last executing test programs:

15.980101134s ago: executing program 4 (id=656):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

9.395805873s ago: executing program 3 (id=702):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000200000000000000002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10)

9.201070089s ago: executing program 3 (id=704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='g\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000003240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd0#\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xce\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\x82\xaa}O+\xf8\xdc\x7f\x9a$\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1\xf9\x91\x84\xcd\xc4\xbf4\xf0>\x10\xac\x83!\xc5J\t\xb0b}\x98\xfd\xcf\x9dc|\x9b\x97D\xfd^\xb7\xa75\xc7EK\x94\a=4\x8c\x01\xcf\xbe\x03\xd9@\x95\x82\xe9\x87#\xa1\xb9\xcf\x16KgR|HmZ\xfb\xfa\xf7\x9c\xe8\v\x8dP\xd0\x06[$Bq\xee\xb0y\x00'/1244, &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1t\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO<x6tw\x18\xc4\xf1%\xd8S\xdd\"6\xa3s\x99O\xb0\xf2/0\x1d\x04\xcc\xadVr\x9bP\xd0Z3\xa7\xdd@\xf9a\xe6\xa1\x9c#\xb9\xb8\xb0\xc6r\"\xdd\xc4\xe5\xf8\xb5\xacF\x9aP\xbd\xf0\x94\x99;\x18\xd4\x9d\xf2f\x93\v\xe0\x8c\x91\x87\xd3\xc57\xe2\x11r\xea(\xb7\xd1\xba\x00C\x00(?\xeb34\xea\x865lD\xd4\xc7\x91*\x8e\x0f\xf6Zl^\xe1\x9b\xab}\xe7;\xd3h\xda4\xb5r\xe9l\xd1F\xdepA\x02\x90X\xed\x10\x98\xa2\xfb=\xdb\xba7\xf0Y\xafUt\x12\xe7\x87wbd\x86R\x02\xa7\xa3F\a\x83\x19;\xeb\xba\bm\x84\xba\x90\xd8\x9f\xc2\xb3V\xd0\xd8M\x1eM\x8d\x1a.\xea\xea:A$:/\x96\xf1\xb8\xdd\xa3\b?\x8b%\xce\x8a]\xb4!n \xcd\xdc\xc0\xca$\x8dA\xce\xd4\xab\x1at\x1b\x87\xc1W\xff\x91\x1a6]1\xfb \xc9\xa7\xff\x92I\x91\xed\xed-\x89J7\\\x82\xbe\x8e~$\xafbl/\xf4\xad\xc6\x04\x0fZH\x97C^Y\x12\xcd\xab\x9eS\xdb\xfe\x83\xc3\xbb5,hS\x82\xefR.]\xa9\b\xd4o\x92\xf7\x99\xd2\x0e\xef \x83\xb4\xe7\xb6j\xa4\xe3m\xa4\xd7\xaa\x97\xe3\xc9\xcfP\x9e\xb0vU{\x8b3R\x1a\x06\xc3\ts\x8e\x1f\x8b\xc7\xe3\xbe\xc3j\xb6\x83\x0e\xe9*\xc2r7\x92\x8b\xf2\x02\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa2\xf7\xafPK8\x0e1\xcez\x00\x00', &(0x7f0000002a00)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xe4*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<\x9b\xf8-d\xe2\x13\x8a\x19\xbf;\xe2\x14\x80u\xc9\\:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"e^5\xd1 H\x17[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df\xf2$\xa4m\xbd_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG\x053\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\x04\b\x00\x00\x00\x00\x00\x00\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9cm0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\x00\x00\x00\x00\x00\x00\x00\x05\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14\x06\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9es4Q\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1O\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeax\r\t\xcb\xb7\xc8\xc7\x11\xb4\x9fe\xd8\xe8\xc5\'\x90\x10\x116A`C\xb4!#\x18\x89m\xef\xff\xa1\xe9\xbfN\xac\xea\x89\t\xba4\x80>Cx\xbe\"7\x80\x90l\xd3\xe8\xff\xef\xe9h\xde\xbb\xb3\x9eE\xe1\xc1\x0f\x05\xc4\x15s\xa5~\xb4\xf3\xe9o\x06\xe2K\x0e`\xec{e8%\x93\v\x8f\xc7\x9e\xc5g\xe7c>\x93\x83\x8fM\f\x9e\a\x17^F\xa6\xc8\x93\xec\x93B\x95w\x1b\xb8M\x9d;$,8]\x9b\xb2+\x90I\xa5\x1a\x8bQ/xt\xa7dK\xfanm\x19H\tJ\x11\xe7\xa3O\xeb\xd8\xeds\x00\xca\x99@\x90\xa0\xe3f~*G\x0e\x83U{\xe9\xce\xa4E\xd5\xca\xb0o(gG<\x1b\xd8,?\xa9cj<\x9eG\x17\xfd\xa2RUn,ui\xfc\xa04\x00\x0e\xe2\xc9!#\x1b\xc8', &(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f0000003740)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7<j\xea\xc9\x1cQ\x9e\xb4\xd7\xa9=c\xbec\xf8z\xdfV\xb3fE1\x8e\xb3\x9b_\xda\xb3M:\xe6wr\xd4P\xb9QU\xddV4#6JE\x06\xeccV\xce@3\xec\xb6\x16\xe3\x88\x10\xb4\x10$\xc6EH\x9e\xe1\xf6\r\x11h\x1a\xdcs1\x90\x89<E@\xc0#\x82\xbba\a\xe0\xe1O\x84\xb8\x87\xb8V\x7f\xc9mX\x8ct\x92\xe6\xb7\x02Y(\xca\x8b22\\7\x84h\x15\xad\xdc\x93,\xc3\xf8\xcc\x82 ?~\x7f\x82\x91+\xcd\x15\x1d\xe0;\xbd\xdc\xf8 \xb2\xe1O1\xf2\xe4\xbaN\xff\xcf\xdbI\x1f\xb2\x01T6\xba\x9f\xb3\xfd(\x1c\xdd\xef5\x84\x01\xa8v9\x9a\xee\x85\xbe0\x95p5\x1a\xc8\xc7\xb2\x85\x96\xd0`5_\xfe_&|\xc6\xff\x1a\xe3c\xe2\x03\x9b\xdav\x1c\xf7!\x1d.[Jh\xea\x05\xac\xd5\x95Q\x13&\xcb\n\x13\xbb\x1b\xfe\xc8\xbd\xdePF\xd0Se\xa1V\x1d\xc2\xe2\x9c\xf7y\xb2<\x81\x9b\xf9\x86\x00\xd3\xe0\x7f\x1aX\xba\xa9\x1b\f\xa1z]H\xea1\xf2\xcf\x1e\x88\xa2\x9e|\x14q\xcb\x10\x7f\xf7Wx\r|\xc2$\x00m!\xb2<\xb3^\xca\x17<\xa29l\xc4\tuk\x15{Xd\x95\xfa\xc5\xb4l\x88\x05\xb7\x84?.\x0f\x80\xaf\x83>;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8<u\xda\xe8', &(0x7f0000002640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18ocmU5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\xa5\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x19\x9c\x19\xb4\xac%~\x12\x7ft\xa9\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\\\a\xeba\x18\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x03\x00\xbd`Qa\xdc\xcb\xce\x91\xcdb\xd7\x9es\v&g\x06\xc3\x01\x004.\x8d\xf7F\xb0\xc4_g\x82\x96M`l\x84\xd9\xab\xd6\xacYBG\xfb\x821e\xb4\xe6@\xe3\x82\xc6\x85\x96FQn\x0e\xa9\xc6\x9e\xc4\xdbA\xafSt\x9d\x15\xd0\xbd\xd8k\xd3G\x80\x1dE\x168+\v\xfb_\xc3\xd3\xc9\x87\f8\x03\x8c\xed_\xeb\x9c\xbd]=Blu\x04-g)\x01\x9a\xde\xf1\xdf\xe3\xd7)\b\xee@,\xcc#\xc2\xf4p\x1a\xa9\xe9 :J.\xdf\xdb>y\x95+,m\xc7\xad\xf9a1\xa1\x91Ed\x86D\xe4Tc\xd6d\xf0\xc4\x04L\r\xa1\x88e\"F\x92\xdb\x06\x04\xca\xfdLK\xdb\x1c\x8a\xc9r2\xee\xd1x\x94\xe2\x8by\x8a\v\xb8TfGF\x06\xbf\xe8\xe5\xb0\a\xd3d\xfc\x16\x14L*\xef\xcb{\f\x875\xf4\xfbMj', &(0x7f0000000240)='-#\xe5/!\xff\a\x1a\xae\xcd\\\xc9\x16\xe6V\xb5\xd3\x00\x00\x00\x00\x00\x00\x00\xe7L+\xc4\x8a3/\x827', &(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1'])

8.994189747s ago: executing program 3 (id=707):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f601220000090581"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0})
syz_usb_control_io(r2, 0x0, 0x0)

7.440086338s ago: executing program 1 (id=717):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='g\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000003240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd0#\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xce\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\x82\xaa}O+\xf8\xdc\x7f\x9a$\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1\xf9\x91\x84\xcd\xc4\xbf4\xf0>\x10\xac\x83!\xc5J\t\xb0b}\x98\xfd\xcf\x9dc|\x9b\x97D\xfd^\xb7\xa75\xc7EK\x94\a=4\x8c\x01\xcf\xbe\x03\xd9@\x95\x82\xe9\x87#\xa1\xb9\xcf\x16KgR|HmZ\xfb\xfa\xf7\x9c\xe8\v\x8dP\xd0\x06[$Bq\xee\xb0y\x00'/1244, &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1t\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO<x6tw\x18\xc4\xf1%\xd8S\xdd\"6\xa3s\x99O\xb0\xf2/0\x1d\x04\xcc\xadVr\x9bP\xd0Z3\xa7\xdd@\xf9a\xe6\xa1\x9c#\xb9\xb8\xb0\xc6r\"\xdd\xc4\xe5\xf8\xb5\xacF\x9aP\xbd\xf0\x94\x99;\x18\xd4\x9d\xf2f\x93\v\xe0\x8c\x91\x87\xd3\xc57\xe2\x11r\xea(\xb7\xd1\xba\x00C\x00(?\xeb34\xea\x865lD\xd4\xc7\x91*\x8e\x0f\xf6Zl^\xe1\x9b\xab}\xe7;\xd3h\xda4\xb5r\xe9l\xd1F\xdepA\x02\x90X\xed\x10\x98\xa2\xfb=\xdb\xba7\xf0Y\xafUt\x12\xe7\x87wbd\x86R\x02\xa7\xa3F\a\x83\x19;\xeb\xba\bm\x84\xba\x90\xd8\x9f\xc2\xb3V\xd0\xd8M\x1eM\x8d\x1a.\xea\xea:A$:/\x96\xf1\xb8\xdd\xa3\b?\x8b%\xce\x8a]\xb4!n \xcd\xdc\xc0\xca$\x8dA\xce\xd4\xab\x1at\x1b\x87\xc1W\xff\x91\x1a6]1\xfb \xc9\xa7\xff\x92I\x91\xed\xed-\x89J7\\\x82\xbe\x8e~$\xafbl/\xf4\xad\xc6\x04\x0fZH\x97C^Y\x12\xcd\xab\x9eS\xdb\xfe\x83\xc3\xbb5,hS\x82\xefR.]\xa9\b\xd4o\x92\xf7\x99\xd2\x0e\xef \x83\xb4\xe7\xb6j\xa4\xe3m\xa4\xd7\xaa\x97\xe3\xc9\xcfP\x9e\xb0vU{\x8b3R\x1a\x06\xc3\ts\x8e\x1f\x8b\xc7\xe3\xbe\xc3j\xb6\x83\x0e\xe9*\xc2r7\x92\x8b\xf2\x02\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa2\xf7\xafPK8\x0e1\xcez\x00\x00', &(0x7f0000002a00)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xe4*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<\x9b\xf8-d\xe2\x13\x8a\x19\xbf;\xe2\x14\x80u\xc9\\:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"e^5\xd1 H\x17[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df\xf2$\xa4m\xbd_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG\x053\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\x04\b\x00\x00\x00\x00\x00\x00\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9cm0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\x00\x00\x00\x00\x00\x00\x00\x05\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14\x06\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9es4Q\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1O\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeax\r\t\xcb\xb7\xc8\xc7\x11\xb4\x9fe\xd8\xe8\xc5\'\x90\x10\x116A`C\xb4!#\x18\x89m\xef\xff\xa1\xe9\xbfN\xac\xea\x89\t\xba4\x80>Cx\xbe\"7\x80\x90l\xd3\xe8\xff\xef\xe9h\xde\xbb\xb3\x9eE\xe1\xc1\x0f\x05\xc4\x15s\xa5~\xb4\xf3\xe9o\x06\xe2K\x0e`\xec{e8%\x93\v\x8f\xc7\x9e\xc5g\xe7c>\x93\x83\x8fM\f\x9e\a\x17^F\xa6\xc8\x93\xec\x93B\x95w\x1b\xb8M\x9d;$,8]\x9b\xb2+\x90I\xa5\x1a\x8bQ/xt\xa7dK\xfanm\x19H\tJ\x11\xe7\xa3O\xeb\xd8\xeds\x00\xca\x99@\x90\xa0\xe3f~*G\x0e\x83U{\xe9\xce\xa4E\xd5\xca\xb0o(gG<\x1b\xd8,?\xa9cj<\x9eG\x17\xfd\xa2RUn,ui\xfc\xa04\x00\x0e\xe2\xc9!#\x1b\xc8', &(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f0000003740)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7<j\xea\xc9\x1cQ\x9e\xb4\xd7\xa9=c\xbec\xf8z\xdfV\xb3fE1\x8e\xb3\x9b_\xda\xb3M:\xe6wr\xd4P\xb9QU\xddV4#6JE\x06\xeccV\xce@3\xec\xb6\x16\xe3\x88\x10\xb4\x10$\xc6EH\x9e\xe1\xf6\r\x11h\x1a\xdcs1\x90\x89<E@\xc0#\x82\xbba\a\xe0\xe1O\x84\xb8\x87\xb8V\x7f\xc9mX\x8ct\x92\xe6\xb7\x02Y(\xca\x8b22\\7\x84h\x15\xad\xdc\x93,\xc3\xf8\xcc\x82 ?~\x7f\x82\x91+\xcd\x15\x1d\xe0;\xbd\xdc\xf8 \xb2\xe1O1\xf2\xe4\xbaN\xff\xcf\xdbI\x1f\xb2\x01T6\xba\x9f\xb3\xfd(\x1c\xdd\xef5\x84\x01\xa8v9\x9a\xee\x85\xbe0\x95p5\x1a\xc8\xc7\xb2\x85\x96\xd0`5_\xfe_&|\xc6\xff\x1a\xe3c\xe2\x03\x9b\xdav\x1c\xf7!\x1d.[Jh\xea\x05\xac\xd5\x95Q\x13&\xcb\n\x13\xbb\x1b\xfe\xc8\xbd\xdePF\xd0Se\xa1V\x1d\xc2\xe2\x9c\xf7y\xb2<\x81\x9b\xf9\x86\x00\xd3\xe0\x7f\x1aX\xba\xa9\x1b\f\xa1z]H\xea1\xf2\xcf\x1e\x88\xa2\x9e|\x14q\xcb\x10\x7f\xf7Wx\r|\xc2$\x00m!\xb2<\xb3^\xca\x17<\xa29l\xc4\tuk\x15{Xd\x95\xfa\xc5\xb4l\x88\x05\xb7\x84?.\x0f\x80\xaf\x83>;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8<u\xda\xe8', &(0x7f0000002640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18ocmU5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\xa5\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x19\x9c\x19\xb4\xac%~\x12\x7ft\xa9\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\\\a\xeba\x18\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x03\x00\xbd`Qa\xdc\xcb\xce\x91\xcdb\xd7\x9es\v&g\x06\xc3\x01\x004.\x8d\xf7F\xb0\xc4_g\x82\x96M`l\x84\xd9\xab\xd6\xacYBG\xfb\x821e\xb4\xe6@\xe3\x82\xc6\x85\x96FQn\x0e\xa9\xc6\x9e\xc4\xdbA\xafSt\x9d\x15\xd0\xbd\xd8k\xd3G\x80\x1dE\x168+\v\xfb_\xc3\xd3\xc9\x87\f8\x03\x8c\xed_\xeb\x9c\xbd]=Blu\x04-g)\x01\x9a\xde\xf1\xdf\xe3\xd7)\b\xee@,\xcc#\xc2\xf4p\x1a\xa9\xe9 :J.\xdf\xdb>y\x95+,m\xc7\xad\xf9a1\xa1\x91Ed\x86D\xe4Tc\xd6d\xf0\xc4\x04L\r\xa1\x88e\"F\x92\xdb\x06\x04\xca\xfdLK\xdb\x1c\x8a\xc9r2\xee\xd1x\x94\xe2\x8by\x8a\v\xb8TfGF\x06\xbf\xe8\xe5\xb0\a\xd3d\xfc\x16\x14L*\xef\xcb{\f\x875\xf4\xfbMj', &(0x7f0000000240)='-#\xe5/!\xff\a\x1a\xae\xcd\\\xc9\x16\xe6V\xb5\xd3\x00\x00\x00\x00\x00\x00\x00\xe7L+\xc4\x8a3/\x827', &(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1'])

7.31327038s ago: executing program 1 (id=718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000200)={0xed, 0x0, 0x1})

6.944976791s ago: executing program 1 (id=721):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90)

6.737912768s ago: executing program 1 (id=722):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x10e0070, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32], 0x0, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140))
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

6.736808528s ago: executing program 3 (id=723):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x10e0070, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRES32], 0x0, 0x6a4, &(0x7f0000000100)="$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")
ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140))
pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r3, r2, 0x0, 0x80000000)

5.761440971s ago: executing program 1 (id=728):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0})

5.609196704s ago: executing program 3 (id=729):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='mnt\x00', 0x3a0c412, &(0x7f00000004c0)={[{@unhide}, {}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@cruft}, {}, {@overriderock}, {@hide}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'ascii'}}], [], 0x2c}, 0xff, 0x9be, &(0x7f0000000e00)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x80000000)

5.031259793s ago: executing program 3 (id=733):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f601220000090581"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0})
syz_usb_control_io(r2, 0x0, 0x0)

4.512153017s ago: executing program 1 (id=735):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000500)="9d550e", 0x3}], 0x1, 0xfffffffc, 0x0)

3.968072273s ago: executing program 2 (id=739):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.099146957s ago: executing program 2 (id=740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='g\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000003240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd0#\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xce\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\x82\xaa}O+\xf8\xdc\x7f\x9a$\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1\xf9\x91\x84\xcd\xc4\xbf4\xf0>\x10\xac\x83!\xc5J\t\xb0b}\x98\xfd\xcf\x9dc|\x9b\x97D\xfd^\xb7\xa75\xc7EK\x94\a=4\x8c\x01\xcf\xbe\x03\xd9@\x95\x82\xe9\x87#\xa1\xb9\xcf\x16KgR|HmZ\xfb\xfa\xf7\x9c\xe8\v\x8dP\xd0\x06[$Bq\xee\xb0y\x00'/1244, &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1t\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO<x6tw\x18\xc4\xf1%\xd8S\xdd\"6\xa3s\x99O\xb0\xf2/0\x1d\x04\xcc\xadVr\x9bP\xd0Z3\xa7\xdd@\xf9a\xe6\xa1\x9c#\xb9\xb8\xb0\xc6r\"\xdd\xc4\xe5\xf8\xb5\xacF\x9aP\xbd\xf0\x94\x99;\x18\xd4\x9d\xf2f\x93\v\xe0\x8c\x91\x87\xd3\xc57\xe2\x11r\xea(\xb7\xd1\xba\x00C\x00(?\xeb34\xea\x865lD\xd4\xc7\x91*\x8e\x0f\xf6Zl^\xe1\x9b\xab}\xe7;\xd3h\xda4\xb5r\xe9l\xd1F\xdepA\x02\x90X\xed\x10\x98\xa2\xfb=\xdb\xba7\xf0Y\xafUt\x12\xe7\x87wbd\x86R\x02\xa7\xa3F\a\x83\x19;\xeb\xba\bm\x84\xba\x90\xd8\x9f\xc2\xb3V\xd0\xd8M\x1eM\x8d\x1a.\xea\xea:A$:/\x96\xf1\xb8\xdd\xa3\b?\x8b%\xce\x8a]\xb4!n \xcd\xdc\xc0\xca$\x8dA\xce\xd4\xab\x1at\x1b\x87\xc1W\xff\x91\x1a6]1\xfb \xc9\xa7\xff\x92I\x91\xed\xed-\x89J7\\\x82\xbe\x8e~$\xafbl/\xf4\xad\xc6\x04\x0fZH\x97C^Y\x12\xcd\xab\x9eS\xdb\xfe\x83\xc3\xbb5,hS\x82\xefR.]\xa9\b\xd4o\x92\xf7\x99\xd2\x0e\xef \x83\xb4\xe7\xb6j\xa4\xe3m\xa4\xd7\xaa\x97\xe3\xc9\xcfP\x9e\xb0vU{\x8b3R\x1a\x06\xc3\ts\x8e\x1f\x8b\xc7\xe3\xbe\xc3j\xb6\x83\x0e\xe9*\xc2r7\x92\x8b\xf2\x02\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa2\xf7\xafPK8\x0e1\xcez\x00\x00', &(0x7f0000002a00)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xe4*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<\x9b\xf8-d\xe2\x13\x8a\x19\xbf;\xe2\x14\x80u\xc9\\:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"e^5\xd1 H\x17[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df\xf2$\xa4m\xbd_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG\x053\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\x04\b\x00\x00\x00\x00\x00\x00\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9cm0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\x00\x00\x00\x00\x00\x00\x00\x05\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14\x06\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9es4Q\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1O\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeax\r\t\xcb\xb7\xc8\xc7\x11\xb4\x9fe\xd8\xe8\xc5\'\x90\x10\x116A`C\xb4!#\x18\x89m\xef\xff\xa1\xe9\xbfN\xac\xea\x89\t\xba4\x80>Cx\xbe\"7\x80\x90l\xd3\xe8\xff\xef\xe9h\xde\xbb\xb3\x9eE\xe1\xc1\x0f\x05\xc4\x15s\xa5~\xb4\xf3\xe9o\x06\xe2K\x0e`\xec{e8%\x93\v\x8f\xc7\x9e\xc5g\xe7c>\x93\x83\x8fM\f\x9e\a\x17^F\xa6\xc8\x93\xec\x93B\x95w\x1b\xb8M\x9d;$,8]\x9b\xb2+\x90I\xa5\x1a\x8bQ/xt\xa7dK\xfanm\x19H\tJ\x11\xe7\xa3O\xeb\xd8\xeds\x00\xca\x99@\x90\xa0\xe3f~*G\x0e\x83U{\xe9\xce\xa4E\xd5\xca\xb0o(gG<\x1b\xd8,?\xa9cj<\x9eG\x17\xfd\xa2RUn,ui\xfc\xa04\x00\x0e\xe2\xc9!#\x1b\xc8', &(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f0000003740)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7<j\xea\xc9\x1cQ\x9e\xb4\xd7\xa9=c\xbec\xf8z\xdfV\xb3fE1\x8e\xb3\x9b_\xda\xb3M:\xe6wr\xd4P\xb9QU\xddV4#6JE\x06\xeccV\xce@3\xec\xb6\x16\xe3\x88\x10\xb4\x10$\xc6EH\x9e\xe1\xf6\r\x11h\x1a\xdcs1\x90\x89<E@\xc0#\x82\xbba\a\xe0\xe1O\x84\xb8\x87\xb8V\x7f\xc9mX\x8ct\x92\xe6\xb7\x02Y(\xca\x8b22\\7\x84h\x15\xad\xdc\x93,\xc3\xf8\xcc\x82 ?~\x7f\x82\x91+\xcd\x15\x1d\xe0;\xbd\xdc\xf8 \xb2\xe1O1\xf2\xe4\xbaN\xff\xcf\xdbI\x1f\xb2\x01T6\xba\x9f\xb3\xfd(\x1c\xdd\xef5\x84\x01\xa8v9\x9a\xee\x85\xbe0\x95p5\x1a\xc8\xc7\xb2\x85\x96\xd0`5_\xfe_&|\xc6\xff\x1a\xe3c\xe2\x03\x9b\xdav\x1c\xf7!\x1d.[Jh\xea\x05\xac\xd5\x95Q\x13&\xcb\n\x13\xbb\x1b\xfe\xc8\xbd\xdePF\xd0Se\xa1V\x1d\xc2\xe2\x9c\xf7y\xb2<\x81\x9b\xf9\x86\x00\xd3\xe0\x7f\x1aX\xba\xa9\x1b\f\xa1z]H\xea1\xf2\xcf\x1e\x88\xa2\x9e|\x14q\xcb\x10\x7f\xf7Wx\r|\xc2$\x00m!\xb2<\xb3^\xca\x17<\xa29l\xc4\tuk\x15{Xd\x95\xfa\xc5\xb4l\x88\x05\xb7\x84?.\x0f\x80\xaf\x83>;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8<u\xda\xe8', &(0x7f0000002640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18ocmU5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\xa5\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x19\x9c\x19\xb4\xac%~\x12\x7ft\xa9\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\\\a\xeba\x18\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x03\x00\xbd`Qa\xdc\xcb\xce\x91\xcdb\xd7\x9es\v&g\x06\xc3\x01\x004.\x8d\xf7F\xb0\xc4_g\x82\x96M`l\x84\xd9\xab\xd6\xacYBG\xfb\x821e\xb4\xe6@\xe3\x82\xc6\x85\x96FQn\x0e\xa9\xc6\x9e\xc4\xdbA\xafSt\x9d\x15\xd0\xbd\xd8k\xd3G\x80\x1dE\x168+\v\xfb_\xc3\xd3\xc9\x87\f8\x03\x8c\xed_\xeb\x9c\xbd]=Blu\x04-g)\x01\x9a\xde\xf1\xdf\xe3\xd7)\b\xee@,\xcc#\xc2\xf4p\x1a\xa9\xe9 :J.\xdf\xdb>y\x95+,m\xc7\xad\xf9a1\xa1\x91Ed\x86D\xe4Tc\xd6d\xf0\xc4\x04L\r\xa1\x88e\"F\x92\xdb\x06\x04\xca\xfdLK\xdb\x1c\x8a\xc9r2\xee\xd1x\x94\xe2\x8by\x8a\v\xb8TfGF\x06\xbf\xe8\xe5\xb0\a\xd3d\xfc\x16\x14L*\xef\xcb{\f\x875\xf4\xfbMj', &(0x7f0000000240)='-#\xe5/!\xff\a\x1a\xae\xcd\\\xc9\x16\xe6V\xb5\xd3\x00\x00\x00\x00\x00\x00\x00\xe7L+\xc4\x8a3/\x827', &(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1'])

2.967779118s ago: executing program 2 (id=742):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x4, 0x3, 0x799b, 0x180, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x40000001, 0x4, 0x5}, 0x48)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1})
r1 = creat(0x0, 0x1de)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x600002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$RTC_RD_TIME(r3, 0x80247009, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362fc0b6422c1688827c11c9242714287d9e56c433f490ff31c3c14ed7c5cf3603a16a24ca71ed137e565cf7be349106c07c"], 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102381, 0x18fed}], 0x1, 0xbd9, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.555964393s ago: executing program 0 (id=745):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0)

1.904184928s ago: executing program 0 (id=746):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001140))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

1.666920108s ago: executing program 4 (id=658):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
r2 = dup(r1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200))
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0))
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000280))

1.212087697s ago: executing program 4 (id=747):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)

1.128624354s ago: executing program 0 (id=748):
syz_io_uring_complete(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x400000000000094, 0x42, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

975.954257ms ago: executing program 4 (id=749):
rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x4})

672.070983ms ago: executing program 4 (id=750):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='g\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f0000003240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd0#\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xce\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\x82\xaa}O+\xf8\xdc\x7f\x9a$\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1\xf9\x91\x84\xcd\xc4\xbf4\xf0>\x10\xac\x83!\xc5J\t\xb0b}\x98\xfd\xcf\x9dc|\x9b\x97D\xfd^\xb7\xa75\xc7EK\x94\a=4\x8c\x01\xcf\xbe\x03\xd9@\x95\x82\xe9\x87#\xa1\xb9\xcf\x16KgR|HmZ\xfb\xfa\xf7\x9c\xe8\v\x8dP\xd0\x06[$Bq\xee\xb0y\x00'/1244, &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1t\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO<x6tw\x18\xc4\xf1%\xd8S\xdd\"6\xa3s\x99O\xb0\xf2/0\x1d\x04\xcc\xadVr\x9bP\xd0Z3\xa7\xdd@\xf9a\xe6\xa1\x9c#\xb9\xb8\xb0\xc6r\"\xdd\xc4\xe5\xf8\xb5\xacF\x9aP\xbd\xf0\x94\x99;\x18\xd4\x9d\xf2f\x93\v\xe0\x8c\x91\x87\xd3\xc57\xe2\x11r\xea(\xb7\xd1\xba\x00C\x00(?\xeb34\xea\x865lD\xd4\xc7\x91*\x8e\x0f\xf6Zl^\xe1\x9b\xab}\xe7;\xd3h\xda4\xb5r\xe9l\xd1F\xdepA\x02\x90X\xed\x10\x98\xa2\xfb=\xdb\xba7\xf0Y\xafUt\x12\xe7\x87wbd\x86R\x02\xa7\xa3F\a\x83\x19;\xeb\xba\bm\x84\xba\x90\xd8\x9f\xc2\xb3V\xd0\xd8M\x1eM\x8d\x1a.\xea\xea:A$:/\x96\xf1\xb8\xdd\xa3\b?\x8b%\xce\x8a]\xb4!n \xcd\xdc\xc0\xca$\x8dA\xce\xd4\xab\x1at\x1b\x87\xc1W\xff\x91\x1a6]1\xfb \xc9\xa7\xff\x92I\x91\xed\xed-\x89J7\\\x82\xbe\x8e~$\xafbl/\xf4\xad\xc6\x04\x0fZH\x97C^Y\x12\xcd\xab\x9eS\xdb\xfe\x83\xc3\xbb5,hS\x82\xefR.]\xa9\b\xd4o\x92\xf7\x99\xd2\x0e\xef \x83\xb4\xe7\xb6j\xa4\xe3m\xa4\xd7\xaa\x97\xe3\xc9\xcfP\x9e\xb0vU{\x8b3R\x1a\x06\xc3\ts\x8e\x1f\x8b\xc7\xe3\xbe\xc3j\xb6\x83\x0e\xe9*\xc2r7\x92\x8b\xf2\x02\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa2\xf7\xafPK8\x0e1\xcez\x00\x00', &(0x7f0000002a00)='gcB\xc6\xcd\xd6\x18H+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xe4*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<\x9b\xf8-d\xe2\x13\x8a\x19\xbf;\xe2\x14\x80u\xc9\\:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"e^5\xd1 H\x17[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df\xf2$\xa4m\xbd_\xcax\xbd\xf4m\x1e\x18ocmU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG\x053\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\b\xb4\xac%~\x12\x7ft\xa9\v\x99\x7f\xce)dC\xef\xca\xc1\x92\xa7C\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\x04\b\x00\x00\x00\x00\x00\x00\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9cm0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\x00\x00\x00\x00\x00\x00\x00\x05\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x88\xa4\xbd`Qa\xdc\xcb\xce\xcc\\e\x00\x9f\xd4\xac\xea\xe4\xa3\xfa\x14\x06\xa9\xc0\xbb\x12$\xcf+z\xb0\xc8\x95\xed\xa0&\xafg\xdf\x94\xaaK)\x86~\\\xfd\xb6,\xe1\xe6\xab\x9es4Q\x8b\xa0\x8e\x00i\xc3\xb4b)e\x13\xbf\xc1O\x00\xc0\xab\x95\xfa\x12e,\x19 _\xca[\xd1\x9e\xc3N\\1;\xe3t\xaa\xa1\x83\xd1\n\x17\xd2\xd8\x02+\xf1aY\xfb\x00^\x95\xab\x97\x8f#\xeax\r\t\xcb\xb7\xc8\xc7\x11\xb4\x9fe\xd8\xe8\xc5\'\x90\x10\x116A`C\xb4!#\x18\x89m\xef\xff\xa1\xe9\xbfN\xac\xea\x89\t\xba4\x80>Cx\xbe\"7\x80\x90l\xd3\xe8\xff\xef\xe9h\xde\xbb\xb3\x9eE\xe1\xc1\x0f\x05\xc4\x15s\xa5~\xb4\xf3\xe9o\x06\xe2K\x0e`\xec{e8%\x93\v\x8f\xc7\x9e\xc5g\xe7c>\x93\x83\x8fM\f\x9e\a\x17^F\xa6\xc8\x93\xec\x93B\x95w\x1b\xb8M\x9d;$,8]\x9b\xb2+\x90I\xa5\x1a\x8bQ/xt\xa7dK\xfanm\x19H\tJ\x11\xe7\xa3O\xeb\xd8\xeds\x00\xca\x99@\x90\xa0\xe3f~*G\x0e\x83U{\xe9\xce\xa4E\xd5\xca\xb0o(gG<\x1b\xd8,?\xa9cj<\x9eG\x17\xfd\xa2RUn,ui\xfc\xa04\x00\x0e\xe2\xc9!#\x1b\xc8', &(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f0000003740)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7<j\xea\xc9\x1cQ\x9e\xb4\xd7\xa9=c\xbec\xf8z\xdfV\xb3fE1\x8e\xb3\x9b_\xda\xb3M:\xe6wr\xd4P\xb9QU\xddV4#6JE\x06\xeccV\xce@3\xec\xb6\x16\xe3\x88\x10\xb4\x10$\xc6EH\x9e\xe1\xf6\r\x11h\x1a\xdcs1\x90\x89<E@\xc0#\x82\xbba\a\xe0\xe1O\x84\xb8\x87\xb8V\x7f\xc9mX\x8ct\x92\xe6\xb7\x02Y(\xca\x8b22\\7\x84h\x15\xad\xdc\x93,\xc3\xf8\xcc\x82 ?~\x7f\x82\x91+\xcd\x15\x1d\xe0;\xbd\xdc\xf8 \xb2\xe1O1\xf2\xe4\xbaN\xff\xcf\xdbI\x1f\xb2\x01T6\xba\x9f\xb3\xfd(\x1c\xdd\xef5\x84\x01\xa8v9\x9a\xee\x85\xbe0\x95p5\x1a\xc8\xc7\xb2\x85\x96\xd0`5_\xfe_&|\xc6\xff\x1a\xe3c\xe2\x03\x9b\xdav\x1c\xf7!\x1d.[Jh\xea\x05\xac\xd5\x95Q\x13&\xcb\n\x13\xbb\x1b\xfe\xc8\xbd\xdePF\xd0Se\xa1V\x1d\xc2\xe2\x9c\xf7y\xb2<\x81\x9b\xf9\x86\x00\xd3\xe0\x7f\x1aX\xba\xa9\x1b\f\xa1z]H\xea1\xf2\xcf\x1e\x88\xa2\x9e|\x14q\xcb\x10\x7f\xf7Wx\r|\xc2$\x00m!\xb2<\xb3^\xca\x17<\xa29l\xc4\tuk\x15{Xd\x95\xfa\xc5\xb4l\x88\x05\xb7\x84?.\x0f\x80\xaf\x83>;I)\xff\xc0\x8d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8<u\xda\xe8', &(0x7f0000002640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xebb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xef\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18ocmU5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xb9\x05\xf0\xae\xfc\x88\f\x96+\xd3\xac\xf3\xef\xa7\xb7\xd1Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\xa5\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x19\x9c\x19\xb4\xac%~\x12\x7ft\xa9\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\xfd\xcf\xfdY\\d\x03(\x89\xe7\xe1\xcf\xa4m3SQc\xbaG\xcd\xce\xf5o@\xfdi\xd1w~\xc8\xb9\\\a\xeba\x18\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\x87\x02\xcd\xa4\xc0\xa17\x92]_\xa2>\xbb\xc8?\x98\xa6+\xcf^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\x9c|0\xdd\x7f\x85^\xdf\xe0\x84\x17\xe5\xc05\x8av\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xd3o26\x9b\xc9\x90\x1a\x87\x9a\xea0\xc5\x9b\xa8\x8a\xc5\x13\x86\xbd\x86\xbc\x12\xf5\xa2![\x84i\xe1\xb2\xa2\xa1F\xd9{\x95\xdc\xbbc\x8a\xa1B\x10W\xbe\xc2\xa2\t\xd4\xfdp\x06\xe5.\r\x1dd\xfc\x97\x9dn\xef\xc0\xa6\x9a\xe0\xd5\x98o\x18\xaf\xba\x03\x00\xbd`Qa\xdc\xcb\xce\x91\xcdb\xd7\x9es\v&g\x06\xc3\x01\x004.\x8d\xf7F\xb0\xc4_g\x82\x96M`l\x84\xd9\xab\xd6\xacYBG\xfb\x821e\xb4\xe6@\xe3\x82\xc6\x85\x96FQn\x0e\xa9\xc6\x9e\xc4\xdbA\xafSt\x9d\x15\xd0\xbd\xd8k\xd3G\x80\x1dE\x168+\v\xfb_\xc3\xd3\xc9\x87\f8\x03\x8c\xed_\xeb\x9c\xbd]=Blu\x04-g)\x01\x9a\xde\xf1\xdf\xe3\xd7)\b\xee@,\xcc#\xc2\xf4p\x1a\xa9\xe9 :J.\xdf\xdb>y\x95+,m\xc7\xad\xf9a1\xa1\x91Ed\x86D\xe4Tc\xd6d\xf0\xc4\x04L\r\xa1\x88e\"F\x92\xdb\x06\x04\xca\xfdLK\xdb\x1c\x8a\xc9r2\xee\xd1x\x94\xe2\x8by\x8a\v\xb8TfGF\x06\xbf\xe8\xe5\xb0\a\xd3d\xfc\x16\x14L*\xef\xcb{\f\x875\xf4\xfbMj', &(0x7f0000000240)='-#\xe5/!\xff\a\x1a\xae\xcd\\\xc9\x16\xe6V\xb5\xd3\x00\x00\x00\x00\x00\x00\x00\xe7L+\xc4\x8a3/\x827', &(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1'])

579.50473ms ago: executing program 4 (id=751):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d3d301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000005c0)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x2c}}, 0x0)

481.349159ms ago: executing program 0 (id=752):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='uid=forget,noadinicb,iocharset=koi8-u,gid=ignore,dmode=000000000000000000004,rootdir=00000000000000000005,iocharset=macinuit,nostrict,mode=00000000000000000004622,\x00'], 0x1, 0xc39, &(0x7f0000000240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

404.230496ms ago: executing program 2 (id=753):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0)

322.185373ms ago: executing program 2 (id=754):
set_mempolicy(0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c8c05aa", @ANYRES16=r3], 0x20}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000001940)=""/4098)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r7, 0x4b52, &(0x7f0000000140))
flistxattr(r5, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r11=>r9}, './file0\x00'})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1001})
sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000014000000040001800400098070000780080002"], 0x17c}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840)
sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

163.390006ms ago: executing program 0 (id=755):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$VT_RESIZE(r0, 0x4b65, 0x0)

167.11µs ago: executing program 2 (id=756):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

0s ago: executing program 0 (id=757):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r0 = dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[])
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c00990000000200000000000800a0"], 0x48}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1}])
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r0, &(0x7f0000000580)={0x50}, 0x50)
write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 162.223358][ T4165] EXT4-fs (loop4): unmounting filesystem.
[  163.708110][ T4535] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  163.718743][ T3642] Bluetooth: hci8: command tx timeout
[  163.762695][ T4535] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  163.784030][ T4634] loop1: detected capacity change from 0 to 2048
[  163.818600][ T4535] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  163.861501][ T4535] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  163.983704][ T4636] loop3: detected capacity change from 0 to 512
[  164.118269][ T4636] EXT4-fs (loop3): orphan cleanup on readonly fs
[  164.125629][ T4636] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  164.145739][ T4636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  164.164974][ T4636] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.150: attempt to clear invalid blocks 2 len 1
[  164.180334][ T4636] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.150: invalid indirect mapped block 1819239214 (level 0)
[  164.196379][ T4636] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.150: invalid indirect mapped block 1819239214 (level 1)
[  164.214565][ T4636] EXT4-fs (loop3): 1 truncate cleaned up
[  164.220434][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  164.287371][ T4636] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  164.375451][ T4636] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  164.566160][ T4535] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.615011][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.677609][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.705111][ T4535] 8021q: adding VLAN 0 to HW filter on device team0
[  164.710699][ T4628] loop4: detected capacity change from 0 to 32768
[  164.746687][ T4628] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.156 (4628)
[  164.781898][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.797723][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  164.806336][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.837277][ T4628] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.899271][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.904449][ T4628] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  164.906369][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.936003][ T4628] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  164.968301][ T4628] BTRFS info (device loop4): use zstd compression, level 3
[  164.979700][ T4642] loop3: detected capacity change from 0 to 2048
[  164.998795][ T4634] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 81920 lbcount: 86016 extent 129+50688
[  165.015355][ T4628] BTRFS info (device loop4): using free space tree
[  165.060371][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  165.070002][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  165.112763][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  165.122781][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.129933][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.137676][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  165.147733][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.166127][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.182701][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.191886][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.201125][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.218002][ T4535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.228958][ T4535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.244492][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.254905][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.263894][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.277000][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.282267][ T4631] loop0: detected capacity change from 0 to 32768
[  165.286308][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.510635][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.680246][ T4631] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.159 (4631)
[  165.794686][ T3732] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3732)
[  165.921097][ T4628] BTRFS info (device loop4): enabling ssd optimizations
[  165.922545][ T4666] loop0: detected capacity change from 0 to 16
[  165.936592][ T4666] erofs: (device loop0): mounted with root inode @ nid 36.
[  165.939540][ T4628] BTRFS info (device loop4): checking UUID tree
[  166.574825][ T4662] device bridge_slave_1 left promiscuous mode
[  166.581121][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.616990][ T4628] BTRFS warning (device loop4): failed to start uuid_rescan task
[  166.637852][ T4628] BTRFS warning (device loop4): failed to check the UUID tree: -4
[  167.788451][ T4641] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 114688 lbcount: 118784 extent 129+83456
[  167.998840][ T4628] BTRFS error (device loop4): open_ctree failed
[  168.016852][ T4678] loop0: detected capacity change from 0 to 512
[  168.132575][ T4678] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.166: inode #1: comm syz.0.166: iget: illegal inode #
[  168.288061][ T4678] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.166: error while reading EA inode 1 err=-117
[  168.306637][ T4686] loop3: detected capacity change from 0 to 2048
[  168.422244][ T4678] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  168.644986][ T4678] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.166: inode #1: comm syz.0.166: iget: illegal inode #
[  168.969482][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  168.977103][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.042802][ T4535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.053099][ T4678] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.166: error while reading EA inode 1 err=-117
[  169.072356][ T4678] EXT4-fs (loop0): 1 orphan inode deleted
[  169.093400][ T4678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.136874][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.157892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.216895][ T4692] loop4: detected capacity change from 0 to 16
[  169.250692][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.282543][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.293647][ T4692] erofs: (device loop4): mounted with root inode @ nid 36.
[  169.300823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.355230][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.396515][ T3879] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  169.535936][ T4535] device veth0_vlan entered promiscuous mode
[  169.563207][ T3879] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz-executor: deleted inode referenced: 15
[  169.602686][ T4535] device veth1_vlan entered promiscuous mode
[  169.613850][ T3879] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz-executor: deleted inode referenced: 15
[  170.254641][ T4695] loop1: detected capacity change from 0 to 4096
[  170.278957][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.414017][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.501880][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.559213][ T4535] device veth0_macvtap entered promiscuous mode
[  170.611480][ T4535] device veth1_macvtap entered promiscuous mode
[  170.671598][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.701032][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.739223][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.780341][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.812807][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.847262][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.868391][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.898213][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.938865][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.966742][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.994909][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.007302][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.018247][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.030485][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.042214][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.053006][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.091154][ T4535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.115791][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  171.128458][ T3879] EXT4-fs (loop0): unmounting filesystem.
[  171.165259][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.204989][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.271053][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.339789][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.368954][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.398821][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.436485][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.471340][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.497765][ T4699] loop4: detected capacity change from 0 to 32768
[  171.508997][ T4699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.172 (4699)
[  171.544815][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.551661][ T4699] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.586074][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.607063][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.625545][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.627836][ T4699] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  171.656911][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.686471][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.688755][ T4699] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  171.727743][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.739460][ T4699] BTRFS info (device loop4): use zstd compression, level 3
[  171.746704][ T4699] BTRFS info (device loop4): using free space tree
[  171.753563][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.788985][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.837478][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.848103][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.900531][ T4535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.948105][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.977680][ T4717] loop3: detected capacity change from 0 to 16
[  172.000100][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.019462][ T4717] erofs: (device loop3): mounted with root inode @ nid 36.
[  172.098802][ T4699] BTRFS info (device loop4): enabling ssd optimizations
[  172.107114][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.121375][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.129510][ T3652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.137275][ T3652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.145670][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.154260][ T3652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.180437][ T4699] BTRFS info (device loop4): checking UUID tree
[  172.193919][ T3866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.216742][ T4535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.229599][ T4535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.238411][ T4535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.247211][ T4535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.076048][ T4165] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.111805][ T3866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.081578][ T3866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.189082][ T3649] Bluetooth: hci5: command tx timeout
[  174.195244][ T4736] device bridge_slave_1 left promiscuous mode
[  174.201601][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.485214][ T3749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.518777][ T3749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.768531][ T3866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.109675][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  175.292835][ T4752] loop3: detected capacity change from 0 to 512
[  175.581793][ T4752] EXT4-fs (loop3): orphan cleanup on readonly fs
[  175.588227][ T4752] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  175.619980][ T4752] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  175.640949][ T4752] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.181: attempt to clear invalid blocks 2 len 1
[  175.658254][ T4752] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.181: invalid indirect mapped block 1819239214 (level 0)
[  175.678140][ T4752] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.181: invalid indirect mapped block 1819239214 (level 1)
[  175.738020][ T4752] EXT4-fs (loop3): 1 truncate cleaned up
[  175.743967][ T4752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  175.825833][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.834530][ T4751] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  175.878823][ T4751] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  175.920318][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.026477][ T4740] loop1: detected capacity change from 0 to 32768
[  176.033966][ T3652] Bluetooth: hci0: command 0x0406 tx timeout
[  176.040102][ T3642] Bluetooth: hci2: command 0x0406 tx timeout
[  176.046183][ T3642] Bluetooth: hci3: command 0x0406 tx timeout
[  176.052281][ T3651] Bluetooth: hci1: command 0x0406 tx timeout
[  176.058305][ T3651] Bluetooth: hci4: command 0x0406 tx timeout
[  176.148047][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  176.212235][ T4740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.178 (4740)
[  176.227059][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  176.239934][ T4760] loop4: detected capacity change from 0 to 512
[  176.269585][ T3642] Bluetooth: hci5: command tx timeout
[  176.281327][ T4760] EXT4-fs (loop4): orphan cleanup on readonly fs
[  176.287729][ T4760] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  176.297738][ T4760] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  176.316232][ T4760] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.182: attempt to clear invalid blocks 2 len 1
[  176.330221][ T4760] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.182: invalid indirect mapped block 1819239214 (level 0)
[  176.344937][ T4760] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.182: invalid indirect mapped block 1819239214 (level 1)
[  176.360143][ T4760] EXT4-fs (loop4): 1 truncate cleaned up
[  176.365813][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.397205][ T4760] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  176.407206][ T4760] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  176.525984][ T4740] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.572546][ T4722] chnl_net:caif_netlink_parms(): no params data found
[  176.588249][ T4165] EXT4-fs (loop4): unmounting filesystem.
[  176.596991][ T4740] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  176.619516][ T4740] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  176.754348][ T4768] loop3: detected capacity change from 0 to 2048
[  176.820926][ T4740] BTRFS info (device loop1): use zstd compression, level 3
[  176.838466][ T4740] BTRFS info (device loop1): using free space tree
[  177.572235][ T4740] BTRFS error (device loop1): open_ctree failed
[  177.992564][ T4768] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1368: i_size: 102400 lbcount: 106496 extent 129+71168
[  178.048429][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.074131][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.097268][ T3781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (3781)
[  178.101893][ T4722] device bridge_slave_0 entered promiscuous mode
[  178.256330][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.266500][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.351600][ T3642] Bluetooth: hci5: command tx timeout
[  178.411274][ T4722] device bridge_slave_1 entered promiscuous mode
[  179.163178][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.870181][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.027405][ T4722] team0: Port device team_slave_0 added
[  180.120217][ T4722] team0: Port device team_slave_1 added
[  180.226353][ T4796] loop2: detected capacity change from 0 to 32768
[  180.342521][ T4829] loop3: detected capacity change from 0 to 512
[  180.448919][ T3642] Bluetooth: hci5: command tx timeout
[  180.582271][ T4796] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.989787][ T4796] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  181.029353][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.040707][ T4829] EXT4-fs (loop3): 1 orphan inode deleted
[  181.046491][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  181.056731][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.098756][ T4796] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  181.108186][ T4796] BTRFS info (device loop2): use zstd compression, level 3
[  181.117120][ T4829] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff)
[  181.178761][ T4796] BTRFS info (device loop2): using free space tree
[  181.278749][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.376806][ T4796] BTRFS error (device loop2): open_ctree failed
[  181.430583][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.501032][ T4838] loop1: detected capacity change from 0 to 512
[  181.503962][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.561540][ T4838] EXT4-fs (loop1): orphan cleanup on readonly fs
[  181.567927][ T4838] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  181.577500][ T4838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  181.592220][ T4838] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.193: attempt to clear invalid blocks 2 len 1
[  181.606028][ T4838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.193: invalid indirect mapped block 1819239214 (level 0)
[  181.620383][ T4838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.193: invalid indirect mapped block 1819239214 (level 1)
[  181.636397][ T4838] EXT4-fs (loop1): 1 truncate cleaned up
[  181.642176][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  181.661584][ T4838] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  181.676279][ T4838] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  181.721008][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.819890][ T4829] netlink: 'syz.3.192': attribute type 10 has an invalid length.
[  181.827668][ T4829] netlink: 148 bytes leftover after parsing attributes in process `syz.3.192'.
[  182.014112][ T4860] loop2: detected capacity change from 0 to 4096
[  182.911747][ T4862] loop4: detected capacity change from 0 to 32768
[  183.230026][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  183.440371][ T4722] device hsr_slave_0 entered promiscuous mode
[  183.470335][ T4722] device hsr_slave_1 entered promiscuous mode
[  183.555434][ T4722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.583657][ T4722] Cannot create hsr debugfs directory
[  184.337820][ T4869] loop4: detected capacity change from 0 to 256
[  184.377790][ T4871] loop2: detected capacity change from 0 to 128
[  184.414579][ T4871] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  184.445577][ T4869] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  184.473444][ T4871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.740459][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  184.830580][ T4874] loop2: detected capacity change from 0 to 1024
[  184.888966][ T4874] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  184.930753][ T4864] loop1: detected capacity change from 0 to 40427
[  185.031817][ T4874] loop2: detected capacity change from 0 to 2048
[  185.034873][ T4864] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  185.048211][ T4874] UDF-fs: bad mount option "user_xattr" or missing value
[  185.068570][ T3866] device hsr_slave_0 left promiscuous mode
[  185.078816][ T4864] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  185.088462][ T3866] device hsr_slave_1 left promiscuous mode
[  185.099023][ T3781] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.101040][ T4864] F2FS-fs (loop1): invalid crc value
[  185.122405][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.145618][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.164657][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.170689][ T4864] F2FS-fs (loop1): Found nat_bits in checkpoint
[  185.177636][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.193900][ T3866] device bridge_slave_0 left promiscuous mode
[  185.206382][ T3866] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.321627][ T3866] device veth1_macvtap left promiscuous mode
[  185.329490][ T4864] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  185.337126][ T4864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  185.347597][ T3866] device veth0_macvtap left promiscuous mode
[  185.359684][ T3866] device veth1_vlan left promiscuous mode
[  185.390408][ T3866] device veth0_vlan left promiscuous mode
[  185.526481][ T4813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  185.571665][ T4813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  187.471518][ T3866] team0 (unregistering): Port device team_slave_1 removed
[  187.729484][ T3866] team0 (unregistering): Port device team_slave_0 removed
[  187.923063][ T3866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.139670][ T3866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.131585][ T3866] bond0 (unregistering): Released all slaves
[  190.980479][    C0] eth0: bad gso: type: 1, size: 1408
[  191.327488][ T4722] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  191.381148][ T4722] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  191.422608][ T4722] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  191.485928][ T4722] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  191.754772][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.768895][ T3770] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  191.824980][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.849640][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.891458][ T4722] 8021q: adding VLAN 0 to HW filter on device team0
[  191.949946][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.989285][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.018072][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.025255][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.059267][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.091941][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.125103][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.132331][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.169090][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.178970][ T3770] usb 5-1: unable to get BOS descriptor or descriptor too short
[  192.211414][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.258993][ T3770] usb 5-1: config 0 has no interfaces?
[  192.266215][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.307915][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.358545][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.408105][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.433251][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.449821][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.496716][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.509627][ T3770] usb 5-1: string descriptor 0 read error: -22
[  192.515881][ T3770] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  192.548752][ T3770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.559006][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.592265][ T3770] usb 5-1: config 0 descriptor??
[  192.619725][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.650600][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.680398][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.712734][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.754834][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.833589][ T4412] usb 5-1: USB disconnect, device number 3
[  193.301373][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.334313][ T4791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.385250][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.485572][ T4982] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  193.498822][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.540399][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.589994][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.609765][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  193.649577][ T4722] device veth0_vlan entered promiscuous mode
[  193.660789][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  193.707425][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  193.774510][ T4722] device veth1_vlan entered promiscuous mode
[  194.180279][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.197406][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  194.223420][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.251013][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.278346][ T4722] device veth0_macvtap entered promiscuous mode
[  194.330007][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.352127][ T1260] ieee802154 phy0 wpan0: encryption failed: -22
[  194.359483][ T1260] ieee802154 phy1 wpan1: encryption failed: -22
[  194.412010][ T4722] device veth1_macvtap entered promiscuous mode
[  194.499204][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.543225][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.573852][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.618756][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.649055][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.680665][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.716246][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.755821][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.796273][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.827361][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.879552][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.915822][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.952486][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.978937][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.012351][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.043485][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.090602][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.109112][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.117988][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.175890][ T5010] loop3: detected capacity change from 0 to 256
[  195.189556][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.238801][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.268465][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.309249][ T5010] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  195.328105][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.416491][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.447606][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.491491][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.538744][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.578755][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.628535][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.677186][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.708321][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.732562][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.777376][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.810423][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.848279][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.890138][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.920576][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.950034][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.961218][ T5015] Driver unsupported XDP return value 0 on prog  (id 71) dev N/A, expect packet loss!
[  196.011615][ T4722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.038785][ T4722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.074823][ T4722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.118815][ T4722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.145567][ T5022] loop2: detected capacity change from 0 to 256
[  196.242515][ T5022] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  196.377817][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.406437][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.482589][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.576271][ T4753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.627936][ T4753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.659487][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.670521][ T5031] loop1: detected capacity change from 0 to 512
[  196.759875][ T5031] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.230: casefold flag without casefold feature
[  196.827993][ T5031] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.230: missing EA_INODE flag
[  196.875814][ T5031] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.230: error while reading EA inode 2 err=-117
[  196.918009][ T5031] EXT4-fs (loop1): 1 orphan inode deleted
[  196.938816][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  196.971793][ T5044] loop0: detected capacity change from 0 to 2048
[  197.427769][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  197.472851][ T5053] fuse: Bad value for 'user_id'
[  197.858922][  T154] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  197.881192][ T5063] loop3: detected capacity change from 0 to 256
[  198.128091][ T5063] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  198.259217][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  198.287756][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  198.347119][  T154] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  198.403993][  T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.462688][  T154] usb 2-1: config 0 descriptor??
[  198.529825][ T5071] loop0: detected capacity change from 0 to 512
[  198.547255][ T5072] loop2: detected capacity change from 0 to 2048
[  198.600586][ T5063] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  198.641442][ T5071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  198.661141][ T5063] netpci0: tun_chr_ioctl cmd 1074025677
[  198.666952][ T5063] netpci0: linktype set to 804
[  198.678919][ T5071] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff)
[  198.797404][ T5072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.902031][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  199.032944][ T5079] loop4: detected capacity change from 0 to 256
[  199.558898][  T154] appletouch 2-1:0.0: Geyser mode initialized.
[  199.598349][  T154] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  199.729414][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'.
[  199.738476][ T5089] loop2: detected capacity change from 0 to 1024
[  199.773617][  T154] usb 2-1: USB disconnect, device number 4
[  199.825808][ T3732] udevd[3732]: Error opening device "/dev/input/event4": No such device
[  199.889697][  T154] appletouch 2-1:0.0: input: appletouch disconnected
[  199.923247][ T3732] udevd[3732]: Unable to EVIOCGABS device "/dev/input/event4"
[  199.968592][ T3732] udevd[3732]: Unable to EVIOCGABS device "/dev/input/event4"
[  200.196104][ T5089] hfsplus: b-tree write err: -5, ino 3
[  200.289569][   T34] hfsplus: b-tree write err: -5, ino 3
[  200.368923][ T3770] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  200.393398][ T5108] fuse: Bad value for 'user_id'
[  200.608800][ T3770] usb 4-1: Using ep0 maxpacket: 8
[  200.701683][ T5117] loop4: detected capacity change from 0 to 2048
[  200.712230][ T5123] netlink: 64 bytes leftover after parsing attributes in process `syz.0.254'.
[  200.728078][ T5121] loop1: detected capacity change from 0 to 128
[  200.734848][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  200.756128][ T5117] UDF-fs: bad mount option "gid=00000000000000000000ÿÿÿÿÿÿÿÿ" or missing value
[  200.758448][ T5121] FAT-fs (loop1): Unrecognized mount option "" or missing value
[  200.783689][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024
[  200.815655][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.836851][ T3770] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.843783][ T3781] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  200.855019][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  200.897779][ T3770] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  200.927569][ T3770] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  200.940327][ T3770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.110901][ T3770] usb 4-1: config 0 descriptor??
[  201.152987][ T5098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.784902][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  202.022746][ T3642] Bluetooth: hci5: command tx timeout
[  202.043243][ T3642] Bluetooth: hci9: urb ffff88802ad76b00 submission failed (90)
[  202.078785][    T7] usb 3-1: Using ep0 maxpacket: 8
[  202.139040][    T7] usb 3-1: no configurations
[  202.143672][    T7] usb 3-1: can't read configurations, error -22
[  202.236790][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[  202.247444][ T5136] loop4: detected capacity change from 0 to 512
[  202.270392][ T5136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.279325][ T3642] Bluetooth: hci0: unexpected cc 0x042e length: 9 > 7
[  202.280407][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'.
[  202.286121][ T3642] Bluetooth: hci0: unexpected event for opcode 0x042e
[  202.337579][ T5136] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  202.347102][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  202.412417][ T5136] EXT4-fs (loop4): orphan cleanup on readonly fs
[  202.451060][ T5136] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3844: comm syz.4.259: Allocating blocks 41-42 which overlap fs metadata
[  202.482763][ T5136] Quota error (device loop4): write_blk: dquota write failed
[  202.496562][ T5136] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  202.518476][ T5136] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.259: Failed to acquire dquot type 0
[  202.569166][ T5136] EXT4-fs (loop4): 1 truncate cleaned up
[  202.588061][ T5136] EXT4-fs (loop4): pa ffff88807245a460: logic 1, phys. 41, len 23
[  202.596306][ T5136] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4884: group 0, free 22, pa_free 23
[  202.610237][ T5136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  202.638834][    T7] usb 3-1: Using ep0 maxpacket: 8
[  202.689029][    T7] usb 3-1: no configurations
[  202.693637][    T7] usb 3-1: can't read configurations, error -22
[  202.715846][    T7] usb usb3-port1: attempt power cycle
[  202.770753][ T5159] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  202.887607][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.974782][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.999298][ T5157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.020768][ T5157] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  203.116760][ T5170] loop0: detected capacity change from 0 to 128
[  203.160516][ T5170] FAT-fs (loop0): Unrecognized mount option "	" or missing value
[  203.209743][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  203.329300][    T7] usb 3-1: Using ep0 maxpacket: 8
[  203.379582][    T7] usb 3-1: no configurations
[  203.389885][    T7] usb 3-1: can't read configurations, error -22
[  203.400207][ T4165] EXT4-fs (loop4): unmounting filesystem.
[  203.437838][ T4592] usb 4-1: USB disconnect, device number 4
[  203.568914][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  203.678977][    T7] usb 3-1: Using ep0 maxpacket: 8
[  203.719070][    T7] usb 3-1: no configurations
[  203.723761][    T7] usb 3-1: can't read configurations, error -22
[  204.606805][    T7] usb usb3-port1: unable to enumerate USB device
[  204.846850][ T5192] loop3: detected capacity change from 0 to 512
[  204.919782][ T5192] devpts: called with bogus options
[  205.118422][ T5200] loop0: detected capacity change from 0 to 1764
[  205.257227][ T5208] loop2: detected capacity change from 0 to 1024
[  205.319799][    C0] eth0: bad gso: type: 1, size: 1408
[  205.678821][ T4286] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  205.707567][ T5208] EXT4-fs: Ignoring removed orlov option
[  205.717562][ T5208] EXT4-fs: Ignoring removed orlov option
[  205.741253][ T5208] EXT4-fs (loop2): Test dummy encryption mode enabled
[  205.776863][ T5228] loop3: detected capacity change from 0 to 4096
[  205.813750][ T5208] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c11c, mo2=0002]
[  205.822207][ T5208] System zones: 0-1, 3-36
[  205.878016][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  205.914959][ T5229] loop4: detected capacity change from 0 to 128
[  205.924584][ T5228] NILFS (loop3): invalid segment: Checksum error in segment payload
[  205.939160][ T4286] usb 2-1: Using ep0 maxpacket: 8
[  205.946498][ T5229] FAT-fs (loop4): Unrecognized mount option "	" or missing value
[  205.976008][ T5228] NILFS (loop3): trying rollback from an earlier position
[  206.018030][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'.
[  206.042875][ T5234] bond0: option arp_all_targets: invalid value (262144)
[  206.079937][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  206.120553][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024
[  206.137376][ T5228] NILFS (loop3): recovery complete
[  206.175092][ T5236] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.212175][ T5208] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  206.225855][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  206.262154][ T5233] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  206.279374][ T4286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  206.350142][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  206.411066][ T4286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  206.449015][ T4286] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  206.478477][ T4286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.508307][ T4286] usb 2-1: config 0 descriptor??
[  206.536237][ T4535] EXT4-fs (loop2): unmounting filesystem.
[  206.542287][ T5214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  206.589760][ T3642] Bluetooth: hci9: urb ffff8880404ba000 submission failed (90)
[  206.812279][ T4286] usb 2-1: USB disconnect, device number 5
[  207.021169][ T5253] loop4: detected capacity change from 0 to 64
[  207.300503][ T5255] loop4: detected capacity change from 0 to 128
[  207.319609][ T5255] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  207.436389][ T5255] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  207.501366][ T5247] loop2: detected capacity change from 0 to 32768
[  207.535402][ T5247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.292 (5247)
[  207.604393][ T5249] loop0: detected capacity change from 0 to 32768
[  207.649372][ T5247] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.649379][ T5249] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.293 (5249)
[  207.690536][ T3732] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3732)
[  207.706073][ T5247] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  207.716691][ T5257] loop1: detected capacity change from 0 to 4096
[  207.742396][ T5247] BTRFS info (device loop2): using free space tree
[  207.783337][ T5249] loop0: detected capacity change from 0 to 2048
[  207.880639][ T3723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  207.893346][ T5249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  207.922381][ T5249] ext4 filesystem being mounted at /16/file0/file0 supports timestamps until 2038 (0x7fffffff)
[  208.146256][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  208.312501][ T5247] BTRFS info (device loop2): enabling ssd optimizations
[  208.465409][ T5290] kvm: emulating exchange as write
[  208.752887][ T4782] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  208.823429][ T4535] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.945778][ T5269] loop4: detected capacity change from 0 to 32768
[  208.963961][ T5269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.298 (5269)
[  209.036148][ T5269] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.069725][ T5269] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  209.082137][ T5269] BTRFS info (device loop4): using free space tree
[  209.172861][ T5309] loop2: detected capacity change from 0 to 128
[  209.221983][ T5309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  209.261591][ T5309] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  209.397619][ T5269] BTRFS info (device loop4): enabling ssd optimizations
[  209.459174][ T4535] EXT4-fs (loop2): unmounting filesystem.
[  209.632822][   T46] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  209.742622][ T5269] syz.4.298 (5269) used greatest stack depth: 17536 bytes left
[  209.790719][ T4165] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.479096][ T4593] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  211.999072][ T4593] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  212.028486][ T4593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.065322][ T4593] usb 5-1: Product: syz
[  212.078809][ T4593] usb 5-1: Manufacturer: syz
[  212.083532][ T4593] usb 5-1: SerialNumber: syz
[  212.110118][ T4593] usb 5-1: config 0 descriptor??
[  212.488794][ T4411] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  212.759050][ T4411] usb 3-1: Using ep0 maxpacket: 16
[  212.898900][ T4411] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  213.088992][ T4411] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  213.089079][ T5391] loop0: detected capacity change from 0 to 512
[  213.102406][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.133359][ T4411] usb 3-1: Product: syz
[  213.134189][ T5391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  213.141705][ T4411] usb 3-1: Manufacturer: syz
[  213.151568][ T4411] usb 3-1: SerialNumber: syz
[  213.158873][ T5391] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  213.166418][ T4411] usb 3-1: config 0 descriptor??
[  213.196152][ T5391] EXT4-fs (loop0): orphan cleanup on readonly fs
[  213.204736][ T5391] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3844: comm syz.0.329: Allocating blocks 41-42 which overlap fs metadata
[  213.229770][ T5391] Quota error (device loop0): write_blk: dquota write failed
[  213.237317][ T5391] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  213.247758][ T5391] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.329: Failed to acquire dquot type 0
[  213.263176][ T5391] EXT4-fs (loop0): 1 truncate cleaned up
[  213.271020][ T5391] EXT4-fs (loop0): pa ffff888075354e00: logic 1, phys. 41, len 23
[  213.279996][ T5391] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4884: group 0, free 22, pa_free 23
[  213.313378][ T5391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  213.551975][ T3642] Bluetooth: Wrong link type (-71)
[  213.610945][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  213.653720][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  213.718176][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  213.807881][ T5396] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  214.286397][ T4284] usb 5-1: USB disconnect, device number 4
[  214.430206][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  214.658812][ T4593] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  214.979204][ T3683] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  215.177376][ T3770] usb 3-1: USB disconnect, device number 7
[  215.199190][ T4593] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  215.212827][ T4593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.224660][ T4593] usb 2-1: Product: syz
[  215.229227][ T3683] usb 1-1: Using ep0 maxpacket: 8
[  215.234502][ T4593] usb 2-1: Manufacturer: syz
[  215.239301][ T4593] usb 2-1: SerialNumber: syz
[  215.252662][ T4593] usb 2-1: config 0 descriptor??
[  215.392574][ T3683] usb 1-1: unable to get BOS descriptor or descriptor too short
[  215.478966][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.529390][ T3683] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  215.554714][ T3683] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 80
[  215.639041][ T3683] usb 1-1: language id specifier not provided by device, defaulting to English
[  215.659486][ T3770] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  215.788939][ T3683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  215.808051][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.824741][ T3683] usb 1-1: Product: syz
[  215.833691][ T3683] usb 1-1: Manufacturer: �
[  215.840159][ T3683] usb 1-1: SerialNumber: syz
[  215.909026][   T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  215.918819][ T3770] usb 3-1: Using ep0 maxpacket: 8
[  216.043152][ T3770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.063011][ T3770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.083379][ T3770] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  216.109390][ T3770] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  216.137384][ T3770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.164520][ T3770] usb 3-1: config 0 descriptor??
[  216.169773][ T3683] cdc_ncm 1-1:1.0: bind() failure
[  216.181582][ T3683] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  216.193762][ T3683] cdc_ncm 1-1:1.1: bind() failure
[  216.220754][ T3683] usb 1-1: USB disconnect, device number 2
[  216.458926][   T14] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  216.478243][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.491019][   T14] usb 5-1: Product: syz
[  216.496887][   T14] usb 5-1: Manufacturer: syz
[  216.501939][   T14] usb 5-1: SerialNumber: syz
[  216.560580][   T14] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  216.652320][ T3770] logitech 0003:046D:C29C.0001: report_id 35679 is invalid
[  216.675167][ T3770] logitech 0003:046D:C29C.0001: item 0 2 1 8 parsing failed
[  216.701441][ T3770] logitech 0003:046D:C29C.0001: parse failed
[  216.715715][ T3770] logitech: probe of 0003:046D:C29C.0001 failed with error -22
[  216.852386][ T3770] usb 3-1: USB disconnect, device number 8
[  217.071727][ T3642] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  217.082628][ T3642] Bluetooth: hci5: Injecting HCI hardware error event
[  217.092499][ T3651] Bluetooth: hci5: hardware error 0x00
[  217.218916][   T14] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  217.386491][ T5471] netlink: 96 bytes leftover after parsing attributes in process `syz.0.356'.
[  217.439470][ T3770] usb 2-1: USB disconnect, device number 6
[  217.461349][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  217.582362][ T5479] __vm_enough_memory: pid: 5479, comm: syz.4.347, no enough memory for the allocation
[  217.756683][ T5478] kvm [5477]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  217.786099][ T5478] kvm [5477]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  217.802770][ T5478] kvm [5477]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x0
[  217.898860][ T4411] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  218.270744][   T14] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  218.279920][   T14] ath9k_htc: Failed to initialize the device
[  218.299065][ T4411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  218.328499][ T4411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  218.379043][ T4411] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  218.407107][ T4411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.443697][ T4411] usb 3-1: config 0 descriptor??
[  218.509056][ T3642] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  218.518146][ T3642] Bluetooth: hci6: Injecting HCI hardware error event
[  218.526949][ T3652] Bluetooth: hci6: hardware error 0x00
[  218.769194][ T4410] usb 5-1: USB disconnect, device number 5
[  218.829554][ T4410] usb 5-1: ath9k_htc: USB layer deinitialized
[  219.038998][ T4411] appletouch 3-1:0.0: Geyser mode initialized.
[  219.049924][ T4411] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[  219.150650][ T3651] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  219.263138][ T3770] usb 3-1: USB disconnect, device number 9
[  219.312689][ T3770] appletouch 3-1:0.0: input: appletouch disconnected
[  220.597099][ T3652] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  222.058911][ T4410] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  222.478913][ T4410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  222.518820][ T4410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  222.558777][ T4410] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  222.567862][ T4410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.627352][ T4410] usb 3-1: config 0 descriptor??
[  223.168894][ T4410] appletouch 3-1:0.0: Geyser mode initialized.
[  223.189576][ T4410] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  223.404993][ T3770] usb 3-1: USB disconnect, device number 10
[  223.436700][ T3770] appletouch 3-1:0.0: input: appletouch disconnected
[  225.118016][ T5578] loop4: detected capacity change from 0 to 128
[  225.159662][ T5578] FAT-fs (loop4): Unrecognized mount option "" or missing value
[  226.909126][   T27] audit: type=1326 audit(1724643120.653:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.2.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640cb79e79 code=0x0
[  227.102765][ T5602] fuse: root generation should be zero
[  227.448802][ T3685] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  227.688859][ T3685] usb 1-1: Using ep0 maxpacket: 8
[  227.788848][   T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  227.809083][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  227.838792][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024
[  227.878770][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.908757][ T3685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  227.926664][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  227.957007][ T3685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  227.987398][ T3685] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  228.017902][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.054938][ T3685] usb 1-1: config 0 descriptor??
[  228.088990][ T5607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  228.115870][ T3652] Bluetooth: hci9: urb ffff8880233c0700 submission failed (90)
[  228.208859][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  228.220481][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  228.233066][   T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  228.242220][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.252343][   T14] usb 2-1: config 0 descriptor??
[  228.403888][ T4411] usb 1-1: USB disconnect, device number 3
[  229.328995][   T14] appletouch 2-1:0.0: Failed to request geyser raw mode
[  229.344042][   T14] appletouch: probe of 2-1:0.0 failed with error -5
[  229.379030][   T14] usb 2-1: USB disconnect, device number 7
[  231.588153][ T5652] loop3: detected capacity change from 0 to 512
[  231.694055][ T5655] ptrace attach of "./syz-executor exec"[3634] was attempted by "./syz-executor exec"[5655]
[  231.746006][ T5652] EXT4-fs (loop3): 1 orphan inode deleted
[  231.761436][ T4041] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  231.778863][ T4041] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:14: Failed to release dquot type 1
[  231.791177][ T5652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  231.813222][ T5652] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038 (0x7fffffff)
[  231.870550][ T5652] syz.3.412[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  231.870655][ T5652] syz.3.412[5652] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.839735][ T5668] loop2: detected capacity change from 0 to 1024
[  232.871859][ T5670] ptrace attach of "./syz-executor exec"[4722] was attempted by "./syz-executor exec"[5670]
[  232.918847][ T3781] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  235.679542][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  235.828764][   T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  236.214088][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  236.245952][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  236.296682][   T14] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  236.331662][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.369548][   T14] usb 5-1: config 0 descriptor??
[  236.410989][ T5704] loop3: detected capacity change from 0 to 512
[  236.451471][ T5704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  236.658849][ T5704] EXT4-fs (loop3): 1 orphan inode deleted
[  236.674909][ T5704] EXT4-fs (loop3): 1 truncate cleaned up
[  236.695259][ T5704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  237.388791][ T3651] Bluetooth: hci7: command 0x0406 tx timeout
[  237.456213][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  237.458995][   T14] appletouch 5-1:0.0: Failed to request geyser raw mode
[  237.481618][   T14] appletouch: probe of 5-1:0.0 failed with error -5
[  237.520205][   T14] usb 5-1: USB disconnect, device number 6
[  238.965573][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'.
[  239.307667][ T5760] netlink: 'syz.3.452': attribute type 10 has an invalid length.
[  239.328656][ T5760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.452'.
[  239.368490][ T5760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.418990][  T154] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  239.789440][  T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  239.812913][ T5768] overlayfs: statfs failed on './file0'
[  239.818837][  T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  239.818888][  T154] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  239.818910][  T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.848615][  T154] usb 5-1: config 0 descriptor??
[  240.518882][  T154] appletouch 5-1:0.0: Failed to request geyser raw mode
[  240.536187][  T154] appletouch: probe of 5-1:0.0 failed with error -5
[  240.565876][ T5765] loop3: detected capacity change from 0 to 32768
[  240.579737][  T154] usb 5-1: USB disconnect, device number 7
[  240.633855][ T5765] find_entry called with index = 0
[  240.649003][ T5765] find_entry called with index = 0
[  240.888830][ T3682] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  241.269170][ T3682] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  241.287251][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.354711][ T3682] usb 1-1: config 0 descriptor??
[  241.426950][ T3682] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  241.661434][   T27] audit: type=1400 audit(1724643135.403:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=5790 comm="syz.0.465"
[  241.661969][ T5791] netlink: 72 bytes leftover after parsing attributes in process `syz.0.465'.
[  241.790457][ T5791] fuse: Bad value for 'group_id'
[  241.838835][   T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  242.055706][ T5826] loop1: detected capacity change from 0 to 512
[  242.086351][ T5826] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  242.095346][   T26] usb 5-1: Using ep0 maxpacket: 32
[  242.219002][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  242.239350][   T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  242.281910][ T5826] EXT4-fs (loop1): failed to open journal device unknown-block(2940,205839) -6
[  242.282123][ T4284] usb 1-1: USB disconnect, device number 4
[  242.429137][   T26] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  242.459978][   T26] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  242.468543][   T26] usb 5-1: Product: syz
[  242.478778][   T26] usb 5-1: Manufacturer: syz
[  242.493105][   T26] usb 5-1: SerialNumber: syz
[  242.513172][   T26] usb 5-1: config 0 descriptor??
[  242.736879][ T5770] loop2: detected capacity change from 0 to 131072
[  242.799099][ T5770] F2FS-fs (loop2): invalid crc value
[  242.826474][ T3682] usb 5-1: USB disconnect, device number 8
[  242.831582][ T5770] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  242.841168][ T4284] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  243.208865][ T4284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  243.228829][ T4284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  243.279402][ T4284] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  243.288517][ T4284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.362576][ T4284] usb 2-1: config 0 descriptor??
[  243.536597][ T5853] loop0: detected capacity change from 0 to 8192
[  243.689182][ T4284] appletouch 2-1:0.0: Failed to read mode from device.
[  243.696304][ T4284] appletouch: probe of 2-1:0.0 failed with error -5
[  243.755386][ T4284] usb 2-1: USB disconnect, device number 8
[  243.915657][   T27] audit: type=1326 audit(1724643137.653:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.3.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9671b79e79 code=0x0
[  244.174741][ T5874] loop0: detected capacity change from 0 to 128
[  244.233543][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'.
[  244.242954][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  244.262942][ T5874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  244.296008][ T5874] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  244.476655][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  244.749199][ T5906] loop1: detected capacity change from 0 to 128
[  244.802489][ T5906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  244.886899][ T5906] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  244.890129][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  244.928503][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'.
[  245.034701][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  245.120181][ T5919] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.213007][ T3682] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  245.468200][ T5933] loop4: detected capacity change from 0 to 1024
[  245.506640][ T5933] EXT4-fs: Ignoring removed orlov option
[  245.549658][ T5933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  245.558129][ T5937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  245.638907][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  245.674160][ T5933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  245.722624][ T3682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  245.791721][ T3682] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  245.819489][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.853095][ T5945] Bluetooth: MGMT ver 1.22
[  245.871999][ T3682] usb 1-1: config 0 descriptor??
[  246.190044][ T3682] appletouch 1-1:0.0: Failed to read mode from device.
[  246.197788][ T3682] appletouch: probe of 1-1:0.0 failed with error -5
[  246.221706][ T3682] usb 1-1: USB disconnect, device number 5
[  246.355604][ T5957] device ipvlan2 entered promiscuous mode
[  246.397942][ T5957] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  246.434504][ T4165] EXT4-fs (loop4): unmounting filesystem.
[  246.633856][ T3652] Bluetooth: hci4: unexpected event for opcode 0x080c
[  246.734524][ T5967] loop1: detected capacity change from 0 to 1024
[  246.798888][ T5967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.154289][ T5982] loop0: detected capacity change from 0 to 512
[  247.192474][ T5988] loop2: detected capacity change from 0 to 7
[  247.225617][ T5982] EXT4-fs (loop0): #blocks per group too big: 16384
[  247.236767][ T5988]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  247.245135][ T5988] loop2: partition table partially beyond EOD, truncated
[  247.253954][ T5988] loop2: p1 size 6333 extends beyond EOD, truncated
[  247.385166][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'.
[  247.428978][   T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  247.789740][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.808804][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.838804][   T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  247.847961][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.887673][   T26] usb 4-1: config 0 descriptor??
[  248.008932][ T4284] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  248.095957][ T6006] loop0: detected capacity change from 0 to 512
[  248.114774][ T6006] EXT4-fs: Ignoring removed orlov option
[  248.157380][ T6006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  248.184014][ T6006] EXT4-fs (loop0): 1 truncate cleaned up
[  248.194899][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  248.272489][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  248.348858][ T3682] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  248.379618][   T26] hid (null): bogus close delimiter
[  248.449039][ T4284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  248.463832][ T4284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  248.484045][ T4284] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  248.517044][ T4284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.535023][ T4284] usb 2-1: config 0 descriptor??
[  248.589012][   T26] usb 4-1: string descriptor 0 read error: -22
[  248.598880][ T3682] usb 3-1: Using ep0 maxpacket: 8
[  248.680172][ T6018] vivid-000: disconnect
[  248.688259][ T6016] vivid-000: reconnect
[  248.718996][ T3682] usb 3-1: unable to get BOS descriptor set
[  248.802646][ T3682] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  248.839048][   T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input15
[  248.858622][ T3682] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping
[  248.898916][ T3682] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  248.919447][ T4284] appletouch 2-1:0.0: Failed to read mode from device.
[  248.926459][ T4284] appletouch: probe of 2-1:0.0 failed with error -5
[  248.938253][ T3682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.978479][ T4284] usb 2-1: USB disconnect, device number 9
[  249.166457][ T6027] loop4: detected capacity change from 0 to 256
[  249.207426][ T6027] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb0200e68, utbl_chksum : 0xe619d30d)
[  249.232684][ T6027] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[  249.243221][ T6027] exFAT-fs (loop4): failed to initialize root inode
[  249.749205][   T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input16
[  249.800116][   T26] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input17
[  249.815926][   T26] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input18
[  249.845108][   T26] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  249.876380][ T3682] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.903863][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.942460][ T3682] usb 3-1: Product: syz
[  249.946679][ T3682] usb 3-1: Manufacturer: syz
[  249.959116][   T26] usb 4-1: USB disconnect, device number 5
[  249.995463][ T3682] usb 3-1: SerialNumber: syz
[  250.378967][ T3682] usb 3-1: 0:2 : does not exist
[  250.449195][ T3682] usb 3-1: USB disconnect, device number 11
[  250.508773][  T154] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  250.531670][ T6045] loop0: detected capacity change from 0 to 4096
[  250.547449][ T6045] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  250.659619][ T6045] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  250.670028][ T3652] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  250.678790][ T3652] Bluetooth: hci4: Injecting HCI hardware error event
[  250.687835][ T3651] Bluetooth: hci4: hardware error 0x00
[  250.809309][  T154] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  250.868870][ T3683] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  250.889284][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.901822][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.913559][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  250.951749][ T6062] loop2: detected capacity change from 0 to 1764
[  250.976850][ T6064] tipc: Started in network mode
[  250.984186][ T6064] tipc: Node identity ac1414aa, cluster identity 4711
[  250.996484][ T6064] tipc: Enabled bearer <udp:s>, priority 10
[  251.002889][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.013802][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.025297][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.109293][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.137485][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.152516][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.234979][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.246244][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.247141][ T6074] loop2: detected capacity change from 0 to 1024
[  251.255541][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.274855][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.285100][ T3683] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.311785][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.326505][ T3683] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  251.338560][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.349489][ T3683] usb 2-1: config 0 descriptor??
[  251.383918][   T27] audit: type=1800 audit(1724643145.123:9): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.578" name=A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop2" ino=27 res=0 errno=0
[  251.398960][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.445123][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.471633][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.569078][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.592966][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.603416][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.623834][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.638364][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.708992][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.720080][ T6080] netlink: 'syz.0.581': attribute type 18 has an invalid length.
[  251.737991][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.749578][ T3683] usbhid 2-1:0.0: can't add hid device: -71
[  251.755593][ T3683] usbhid: probe of 2-1:0.0 failed with error -71
[  251.776649][ T3683] usb 2-1: USB disconnect, device number 10
[  251.786065][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  251.834651][ T6084] devpts: called with bogus options
[  251.905258][  T154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  251.914896][  T154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  251.949314][  T154] usb 5-1: config 0 interface 0 has no altsetting 0
[  252.002710][ T4284] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  252.114481][  T154] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  252.125002][ T3652] Bluetooth: hci4: unexpected event for opcode 0x2011
[  252.133015][  T154] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  252.141910][  T154] usb 5-1: Product: syz
[  252.155706][  T154] usb 5-1: Manufacturer: syz
[  252.161654][  T154] usb 5-1: SerialNumber: syz
[  252.169340][  T154] usb 5-1: config 0 descriptor??
[  252.174584][   T26] tipc: Node number set to 2886997162
[  252.221722][  T154] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  252.229224][ T3683] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  252.339020][ T4414] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  252.479016][ T3683] usb 2-1: Using ep0 maxpacket: 8
[  252.528756][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  252.536523][  T154] usb 5-1: USB disconnect, device number 9
[  252.544315][  T154] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  252.598845][ T3683] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  252.607273][ T3683] usb 2-1: config 0 has no interface number 0
[  252.613648][ T3683] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  252.619053][ T4284] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  252.624784][ T3683] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  252.642584][ T4284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.643787][ T3683] usb 2-1: config 0 interface 1 has no altsetting 0
[  252.658784][ T3683] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  252.659054][ T4284] usb 1-1: Product: syz
[  252.667844][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.676327][ T3683] usb 2-1: config 0 descriptor??
[  252.681926][ T4284] usb 1-1: Manufacturer: syz
[  252.690161][ T4284] usb 1-1: SerialNumber: syz
[  252.699931][ T4284] usb 1-1: config 0 descriptor??
[  252.731470][ T3683] hso 2-1:0.1: Failed to find BULK OUT ep
[  252.749011][ T3651] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  252.759226][ T4414] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  252.794158][ T4284] usb 1-1: selecting invalid altsetting 3
[  252.807669][ T4414] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  252.827353][ T4284] comedi comedi0: could not set alternate setting 3 in high speed
[  252.854439][ T4414] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  252.863671][ T4284] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device.
[  252.871934][ T4414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.885001][ T4284] usbdux: probe of 1-1:0.0 failed with error -22
[  252.937955][  T154] usb 2-1: USB disconnect, device number 11
[  252.962283][ T4414] usb 1-1: USB disconnect, device number 6
[  253.200129][ T6093] hpfs: Bad magic ... probably not HPFS
[  253.208927][ T4414] usb 3-1: USB disconnect, device number 12
[  253.519431][ T6111] device bond_slave_0 entered promiscuous mode
[  253.526121][ T6111] device bond_slave_1 entered promiscuous mode
[  253.579030][ T6111] device macsec1 entered promiscuous mode
[  253.588075][ T6111] device bond0 entered promiscuous mode
[  253.616544][ T6111] device bond0 left promiscuous mode
[  253.651326][ T6111] device bond_slave_0 left promiscuous mode
[  253.657349][ T6111] device bond_slave_1 left promiscuous mode
[  253.666245][ T6117] loop4: detected capacity change from 0 to 1024
[  253.735745][ T6117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  253.858876][  T154] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  254.098969][  T154] usb 1-1: Using ep0 maxpacket: 32
[  254.219156][  T154] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  254.228282][  T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.299994][  T154] usb 1-1: config 0 descriptor??
[  254.341380][  T154] gspca_main: sunplus-2.14.0 probing 041e:400b
[  254.548436][ T4165] EXT4-fs (loop4): unmounting filesystem.
[  254.711696][ T6150] loop1: detected capacity change from 0 to 128
[  254.749724][ T6150] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  254.773561][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'.
[  254.787992][ T6150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.922115][   T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  255.309534][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  255.324242][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  255.509024][   T14] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=61.5b
[  255.519489][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.527605][   T14] usb 5-1: Product: syz
[  255.538768][   T14] usb 5-1: Manufacturer: syz
[  255.545623][   T14] usb 5-1: SerialNumber: syz
[  255.570406][   T14] usb 5-1: config 0 descriptor??
[  255.658852][  T154] gspca_sunplus: reg_w_riv err -71
[  255.664095][  T154] sunplus: probe of 1-1:0.0 failed with error -71
[  255.684688][  T154] usb 1-1: USB disconnect, device number 7
[  255.801072][ T1260] ieee802154 phy0 wpan0: encryption failed: -22
[  255.807440][ T1260] ieee802154 phy1 wpan1: encryption failed: -22
[  255.850136][ T4414] usb 5-1: USB disconnect, device number 10
[  255.999640][ T6171] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16)
[  256.038758][ T3682] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  256.261161][ T6175] loop2: detected capacity change from 0 to 1024
[  256.425277][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  256.457416][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  256.500410][ T3682] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  256.522971][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.549487][ T3682] usb 4-1: config 0 descriptor??
[  256.577705][ T4190] hfsplus: b-tree write err: -5, ino 4
[  256.727484][ T6181] loop4: detected capacity change from 0 to 4096
[  257.058861][ T3682] appletouch 4-1:0.0: Geyser mode initialized.
[  257.066057][ T3682] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19
[  257.258814][ T3682] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  257.262402][ T4414] usb 4-1: USB disconnect, device number 6
[  257.320732][ T4414] appletouch 4-1:0.0: input: appletouch disconnected
[  257.508896][ T3682] usb 2-1: Using ep0 maxpacket: 32
[  257.639109][ T3682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.783253][ T6226] loop0: detected capacity change from 0 to 1024
[  257.819993][ T3682] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  257.839006][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.860468][ T6226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  257.865028][ T3682] usb 2-1: Product: syz
[  257.908364][ T3682] usb 2-1: Manufacturer: syz
[  257.944592][ T3682] usb 2-1: SerialNumber: syz
[  257.989663][ T3682] usb 2-1: config 0 descriptor??
[  258.067633][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  258.204308][ T6246] loop0: detected capacity change from 0 to 64
[  258.244669][   T26] usb 2-1: USB disconnect, device number 12
[  258.320855][ T6247] loop4: detected capacity change from 0 to 2048
[  258.337102][ T6247] UDF-fs: bad mount option "=00000000000000000000" or missing value
[  258.392905][ T6246] syz.0.647: attempt to access beyond end of device
[  258.392905][ T6246] loop0: rw=2049, sector=153, nr_sectors = 8 limit=64
[  258.424588][ T3781] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  258.480537][ T6246] syz.0.647: attempt to access beyond end of device
[  258.480537][ T6246] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64
[  258.564358][ T6246] Buffer I/O error on dev loop0, logical block 161, lost async page write
[  258.573788][ T6246] syz.0.647: attempt to access beyond end of device
[  258.573788][ T6246] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64
[  258.631718][ T6246] Buffer I/O error on dev loop0, logical block 162, lost async page write
[  258.687940][ T6246] syz.0.647: attempt to access beyond end of device
[  258.687940][ T6246] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64
[  258.723140][ T6246] Buffer I/O error on dev loop0, logical block 163, lost async page write
[  258.738949][ T6246] syz.0.647: attempt to access beyond end of device
[  258.738949][ T6246] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64
[  258.754063][ T6246] Buffer I/O error on dev loop0, logical block 167, lost async page write
[  258.780263][ T6246] syz.0.647: attempt to access beyond end of device
[  258.780263][ T6246] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64
[  258.804064][ T6246] Buffer I/O error on dev loop0, logical block 169, lost async page write
[  258.868384][ T6246] syz.0.647: attempt to access beyond end of device
[  258.868384][ T6246] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64
[  258.923326][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.951400][ T6246] Buffer I/O error on dev loop0, logical block 171, lost async page write
[  258.978815][ T6246] syz.0.647: attempt to access beyond end of device
[  258.978815][ T6246] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64
[  258.998207][ T6246] Buffer I/O error on dev loop0, logical block 172, lost async page write
[  259.007318][ T6246] syz.0.647: attempt to access beyond end of device
[  259.007318][ T6246] loop0: rw=2049, sector=173, nr_sectors = 1 limit=64
[  259.023053][ T6246] Buffer I/O error on dev loop0, logical block 173, lost async page write
[  259.038854][ T3682] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  259.064839][ T6246] syz.0.647: attempt to access beyond end of device
[  259.064839][ T6246] loop0: rw=2049, sector=174, nr_sectors = 1 limit=64
[  259.088012][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.101858][ T6246] Buffer I/O error on dev loop0, logical block 174, lost async page write
[  259.124748][ T6246] Buffer I/O error on dev loop0, logical block 175, lost async page write
[  259.215679][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.315089][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.408982][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  259.448818][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  259.494957][ T3682] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  259.509726][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.534179][ T3682] usb 3-1: config 0 descriptor??
[  259.672377][ T3652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  259.684921][ T3652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  259.693953][ T3652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  259.706324][ T3652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  259.716592][ T3652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  259.724081][ T3652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  259.841702][ T6282] loop1: detected capacity change from 0 to 512
[  259.848780][ T6282] EXT4-fs: Ignoring removed orlov option
[  259.857384][ T6282] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.874391][ T6282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  259.886618][ T6282] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.665: casefold flag without casefold feature
[  259.900416][ T6282] EXT4-fs (loop1): Remounting filesystem read-only
[  259.908432][ T6282] EXT4-fs (loop1): 1 truncate cleaned up
[  259.918874][ T6282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  260.019266][ T3682] appletouch 3-1:0.0: Geyser mode initialized.
[  260.033082][ T3682] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20
[  260.044174][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[  260.074612][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  260.221977][  T154] usb 3-1: USB disconnect, device number 13
[  260.285242][  T154] appletouch 3-1:0.0: input: appletouch disconnected
[  260.436279][ T6298] loop0: detected capacity change from 0 to 256
[  260.497204][ T6298] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb0200e68, utbl_chksum : 0xe619d30d)
[  260.544995][ T6298] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[  260.575962][ T6298] exFAT-fs (loop0): failed to initialize root inode
[  260.818518][ T6315] loop1: detected capacity change from 0 to 128
[  260.940844][ T6315] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  261.144794][ T6275] chnl_net:caif_netlink_parms(): no params data found
[  261.168822][ T3682] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  261.506379][ T6350] loop1: detected capacity change from 0 to 64
[  261.615079][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.631993][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.650920][ T6275] device bridge_slave_0 entered promiscuous mode
[  261.689071][ T3682] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  261.698168][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.707090][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.729297][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.737195][ T6275] device bridge_slave_1 entered promiscuous mode
[  261.743695][ T3682] usb 3-1: Product: syz
[  261.747863][ T3682] usb 3-1: Manufacturer: syz
[  261.757787][ T3682] usb 3-1: SerialNumber: syz
[  261.776562][ T3682] usb 3-1: config 0 descriptor??
[  261.789074][ T3652] Bluetooth: hci6: command tx timeout
[  261.988092][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.006661][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.033363][ T6324] loop2: detected capacity change from 0 to 256
[  262.085713][ T6324] exfat: Deprecated parameter 'codepage'
[  262.098851][   T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  262.103406][ T6324] exfat: Bad value for 'codepage'
[  262.111797][ T6275] team0: Port device team_slave_0 added
[  262.158469][   T11] device hsr_slave_0 left promiscuous mode
[  262.190064][ T3682] usb 3-1: USB disconnect, device number 14
[  262.225444][   T11] device hsr_slave_1 left promiscuous mode
[  262.228905][ T4411] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  262.247461][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.272335][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.284843][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.290227][ T6372] futex_wake_op: syz.0.688 tries to shift op by 32; fix this program
[  262.303467][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.315898][   T11] device bridge_slave_0 left promiscuous mode
[  262.333981][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.371318][   T11] device veth1_macvtap left promiscuous mode
[  262.377411][   T11] device veth0_macvtap left promiscuous mode
[  262.384887][   T11] device veth1_vlan left promiscuous mode
[  262.393876][   T11] device veth0_vlan left promiscuous mode
[  262.521117][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  262.544854][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  262.566604][   T14] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  262.577438][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.629545][ T4411] usb 2-1: config 0 has an invalid interface number: 242 but max is 0
[  262.637791][ T4411] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.650603][   T14] usb 4-1: config 0 descriptor??
[  262.676578][ T4411] usb 2-1: config 0 has no interface number 0
[  262.689758][ T4411] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7
[  262.714522][ T4411] usb 2-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  262.739955][ T4411] usb 2-1: config 0 interface 242 has no altsetting 0
[  262.943476][ T4411] usb 2-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95
[  262.966258][ T4411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.977030][ T4411] usb 2-1: Product: syz
[  262.981309][ T4411] usb 2-1: Manufacturer: syz
[  262.986050][ T4411] usb 2-1: SerialNumber: syz
[  263.007091][ T4411] usb 2-1: config 0 descriptor??
[  263.119215][   T14] appletouch 4-1:0.0: Geyser mode initialized.
[  263.134190][   T14] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  263.204210][ T6390] ALSA: mixer_oss: invalid OSS volume ''
[  263.327652][   T14] usb 4-1: USB disconnect, device number 7
[  263.341100][ T6364] loop1: detected capacity change from 0 to 2048
[  263.375940][   T14] appletouch 4-1:0.0: input: appletouch disconnected
[  263.414551][ T6364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  263.428113][ T6364] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038 (0x7fffffff)
[  263.525523][   T11] team0 (unregistering): Port device team_slave_1 removed
[  263.533368][   T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  263.608445][   T11] team0 (unregistering): Port device team_slave_0 removed
[  263.677179][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.736596][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.779006][   T26] usb 3-1: Using ep0 maxpacket: 8
[  263.868991][ T3652] Bluetooth: hci6: command tx timeout
[  263.898966][   T26] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  263.907373][   T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.918801][   T26] usb 3-1: config 0 has no interface number 0
[  263.926215][   T26] usb 3-1: config 0 interface 52 has no altsetting 0
[  263.933539][   T26] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  263.945045][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.971479][   T26] usb 3-1: config 0 descriptor??
[  264.750091][   T11] bond0 (unregistering): Released all slaves
[  264.862441][ T6275] team0: Port device team_slave_1 added
[  264.914076][ T3770] usb 2-1: USB disconnect, device number 13
[  265.069214][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.086605][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.112553][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.126547][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.156200][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.190355][ T6409] loop0: detected capacity change from 0 to 512
[  265.194366][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.257248][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.316902][ T6409] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  265.325169][ T6409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  265.359187][ T6409] System zones: 0-1, 15-15, 18-18, 34-34
[  265.379895][ T6409] EXT4-fs (loop0): orphan cleanup on readonly fs
[  265.386360][ T6409] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  265.400304][ T6409] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  265.416861][ T6409] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  265.427980][ T6409] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.701: bad orphan inode 16
[  265.449647][ T6409] ext4_test_bit(bit=15, block=18) = 1
[  265.455634][ T6409] is_bad_inode(inode)=0
[  265.460180][ T6409] NEXT_ORPHAN(inode)=0
[  265.464353][ T6409] max_ino=32
[  265.467653][ T6409] i_nlink=2
[  265.473814][ T6409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  265.488286][ T6275] device hsr_slave_0 entered promiscuous mode
[  265.520748][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  265.550134][ T6275] device hsr_slave_1 entered promiscuous mode
[  265.561948][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.583283][ T6275] Cannot create hsr debugfs directory
[  265.795812][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  265.949173][ T3652] Bluetooth: hci6: command tx timeout
[  266.084240][ T6429] loop0: detected capacity change from 0 to 1024
[  266.105652][ T6429] EXT4-fs: Ignoring removed orlov option
[  266.119454][ T6429] EXT4-fs: Ignoring removed nomblk_io_submit option
[  266.152492][ T6429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  266.164250][ T6429] System zones: 0-1, 3-36
[  266.184116][ T6429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  266.258872][   T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  266.268449][ T4284] usb 3-1: USB disconnect, device number 15
[  266.443380][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  266.629544][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  266.653662][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24589, setting to 1024
[  266.695802][   T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  266.726190][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.763519][   T26] usb 4-1: config 0 descriptor??
[  266.871969][ T6455] loop0: detected capacity change from 0 to 1764
[  267.243344][ T6275] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  267.269228][   T26] appletouch 4-1:0.0: Geyser mode initialized.
[  267.283137][ T6275] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  267.298944][   T26] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22
[  267.392435][ T6275] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  267.427813][ T6275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  267.471839][ T3682] usb 4-1: USB disconnect, device number 8
[  267.510626][ T3682] appletouch 4-1:0.0: input: appletouch disconnected
[  267.579167][ T3781] udevd[3781]: Error opening device "/dev/input/event4": No such device
[  267.588450][ T3781] udevd[3781]: Unable to EVIOCGABS device "/dev/input/event4"
[  267.609323][ T3781] udevd[3781]: Unable to EVIOCGABS device "/dev/input/event4"
[  267.760624][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.835218][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  267.869705][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  267.915841][ T6275] 8021q: adding VLAN 0 to HW filter on device team0
[  267.944909][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  267.966879][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  268.028801][ T3652] Bluetooth: hci6: command tx timeout
[  268.035110][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.042235][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.065132][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  268.085682][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  268.105366][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  268.168181][ T6487] loop1: detected capacity change from 0 to 512
[  268.181981][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.189143][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.250588][ T6487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  268.283126][ T6492] loop3: detected capacity change from 0 to 512
[  268.287413][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  268.320187][ T6487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  268.340320][ T6487] System zones: 1-12
[  268.341956][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  268.366690][ T6487] EXT4-fs (loop1): 1 truncate cleaned up
[  268.379135][ T6492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  268.427242][ T6487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  268.440083][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  268.453765][ T6492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  268.498230][ T6493] loop2: detected capacity change from 0 to 4096
[  268.512716][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  268.529681][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  268.538370][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  268.547584][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  268.556636][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  268.566108][ T6492] System zones: 1-12
[  268.567534][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  268.583760][ T6275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.597263][ T6275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  268.609127][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  268.619169][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  268.631212][ T6492] EXT4-fs (loop3): 1 truncate cleaned up
[  268.636892][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  268.672169][ T6505] ptrace attach of "./syz-executor exec"[4722] was attempted by "./syz-executor exec"[6505]
[  268.760193][ T6487] loop1: detected capacity change from 512 to 0
[  268.801433][ T6502] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #15: comm syz.1.722: corrupted in-inode xattr
[  268.899624][ T6502] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.722: corrupted in-inode xattr
[  268.919390][ T6492] loop3: detected capacity change from 512 to 0
[  269.005586][ T6510] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.723: corrupted in-inode xattr
[  269.050177][ T3634] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  269.071793][ T6510] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.723: corrupted in-inode xattr
[  269.145152][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  269.192080][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  269.229622][ T3643] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  269.255846][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.360518][ T3634] EXT4-fs (loop1): unmounting filesystem.
[  269.387689][ T3643] EXT4-fs (loop3): unmounting filesystem.
[  270.144898][ T6509] loop0: detected capacity change from 0 to 40427
[  270.187610][ T6509] F2FS-fs (loop0): Unrecognized mount option ".oinlirjquota=f2fs" or missing value
[  270.247679][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  270.260627][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  270.349570][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  270.370095][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  270.404011][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  270.418290][ T6546] loop2: detected capacity change from 0 to 256
[  270.459530][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  270.501552][ T6275] device veth0_vlan entered promiscuous mode
[  270.551395][ T6275] device veth1_vlan entered promiscuous mode
[  270.680352][ T6549] loop2: detected capacity change from 0 to 64
[  270.746358][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.923541][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  270.949689][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  270.960818][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.970933][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.980764][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.990607][   T27] audit: type=1326 audit(1724643164.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.0.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f540af79e79 code=0x0
[  270.999372][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.023534][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  271.036076][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.047138][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  271.076358][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  271.085021][ T3642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.097931][ T3642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.106613][ T3642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.117267][ T6275] device veth0_macvtap entered promiscuous mode
[  271.125016][ T3642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.138308][ T3642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  271.147951][ T3642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  271.173704][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.201183][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  271.269893][ T6275] device veth1_macvtap entered promiscuous mode
[  271.328499][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.376159][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.402063][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.422680][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.443970][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.464530][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.493033][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.513298][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.534903][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.547335][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.559872][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.570249][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.581179][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.591616][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.602533][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.612817][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.625615][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.651726][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.668438][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  271.679485][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  271.698495][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  271.800861][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.831462][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.865000][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.895223][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.913272][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.924034][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.935178][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.945293][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.966149][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.994531][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.015450][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.028617][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.054987][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.085394][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.106339][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.136866][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.178075][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.193739][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.231111][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  272.240040][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  272.268947][ T4284] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  272.287727][ T6275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.291879][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.313200][ T6275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.322172][ T6275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.331100][ T6275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.561684][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.613614][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.628773][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.663870][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.682930][ T4284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  272.714800][ T4284] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024
[  272.716750][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  272.745513][ T3752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.762209][ T6560] chnl_net:caif_netlink_parms(): no params data found
[  272.764612][ T3752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.787758][ T4284] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  272.828120][ T4284] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  272.831979][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  272.859098][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.909128][ T6590] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  272.945212][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.977342][ T6610] loop0: detected capacity change from 0 to 128
[  273.039807][ T6610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  273.055367][ T6552] chnl_net:caif_netlink_parms(): no params data found
[  273.069177][ T3652] Bluetooth: hci0: command tx timeout
[  273.084342][ T6610] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  273.229591][ T3652] Bluetooth: hci4: command tx timeout
[  273.285191][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.334060][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.344603][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.356248][ T6560] device bridge_slave_0 entered promiscuous mode
[  273.436323][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.455675][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.466761][ T6560] device bridge_slave_1 entered promiscuous mode
[  273.609123][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.619808][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.637696][ T6552] device bridge_slave_0 entered promiscuous mode
[  273.683359][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.701218][ T4722] EXT4-fs (loop0): unmounting filesystem.
[  273.706365][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.716973][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.757061][ T6552] device bridge_slave_1 entered promiscuous mode
[  273.771903][   T14] usb 3-1: USB disconnect, device number 16
[  273.808133][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.943082][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.978138][ T6560] team0: Port device team_slave_0 added
[  273.991117][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.058630][ T6560] team0: Port device team_slave_1 added
[  274.142409][   T11] tipc: Disabling bearer <udp:s>
[  274.166369][   T11] tipc: Left network mode
[  274.224883][ T6552] team0: Port device team_slave_0 added
[  274.244200][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.257933][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.388796][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.406472][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.415702][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.445182][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.471625][ T6552] team0: Port device team_slave_1 added
[  274.494820][ T6651] loop0: detected capacity change from 0 to 2048
[  274.527253][ T6651] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  274.579373][ T6651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.649017][ T6653] netlink: 240 bytes leftover after parsing attributes in process `syz.2.754'.
[  274.660203][ T6653] netlink: 100 bytes leftover after parsing attributes in process `syz.2.754'.
[  274.674427][ T6653] Zero length message leads to an empty skb
[  274.838342][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.841948][ T6657] loop2: detected capacity change from 0 to 1024
[  274.847648][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.877367][ T6657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.900357][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.908135][ T6657] ==================================================================
[  274.913462][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.918921][ T6657] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x6a7/0x7a0
[  274.918968][ T6657] Write of size 4 at addr ffff88807e434bf8 by task syz.2.756/6657
[  274.918984][ T6657] 
[  274.926944][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.933431][ T6657] CPU: 1 PID: 6657 Comm: syz.2.756 Not tainted 6.1.106-syzkaller #0
[  274.933451][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  274.933461][ T6657] Call Trace:
[  274.933473][ T6657]  <TASK>
[  274.941335][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.943542][ T6657]  dump_stack_lvl+0x1e3/0x2cb
[  275.008786][ T6657]  ? nf_tcp_handle_invalid+0x642/0x642
[  275.014263][ T6657]  ? panic+0x764/0x764
[  275.018330][ T6657]  ? _printk+0xd1/0x111
[  275.022493][ T6657]  ? __virt_addr_valid+0x17f/0x530
[  275.027615][ T6657]  ? __virt_addr_valid+0x17f/0x530
[  275.032718][ T6657]  print_report+0x15f/0x4f0
[  275.037211][ T6657]  ? __virt_addr_valid+0x17f/0x530
[  275.042308][ T6657]  ? __virt_addr_valid+0x17f/0x530
[  275.047399][ T6657]  ? __virt_addr_valid+0x45b/0x530
[  275.052496][ T6657]  ? __phys_addr+0xb6/0x170
[  275.056985][ T6657]  ? udf_write_aext+0x6a7/0x7a0
[  275.061818][ T6657]  kasan_report+0x136/0x160
[  275.066302][ T6657]  ? udf_write_aext+0x6a7/0x7a0
[  275.071148][ T6657]  udf_write_aext+0x6a7/0x7a0
[  275.075817][ T6657]  udf_add_entry+0x17b7/0x3350
[  275.080574][ T6657]  ? rcu_is_watching+0x11/0xb0
[  275.085322][ T6657]  ? udf_add_nondir+0x5d0/0x5d0
[  275.090158][ T6657]  ? udf_new_inode+0xaf9/0xf10
[  275.094905][ T6657]  ? lockdep_softirqs_off+0x420/0x420
[  275.100264][ T6657]  udf_mkdir+0x1a8/0xaa0
[  275.104508][ T6657]  ? udf_symlink+0x1690/0x1690
[  275.109252][ T6657]  ? from_kgid+0x1a3/0x730
[  275.113653][ T6657]  ? make_kgid+0x6f0/0x6f0
[  275.118051][ T6657]  ? inode_permission+0xf7/0x450
[  275.122968][ T6657]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  275.127980][ T6657]  ? security_inode_mkdir+0xb4/0x100
[  275.133263][ T6657]  vfs_mkdir+0x3b6/0x590
[  275.137495][ T6657]  do_mkdirat+0x225/0x360
[  275.141812][ T6657]  ? vfs_mkdir+0x590/0x590
[  275.146208][ T6657]  ? getname_flags+0x1f9/0x4f0
[  275.150972][ T6657]  __x64_sys_mkdirat+0x85/0x90
[  275.155750][ T6657]  do_syscall_64+0x3b/0xb0
[  275.160175][ T6657]  ? clear_bhb_loop+0x45/0xa0
[  275.164869][ T6657]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.170793][ T6657] RIP: 0033:0x7f640cb79e79
[  275.175225][ T6657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.194838][ T6657] RSP: 002b:00007f640d92a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  275.203237][ T6657] RAX: ffffffffffffffda RBX: 00007f640cd15f80 RCX: 00007f640cb79e79
[  275.211191][ T6657] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c
[  275.219141][ T6657] RBP: 00007f640cbe793e R08: 0000000000000000 R09: 0000000000000000
[  275.227099][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.230665][   T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  275.235058][ T6657] R13: 0000000000000000 R14: 00007f640cd15f80 R15: 00007ffdb59f84e8
[  275.250487][ T6657]  </TASK>
[  275.253502][ T6657] 
[  275.255811][ T6657] Allocated by task 22:
[  275.259942][ T6657]  kasan_set_track+0x4b/0x70
[  275.264516][ T6657]  __kasan_kmalloc+0x97/0xb0
[  275.269081][ T6657]  __ipv6_dev_mc_inc+0x426/0xa80
[  275.274002][ T6657]  addrconf_dad_work+0x420/0x16b0
[  275.279019][ T6657]  process_one_work+0x8a9/0x11d0
[  275.283950][ T6657]  worker_thread+0xa47/0x1200
[  275.288608][ T6657]  kthread+0x28d/0x320
[  275.292664][ T6657]  ret_from_fork+0x1f/0x30
[  275.297062][ T6657] 
[  275.299387][ T6657] The buggy address belongs to the object at ffff88807e434800
[  275.299387][ T6657]  which belongs to the cache kmalloc-512 of size 512
[  275.313418][ T6657] The buggy address is located 504 bytes to the right of
[  275.313418][ T6657]  512-byte region [ffff88807e434800, ffff88807e434a00)
[  275.327189][ T6657] 
[  275.329500][ T6657] The buggy address belongs to the physical page:
[  275.335915][ T6657] page:ffffea0001f90d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e434
[  275.346046][ T6657] head:ffffea0001f90d00 order:2 compound_mapcount:0 compound_pincount:0
[  275.354354][ T6657] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  275.362341][ T6657] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888012841c80
[  275.370909][ T6657] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  275.379576][ T6657] page dumped because: kasan: bad access detected
[  275.385989][ T6657] page_owner tracks the page as allocated
[  275.391688][ T6657] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1f2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_MEMALLOC|__GFP_HARDWALL), pid 3685, tgid 3685 (kworker/1:8), ts 61518147261, free_ts 61488225261
[  275.415031][ T6657]  post_alloc_hook+0x18d/0x1b0
[  275.419779][ T6657]  get_page_from_freelist+0x322e/0x33b0
[  275.425323][ T6657]  __alloc_pages+0x28d/0x770
[  275.429916][ T6657]  alloc_slab_page+0x6a/0x150
[  275.434597][ T6657]  new_slab+0x84/0x2d0
[  275.438650][ T6657]  ___slab_alloc+0xc20/0x1270
[  275.443324][ T6657]  __kmem_cache_alloc_node+0x19f/0x260
[  275.448875][ T6657]  __kmalloc_node_track_caller+0xa0/0x220
[  275.454591][ T6657]  __alloc_skb+0x135/0x670
[  275.458998][ T6657]  __netdev_alloc_skb+0xfb/0x500
[  275.463919][ T6657]  __ieee80211_beacon_get+0xc7d/0x2110
[  275.469358][ T6657]  ieee80211_beacon_get_tim+0xb1/0x5d0
[  275.474813][ T6657]  mac80211_hwsim_beacon_tx+0x1d2/0xaa0
[  275.480341][ T6657]  __iterate_interfaces+0x21e/0x4b0
[  275.485526][ T6657]  ieee80211_iterate_active_interfaces_atomic+0xd4/0x170
[  275.492531][ T6657]  mac80211_hwsim_beacon+0xd0/0x1e0
[  275.497715][ T6657] page last free stack trace:
[  275.502381][ T6657]  free_unref_page_prepare+0xf63/0x1120
[  275.507915][ T6657]  free_unref_page+0x33/0x3e0
[  275.512579][ T6657]  qlist_free_all+0x76/0xe0
[  275.517072][ T6657]  kasan_quarantine_reduce+0x156/0x170
[  275.522524][ T6657]  __kasan_slab_alloc+0x1f/0x70
[  275.527358][ T6657]  slab_post_alloc_hook+0x52/0x3a0
[  275.532465][ T6657]  __kmem_cache_alloc_node+0x137/0x260
[  275.537915][ T6657]  kmalloc_trace+0x26/0xe0
[  275.542322][ T6657]  nsim_fib_event_work+0x19be/0x4120
[  275.547596][ T6657]  process_one_work+0x8a9/0x11d0
[  275.552529][ T6657]  worker_thread+0xd04/0x1200
[  275.557184][ T6657]  kthread+0x28d/0x320
[  275.561229][ T6657]  ret_from_fork+0x1f/0x30
[  275.565633][ T6657] 
[  275.567952][ T6657] Memory state around the buggy address:
[  275.573561][ T6657]  ffff88807e434a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.581618][ T6657]  ffff88807e434b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.589674][ T6657] >ffff88807e434b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  275.597799][ T6657]                                                                 ^
[  275.605752][ T6657]  ffff88807e434c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  275.613792][ T6657]  ffff88807e434c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  275.621828][ T6657] ==================================================================
[  275.634237][ T3652] Bluetooth: hci0: command tx timeout
[  275.639713][ T3652] Bluetooth: hci4: command tx timeout
[  275.647960][ T6657] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  275.655172][ T6657] CPU: 1 PID: 6657 Comm: syz.2.756 Not tainted 6.1.106-syzkaller #0
[  275.663151][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  275.673191][ T6657] Call Trace:
[  275.676454][ T6657]  <TASK>
[  275.679368][ T6657]  dump_stack_lvl+0x1e3/0x2cb
[  275.684037][ T6657]  ? nf_tcp_handle_invalid+0x642/0x642
[  275.689484][ T6657]  ? panic+0x764/0x764
[  275.693537][ T6657]  ? preempt_schedule_common+0xa6/0xd0
[  275.698990][ T6657]  ? vscnprintf+0x59/0x80
[  275.703304][ T6657]  panic+0x318/0x764
[  275.707180][ T6657]  ? check_panic_on_warn+0x1d/0xa0
[  275.712285][ T6657]  ? memcpy_page_flushcache+0xfc/0xfc
[  275.717648][ T6657]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  275.723609][ T6657]  ? _raw_spin_unlock+0x40/0x40
[  275.728441][ T6657]  ? print_report+0x4a3/0x4f0
[  275.733101][ T6657]  check_panic_on_warn+0x7e/0xa0
[  275.738019][ T6657]  ? udf_write_aext+0x6a7/0x7a0
[  275.742858][ T6657]  end_report+0x66/0x110
[  275.747083][ T6657]  kasan_report+0x143/0x160
[  275.751570][ T6657]  ? udf_write_aext+0x6a7/0x7a0
[  275.756426][ T6657]  udf_write_aext+0x6a7/0x7a0
[  275.761091][ T6657]  udf_add_entry+0x17b7/0x3350
[  275.765845][ T6657]  ? rcu_is_watching+0x11/0xb0
[  275.770594][ T6657]  ? udf_add_nondir+0x5d0/0x5d0
[  275.775434][ T6657]  ? udf_new_inode+0xaf9/0xf10
[  275.780187][ T6657]  ? lockdep_softirqs_off+0x420/0x420
[  275.785569][ T6657]  udf_mkdir+0x1a8/0xaa0
[  275.789811][ T6657]  ? udf_symlink+0x1690/0x1690
[  275.794560][ T6657]  ? from_kgid+0x1a3/0x730
[  275.798966][ T6657]  ? make_kgid+0x6f0/0x6f0
[  275.803370][ T6657]  ? inode_permission+0xf7/0x450
[  275.808291][ T6657]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  275.813299][ T6657]  ? security_inode_mkdir+0xb4/0x100
[  275.818565][ T6657]  vfs_mkdir+0x3b6/0x590
[  275.822793][ T6657]  do_mkdirat+0x225/0x360
[  275.827106][ T6657]  ? vfs_mkdir+0x590/0x590
[  275.831507][ T6657]  ? getname_flags+0x1f9/0x4f0
[  275.836253][ T6657]  __x64_sys_mkdirat+0x85/0x90
[  275.841000][ T6657]  do_syscall_64+0x3b/0xb0
[  275.845401][ T6657]  ? clear_bhb_loop+0x45/0xa0
[  275.850063][ T6657]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.855940][ T6657] RIP: 0033:0x7f640cb79e79
[  275.860335][ T6657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.880009][ T6657] RSP: 002b:00007f640d92a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  275.888403][ T6657] RAX: ffffffffffffffda RBX: 00007f640cd15f80 RCX: 00007f640cb79e79
[  275.896356][ T6657] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c
[  275.904308][ T6657] RBP: 00007f640cbe793e R08: 0000000000000000 R09: 0000000000000000
[  275.912260][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.920214][ T6657] R13: 0000000000000000 R14: 00007f640cd15f80 R15: 00007ffdb59f84e8
[  275.928192][ T6657]  </TASK>
[  275.931443][ T6657] Kernel Offset: disabled
[  275.935752][ T6657] Rebooting in 86400 seconds..