last executing test programs: 2.01246043s ago: executing program 2 (id=3): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x107382, 0x1d0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040"], 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) pwrite64(r3, &(0x7f00000020c0)="2dfac14f76b2", 0x6, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 1.223096971s ago: executing program 0 (id=1): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75pcNWjiAAAAQF/x/90Xv1qIeT375iDN6089evBc1Xil/N8cLv+P3dJXBQAAANyMI19sf7iqXsr/reHy//htnTUAAACwFO98OPFBVb2U/2dvnP/rSf5fnS/zKx+yTj/Fv0I4NBnCxMLKXFb4ObSf7hYAAACAWyTm9D8/3flD1X6l/D9Xff//eKeDeP1/z/3/Ctf/hzDVW8ju+vdkXgAAAIB7Svl6/nh7/OzJBf2evz/s9f8P/O/gq1XHL+X//cPl/3pxeSuf/wcAAADL8F97/t/20jjVBt3//76P3v2lqn8p/7eHy/9xuab48k7E9+e9yRDWL6zkdxP8Jh5uV1KYHysUOlpJj22xR16YHy8UOuaSHpsnQ3hwYWV/Uvh/LLSTwpW1eeFIUjgdC/n50C0cSwon4pn2+dp8umnh+1jIL7CYj1dQrOleEpH0uNqvx0Lhhj3Odg8OAABwT4nhOc+yY73NkEbZ+dqgHVYP2mFk0A71QTuMJjukO/bbHmZ7C3F7+8zGpT3//8hw+T++Fflz/vpd/x/i9f/5cw271//PxkIjKczHQiu9Y0ArHiMLux/HYzRaeY8r67sFAAAAuKvF7wXqKzwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ie9e42Rq7oPAH72Od6H1wtJFUKjZJPUOG7i9domD7VUWVOqRqQ064aCqohiY6/J4gU7tikxCpGxiWiEoLRBSj4UYRRFNR+gViAiKSBcpDhC5RFRFQUQKLSGKIiUkkSkCVKoZu89s3fO3Xks9hov/f0k75yZ/3neeXjOvXfOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/n84/JWr/rZZ/OHfnvP0cxeOX7Zv/YUvX3POqY+HMDHzeEcW7ui//tbxn9959l377lt72z1Hz/1wb14uj4eB6p/O/M51sdajS0O4tyOE7jSwajAL9OT3B2N97xkM4ZQwG6iVmOzPSqQNh+/3hXAgzAZqVX2vL4TBQuD8Jx568MZq4pa+EJaHECppG89Wsjb60sAZvVmgPw1s784Cv3ojUwt8tzMLwDGLb4bai/7QRH2G4bnLNXj99Ry3jr210uF1xcRw43w/W7/AnSroTR+YOKanrVQdC6L09jjs3bYI3m2l7Xyzp634RSr/hvLGbKgSOrdMbt105fTu+EhnGB3talTTAj3PT736pc3zSS+a12HswPBxeR3e9NjyO7tWnvfoPauWv3jwI/tfOtZu/qiwSYvphVYJ+Wtu0TyP0bjPk0Xw9it9SxrxpSuEsPXzv/eZZvHS/H+4+fw/vpzjbWdd7ljr60PZ3Dw+MhgTrwxlc3MAAABYNBbDXtPtow98oll9pfn/SHvH/+Mh/3wyn432cAjjM4n9y0I4bebxLHBHbO6SZSG8fyY1UR9YnwQOh/DumcTKWlVJiSWxxEgS+MlQHhhPAkdiYCIJfCsGbk4C18XAoSSwOQYOJ4GzYyBM1Y/j94fycbQd6IuBjdlGPBTPQvjFUGwt2VbP1KoCAAA4TvLZYU/93cK5DseaIU4vD/W1yhDPwG6YoZLUkM5ga9OqhjV0t6qhs1UNtXHvbT78Us0drWounYbRUZ/h1l/+zWdDE6X5/1jz+X9ljo50lI7/h7Bh5m/M3ZlHpmvxjRN1GQAAAIBjMPC/z3+zWbw0/x9v7/z/uE+kq5A5PBJ3Q2xbFsJYfSCr9g/Lgeyo90AeAAAAgMWgdjy+dix8Kr/NTtFO59Pl/BPzzB8P/I/Pmb/38P0bm/W3NP+faO/8//7626wTR2IvvrYshCWFwA9iL6uBGSMx8ONP1gfy8R+JG+CGWFV+YkKtqhtiiY0xMJYEDjQq8cNaidPqA/mTVWt8f20cU3mJQgAAAABOuLg7IB6Xj+f/f+A3a69qVq40/984v/P/Z+bBpdP7pwdCWN0dQlf6w4BH+rOFAWNgsCNPPNCf1dWVVnVtfwhnVQeWVvV8vv5/d7rG4BN9WVUxcNoHDr56RjXxzb4QVhcDT37u9o9WE7uTQK3xv+wL4X3V0aaNf2dJ1nhP2vjXl4Tw3kKgVtUlS0KoNtabVvVQJb+OQVrVP1dCeEchUKvqY5UQ9gQAFqn4X+mW4oO79ly9bdP09OTOBUzEffh9YevU9OTo5u3TWyoN+rQl6XPdMkbXlsfU7pVvnsmXKLrg7g2D7aRrvxMcK7aV78cvnTiY34/fhXpmxrm2p+7uunTIH/pguYlQ+CbVaMidCzzk/mIls09iqf6YvzcMhCVX7prcOfrFTbt371yT/W03+9rsbzzMlG2rNem26p+rb228PBqulpV4s9tqRbGS1bsv37F6156rV01dvunSyUsnr1jzsbVjZ46tG/v4mauroxrL/rYY6oq5qk6G+sbtbY7rOA719O5CJSfiU0NCQmKxJbYPrGj6f3Jp/r+j+fw/furET/58fYZGx/+H42H+7PHZw/wbY+BAu8f/hxsdza+dGDCSBPbGwF6H+QEAAHh7iJP8uDcz7pX+6crvvNisXGn+v7e93/8fp/X/a0vXn9tomf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8H6/1fWAskm+YX1/wEAgLeDE7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAACePL//ZVb/TLF6a/x9ob/5/4tf/C43O/x9pFJhotDCg9f8AAABYpBqt/zd8ff/FzcqV5v+H2pv/x9MuOutyx1pfH8rWtAvpmnavDNV+MgAAAACLQ2cYHe1pM2/dyqjr33ybT+VLgTZLFz3/J0fnd/7/4fbm/3W/y7jpseV3dq0879HX71m1/MWDH9n/0uzxfwAAAGDhtLtfAgAAAAAAAAAAAAAAeOs9/x/71jWLl37/HzbMPN7o9//xun/x9wXvrMsda229/l9+//xP37VnZsnCR4ZC+GAxsG3ftlNCfm3+FcXAgxetfFc1sS8tcf9zZ79QTVycBj616tTXqomzksDGuEjiu9NAvKria0uTQFxe8d/TQNweh9JAbx746tJsHB3ptvrpYLatOtJt9fRgCMsKgdq2uncwa6MjHeAtSaA2wC+kgTjAP88DnWmv7hrIehUDg7HobQNZrwAAOGnFb4E9YevU9ORY/Aofb0/vrr+N6pYsu7ZcbUebzT+TL012wd0bBttJd6XfRWevNd4TKtUhrCl9XS1m6ZgZ5fGppcWme2eDIbda7a2zQbnUfDddb+MR9WUjGt28fXpLT8uBr2udZW13yyxrSpOdYpbOmU3aRi1t9KWNEbW5bdrocrzfGUZHu5JcfxCDw6FOq1dEu7/XL67z1+hVUMxzxdH9v2pWX2n+P9ze/L9SHNdr+cUA9sYr6/3dMsv8AwAAwML66vpffyP+++z1Dz/ZLG9p/j/S3vw/7sHKDwVnezsOx+v/718Wwsyl9YezwB2xuUuWhfD+mdRELJFdUP/cWGIsC9wRd5isjCU2TtRXtSQGDiWBnwzlgcNJ4EgM5HspDoZ8V87fD4Xw0ZnUhvoSO2KJ4STwmRgYSQKjMTCWBJbGwHgSeHlpHphIAv8WA2GqflvdvTTfVgAAAPORz7N66u+GdJ53qLtVho5WGfpbZehslaHSKkOjUcT7344ZepKTVzoKmXrSWvuSWkoZ4sXw592vUobww/qcacFS0/H8g9r5Bh31Ge77RHclNFGa/4+1N//vr7/NWj8S5/+z1//LAj+I3ftaPHV8JAZ+/Mn6QL5j4Eic7N5Qq2oiL5FP2m+IJcZjYCQJ7IiB8SSwcUMeOPCu+kA+0641vr/W+FReohAAAACAEy7uIIi7aeL8/7ZdXxloVi6f/4/U5v/j7c3/Y3sDxcaui7UeXRrCvR2zvakFVg1mgbgfYzD+PP49gyGcUtjBUSsx2Z+V6E0aDt/vy36h3ptW9b2+7McH8f75Tzz04I3VxC19ISwv7H2ptfFsJWujLw2c0ZsF+tPA9u4sEPf81ALf7cwCcMxqewXjCyo/1aVmeO5yDV5/b5drgqbDK+0DnSPfXL+5WiilHa75PtWa+T1tTfffctyU3h6HvdsW47tt2Lut+EUq/4byxmyoEjq3TG7ddOX07vhI8ZesJQv0PBd/pdpO+ji8Dve++d62Vkk7MJZ8fIzNXW7u12FHrO6mx5bf2bXyvEfvWbX8xYMf2f9S291oIP5Q+KFr/nXwR4XNu9AqIX/NLbrPkwmfJ4vxv4ERT1sIYcPLX7+hWbx0/H+ivfl/d3I749dxY+5aFsKHChv3kbj5/3hZ9jlYCGSfku8oB7JD7v811PCTEwAAAI632u6O2v6Cqfw2OyE8nSeX80/MM3/cXzE+Z/52+93/1xctbxYvzf83Np//L0m66fi/4/8sEMf/53Sy74pekj6w95h2RZeqY0E4/j+nk/3d5vj/nBz/d/x/Lo7/t+D4/5xO9qet9C1phy9dIYQX/+iBp5vFS/P/He3N/63/N/eifbX1/zY2Wv9vR6P1//Za/w8AAFhQDRaaS+d5pdX7ShnS1ftKGVouENhyiUHr/817/b8XTn/2N6GJ0vx/b3vz//hyGCi2vljW/xvZ0KCqm2Ngh4UBAQAAOBk12kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAW+u+f/ifLc3iD//2nKefu3D8sn3rL3z5mnNOfTyEqZnHO7JwR//1t47//M6z79p339rb7jl67ocrebme/PZ363LHWl8fCuFA4ZHBmHhlqHpnNnD+p+/a011NPDIUwgeLgW37tp1STXxrKIQVxcCDF618VzWxLy1x/3Nnv1BNXJwGPrXq1NeqibPyQEfa3X9cmnW3I+3ujUtDWFYI1Lp72dL6qmpt/Gke6Ezb+KfBrI0YGIxFvzGYtRED07HE1JIQVneH0JVW9XAlq6orrepfKllVXWlVX66EcFYIoTut6rnerKrudOSP92ZVxcBpHzj46hnVxIHeEFYXA09+7vaPVhNfSAK1xv+iN4T3VV8yaePf7ska70kbv6UnhPeGEHrTEr/szkr0piWe7w7hHYVArfHPd4ewJ/C2ED986j7Rdu25etum6enJnQuY6M3b6gtbp6YnRzdvn95SSfrUSEch/ca1b37sz7z6pc3V2wvu3jDYTro7L9cz0+W1PXV3153svY/96i9WMvt8lOqP+XvDQFhy5a7JnaNf3LR798412d92s6/N/nbl0WxbrVks22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOxtWNnjq0b+/iZq6ujGsv+Nh5qb9tDvf3ED/X07kIlJ+IDQOLEJqqvy5OgGxKLOtFZ9+k2drJ/kJe+6M92tCdUZj6gS9OKYpaOmVEej0GvT4Irjv+gR+L3lJYjWlOaOJSyrG2dZV1pMjGbpS/LMvO9rjQ5LNbUObNJ4/3OMDra1Wg7DNffLW7en6Wbdx6eyjdju2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1mH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//5DAgkw==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0xc400941b, &(0x7f0000000000)={0x1, 0x500000}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r2) 566.296244ms ago: executing program 1 (id=2): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000490000000000000008000f0001000000", 0x24) 406.632644ms ago: executing program 3 (id=4): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000080)="189174", 0x3, 0x8000, 0x0, 0x0) 0s ago: executing program 3 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f8, &(0x7f00000005c0)="$eJzs3M9u1NoZAHA7JGqUSqjSVS/cXBa+3C7ogsEzKUERK9fjSQwz45HtoLCqUElQ1IRWhUqFHRvaSu1DsO0TdNU3Qn2EVp6ZUCB/hgJluOj3k+CcsT+f8x1rdI7G0XEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARh2o3jdhj08+H2TnS6tFsWgzPOH7X3jzeKM/oNgrD5FywvBxcnhy5+9d/TP23+uxxcmHy6ECw3xXLw9Mdf/+TmV4sLR9efkdAn8ejJ09/cOzjY/f28E5mTzWyYV0U+SDazKK+KaGN9Pb621auiXt7PqrtVnQ2itMySuiijK+nPo/bGxlqUte4W28PNbtLPjg7euNqJ4/XoVmuUJWVVDK/dalXpVt7v58PNcUxzuom50XwRb+d1VGfJIIr29g9212Yl2QS13yWoMyuoE3c67Xan016/vnH9RhwvHjsQvyU4FjH/Ly3z9ZFncHh//56u/wAAAMCXKxw/Y29+/y+Nn8OHQS/vZ/G80wIAAAA+ovFf/i80xVJTuxiEfv8DAADAl+bPM/fYVaMfhf/8V1CWS+Gz0c7PwsOkiUsOz02uO/d2i3VvNTw/bWRcrC9OP6XZpfCbSdA3R9Evp8XerDzCj5BA8NdgdRKzen9S3j86M+llpZf3s1Za9G+2gyQ5v1BnO/UfHu7/MRgP/y/Dwfkw2Ns/2G39+rcH98e5PGtaeXY43UBxbB/FGbk8frXv8eQRL40fxEz7XZn0G78+/oXJ5Qv/Q5/Pg28nMd+uTMqVN8e/3PTZbp02+mkW7Q8c+fPg0iTm0pXvm+L7Kydk0ZmVRef1LN7rXrxDFmuzslj7wCwA5mVvxioUHl/432OW+zSr+/Pgu0nMd6vjiXVx9YQZPZ41o8cfuLr9Pbg8ibl8FHzaGtv0+7e3VtUXzQUvTu236nfC5haee3z4u+DrR0+eXt0/vPdg98Huw05nbT3+RRxf7wRL42FMC2sPACfIypfhSv2nsCzz0a/aGxvtpN7KorJIb0dl3t3MonxYZ2W6lQw3s2hUFnWRFv2mcifvZlVUbY9GRVlHvaKMRkWV74zf/BJNX/1SZYNkWOdpNepnSZVFaTGsk7SOunmVRqPtX/bzaisrxxdXoyzNe3ma1HkxjKpiu0yzVhRVWfZaYN7NhnXey5vqMBqV+SAp70Z3iv72IIu6WZWW+aguJg0e9ZUPe0U5GDfbmvfNBoDPxKs32P0fK/MeIwDwJqs0AAAAAAAAAAAAAAB8/j7F/j8VFZUfWmXeMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHPefAAAA///v3qTr") fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x89, 0x1, @private=0xe0000002, @local}, '\x00\x00'}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 82.010316][ T5775] cgroup: Unknown subsys name 'net' [ 82.144557][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.879999][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.100995][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.109841][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.123026][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.130556][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.131837][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.145470][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.146014][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.161049][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.169605][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.177062][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.185769][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.188623][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.195271][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.202075][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.213399][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.215730][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.222292][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.236299][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.243684][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.250940][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.254508][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.267241][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.275347][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.285114][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.681192][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.889576][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.898879][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.906774][ T5786] bridge_slave_0: entered allmulticast mode [ 86.913970][ T5786] bridge_slave_0: entered promiscuous mode [ 86.942937][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.950881][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.958258][ T5786] bridge_slave_1: entered allmulticast mode [ 86.965820][ T5786] bridge_slave_1: entered promiscuous mode [ 86.973079][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.045082][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.084093][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.097460][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.225160][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 87.241308][ T5786] team0: Port device team_slave_0 added [ 87.265758][ T5786] team0: Port device team_slave_1 added [ 87.352579][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.365939][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.373191][ T5785] bridge_slave_0: entered allmulticast mode [ 87.383233][ T5785] bridge_slave_0: entered promiscuous mode [ 87.394238][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.404028][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.413845][ T5785] bridge_slave_1: entered allmulticast mode [ 87.424005][ T5785] bridge_slave_1: entered promiscuous mode [ 87.502439][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.509828][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.536880][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.550732][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.557841][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.583996][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.656027][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.693808][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.701228][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709050][ T5788] bridge_slave_0: entered allmulticast mode [ 87.716698][ T5788] bridge_slave_0: entered promiscuous mode [ 87.725678][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.732858][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.741737][ T5788] bridge_slave_1: entered allmulticast mode [ 87.749153][ T5788] bridge_slave_1: entered promiscuous mode [ 87.777095][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.876353][ T5786] hsr_slave_0: entered promiscuous mode [ 87.882978][ T5786] hsr_slave_1: entered promiscuous mode [ 87.893356][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.905551][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.912712][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.920077][ T5787] bridge_slave_0: entered allmulticast mode [ 87.927386][ T5787] bridge_slave_0: entered promiscuous mode [ 87.935727][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.942896][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.950188][ T5787] bridge_slave_1: entered allmulticast mode [ 87.957471][ T5787] bridge_slave_1: entered promiscuous mode [ 87.980332][ T5785] team0: Port device team_slave_0 added [ 87.989511][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.053521][ T5785] team0: Port device team_slave_1 added [ 88.063584][ T5788] team0: Port device team_slave_0 added [ 88.074087][ T5788] team0: Port device team_slave_1 added [ 88.094101][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.108258][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.203061][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.211166][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.237866][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.264825][ T5787] team0: Port device team_slave_0 added [ 88.271565][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.281501][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.308811][ T5801] Bluetooth: hci1: command tx timeout [ 88.309101][ T5795] Bluetooth: hci2: command tx timeout [ 88.315108][ T5801] Bluetooth: hci3: command tx timeout [ 88.326754][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.340574][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.347757][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.374951][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.385783][ T5801] Bluetooth: hci0: command tx timeout [ 88.399748][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.406904][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.433585][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.446742][ T5787] team0: Port device team_slave_1 added [ 88.524829][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.532074][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.559231][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.573803][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.581082][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.607296][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.642330][ T5788] hsr_slave_0: entered promiscuous mode [ 88.650098][ T5788] hsr_slave_1: entered promiscuous mode [ 88.658022][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.667064][ T5788] Cannot create hsr debugfs directory [ 88.708224][ T5785] hsr_slave_0: entered promiscuous mode [ 88.716593][ T5785] hsr_slave_1: entered promiscuous mode [ 88.722904][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.731292][ T5785] Cannot create hsr debugfs directory [ 88.834787][ T5787] hsr_slave_0: entered promiscuous mode [ 88.841844][ T5787] hsr_slave_1: entered promiscuous mode [ 88.848604][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.856275][ T5787] Cannot create hsr debugfs directory [ 89.175455][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.193407][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.218008][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.231646][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.302047][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.324626][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.335195][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.352332][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.431922][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.456108][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.483715][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.493723][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.578177][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.590966][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.601908][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.616609][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.747649][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.821251][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.852294][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.859749][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.870704][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.878170][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.902922][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.941917][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.978260][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.001922][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.009157][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.048109][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.058646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.065844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.083222][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.125416][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.141727][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.148965][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.167578][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.174806][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.210192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.217434][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.288067][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295396][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.385793][ T5801] Bluetooth: hci3: command tx timeout [ 90.391288][ T5801] Bluetooth: hci2: command tx timeout [ 90.397462][ T5795] Bluetooth: hci1: command tx timeout [ 90.464770][ T51] Bluetooth: hci0: command tx timeout [ 90.638744][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.808086][ T5786] veth0_vlan: entered promiscuous mode [ 90.833778][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.846669][ T5786] veth1_vlan: entered promiscuous mode [ 90.969119][ T5785] veth0_vlan: entered promiscuous mode [ 90.988038][ T5786] veth0_macvtap: entered promiscuous mode [ 91.007469][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.023687][ T5786] veth1_macvtap: entered promiscuous mode [ 91.040930][ T5785] veth1_vlan: entered promiscuous mode [ 91.076088][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.101927][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.122288][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.145921][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.155328][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.164051][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.173058][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.229176][ T5785] veth0_macvtap: entered promiscuous mode [ 91.283656][ T5785] veth1_macvtap: entered promiscuous mode [ 91.357862][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.368211][ T5788] veth0_vlan: entered promiscuous mode [ 91.374644][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.418988][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.430604][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.443760][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.469020][ T5787] veth0_vlan: entered promiscuous mode [ 91.481761][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.492722][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.508543][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.521653][ T5787] veth1_vlan: entered promiscuous mode [ 91.531779][ T5788] veth1_vlan: entered promiscuous mode [ 91.544078][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.553284][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.562070][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570877][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.582878][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.601232][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.688758][ T5787] veth0_macvtap: entered promiscuous mode [ 91.715816][ T5788] veth0_macvtap: entered promiscuous mode [ 91.758995][ T5788] veth1_macvtap: entered promiscuous mode [ 91.768558][ T5787] veth1_macvtap: entered promiscuous mode [ 91.841195][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.858618][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.871838][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.897662][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.902125][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.925595][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.932297][ T5879] loop2: detected capacity change from 0 to 2048 [ 91.950250][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.955554][ T5879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 91.972672][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.974411][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.986982][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.007044][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.018223][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.030099][ T5879] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.043192][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.061917][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.073382][ T5879] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 92.090579][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.100094][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.112302][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.123922][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.135509][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.171917][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.187655][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.198088][ T28] audit: type=1800 audit(1761663483.414:2): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 92.223135][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.236476][ T9] cfg80211: failed to load regulatory.db [ 92.238187][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.256988][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.266122][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.313087][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.325497][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.338323][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.349265][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.360492][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.371499][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.402164][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.417520][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.434215][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.435883][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.445647][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459865][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.470934][ T51] Bluetooth: hci1: command tx timeout [ 92.477062][ T51] Bluetooth: hci2: command tx timeout [ 92.482772][ T51] Bluetooth: hci3: command tx timeout [ 92.488608][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545309][ T51] Bluetooth: hci0: command tx timeout [ 92.655072][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.759150][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.776068][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.866225][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.880512][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.980861][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.003755][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.102808][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.147105][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.208280][ T28] audit: type=1800 audit(1761663484.434:3): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1414 res=0 errno=0 [ 93.465814][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.546784][ T5887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.567885][ T5890] ubi31: attaching mtd0 [ 93.605629][ T5890] ubi31: scanning is finished [ 93.610407][ T5890] ubi31: empty MTD device detected [ 93.685750][ T5890] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.717131][ T5890] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.758892][ T5890] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 93.803772][ T5890] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 93.814699][ T5884] loop0: detected capacity change from 0 to 32768 [ 93.850855][ T5887] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 93.855673][ T5890] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.873168][ T5884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5884) [ 93.887461][ T1142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.922084][ T5890] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.931602][ T5879] [ 93.933983][ T5879] ============================================ [ 93.940174][ T5879] WARNING: possible recursive locking detected [ 93.946390][ T5879] syzkaller #0 Not tainted [ 93.950844][ T5879] -------------------------------------------- [ 93.957025][ T5879] syz.2.3/5879 is trying to acquire lock: [ 93.962770][ T5879] ffff88801bf70d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_free_blocks+0x8ff/0x16e0 [ 93.967898][ T5890] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 392211764 [ 93.972496][ T5879] [ 93.972496][ T5879] but task is already holding lock: [ 93.972505][ T5879] ffff88801bf70d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_new_block+0xea7/0x1a70 [ 93.999605][ T5879] [ 93.999605][ T5879] other info that might help us debug this: [ 94.007681][ T5879] Possible unsafe locking scenario: [ 94.007681][ T5879] [ 94.015140][ T5879] CPU0 [ 94.018432][ T5879] ---- [ 94.021719][ T5879] lock(&sbi->s_alloc_mutex); [ 94.026592][ T5879] lock(&sbi->s_alloc_mutex); [ 94.031370][ T5879] [ 94.031370][ T5879] *** DEADLOCK *** [ 94.031370][ T5879] [ 94.039547][ T5879] May be due to missing lock nesting notation [ 94.039547][ T5879] [ 94.047882][ T5879] 4 locks held by syz.2.3/5879: [ 94.052736][ T5879] #0: ffff88807d9a8418 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x5b9/0xf70 [ 94.061998][ T5879] #1: ffff88805e210f88 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: udf_file_write_iter+0x6e/0x620 [ 94.072991][ T5879] #2: ffff88805e210da0 (&ei->i_data_sem#2){++++}-{3:3}, at: udf_map_block+0x284/0x4500 [ 94.082870][ T5879] #3: ffff88801bf70d28 (&sbi->s_alloc_mutex){+.+.}-{3:3}, at: udf_new_block+0xea7/0x1a70 [ 94.092826][ T5879] [ 94.092826][ T5879] stack backtrace: [ 94.098740][ T5879] CPU: 0 PID: 5879 Comm: syz.2.3 Not tainted syzkaller #0 [ 94.105865][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.115947][ T5879] Call Trace: [ 94.119244][ T5879] [ 94.122198][ T5879] dump_stack_lvl+0x16c/0x230 [ 94.126898][ T5879] ? show_regs_print_info+0x20/0x20 [ 94.132319][ T5879] ? print_deadlock_bug+0x435/0x5d0 [ 94.137534][ T5879] __lock_acquire+0x5d40/0x7c80 [ 94.142415][ T5879] ? verify_lock_unused+0x140/0x140 [ 94.147630][ T5879] ? mark_lock+0x94/0x320 [ 94.152062][ T5879] ? __lock_acquire+0x1334/0x7c80 [ 94.157163][ T5879] lock_acquire+0x197/0x410 [ 94.161696][ T5879] ? udf_free_blocks+0x8ff/0x16e0 [ 94.166743][ T5879] ? __might_sleep+0xe0/0xe0 [ 94.171447][ T5879] ? read_lock_is_recursive+0x20/0x20 [ 94.176842][ T5879] ? mark_lock+0x94/0x320 [ 94.181276][ T5879] __mutex_lock+0x129/0xcc0 [ 94.185801][ T5879] ? udf_free_blocks+0x8ff/0x16e0 [ 94.190846][ T5879] ? folio_activate_fn+0x1f60/0x1f60 [ 94.196145][ T5879] ? udf_free_blocks+0x8ff/0x16e0 [ 94.201227][ T5879] ? mutex_lock_nested+0x20/0x20 [ 94.206223][ T5879] ? write_boundary_block+0xb0/0xb0 [ 94.211447][ T5879] ? __might_sleep+0xe0/0xe0 [ 94.216054][ T5879] udf_free_blocks+0x8ff/0x16e0 [ 94.220938][ T5879] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.227210][ T5879] ? __getblk_gfp+0x54/0x660 [ 94.231829][ T5879] ? udf_get_fileshortad+0x6e/0x1b0 [ 94.237046][ T5879] ? udf_current_aext+0x698/0xb00 [ 94.242097][ T5879] ? orangefs_cancel_op_in_progress+0x480/0x480 [ 94.248377][ T5879] udf_delete_aext+0x4e0/0xbc0 [ 94.253167][ T5879] ? udf_next_aext+0x500/0x500 [ 94.257963][ T5879] udf_new_block+0x12fa/0x1a70 [ 94.262757][ T5879] ? udf_prealloc_blocks+0xef0/0xef0 [ 94.268075][ T5879] udf_map_block+0x1389/0x4500 [ 94.272967][ T5879] ? filemap_get_folios+0xe5/0x7b0 [ 94.278441][ T5879] ? udf_bread+0x3e0/0x3e0 [ 94.283134][ T5879] ? filemap_get_folios+0x58e/0x7b0 [ 94.288347][ T5879] ? filemap_get_folios+0xe5/0x7b0 [ 94.293474][ T5879] ? clean_bdev_aliases+0x55f/0x630 [ 94.298695][ T5879] ? create_empty_buffers+0x140/0x140 [ 94.304099][ T5879] __udf_get_block+0x53/0x250 [ 94.308809][ T5879] __block_write_begin_int+0x566/0x1ad0 [ 94.314387][ T5879] ? udf_adinicb_readpage+0x250/0x250 [ 94.319870][ T5879] ? folio_zero_new_buffers+0x550/0x550 [ 94.325439][ T5879] ? udf_adinicb_readpage+0x250/0x250 [ 94.330831][ T5879] block_write_begin+0x9a/0x1e0 [ 94.335700][ T5879] udf_write_begin+0x1c0/0x430 [ 94.340487][ T5879] generic_perform_write+0x2fb/0x5b0 [ 94.345788][ T5879] ? generic_file_direct_write+0x3e0/0x3e0 [ 94.351606][ T5879] ? generic_file_direct_write+0x387/0x3e0 [ 94.357426][ T5879] __generic_file_write_iter+0x1ac/0x230 [ 94.363068][ T5879] udf_file_write_iter+0x2c0/0x620 [ 94.368198][ T5879] do_iter_write+0x79a/0xc70 [ 94.372808][ T5879] ? vfs_iter_write+0xa0/0xa0 [ 94.377508][ T5879] ? __asan_memset+0x22/0x40 [ 94.382130][ T5879] ? iov_iter_bvec+0xd4/0x1b0 [ 94.386827][ T5879] ? vfs_iter_write+0x6e/0xa0 [ 94.391525][ T5879] iter_file_splice_write+0x66f/0xc50 [ 94.396925][ T5879] ? splice_from_pipe+0x150/0x150 [ 94.401976][ T5879] ? splice_shrink_spd+0xc0/0xc0 [ 94.406943][ T5879] ? common_file_perm+0x198/0x1f0 [ 94.411989][ T5879] ? splice_from_pipe+0x150/0x150 [ 94.417033][ T5879] direct_splice_actor+0xe8/0x130 [ 94.422104][ T5879] splice_direct_to_actor+0x2f0/0x870 [ 94.427509][ T5879] ? direct_file_splice_eof+0xb0/0xb0 [ 94.432903][ T5879] ? warn_unsupported+0xc0/0xc0 [ 94.437774][ T5879] ? fsnotify_perm+0x5d/0x5e0 [ 94.442471][ T5879] ? security_file_permission+0x79/0xa0 [ 94.448031][ T5879] do_splice_direct+0x1b7/0x2c0 [ 94.452905][ T5879] ? splice_direct_to_actor+0x870/0x870 [ 94.458475][ T5879] ? rcu_read_lock_any_held+0xb4/0x120 [ 94.463955][ T5879] ? do_splice_direct+0x2c0/0x2c0 [ 94.469004][ T5879] do_sendfile+0x5dc/0xf70 [ 94.473473][ T5879] ? do_pwritev+0x340/0x340 [ 94.478006][ T5879] __se_sys_sendfile64+0x13f/0x190 [ 94.483142][ T5879] ? lock_chain_count+0x20/0x20 [ 94.488012][ T5879] ? __x64_sys_sendfile64+0xb0/0xb0 [ 94.493228][ T5879] ? lockdep_hardirqs_on+0x98/0x150 [ 94.498459][ T5879] do_syscall_64+0x55/0xb0 [ 94.503157][ T5879] ? clear_bhb_loop+0x40/0x90 [ 94.507862][ T5879] ? clear_bhb_loop+0x40/0x90 [ 94.512552][ T5879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.518472][ T5879] RIP: 0033:0x7fe95578efc9 [ 94.522915][ T5879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.542973][ T5879] RSP: 002b:00007fe95666a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 94.551410][ T5879] RAX: ffffffffffffffda RBX: 00007fe9559e5fa0 RCX: 00007fe95578efc9 [ 94.559481][ T5879] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 94.567659][ T5879] RBP: 00007fe955811f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.575644][ T5879] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 94.583627][ T5879] R13: 00007fe9559e6038 R14: 00007fe9559e5fa0 R15: 00007fffea0ab888 [ 94.591634][ T5879] [ 94.618196][ T1142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.654356][ T5890] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.664739][ T5892] ubi31: background thread "ubi_bgt31d" started, PID 5892 [ 94.673026][ T5801] Bluetooth: hci1: command tx timeout [ 94.678579][ T5795] Bluetooth: hci3: command tx timeout [ 94.684010][ T5795] Bluetooth: hci0: command tx timeout [ 94.689564][ T51] Bluetooth: hci2: command tx timeout [ 94.725215][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.733990][ T5884] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.749661][ T5884] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 94.758983][ T5884] BTRFS info (device loop0): turning off barriers [ 94.765559][ T5884] BTRFS info (device loop0): setting nodatasum [ 94.771790][ T5884] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.780565][ T5895] loop3: detected capacity change from 0 to 736 [ 94.781403][ T5884] BTRFS info (device loop0): use zstd compression, level 3 [ 94.795746][ T5884] BTRFS info (device loop0): using free space tree [ 94.844214][ T5893] bond1: (slave ip6gretap1): Removing an active aggregator [ 94.852519][ T5893] bond1: (slave ip6gretap1): Releasing backup interface [ 94.901376][ T5895] ISO 9660 Extensions: RRIP_1991A [ 95.115105][ T5884] loop0: detected capacity change from 32768 to 64 [ 95.193537][ T5912] syz.0.1: attempt to access beyond end of device [ 95.193537][ T5912] loop0: rw=6145, sector=10464, nr_sectors = 8 limit=64 [ 95.212516][ T5884] BTRFS info (device loop0): scrub: started on devid 1 [ 95.219892][ T5884] syz.0.1: attempt to access beyond end of device [ 95.219892][ T5884] loop0: rw=2048, sector=128, nr_sectors = 8 limit=64 [ 95.221483][ T5912] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 95.242061][ T5884] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 95.252596][ T5912] syz.0.1: attempt to access beyond end of device [ 95.252596][ T5912] loop0: rw=6145, sector=10456, nr_sectors = 8 limit=64 [ 95.294461][ T5912] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 95.310840][ T5884] BTRFS error (device loop0: state AL): Transaction aborted (error -5) [ 95.320023][ T5884] BTRFS: error (device loop0: state AL) in free_log_tree:3321: errno=-5 IO failure [ 95.330403][ T5884] BTRFS info (device loop0: state EAL): forced readonly [ 95.338077][ T5884] BTRFS: error (device loop0: state EAL) in free_log_tree:3321: errno=-5 IO failure [ 95.349996][ T5884] BTRFS warning (device loop0: state EAL): Skipping commit of aborted transaction. [ 95.359790][ T5884] BTRFS: error (device loop0: state EAL) in cleanup_transaction:2004: errno=-5 IO failure [ 95.373002][ T5884] BTRFS error (device loop0: state EAL): scrub: failed to commit transaction to fix super block errors: -5 [ 95.418152][ T5785] BTRFS info (device loop0: state EAL): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.904903][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.913225][ T9] usb 3-1: no configurations [ 97.917902][ T9] usb 3-1: can't read configurations, error -22 [ 98.094555][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.244383][ T9] usb 3-1: device descriptor read/64, error -32 [ 98.365692][ T9] usb usb3-port1: attempt power cycle [ 98.788191][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.825856][ T9] usb 3-1: device descriptor read/8, error -32 [ 99.105638][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.134638][ T9] usb 3-1: device descriptor read/8, error -32 [ 99.255200][ T9] usb usb3-port1: unable to enumerate USB device