9/+saNXW/ZH+/Hx1D+X9zPZtny8PK4n+ou29dfvp/n4jOt/8reOteznXuu/9r5nXlm/3/b139e23HDb7dt/Y9Mffu6LHdcXt+fIn51veTxH3htex2H9T3w4HI/h+v+99sWW9UbH3tv6/hOX/8qmyy2PJ3rHj8r1X3vjqcb8j/Ef//5tL7r9xVdeXd93RfH0+8v767X+U390rmX7v3rXrsbzEa+PHf329S8mrv/CJybOnpu7NDvdtFcbvzvnXeX2rB/bsLG+vXeE99b2z4+eu/iRmQvjU+NTRTFe3V+hd8O+FuZz5biy3NvveiQ8n/f83rc37vinL8TL/+Xh8vKr7yy/br02LPelcPmm8vmbr61w/U9svavx+q49VX7e0mPvgy3b//PgkhYMj7/9+4J4vJ9/+Uca+6F+XePrRnxdr3D7vzdd3s+3wn6dD7+Zedtd19fXvHz83QhX31++3le8/8LbXHxe/yQ83+/+fnn/cbvi4/1e+D7mO5tb3+/i8fGty0Pt99/4LR5XwvtJcaW8Pi4V9/fV5+/quHnx95AUV+5ufP476X7uXtbDXMzcJ+cmT8+evfTo5MWZuYuTc5/81NEz5y6dvXi08bs8j3601+2vvz9tbLw/Tc/s31dMbSiK4lwxtQpvWDdn++sfLW37zz9yYvrA1I7pmZPHL528+Mj5mQunTszNnZiZnttx/OTJmU/0uv3s9OHdew7tPbBn4tTs9OGDhw7tPTQxe/ZcfTPKjeph/9THJs5eONq4ydzhfYd2P/DAvqmJM+emZw4fmJqauNTr9o2vTRP1W//6xIWZ08cvzp6ZmZib/dTM4d2H9u/f0/O3AZ45f3JufPLCpbOTl+ZmLkyWj2X8YuPi+te+Xrenmub+rfx+tl2t/EV8xXvu259+P2vd1z+z6F2Vi7T9AtFnw++i+YeXnD+4lM9j7h8NM8kk/wMAAEAOYu5fF2Yi/wMAAEBlxNy/PsxE/gcAAIDKiLl/LMwkk/yv/6//v7T+f3m9/n9e/f/zHy97pWu9/x/78/r/ebjF/f8Vr1//X/+/ev3/pffn1/r26//r/7PQoPX/Y+7fUBRZ5n8AAADIQcz9G8NM5H8AAACojJj7bwszkf8BAACgMmLuf1GYSSb5X/9/Sf3/Pb0KV9Xv/zv/v/5/sTb7//HJ0f/PxrL79x94uOVT/f9A/1//X/9f/1//nxUbXfSaW9X/j7n/9jCTTPI/AAAA5CDm/heHmcj/AAAAUBkx998RZiL/AwAAQGXE3L8pzCST/K//7/z/+v/6/5Xu/6/0/P9NG6P/vzY4/393+v893HD/f0z/fy32/0f7u/2D3f/vufn6/9wUg3b+/5j7XxJmkkn+BwAAgBzE3P/SMBP5HwAAACoj5v6XhZnI/wAAAFAZMfffGWaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/d6f/34Pz/efX/+7z9g93/7/f5/0ff2n57/X86GbT+f8z9Lw8zyST/AwAAQA5i7r8rzET+BwAAgMqIuf8VYSbyPwAAAFRGzP2bw0wyyf/6//r/+v/6//r/ndffu/9f0v8fLPr/3en/96D/r/+v/7+0/n+Hb371/+lk0Pr/MfffHWaSSf4HAACAHMTcf0+YifwPAAAAlRFz/0+Fmcj/AAAAUBkx928JM8kk/+v/6//r/+fV/79vnf6//n+16f93p//fg/6//r/+/xLP/7/Qcvr/63vdGZUxaP3/mPtfGWaSSf4HAACAHMTc/6owE/kfAAAAKiPm/leHmcj/AAAAUBkx94+HmWSS//X/q9X//9O/fuLVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+q9P/Jx6D1/2Pu3xpmkkn+BwAAgBzE3L8tzET+BwAAgMqIuf/eMBP5HwAAACoj5v7tYSaZ5H/9/2r1/yP9f/3/buuvaP8/0f/Pm/5/B00vUv3/HvT/9f+z7//H7371/+mPQev/x9z/mjCTTPI/AAAA5CDm/h1hJvI/AAAAVEbM/a8NM5H/AQAAoDJi7t8ZZpJJ/tf/1//X/9f/1//vvH79/7VJ/7+75fb/1+n/6//r/2fW/3f+f/pr0Pr/Mfe/Lswkk/wPAAAAOYi5f1eYifwPAAAAlRH//2b5/17lfwAAAKiimPsnwkwyyf/6//r/OfX/a/r/+v/6/5Wn/9+d8//3oP+v/6//r/9PXw1a/z/m/teHmWSS/wEAACAHMfffH2Yi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/z6n/n9X5/9cvvn79f/3/KtP/707/vwf9f/3/qvX/i0L/n1tq0Pr/MffvDjPJJP8DAABADmLu3xNmIv8DAABAZcTcvzfMRP4HAACAyoi5f1+YSSb5X/9f//8m9v9HC/3/luPD+f/1//X/bz79/+70/3u4+f3/DYX+/01zq7d/IPv/zv/PLTZo/f+Y+x8IM8kk/wMAAEAOYu7fH2Yi/wMAAEBlxNx/IMwk5P9O/68bAAAAWFti7j8YZpLJv//r/1ek//+bf9+y7gHp/zv/f9vxUa3+/wb9/zD1/wdLRfv/7S+LG6b/34Pz/+v/6//r/9NXg9b/j7n/UJhJJvkfAAAAchBz/xvCTOR/AAAAqIyY+386zET+BwAAgMqIuf9nwkwyyf/6/xXp/7fR/9f/77Z+5//X/6+yivb/+6ZS/f8h/X/9/8Hafv1//X8Wuvn9//jR0vr/MfcfDjPJJP8DAABADmLu/9kwE/kfAAAAKiPm/jeGmcj/AAAAUBkx9x8JM8kk/+v/6//r/+v/35z+/xuLdoPY/68fPPr/1aL/312l+v/O/6//P2Dbr/+v/89Cg3b+/5j73xRmkkn+BwAAgBzE3P9gmIn8DwAAAJURc/+bw0zkfwAAAKiMmPvfEmaSSf7X/9f/1//X/3f+/87r1/9fm/T/u9P/70H/X/9f/1//n74atP5/zP1vDTPJJP8DAABADmLuf1uYifwPAAAAlRFz/9vDTOR/AAAAqIyY+98RZpJJ/tf/1//X/9f/1//vvH79/7VJ/787/f8e9P/1//X/9f/pq0Hr/8fc/3NhJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/M8xE/gcAAIDKiLn/XWEmmeR//X/9f/1//X/9/87r1/9fm/T/u9P/70H/X/9f/1//n74atP5/zP3vDjPJJP8DAABADmLu//kwE/kfAAAAKiPm/veEmcj/AAAAUBkx9/9CmEkm+V//X/9/sPr/85ebb6f/r/9f9Kv/X7+R/n8W9P+70//voUP/f73+v/6//r/+Pzds0Pr/Mfe/N8wkk/wPAAAAOYi5/31hJvI/AAAAVEbM/e8PM5H/AQAAoDJi7n84zCST/K//n2X/Pz3kwev/O/+//r/z/+v/r4z+f3f6/z04/7/+v/6//j99NWj9/5j7HwkzyST/AwAAQA5i7v9AmIn8DwAAAJURc/8vhpnI/wAAAFAZMfd/MMwkk/yv/59l///mn/+/1nn78+v/j7QcHzn1/8eans90XOr/6/+vAv3/7vT/e9D/1/8f5P5/OJo3LHJ7/X8G0aD1/2Pu/1CYSSb5HwAAAHIQc/8vhZnI/wAAAFAZMff/cpiJ/A8AAACVEXP/r4SZZJL/9f/1/53/3/n/nf+/8/r1/9cm/f/u9P970P/X/x/k/n8P+v8MokHr/8fc/6thJosGv+f+awkPEwAAABggMfd/OMwkk3//BwAAgBzE3H80zET+BwAAgMqIuf9YmEkm+V//v73/H8+oqv+v/6//r/+v/78W9a///4rbi0L/X/9f/1//X/9f/5+VGLT+f8z9x8NMMsn/AAAAkIOY+38tzET+BwAAgMqIuf9EmIn8DwAAAJURc/90mEkm+f8W9v9HB7P/7/z/N9r//4n+v/5/oP/fmf7/6nD+/+70/3vQ/9f/1//X/6evBq3/H3P/TJhJJvkfAAAAKiz9ODjm/pNhJvI/AAAAVEbM/afCTOR/AAAAqIyY+z8SZpJJ/nf+f/1/5/+/Ff3/kZbl9f9L+v/6//2g/9+d/n8P+v9ruv9f3zf6//r/DJZB6//H3D8bZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nw4zyST/6//r/+fe/68VxRXn/9f/77R+/f+1Sf+/O/3/HvT/13T//1Zvv/6//j8LDVr/P+b+M2EmmeR/AAAAyEHM/WfDTOR/APh/9u6jyc67yuP4HY+tsJp5CbOe1SyHlXkJbNlRxZoiGYpkbJMzmJyDSSbnnEzOmJyDyTmaaKgS5dY5R2r11XMl9VXf5/mfz2dzkFBzb1ttUT+arx8AgGHk7r933GL/AwAAwDBy998nbmmy//X/+v/u/f9qJ8//3//r9f+n6f/1/9twoL+/cv2vO18Uft7+///+/5p76P/1//r/Sfp//b/+n3PNrf/P3X/fuKXJ/gcAAIAOcvffL26x/wEAAGAYufvvH7fY/wAAADCM3P3XxC1N9r/+X/+v/9f/7+v/b9H/6/+XzfP/p+n/N9D/6//1//p/tmpu/X/u/gfELU32PwAAAHSQu/+BcYv9DwAAAMPI3X/6/5Bz65l/w/4HAACAYZze/SdWD4pbmux//b/+X/+/lP7/mOf/n/P56P/1/+vo/6fp/zfQ/+v/9f/6f7Zqbv1/7v4Hxy1N9j8AAAB0kLv/IXGL/Q8AAADDyN3/0LjF/gcAAIBh5O5/WNzSZP/r//X/+v+l9P9H9Px//b/+f+FuWp35M0H/f5D+f4MN/f9qpf+fcsH9/PpPbznv/zz0//p/Dppb/5+7/9q45a6r1bFL/SQBAACAWcnd//C4pcn3/wEAAKCD3P3XxS32PwAAAAwjd//1cUuT/a//1//r//X/+v/1r6//XybP/592+P7/f//7Xvfs2/97/v80z//fdv9/51eG/p9lm1v/n7v/hrilyf4HAACADnL3PyJusf8BAABgGLn7Hxm32P8AAAAwjNz9j4pbmux//f9o/f9/7vu4s/r/vdpF/6//1//r/0en/5/m+f8b7P0xd7J+qP/X/3v+v/6fw5lb/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDBy9z82brH/AQAAYBi5+x8XtzTZ//r/0fr//R/n+f/6/3Wvr//X/49M/z9N/7/BKM//v8Svml3384e16/ev/9f/c9Dc+v/c/Y+PW5rsfwAAAOggd/8T4hb7HwAAAIaRu/+JcYv9DwAAAMPI3f+kuKXJ/tf/6/+X0f/nK+j/9f+Xv/9P+v9l0v9P0/9vMEr/f4l23c8v/f3r//X/HDS3/j93/5Pjlib7HwAAADrI3f+UuMX+BwAAgGHk7n9q3GL/AwAAwDBy9z8tbmmy//X/+v9l9P+e/6//9/x//f+F0f9P0/9voP/X/+v/9f9s1dz6/9z9N8YtTfY/AAAAdJC7/+lxi/0PAAAAw8jd/4y4xf4HAACAYeTuf2bc0mT/6//1//p//b/+f/3r6/+XSf8/Tf+/gf5f/6//1/+zVTPq/8/6qBOrZ8UtTfY/AAAAdJC7/9lxi/0PAAAAw8jd/5y4xf4HAACAYeTuf27c0mT/6/9n0//v5Xxj9f8nV6uV/n/VtP8/edbvZ31d6v/1/0dA/z9N/7+B/l//r//X/7NVM+r/936cu/95cUuT/Q8AAAAd5O5/ftxi/wMAAMAwcve/IG6x/wEAAGAYuftfGLc02f/6/9n0/3vG6v89///cr49O/b/n/x+k/z8a+v9p+v8N9P/6f/2//p+tmlv/n7v/RXHTsasu+VMEAAAAZiZ3/4vjlibf/wcAAIAOcve/JG6x/wEAAGChbjzwM7n7Xxq3NNn/+v/t9v/Hzvo5/b/+/9yvD/2//l//f/np/6fp/zfQ/+v/9f/6f7Zqbv1/7v6XxS1N9j8AAAB0kLv/prjF/gcAAIBh5O5/edxi/wMAAMAwcve/Im5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/7vt/4+f+Zf6f8ZwEf3/qVOnrrvs/X/u/lfGLU32PwAAAHSQu/9VcYv9DwAAAMPI3f/quMX+BwAAgGHk7r85bmmy//X/Tfv//FJfVv9//Wql/9f/6//1/9P0/9P0/xvo//X/nv+v/2er5vb8/9z9r4lbmux/AAAA6CB3/2vjFvsfAAAAhpG7/3Vxi/0PAAAAw8jd//q4pcn+1/837f89/1//r/8/6v7/jpX+/0gsov8/ef7Xn3v/f4P+X/8/oV3/f7e77Puh/l//z0Fz6/9z978hbmmy/wEAAKCD3P1vjFvsfwAAABhG7v43xS32PwAAAAwjd/+b46Yrm+x//b/+X/+v/9f/r3/9I37+/7HVaqX/34JF9P8T5t7/b+f5/+f+XX6G/l//v+T3r//X/3PQ3Pr/3P1viVua7H8AAADoIHf/W+MW+x8AAACGkbv/bXGL/Q8AAADDyN3/9rilyf7X/+v/9f/6/+H7/xsW0f97/v+W6P+nzaP/Pz/9v/5/ye9f/6//58Ltqv/P3f+OuKXJ/gcAAIAOcve/M26x/wEAAGAYufvfFbfY/wAAADCM3P3vjlua7H/9v/7/Yvr/fJ/6/7H6/+Oz6/9P7PvPa/L8f/3/luj/p+n/N9D/6//1/zfq/9mmuT3/P3f/e+KWJvsfAAAAOsjd/9649T/d2v8AAAAwjNz974tb7H8AAAAYRu7+98ctTfa//l//7/n/+v/hn/+v/29F/z9N/7+B/l//r//3/H+2am79f+7+D8QtTfY/AAAAdJC7/4Nxi/0PAAAAw8jd/6G4xf4HAACAYeTuvyVuabL/9f/6f/2//l//f/r3UP8/Bv3/tKPp/0/q//X/1c//R/xdoP/X/2/6eMY0t/4/d/+H45Ym+x8AAAA6yN3/kbjF/gcAAIBh5O7/aNxi/wMAAMAiXbnm53L3fyxuabL/9f/6f/2//l//v/719f/LtJP+P78o9P+e/x/69P//s+9HS3v+/7n//aX/1/+zfXPr/3P3fzxuabL/AQAAoIPc/Z+IW+x/AAAAGEbu/k/GLfY/AAAADCN3/6filib7X/+v/9f/6//1/+tfX/+/TJ7/P03/v4H+f6fPz1/6+9f/6/85aG79f+7+T8ctTfY/AAAAdJC7/zNxi/0PAAAAw8jd/9m4xf4HAACAYezt/ozLGu5//b/+X/+v/9f/r399/f8y6f+n6f830P/r//X/+n+2am79/+f2PurE6vNxS5P9DwAAAB3k7v9C3GL/AwAAwDBy998at9j/AAAAMIzc/V+MW5rsf/2//n8Z/f+pU6eu0//r//d/Pmf6/9v0/xT9/zT9/wb6f/2//l//z1bNrf/P3f+luKXJ/gcAAIAOcvd/OW6x/wEAAGAYufu/ErfY/wAAADCM3P1fjVua7H/9/wz6/xP6f8//1/+vPP9f/78l+v9p+v8NRuz/T1z4p7/rfv6wdv3+9f/6fw6aW/+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMAwcvd/I26x/wEAAGAYufu/Gbc02f/6/6Pr/+/8a9fl+f8nV+vfv/5f/6//1/9fbvr/afr/DUbs/y/Crvv5pb9//b/+n4Pm1v/n7v9W3LJ/+F11cZ8lAAAAMCe5+78dtzT5/j8AAAB0kLv/O3GL/Q8AAADDyN3/3bilyf7X/8/g+f8D9v+e/7/+60P/P+v+/wr9/xj0/9P0/xvo//X/+v8t9f/51az/725u/X/u/u/FLU32PwAAAHSQu//7cYv9DwAAAMPI3f+DuMX+BwAAgGHk7r8tbjlr/69ru0eh/9f/6//1//r/9a+v/18m/f+0C+3/j68O1/8n/b/+X//ftf/3/H9Om1v/n7v/h3GL7/8DAADA4lx1np/P3f+juMX+BwAAgGHk7v9x3GL/AwAAwDBy9/8kbrn9il29pSOl/9f/6//1//r/9a+v/18m/f80z//fQP+/jX7+av3/GP3/aqX/5/Dm1v/n7v9p3OL7/wAAADCM3P0/i1vsfwAAABhG7v6fxy32PwAAAAwjd/8v4pYm+1//r/8/ZP+/l2bq/0/T/5+m/19P/3809P/T9P8b6P89/1//7/n/bNXc+v/c/b+MW5rsfwAAAOggd/+v4hb7HwAAAIaRu//Xccva/X/siN4VAAAAsE25+38TtzT5/v/O+v/4S63/X3z/7/n/+n/9v/5/VvT/0/T/G+j/9f/6f/0/WzW3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/+vVb5T+X/+v/9f/s1Vz6/9z9/8xbmmy/wEAAKCD3P1/ilvsfwAAABhG7v7b4xb7HwAAAIaRu//PcUuT/a//1//r//X/+v/1r6//Xyb9/7Rd9v93/6/NL+v5/zvv//Mt6P/1//p/tmJu/X/u/r/ELU32PwAAAHSQu/+vcYv9DwAAAMPI3f+3uMX+BwAAgGHk7v973NJk/2/o/4/XL9T/T9L/73//+v/1Xx/6f/2//v/y0/9P8/z/DY6i/88/RI6w/z91Af/shdUM+vnD2vX71//r/zlobv1/7v5/xC1N9j8AAAB0kLv/jrjF/gcAAIBh5O7/Z9xi/wMAAMAwcvf/K25psv89/39J/f/V+n/9/3n6/2tv1v+f+fX6/970/9P0/xt4/r/+X/+v/2er5tb/5+7/dwAAAP//OS9W6A==") truncate(&(0x7f0000000000)='./file1\x00', 0x0) r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 12.563030419s ago: executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000004080)={0x77359400}, &(0x7f00000040c0)) rt_sigreturn() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) dup3(r2, r1, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") syz_open_procfs(0x0, &(0x7f0000003080)='cmdline\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x5451, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_rdma(&(0x7f00000049c0), 0x0, 0x0, 0x2890008, 0x0) getpgid(0xffffffffffffffff) 11.158516228s ago: executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) 11.032588739s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) set_mempolicy(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x56, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) 9.299925275s ago: executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x0) r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 9.205930046s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)='D', 0x1}], 0x1}, 0x0) close(r1) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) 8.93682502s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}}) fchmod(0xffffffffffffffff, 0x14c) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r5 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(r5) socket(0x25, 0x3, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0x7d, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) eventfd(0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00\n', @ANYRES32], 0x4c}}, 0x0) 8.114620504s ago: executing program 2: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x88, &(0x7f0000000240)=ANY=[@ANYBLOB="0466917de0f4d5a1d49b7a347fe2b84536a0e6"]) 7.629876635s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f00000020c0)="$eJzs3U2MG1cdAPBn73rTfJQ4JaFLGtqEQls+uttslvARQVM1F6Km4lap4hKlaYlIAyKVoFUPSU7caFWFKx/i1EtFERK9oKgnLpVoJC49FQ4ciIJUiQMUkkXxvuf1/mNr7M3uer3+/aTZ55n/s98b73g8npn3XgLGVr31d35+upbS5XfeOPaPh/6+9daSx9s5mq2/kx1zjZRSLc9Phtf7cGIxvfHRq6e6pbU01/pb5tPT19vP3Z5SupD2pyupmfZevvr6e3NPnbh4/NKB9988cm1t1h4AAMbLd64cmd/z1z/ft+vjt+4/mra0l5fj82ae35GP+4/mA/9y/F9Py+drHVOnqZBvMk/1kG+iS77Ochoh32SP8qfC6zZ65NtSUf5Ex7Ju6w2jrGzHzVSrzyybr9dnZhZ/k6fW7/qp2sy5M2efPz+kigKr7l8PpJT2m0ymcZwWdg57DwSwKF4vvM2FeGbhzrRfbbK/8q8/Ue/+fFgF6739K3+0yv/NRXscVs9m3ZrKepXP0Y48H68jxPuXBv38l9eL1yMafdaz13WEUbm+0KueE+tcj5XqVf+4XWxW38xpeR++FeKdn5/4Px2V/zHQ3b+d/zeZxnZaGPYOCNiw4n1zC1mJx/v6YnxLRfyuivjWivi2ivj2ijiMs9+99LP0Wm3pd378TT/o+bBynu3unH5iwPrE85GDlh/v+x3UnZYf7yeGjewPJ585/bXnnr26eP9/rb3938zb+/4838yfrSs5QzlfGM+rt+/9by4vp94j3z2hPnd3yd96vHt5vtrupddJHfuZ2+oxvfx5O3vl27c8XzPk25qnu0J94/HJtvC8cvxR9qvl/ZoM69sI6zEV6lH2K7tyGusBK1G2x173/5ftczo1as+fOXv6sTxfttM/TTS23Fp+cJ3rDdy5ftv/TKfl7X92tJc36p37hZ1Ly2ud+4VmWD7XY/mhPF++5743sbW1fObUD84+t9orD2Pu/MuvfP/k2bOnf+SBBxv7wYWNUY1xeTDsPROw1mZfevGHs+dffuXRMy+efOH0C6fPHTp8+NDc3OGvH5qfbR3Xz3Ye3QObydKX/rBrAgAAAAAAAAAAAPTrx8ePXf3Lu1/9YLH9/1L7v9L+v9z5W9r//zS0/4/t5Es7+NIOcFeXeCtP6GB1KuRr5OmTob67Qzl7wvM+ldP2OH65/X8pLvbrWupzb1ge++8t+UJ3Arf1lzIV+iCJ4wV+NqeXcvrrBENU29p9cU6r+rcu23rpn0K/FKOp/N/K1lD6MSntv3v161T2/7vWoY6svvVoTjjsdQS6+6f+v8d7ensD1ME0tGlhwSgewMYw7PE/y3nPkp7747fvujWVbNefWL6/jP2Xwp3Y6ONPKn9zjf/ZHv+u7/1fGDGvubJy//OLax90FJv29lt+XP/SD/Tuwcr/OJdf1ubh1F/5C78K5ccLQn36byh/W5/l37b++1ZW/v9y+eVte+TBfstfrHGtvrwe8bxxuf4XzxsXN8L6l749B17/FQ7UeDOXD+NsVMaZHdSojP/bS7wP4yt5vuwIy30OcbyTQetf7q8o3wN7wuvXKr7fjP872r6R06rPQxn/t2yPzS7z9Y75Rpf3drPua2BUfej6n8k0ttPCwsLantCqMNTCGfr7P+zfCcMuf9jvf5U4/m88ho/j/8Z4HP83xuP4vzEex9eL8Tj+b3w/4/i/MX5veN04PvB0RfzTFfG9FfH7KuL7KuKfqYgfqIjfXxF/oCJ+T0X8wYr45yrin6+IP1QRf6Qi/oWK+GZX2qOM6/rDOIvt83z+YXyU6z+9Pv+7K+LA6Pr5WweffPbt7zYX2/9Ptc6HbOm4jnc052vk384/yfPxunfqmL8VezfP/y3EN/r5Dhgnsf+M+P3+cEUcGF3lPi+fbxhDte499vTbb1Wv43xGyxdz+qWcfjmnj+Z0JqezOT2Y07l1qh9r48nf/v7Ia7Wl3/s7Q7zf+8lje6DYT9ShPusTzw8Mej977MdvUHda/gqbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxNvfV3fn66ltLld9449syJM7O3ljzeztFs/Z3smGu0n5fSYzmdyOkv84MbH716qjO9mdNamku1VGsvT09fb5e0PaV0Ie1PV1Iz7b189fX35p46cfH4pQPvv3nk2tq9AwAAALD5/T8AAP//iNsORA==") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 7.39838464s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x84}}, 0x0) 7.196657966s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) set_mempolicy(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x56, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) 6.063538707s ago: executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x28, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f00000000c0)=0x100, 0x4) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r6, &(0x7f0000000240)="b9", 0xfffffde5, 0x600000000) r7 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r7, 0x8002007ffb) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x0) 5.134150409s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca1c0fe}}], 0x300, 0x0, 0x0) 5.042449533s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x1, 0x65efefa8, 0x500}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000fedbdf254500000008000300cf3776a6f4289c927c459db3fd1f10ab9257ff319359360d402cf74f8c874a3f14f5110826a242e9d208b6c38721532172327b1b0dff36a4c1690bb1032891f2f39a5e4cb007205b9d3191df75f3ae6a7fc6081ed73805006d3f464c8467ce422579dd8581ab441b7ac852751c3be3b1dbd9a1b21b852963fe86a05b8b329020fb3d6d6bc08f73714063425beb2218b5f29e8b23d755ffbb1836df4ca3da33de6a316bb1724b511c6c5ad37e9c522303116b59a20ad0c4ab6ad62d88f357f6acc42f127a0aff98444488b9a893185a20e3cb420bb413ef93b0a728212a310eb7", @ANYRES32=r3, @ANYBLOB="0c0099000100000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4001) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000000)=[{r4, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r4) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) 4.576416583s ago: executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 4.460773765s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0xac, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "e9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "d7"}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, '3'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x0) 4.145561859s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) 3.946576867s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 3.325815194s ago: executing program 4: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) 3.126353126s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) set_mempolicy(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x56, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) 2.972319182s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) r2 = dup(r1) write$P9_RGETATTR(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r2) rt_sigreturn() openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x120001, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.045854837s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x24, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 2.042547323s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}}) fchmod(0xffffffffffffffff, 0x14c) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r5 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(r5) socket(0x25, 0x3, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0x7d, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) eventfd(0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00\n', @ANYRES32], 0x4c}}, 0x0) 1.72135138s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84}], 0x10}}], 0x2, 0x0) 1.695935608s ago: executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe0, 0x43, 0xa0, 0xe0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) socket$inet6(0xa, 0x80803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x3}, 0x90) 1.691592899s ago: executing program 0: munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 664.467721ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r1, 0x1104}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000240)={[0x1]}, 0x8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x4) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x26, 0x0, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 499.88867ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000050000000500a8d6df"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003020000007a09"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00030400000004030000d6ec694dd8d72f87220b3b6ca74d9f49fddba430544a9ae11cd27648c3419d01635f31d83a4686cfe226749e218ee922a001ab01334cd075d6823c6591a80f03e60381354d9bd9695d233625643b9612fce4112d90ac3526c4a4232001aa75752e118801f91b672afeea93639ef574fbdf70c41dcd6958850911a973cba92c9978288a12b517ebeb0070b78b2c1c3f06d489966cfe87dd1129216e97a463f3199b9677d6e609f2d87fc21bf51400a15f29b820f0bd8cda1d65b791af4fefb431a1553c95fa62ef75af949303ebd1ffed373f20"], 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @local}, &(0x7f0000000180)=0xc) read$FUSE(r0, &(0x7f0000001b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x2, 0x4e23, 0xff7f, 0xa, 0x80, 0x20, 0x62, r4, r5}, {0x7ff, 0x6, 0x7f, 0x2, 0x3, 0x7, 0x7, 0x8}, {0x80000001, 0x10000, 0x1, 0x1000}, 0x800, 0x6e6bb1, 0x2}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3500, 0x0, 0x0, 0xfc, 0x9, 0x800, 0xc3}}, 0xe8) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000004c0)={0x1, 0x3, 0x1000, 0x7d, &(0x7f0000000240)="697f2713e54df918dea6bda851d920a75192bd2c312180311cbfcaf37e8d5ee12cfa8937875355638e1278e004c342450dff365a328538cb2f2121fdcd0489a93422864d92a30920dc22ab396bca8abfd13de553f903bc5e34306d97ba515e6233855669e0c1575d6804ea5df57fa2f81747e95514d3e4deb896cc91a8", 0x1f, 0x0, &(0x7f0000000300)="b65c8ec377e0aacdeea3bbc1fcc716a859b25ec5571113ce3d42f0a8216ea6"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000312", @ANYRES32=r6, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x0, 0x0}, 0x0) 482.90494ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x1, 0x65efefa8, 0x500}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000fedbdf254500000008000300cf3776a6f4289c927c459db3fd1f10ab9257ff319359360d402cf74f8c874a3f14f5110826a242e9d208b6c38721532172327b1b0dff36a4c1690bb1032891f2f39a5e4cb007205b9d3191df75f3ae6a7fc6081ed73805006d3f464c8467ce422579dd8581ab441b7ac852751c3be3b1dbd9a1b21b852963fe86a05b8b329020fb3d6d6bc08f73714063425beb2218b5f29e8b23d755ffbb1836df4ca3da33de6a316bb1724b511c6c5ad37e9c522303116b59a20ad0c4ab6ad62d88f357f6acc42f127a0aff98444488b9a893185a20e3cb420bb413ef93b0a728212a310eb7", @ANYRES32=r3, @ANYBLOB="0c0099000100000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c040}, 0x4001) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000000)=[{r4, 0x4047}], 0x1, 0x0, 0x0, 0x0) close(r4) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000040), &(0x7f0000000280)) 0s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000280)={0x0, 0x30, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) kernel console output (not intermixed with test programs): denied { write } for pid=5221 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.332101][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.403446][ T29] audit: type=1400 audit(1717827612.088:151): avc: denied { prog_run } for pid=5219 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.501779][ T5225] loop2: detected capacity change from 0 to 1024 [ 86.653452][ T5103] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.683758][ T5233] loop1: detected capacity change from 0 to 64 [ 86.701512][ T29] audit: type=1400 audit(1717827612.408:152): avc: denied { create } for pid=5230 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.799125][ T29] audit: type=1400 audit(1717827612.418:153): avc: denied { write } for pid=5230 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.867300][ T5225] EXT4-fs: Ignoring removed orlov option [ 86.889097][ T5225] EXT4-fs (loop2): Test dummy encryption mode enabled [ 86.899279][ T5225] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 86.931970][ T29] audit: type=1400 audit(1717827612.618:154): avc: denied { mount } for pid=5229 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 86.955978][ T5103] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.977941][ T5103] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.988008][ T5103] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.998383][ T5103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.035359][ T5223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.064451][ T5225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.126570][ T29] audit: type=1400 audit(1717827612.858:155): avc: denied { mount } for pid=5224 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.162315][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 87.198289][ T29] audit: type=1400 audit(1717827612.888:156): avc: denied { write } for pid=5224 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.332336][ T5225] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 87.406438][ T784] cfg80211: failed to load regulatory.db [ 87.613700][ T5103] usb 1-1: USB disconnect, device number 2 [ 87.651438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.660080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.708805][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.615903][ T5265] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 88.650424][ T5258] loop3: detected capacity change from 0 to 4096 [ 88.657257][ T5231] loop4: detected capacity change from 0 to 32768 [ 88.696556][ T5258] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 88.707330][ T5231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5231) [ 88.798721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 88.826878][ T5258] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 88.843894][ T5231] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.867099][ T5231] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.888217][ T5231] BTRFS info (device loop4): using free-space-tree [ 89.101123][ T783] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.294740][ T783] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 89.330542][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.375212][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.411291][ T783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 89.471597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.501959][ T783] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 89.575936][ T783] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 89.648235][ T783] usb 2-1: Manufacturer: syz [ 89.654198][ T5112] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.682430][ T783] usb 2-1: config 0 descriptor?? [ 89.725782][ T5299] loop2: detected capacity change from 0 to 16 [ 89.842590][ T5299] erofs: (device loop2): mounted with root inode @ nid 36. [ 90.194985][ T783] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 90.236922][ T783] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 90.374062][ T783] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 90.618317][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.800753][ T5293] loop3: detected capacity change from 0 to 32768 [ 91.045878][ T5293] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 91.062033][ T5293] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 91.132440][ T5293] bcachefs (loop3): alloc_read... done [ 91.141787][ T5293] bcachefs (loop3): stripes_read... done [ 91.155080][ T5293] bcachefs (loop3): snapshots_read... done [ 91.216191][ T5293] bcachefs (loop3): journal_replay... done [ 91.240921][ T5293] bcachefs (loop3): resume_logged_ops... done [ 91.265132][ T5293] bcachefs (loop3): going read-write [ 91.296920][ T5293] bcachefs (loop3): done starting filesystem [ 91.726782][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 91.726802][ T29] audit: type=1400 audit(1717827617.458:179): avc: denied { read } for pid=5326 comm="syz-executor.4" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.748977][ T5293] syz-executor.3 (5293) used greatest stack depth: 18536 bytes left [ 91.809472][ T5103] usb 2-1: USB disconnect, device number 2 [ 91.884101][ T29] audit: type=1400 audit(1717827617.498:180): avc: denied { open } for pid=5326 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.940144][ T5126] bcachefs (loop3): shutting down [ 92.001953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.034194][ T5126] bcachefs (loop3): going read-only [ 92.061477][ T29] audit: type=1400 audit(1717827617.498:181): avc: denied { ioctl } for pid=5326 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.087371][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.094568][ T5126] bcachefs (loop3): finished waiting for writes to stop [ 92.104556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.177356][ T5126] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 92.206772][ T5126] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 92.220235][ T29] audit: type=1400 audit(1717827617.498:182): avc: denied { set_context_mgr } for pid=5326 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 92.308377][ T29] audit: type=1400 audit(1717827617.648:183): avc: denied { write } for pid=5326 comm="syz-executor.4" name="tcp6" dev="proc" ino=4026533106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 92.334635][ T29] audit: type=1400 audit(1717827617.708:184): avc: denied { create } for pid=5326 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.356705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 92.366068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.387355][ T5126] bcachefs (loop3): shutdown complete, journal seq 14 [ 92.413723][ T5126] bcachefs (loop3): marking filesystem clean [ 92.429895][ T29] audit: type=1400 audit(1717827617.988:185): avc: denied { write } for pid=5326 comm="syz-executor.4" name="event2" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.453427][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.617602][ T29] audit: type=1400 audit(1717827617.988:186): avc: denied { open } for pid=5326 comm="syz-executor.4" path="/dev/input/event2" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.665415][ T5126] bcachefs (loop3): shutdown complete [ 92.685644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.697222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 92.766397][ T29] audit: type=1400 audit(1717827618.018:187): avc: denied { ioctl } for pid=5326 comm="syz-executor.4" path="/dev/input/event2" dev="devtmpfs" ino=838 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.792393][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.822960][ T5334] loop1: detected capacity change from 0 to 4096 [ 92.929587][ T29] audit: type=1400 audit(1717827618.578:188): avc: denied { write } for pid=5336 comm="syz-executor.0" path="socket:[7891]" dev="sockfs" ino=7891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.953435][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.961349][ T5334] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 93.130504][ T5334] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 94.069799][ T5350] loop2: detected capacity change from 0 to 1024 [ 94.090687][ T5350] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 94.912235][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.192919][ T5355] blktrace: Concurrent blktraces are not allowed on sg0 [ 95.607740][ T5341] loop4: detected capacity change from 0 to 32768 [ 95.664778][ T5341] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5341) [ 95.741463][ T5103] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.856469][ T5341] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.951184][ T5375] loop3: detected capacity change from 0 to 16 [ 96.016866][ T5375] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.075999][ T5341] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 96.168752][ T5377] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 96.194855][ T5117] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 96.316295][ T5375] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 96.525907][ T5341] BTRFS info (device loop4): using free-space-tree [ 96.536842][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 96.559011][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 96.571996][ T5103] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.592224][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 96.593078][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 96.660514][ T5103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.671173][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 96.743737][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 96.784608][ T5103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.847276][ T5387] overlayfs: failed to resolve './file1': -2 [ 96.852849][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 96.869490][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 96.890487][ T5103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.931894][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 96.932746][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 96.935323][ T5103] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.014341][ T5103] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.043577][ T5341] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 97.064908][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 97.064927][ T29] audit: type=1400 audit(1717827622.798:198): avc: denied { bind } for pid=5389 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.108401][ T5103] usb 3-1: Manufacturer: syz [ 97.139339][ T5103] usb 3-1: config 0 descriptor?? [ 97.180426][ T5341] BTRFS error (device loop4): open_ctree failed [ 97.478949][ T29] audit: type=1400 audit(1717827623.208:199): avc: denied { watch watch_reads } for pid=5402 comm="syz-executor.3" path="/proc/5402/task/5403/fd" dev="proc" ino=7965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.503603][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.526901][ T5403] loop3: detected capacity change from 0 to 64 [ 97.568720][ T29] audit: type=1400 audit(1717827623.248:200): avc: denied { create } for pid=5402 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.597859][ T5403] ======================================================= [ 97.597859][ T5403] WARNING: The mand mount option has been deprecated and [ 97.597859][ T5403] and is ignored by this kernel. Remove the mand [ 97.597859][ T5403] option from the mount to silence this warning. [ 97.597859][ T5403] ======================================================= [ 97.632748][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.662632][ T5103] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 97.694836][ T29] audit: type=1400 audit(1717827623.248:201): avc: denied { setopt } for pid=5402 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.699310][ T5103] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 98.060173][ T29] audit: type=1400 audit(1717827623.248:202): avc: denied { bind } for pid=5402 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.081186][ T29] audit: type=1400 audit(1717827623.248:203): avc: denied { name_bind } for pid=5402 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.791439][ T5103] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 98.808148][ T29] audit: type=1400 audit(1717827623.248:204): avc: denied { node_bind } for pid=5402 comm="syz-executor.3" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 98.910552][ T5103] usb 3-1: USB disconnect, device number 2 [ 98.931186][ T29] audit: type=1400 audit(1717827623.478:205): avc: denied { create } for pid=5406 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.950877][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.995498][ T5413] blktrace: Concurrent blktraces are not allowed on sg0 [ 99.081272][ T29] audit: type=1400 audit(1717827624.478:206): avc: denied { create } for pid=5406 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 99.263690][ T29] audit: type=1400 audit(1717827624.488:207): avc: denied { mount } for pid=5402 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 99.285843][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.517019][ T5428] loop1: detected capacity change from 0 to 128 [ 99.701256][ T5428] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 99.796558][ T5432] team0: Port device team_slave_0 removed [ 99.824315][ T5428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 99.843519][ T5432] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 99.937148][ T5428] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 100.021238][ T5428] EXT4-fs error (device loop1): __ext4_find_entry:1693: inode #2: comm syz-executor.1: checksumming directory block 0 [ 100.186356][ T5110] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.860903][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.064034][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.110576][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.145200][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.187953][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.236551][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.260035][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.299458][ T9] usb 1-1: Manufacturer: syz [ 101.325602][ T9] usb 1-1: config 0 descriptor?? [ 101.338339][ T5460] loop1: detected capacity change from 0 to 64 [ 101.705485][ T5440] loop3: detected capacity change from 0 to 32768 [ 101.728516][ T5440] btrfs: Unknown parameter 'fragment' [ 101.761514][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 101.816449][ T9] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 101.880781][ T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 102.459367][ T5456] loop4: detected capacity change from 0 to 32768 [ 102.525147][ T5456] bcachefs (/dev/loop4): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 102.553493][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 102.553512][ T29] audit: type=1400 audit(1717827628.288:219): avc: denied { create } for pid=5439 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.650284][ T29] audit: type=1400 audit(1717827628.288:220): avc: denied { bind } for pid=5439 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.865406][ T5440] loop3: detected capacity change from 0 to 4096 [ 102.928991][ T5456] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 102.958957][ T5456] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 103.112752][ T5472] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.137713][ T5470] team0: Port device team_slave_0 removed [ 103.144317][ T5470] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 103.174503][ T5456] bcachefs (loop4): alloc_read... done [ 103.180081][ T5456] bcachefs (loop4): stripes_read... done [ 103.192495][ T5456] bcachefs (loop4): snapshots_read... done [ 103.313731][ T5456] bcachefs (loop4): going read-write [ 103.338686][ T29] audit: type=1400 audit(1717827629.068:221): avc: denied { append } for pid=5439 comm="syz-executor.3" path="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/9/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.377468][ T5456] bcachefs (loop4): journal_replay... done [ 103.405705][ T5456] bcachefs (loop4): resume_logged_ops... done [ 103.412602][ T5456] bcachefs (loop4): delete_dead_inodes... done [ 103.430296][ T5456] bcachefs (loop4): done starting filesystem [ 103.443330][ T29] audit: type=1400 audit(1717827629.168:222): avc: denied { connect } for pid=5473 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.483940][ T29] audit: type=1400 audit(1717827629.218:223): avc: denied { write } for pid=5473 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.525783][ T29] audit: type=1400 audit(1717827629.248:224): avc: denied { read } for pid=5473 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.645719][ T29] audit: type=1400 audit(1717827629.288:225): avc: denied { create } for pid=5455 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.866703][ T5112] bcachefs (loop4): shutting down [ 103.876631][ T5112] bcachefs (loop4): going read-only [ 103.883652][ T5112] bcachefs (loop4): finished waiting for writes to stop [ 104.822261][ T25] usb 1-1: USB disconnect, device number 3 [ 104.932267][ T5112] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 104.967191][ T5112] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 105.024799][ T5112] bcachefs (loop4): shutdown complete, journal seq 14 [ 105.039958][ T5112] bcachefs (loop4): marking filesystem clean [ 105.195872][ T5112] bcachefs (loop4): shutdown complete [ 105.235333][ T5489] loop1: detected capacity change from 0 to 16 [ 105.302494][ T5489] erofs: (device loop1): mounted with root inode @ nid 36. [ 105.352598][ T29] audit: type=1400 audit(1717827631.088:226): avc: denied { create } for pid=5490 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.411324][ T29] audit: type=1400 audit(1717827631.118:227): avc: denied { bind } for pid=5490 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.509021][ T29] audit: type=1400 audit(1717827631.158:228): avc: denied { write } for pid=5490 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.172733][ T5505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.237583][ T5163] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.455104][ T5511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.472268][ T5511] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 107.480479][ T5511] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 107.504342][ T5511] tipc: Started in network mode [ 107.509452][ T5511] tipc: Node identity ac1414aa, cluster identity 4711 [ 107.519218][ T5511] tipc: New replicast peer: 100.1.1.1 [ 107.525107][ T5511] tipc: Enabled bearer , priority 10 [ 108.351761][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 108.351779][ T29] audit: type=1400 audit(1717827633.198:231): avc: denied { ioctl } for pid=5508 comm="syz-executor.4" path="socket:[8211]" dev="sockfs" ino=8211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.403414][ T5163] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.424264][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.498500][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.533902][ T25] tipc: Node number set to 2886997162 [ 108.568229][ T5163] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.654568][ T5163] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.676392][ T5163] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.703845][ T5163] usb 1-1: Manufacturer: syz [ 108.736450][ T5163] usb 1-1: config 0 descriptor?? [ 109.135303][ T5525] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 109.192329][ T5163] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 109.218775][ T5163] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 109.279842][ T5163] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 109.402573][ T5525] loop1: detected capacity change from 0 to 128 [ 109.564069][ T5525] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.677947][ T29] audit: type=1400 audit(1717827635.408:232): avc: denied { mount } for pid=5521 comm="syz-executor.1" name="/" dev="loop1" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 109.818647][ T5525] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 109.898662][ T5525] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.118481][ T29] audit: type=1400 audit(1717827635.838:233): avc: denied { bind } for pid=5517 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.115840][ T5519] loop3: detected capacity change from 0 to 32768 [ 111.208088][ T5519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5519) [ 111.291621][ T29] audit: type=1400 audit(1717827635.838:234): avc: denied { node_bind } for pid=5517 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.621945][ T5519] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.635779][ T5519] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 112.644757][ T5519] BTRFS info (device loop3): using free-space-tree [ 112.661652][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 112.663409][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 112.756998][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 112.781241][ T29] audit: type=1400 audit(1717827638.478:235): avc: denied { unmount } for pid=5110 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 112.910087][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 112.917228][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 112.962803][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 113.012274][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 113.066301][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 113.111686][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 113.120858][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 113.202882][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 113.278178][ T5519] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 113.428120][ T5519] BTRFS error (device loop3): open_ctree failed [ 113.524695][ T5103] usb 1-1: USB disconnect, device number 4 [ 114.294026][ T5574] loop4: detected capacity change from 0 to 512 [ 114.324195][ T5574] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 114.338754][ T5574] UDF-fs: Scanning with blocksize 512 failed [ 114.400025][ T5574] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 114.451256][ T5574] UDF-fs: Scanning with blocksize 1024 failed [ 114.464051][ T5574] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 114.489872][ T5576] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.572719][ T5574] UDF-fs: Scanning with blocksize 2048 failed [ 114.632257][ T5576] loop0: detected capacity change from 0 to 128 [ 114.671051][ T5574] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 114.703757][ T5576] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 114.718413][ T5574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.506032][ T5576] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 115.571675][ T5576] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 115.950468][ T5592] loop3: detected capacity change from 0 to 1024 [ 116.334000][ T5592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.426500][ T29] audit: type=1400 audit(1717827642.098:236): avc: denied { create } for pid=5590 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.544499][ T5592] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 116.611144][ T29] audit: type=1400 audit(1717827642.118:237): avc: denied { remount } for pid=5590 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.687227][ T29] audit: type=1400 audit(1717827642.388:238): avc: denied { unlink } for pid=5600 comm="syz-executor.0" name="#1" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 116.968835][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.095854][ T29] audit: type=1400 audit(1717827642.828:239): avc: denied { read write } for pid=5605 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.210017][ T29] audit: type=1400 audit(1717827642.858:240): avc: denied { open } for pid=5605 comm="syz-executor.2" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.534707][ T5598] loop4: detected capacity change from 0 to 32768 [ 117.572450][ T5598] btrfs: Deprecated parameter 'usebackuproot' [ 117.589601][ T5598] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.658520][ T5598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5598) [ 117.769398][ T5598] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.823407][ T5598] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 118.024195][ T5598] BTRFS info (device loop4): rebuilding free space tree [ 118.065002][ T29] audit: type=1400 audit(1717827643.788:241): avc: denied { unmount } for pid=5111 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 118.276918][ T5598] BTRFS info (device loop4): disabling free space tree [ 118.299241][ T5598] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.330414][ T5598] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.631279][ T29] audit: type=1400 audit(1717827644.358:242): avc: denied { create } for pid=5597 comm="syz-executor.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.964548][ T29] audit: type=1400 audit(1717827644.698:243): avc: denied { write open } for pid=5597 comm="syz-executor.4" path="/root/syzkaller-testdir4200936934/syzkaller.yUl6jH/24/file0/bus" dev="loop4" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.177919][ T5647] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 119.323893][ T5647] loop3: detected capacity change from 0 to 128 [ 119.370419][ T5647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 119.416800][ T5112] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.429065][ T5647] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 119.532198][ T5648] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 119.653927][ T5651] sd 0:0:1:0: device reset [ 119.913422][ T5655] loop0: detected capacity change from 0 to 64 [ 120.061702][ T29] audit: type=1400 audit(1717827645.758:244): avc: denied { create } for pid=5658 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.217010][ T29] audit: type=1400 audit(1717827645.788:245): avc: denied { getopt } for pid=5658 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.926338][ T5675] loop3: detected capacity change from 0 to 2048 [ 120.978508][ T5675] NILFS (loop3): invalid segment: Sequence number mismatch [ 120.986433][ T5675] NILFS (loop3): trying rollback from an earlier position [ 121.025839][ T5675] NILFS (loop3): recovery complete [ 121.048205][ T5678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.143506][ T5680] loop1: detected capacity change from 0 to 256 [ 122.150322][ T5680] FAT-fs (loop1): IO charset none not found [ 122.246122][ T5686] loop4: detected capacity change from 0 to 8 [ 122.253489][ T5653] loop2: detected capacity change from 0 to 32768 [ 122.347624][ T5653] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5653) [ 122.370452][ T5161] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.435571][ T5653] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.506971][ T5686] loop4: detected capacity change from 0 to 256 [ 122.517810][ T5653] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.697775][ T5653] BTRFS info (device loop2): using free-space-tree [ 122.724806][ T5692] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 122.740880][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 122.743125][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 122.762914][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 122.793087][ T5692] loop1: detected capacity change from 0 to 128 [ 122.889646][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 122.892406][ T5692] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.924489][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 122.925765][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 122.983158][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 123.004891][ T5692] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 123.047556][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 123.048498][ T5653] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 123.138001][ T5653] BTRFS error (device loop2): open_ctree failed [ 123.278651][ T5698] loop0: detected capacity change from 0 to 4096 [ 123.560429][ T5713] sd 0:0:1:0: device reset [ 125.140640][ T5735] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.172075][ T29] audit: type=1400 audit(1717827650.868:246): avc: denied { read } for pid=5734 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.325871][ T29] audit: type=1400 audit(1717827650.868:247): avc: denied { open } for pid=5734 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.408903][ T29] audit: type=1400 audit(1717827650.868:248): avc: denied { ioctl } for pid=5734 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.475853][ T29] audit: type=1400 audit(1717827651.208:249): avc: denied { create } for pid=5741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.582237][ T29] audit: type=1400 audit(1717827651.238:250): avc: denied { bind } for pid=5741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.690258][ T29] audit: type=1400 audit(1717827651.238:251): avc: denied { write } for pid=5741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.787374][ T5748] loop3: detected capacity change from 0 to 2048 [ 125.812682][ T5748] NILFS (loop3): invalid segment: Sequence number mismatch [ 125.819958][ T5748] NILFS (loop3): trying rollback from an earlier position [ 125.868080][ T5748] NILFS (loop3): recovery complete [ 125.882199][ T5749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.090405][ T5752] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 126.783284][ T5751] loop0: detected capacity change from 0 to 128 [ 126.825807][ T5751] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 126.863321][ T5751] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 126.909748][ T5751] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 127.522720][ T5738] loop1: detected capacity change from 0 to 32768 [ 127.577827][ T5738] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 127.710547][ T5747] loop2: detected capacity change from 0 to 32768 [ 127.733812][ T5747] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5747) [ 127.766933][ T5747] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 127.777802][ T5747] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.802009][ T5747] BTRFS info (device loop2): using free-space-tree [ 128.089467][ T5738] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 128.151307][ T5738] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 128.238009][ T29] audit: type=1400 audit(1717827653.968:252): avc: denied { ioctl } for pid=5745 comm="syz-executor.2" path="/root/syzkaller-testdir4048665477/syzkaller.pP8wLT/20/file0/file1" dev="loop2" ino=260 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.275150][ T5747] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.315595][ T5738] bcachefs (loop1): alloc_read... done [ 128.343938][ T5738] bcachefs (loop1): stripes_read... done [ 128.361431][ T5738] bcachefs (loop1): snapshots_read... done [ 128.398524][ T5738] bcachefs (loop1): going read-write [ 128.428891][ T5738] bcachefs (loop1): journal_replay... [ 128.461444][ T5738] bcachefs (loop1): bch2_journal_replay(): error ERESTARTSYS [ 128.564315][ T5738] bcachefs (loop1): bch2_fs_recovery(): error ERESTARTSYS [ 128.615587][ T5738] bcachefs (loop1): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 128.643348][ T5738] bcachefs (loop1): shutting down [ 128.648509][ T784] bcachefs (loop1): going read-only [ 128.657987][ T5111] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.681238][ T784] bcachefs (loop1): finished waiting for writes to stop [ 128.693778][ T784] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 128.726814][ T784] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 128.761836][ T784] bcachefs (loop1): unshutdown complete, journal seq 11 [ 128.794386][ T784] bcachefs (loop1): done going read-only, filesystem not clean [ 128.964648][ T5738] bcachefs (loop1): shutdown complete [ 129.104766][ T5789] sd 0:0:1:0: device reset [ 129.367161][ T5762] loop0: detected capacity change from 0 to 32768 [ 129.486568][ T5762] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 130.704060][ T5762] XFS (loop0): Ending clean mount [ 130.856376][ T5109] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 131.059106][ T5821] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 131.227735][ T5821] loop2: detected capacity change from 0 to 128 [ 131.276730][ T5821] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 131.394312][ T5821] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 131.524911][ T5821] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 131.537799][ T5823] loop3: detected capacity change from 0 to 2048 [ 131.684910][ T5823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.831410][ T29] audit: type=1400 audit(1717827657.558:253): avc: denied { read } for pid=5831 comm="syz-executor.4" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.920493][ T29] audit: type=1400 audit(1717827657.648:254): avc: denied { create } for pid=5831 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.038790][ T29] audit: type=1400 audit(1717827657.768:255): avc: denied { sys_module } for pid=5832 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.066062][ T5826] syzkaller0: entered promiscuous mode [ 132.095962][ T5826] syzkaller0: entered allmulticast mode [ 132.675914][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.394429][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.400883][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.558568][ T5857] loop3: detected capacity change from 0 to 1024 [ 134.613533][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.694187][ T29] audit: type=1400 audit(1717827660.428:256): avc: denied { read append } for pid=5856 comm="syz-executor.3" path="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/32/file1/cpuacct.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.804884][ T29] audit: type=1400 audit(1717827660.518:257): avc: denied { ioctl } for pid=5856 comm="syz-executor.3" path="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/32/file1/cpuacct.stat" dev="loop3" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.875175][ T29] audit: type=1400 audit(1717827660.518:258): avc: denied { ioctl } for pid=5856 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8650 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.022737][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.083848][ T29] audit: type=1400 audit(1717827660.818:259): avc: denied { ioctl } for pid=5865 comm="syz-executor.2" path="socket:[9600]" dev="sockfs" ino=9600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.316983][ T29] audit: type=1400 audit(1717827661.048:260): avc: denied { create } for pid=5868 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.748098][ T5877] loop3: detected capacity change from 0 to 2048 [ 135.759663][ T5877] NILFS (loop3): invalid segment: Sequence number mismatch [ 135.768090][ T5877] NILFS (loop3): trying rollback from an earlier position [ 135.789927][ T5877] NILFS (loop3): recovery complete [ 135.798837][ T5878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.831659][ T5882] loop3: detected capacity change from 0 to 2048 [ 136.887992][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.990380][ T29] audit: type=1400 audit(1717827662.718:261): avc: denied { write } for pid=5881 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.019887][ T5885] Zero length message leads to an empty skb [ 137.352064][ T5838] syzkaller0: entered promiscuous mode [ 137.357597][ T5838] syzkaller0: entered allmulticast mode [ 140.146229][ T5903] loop2: detected capacity change from 0 to 1024 [ 140.267614][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.636080][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.840545][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.226727][ T5915] tipc: Failed to remove unknown binding: 66,1,1/0:307093874/307093876 [ 141.235602][ T5915] tipc: Failed to remove unknown binding: 66,1,1/0:307093874/307093876 [ 141.885956][ T29] audit: type=1400 audit(1717827666.948:262): avc: denied { setopt } for pid=5911 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.033164][ T5918] loop2: detected capacity change from 0 to 2048 [ 142.047024][ T5918] NILFS (loop2): invalid segment: Sequence number mismatch [ 142.054309][ T5918] NILFS (loop2): trying rollback from an earlier position [ 142.093896][ T5918] NILFS (loop2): recovery complete [ 142.110181][ T5920] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.378463][ T5922] loop3: detected capacity change from 0 to 512 [ 142.436667][ T5922] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.484089][ T5922] UDF-fs: Scanning with blocksize 512 failed [ 142.577833][ T5922] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.621137][ T5922] UDF-fs: Scanning with blocksize 1024 failed [ 142.629537][ T5922] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 142.641437][ T5922] UDF-fs: Scanning with blocksize 2048 failed [ 142.649553][ T5922] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.687850][ T5922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.382275][ T5924] loop0: detected capacity change from 0 to 4096 [ 143.424488][ T5924] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 143.510117][ T5924] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 143.883690][ T29] audit: type=1804 audit(1717827669.608:263): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3524523936/syzkaller.Z27k9T/45/bus/bus" dev="loop0" ino=33 res=1 errno=0 [ 144.054065][ T2913] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 144.504605][ T5938] pim6reg1: entered promiscuous mode [ 144.509996][ T5938] pim6reg1: entered allmulticast mode [ 144.699549][ T5947] loop4: detected capacity change from 0 to 1024 [ 144.762261][ T5947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.895970][ T5952] loop1: detected capacity change from 0 to 2048 [ 144.954496][ T5952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.267037][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.762066][ T5961] tipc: Failed to remove unknown binding: 66,1,1/0:1069367289/1069367291 [ 145.770609][ T5961] tipc: Failed to remove unknown binding: 66,1,1/0:1069367289/1069367291 [ 146.418934][ T5965] loop4: detected capacity change from 0 to 2048 [ 146.437421][ T5965] NILFS (loop4): invalid segment: Sequence number mismatch [ 146.445067][ T5965] NILFS (loop4): trying rollback from an earlier position [ 146.460174][ T5965] NILFS (loop4): recovery complete [ 146.468266][ T5966] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.029883][ T5972] loop3: detected capacity change from 0 to 4096 [ 147.070178][ T5972] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 147.290254][ T5972] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 147.426989][ T29] audit: type=1804 audit(1717827673.158:264): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/38/bus/bus" dev="loop3" ino=33 res=1 errno=0 [ 147.552471][ T5531] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 147.963488][ T5978] loop3: detected capacity change from 0 to 512 [ 147.994173][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.011905][ T5978] ext2: Unknown parameter 'obj_user' [ 148.098871][ T29] audit: type=1326 audit(1717827673.828:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x0 [ 149.384140][ T5994] loop1: detected capacity change from 0 to 1024 [ 149.487598][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.937954][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.282287][ T6004] loop0: detected capacity change from 0 to 2048 [ 150.313980][ T6004] NILFS (loop0): invalid segment: Sequence number mismatch [ 150.321361][ T6004] NILFS (loop0): trying rollback from an earlier position [ 150.372407][ T6004] NILFS (loop0): recovery complete [ 150.381803][ T6007] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.848802][ T6009] loop3: detected capacity change from 0 to 4096 [ 150.859700][ T6012] loop1: detected capacity change from 0 to 2048 [ 150.887357][ T6009] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 150.942861][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.988692][ T6009] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 151.028509][ T6017] loop2: detected capacity change from 0 to 512 [ 151.053718][ T6017] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 151.064780][ T6017] UDF-fs: Scanning with blocksize 512 failed [ 151.207415][ T6017] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 151.226385][ T6017] UDF-fs: Scanning with blocksize 1024 failed [ 151.247732][ T6017] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 151.287045][ T6017] UDF-fs: Scanning with blocksize 2048 failed [ 151.371931][ T6017] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 151.447081][ T29] audit: type=1804 audit(1717827677.178:266): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/42/bus/bus" dev="loop3" ino=33 res=1 errno=0 [ 151.533585][ T6017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.551764][ T2887] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 151.577822][ T6023] loop0: detected capacity change from 0 to 512 [ 151.596632][ T6023] ext2: Unknown parameter 'obj_user' [ 151.663902][ T29] audit: type=1326 audit(1717827677.398:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 152.121595][ T6034] loop3: detected capacity change from 0 to 1024 [ 152.153891][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.366523][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.593096][ T6046] ubi0: attaching mtd0 [ 152.603678][ T6046] ubi0: scanning is finished [ 152.608335][ T6046] ubi0: empty MTD device detected [ 152.981195][ T6046] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 153.031505][ T6046] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 153.065630][ T6046] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 153.109220][ T6046] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 153.156202][ T6046] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 153.197867][ T6046] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 153.211433][ T6046] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2402046151 [ 153.257281][ T6046] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 153.304009][ T6049] ubi0: background thread "ubi_bgt0d" started, PID 6049 [ 153.877393][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.304830][ T29] audit: type=1400 audit(1717827680.038:268): avc: denied { write } for pid=6058 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.515309][ T6057] loop4: detected capacity change from 0 to 4096 [ 154.543077][ T6057] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 154.645730][ T6057] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 154.838855][ T6067] loop2: detected capacity change from 0 to 2048 [ 154.851408][ T6067] NILFS (loop2): invalid segment: Sequence number mismatch [ 154.858660][ T6067] NILFS (loop2): trying rollback from an earlier position [ 154.875185][ T6067] NILFS (loop2): recovery complete [ 154.885130][ T6069] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.104274][ T29] audit: type=1804 audit(1717827680.828:269): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4200936934/syzkaller.yUl6jH/44/bus/bus" dev="loop4" ino=33 res=1 errno=0 [ 155.786349][ T12] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 155.897423][ T6077] loop1: detected capacity change from 0 to 512 [ 155.917531][ T6077] ext2: Unknown parameter 'obj_user' [ 155.971831][ T29] audit: type=1326 audit(1717827681.688:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6076 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2927cf69 code=0x0 [ 156.100397][ T29] audit: type=1400 audit(1717827681.808:271): avc: denied { mount } for pid=6079 comm="syz-executor.4" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.220108][ T29] audit: type=1400 audit(1717827681.808:272): avc: denied { mounton } for pid=6079 comm="syz-executor.4" path="/root/syzkaller-testdir4200936934/syzkaller.yUl6jH/45/file0/file0" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.368864][ T29] audit: type=1400 audit(1717827681.828:273): avc: denied { unlink } for pid=6079 comm="syz-executor.4" name="#3" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.468426][ T6085] evm: overlay not supported [ 156.556482][ T6085] loop4: detected capacity change from 0 to 256 [ 156.757712][ T6085] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 157.220310][ T6086] ubi: mtd0 is already attached to ubi0 [ 157.280700][ T29] audit: type=1400 audit(1717827683.008:274): avc: denied { unmount } for pid=5112 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.508971][ T29] audit: type=1400 audit(1717827683.238:275): avc: denied { setopt } for pid=6087 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.573420][ T29] audit: type=1400 audit(1717827683.238:276): avc: denied { getopt } for pid=6087 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.671420][ T29] audit: type=1400 audit(1717827683.238:277): avc: denied { name_connect } for pid=6087 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 157.709195][ T6092] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 157.735448][ T6091] loop1: detected capacity change from 0 to 2048 [ 157.740032][ T29] audit: type=1400 audit(1717827683.368:278): avc: denied { map } for pid=6087 comm="syz-executor.2" path="socket:[8973]" dev="sockfs" ino=8973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.802339][ T6092] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 157.821706][ T6094] can0: slcan on ttyS3. [ 157.841133][ T29] audit: type=1400 audit(1717827683.368:279): avc: denied { read write accept } for pid=6087 comm="syz-executor.2" path="socket:[8973]" dev="sockfs" ino=8973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.903278][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.933422][ T29] audit: type=1400 audit(1717827683.608:280): avc: denied { search } for pid=4750 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.058184][ T29] audit: type=1400 audit(1717827683.608:281): avc: denied { read } for pid=4750 comm="dhcpcd" name="n68" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.175564][ T29] audit: type=1400 audit(1717827683.608:282): avc: denied { open } for pid=4750 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.199449][ T29] audit: type=1400 audit(1717827683.608:283): avc: denied { getattr } for pid=4750 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.292560][ T6093] can0 (unregistered): slcan off ttyS3. [ 158.877857][ T6111] loop3: detected capacity change from 0 to 512 [ 158.907352][ T6111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 158.933525][ T6111] UDF-fs: Scanning with blocksize 512 failed [ 158.974141][ T6111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 159.094926][ T6111] UDF-fs: Scanning with blocksize 1024 failed [ 159.115150][ T6111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 159.152482][ T6111] UDF-fs: Scanning with blocksize 2048 failed [ 159.172678][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.188845][ T6111] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 159.217022][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.665729][ T6118] loop4: detected capacity change from 0 to 4096 [ 159.704847][ T6118] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 159.737659][ T6096] infiniband syz2: set active [ 159.744499][ T6096] infiniband syz2: added veth1_to_bridge [ 159.776419][ T6096] syz2: rxe_create_cq: returned err = -12 [ 159.806270][ T6096] infiniband syz2: Couldn't create ib_mad CQ [ 159.806486][ T6118] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 159.835375][ T6096] infiniband syz2: Couldn't open port 1 [ 160.040381][ T6096] RDS/IB: syz2: added [ 160.065332][ T6096] smc: adding ib device syz2 with port count 1 [ 160.095244][ T6096] smc: ib device syz2 port 1 has pnetid [ 160.137154][ T3606] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 160.509204][ T6137] loop4: detected capacity change from 0 to 512 [ 160.563321][ T6137] ext2: Unknown parameter 'obj_user' [ 160.743313][ T6141] ubi: mtd0 is already attached to ubi0 [ 161.046560][ T6152] can0: slcan on ttyS3. [ 161.173712][ T6151] can0 (unregistered): slcan off ttyS3. [ 163.470905][ T6164] sched: RT throttling activated [ 164.541583][ T6173] Bluetooth: MGMT ver 1.22 [ 164.618935][ T6173] loop4: detected capacity change from 0 to 256 [ 164.872792][ T6173] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd82bb37b, utbl_chksum : 0xe619d30d) [ 165.493102][ T6178] loop1: detected capacity change from 0 to 2048 [ 165.598959][ T6182] loop4: detected capacity change from 0 to 2048 [ 165.611124][ T6182] NILFS (loop4): invalid segment: Sequence number mismatch [ 165.618449][ T6182] NILFS (loop4): trying rollback from an earlier position [ 165.686062][ T6182] NILFS (loop4): recovery complete [ 165.705797][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.733173][ T6186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.698956][ T6191] loop0: detected capacity change from 0 to 4096 [ 166.740051][ T6191] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 166.928002][ T6191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 166.953481][ T6196] ubi: mtd0 is already attached to ubi0 [ 167.090665][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 167.090684][ T29] audit: type=1400 audit(1717827692.818:301): avc: denied { write } for pid=6193 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.190324][ T29] audit: type=1804 audit(1717827692.888:302): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3524523936/syzkaller.Z27k9T/58/bus/bus" dev="loop0" ino=33 res=1 errno=0 [ 167.231669][ T6201] can0: slcan on ttyS3. [ 167.264431][ T2887] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 167.357653][ T6197] kvm: emulating exchange as write [ 167.422599][ T6198] can0 (unregistered): slcan off ttyS3. [ 167.605899][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.744648][ T6206] loop0: detected capacity change from 0 to 512 [ 167.793750][ T6206] ext2: Unknown parameter 'obj_user' [ 167.954310][ T29] audit: type=1326 audit(1717827693.688:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 168.727788][ T29] audit: type=1400 audit(1717827694.458:304): avc: denied { execute } for pid=6232 comm="syz-executor.4" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.014846][ T29] audit: type=1326 audit(1717827694.748:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.112708][ T29] audit: type=1326 audit(1717827694.748:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.194866][ T6244] loop1: detected capacity change from 0 to 512 [ 169.217867][ T29] audit: type=1326 audit(1717827694.788:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.315121][ T6244] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.351990][ T6244] UDF-fs: Scanning with blocksize 512 failed [ 169.379352][ T29] audit: type=1326 audit(1717827694.788:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.433377][ T6244] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.486808][ T6244] UDF-fs: Scanning with blocksize 1024 failed [ 169.509162][ T29] audit: type=1326 audit(1717827694.788:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.547468][ T6244] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 169.597870][ T6244] UDF-fs: Scanning with blocksize 2048 failed [ 169.609421][ T6244] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 169.619395][ T29] audit: type=1326 audit(1717827694.788:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ec3a7cf69 code=0x7ffc0000 [ 169.653748][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.835371][ T6250] loop2: detected capacity change from 0 to 4096 [ 169.869056][ T6250] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 169.979088][ T6250] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 170.240429][ T12] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 170.348471][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.929237][ T6267] loop2: detected capacity change from 0 to 2048 [ 171.079610][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.063161][ T6284] loop4: detected capacity change from 0 to 512 [ 172.088602][ T6284] ext2: Unknown parameter 'obj_user' [ 172.273977][ T5252] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 172.313252][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 172.313270][ T29] audit: type=1326 audit(1717827698.048:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6283 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9afc7cf69 code=0x0 [ 172.425210][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.668468][ T29] audit: type=1326 audit(1717827698.398:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 172.760680][ T29] audit: type=1326 audit(1717827698.398:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 172.821216][ T29] audit: type=1326 audit(1717827698.428:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.038543][ T29] audit: type=1326 audit(1717827698.428:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.200539][ T29] audit: type=1326 audit(1717827698.428:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.229740][ T6280] loop0: detected capacity change from 0 to 32768 [ 173.265886][ T29] audit: type=1326 audit(1717827698.438:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.324611][ T6280] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 2859f616 should be 29d2fb78 [ 173.376758][ T29] audit: type=1326 audit(1717827698.438:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.434285][ T6304] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 173.476131][ T6304] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 173.487096][ T29] audit: type=1326 audit(1717827698.438:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.498501][ T6302] loop4: detected capacity change from 0 to 4096 [ 173.571252][ T29] audit: type=1326 audit(1717827698.438:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f227587cf69 code=0x7ffc0000 [ 173.592972][ T6302] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 173.622759][ T6303] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 173.704213][ T6302] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 173.841858][ T6280] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 173.876914][ T6280] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 173.944407][ T51] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 173.983742][ T6280] bcachefs (loop0): alloc_read... done [ 173.989326][ T6280] bcachefs (loop0): stripes_read... done [ 174.033467][ T6280] bcachefs (loop0): snapshots_read... done [ 174.085232][ T6280] bcachefs (loop0): going read-write [ 174.149366][ T6316] loop3: detected capacity change from 0 to 2048 [ 174.162230][ T6280] bcachefs (loop0): journal_replay... [ 174.168597][ T6316] NILFS (loop3): invalid segment: Sequence number mismatch [ 174.182114][ T6316] NILFS (loop3): trying rollback from an earlier position [ 174.208313][ T6316] NILFS (loop3): recovery complete [ 174.208320][ T6280] done [ 174.218415][ T6318] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.300575][ T6319] loop4: detected capacity change from 0 to 2048 [ 174.309938][ T6280] bcachefs (loop0): resume_logged_ops... done [ 174.352541][ T6319] NILFS (loop4): invalid segment: Sequence number mismatch [ 174.359813][ T6319] NILFS (loop4): trying rollback from an earlier position [ 174.400258][ T6280] bcachefs (loop0): delete_dead_inodes... done [ 174.410809][ T6319] NILFS (loop4): recovery complete [ 174.422491][ T6320] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.533192][ T6280] bcachefs (loop0): done starting filesystem [ 174.745780][ T5109] bcachefs (loop0): shutting down [ 174.750864][ T5109] bcachefs (loop0): going read-only [ 174.807910][ T5109] bcachefs (loop0): finished waiting for writes to stop [ 175.431380][ T5109] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 175.528768][ T5109] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 175.558621][ T5109] bcachefs (loop0): shutdown complete, journal seq 12 [ 175.582284][ T5109] bcachefs (loop0): marking filesystem clean [ 175.733898][ T5109] bcachefs (loop0): shutdown complete [ 175.826043][ T6306] loop2: detected capacity change from 0 to 32768 [ 175.953519][ T6337] loop4: detected capacity change from 0 to 2048 [ 176.030071][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.056225][ T6345] loop3: detected capacity change from 0 to 1024 [ 177.138983][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.634501][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.713100][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.128432][ T6363] loop4: detected capacity change from 0 to 512 [ 178.179242][ T6363] ext2: Unknown parameter 'obj_user' [ 178.253102][ T6364] loop3: detected capacity change from 0 to 4096 [ 178.391797][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 178.391812][ T29] audit: type=1326 audit(1717827704.118:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9afc7cf69 code=0x0 [ 178.440416][ T6364] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 178.607822][ T29] audit: type=1400 audit(1717827704.258:366): avc: denied { rename } for pid=4518 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.649080][ T6364] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 178.734479][ T6374] loop0: detected capacity change from 0 to 2048 [ 178.760820][ T29] audit: type=1400 audit(1717827704.258:367): avc: denied { unlink } for pid=4518 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.787602][ T6374] NILFS (loop0): invalid segment: Sequence number mismatch [ 178.795187][ T6374] NILFS (loop0): trying rollback from an earlier position [ 178.834706][ T6374] NILFS (loop0): recovery complete [ 178.852675][ T6376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.987442][ T29] audit: type=1400 audit(1717827704.258:368): avc: denied { create } for pid=4518 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.142685][ T29] audit: type=1804 audit(1717827704.768:369): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/59/bus/bus" dev="loop3" ino=33 res=1 errno=0 [ 179.181191][ T3606] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 179.692759][ T6386] loop2: detected capacity change from 0 to 2048 [ 179.775832][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.155289][ T6394] loop1: detected capacity change from 0 to 2048 [ 180.167407][ T6394] NILFS (loop1): invalid segment: Sequence number mismatch [ 180.174779][ T6394] NILFS (loop1): trying rollback from an earlier position [ 180.199856][ T6394] NILFS (loop1): recovery complete [ 180.231233][ T6395] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.388117][ T29] audit: type=1400 audit(1717827706.108:370): avc: denied { recv } for pid=6393 comm="syz-executor.1" saddr=10.128.0.169 src=30006 daddr=10.128.0.165 dest=42048 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 180.516578][ T29] audit: type=1400 audit(1717827706.228:371): avc: denied { search } for pid=4518 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.304014][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.401789][ T6378] loop4: detected capacity change from 0 to 32768 [ 181.960161][ T6410] loop2: detected capacity change from 0 to 1024 [ 182.041952][ T6410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.044246][ T6414] loop0: detected capacity change from 0 to 512 [ 182.065704][ T6414] ext2: Unknown parameter 'obj_user' [ 182.181236][ T29] audit: type=1326 audit(1717827707.908:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 182.803557][ T6418] loop3: detected capacity change from 0 to 4096 [ 182.927551][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.116456][ T6418] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 183.488214][ T6418] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 183.525539][ T6428] loop0: detected capacity change from 0 to 2048 [ 183.618863][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.855313][ T6440] loop2: detected capacity change from 0 to 2048 [ 183.866993][ T6440] NILFS (loop2): invalid segment: Sequence number mismatch [ 183.874467][ T6440] NILFS (loop2): trying rollback from an earlier position [ 183.894343][ T6440] NILFS (loop2): recovery complete [ 183.903882][ T6442] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.145833][ T29] audit: type=1804 audit(1717827709.878:373): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3627332150/syzkaller.5TSAUy/62/bus/bus" dev="loop3" ino=33 res=1 errno=0 [ 184.306591][ T11] ntfs3: loop3: ino=5, "/" ntfs3_write_inode failed, -22. [ 184.377011][ T6445] loop1: detected capacity change from 0 to 2048 [ 184.388042][ T6445] NILFS (loop1): invalid segment: Sequence number mismatch [ 184.395691][ T6445] NILFS (loop1): trying rollback from an earlier position [ 184.426355][ T6445] NILFS (loop1): recovery complete [ 184.437544][ T6446] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.638756][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.614136][ T6469] loop2: detected capacity change from 0 to 1024 [ 186.658067][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.944509][ T6475] loop0: detected capacity change from 0 to 512 [ 186.979756][ T6475] ext2: Unknown parameter 'obj_user' [ 187.055575][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.068679][ T5252] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 187.120205][ T29] audit: type=1326 audit(1717827712.848:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 187.511618][ T6488] loop4: detected capacity change from 0 to 2048 [ 187.541050][ T6488] NILFS (loop4): invalid segment: Sequence number mismatch [ 187.548880][ T6488] NILFS (loop4): trying rollback from an earlier position [ 187.568763][ T6488] NILFS (loop4): recovery complete [ 187.581050][ T6489] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.610353][ T6486] loop2: detected capacity change from 0 to 4096 [ 187.677735][ T6486] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 187.870455][ T6459] loop3: detected capacity change from 0 to 32768 [ 187.932343][ T6486] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 188.112372][ T29] audit: type=1804 audit(1717827713.848:375): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4048665477/syzkaller.pP8wLT/52/bus/bus" dev="loop2" ino=33 res=1 errno=0 [ 188.223991][ T12] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 188.632244][ T6498] loop2: detected capacity change from 0 to 2048 [ 188.644225][ T6498] NILFS (loop2): invalid segment: Sequence number mismatch [ 188.651565][ T6498] NILFS (loop2): trying rollback from an earlier position [ 188.666637][ T6498] NILFS (loop2): recovery complete [ 188.692355][ T6499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.917510][ T6495] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 189.741055][ T29] audit: type=1400 audit(1717827715.448:376): avc: denied { egress } for pid=24 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 189.891112][ T29] audit: type=1400 audit(1717827715.448:377): avc: denied { sendto } for pid=24 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 190.180312][ T6510] loop3: detected capacity change from 0 to 2048 [ 190.393496][ T6510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.996018][ T6527] loop2: detected capacity change from 0 to 1024 [ 191.074810][ T6527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.229234][ T6540] loop0: detected capacity change from 0 to 512 [ 191.259803][ T6540] ext2: Unknown parameter 'obj_user' [ 191.366332][ T6546] loop1: detected capacity change from 0 to 4096 [ 191.385479][ T6546] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 191.416590][ T29] audit: type=1326 audit(1717827717.148:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 191.471521][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.486976][ T6546] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 191.670535][ T29] audit: type=1804 audit(1717827717.398:379): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1591809537/syzkaller.X3ogb4/72/bus/bus" dev="loop1" ino=33 res=1 errno=0 [ 191.787962][ T6551] loop2: detected capacity change from 0 to 2048 [ 191.805059][ T6551] NILFS (loop2): invalid segment: Sequence number mismatch [ 191.812350][ T6551] NILFS (loop2): trying rollback from an earlier position [ 191.836353][ T11] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 191.848316][ T6551] NILFS (loop2): recovery complete [ 191.854943][ T6552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.226053][ T6558] loop1: detected capacity change from 0 to 2048 [ 192.237379][ T6558] NILFS (loop1): invalid segment: Sequence number mismatch [ 192.244701][ T6558] NILFS (loop1): trying rollback from an earlier position [ 192.258060][ T6558] NILFS (loop1): recovery complete [ 192.268735][ T6559] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.602869][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.904633][ T6566] loop3: detected capacity change from 0 to 512 [ 194.006893][ T6566] EXT4-fs (loop3): 1 truncate cleaned up [ 194.123597][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.249706][ T6577] loop4: detected capacity change from 0 to 512 [ 194.265381][ T6577] EXT4-fs: Ignoring removed oldalloc option [ 194.364000][ T29] audit: type=1400 audit(1717827720.078:380): avc: denied { shutdown } for pid=6568 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.823092][ T6577] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 194.846644][ T29] audit: type=1400 audit(1717827720.078:381): avc: denied { connect } for pid=6568 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.925388][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.935102][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.957629][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.991248][ T6577] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.047178][ T6577] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 195.081990][ T6577] EXT4-fs (loop4): 1 orphan inode deleted [ 195.089594][ T6577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.228516][ T6586] loop2: detected capacity change from 0 to 1024 [ 195.301217][ T6577] EXT4-fs error (device loop4): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 195.322430][ T6588] loop0: detected capacity change from 0 to 512 [ 195.330671][ T6588] ext2: Unknown parameter 'obj_user' [ 195.353742][ T6586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.394403][ T6585] loop1: detected capacity change from 0 to 4096 [ 195.435222][ T29] audit: type=1326 audit(1717827721.168:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6587 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec3a7cf69 code=0x0 [ 195.481083][ T6585] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 195.526029][ T29] audit: type=1400 audit(1717827721.258:383): avc: denied { connect } for pid=6576 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.540072][ T6597] loop3: detected capacity change from 0 to 2048 [ 195.565835][ T6597] NILFS (loop3): invalid segment: Sequence number mismatch [ 195.573327][ T6597] NILFS (loop3): trying rollback from an earlier position [ 195.595247][ T6597] NILFS (loop3): recovery complete [ 195.596932][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.617806][ T6600] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.651414][ T6585] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 195.814166][ T29] audit: type=1804 audit(1717827721.548:384): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1591809537/syzkaller.X3ogb4/76/bus/bus" dev="loop1" ino=33 res=1 errno=0 [ 195.858698][ T6593] EXT4-fs error (device loop4): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 196.078964][ T5531] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 196.183317][ T6608] EXT4-fs error (device loop4): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 196.326697][ T6610] loop2: detected capacity change from 0 to 2048 [ 196.398015][ T6610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.601784][ T6614] loop1: detected capacity change from 0 to 2048 [ 196.638788][ T6614] NILFS (loop1): invalid segment: Sequence number mismatch [ 196.646557][ T6614] NILFS (loop1): trying rollback from an earlier position [ 196.681050][ T6614] NILFS (loop1): recovery complete [ 196.699893][ T6617] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.418386][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.142399][ T29] audit: type=1400 audit(1717827723.868:385): avc: denied { read } for pid=6630 comm="syz-executor.1" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 198.207393][ T6635] loop1: detected capacity change from 0 to 256 [ 198.224380][ T29] audit: type=1400 audit(1717827723.868:386): avc: denied { open } for pid=6630 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 198.423508][ T6632] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 198.438970][ T6641] loop3: detected capacity change from 0 to 1024 [ 198.465979][ T29] audit: type=1804 audit(1717827724.188:387): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1591809537/syzkaller.X3ogb4/78/file0/file1" dev="loop1" ino=1048597 res=1 errno=0 [ 198.549098][ T6641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.600182][ T29] audit: type=1800 audit(1717827724.328:388): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 198.698008][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.745577][ T29] audit: type=1326 audit(1717827724.478:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2927cf69 code=0x0 [ 198.875483][ T6647] loop3: detected capacity change from 0 to 128 [ 198.917728][ T6647] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.979268][ T6647] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 198.998642][ T6647] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 199.267526][ T6649] loop4: detected capacity change from 0 to 1024 [ 199.283570][ T6649] EXT4-fs: Ignoring removed orlov option [ 199.289287][ T6649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.379050][ T6649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.394505][ T6653] loop1: detected capacity change from 0 to 64 [ 199.416928][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.468858][ T6655] loop3: detected capacity change from 0 to 2048 [ 199.483800][ T6655] NILFS (loop3): invalid segment: Sequence number mismatch [ 199.491165][ T6655] NILFS (loop3): trying rollback from an earlier position [ 199.502409][ T29] audit: type=1400 audit(1717827725.228:390): avc: denied { setattr } for pid=6648 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.545390][ T6655] NILFS (loop3): recovery complete [ 199.558877][ T6657] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.583509][ T6656] process 'syz-executor.4' launched './file0/file0' with NULL argv: empty string added [ 200.103097][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.602822][ T6671] loop4: detected capacity change from 0 to 2048 [ 200.632835][ T6671] NILFS (loop4): invalid segment: Sequence number mismatch [ 200.640111][ T6671] NILFS (loop4): trying rollback from an earlier position [ 200.654181][ T6671] NILFS (loop4): recovery complete [ 200.681093][ T6673] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.054483][ T6684] loop4: detected capacity change from 0 to 1024 [ 202.111373][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 202.117446][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 202.124207][ T4480] Bluetooth: hci2: command 0x0406 tx timeout [ 202.130885][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 202.141193][ T4480] Bluetooth: hci4: command 0x0405 tx timeout [ 202.196390][ T6680] loop0: detected capacity change from 0 to 4096 [ 202.215731][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.229536][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 202.229554][ T29] audit: type=1400 audit(1717827727.948:393): avc: denied { ioctl } for pid=6686 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.267549][ T6689] loop1: detected capacity change from 0 to 256 [ 202.292625][ T6680] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 202.321289][ T6690] loop3: detected capacity change from 0 to 128 [ 202.385066][ T6689] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 202.394824][ T6690] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 202.416704][ T29] audit: type=1804 audit(1717827728.148:394): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1591809537/syzkaller.X3ogb4/80/file0/file1" dev="loop1" ino=1048599 res=1 errno=0 [ 202.468738][ T6680] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 202.485143][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.518114][ T29] audit: type=1800 audit(1717827728.238:395): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 202.556020][ T6669] loop2: detected capacity change from 0 to 32768 [ 202.569222][ T6690] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 202.666591][ T29] audit: type=1400 audit(1717827728.368:396): avc: denied { remove_name } for pid=6679 comm="syz-executor.0" name="file2" dev="loop0" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.693947][ T6690] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 202.828417][ T29] audit: type=1400 audit(1717827728.368:397): avc: denied { rename } for pid=6679 comm="syz-executor.0" name="file2" dev="loop0" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.893647][ T5109] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 202.910844][ T29] audit: type=1400 audit(1717827728.368:398): avc: denied { unlink } for pid=6679 comm="syz-executor.0" name="bus" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.954292][ T29] audit: type=1326 audit(1717827728.498:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2927cf69 code=0x0 [ 203.014280][ T6695] loop4: detected capacity change from 0 to 2048 [ 203.103568][ T6695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.153036][ T784] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 203.364177][ T784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 203.407809][ T6706] lo speed is unknown, defaulting to 1000 [ 203.427045][ T784] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.450547][ T6706] lo speed is unknown, defaulting to 1000 [ 203.462430][ T6706] lo speed is unknown, defaulting to 1000 [ 203.498688][ T784] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.544244][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.692458][ T784] usb 3-1: SerialNumber: syz [ 203.770298][ T6715] loop1: detected capacity change from 0 to 2048 [ 203.783255][ T6715] NILFS (loop1): invalid segment: Sequence number mismatch [ 203.790519][ T6715] NILFS (loop1): trying rollback from an earlier position [ 203.807945][ T6715] NILFS (loop1): recovery complete [ 203.923062][ T6716] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.117221][ T6697] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.757747][ T6706] infiniband syz0: set active [ 204.762797][ T45] lo speed is unknown, defaulting to 1000 [ 204.770421][ T6706] infiniband syz0: added lo [ 204.783741][ T6706] syz0: rxe_create_cq: returned err = -12 [ 204.789578][ T6706] infiniband syz0: Couldn't create ib_mad CQ [ 204.825900][ T6706] infiniband syz0: Couldn't open port 1 [ 205.055938][ T6706] RDS/IB: syz0: added [ 205.123763][ T6706] smc: adding ib device syz0 with port count 1 [ 205.156476][ T6706] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 205.489854][ T6726] loop1: detected capacity change from 0 to 32768 [ 205.519774][ T45] lo speed is unknown, defaulting to 1000 [ 205.528178][ T6726] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6726) [ 205.569301][ T6706] lo speed is unknown, defaulting to 1000 [ 205.603520][ T6726] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.614589][ T6726] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 205.623446][ T6726] BTRFS info (device loop1): using free-space-tree [ 206.141664][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.146926][ T784] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 206.281302][ T784] usb 3-1: USB disconnect, device number 3 [ 206.294257][ T29] audit: type=1400 audit(1717827732.018:400): avc: denied { create } for pid=6742 comm="syz-executor.2" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 206.393331][ T29] audit: type=1400 audit(1717827732.038:401): avc: denied { nlmsg_write } for pid=6742 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.430222][ T6743] loop2: detected capacity change from 0 to 1024 [ 206.500803][ T5110] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.979356][ T6750] mmap: syz-executor.1 (6750): VmData 175796224 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 207.208974][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.282935][ T6753] loop3: detected capacity change from 0 to 1024 [ 207.336978][ T6706] lo speed is unknown, defaulting to 1000 [ 207.390800][ T6753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.441185][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.525894][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.593641][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.602610][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0327, bcdDevice= 0.00 [ 207.602648][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.605835][ T45] usb 3-1: config 0 descriptor?? [ 207.719969][ T6755] loop1: detected capacity change from 0 to 4096 [ 207.777340][ T6755] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 207.868545][ T6755] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 207.930469][ T6760] loop3: detected capacity change from 0 to 128 [ 207.963096][ T5110] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 207.989292][ T6760] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 208.028576][ T6760] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 208.126739][ T6760] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 208.152131][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.207352][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 208.228328][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 208.262513][ T6763] loop1: detected capacity change from 0 to 256 [ 208.292596][ T45] usb 3-1: USB disconnect, device number 4 [ 208.344806][ T6763] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 208.385939][ T29] audit: type=1804 audit(1717827734.118:402): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1591809537/syzkaller.X3ogb4/86/file0/file1" dev="loop1" ino=1048601 res=1 errno=0 [ 208.474070][ T29] audit: type=1800 audit(1717827734.198:403): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 208.659769][ T29] audit: type=1326 audit(1717827734.348:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2927cf69 code=0x0 [ 208.770465][ T6706] lo speed is unknown, defaulting to 1000 [ 208.865796][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.457903][ T11] hfsplus: b-tree write err: -5, ino 4 [ 209.708861][ T6751] loop4: detected capacity change from 0 to 32768 [ 209.749034][ T6774] loop3: detected capacity change from 0 to 2048 [ 209.846888][ T29] audit: type=1400 audit(1717827735.548:405): avc: denied { read } for pid=6772 comm="syz-executor.1" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.266181][ T29] audit: type=1400 audit(1717827735.548:406): avc: denied { open } for pid=6772 comm="syz-executor.1" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.370393][ T6751] read_mapping_page failed! [ 210.489177][ T6751] jfs_mount: Failed to read AGGREGATE_I [ 210.582538][ T6751] Mount JFS Failure: -5 [ 210.592480][ T6774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.645804][ T29] audit: type=1400 audit(1717827735.568:407): avc: denied { ioctl } for pid=6772 comm="syz-executor.1" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.685244][ T6751] jfs_mount failed w/return code = -5 [ 211.131091][ T5163] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 211.407077][ T5163] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 211.458532][ T5163] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.480655][ T6706] lo speed is unknown, defaulting to 1000 [ 211.553858][ T5163] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.581387][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.302398][ T5163] usb 2-1: SerialNumber: syz [ 212.362117][ T6782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.380245][ T6793] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.467666][ T29] audit: type=1400 audit(1717827738.178:408): avc: denied { mounton } for pid=6792 comm="syz-executor.4" path="/root/syzkaller-testdir4200936934/syzkaller.yUl6jH/79/file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 212.833434][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.239835][ T6706] lo speed is unknown, defaulting to 1000 [ 213.312254][ T6804] loop3: detected capacity change from 0 to 1024 [ 213.442629][ T6804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.510340][ T6802] loop4: detected capacity change from 0 to 4096 [ 213.534364][ T6802] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 213.644180][ T6802] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 213.735200][ T5112] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 213.805430][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.075056][ T6812] loop4: detected capacity change from 0 to 128 [ 214.128898][ T6812] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 214.233518][ T6812] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 214.358677][ T6812] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 214.475674][ T5163] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 214.603831][ T5163] usb 2-1: USB disconnect, device number 3 [ 217.230110][ T6832] loop1: detected capacity change from 0 to 32768 [ 220.051050][ T29] audit: type=1400 audit(1717827745.778:409): avc: denied { read } for pid=6850 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 220.157292][ T29] audit: type=1400 audit(1717827745.778:410): avc: denied { open } for pid=6850 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 220.223542][ T6854] loop1: detected capacity change from 0 to 1024 [ 220.551011][ T29] audit: type=1400 audit(1717827745.788:411): avc: denied { ioctl } for pid=6850 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 220.704174][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.861059][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.830871][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.074787][ T6877] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 222.097770][ T6877] NCSI netlink: No device for ifindex 0 [ 222.321782][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.330328][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.374491][ T29] audit: type=1400 audit(1717827748.098:412): avc: denied { create } for pid=6878 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 222.395197][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.459751][ T29] audit: type=1400 audit(1717827748.098:413): avc: denied { create } for pid=6878 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.516432][ T29] audit: type=1400 audit(1717827748.098:414): avc: denied { write } for pid=6878 comm="syz-executor.1" path="socket:[11921]" dev="sockfs" ino=11921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 222.594237][ T29] audit: type=1400 audit(1717827748.108:415): avc: denied { nlmsg_read } for pid=6878 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 223.034051][ T6885] loop2: detected capacity change from 0 to 4096 [ 223.088797][ T6885] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 223.150816][ T6885] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.301557][ T29] audit: type=1804 audit(1717827749.038:416): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4048665477/syzkaller.pP8wLT/70/bus/bus" dev="loop2" ino=33 res=1 errno=0 [ 223.327832][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.449909][ T11] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 223.604469][ T6875] loop4: detected capacity change from 0 to 32768 [ 224.301764][ T6904] loop2: detected capacity change from 0 to 1024 [ 224.358703][ T6906] Bluetooth: MGMT ver 1.22 [ 224.385863][ T6906] Bluetooth: hci3: invalid length 0, exp 2 for type 9 [ 224.434919][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.807059][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.240499][ T29] audit: type=1800 audit(1717827750.968:417): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="overlay" ino=1968 res=0 errno=0 [ 225.695492][ T29] audit: type=1400 audit(1717827751.428:418): avc: denied { getopt } for pid=6907 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.285419][ T6934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.312734][ T29] audit: type=1400 audit(1717827753.038:419): avc: denied { setopt } for pid=6939 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.399266][ T29] audit: type=1400 audit(1717827753.078:420): avc: denied { ioctl } for pid=6939 comm="syz-executor.0" path="socket:[11243]" dev="sockfs" ino=11243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.183265][ T6947] loop1: detected capacity change from 0 to 256 [ 228.347268][ T6947] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 228.496521][ T6936] loop2: detected capacity change from 0 to 32768 [ 228.548102][ T6952] loop4: detected capacity change from 0 to 1024 [ 228.597172][ T29] audit: type=1400 audit(1717827754.328:421): avc: denied { read } for pid=6950 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.682873][ T6952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.760082][ T29] audit: type=1400 audit(1717827754.328:422): avc: denied { open } for pid=6950 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.829864][ T29] audit: type=1400 audit(1717827754.358:423): avc: denied { ioctl } for pid=6950 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.907684][ T29] audit: type=1400 audit(1717827754.428:424): avc: denied { mounton } for pid=6945 comm="syz-executor.1" path="/" dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.930372][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.047751][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.372456][ T29] audit: type=1400 audit(1717827756.098:425): avc: denied { rmdir } for pid=5110 comm="syz-executor.1" name="file0" dev="loop1" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.395509][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.262852][ T6987] loop3: detected capacity change from 0 to 128 [ 231.510517][ T6987] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 231.923213][ T6987] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 232.011236][ T6987] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.3: No space for directory leaf checksum. Please run e2fsck -D. [ 232.082398][ T6987] EXT4-fs error (device loop3): __ext4_find_entry:1693: inode #2: comm syz-executor.3: checksumming directory block 0 [ 232.150510][ T6989] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.3: No space for directory leaf checksum. Please run e2fsck -D. [ 232.201601][ T6989] EXT4-fs error (device loop3): __ext4_find_entry:1693: inode #2: comm syz-executor.3: checksumming directory block 0 [ 232.239863][ T6987] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.3: No space for directory leaf checksum. Please run e2fsck -D. [ 232.336235][ T6987] EXT4-fs error (device loop3): __ext4_find_entry:1693: inode #2: comm syz-executor.3: checksumming directory block 0 [ 232.400734][ T6998] loop0: detected capacity change from 0 to 1024 [ 232.458279][ T6987] xt_hashlimit: invalid rate [ 232.503998][ T6998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.709557][ T5126] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.760370][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.129747][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.550244][ T6992] loop1: detected capacity change from 0 to 32768 [ 233.571161][ T784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 233.771844][ T784] usb 3-1: Using ep0 maxpacket: 16 [ 233.794246][ T784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.862446][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.899433][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.935750][ T29] audit: type=1400 audit(1717827759.648:426): avc: denied { bind } for pid=7012 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.006347][ T784] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.125920][ T784] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.161281][ T29] audit: type=1400 audit(1717827759.658:427): avc: denied { name_bind } for pid=7012 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 234.189087][ T784] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.231750][ T784] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.239838][ T784] usb 3-1: Manufacturer: syz [ 234.261103][ T29] audit: type=1400 audit(1717827759.658:428): avc: denied { node_bind } for pid=7012 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 234.362306][ T784] usb 3-1: config 0 descriptor?? [ 234.381232][ T7021] loop1: detected capacity change from 0 to 2048 [ 234.429767][ T7021] NILFS (loop1): invalid segment: Sequence number mismatch [ 234.438066][ T7021] NILFS (loop1): trying rollback from an earlier position [ 235.289083][ T7021] NILFS (loop1): recovery complete [ 235.297378][ T7025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.202805][ T784] rc_core: IR keymap rc-hauppauge not found [ 236.208854][ T784] Registered IR keymap rc-empty [ 236.244609][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.262562][ T29] audit: type=1400 audit(1717827761.998:429): avc: denied { create } for pid=7030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.289677][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.340032][ T29] audit: type=1400 audit(1717827762.018:430): avc: denied { bind } for pid=7030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.354330][ T784] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 236.396344][ T29] audit: type=1400 audit(1717827762.038:431): avc: denied { read } for pid=7030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.433549][ T7033] loop3: detected capacity change from 0 to 128 [ 236.444393][ T784] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 236.494001][ T29] audit: type=1400 audit(1717827762.148:432): avc: denied { setopt } for pid=7030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.558233][ T7033] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 236.587568][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.631408][ T29] audit: type=1400 audit(1717827762.158:433): avc: denied { ioctl } for pid=7030 comm="syz-executor.0" path="socket:[12470]" dev="sockfs" ino=12470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.691274][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.731444][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.755481][ T29] audit: type=1400 audit(1717827762.168:434): avc: denied { write } for pid=7030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.771278][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.860764][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.890746][ T29] audit: type=1400 audit(1717827762.308:435): avc: denied { read } for pid=4521 comm="acpid" name="event4" dev="devtmpfs" ino=2537 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.961224][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 236.986930][ T7033] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 237.002562][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.012645][ T29] audit: type=1400 audit(1717827762.308:436): avc: denied { open } for pid=4521 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2537 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.071803][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.079479][ T29] audit: type=1400 audit(1717827762.308:437): avc: denied { ioctl } for pid=4521 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2537 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.104907][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.151545][ T784] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.172341][ T29] audit: type=1400 audit(1717827762.398:438): avc: denied { read } for pid=7036 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.204696][ T784] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 237.220219][ T784] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.284848][ T784] usb 3-1: USB disconnect, device number 5 [ 237.615571][ T7053] loop4: detected capacity change from 0 to 1024 [ 237.679142][ T7053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.017222][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.429436][ T7041] loop1: detected capacity change from 0 to 32768 [ 241.014417][ T7086] loop3: detected capacity change from 0 to 1024 [ 241.120044][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.324781][ T5126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.411199][ T5103] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 241.623559][ T5103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.701108][ T5103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.742522][ T5103] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.780840][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.760919][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 346.767927][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l [ 346.776295][ C0] rcu: (detected by 0, t=10502 jiffies, g=26741, q=161 ncpus=2) [ 346.784208][ C0] task:kworker/u8:1 state:R running task stack:23440 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 346.797420][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 346.805286][ C0] Call Trace: [ 346.808577][ C0] [ 346.811520][ C0] __schedule+0xf15/0x5d00 [ 346.815974][ C0] ? __pfx_mark_lock+0x10/0x10 [ 346.820949][ C0] ? kasan_save_stack+0x42/0x60 [ 346.825832][ C0] ? __pfx_mark_lock+0x10/0x10 [ 346.830717][ C0] ? batadv_tvlv_container_ogm_append+0x1b5/0x510 [ 346.837152][ C0] ? batadv_iv_ogm_schedule_buff+0x1199/0x1500 [ 346.843347][ C0] ? __pfx___schedule+0x10/0x10 [ 346.848222][ C0] ? hlock_class+0x4e/0x130 [ 346.852753][ C0] ? mark_held_locks+0x9f/0xe0 [ 346.857543][ C0] preempt_schedule_irq+0x51/0x90 [ 346.862593][ C0] irqentry_exit+0x36/0x90 [ 346.867026][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.873297][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 346.878615][ C0] Code: c1 05 9a af 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 346.898243][ C0] RSP: 0018:ffffc90000117a70 EFLAGS: 00000206 [ 346.904332][ C0] RAX: dffffc0000000000 RBX: 1ffff92000022f50 RCX: 0000000004cdff93 [ 346.912326][ C0] RDX: 0000000000000001 RSI: ffffffff8b2cb260 RDI: ffffffff8b9001c0 [ 346.920311][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284d858 [ 346.928303][ C0] R10: ffffffff9426c2c7 R11: 0000000000000003 R12: 0000000000000000 [ 346.936301][ C0] R13: 0000000000000000 R14: ffffffff8dbb1920 R15: 0000000000000000 [ 346.944302][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 346.949362][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x1500 [ 346.955461][ C0] ? __pfx_lock_release+0x10/0x10 [ 346.960511][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 346.965835][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.971056][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 346.977498][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 346.984018][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x1500 [ 346.990199][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500 [ 346.996291][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 347.002650][ C0] ? batadv_send_skb_packet+0x56c/0x6b0 [ 347.008221][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 347.015275][ C0] process_one_work+0x9fb/0x1b60 [ 347.020240][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 347.027821][ C0] ? __pfx_process_one_work+0x10/0x10 [ 347.033217][ C0] ? assign_work+0x1a0/0x250 [ 347.037835][ C0] worker_thread+0x6c8/0xf70 [ 347.042448][ C0] ? __pfx_worker_thread+0x10/0x10 [ 347.047575][ C0] kthread+0x2c1/0x3a0 [ 347.051665][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.056888][ C0] ? __pfx_kthread+0x10/0x10 [ 347.061497][ C0] ret_from_fork+0x45/0x80 [ 347.065939][ C0] ? __pfx_kthread+0x10/0x10 [ 347.070548][ C0] ret_from_fork_asm+0x1a/0x30 [ 347.075342][ C0] [ 347.078386][ C0] rcu: rcu_preempt kthread starved for 10533 jiffies! g26741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 347.089597][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 347.099573][ C0] rcu: RCU grace-period kthread stack dump: [ 347.105464][ C0] task:rcu_preempt state:R running task stack:28272 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 347.117224][ C0] Call Trace: [ 347.120511][ C0] [ 347.123452][ C0] __schedule+0xf15/0x5d00 [ 347.127897][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 347.133125][ C0] ? __pfx___schedule+0x10/0x10 [ 347.137999][ C0] ? schedule+0x298/0x350 [ 347.142364][ C0] ? __pfx_lock_release+0x10/0x10 [ 347.147433][ C0] ? __pfx___mod_timer+0x10/0x10 [ 347.152386][ C0] ? lock_acquire+0x1b1/0x560 [ 347.157087][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 347.162570][ C0] schedule+0xe7/0x350 [ 347.166666][ C0] schedule_timeout+0x136/0x2a0 [ 347.171540][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 347.176930][ C0] ? __pfx_process_timeout+0x10/0x10 [ 347.182330][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 347.188159][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 347.193645][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 347.198436][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 347.203743][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 347.208965][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 347.214796][ C0] rcu_gp_kthread+0x271/0x380 [ 347.219498][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 347.224720][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.229948][ C0] ? __kthread_parkme+0x148/0x220 [ 347.235088][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 347.240314][ C0] kthread+0x2c1/0x3a0 [ 347.244405][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.249628][ C0] ? __pfx_kthread+0x10/0x10 [ 347.254233][ C0] ret_from_fork+0x45/0x80 [ 347.258676][ C0] ? __pfx_kthread+0x10/0x10 [ 347.263291][ C0] ret_from_fork_asm+0x1a/0x30 [ 347.268084][ C0] [ 347.271110][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 347.277452][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc2-syzkaller-00269-g96e09b8f8166 #0 [ 347.287184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 347.297248][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 347.302563][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 c8 c3 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 58 2b b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 347.322189][ C0] RSP: 0018:ffffffff8d807d70 EFLAGS: 00000246 [ 347.328271][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae7f899 [ 347.336260][ C0] RDX: 0000000000000001 RSI: ffff888019af2000 RDI: ffff888019af2064 [ 347.344248][ C0] RBP: ffff888019af2064 R08: 0000000000000001 R09: ffffed1017246fe5 [ 347.352238][ C0] R10: ffff8880b9237f2b R11: 0000000000000000 R12: ffff888019e86000 [ 347.360223][ C0] R13: ffffffff8e7447a0 R14: 0000000000000000 R15: 0000000000000000 [ 347.368219][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 347.377169][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.383856][ C0] CR2: 0000000020000306 CR3: 000000007d2bc000 CR4: 00000000003506f0 [ 347.391847][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.399828][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.407816][ C0] Call Trace: [ 347.411108][ C0] [ 347.413959][ C0] ? show_regs+0x8c/0xa0 [ 347.418226][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 347.424588][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 347.429805][ C0] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 347.435288][ C0] ? __pfx_lock_release+0x10/0x10 [ 347.440337][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 347.445984][ C0] ? __asan_memcpy+0x3c/0x60 [ 347.450598][ C0] ? update_process_times+0x175/0x220 [ 347.455986][ C0] ? __pfx_update_process_times+0x10/0x10 [ 347.461725][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 347.467203][ C0] ? update_wall_time+0x1c/0x40 [ 347.472083][ C0] ? tick_nohz_handler+0x376/0x530 [ 347.477212][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 347.482702][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 347.488094][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 347.493833][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 347.499928][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 347.505059][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 347.511242][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 347.517078][ C0] [ 347.520020][ C0] [ 347.522962][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.529158][ C0] ? ct_kernel_exit+0x139/0x190 [ 347.534035][ C0] ? acpi_safe_halt+0x1a/0x20 [ 347.538732][ C0] acpi_idle_enter+0xc5/0x160 [ 347.543431][ C0] cpuidle_enter_state+0x85/0x500 [ 347.548475][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 347.554309][ C0] cpuidle_enter+0x4e/0xa0 [ 347.558750][ C0] do_idle+0x313/0x3f0 [ 347.562837][ C0] ? __pfx_do_idle+0x10/0x10 [ 347.567446][ C0] cpu_startup_entry+0x4f/0x60 [ 347.572225][ C0] rest_init+0x16b/0x2b0 [ 347.576486][ C0] ? acpi_subsystem_init+0x133/0x180 [ 347.581796][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 347.587360][ C0] start_kernel+0x3df/0x4c0 [ 347.591888][ C0] x86_64_start_reservations+0x18/0x30 [ 347.597371][ C0] x86_64_start_kernel+0xb2/0xc0 [ 347.602332][ C0] common_startup_64+0x13e/0x148 [ 347.607288][ C0] [ 348.532210][ T5103] usb 5-1: config 0 descriptor?? [ 348.540618][ T1248] ieee802154 phy0 wpan0: encryption failed: -22