last executing test programs:

3.948980332s ago: executing program 0 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000540)={0x0, 0x1, 0x467f, 0x8})
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

3.158975505s ago: executing program 3 (id=431):
r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x20c003, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffd42, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0302d995f361"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1c3c83a8a37efba26ac3f31143d5752e"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400d0)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000024c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x70, r5, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x15, 0x34, @random="0246ba4c3ab59882e1b3b999649057ad6a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40080)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=00000000000000000770,mode=lfs,inline_data,fastboot,fsync_mode=strict,\x00iscard_unit=section,\x00'], 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}})
syz_open_procfs(0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4b438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000fc0))
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()

3.080058091s ago: executing program 0 (id=432):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054020000000080006400200000008000240000000000800044000000000080003400000000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3010841, &(0x7f0000000400)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@quota}, {@resuid={'resuid', 0x3d, r0}}, {@jqfmt_vfsv0}, {@orlov}, {@minixdf}]}, 0x2, 0x4d7, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

2.893168286s ago: executing program 0 (id=434):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

2.615382139s ago: executing program 1 (id=440):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
fanotify_init(0x0, 0x8000)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303130303030303030315e73633c8dda2482f3c5596368007d212b782b21240028015357555d6559bcf023deb29ecfc273636865641aa222ec5e1643685320205f737711eae985"], 0x3f)

2.607455559s ago: executing program 3 (id=441):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0xffff, 0x5, 0x800077, 0x412, 0x6, 0x40006, 0x1000, 0xf67, 0x12})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2.513473807s ago: executing program 1 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000540)={0x0, 0x1, 0x467f, 0x8})
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

2.303611364s ago: executing program 3 (id=444):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, 0x0}, 0x0)

2.282004676s ago: executing program 4 (id=445):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054020000000080006400200000008000240000000000800044000000000080003400000000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3010841, &(0x7f0000000400)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@quota}, {@resuid={'resuid', 0x3d, r0}}, {@jqfmt_vfsv0}, {@orlov}, {@minixdf}]}, 0x2, 0x4d7, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

1.923443595s ago: executing program 4 (id=446):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000000))

1.902995716s ago: executing program 0 (id=448):
timer_create(0x8, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4)
bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r3, 0x0, 0x0)

1.801231084s ago: executing program 3 (id=450):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
fdatasync(r0)

1.786480655s ago: executing program 4 (id=451):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9eb9, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000800005000100070000000900020073797a31000000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.582450982s ago: executing program 4 (id=453):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
fanotify_init(0x0, 0x8000)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303130303030303030315e73633c8dda2482f3c5596368007d212b782b21240028015357555d6559bcf023deb29ecfc273636865641aa222ec5e1643685320205f737711eae985"], 0x3f)

1.559913644s ago: executing program 1 (id=454):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r1, 0xffffd000)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040))
getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000000))

1.559217254s ago: executing program 4 (id=455):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x111342, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079102700000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pwrite64(r1, 0x0, 0x0, 0xfecc)
read$FUSE(r0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204c05020000000000000109022400010000d000090400000103000000092100000001d907000905810300"], 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1c491, &(0x7f0000000140)=ANY=[], 0xd, 0xc45, &(0x7f0000001100)="$eJzs3U9sHNd9B/DfG5HaldxWTOwodhsXm7ZIZcVy9c+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlC0AFsEyClgMLNvxSVFWrIo/pH8+STUd3b2vZ335q1mZEFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8eLvv3bh5KnUeVHb69YAALvi0shXTp5Oe90KAGA3Xen5738AAAAAAAAAAAAAAGBfSlHEk5Fi5tJKGqted9Qvtvtv3R4dGt682qFU1TxQlS9/6qdOnzn74kuD57p5sT31EfUftmfijZErFxqvTt+cmZ2Ym5sYb4xOta9Nj0/c9ydst/5Gx6sT0Lj55q3x69fnGqdfOLPu7dsDH9aeODpwfvC5E892y44ODQ+PrBWpb/q5Bx+sOVvN8DgYRZyIFM9/9yepFRFFbP9c1Hd37Dc6VHXieNWJ0aHhqiOT7dbUfPnm5e6JKCIaPZWa3XO0+VhEX/+u9mFrzYiFsvllg4+X3RuZac22rk5ONC63Zufb8+3pqcup09qyP40o4lyKWIyI5U2e79Ef/dEXKb59ZCVdjYgD3fPwxWpi8NbtKHawj/ehbGejP2KxeATGbB+rRRGvR4qfvncsrpXnLP/EFyJeL/P7Ee+U+UpEKr8YZyM+8JyYx0ZfFPEX5fifX0nj1fWge125+NXGl6euT/eU7V5XPub94a4rxR7dHw5tyN2xz69N9SiiVV3xV9LmA7jHF3oAAAAAAAAAAAAAAACAT6hDUcQzkeK1f//jal5xVPPSj5wf/IOBX+6dM/70PT6nLPtCRCwU9zcn92CeWXY5XU7JFLM9U48i/iTP//vmXjcGAAAAAAAAAAAAAAAAAADgE62IH0eKl98/lhajd03x9tSNxpXW1cnOqrDdtX+7a6avrq6uNlInmznHci7kXMy5lHM5ZxS5fs5mzrGcCzkXcy5VebvWPXIcyPVzNnOO5VzIuZhzKedyzujL9XM2c47lXMi5mHMp53LO2Cdr9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE6KKOLnkeJbX19JkSKiGTEWnVyq7XXrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSLRXxvUjR+MPmnX19EZGq/3ccK385G82DZX46moNlvhLNCzlbVfY1v3nvw/XtRB94cP2piB9Filr93TsDnse/v/Pqztcg3vnG2qtfzSN5oPvmwIe1J44eOT84/OtPb7WdNmvA8YvtqVu3G6NDw8MjPbv78tE/3bNvIB+3eDhdJyLm3nr7zdbk5MTsg2+UX4FtVLdh494b/1s8lO/qx9yIvv3Q973Z2OsrE7uhvP9/ECl+5/3/6N7wu/f/X+q8unOHj5/96dr9/+WNH3Sf9/+7/gBY3v9XaxFb3P+f7Nn3cv7TSH9fRH3+5kz/0Yj63Ftvn2jfbN2YuDExdfbkyS8NDn7pzMn+gxH16+3JiZ6th3K6AAAAAAAAAAAAAAAAAHZPKuL3IkXrRyupERG3q/laA+cHnzvx7IE4UM23Wjdv+42RKxcar07fnJmdmJubGG+MTrWvTY9P3O/h6tV079Gh4R3pzD0d2uH2H6q/Oj3z1mz7xh/Nb/r+4fqFq3Pzs61rm78dh6KIaPbuOV41eHRouGr0ZLs1VVW9vOlk+o+vPxXxn5Hi2tlG+nzel+f/bZzhv27+/8LGD9qh+f+f6tlXHjOlIn4WKX77L5+Oz1ftPBw95+zZbtmy3N9GiuPnPpfLxcGyXLcNnecKdGYGlmX/L1L848/Xl+3Oh3xyreypj3VyHwHl+B+JFN/78+/Eb+R965//sPn4H974QTs0/k/17Du87nkF2+46efxPRIpXnnw3fjPv+6jnf3SfvXEsF77zfI4dGv/P9OwbyMf9rYfTdQAAAAAAAAAAgEdafyri7yLFD4b70kt53/38+7/xjR+0Q//+67M9+8YfznpF99zY9kkFAAAAgH2iPxXx40hxY/7dO/PO18//7pn/+btr8z+H0oZ3q7/n+5XquQEP8+//eg3k445tv9sAAAAAAAAAAAAAAAAAAACwr6RUxEt5PfWxaj7/eNy1Bn0utxQpXvvv53O5dLQs110HfqD6tX5peurEhcnJ6Wut+dbVyYnGyEzr2kRZ96lIsfI3n8t1i2p99e5685013tfWYp+NFMN/3y3bWYu9uzb5U2tlT5VlPxUp/usf1pftrmP9mbWyp8uyfx0pvvbPm5c9ulb2TFn2O5Hih19rdMseLst2n4/62bWyL1ybLnZgVAAAAAAAAAAAAAAAAAAAAPik6U9F/Fmk+J+bi3fm8uf1//t7Xlbe+UbPev8b3K7W+R+o1v/favtB1v+vniuwsNVRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8ZSiiLcjxcyllbRUK1931C+2p27dHh0a3rzaoVTVPFCVL3/qp06fOfviS4PnuvnR9R+2Z+KNkSsXGq9O35yZnZibmxhvjE61r02PT9z3J2y3/kbHqxPQuPnmrfHr1+cap184s+7t2wMf1p44OnB+8LkTz3bLjg4ND4/0lOnrf+Cj3yVtsf9gFPFXkeL57/4k/aAWUcT2z8U9vjs77VDVieNVJ0aHhquOTLZbU/Plm5e7J6KIaPRUanbP0S6MxbY0IxbK5pcNPl52b2SmNdu6OjnRuNyanW/Pt6enLqdOa8v+NKKIcyliMSKWa3d/XOor4s1I8e0jK+lfahEHuufhi5dGvnLy9NbtKHawj/ehbGejP2KxeATGbB+rRRH/FCl++t6x+NdaRF90fuILEa+X+f2Id6Iz3qn8YpyN+GCT7xGPpr4o4v/L8T+/kt6rRVS/ZarrysWvNr48dX26p2z3uvLI3x920z6/NtWjiB9WV/yV9G9+XwMAAAAAAAAAAAAAAADsI0X8WqR4+f1jqZoffGdOcXvqRuNK6+pkZ1pfd+5fd8706urqaiN1splzLOdCzsWcSzmXc0aR6+dslllfXR3LrxdyLuZcyrmcMw7k+jmbOcdyLuRczLmUczln9OX6OZs5x3Iu5FzMuZRzOWfsk7l7AAAAAAAAAAAAAAAAAADA46Wo/pfiW19fSau1zvrSY9HJJeuBPvZ+EQAA//9DBvZH")
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000480)={0x0, r2}, 0x10)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000000)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}]}, 0x1, 0x11b2, &(0x7f0000002440)="$eJzs201rY1UYB/DHvpia2hffrRsPutHNxXbhyk2RFqQBpW2EVhBuaaohMQm5WSTiouDOlZ9DXLoTxC/gJymC6KYrr7SRdjp0hpkObWDm99vkgX8OnIcLF87lPCcf/fhN66jIjvJBTD03GzO9iHSaIsVUTMfYcbz//eY/P+zs7W+t12ob2yltru+ufphSWnz7ty+++/md3wfzn/+y+Gsl/lj+8uSvtbMlKyf/7n7dLFKzSJ3uIOXpoNsd5AftRjpsFq0spc/ajbxopGanaPSv5Eftbq83SnnncKHa6zeKIuWdUWo1RmnQTYP+KOVf5c1OyrIsLVSDJ1H/6bQsy4iynI3noyzL8oWoxny8GAuxGEtRiYiX45V4NV6L1+ONeDNWzv816X0DAAAAAAAAAAAAAAAAAADA0+Xh8//L8ZL5fwAAAAAAAAAAAAAAAAAAALh15v8BAAAAAAAAAAAAAAAAAABg8sz/AwAAAAAAAAAAAAAAAAAAwOTt7O1vrddqG9spzUX8eTysD+vj33G++Ult44N0bvly1d/DYX36Il8d5+lqXonq//natflcvPfuOD/LPv60dl/+VhzefvsAAADwTMjShWvP91n2oHxc3fN94Or5fSkiZu6sDW6oGH3bytvtRl+hUCguikm/mbgLlw990jsBAAAAAAAAAADgcTzifcBKRNz4OuGkewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I8dOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXBQAA///GWZIG")
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './bus\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004844)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r9 = semget(0x3, 0x6, 0x80)
semop(r9, &(0x7f00000000c0)=[{0x0, 0x3, 0x1000}, {0x1, 0x2, 0x800}, {0x3, 0x7, 0x1000}], 0x3)

1.497557329s ago: executing program 3 (id=456):
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000680)={0xfffe, 0x14, 0xb13, 0x13, 0x83, 0x2})
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@noacl}, {@nodatasum}, {@autodefrag}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@discard_async}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000380)='.\x00', 0x60, &(0x7f00000002c0)=ANY=[], 0x20, 0x0, &(0x7f0000000000))

1.439458484s ago: executing program 0 (id=457):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054020000000080006400200000008000240000000000800044000000000080003400000000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3010841, &(0x7f0000000400)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@quota}, {@resuid={'resuid', 0x3d, r0}}, {@jqfmt_vfsv0}, {@orlov}, {@minixdf}]}, 0x2, 0x4d7, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f})

1.439205573s ago: executing program 2 (id=458):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

1.439066363s ago: executing program 1 (id=459):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

923.550165ms ago: executing program 0 (id=460):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, 0x0}, 0x0)

594.391032ms ago: executing program 2 (id=461):
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
timerfd_gettime(r0, 0x0)

573.868403ms ago: executing program 1 (id=462):
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

551.552645ms ago: executing program 2 (id=463):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0)

549.097485ms ago: executing program 2 (id=464):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) (fail_nth: 1)

471.595981ms ago: executing program 2 (id=465):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
fanotify_init(0x0, 0x8000)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e6765686174203078303030303030303130303030303030315e73633c8dda2482f3c5596368007d212b782b21240028015357555d6559bcf023deb29ecfc273636865641aa222ec5e1643685320205f737711eae985"], 0x3f)

407.454706ms ago: executing program 2 (id=466):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000540)={0x0, 0x1, 0x467f, 0x8})
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

189.052044ms ago: executing program 3 (id=467):
timer_create(0x8, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4)
bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r3, 0x0, 0x0)

145.726888ms ago: executing program 4 (id=468):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)
fdatasync(r0)

0s ago: executing program 1 (id=469):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xa8c, &(0x7f0000000480)="$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")
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_to_hsr\x00', 0x10)
write(r3, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x193042, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x268600, 0x0)
read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc)
mq_timedreceive(r5, &(0x7f00000001c0)=""/156, 0x9c, 0x6d, &(0x7f0000000300))

kernel console output (not intermixed with test programs):

(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.315352][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.317503][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.318887][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.322428][ T4059] device veth0_vlan entered promiscuous mode
[   35.329072][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   35.330892][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   35.332510][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   35.334001][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.335403][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   35.336914][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   35.340968][ T4046] device veth1_vlan entered promiscuous mode
[   35.343247][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   35.345904][ T4059] device veth1_vlan entered promiscuous mode
[   35.356344][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.369947][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.371493][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.372946][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.374381][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.375897][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.377432][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.378944][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.381478][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.383923][ T4059] device veth0_macvtap entered promiscuous mode
[   35.386260][ T4059] device veth1_macvtap entered promiscuous mode
[   35.397646][ T4046] device veth0_macvtap entered promiscuous mode
[   35.401272][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.402464][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.403945][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.405396][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.406880][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.408410][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.422085][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.423682][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.425175][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   35.426416][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   35.427890][ T4046] device veth1_macvtap entered promiscuous mode
[   35.438908][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.442463][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.444032][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.445607][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.454980][ T4053] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.458524][ T4050] device veth0_vlan entered promiscuous mode
[   35.460730][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.462234][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.467166][ T4059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.468655][ T4059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.471334][ T4059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.472688][ T4059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.474571][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.476120][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.483995][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.485788][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.487860][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.495129][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.496792][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.498821][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.501096][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.502714][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.504350][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.505980][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.507546][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.509020][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.516098][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   35.517377][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   35.521445][ T4050] device veth1_vlan entered promiscuous mode
[   35.530063][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.531688][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.533230][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.534837][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.536257][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.540367][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.544044][ T4046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.545445][ T4046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.546765][ T4046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.548075][ T4046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.550669][ T4053] device veth0_vlan entered promiscuous mode
[   35.558428][ T4053] device veth1_vlan entered promiscuous mode
[   35.605079][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.606581][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.608014][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.610618][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.617015][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.620822][ T4050] device veth0_macvtap entered promiscuous mode
[   35.623150][ T4050] device veth1_macvtap entered promiscuous mode
[   35.628311][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.629849][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.631225][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.632677][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.635704][ T1689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.637037][ T1689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.638774][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.653255][ T4053] device veth0_macvtap entered promiscuous mode
[   35.656388][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.657679][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.659407][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   35.660964][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.672885][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.674498][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.678206][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.683955][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.685540][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.687239][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.690414][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.693699][ T4053] device veth1_macvtap entered promiscuous mode
[   35.697540][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.699011][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.700961][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.703793][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.705069][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.706705][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.708736][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.710564][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.712005][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.713526][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.715587][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.724857][ T1689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.726245][ T1689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.727709][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.729543][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.731092][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.732792][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.734291][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.736716][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.738295][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.744981][ T4045] device veth0_vlan entered promiscuous mode
[   35.746774][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.748313][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.751986][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.753612][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.755217][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.758521][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.762836][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.764034][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.765591][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.767534][ T4050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.768922][ T4050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.771130][ T4050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.772532][ T4050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.787720][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.790084][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.796266][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.797981][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.800049][ T4053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.801885][ T4053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.805823][ T4053] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.813924][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.815657][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.828743][ T4045] device veth1_vlan entered promiscuous mode
[   35.851284][ T4053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.852810][ T4053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.854181][ T4053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.855542][ T4053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.860471][ T4153] loop3: detected capacity change from 0 to 512
[   35.874427][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.875765][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.889399][ T4153] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2
[   35.904044][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   35.905669][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   35.907146][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.933946][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.935279][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.937318][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.938972][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.949838][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.963382][ T4045] device veth0_macvtap entered promiscuous mode
[   35.997784][ T4045] device veth1_macvtap entered promiscuous mode
[   36.021824][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   36.023218][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   36.024828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   36.027799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   36.050494][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.052121][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.053569][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.055138][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.056692][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.058394][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.074931][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.076522][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.503778][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.089494][  T613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.090798][  T613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.164174][ T4158] loop1: detected capacity change from 0 to 32768
[   37.194750][ T4158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6 (4158)
[   37.261718][ T4156] Bluetooth: hci1: command 0x041b tx timeout
[   37.262810][ T4156] Bluetooth: hci0: command 0x041b tx timeout
[   37.263835][ T4156] Bluetooth: hci3: command 0x041b tx timeout
[   37.264810][ T4156] Bluetooth: hci4: command 0x041b tx timeout
[   37.265756][ T4156] Bluetooth: hci2: command 0x041b tx timeout
[   37.299739][ T4164] loop0: detected capacity change from 0 to 16
[   37.301295][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   37.302925][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   37.304490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   37.425034][ T4158] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   37.426564][ T4158] BTRFS info (device loop1): using free space tree
[   37.427568][ T4158] BTRFS info (device loop1): has skinny extents
[   37.437001][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.438664][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.444070][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.458765][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.460567][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.462724][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.464552][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.466337][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.524461][   T26] audit: type=1400 audit(37.500:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4168 comm="syz.2.3"
[   37.791373][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.794255][ T4164] erofs: (device loop0): mounted with root inode @ nid 36.
[   37.794930][ T4174] loop3: detected capacity change from 0 to 4096
[   37.807417][ T4164] erofs: (device loop0): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36
[   37.811816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   37.813594][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   37.829413][ T4045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.831142][ T4045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.832618][ T4045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.836219][ T4045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.840595][ T4164] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   37.841296][ T4174] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   37.846411][ T4164] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851]
[   37.850073][ T4164] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   37.860721][ T4174] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[   37.864886][ T4174] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[   37.866847][ T4174] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   37.870006][ T4174] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   37.871490][ T4174] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   37.873830][ T4174] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   37.876289][ T4174] ntfs: volume version 3.1.
[   37.877312][ T4174] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   37.879704][ T4174] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   38.028733][  T613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.036708][  T613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.047886][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   38.081185][  T613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   38.082553][  T613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   38.084486][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   38.122675][ T4158] BTRFS info (device loop1): enabling ssd optimizations
[   38.136149][ T4201] loop4: detected capacity change from 0 to 512
[   38.173231][  T148] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   38.325947][ T4201] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   38.359533][   T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   38.668171][ T4201] EXT4-fs (loop4): shut down requested (1)
[   38.750120][ T4037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop1 scanned by udevd (4037)
[   38.759256][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   38.761190][   T13] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   38.762640][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.768743][   T13] usb 1-1: config 0 descriptor??
[   38.791712][ T4208] loop2: detected capacity change from 0 to 32768
[   38.816317][ T4208] XFS (loop2): Mounting V5 Filesystem
[   38.843594][ T4231] udc-core: couldn't find an available UDC or it's busy
[   38.844818][ T4231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   38.849789][ T4208] XFS (loop2): Ending clean mount
[   39.070677][ T4231] loop1: detected capacity change from 0 to 32768
[   39.106566][ T4231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4231)
[   39.140826][ T4231] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   39.142302][ T4231] BTRFS info (device loop1): setting nodatacow, compression disabled
[   39.143589][ T4231] BTRFS info (device loop1): turning on flush-on-commit
[   39.144711][ T4231] BTRFS info (device loop1): enabling auto defrag
[   39.145722][ T4231] BTRFS info (device loop1): trying to use backup root at mount time
[   39.147010][ T4231] BTRFS info (device loop1): turning on async discard
[   39.192057][   T13] usbhid 1-1:0.0: can't add hid device: -71
[   39.193187][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[   39.196230][   T13] usb 1-1: USB disconnect, device number 2
[   39.203699][ T4231] BTRFS info (device loop1): using free space tree
[   39.204791][ T4231] BTRFS info (device loop1): has skinny extents
[   39.274060][ T4233] loop3: detected capacity change from 0 to 32768
[   39.291409][ T4118] Bluetooth: hci2: command 0x040f tx timeout
[   39.292473][ T4118] Bluetooth: hci4: command 0x040f tx timeout
[   39.293435][ T4118] Bluetooth: hci3: command 0x040f tx timeout
[   39.294388][ T4118] Bluetooth: hci0: command 0x040f tx timeout
[   39.295393][ T4118] Bluetooth: hci1: command 0x040f tx timeout
[   39.423923][ T4235] loop4: detected capacity change from 0 to 32768
[   39.432957][ T4053] XFS (loop2): Unmounting Filesystem
[   39.445042][ T4177] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   39.447070][ T4231] BTRFS warning (device loop1): failed to read root (objectid=2): -5
[   39.452699][ T4177] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   39.454841][ T4231] BTRFS warning (device loop1): couldn't read tree root
[   39.461852][ T4231] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[   39.463528][ T4231] BTRFS warning (device loop1): couldn't read tree root
[   39.609526][ T4231] BTRFS info (device loop1): enabling ssd optimizations
[   39.611375][ T4231] BTRFS info (device loop1): clearing free space tree
[   39.612662][ T4231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   39.614205][ T4231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   39.883178][ T4231] BTRFS info (device loop1): creating free space tree
[   39.892006][ T4231] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   39.902533][ T4231] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   39.987985][ T4160] udevd[4160]: incorrect btrfs checksum on /dev/loop1
[   40.972204][ T4287] loop2: detected capacity change from 0 to 512
[   40.997828][ T4231] =======================================================
[   40.997828][ T4231] WARNING: The mand mount option has been deprecated and
[   40.997828][ T4231]          and is ignored by this kernel. Remove the mand
[   40.997828][ T4231]          option from the mount to silence this warning.
[   40.997828][ T4231] =======================================================
[   41.010085][ T4287] EXT4-fs (loop2): Ignoring removed nobh option
[   41.011170][ T4287] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   41.012709][ T4287] EXT4-fs (loop2): Ignoring removed orlov option
[   41.016606][ T4287] EXT4-fs (loop2): orphan cleanup on readonly fs
[   41.018437][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.15: iget: bad i_size value: 38620345925642
[   41.029655][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.15: couldn't read orphan inode 15 (err -117)
[   41.031933][ T4287] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   41.052524][ T4287] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.15'.
[   41.189322][   T13] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   41.334774][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   41.369984][ T4118] Bluetooth: hci1: command 0x0419 tx timeout
[   41.374871][ T4118] Bluetooth: hci0: command 0x0419 tx timeout
[   41.375853][ T4118] Bluetooth: hci3: command 0x0419 tx timeout
[   41.376910][ T4118] Bluetooth: hci4: command 0x0419 tx timeout
[   41.377860][ T4118] Bluetooth: hci2: command 0x0419 tx timeout
[   41.420231][ T4305] FAULT_INJECTION: forcing a failure.
[   41.420231][ T4305] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.427430][ T4305] CPU: 0 PID: 4305 Comm: syz.2.26 Not tainted 5.15.189-syzkaller #0
[   41.428683][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   41.430200][ T4305] Call trace:
[   41.430696][ T4305]  dump_backtrace+0x0/0x43c
[   41.431491][ T4305]  show_stack+0x2c/0x3c
[   41.432266][ T4305]  __dump_stack+0x30/0x40
[   41.433045][ T4305]  dump_stack_lvl+0xf8/0x160
[   41.433824][ T4305]  dump_stack+0x1c/0x5c
[   41.434495][ T4305]  should_fail+0x3c0/0x51c
[   41.435213][ T4305]  should_fail_usercopy+0x20/0x30
[   41.436000][ T4305]  simple_read_from_buffer+0xd0/0x264
[   41.436929][ T4305]  proc_fail_nth_read+0x19c/0x244
[   41.437771][ T4305]  vfs_read+0x278/0xa10
[   41.438461][ T4305]  ksys_read+0x120/0x210
[   41.439164][ T4305]  __arm64_sys_read+0x7c/0x90
[   41.439880][ T4305]  invoke_syscall+0x98/0x2b8
[   41.440618][ T4305]  el0_svc_common+0x138/0x258
[   41.441370][ T4305]  do_el0_svc+0x58/0x14c
[   41.442042][ T4305]  el0_svc+0x78/0x1e0
[   41.442627][ T4305]  el0t_64_sync_handler+0xcc/0xe4
[   41.443476][ T4305]  el0t_64_sync+0x1a0/0x1a4
[   41.559281][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   41.561136][   T13] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   41.562676][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.573188][   T13] usb 1-1: config 0 descriptor??
[   41.653054][ T4318] FAULT_INJECTION: forcing a failure.
[   41.653054][ T4318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   41.664096][ T4318] CPU: 0 PID: 4318 Comm: syz.4.31 Not tainted 5.15.189-syzkaller #0
[   41.665332][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   41.666900][ T4318] Call trace:
[   41.667439][ T4318]  dump_backtrace+0x0/0x43c
[   41.668213][ T4318]  show_stack+0x2c/0x3c
[   41.668854][ T4318]  __dump_stack+0x30/0x40
[   41.669551][ T4318]  dump_stack_lvl+0xf8/0x160
[   41.670220][ T4318]  dump_stack+0x1c/0x5c
[   41.670871][ T4318]  should_fail+0x3c0/0x51c
[   41.671594][ T4318]  should_fail_usercopy+0x20/0x30
[   41.672496][ T4318]  __copy_msghdr_from_user+0xb8/0x4f8
[   41.673435][ T4318]  ___sys_sendmsg+0x140/0x240
[   41.674180][ T4318]  __arm64_sys_sendmsg+0x1a8/0x254
[   41.675018][ T4318]  invoke_syscall+0x98/0x2b8
[   41.675806][ T4318]  el0_svc_common+0x138/0x258
[   41.676596][ T4318]  do_el0_svc+0x58/0x14c
[   41.677284][ T4318]  el0_svc+0x78/0x1e0
[   41.677941][ T4318]  el0t_64_sync_handler+0xcc/0xe4
[   41.678732][ T4318]  el0t_64_sync+0x1a0/0x1a4
[   42.079561][   T13] usbhid 1-1:0.0: can't add hid device: -71
[   42.120345][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[   42.315752][   T13] usb 1-1: USB disconnect, device number 3
[   42.652565][ T4335] mkiss: ax0: crc mode is auto.
[   42.662318][ T4337] udc-core: couldn't find an available UDC or it's busy
[   42.663736][ T4337] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   43.368207][   T26] kauditd_printk_skb: 6 callbacks suppressed
[   43.368216][   T26] audit: type=1400 audit(43.220:8): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4340 comm="syz.1.36"
[   43.390837][   T26] audit: type=1400 audit(43.270:9): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4345 comm="syz.3.38"
[   43.867229][ T4371] loop3: detected capacity change from 0 to 512
[   43.914993][ T4371] EXT4-fs (loop3): Ignoring removed nobh option
[   43.916022][ T4371] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   43.917349][ T4371] EXT4-fs (loop3): Ignoring removed orlov option
[   43.939824][ T4371] EXT4-fs (loop3): orphan cleanup on readonly fs
[   43.947307][ T4371] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.43: iget: bad i_size value: 38620345925642
[   43.970503][ T4371] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.43: couldn't read orphan inode 15 (err -117)
[   43.976198][ T4371] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   44.025314][ T4366] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.43'.
[   44.030281][ T4362] loop2: detected capacity change from 0 to 16
[   44.075077][ T4362] erofs: (device loop2): mounted with root inode @ nid 36.
[   44.080384][ T4362] erofs: (device loop2): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36
[   44.101082][ T4362] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   44.103899][ T4362] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851]
[   44.106728][ T4362] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[   44.531277][   T26] audit: type=1400 audit(44.510:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4379 comm="syz.2.47"
[   44.819619][ T4386] udc-core: couldn't find an available UDC or it's busy
[   44.820941][ T4386] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   45.245660][ T4390] loop0: detected capacity change from 0 to 32768
[   45.256554][ T4396] udc-core: couldn't find an available UDC or it's busy
[   45.257779][ T4396] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   45.639590][   T26] audit: type=1400 audit(45.470:11): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4391 comm="syz.4.51"
[   45.703038][   T26] audit: type=1400 audit(45.680:12): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4397 comm="syz.3.53"
[   45.985669][   T26] audit: type=1400 audit(45.960:13): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4404 comm="syz.1.54"
[   46.477101][ T4425] loop3: detected capacity change from 0 to 16
[   46.550812][ T4425] erofs: (device loop3): mounted with root inode @ nid 36.
[   46.565728][ T4418] erofs: (device loop3): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36
[   46.590385][ T4418] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   46.593064][ T4418] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851]
[   46.596206][ T4418] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[   47.014998][   T26] audit: type=1400 audit(46.990:14): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4436 comm="syz.3.64"
[   47.411846][ T4446] udc-core: couldn't find an available UDC or it's busy
[   47.413125][ T4446] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   48.012603][ T4454] loop2: detected capacity change from 0 to 32768
[   48.028872][ T4458] udc-core: couldn't find an available UDC or it's busy
[   48.035832][ T4458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   48.268953][ T4456] loop1: detected capacity change from 0 to 32768
[   48.387420][ T4458] loop4: detected capacity change from 0 to 32768
[   48.694523][   T26] audit: type=1400 audit(48.670:15): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4469 comm="syz.2.78"
[   48.703766][ T4458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.72 (4458)
[   48.783889][ T4458] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[   48.785671][ T4458] BTRFS info (device loop4): setting nodatacow, compression disabled
[   48.787052][ T4458] BTRFS info (device loop4): turning on flush-on-commit
[   48.788306][ T4458] BTRFS info (device loop4): enabling auto defrag
[   48.792718][ T4458] BTRFS info (device loop4): trying to use backup root at mount time
[   48.794914][ T4458] BTRFS info (device loop4): turning on async discard
[   48.797236][ T4458] BTRFS info (device loop4): using free space tree
[   48.798356][ T4458] BTRFS info (device loop4): has skinny extents
[   48.808659][  T136] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   48.809290][   T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   48.812774][ T4458] BTRFS warning (device loop4): failed to read root (objectid=2): -5
[   48.814631][  T136] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   48.815229][ T4468] loop3: detected capacity change from 0 to 32768
[   48.816692][ T4458] BTRFS warning (device loop4): couldn't read tree root
[   48.818881][ T4458] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7
[   48.821611][ T4458] BTRFS warning (device loop4): couldn't read tree root
[   48.841673][ T4458] BTRFS info (device loop4): enabling ssd optimizations
[   48.843524][ T4458] BTRFS info (device loop4): clearing free space tree
[   48.844662][ T4458] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   48.846242][ T4458] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   48.852971][ T4468] XFS (loop3): Mounting V5 Filesystem
[   48.858271][ T4458] BTRFS info (device loop4): creating free space tree
[   48.862984][ T4458] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   48.876405][ T4468] XFS (loop3): Ending clean mount
[   48.881507][ T4458] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   49.240873][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   49.248035][   T13] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   49.249469][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.251865][ T4507] udc-core: couldn't find an available UDC or it's busy
[   49.252399][   T13] usb 1-1: config 0 descriptor??
[   49.253126][ T4507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   49.259601][ T4059] XFS (loop3): Unmounting Filesystem
[   49.350861][   T26] audit: type=1400 audit(49.330:16): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4503 comm="syz.1.79"
[   49.749192][   T13] usbhid 1-1:0.0: can't add hid device: -71
[   49.750202][   T13] usbhid: probe of 1-1:0.0 failed with error -71
[   49.752212][   T13] usb 1-1: USB disconnect, device number 4
[   50.475964][ T4526] udc-core: couldn't find an available UDC or it's busy
[   50.477280][ T4526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   50.529535][ T4525] loop0: detected capacity change from 0 to 4096
[   50.690461][ T4525] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   50.698219][ T4525] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[   50.767376][ T4525] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[   50.775921][ T4525] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   50.782244][ T4525] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   50.793197][ T4525] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   50.801636][ T4525] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   50.806792][ T4525] ntfs: volume version 3.1.
[   50.807817][ T4525] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   51.148951][ T4539] loop0: detected capacity change from 0 to 32768
[   52.288206][ T4215] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   52.326313][ T4559] udc-core: couldn't find an available UDC or it's busy
[   52.327507][ T4559] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   52.339811][ T4543] loop3: detected capacity change from 0 to 32768
[   52.422243][ T4543] XFS (loop3): Mounting V5 Filesystem
[   52.442656][ T4543] XFS (loop3): Ending clean mount
[   52.453910][ T4059] XFS (loop3): Unmounting Filesystem
[   52.798468][ T4573] loop2: detected capacity change from 0 to 4096
[   52.830389][ T4573] ntfs: volume version 3.1.
[   52.849231][ T4215] usb 1-1: config 0 interface 0 has no altsetting 0
[   52.850304][ T4215] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   52.851801][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.855201][ T4215] usb 1-1: config 0 descriptor??
[   52.961172][ T4576] loop2: detected capacity change from 0 to 512
[   53.010506][ T4576] EXT4-fs (loop2): Ignoring removed nobh option
[   53.011919][ T4576] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   53.013587][ T4576] EXT4-fs (loop2): Ignoring removed orlov option
[   53.019464][ T4576] EXT4-fs (loop2): orphan cleanup on readonly fs
[   53.020825][ T4576] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.100: iget: bad i_size value: 38620345925642
[   53.023950][ T4576] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.100: couldn't read orphan inode 15 (err -117)
[   53.026297][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   53.052765][ T4575] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.100'.
[   53.066779][ T4579] udc-core: couldn't find an available UDC or it's busy
[   53.068149][ T4579] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   53.448614][ T4556] loop0: detected capacity change from 0 to 32768
[   53.459508][ T4215]  (null): keene_cmd_main failed (-110)
[   53.478218][ T4556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.95 (4556)
[   53.479218][ T4215] video4linux radio2: keene_cmd_main failed (-32)
[   53.481277][ T4215] radio-keene 1-1:0.0: V4L2 device registered as radio2
[   53.495344][ T4588] udc-core: couldn't find an available UDC or it's busy
[   53.498788][ T4588] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   53.503553][ T4556] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[   53.505017][ T4556] BTRFS info (device loop0): setting nodatacow, compression disabled
[   53.506325][ T4556] BTRFS info (device loop0): turning on flush-on-commit
[   53.507352][ T4556] BTRFS info (device loop0): enabling auto defrag
[   53.508362][ T4556] BTRFS info (device loop0): trying to use backup root at mount time
[   53.513678][ T4556] BTRFS info (device loop0): turning on async discard
[   53.514859][ T4556] BTRFS info (device loop0): using free space tree
[   53.515929][ T4556] BTRFS info (device loop0): has skinny extents
[   53.527301][ T1646] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   53.530698][ T4556] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[   53.533315][ T4509] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   53.535500][ T4556] BTRFS warning (device loop0): couldn't read tree root
[   53.536847][ T4556] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[   53.538535][ T4556] BTRFS warning (device loop0): couldn't read tree root
[   53.545125][ T4556] BTRFS info (device loop0): enabling ssd optimizations
[   53.547034][ T4556] BTRFS info (device loop0): clearing free space tree
[   53.548256][ T4556] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.552674][ T4556] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.557201][ T4556] BTRFS info (device loop0): creating free space tree
[   53.558709][ T4556] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.561386][ T4556] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.899298][ T4613] loop3: detected capacity change from 0 to 32768
[   54.960382][ T3627] usb 1-1: USB disconnect, device number 5
[   54.979082][    C0] sched: RT throttling activated
[   55.694395][ T4634] loop3: detected capacity change from 0 to 32768
[   55.704692][ T4636] loop1: detected capacity change from 0 to 512
[   55.731774][ T4634] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.112 (4634)
[   55.747241][ T4628] loop2: detected capacity change from 0 to 32768
[   55.763946][ T4636] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2
[   55.810760][ T4634] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   55.812301][ T4634] BTRFS info (device loop3): force zlib compression, level 3
[   55.813526][ T4634] BTRFS info (device loop3): force clearing of disk cache
[   55.814621][ T4634] BTRFS info (device loop3): setting nodatasum
[   55.815505][ T4634] BTRFS info (device loop3): doing ref verification
[   55.816480][ T4634] BTRFS info (device loop3): allowing degraded mounts
[   55.817484][ T4634] BTRFS info (device loop3): using free space tree
[   55.818399][ T4634] BTRFS info (device loop3): has skinny extents
[   55.830525][ T4628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.110 (4628)
[   55.857509][ T4644] udc-core: couldn't find an available UDC or it's busy
[   55.858651][ T4644] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   55.956382][ T4628] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   55.957812][ T4628] BTRFS info (device loop2): using free space tree
[   55.958944][ T4628] BTRFS info (device loop2): has skinny extents
[   56.327788][ T4634] BTRFS info (device loop3): enabling ssd optimizations
[   56.344409][ T4634] BTRFS info (device loop3): clearing free space tree
[   56.348798][ T4628] BTRFS info (device loop2): enabling ssd optimizations
[   56.348803][ T4634] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   56.351592][ T4634] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   56.361143][ T4634] BTRFS info (device loop3): creating free space tree
[   56.362837][ T4634] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   56.366343][ T4634] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   56.376442][   T26] kauditd_printk_skb: 14 callbacks suppressed
[   56.376451][   T26] audit: type=1400 audit(56.350:19): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4637 comm="syz.0.111"
[   56.452237][ T4509] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   56.594288][ T4690] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.117'.
[   56.924294][ T4707] udc-core: couldn't find an available UDC or it's busy
[   56.925466][ T4707] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   57.058444][ T4690] loop3: detected capacity change from 0 to 32768
[   58.086795][ T4690] XFS (loop3): Mounting V5 Filesystem
[   58.125255][ T4727] loop2: detected capacity change from 0 to 512
[   58.155537][ T4690] XFS (loop3): Ending clean mount
[   58.200895][ T4710] loop4: detected capacity change from 0 to 32768
[   58.239634][ T4727] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   58.255089][ T4727] EXT4-fs (loop2): shut down requested (1)
[   58.293295][ T4059] XFS (loop3): Unmounting Filesystem
[   59.433512][ T4744] loop3: detected capacity change from 0 to 32768
[   59.461405][ T4759] udc-core: couldn't find an available UDC or it's busy
[   59.462567][ T4759] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   59.513143][ T4744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.129 (4744)
[   59.519685][ T4744] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   59.521042][ T4744] BTRFS info (device loop3): using free space tree
[   59.522030][ T4744] BTRFS info (device loop3): has skinny extents
[   59.642969][ T4744] BTRFS info (device loop3): enabling ssd optimizations
[   59.677738][ T1646] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   59.763495][    T7] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   59.798525][   T26] audit: type=1400 audit(59.770:20): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4756 comm="syz.4.138"
[   59.951776][ T4788] loop3: detected capacity change from 0 to 512
[   59.963700][ T4788] EXT4-fs (loop3): Ignoring removed nobh option
[   59.964947][ T4788] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   59.984328][ T4788] EXT4-fs (loop3): Ignoring removed orlov option
[   59.994965][ T4788] EXT4-fs (loop3): orphan cleanup on readonly fs
[   59.996697][ T4788] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.141: iget: bad i_size value: 38620345925642
[   60.003802][ T4788] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.141: couldn't read orphan inode 15 (err -117)
[   60.008196][ T4788] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   60.038531][ T4788] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.141'.
[   60.063228][ T4786] loop1: detected capacity change from 0 to 32768
[   60.119354][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   60.121025][    T7] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   60.122361][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.135792][    T7] usb 1-1: config 0 descriptor??
[   60.889480][    T7] usbhid 1-1:0.0: can't add hid device: -71
[   60.891418][    T7] usbhid: probe of 1-1:0.0 failed with error -71
[   60.912562][    T7] usb 1-1: USB disconnect, device number 6
[   61.368497][ T4803] loop1: detected capacity change from 0 to 512
[   61.472435][ T4803] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   61.481665][ T4803] EXT4-fs (loop1): shut down requested (1)
[   62.081370][   T26] audit: type=1400 audit(62.060:21): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4813 comm="syz.4.152"
[   62.152857][ T4821] udc-core: couldn't find an available UDC or it's busy
[   62.154125][ T4821] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   62.403096][ T4826] loop1: detected capacity change from 0 to 32768
[   62.821846][ T4848] loop4: detected capacity change from 0 to 512
[   62.825916][ T4319] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   62.856796][ T4848] EXT4-fs (loop4): Ignoring removed nobh option
[   62.857879][ T4848] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   62.863923][ T4848] EXT4-fs (loop4): Ignoring removed orlov option
[   62.870938][ T4848] EXT4-fs (loop4): orphan cleanup on readonly fs
[   62.878932][ T4848] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.165: iget: bad i_size value: 38620345925642
[   62.884473][ T4848] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.165: couldn't read orphan inode 15 (err -117)
[   62.893753][ T4848] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   62.914756][ T4847] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.165'.
[   63.027789][ T4853] loop2: detected capacity change from 0 to 32768
[   63.074473][   T26] audit: type=1400 audit(63.050:22): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4840 comm="syz.3.163"
[   63.535027][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   63.536751][ T4319] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   63.538134][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.541801][ T4863] udc-core: couldn't find an available UDC or it's busy
[   63.543150][ T4863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   63.543920][ T4319] usb 1-1: config 0 descriptor??
[   63.687794][ T4865] loop4: detected capacity change from 0 to 512
[   63.690724][ T4863] loop2: detected capacity change from 0 to 32768
[   63.717057][ T4865] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   63.722771][ T4865] EXT4-fs (loop4): shut down requested (1)
[   63.748751][ T4863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.170 (4863)
[   63.784820][ T4863] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   63.786269][ T4863] BTRFS info (device loop2): setting nodatacow, compression disabled
[   63.787512][ T4863] BTRFS info (device loop2): turning on flush-on-commit
[   63.788591][ T4863] BTRFS info (device loop2): enabling auto defrag
[   63.844701][ T4872] udc-core: couldn't find an available UDC or it's busy
[   63.845827][ T4872] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   63.859238][ T4863] BTRFS info (device loop2): trying to use backup root at mount time
[   63.860733][ T4863] BTRFS info (device loop2): turning on async discard
[   63.861766][ T4863] BTRFS info (device loop2): using free space tree
[   63.862690][ T4863] BTRFS info (device loop2): has skinny extents
[   63.954420][ T4509] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   63.956492][ T4863] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[   63.958251][  T136] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   63.960882][ T4863] BTRFS warning (device loop2): couldn't read tree root
[   63.962279][ T4863] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   63.963874][ T4863] BTRFS warning (device loop2): couldn't read tree root
[   63.967052][ T4863] BTRFS info (device loop2): enabling ssd optimizations
[   63.968708][ T4863] BTRFS info (device loop2): clearing free space tree
[   63.971350][ T4863] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.973030][ T4863] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   63.976854][ T4863] BTRFS info (device loop2): creating free space tree
[   63.978221][ T4863] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   63.982389][ T4863] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   63.999252][ T4319] usbhid 1-1:0.0: can't add hid device: -71
[   64.000333][ T4319] usbhid: probe of 1-1:0.0 failed with error -71
[   64.099152][   T26] audit: type=1400 audit(64.030:23): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4873 comm="syz.3.176"
[   64.314006][ T4319] usb 1-1: USB disconnect, device number 7
[   64.774615][ T4914] loop1: detected capacity change from 0 to 512
[   64.796855][ T4915] loop3: detected capacity change from 0 to 512
[   64.836307][ T4915] EXT4-fs (loop3): Ignoring removed nobh option
[   64.837399][ T4915] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   64.869868][ T4915] EXT4-fs (loop3): Ignoring removed orlov option
[   64.944502][ T4915] EXT4-fs (loop3): orphan cleanup on readonly fs
[   64.948303][ T4914] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   64.953127][ T4915] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.183: iget: bad i_size value: 38620345925642
[   64.963990][ T4915] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.183: couldn't read orphan inode 15 (err -117)
[   64.969036][ T4914] EXT4-fs (loop1): shut down requested (1)
[   64.969168][ T4915] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   64.976612][ T4910] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.183'.
[   65.515153][ T4933] udc-core: couldn't find an available UDC or it's busy
[   65.520753][ T4933] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   65.595496][ T4939] udc-core: couldn't find an available UDC or it's busy
[   65.596783][ T4939] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   65.607388][ T4941] udc-core: couldn't find an available UDC or it's busy
[   65.608513][ T4941] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   65.860496][   T26] audit: type=1400 audit(65.820:24): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4930 comm="syz.1.187"
[   65.922332][ T4951] loop0: detected capacity change from 0 to 512
[   65.976112][ T4951] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   65.981310][ T4951] EXT4-fs (loop0): shut down requested (1)
[   66.101958][ T4958] loop2: detected capacity change from 0 to 512
[   66.151805][ T4958] EXT4-fs (loop2): Ignoring removed nobh option
[   66.153132][ T4958] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   66.154959][ T4958] EXT4-fs (loop2): Ignoring removed orlov option
[   66.211453][ T4958] EXT4-fs (loop2): orphan cleanup on readonly fs
[   66.217239][ T4958] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.200: iget: bad i_size value: 38620345925642
[   66.222899][ T4958] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.200: couldn't read orphan inode 15 (err -117)
[   66.225646][ T4958] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   66.247570][ T4958] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.200'.
[   67.014004][ T4968] loop3: detected capacity change from 0 to 32768
[   67.108071][ T4968] XFS (loop3): Mounting V5 Filesystem
[   67.185305][ T4968] XFS (loop3): Ending clean mount
[   67.191170][ T4968] XFS (loop3): Quotacheck needed: Please wait.
[   67.243447][ T4995] loop2: detected capacity change from 0 to 512
[   67.246143][ T4996] udc-core: couldn't find an available UDC or it's busy
[   67.247329][ T4996] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   67.254640][ T4968] XFS (loop3): Quotacheck: Done.
[   67.446174][ T4968] netlink: 'syz.3.203': attribute type 4 has an invalid length.
[   67.471984][ T4995] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   67.494225][ T4995] EXT4-fs (loop2): shut down requested (1)
[   67.605494][ T4059] XFS (loop3): Unmounting Filesystem
[   67.789211][   T25] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   67.889152][   T26] audit: type=1400 audit(67.830:25): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5011 comm="syz.2.217"
[   68.387853][ T5024] udc-core: couldn't find an available UDC or it's busy
[   68.389426][ T5024] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   68.412399][ T5022] loop4: detected capacity change from 0 to 512
[   68.423767][ T5022] EXT4-fs (loop4): Ignoring removed nobh option
[   68.424962][ T5022] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   68.426608][ T5022] EXT4-fs (loop4): Ignoring removed orlov option
[   68.433799][ T5022] EXT4-fs (loop4): orphan cleanup on readonly fs
[   68.435855][ T5022] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.220: iget: bad i_size value: 38620345925642
[   68.438294][ T5022] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.220: couldn't read orphan inode 15 (err -117)
[   68.441175][ T5022] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   68.447332][ T5022] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.220'.
[   68.579577][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   68.583502][   T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   68.586000][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.593783][   T25] usb 1-1: config 0 descriptor??
[   68.858953][ T5035] loop1: detected capacity change from 0 to 512
[   68.886348][ T5035] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   68.905327][ T5035] EXT4-fs (loop1): shut down requested (1)
[   68.969614][   T25] usbhid 1-1:0.0: can't add hid device: -71
[   68.971167][   T25] usbhid: probe of 1-1:0.0 failed with error -71
[   68.973852][   T25] usb 1-1: USB disconnect, device number 8
[   69.021067][ T5033] loop4: detected capacity change from 0 to 32768
[   69.222344][ T5054] udc-core: couldn't find an available UDC or it's busy
[   69.224794][ T5054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   69.648095][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[   69.649349][   T26] audit: type=1400 audit(69.600:26): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5051 comm="syz.3.232"
[   69.652710][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[   69.663722][   T21] cfg80211: failed to load regulatory.db
[   69.702090][ T5059] loop0: detected capacity change from 0 to 512
[   69.740816][ T5059] EXT4-fs (loop0): Ignoring removed nobh option
[   69.744499][ T5059] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   69.748164][ T5059] EXT4-fs (loop0): Ignoring removed orlov option
[   69.768907][ T5059] EXT4-fs (loop0): orphan cleanup on readonly fs
[   69.772438][ T5059] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.233: iget: bad i_size value: 38620345925642
[   69.786001][ T5059] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.233: couldn't read orphan inode 15 (err -117)
[   69.790971][ T5059] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   69.807218][ T5059] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.233'.
[   70.677768][ T5075] udc-core: couldn't find an available UDC or it's busy
[   70.679028][ T5075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   70.723435][ T5078] loop3: detected capacity change from 0 to 512
[   70.917572][ T5078] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   70.937299][ T5091] udc-core: couldn't find an available UDC or it's busy
[   70.938452][ T5091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   70.951235][ T5078] EXT4-fs (loop3): shut down requested (1)
[   71.025614][ T5087] loop0: detected capacity change from 0 to 32768
[   71.545271][ T5108] udc-core: couldn't find an available UDC or it's busy
[   71.546552][ T5108] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   71.800513][   T26] audit: type=1400 audit(71.750:27): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5109 comm="syz.0.250"
[   72.022900][ T5116] loop4: detected capacity change from 0 to 512
[   72.061007][ T5116] EXT4-fs (loop4): Ignoring removed nobh option
[   72.062139][ T5116] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   72.063505][ T5116] EXT4-fs (loop4): Ignoring removed orlov option
[   72.074486][ T5116] EXT4-fs (loop4): orphan cleanup on readonly fs
[   72.076121][ T5116] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.251: iget: bad i_size value: 38620345925642
[   72.078392][ T5116] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.251: couldn't read orphan inode 15 (err -117)
[   72.080790][ T5116] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   72.092719][ T5116] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.251'.
[   73.282600][ T5139] udc-core: couldn't find an available UDC or it's busy
[   73.283735][ T5139] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   73.308160][ T5127] loop2: detected capacity change from 0 to 32768
[   73.356257][ T5141] udc-core: couldn't find an available UDC or it's busy
[   73.357423][ T5141] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   73.862547][ T5141] loop2: detected capacity change from 0 to 32768
[   73.879989][ T5141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.260 (5141)
[   73.934218][ T5141] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   73.935774][ T5141] BTRFS info (device loop2): setting nodatacow, compression disabled
[   73.937187][ T5141] BTRFS info (device loop2): turning on flush-on-commit
[   73.938398][ T5141] BTRFS info (device loop2): enabling auto defrag
[   73.941218][ T5141] BTRFS info (device loop2): trying to use backup root at mount time
[   73.942825][ T5141] BTRFS info (device loop2): turning on async discard
[   73.944084][ T5141] BTRFS info (device loop2): using free space tree
[   73.945211][ T5141] BTRFS info (device loop2): has skinny extents
[   74.034275][   T26] audit: type=1400 audit(74.010:28): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5148 comm="syz.0.272"
[   74.055953][ T4282] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   74.058057][ T5141] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[   74.059887][ T4282] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   74.062029][ T5141] BTRFS warning (device loop2): couldn't read tree root
[   74.063474][ T5141] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   74.065260][ T5141] BTRFS warning (device loop2): couldn't read tree root
[   74.098314][ T5141] BTRFS info (device loop2): enabling ssd optimizations
[   74.102819][ T5141] BTRFS info (device loop2): clearing free space tree
[   74.104002][ T5141] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   74.107895][ T5141] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.120697][ T5141] BTRFS info (device loop2): creating free space tree
[   74.121998][ T5141] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   74.154273][ T5141] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.162241][ T5175] udc-core: couldn't find an available UDC or it's busy
[   74.169217][ T5175] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   74.482621][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'.
[   74.623286][ T5186] mmap: syz.4.266 (5186) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   75.175267][ T5198] loop2: detected capacity change from 0 to 512
[   75.227692][ T5198] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   75.234205][ T5198] EXT4-fs (loop2): shut down requested (1)
[   75.430339][ T5207] udc-core: couldn't find an available UDC or it's busy
[   75.431544][ T5207] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   75.455802][ T5206] loop2: detected capacity change from 0 to 512
[   75.543681][ T5206] EXT4-fs (loop2): Ignoring removed nobh option
[   75.544763][ T5206] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   75.546239][ T5206] EXT4-fs (loop2): Ignoring removed orlov option
[   75.566741][ T5206] EXT4-fs (loop2): orphan cleanup on readonly fs
[   75.573836][ T5206] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.273: iget: bad i_size value: 38620345925642
[   75.630717][ T5206] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.273: couldn't read orphan inode 15 (err -117)
[   75.647872][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   75.655158][ T5200] loop0: detected capacity change from 0 to 32768
[   75.685562][ T5206] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.273'.
[   75.803138][ T5220] udc-core: couldn't find an available UDC or it's busy
[   75.804287][ T5220] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   76.375994][ T5232] loop4: detected capacity change from 0 to 512
[   76.400613][ T5232] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   76.430697][ T5232] EXT4-fs (loop4): shut down requested (1)
[   76.451737][   T26] audit: type=1400 audit(76.430:29): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5229 comm="syz.2.283"
[   76.489225][   T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   76.920760][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[   76.922415][   T13] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   76.923890][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.955215][   T13] usb 1-1: config 0 descriptor??
[   77.476468][ T5255] loop3: detected capacity change from 0 to 32768
[   77.576514][ T5226] loop0: detected capacity change from 0 to 32768
[   77.604894][ T5226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.279 (5226)
[   77.617540][ T5226] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[   77.619036][ T5226] BTRFS info (device loop0): setting nodatacow, compression disabled
[   77.621622][ T5257] loop2: detected capacity change from 0 to 512
[   77.627701][ T5226] BTRFS info (device loop0): turning on flush-on-commit
[   77.628965][ T5226] BTRFS info (device loop0): enabling auto defrag
[   77.633029][ T5226] BTRFS info (device loop0): trying to use backup root at mount time
[   77.634441][ T5226] BTRFS info (device loop0): turning on async discard
[   77.635579][ T5226] BTRFS info (device loop0): using free space tree
[   77.636684][ T5226] BTRFS info (device loop0): has skinny extents
[   77.649156][   T13]  (null): keene_cmd_main failed (-110)
[   77.653424][ T5257] EXT4-fs (loop2): Ignoring removed nobh option
[   77.654439][ T5257] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   77.655838][ T5257] EXT4-fs (loop2): Ignoring removed orlov option
[   77.669179][   T13] video4linux radio2: keene_cmd_main failed (-32)
[   77.670200][   T13] radio-keene 1-1:0.0: V4L2 device registered as radio2
[   77.672741][ T5257] EXT4-fs (loop2): orphan cleanup on readonly fs
[   77.673948][ T5257] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.293: iget: bad i_size value: 38620345925642
[   77.676320][ T5257] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.293: couldn't read orphan inode 15 (err -117)
[   77.678416][ T5257] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   77.684642][ T5257] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.293'.
[   77.702655][ T5264] udc-core: couldn't find an available UDC or it's busy
[   77.703890][ T5264] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   77.784169][ T5273] udc-core: couldn't find an available UDC or it's busy
[   77.785388][ T5273] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   77.856314][ T1609] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   77.858167][ T5226] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[   77.860769][ T1609] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   77.862549][ T5226] BTRFS warning (device loop0): couldn't read tree root
[   77.863948][ T5226] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[   77.865544][ T5226] BTRFS warning (device loop0): couldn't read tree root
[   77.882204][ T5226] BTRFS info (device loop0): enabling ssd optimizations
[   77.884253][ T5289] udc-core: couldn't find an available UDC or it's busy
[   77.885491][ T5289] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   77.886794][ T5226] BTRFS info (device loop0): clearing free space tree
[   77.887843][ T5226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.891455][ T5226] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.894937][ T5226] BTRFS info (device loop0): creating free space tree
[   77.896330][ T5226] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.897874][ T5226] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.933189][ T5291] loop2: detected capacity change from 0 to 512
[   77.947348][ T5291] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   77.955432][ T5291] EXT4-fs (loop2): shut down requested (1)
[   78.672694][   T13] usb 1-1: USB disconnect, device number 9
[   79.163392][ T5311] loop2: detected capacity change from 0 to 512
[   79.233037][   T26] audit: type=1400 audit(79.210:30): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5310 comm="syz.4.304"
[   79.265629][ T5311] EXT4-fs (loop2): Ignoring removed nobh option
[   79.267654][ T5311] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   79.271117][ T5311] EXT4-fs (loop2): Ignoring removed orlov option
[   79.278649][ T5311] EXT4-fs (loop2): orphan cleanup on readonly fs
[   79.281281][ T5311] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.305: iget: bad i_size value: 38620345925642
[   79.286257][ T5311] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.305: couldn't read orphan inode 15 (err -117)
[   79.293904][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   79.304998][ T5314] loop0: detected capacity change from 0 to 32768
[   79.314342][ T5311] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.305'.
[   79.516060][ T5329] loop3: detected capacity change from 0 to 512
[   79.725089][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   79.759137][ T4518] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   79.782355][ T5341] udc-core: couldn't find an available UDC or it's busy
[   79.783479][ T5341] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   80.079729][   T26] audit: type=1400 audit(80.030:31): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5342 comm="syz.3.315"
[   80.382076][ T4518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.383956][ T4518] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   80.385424][ T4518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.388502][ T4518] usb 1-1: config 0 descriptor??
[   80.942411][   T26] audit: type=1400 audit(80.640:32): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5349 comm="syz.4.317"
[   80.961924][ T5354] udc-core: couldn't find an available UDC or it's busy
[   80.964080][ T5354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   81.030900][ T5360] loop4: detected capacity change from 0 to 512
[   81.046924][ T5360] EXT4-fs (loop4): Ignoring removed nobh option
[   81.048080][ T5360] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   81.050164][ T5360] EXT4-fs (loop4): Ignoring removed orlov option
[   81.052875][ T5360] EXT4-fs (loop4): orphan cleanup on readonly fs
[   81.054273][ T5360] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.320: iget: bad i_size value: 38620345925642
[   81.056708][ T5360] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.320: couldn't read orphan inode 15 (err -117)
[   81.058781][ T5360] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   81.079171][ T4518] usbhid 1-1:0.0: can't add hid device: -71
[   81.080336][ T4518] usbhid: probe of 1-1:0.0 failed with error -71
[   81.086345][ T5357] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.320'.
[   81.088023][ T4518] usb 1-1: USB disconnect, device number 10
[   81.149372][ T5354] loop2: detected capacity change from 0 to 32768
[   81.156541][ T5354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.318 (5354)
[   81.168988][ T5354] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   81.175459][ T5354] BTRFS info (device loop2): setting nodatacow, compression disabled
[   81.177445][ T5354] BTRFS info (device loop2): turning on flush-on-commit
[   81.179151][ T5354] BTRFS info (device loop2): enabling auto defrag
[   81.180200][ T5354] BTRFS info (device loop2): trying to use backup root at mount time
[   81.181484][ T5354] BTRFS info (device loop2): turning on async discard
[   81.182522][ T5354] BTRFS info (device loop2): using free space tree
[   81.183601][ T5354] BTRFS info (device loop2): has skinny extents
[   81.188397][ T5359] loop3: detected capacity change from 0 to 32768
[   81.197393][    T9] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   81.203318][ T5354] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[   81.204903][    T9] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   81.206787][ T5354] BTRFS warning (device loop2): couldn't read tree root
[   81.208100][ T5354] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   81.217456][ T5354] BTRFS warning (device loop2): couldn't read tree root
[   81.307638][ T5354] BTRFS info (device loop2): enabling ssd optimizations
[   81.312155][ T5354] BTRFS info (device loop2): clearing free space tree
[   81.314351][ T5354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   81.316983][ T5354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   81.686560][ T5354] BTRFS info (device loop2): creating free space tree
[   81.688079][ T5354] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   81.694607][ T5354] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   81.705161][ T5391] loop1: detected capacity change from 0 to 512
[   81.739023][ T5391] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   81.891663][ T5407] FAULT_INJECTION: forcing a failure.
[   81.891663][ T5407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.894044][ T5407] CPU: 1 PID: 5407 Comm: syz.3.330 Not tainted 5.15.189-syzkaller #0
[   81.895366][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   81.896960][ T5407] Call trace:
[   81.897533][ T5407]  dump_backtrace+0x0/0x43c
[   81.898310][ T5407]  show_stack+0x2c/0x3c
[   81.898998][ T5407]  __dump_stack+0x30/0x40
[   81.899707][ T5407]  dump_stack_lvl+0xf8/0x160
[   81.900446][ T5407]  dump_stack+0x1c/0x5c
[   81.901155][ T5407]  should_fail+0x3c0/0x51c
[   81.901815][ T5407]  should_fail_usercopy+0x20/0x30
[   81.902565][ T5407]  __copy_msghdr_from_user+0xb8/0x4f8
[   81.903392][ T5407]  ___sys_sendmsg+0x140/0x240
[   81.904143][ T5407]  __arm64_sys_sendmsg+0x1a8/0x254
[   81.904960][ T5407]  invoke_syscall+0x98/0x2b8
[   81.905669][ T5407]  el0_svc_common+0x138/0x258
[   81.906414][ T5407]  do_el0_svc+0x58/0x14c
[   81.907034][ T5407]  el0_svc+0x78/0x1e0
[   81.907718][ T5407]  el0t_64_sync_handler+0xcc/0xe4
[   81.908541][ T5407]  el0t_64_sync+0x1a0/0x1a4
[   81.996662][   T26] audit: type=1400 audit(81.970:33): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5408 comm="syz.3.331"
[   82.119952][ T4215] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[   82.243966][ T5416] loop4: detected capacity change from 0 to 512
[   82.313457][ T5416] EXT4-fs (loop4): Ignoring removed nobh option
[   82.314795][ T5416] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   82.316486][ T5416] EXT4-fs (loop4): Ignoring removed orlov option
[   82.323131][ T5416] EXT4-fs (loop4): orphan cleanup on readonly fs
[   82.334544][ T5416] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.333: iget: bad i_size value: 38620345925642
[   82.337320][ T5416] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.333: couldn't read orphan inode 15 (err -117)
[   82.340158][ T5416] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   82.350534][ T5416] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.333'.
[   82.436937][ T5418] loop3: detected capacity change from 0 to 32768
[   82.479213][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   82.481046][ T4215] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   82.483957][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.487905][ T4215] usb 1-1: config 0 descriptor??
[   83.032103][ T5432] udc-core: couldn't find an available UDC or it's busy
[   83.033376][ T5432] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   83.044371][ T5434] loop2: detected capacity change from 0 to 512
[   83.096979][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   83.159187][ T4215] usbhid 1-1:0.0: can't add hid device: -71
[   83.160346][ T4215] usbhid: probe of 1-1:0.0 failed with error -71
[   83.162339][ T4215] usb 1-1: USB disconnect, device number 11
[   83.202504][   T26] audit: type=1400 audit(83.180:34): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5437 comm="syz.1.342"
[   83.266158][ T5443] loop1: detected capacity change from 0 to 512
[   83.342378][ T5447] syz.2.344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   83.353681][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.374813][ T5452] udc-core: couldn't find an available UDC or it's busy
[   83.382902][ T5452] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   83.422309][ T5443] Zero length message leads to an empty skb
[   83.443881][ T5454] loop4: detected capacity change from 0 to 512
[   83.526673][ T5454] EXT4-fs (loop4): Ignoring removed nobh option
[   83.527724][ T5454] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   83.530061][ T5454] EXT4-fs (loop4): Ignoring removed orlov option
[   83.537256][ T5454] EXT4-fs (loop4): orphan cleanup on readonly fs
[   83.538666][ T5454] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.347: iget: bad i_size value: 38620345925642
[   83.541182][ T5454] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.347: couldn't read orphan inode 15 (err -117)
[   83.543306][ T5454] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   83.548310][ T5452] loop2: detected capacity change from 0 to 32768
[   83.567094][ T5454] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.347'.
[   83.593371][ T5452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.346 (5452)
[   83.598361][ T5461] udc-core: couldn't find an available UDC or it's busy
[   83.602968][ T5461] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   83.619160][ T5456] loop1: detected capacity change from 0 to 32768
[   83.621474][ T5463] loop0: detected capacity change from 0 to 512
[   83.663093][ T5452] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   83.664796][ T5452] BTRFS info (device loop2): setting nodatacow, compression disabled
[   83.666145][ T5452] BTRFS info (device loop2): turning on flush-on-commit
[   83.667292][ T5452] BTRFS info (device loop2): enabling auto defrag
[   83.668351][ T5452] BTRFS info (device loop2): trying to use backup root at mount time
[   83.674770][ T5452] BTRFS info (device loop2): turning on async discard
[   83.676351][ T5452] BTRFS info (device loop2): using free space tree
[   83.677755][ T5452] BTRFS info (device loop2): has skinny extents
[   83.698843][ T5463] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   83.727010][ T5475] FAULT_INJECTION: forcing a failure.
[   83.727010][ T5475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.751730][ T5475] CPU: 0 PID: 5475 Comm: syz.4.352 Not tainted 5.15.189-syzkaller #0
[   83.752968][ T5475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   83.754462][ T5475] Call trace:
[   83.754941][ T5475]  dump_backtrace+0x0/0x43c
[   83.755637][ T5475]  show_stack+0x2c/0x3c
[   83.756431][ T5475]  __dump_stack+0x30/0x40
[   83.757169][ T5475]  dump_stack_lvl+0xf8/0x160
[   83.757988][ T5475]  dump_stack+0x1c/0x5c
[   83.758687][ T5475]  should_fail+0x3c0/0x51c
[   83.759449][ T5475]  should_fail_usercopy+0x20/0x30
[   83.760351][ T5475]  put_itimerval+0x12c/0x298
[   83.761112][ T5475]  __arm64_sys_setitimer+0x19c/0x3f4
[   83.761949][ T5475]  invoke_syscall+0x98/0x2b8
[   83.762690][ T5475]  el0_svc_common+0x138/0x258
[   83.763415][ T5475]  do_el0_svc+0x58/0x14c
[   83.764058][ T5475]  el0_svc+0x78/0x1e0
[   83.764699][ T5475]  el0t_64_sync_handler+0xcc/0xe4
[   83.765547][ T5475]  el0t_64_sync+0x1a0/0x1a4
[   83.846913][   T26] audit: type=1400 audit(83.820:35): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5478 comm="syz.0.354"
[   83.994749][ T1609] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   83.996993][ T5452] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[   83.998480][ T4282] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   84.003363][ T5452] BTRFS warning (device loop2): couldn't read tree root
[   84.004731][ T5452] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[   84.006314][ T5452] BTRFS warning (device loop2): couldn't read tree root
[   84.012409][ T5452] BTRFS info (device loop2): enabling ssd optimizations
[   84.015800][ T5452] BTRFS info (device loop2): clearing free space tree
[   84.016933][ T5452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.018511][ T5452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.025525][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[   84.111869][ T5452] BTRFS info (device loop2): creating free space tree
[   84.116802][ T5452] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.128646][ T5452] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.427170][ T5507] netlink: 'syz.0.359': attribute type 10 has an invalid length.
[   84.444227][ T5509] udc-core: couldn't find an available UDC or it's busy
[   84.448644][ T5509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   84.591779][ T5514] loop1: detected capacity change from 0 to 512
[   84.631690][ T5514] EXT4-fs (loop1): Ignoring removed nobh option
[   84.633050][ T5514] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   84.634542][ T5514] EXT4-fs (loop1): Ignoring removed orlov option
[   84.637163][ T5514] EXT4-fs (loop1): orphan cleanup on readonly fs
[   84.638279][ T5514] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.362: iget: bad i_size value: 38620345925642
[   84.641107][ T5514] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.362: couldn't read orphan inode 15 (err -117)
[   84.643175][ T5514] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   84.653605][ T5514] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.362'.
[   84.749178][ T4688] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[   84.764947][ T5519] loop1: detected capacity change from 0 to 512
[   84.771904][ T5519] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   84.873667][ T5525] tmpfs: Bad value for 'mpol'
[   84.987068][   T26] audit: type=1400 audit(84.930:36): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5527 comm="syz.4.367"
[   85.014302][ T5536] FAULT_INJECTION: forcing a failure.
[   85.014302][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.016614][ T5536] CPU: 1 PID: 5536 Comm: syz.3.370 Not tainted 5.15.189-syzkaller #0
[   85.017952][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   85.019681][ T5536] Call trace:
[   85.020207][ T5536]  dump_backtrace+0x0/0x43c
[   85.020898][ T5536]  show_stack+0x2c/0x3c
[   85.021572][ T5536]  __dump_stack+0x30/0x40
[   85.022267][ T5536]  dump_stack_lvl+0xf8/0x160
[   85.023001][ T5536]  dump_stack+0x1c/0x5c
[   85.023703][ T5536]  should_fail+0x3c0/0x51c
[   85.024455][ T5536]  should_fail_usercopy+0x20/0x30
[   85.025309][ T5536]  ucma_write+0x138/0x3b0
[   85.026025][ T5536]  vfs_write+0x280/0xa2c
[   85.026815][ T5536]  ksys_write+0x120/0x210
[   85.027522][ T5536]  __arm64_sys_write+0x7c/0x90
[   85.028279][ T5536]  invoke_syscall+0x98/0x2b8
[   85.029059][ T5536]  el0_svc_common+0x138/0x258
[   85.029843][ T5536]  do_el0_svc+0x58/0x14c
[   85.030513][ T5536]  el0_svc+0x78/0x1e0
[   85.031142][ T5536]  el0t_64_sync_handler+0xcc/0xe4
[   85.031966][ T5536]  el0t_64_sync+0x1a0/0x1a4
[   85.194183][ T5540] loop3: detected capacity change from 0 to 512
[   85.197121][ T5540] EXT4-fs (loop3): Ignoring removed nobh option
[   85.198283][ T5540] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   85.208764][ T5540] EXT4-fs (loop3): Ignoring removed orlov option
[   85.236672][ T5540] EXT4-fs (loop3): orphan cleanup on readonly fs
[   85.241231][ T5540] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.373: iget: bad i_size value: 38620345925642
[   85.246254][ T5540] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.373: couldn't read orphan inode 15 (err -117)
[   85.261637][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   85.284206][ T5540] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.373'.
[   85.359184][ T4688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.360905][ T4688] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   85.366277][ T4688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.370763][ T4688] usb 1-1: config 0 descriptor??
[   85.403471][ T5545] udc-core: couldn't find an available UDC or it's busy
[   85.404828][ T5545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   85.452376][ T5549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.375'.
[   85.476296][ T5551] loop3: detected capacity change from 0 to 512
[   85.491382][ T5551] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   86.103662][ T5559] syz.1.378 uses obsolete (PF_INET,SOCK_PACKET)
[   86.179192][ T4688] usbhid 1-1:0.0: can't add hid device: -71
[   86.180239][ T4688] usbhid: probe of 1-1:0.0 failed with error -71
[   86.182461][ T4688] usb 1-1: USB disconnect, device number 12
[   86.292407][   T26] audit: type=1400 audit(86.270:37): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5560 comm="syz.1.379"
[   86.308412][ T5564] udc-core: couldn't find an available UDC or it's busy
[   86.309859][ T5564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   86.345349][ T5566] netlink: 'syz.1.381': attribute type 12 has an invalid length.
[   86.369481][ T5569] udc-core: couldn't find an available UDC or it's busy
[   86.370591][ T5569] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   86.441891][ T5572] loop3: detected capacity change from 0 to 512
[   86.445331][ T5572] EXT4-fs (loop3): Ignoring removed nobh option
[   86.449858][ T5572] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   86.451397][ T5572] EXT4-fs (loop3): Ignoring removed orlov option
[   86.459866][ T5572] EXT4-fs (loop3): orphan cleanup on readonly fs
[   86.466704][ T5572] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.384: iget: bad i_size value: 38620345925642
[   86.476303][ T5572] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.384: couldn't read orphan inode 15 (err -117)
[   86.478555][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   86.478663][ T5577] netlink: 'syz.4.386': attribute type 12 has an invalid length.
[   86.483580][ T5577] FAULT_INJECTION: forcing a failure.
[   86.483580][ T5577] name failslab, interval 1, probability 0, space 0, times 1
[   86.488049][ T5572] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.384'.
[   86.497115][ T5577] CPU: 1 PID: 5577 Comm: syz.4.386 Not tainted 5.15.189-syzkaller #0
[   86.498316][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   86.499796][ T5577] Call trace:
[   86.500337][ T5577]  dump_backtrace+0x0/0x43c
[   86.501025][ T5577]  show_stack+0x2c/0x3c
[   86.501674][ T5577]  __dump_stack+0x30/0x40
[   86.502324][ T5577]  dump_stack_lvl+0xf8/0x160
[   86.503043][ T5577]  dump_stack+0x1c/0x5c
[   86.503683][ T5577]  should_fail+0x3c0/0x51c
[   86.504322][ T5577]  __should_failslab+0xbc/0x10c
[   86.505054][ T5577]  should_failslab+0x10/0x28
[   86.505744][ T5577]  slab_pre_alloc_hook+0x64/0xec
[   86.506485][ T5577]  __kmalloc+0xbc/0x44c
[   86.507127][ T5577]  tomoyo_realpath_from_path+0xcc/0x510
[   86.508009][ T5577]  tomoyo_path_number_perm+0x1b0/0x518
[   86.508908][ T5577]  tomoyo_file_ioctl+0x2c/0x3c
[   86.509667][ T5577]  security_file_ioctl+0x80/0xbc
[   86.510526][ T5577]  __arm64_sys_ioctl+0xa8/0x1c8
[   86.511310][ T5577]  invoke_syscall+0x98/0x2b8
[   86.512029][ T5577]  el0_svc_common+0x138/0x258
[   86.512769][ T5577]  do_el0_svc+0x58/0x14c
[   86.513529][ T5577]  el0_svc+0x78/0x1e0
[   86.514189][ T5577]  el0t_64_sync_handler+0xcc/0xe4
[   86.515001][ T5577]  el0t_64_sync+0x1a0/0x1a4
[   86.521382][ T5577] ERROR: Out of memory at tomoyo_realpath_from_path.
[   86.576039][ T5569] loop1: detected capacity change from 0 to 32768
[   86.586908][ T5569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.382 (5569)
[   86.639674][ T5569] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   86.641054][ T5569] BTRFS info (device loop1): setting nodatacow, compression disabled
[   86.647879][ T5569] BTRFS info (device loop1): turning on flush-on-commit
[   86.649040][ T5569] BTRFS info (device loop1): enabling auto defrag
[   86.653056][ T5569] BTRFS info (device loop1): trying to use backup root at mount time
[   86.654471][ T5569] BTRFS info (device loop1): turning on async discard
[   86.655544][ T5569] BTRFS info (device loop1): using free space tree
[   86.656844][ T5569] BTRFS info (device loop1): has skinny extents
[   86.664049][    T9] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   86.666129][ T5569] BTRFS warning (device loop1): failed to read root (objectid=2): -5
[   86.667795][    T9] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   86.673222][ T5569] BTRFS warning (device loop1): couldn't read tree root
[   86.674596][ T5569] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[   86.676157][ T5569] BTRFS warning (device loop1): couldn't read tree root
[   86.679837][ T5569] BTRFS info (device loop1): enabling ssd optimizations
[   86.681174][ T5569] BTRFS info (device loop1): clearing free space tree
[   86.682197][ T5569] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.683662][ T5569] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.719439][ T5569] BTRFS info (device loop1): creating free space tree
[   86.720890][ T5569] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.722411][ T5569] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.872796][ T5608] netlink: 'syz.3.391': attribute type 12 has an invalid length.
[   86.966778][ T4518] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   86.977615][   T26] audit: type=1400 audit(86.950:38): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5609 comm="syz.2.392"
[   87.629966][ T4518] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   87.631812][ T4518] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   87.633229][ T4518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.635786][ T4518] usb 1-1: config 0 descriptor??
[   87.815881][ T5627] loop4: detected capacity change from 0 to 32768
[   87.883281][ T5627] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   87.896344][ T5633] FAULT_INJECTION: forcing a failure.
[   87.896344][ T5633] name failslab, interval 1, probability 0, space 0, times 0
[   87.911997][ T5633] CPU: 0 PID: 5633 Comm: syz.1.399 Not tainted 5.15.189-syzkaller #0
[   87.913317][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   87.915015][ T5633] Call trace:
[   87.915555][ T5633]  dump_backtrace+0x0/0x43c
[   87.916308][ T5633]  show_stack+0x2c/0x3c
[   87.916964][ T5633]  __dump_stack+0x30/0x40
[   87.917714][ T5633]  dump_stack_lvl+0xf8/0x160
[   87.918549][ T5633]  dump_stack+0x1c/0x5c
[   87.919258][ T5633]  should_fail+0x3c0/0x51c
[   87.919963][ T5633]  __should_failslab+0xbc/0x10c
[   87.920756][ T5633]  should_failslab+0x10/0x28
[   87.921491][ T5633]  slab_pre_alloc_hook+0x64/0xec
[   87.922291][ T5633]  kmem_cache_alloc_trace+0x98/0x3fc
[   87.923139][ T5633]  drm_atomic_state_alloc+0xb4/0x108
[   87.923979][ T5633]  drm_client_modeset_commit_atomic+0xcc/0x6b8
[   87.924943][ T5633]  drm_client_modeset_commit_locked+0xd0/0x4a0
[   87.925895][ T5633]  drm_client_modeset_commit+0x50/0x7c
[   87.926702][ T5633]  drm_fbdev_client_restore+0xbc/0x154
[   87.927539][ T5633]  drm_client_dev_restore+0x120/0x234
[   87.928380][ T5633]  drm_release+0x4b0/0x618
[   87.929174][ T5633]  __fput+0x1c0/0x7f8
[   87.929817][ T5633]  ____fput+0x20/0x30
[   87.930426][ T5633]  task_work_run+0x12c/0x1e0
[   87.931196][ T5633]  do_notify_resume+0x24b4/0x3128
[   87.931984][ T5633]  el0_svc+0xf0/0x1e0
[   87.932620][ T5633]  el0t_64_sync_handler+0xcc/0xe4
[   87.933414][ T5633]  el0t_64_sync+0x1a0/0x1a4
[   87.934159][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.974853][ T5637] udc-core: couldn't find an available UDC or it's busy
[   87.975990][ T5637] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   88.023653][ T5641] loop1: detected capacity change from 0 to 512
[   88.039173][ T4518] usbhid 1-1:0.0: can't add hid device: -71
[   88.040213][ T4518] usbhid: probe of 1-1:0.0 failed with error -71
[   88.042819][ T4518] usb 1-1: USB disconnect, device number 13
[   88.065444][ T5641] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   88.092633][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,nodiscard,quota,,errors=continue. Quota mode: writeback.
[   88.120689][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   88.123363][ T4045] ocfs2: Unmounting device (7,4) on (node local)
[   88.125701][ T5646] udc-core: couldn't find an available UDC or it's busy
[   88.126818][ T5646] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   88.241874][ T5648] loop4: detected capacity change from 0 to 512
[   88.250987][ T5648] EXT4-fs (loop4): Ignoring removed nobh option
[   88.252046][ T5648] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   88.253458][ T5648] EXT4-fs (loop4): Ignoring removed orlov option
[   88.265969][ T5648] EXT4-fs (loop4): orphan cleanup on readonly fs
[   88.267592][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.402: iget: bad i_size value: 38620345925642
[   88.270515][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.402: couldn't read orphan inode 15 (err -117)
[   88.272561][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   88.326224][   T26] audit: type=1400 audit(88.300:39): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5651 comm="syz.1.405"
[   88.368161][ T5648] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.402'.
[   88.448638][ T5660] udc-core: couldn't find an available UDC or it's busy
[   88.449961][ T5660] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   88.646531][ T5670] FAULT_INJECTION: forcing a failure.
[   88.646531][ T5670] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.669125][ T5670] CPU: 0 PID: 5670 Comm: syz.0.411 Not tainted 5.15.189-syzkaller #0
[   88.670471][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   88.672048][ T5670] Call trace:
[   88.672579][ T5670]  dump_backtrace+0x0/0x43c
[   88.673275][ T5670]  show_stack+0x2c/0x3c
[   88.673896][ T5670]  __dump_stack+0x30/0x40
[   88.674587][ T5670]  dump_stack_lvl+0xf8/0x160
[   88.675272][ T5670]  dump_stack+0x1c/0x5c
[   88.675893][ T5670]  should_fail+0x3c0/0x51c
[   88.676605][ T5670]  should_fail_usercopy+0x20/0x30
[   88.677349][ T5670]  simple_read_from_buffer+0xd0/0x264
[   88.678118][ T5670]  proc_fail_nth_read+0x19c/0x244
[   88.678848][ T5670]  vfs_read+0x278/0xa10
[   88.679479][ T5670]  ksys_read+0x120/0x210
[   88.680100][ T5670]  __arm64_sys_read+0x7c/0x90
[   88.680815][ T5670]  invoke_syscall+0x98/0x2b8
[   88.681539][ T5670]  el0_svc_common+0x138/0x258
[   88.682364][ T5670]  do_el0_svc+0x58/0x14c
[   88.682991][ T5670]  el0_svc+0x78/0x1e0
[   88.683647][ T5670]  el0t_64_sync_handler+0xcc/0xe4
[   88.684474][ T5670]  el0t_64_sync+0x1a0/0x1a4
[   88.987453][ T5675] overlayfs: missing 'lowerdir'
[   89.008637][ T5660] loop1: detected capacity change from 0 to 32768
[   89.054353][ T5660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.409 (5660)
[   89.066525][ T5660] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   89.073818][ T5660] BTRFS info (device loop1): setting nodatacow, compression disabled
[   89.078643][ T5660] BTRFS info (device loop1): turning on flush-on-commit
[   89.084911][ T5660] BTRFS info (device loop1): enabling auto defrag
[   89.088189][ T5660] BTRFS info (device loop1): trying to use backup root at mount time
[   89.093249][ T5660] BTRFS info (device loop1): turning on async discard
[   89.096777][ T5660] BTRFS info (device loop1): using free space tree
[   89.100546][ T5660] BTRFS info (device loop1): has skinny extents
[   89.198256][ T1646] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   89.200786][ T5660] BTRFS warning (device loop1): failed to read root (objectid=2): -5
[   89.202491][ T1609] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   89.204600][ T5660] BTRFS warning (device loop1): couldn't read tree root
[   89.206097][ T5660] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[   89.207685][ T5660] BTRFS warning (device loop1): couldn't read tree root
[   89.236238][ T5660] BTRFS info (device loop1): enabling ssd optimizations
[   89.237714][ T5660] BTRFS info (device loop1): clearing free space tree
[   89.238869][ T5660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.240513][ T5660] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.246763][ T5660] BTRFS info (device loop1): creating free space tree
[   89.248189][ T5660] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.251888][ T5660] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.282301][ T5675] loop2: detected capacity change from 0 to 32768
[   89.341207][ T5675] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   89.348045][ T5675] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   89.397034][ T5675] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   89.454594][ T4692] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   89.455737][ T4692] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   89.582204][   T26] audit: type=1400 audit(89.560:40): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5704 comm="syz.3.417"
[   89.631655][ T4692] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 175ms
[   89.633752][ T4692] gfs2: fsid=syz:syz.0: jid=0: Done
[   89.634838][ T5675] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   89.637650][ T5701] device syzkaller0 entered promiscuous mode
[   89.701803][ T5711] loop3: detected capacity change from 0 to 512
[   89.746781][ T5711] EXT4-fs (loop3): Ignoring removed nobh option
[   89.754454][ T5711] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   89.761112][ T5711] EXT4-fs (loop3): Ignoring removed orlov option
[   89.795985][ T5711] EXT4-fs (loop3): orphan cleanup on readonly fs
[   89.827133][ T5711] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.418: iget: bad i_size value: 38620345925642
[   89.852800][ T5711] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.418: couldn't read orphan inode 15 (err -117)
[   89.877379][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   89.923788][ T5711] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.418'.
[   90.080953][ T5724] udc-core: couldn't find an available UDC or it's busy
[   90.082117][ T5724] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   90.087292][ T5725] loop4: detected capacity change from 0 to 512
[   90.122554][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   90.127574][ T5730] udc-core: couldn't find an available UDC or it's busy
[   90.129970][ T5730] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   90.173357][ T5725] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   90.225033][ T5735] FAULT_INJECTION: forcing a failure.
[   90.225033][ T5735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.227160][ T5735] CPU: 0 PID: 5735 Comm: syz.4.426 Not tainted 5.15.189-syzkaller #0
[   90.228479][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   90.230055][ T5735] Call trace:
[   90.230563][ T5735]  dump_backtrace+0x0/0x43c
[   90.231318][ T5735]  show_stack+0x2c/0x3c
[   90.232037][ T5735]  __dump_stack+0x30/0x40
[   90.232735][ T5735]  dump_stack_lvl+0xf8/0x160
[   90.233467][ T5735]  dump_stack+0x1c/0x5c
[   90.234097][ T5735]  should_fail+0x3c0/0x51c
[   90.234849][ T5735]  should_fail_usercopy+0x20/0x30
[   90.235655][ T5735]  simple_read_from_buffer+0xd0/0x264
[   90.236537][ T5735]  proc_fail_nth_read+0x19c/0x244
[   90.237406][ T5735]  vfs_read+0x278/0xa10
[   90.238078][ T5735]  ksys_read+0x120/0x210
[   90.238808][ T5735]  __arm64_sys_read+0x7c/0x90
[   90.239632][ T5735]  invoke_syscall+0x98/0x2b8
[   90.240370][ T5735]  el0_svc_common+0x138/0x258
[   90.241161][ T5735]  do_el0_svc+0x58/0x14c
[   90.241837][ T5735]  el0_svc+0x78/0x1e0
[   90.242493][ T5735]  el0t_64_sync_handler+0xcc/0xe4
[   90.243296][ T5735]  el0t_64_sync+0x1a0/0x1a4
[   90.357105][   T26] audit: type=1400 audit(90.330:41): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5736 comm="syz.4.428"
[   90.433801][ T5745] udc-core: couldn't find an available UDC or it's busy
[   90.434955][ T5745] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   90.858329][ T5745] loop4: detected capacity change from 0 to 32768
[   90.913377][ T5745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.430 (5745)
[   90.921912][ T5745] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[   90.924957][ T5745] BTRFS info (device loop4): setting nodatacow, compression disabled
[   90.933301][ T5745] BTRFS info (device loop4): turning on flush-on-commit
[   90.935177][ T5745] BTRFS info (device loop4): enabling auto defrag
[   90.936993][ T5745] BTRFS info (device loop4): trying to use backup root at mount time
[   90.942180][ T5745] BTRFS info (device loop4): turning on async discard
[   90.945235][ T5745] BTRFS info (device loop4): using free space tree
[   90.947460][ T5745] BTRFS info (device loop4): has skinny extents
[   91.039874][ T5760] loop0: detected capacity change from 0 to 512
[   91.064146][ T5760] EXT4-fs (loop0): Ignoring removed nobh option
[   91.065234][ T5760] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   91.066603][ T5760] EXT4-fs (loop0): Ignoring removed orlov option
[   91.074294][ T5760] EXT4-fs (loop0): orphan cleanup on readonly fs
[   91.075789][ T5760] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.432: iget: bad i_size value: 38620345925642
[   91.078950][ T5760] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.432: couldn't read orphan inode 15 (err -117)
[   91.092420][ T5760] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   91.106571][ T5754] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.432'.
[   91.140871][ T1609] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   91.142906][ T5745] BTRFS warning (device loop4): failed to read root (objectid=2): -5
[   91.144582][  T357] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   91.146461][ T5745] BTRFS warning (device loop4): couldn't read tree root
[   91.147793][ T5745] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7
[   91.149530][ T5745] BTRFS warning (device loop4): couldn't read tree root
[   91.167987][ T5745] BTRFS info (device loop4): enabling ssd optimizations
[   91.172325][ T5745] BTRFS info (device loop4): clearing free space tree
[   91.173505][ T5745] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.176292][ T5745] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.187123][ T5745] BTRFS info (device loop4): creating free space tree
[   91.202710][ T5748] loop3: detected capacity change from 0 to 40427
[   91.229896][ T5745] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.231474][ T5745] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.233789][ T5748] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   91.235035][ T5748] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   91.244140][ T5781] loop2: detected capacity change from 0 to 512
[   91.248353][ T5748] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff
[   91.251141][ T5748] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[   91.253857][ T5748] F2FS-fs (loop3): invalid crc value
[   91.280189][ T5748] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.311845][ T5748] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   91.313165][ T5748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.317507][ T5786] FAULT_INJECTION: forcing a failure.
[   91.317507][ T5786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.345102][ T5786] CPU: 1 PID: 5786 Comm: syz.1.438 Not tainted 5.15.189-syzkaller #0
[   91.346355][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   91.347895][ T5786] Call trace:
[   91.348390][ T5786]  dump_backtrace+0x0/0x43c
[   91.349100][ T5786]  show_stack+0x2c/0x3c
[   91.349706][ T5786]  __dump_stack+0x30/0x40
[   91.350389][ T5786]  dump_stack_lvl+0xf8/0x160
[   91.351073][ T5786]  dump_stack+0x1c/0x5c
[   91.351679][ T5786]  should_fail+0x3c0/0x51c
[   91.352331][ T5786]  should_fail_usercopy+0x20/0x30
[   91.353072][ T5786]  simple_read_from_buffer+0xd0/0x264
[   91.353866][ T5786]  proc_fail_nth_read+0x19c/0x244
[   91.354666][ T5786]  vfs_read+0x278/0xa10
[   91.355315][ T5786]  ksys_read+0x120/0x210
[   91.355984][ T5786]  __arm64_sys_read+0x7c/0x90
[   91.356746][ T5786]  invoke_syscall+0x98/0x2b8
[   91.357552][ T5786]  el0_svc_common+0x138/0x258
[   91.358302][ T5786]  do_el0_svc+0x58/0x14c
[   91.358995][ T5786]  el0_svc+0x78/0x1e0
[   91.359681][ T5786]  el0t_64_sync_handler+0xcc/0xe4
[   91.360464][ T5786]  el0t_64_sync+0x1a0/0x1a4
[   91.373435][ T5781] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   91.454104][ T4059] attempt to access beyond end of device
[   91.454104][ T4059] loop3: rw=2049, want=45104, limit=40427
[   91.507737][   T26] audit: type=1400 audit(91.480:42): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5794 comm="syz.1.440"
[   91.569995][ T5803] udc-core: couldn't find an available UDC or it's busy
[   91.571127][ T5803] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   91.714017][ T5808] udc-core: couldn't find an available UDC or it's busy
[   91.715236][ T5808] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   91.981974][ T5810] loop4: detected capacity change from 0 to 512
[   92.062063][ T5810] EXT4-fs (loop4): Ignoring removed nobh option
[   92.063139][ T5810] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   92.064518][ T5810] EXT4-fs (loop4): Ignoring removed orlov option
[   92.067650][ T5810] EXT4-fs (loop4): orphan cleanup on readonly fs
[   92.068995][ T5810] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.445: iget: bad i_size value: 38620345925642
[   92.071784][ T5810] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.445: couldn't read orphan inode 15 (err -117)
[   92.073945][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   92.081904][ T5810] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.445'.
[   92.272703][ T5822] loop3: detected capacity change from 0 to 512
[   92.283864][ T5825] FAULT_INJECTION: forcing a failure.
[   92.283864][ T5825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.286139][ T5825] CPU: 1 PID: 5825 Comm: syz.2.452 Not tainted 5.15.189-syzkaller #0
[   92.287392][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   92.288921][ T5825] Call trace:
[   92.289384][ T5825]  dump_backtrace+0x0/0x43c
[   92.290031][ T5825]  show_stack+0x2c/0x3c
[   92.290623][ T5825]  __dump_stack+0x30/0x40
[   92.291297][ T5825]  dump_stack_lvl+0xf8/0x160
[   92.291985][ T5825]  dump_stack+0x1c/0x5c
[   92.292592][ T5825]  should_fail+0x3c0/0x51c
[   92.293287][ T5825]  should_fail_usercopy+0x20/0x30
[   92.294045][ T5825]  simple_read_from_buffer+0xd0/0x264
[   92.294952][ T5825]  proc_fail_nth_read+0x19c/0x244
[   92.295819][ T5825]  vfs_read+0x278/0xa10
[   92.296509][ T5825]  ksys_read+0x120/0x210
[   92.297239][ T5825]  __arm64_sys_read+0x7c/0x90
[   92.298019][ T5825]  invoke_syscall+0x98/0x2b8
[   92.298792][ T5825]  el0_svc_common+0x138/0x258
[   92.299551][ T5825]  do_el0_svc+0x58/0x14c
[   92.300252][ T5825]  el0_svc+0x78/0x1e0
[   92.300929][ T5825]  el0t_64_sync_handler+0xcc/0xe4
[   92.301748][ T5825]  el0t_64_sync+0x1a0/0x1a4
[   92.479070][   T26] audit: type=1400 audit(92.340:43): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5827 comm="syz.4.453"
[   92.523604][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   92.568854][ T5834] loop4: detected capacity change from 0 to 4096
[   92.599262][ T5840] udc-core: couldn't find an available UDC or it's busy
[   92.600399][ T5840] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   92.604906][ T5842] udc-core: couldn't find an available UDC or it's busy
[   92.606008][ T5842] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   92.635372][ T5839] loop0: detected capacity change from 0 to 512
[   92.673332][ T5839] EXT4-fs (loop0): Ignoring removed nobh option
[   92.674472][ T5839] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   92.675897][ T5839] EXT4-fs (loop0): Ignoring removed orlov option
[   92.695264][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   92.700696][ T5839] EXT4-fs (loop0): orphan cleanup on readonly fs
[   92.701814][ T5839] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.457: iget: bad i_size value: 38620345925642
[   92.719249][ T5839] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.457: couldn't read orphan inode 15 (err -117)
[   92.727134][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,block_validity,quota,resuid=0x0000000000000000,jqfmt=vfsv0,orlov,minixdf,,errors=continue. Quota mode: writeback.
[   93.060111][ T5834] lo speed is unknown, defaulting to 1000
[   93.062245][ T5834] lo speed is unknown, defaulting to 1000
[   93.063171][ T5839] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.457'.
[   93.082096][ T5834] lo speed is unknown, defaulting to 1000
[   93.109391][ T5849] udc-core: couldn't find an available UDC or it's busy
[   93.110550][ T5849] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   93.125508][ T5840] loop3: detected capacity change from 0 to 32768
[   93.155348][ T4692] lo speed is unknown, defaulting to 1000
[   93.156613][ T5834] infiniband syz0: set active
[   93.157647][ T5834] infiniband syz0: added lo
[   93.162216][ T5840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.456 (5840)
[   93.168679][ T5840] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   93.174679][ T5840] BTRFS info (device loop3): setting nodatacow, compression disabled
[   93.177238][ T5840] BTRFS info (device loop3): turning on flush-on-commit
[   93.178573][ T5840] BTRFS info (device loop3): enabling auto defrag
[   93.179498][ T5834] RDS/IB: syz0: added
[   93.180595][ T5834] smc: adding ib device syz0 with port count 1
[   93.182440][ T5840] BTRFS info (device loop3): trying to use backup root at mount time
[   93.183873][ T5834] smc:    ib device syz0 port 1 has pnetid 
[   93.185200][ T5840] BTRFS info (device loop3): turning on async discard
[   93.185694][ T4213] lo speed is unknown, defaulting to 1000
[   93.191127][ T5834] lo speed is unknown, defaulting to 1000
[   93.196362][ T5840] BTRFS info (device loop3): using free space tree
[   93.197546][ T5840] BTRFS info (device loop3): has skinny extents
[   93.221995][ T5834] lo speed is unknown, defaulting to 1000
[   93.252860][ T5834] lo speed is unknown, defaulting to 1000
[   93.280145][ T5834] lo speed is unknown, defaulting to 1000
[   93.297789][ T1609] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   93.300386][ T5840] BTRFS warning (device loop3): failed to read root (objectid=2): -5
[   93.302009][ T4624] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   93.304057][ T5840] BTRFS warning (device loop3): couldn't read tree root
[   93.305492][ T5840] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7
[   93.306670][ T5834] lo speed is unknown, defaulting to 1000
[   93.308150][ T5840] BTRFS warning (device loop3): couldn't read tree root
[   93.328145][ T5840] BTRFS info (device loop3): enabling ssd optimizations
[   93.332551][ T5840] BTRFS info (device loop3): clearing free space tree
[   93.333625][ T5840] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.335266][ T5840] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   93.342681][ T5840] BTRFS info (device loop3): creating free space tree
[   93.344096][ T5840] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   93.352006][ T5840] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   93.486447][ T4213] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[   93.513584][ T5882] FAULT_INJECTION: forcing a failure.
[   93.513584][ T5882] name failslab, interval 1, probability 0, space 0, times 0
[   93.515705][ T5882] CPU: 0 PID: 5882 Comm: syz.2.464 Not tainted 5.15.189-syzkaller #0
[   93.516952][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   93.518602][ T5882] Call trace:
[   93.519146][ T5882]  dump_backtrace+0x0/0x43c
[   93.519899][ T5882]  show_stack+0x2c/0x3c
[   93.520581][ T5882]  __dump_stack+0x30/0x40
[   93.521328][ T5882]  dump_stack_lvl+0xf8/0x160
[   93.522081][ T5882]  dump_stack+0x1c/0x5c
[   93.522705][ T5882]  should_fail+0x3c0/0x51c
[   93.523479][ T5882]  __should_failslab+0xbc/0x10c
[   93.524274][ T5882]  should_failslab+0x10/0x28
[   93.525009][ T5882]  slab_pre_alloc_hook+0x64/0xec
[   93.525836][ T5882]  __kmalloc+0xbc/0x44c
[   93.526506][ T5882]  tomoyo_realpath_from_path+0xcc/0x510
[   93.527442][ T5882]  tomoyo_path_number_perm+0x1b0/0x518
[   93.528327][ T5882]  tomoyo_file_ioctl+0x2c/0x3c
[   93.529142][ T5882]  security_file_ioctl+0x80/0xbc
[   93.529951][ T5882]  __arm64_sys_ioctl+0xa8/0x1c8
[   93.530715][ T5882]  invoke_syscall+0x98/0x2b8
[   93.531458][ T5882]  el0_svc_common+0x138/0x258
[   93.532213][ T5882]  do_el0_svc+0x58/0x14c
[   93.532883][ T5882]  el0_svc+0x78/0x1e0
[   93.533518][ T5882]  el0t_64_sync_handler+0xcc/0xe4
[   93.534238][ T5882]  el0t_64_sync+0x1a0/0x1a4
[   93.536538][ T5882] ERROR: Out of memory at tomoyo_realpath_from_path.
[   93.622623][   T26] audit: type=1400 audit(93.600:44): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5883 comm="syz.2.465"
[   93.910775][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.914787][ T4213] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   93.918378][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.923785][ T4213] usb 1-1: config 0 descriptor??
[   93.936388][ T5890] loop4: detected capacity change from 0 to 512
[   94.069503][ T5890] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[   94.082532][ T5897] loop1: detected capacity change from 0 to 2048
[   94.086225][ T5890] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   94.087520][ T5890] Modules linked in:
[   94.088137][ T5890] CPU: 1 PID: 5890 Comm: syz.4.468 Not tainted 5.15.189-syzkaller #0
[   94.089419][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   94.091073][ T5890] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   94.092427][ T5890] pc : ext4_ioctl+0x1d44/0x3614
[   94.093221][ T5890] lr : ext4_ioctl+0x1d1c/0x3614
[   94.093983][ T5890] sp : ffff8000221378c0
[   94.094591][ T5890] x29: ffff800022137cd0 x28: dfff800000000000 x27: ffff700004426f1c
[   94.095750][ T5890] x26: 1fffe0001a1808cf x25: ffff0000d0c02000 x24: ffff0000d0c04000
[   94.096893][ T5890] x23: ffff0000cec50000 x22: 0000000000000000 x21: 0000000000000000
[   94.098068][ T5890] x20: ffff0000d0c04678 x19: 00000000fffffff2 x18: 0000000000000000
[   94.099425][ T5890] x17: 0000000000000002 x16: ffff800008cc38d0 x15: 00000000c0c0583b
[   94.100703][ T5890] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000ff0100
[   94.102069][ T5890] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff
[   94.103463][ T5890] x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000
[   94.104836][ T5890] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   94.106209][ T5890] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   94.107559][ T5890] Call trace:
[   94.108124][ T5890]  ext4_ioctl+0x1d44/0x3614
[   94.108872][ T5890]  __arm64_sys_ioctl+0x14c/0x1c8
[   94.109661][ T5890]  invoke_syscall+0x98/0x2b8
[   94.110420][ T5890]  el0_svc_common+0x138/0x258
[   94.111164][ T5890]  do_el0_svc+0x58/0x14c
[   94.111822][ T5890]  el0_svc+0x78/0x1e0
[   94.112427][ T5890]  el0t_64_sync_handler+0xcc/0xe4
[   94.113157][ T5890]  el0t_64_sync+0x1a0/0x1a4
[   94.113879][ T5890] Code: ea29011f 9a9f02aa d503229f b8400956 (2a1303e1) 
[   94.113890][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'.
[   94.114888][ T5890] ---[ end trace a63623653c929335 ]---
[   94.121312][ T5899] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.126544][ T5897] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[   94.130260][ T5897] Remounting filesystem read-only
[   94.359380][ T5890] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   94.360523][ T5890] SMP: stopping secondary CPUs
[   94.361285][ T5890] Kernel Offset: disabled
[   94.362006][ T5890] CPU features: 0x8,000003c1,7d33ffd9
[   94.362856][ T5890] Memory Limit: none
[   94.606667][ T5890] Rebooting in 86400 seconds..