last executing test programs: 22.775831847s ago: executing program 1 (id=4741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x40}}, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000080)) setregid(0x0, 0x0) 20.021878621s ago: executing program 3 (id=4746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f000001fac0)={0x0, 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet(r5, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000080) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000280)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) setreuid(0xee01, 0x0) 20.021479461s ago: executing program 1 (id=4747): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) 17.310646575s ago: executing program 3 (id=4752): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x50424752, 0x2, 0x0, [{}, {0x1}, {0x4}, {}, {0x1}, {0xfffffffe, 0x3}], 0x4, 0x0, 0x0, 0x1}}) 14.195713954s ago: executing program 3 (id=4754): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.850042651s ago: executing program 4 (id=4759): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.591447374s ago: executing program 1 (id=4762): iopl(0x3) r0 = syz_pidfd_open(0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xff01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0xbdd2366a7372c2b5, r0, 0x8c3d6000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r2) 12.591252744s ago: executing program 4 (id=4763): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3f}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r7, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x15, 0x3, 0x8, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683ddb7af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90ba8b1c55f96400", [0x800]}}) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x111, 0xa}}, 0x20) 10.978403774s ago: executing program 1 (id=4765): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x103200) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"], 0x24}}, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64, @ANYRES8=r3], 0x0) 10.47462962s ago: executing program 2 (id=4766): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr=0x9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept4(0xffffffffffffffff, &(0x7f0000000240)=@sco={0x1f, @none}, &(0x7f0000000340)=0x80, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x7fffffff, 0x101, 0x534, 0x2}, &(0x7f0000000180)=0x14) 9.782527129s ago: executing program 1 (id=4767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 8.268475508s ago: executing program 4 (id=4769): write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000040)={[{@noautodefrag}, {@ssd}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.227081858s ago: executing program 1 (id=4770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x4004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 8.224187408s ago: executing program 3 (id=4771): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 8.164916199s ago: executing program 2 (id=4772): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x5c}}, 0x40) 7.093116672s ago: executing program 3 (id=4775): write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000040)={[{@noautodefrag}, {@ssd}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.550725989s ago: executing program 0 (id=4776): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002100)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xb, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 5.472244772s ago: executing program 2 (id=4777): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x103200) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"], 0x24}}, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64, @ANYRES8=r3], 0x0) 4.82086871s ago: executing program 4 (id=4778): ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d11, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) open(&(0x7f0000000280)='\x00', 0x0, 0x1b5) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x1, 0x1, 0x80000000}) 4.465673815s ago: executing program 2 (id=4779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f000001fac0)={0x0, 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet(r5, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000080) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000280)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) setreuid(0xee01, 0x0) 4.02905561s ago: executing program 0 (id=4780): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3f}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r7, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x15, 0x3, 0x8, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683ddb7af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90ba8b1c55f96400", [0x800]}}) r9 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x111, 0xa}}, 0x20) 3.170692141s ago: executing program 2 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 2.940627754s ago: executing program 3 (id=4782): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.343852041s ago: executing program 0 (id=4783): r0 = socket(0x10, 0xa, 0x4) recvmsg(r0, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {&(0x7f0000000680)=""/225, 0xe1}, {0x0}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x8, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001000003090001007379ecf3ffff00002c000000030a01010000000000000000010000000900010073077a30000000000900030073797a320000000008000000060a010400008750867f6a5c42e60deb0000000000000100000008050040000000003c000480001400028008000340000000000800044000000022140001800c0001006269747769736500040002800900010073797a3021000000140000001100010000008b97d25a5ea97fbbfe1395ccc217cac06d0700"/234], 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) personality(0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000180)=ANY=[@ANYBLOB='size']) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) uname(&(0x7f0000000180)=""/224) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffff9c, 0x0, 0x68801, 0x0) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) 1.412850902s ago: executing program 0 (id=4784): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x101) msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82) 1.325000234s ago: executing program 4 (id=4785): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) modify_ldt$write2(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$isdn(0x22, 0x2, 0x10) r4 = socket$isdn(0x22, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 1.148585096s ago: executing program 2 (id=4786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x40}}, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000080)) setregid(0x0, 0x0) 517.811744ms ago: executing program 0 (id=4787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 359.648376ms ago: executing program 4 (id=4788): write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000040)={[{@noautodefrag}, {@ssd}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 0 (id=4789): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x103200) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"], 0x24}}, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64, @ANYRES8=r3], 0x0) kernel console output (not intermixed with test programs): new high-speed USB device number 42 using dummy_hcd [ 1356.661015][ T4329] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1356.732580][ T9497] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1356.744315][ T9497] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1356.770888][ T9497] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1356.814366][ T9497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.852910][ T9497] usb 3-1: Product: syz [ 1356.870508][ T9497] usb 3-1: Manufacturer: syz [ 1356.884383][ T9497] usb 3-1: SerialNumber: syz [ 1356.901041][ T9497] usb 3-1: config 0 descriptor?? [ 1356.906767][T18253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1356.924761][T18253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1356.932117][ T4329] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1356.965028][ T4329] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1356.980735][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.005262][ T4329] usb 5-1: config 0 descriptor?? [ 1357.127477][T18244] loop3: detected capacity change from 0 to 32768 [ 1357.171285][T18244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3867 (18244) [ 1357.173071][T18253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1357.196839][T18244] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1357.212250][T18253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1357.231561][T18244] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1357.246173][T18244] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1357.272792][T18244] BTRFS info (device loop3): max_inline at 0 [ 1357.296676][T18244] BTRFS info (device loop3): enabling disk space caching [ 1357.357942][T18244] BTRFS info (device loop3): turning off barriers [ 1357.481260][T18244] BTRFS info (device loop3): turning on flush-on-commit [ 1357.691492][T18244] BTRFS info (device loop3): doing ref verification [ 1357.756165][T18244] BTRFS info (device loop3): force clearing of disk cache [ 1357.823838][T18244] BTRFS info (device loop3): enabling ssd optimizations [ 1357.842470][ T9497] Error reading MAC address [ 1357.915256][T18244] BTRFS info (device loop3): max_inline at 4096 [ 1357.924353][T18244] BTRFS info (device loop3): disk space caching is enabled [ 1357.955789][ T4329] usb 5-1: USB disconnect, device number 62 [ 1358.052558][T18244] BTRFS info (device loop3): rebuilding free space tree [ 1358.165564][T18244] BTRFS info (device loop3): disabling free space tree [ 1358.198010][T18244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1358.210180][T18244] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1359.265524][T18295] usb 3-1: USB disconnect, device number 42 [ 1359.359596][T15352] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1361.479736][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.492124][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.191239][T18333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1362.229801][T18333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1362.242109][T18333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.399912][T18330] loop8: detected capacity change from 0 to 1 [ 1364.406634][T18330] Dev loop8: unable to read RDB block 1 [ 1364.412317][T18330] loop8: unable to read partition table [ 1364.418843][T18330] loop8: partition table beyond EOD, truncated [ 1364.425076][T18330] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1364.446832][T18330] futex_wake_op: syz.1.3887 tries to shift op by -33; fix this program [ 1364.557208][T18330] netdevsim netdevsim1: Direct firmware load for . [ 1364.557208][T18330] failed with error -2 [ 1364.567799][T18330] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1364.567799][T18330] [ 1365.535220][T18295] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1365.966655][T18295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1365.993198][T18295] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1366.056045][T18295] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1366.086615][T18295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.104337][T18295] usb 1-1: Product: syz [ 1366.110335][T18295] usb 1-1: Manufacturer: syz [ 1366.118975][T18295] usb 1-1: SerialNumber: syz [ 1366.126021][T18295] usb 1-1: config 0 descriptor?? [ 1366.131857][T18346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.141144][T18346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.223192][T18358] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1366.233192][T18358] hfsplus: unable to find HFS+ superblock [ 1366.243271][T18358] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1366.257841][T18358] cramfs: wrong magic [ 1366.392759][T18346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.415522][T18346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1366.910496][T18295] Error reading MAC address [ 1367.404486][T17694] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1367.613070][T17694] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1367.624114][T17694] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1367.637902][T17694] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1367.647231][T17694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.756516][T17694] usb 4-1: config 0 descriptor?? [ 1367.769273][T17694] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1368.548972][ T4295] usb 1-1: USB disconnect, device number 71 [ 1368.914874][ T9497] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1370.096588][ T9497] usb 2-1: config 0 has no interfaces? [ 1370.107808][ T9497] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1370.140340][ T9497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.179903][ T9497] usb 2-1: Product: syz [ 1371.038023][ T9497] usb 2-1: Manufacturer: syz [ 1371.042684][ T9497] usb 2-1: SerialNumber: syz [ 1371.050441][ T9497] usb 2-1: config 0 descriptor?? [ 1371.347363][T18400] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1371.357071][T18400] hfsplus: unable to find HFS+ superblock [ 1371.376243][T18400] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1371.388703][T18400] cramfs: wrong magic [ 1372.311884][ T4295] usb 4-1: USB disconnect, device number 65 [ 1374.907144][T18419] autofs4:pid:18419:autofs_fill_super: called with bogus options [ 1376.033900][T18423] loop3: detected capacity change from 0 to 32768 [ 1376.124873][ T9497] usb 2-1: can't set config #0, error -110 [ 1376.133877][T18426] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1376.143515][T18426] hfsplus: unable to find HFS+ superblock [ 1376.154646][T18426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1376.164070][T18426] cramfs: wrong magic [ 1376.847537][T18423] XFS (loop3): Mounting V5 Filesystem [ 1376.936320][T18436] virtio-fs: tag <(null)> not found [ 1377.754721][T18423] XFS (loop3): Ending clean mount [ 1377.792860][ T9497] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 1377.904353][ T9497] XFS (loop3): Unmount and run xfs_repair [ 1377.910166][ T9497] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1377.950341][ T9497] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1377.970558][ T9497] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1377.990814][ T9497] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1378.010767][ T9497] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1378.046395][ T9497] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1378.081985][ T9497] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1378.121503][ T9497] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.130852][ T9497] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.143992][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 1378.145265][ T27] usb 2-1: USB disconnect, device number 61 [ 1378.156586][T18423] XFS (loop3): Failed to initialize disk quotas. [ 1378.195782][T18315] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1378.227004][T17694] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1378.263611][T17694] XFS (loop3): Unmount and run xfs_repair [ 1378.272705][T17694] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1378.286918][T17694] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1378.300554][T17694] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1378.312584][T17694] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1378.325958][T17694] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1378.338750][T17694] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1378.352649][T17694] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.373516][T17694] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.383106][T17694] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1378.399874][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1378.412793][T18423] XFS (loop3): page discard on page ffffea0000ec41c0, inode 0x1686, pos 20480. [ 1378.425099][T18315] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1378.430556][T17694] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1378.444445][T18315] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1378.459786][T17694] XFS (loop3): Unmount and run xfs_repair [ 1378.471814][T17694] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1378.474357][T18315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1378.481277][T17694] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1378.498024][T17694] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1378.506716][T18315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.514240][T17694] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1378.523923][T17694] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1378.534201][T18315] usb 5-1: config 0 descriptor?? [ 1378.542334][T17694] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1378.547876][T18315] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1378.556193][T17694] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.568236][T17694] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.577374][T17694] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1378.592275][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1378.604050][T18423] XFS (loop3): page discard on page ffffea0001424200, inode 0x1686, pos 24576. [ 1378.620838][T18315] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1378.632001][T18315] XFS (loop3): Unmount and run xfs_repair [ 1378.643009][T18315] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1378.653418][T18315] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1378.668256][T18315] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1378.678810][T18315] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1378.688098][T18315] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1378.698464][T18315] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1378.709131][T18315] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.718449][T18315] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1378.728267][T18315] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1378.737482][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1378.748924][T18423] XFS (loop3): page discard on page ffffea0001424240, inode 0x1686, pos 28672. [ 1378.777487][T18315] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1378.814438][T18315] XFS (loop3): Unmount and run xfs_repair [ 1378.824779][T18315] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1378.844349][T18315] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1378.853580][T18315] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1378.867829][T18315] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1378.894434][T18315] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1378.903338][T18315] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1379.072083][T18315] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1381.087746][T18315] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1381.115350][T18315] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1381.140557][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1381.152200][T18423] XFS (loop3): page discard on page ffffea0001424280, inode 0x1686, pos 32768. [ 1381.162001][T17694] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1381.192897][T17694] XFS (loop3): Unmount and run xfs_repair [ 1381.203352][T17694] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1381.243389][T17694] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1381.279299][T17694] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1381.312736][T17694] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1381.391759][T17694] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1381.709437][T18475] virtio-fs: tag <(null)> not found [ 1381.836565][T17694] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1381.862370][T17694] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1381.907582][T17694] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1381.950799][T17694] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1381.965331][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1381.976993][T18423] XFS (loop3): page discard on page ffffea00014242c0, inode 0x1686, pos 36864. [ 1381.987862][ T4241] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1381.999737][ T4241] XFS (loop3): Unmount and run xfs_repair [ 1382.006278][ T4241] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1382.015275][ T4241] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1382.121079][ T4241] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1382.132864][ T4241] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1382.158620][ T4241] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1382.219379][ T4241] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1382.246167][ T4241] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1382.277209][ T4241] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1382.326345][ T4241] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1382.390813][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1382.405446][T18423] XFS (loop3): page discard on page ffffea0001424300, inode 0x1686, pos 40960. [ 1382.598794][ T4241] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1383.147682][ T4241] XFS (loop3): Unmount and run xfs_repair [ 1383.231925][ T4241] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1383.275583][ T4241] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1383.369240][ T4241] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1383.398420][ T4241] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1383.409938][ T4241] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1383.434325][ T4241] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1383.453949][ T4241] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1383.473637][ T4241] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1383.486510][ T4241] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1383.496672][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1383.509592][T18423] XFS (loop3): page discard on page ffffea0001424340, inode 0x1686, pos 45056. [ 1383.527657][T18312] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1383.538848][T18315] usb 5-1: USB disconnect, device number 63 [ 1383.557367][T18312] XFS (loop3): Unmount and run xfs_repair [ 1383.576133][T18312] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1383.588068][T18312] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1383.603766][T18312] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1383.663871][T18312] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1383.725703][T18312] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1383.744995][T18483] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1383.755543][T18483] cramfs: wrong magic [ 1383.804104][T18312] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1383.847157][T18312] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1383.901536][T18312] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1383.965733][T18312] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1384.023204][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1384.037276][T18423] XFS (loop3): page discard on page ffffea0001424380, inode 0x1686, pos 49152. [ 1384.164212][T18315] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1384.202192][T18315] XFS (loop3): Unmount and run xfs_repair [ 1384.239566][T18315] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1384.275948][T18315] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1384.313861][T18315] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1384.349803][T18315] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1384.386762][T18315] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1384.410965][T18315] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1384.437760][T18315] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1384.480399][T18315] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1384.491336][T18315] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1384.503680][T18423] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1384.515815][T18423] XFS (loop3): page discard on page ffffea00014243c0, inode 0x1686, pos 53248. [ 1384.529759][ T4241] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1384.548727][ T4241] XFS (loop3): Unmount and run xfs_repair [ 1384.556757][ T4241] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1384.564846][ T4241] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1384.597288][ T4241] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1384.718123][ T4241] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1384.770279][ T4241] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1384.780181][ T4241] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1384.795671][ T4241] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1384.805182][ T4241] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1384.819363][ T4241] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1384.831191][T18423] XFS (loop3): page discard on page ffffea0000e0a800, inode 0x1686, pos 57344. [ 1384.841879][ T27] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1384.885870][ T27] XFS (loop3): Unmount and run xfs_repair [ 1384.902819][ T27] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1385.019319][ T27] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1385.048360][ T27] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1385.088036][ T27] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1385.118364][ T27] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1385.154095][ T27] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1385.163737][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1385.173099][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1385.182477][ T27] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1385.208265][T18423] XFS (loop3): page discard on page ffffea0000e0a840, inode 0x1686, pos 61440. [ 1385.218214][ T4241] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1385.261194][ T4241] XFS (loop3): Unmount and run xfs_repair [ 1385.267230][ T4241] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1385.286817][ T4241] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1385.297258][ T4241] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1385.306950][T18315] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1385.315262][ T4241] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1385.324972][ T4241] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 1385.334117][ T4241] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 1385.343487][ T4241] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1385.372285][ T4241] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1385.385548][ T4241] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 1385.535239][T18423] XFS (loop3): page discard on page ffffea0000e0a880, inode 0x1686, pos 65536. [ 1385.595302][T15352] XFS (loop3): Unmounting Filesystem [ 1385.754396][ T27] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1385.934349][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1385.943575][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.069468][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1386.147664][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1386.269653][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1386.289270][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.306806][ T27] usb 3-1: Product: syz [ 1386.311265][ T27] usb 3-1: Manufacturer: syz [ 1386.320741][ T27] usb 3-1: SerialNumber: syz [ 1386.585439][T18315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1386.599815][T18315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1386.638340][T18315] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1386.671940][T18315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.693234][T18315] usb 2-1: Product: syz [ 1386.701829][T18315] usb 2-1: Manufacturer: syz [ 1386.711318][T18315] usb 2-1: SerialNumber: syz [ 1386.727313][T18315] usb 2-1: config 0 descriptor?? [ 1386.742707][T18493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1386.757265][T18493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1387.890927][T18493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1387.893356][ T27] usb 3-1: USB disconnect, device number 43 [ 1387.934918][T18493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1388.109757][T18008] udevd[18008]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.461086][T18516] loop8: detected capacity change from 0 to 1 [ 1388.473554][T18516] Dev loop8: unable to read RDB block 1 [ 1388.488678][T18516] loop8: unable to read partition table [ 1388.496516][T18315] Error reading MAC address [ 1388.550331][T18516] loop8: partition table beyond EOD, truncated [ 1388.590223][T18516] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1388.612841][T18518] futex_wake_op: syz.2.3941 tries to shift op by -33; fix this program [ 1388.638201][T18516] netdevsim netdevsim2: Direct firmware load for . [ 1388.638201][T18516] failed with error -2 [ 1388.661400][T18516] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1388.661400][T18516] [ 1389.414329][T17694] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1389.644452][T17694] usb 4-1: Using ep0 maxpacket: 16 [ 1389.652320][T17694] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1389.721518][T17694] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1389.747925][T17694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.822619][T17694] usb 4-1: Product: syz [ 1389.827147][T17694] usb 4-1: Manufacturer: syz [ 1389.831783][T17694] usb 4-1: SerialNumber: syz [ 1389.932325][T17694] usb 4-1: config 0 descriptor?? [ 1390.031686][T18531] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1390.032130][T18528] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1390.039068][T18531] cramfs: wrong magic [ 1390.057103][T17694] usb 2-1: USB disconnect, device number 62 [ 1390.168849][ T7170] usb 4-1: USB disconnect, device number 66 [ 1390.413739][T18528] cramfs: wrong magic [ 1395.393315][T18580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3955'. [ 1396.734650][T18592] loop3: detected capacity change from 0 to 2048 [ 1396.758983][T18592] EXT4-fs: Ignoring removed mblk_io_submit option [ 1396.788587][T18592] EXT4-fs: Ignoring removed nobh option [ 1397.829418][T18592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1398.141555][T18609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3960: bg 0: block 234: padding at end of block bitmap is not set [ 1399.669765][T15352] EXT4-fs (loop3): unmounting filesystem. [ 1400.936955][ T4295] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1401.003286][T18624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1401.126816][ T4295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.145107][ T4295] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1401.159512][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.196703][ T4295] usb 4-1: config 0 descriptor?? [ 1401.604418][ T4295] pwc: Askey VC010 type 2 USB webcam detected. [ 1402.364366][ T4295] pwc: recv_control_msg error -32 req 02 val 2700 [ 1402.398572][ T4295] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1402.417551][ T4295] pwc: recv_control_msg error -32 req 04 val 1000 [ 1402.424801][T18651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1402.442556][ T4295] pwc: recv_control_msg error -32 req 04 val 1300 [ 1403.175849][ T4295] pwc: recv_control_msg error -32 req 04 val 1400 [ 1403.184550][ T4295] pwc: recv_control_msg error -71 req 02 val 2000 [ 1403.197627][ T4295] pwc: recv_control_msg error -71 req 02 val 2100 [ 1403.214500][ T4295] pwc: recv_control_msg error -71 req 04 val 1500 [ 1403.231251][ T4295] pwc: recv_control_msg error -71 req 02 val 2500 [ 1403.244378][ T4295] pwc: recv_control_msg error -71 req 02 val 2400 [ 1403.277163][ T4295] pwc: recv_control_msg error -71 req 02 val 2600 [ 1403.296046][ T4295] pwc: recv_control_msg error -71 req 02 val 2900 [ 1403.304021][ T4295] pwc: recv_control_msg error -71 req 02 val 2800 [ 1403.363544][ T4295] pwc: recv_control_msg error -71 req 04 val 1100 [ 1403.392927][ T4295] pwc: recv_control_msg error -71 req 04 val 1200 [ 1403.455713][ T4295] pwc: Registered as video103. [ 1403.482666][ T4295] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 1403.521822][ T4295] usb 4-1: USB disconnect, device number 67 [ 1404.797884][T18673] dlm: non-version read from control device 0 [ 1407.267719][T18698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3989'. [ 1407.522502][ T93] block nbd3: Attempted send on invalid socket [ 1407.530920][ T93] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1407.544279][T18701] qnx6: unable to read the first superblock [ 1407.580420][ T93] block nbd3: Attempted send on invalid socket [ 1407.586698][ T93] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1407.596197][T18701] qnx6: unable to read the first superblock [ 1407.680054][T18701] qnx6: unable to read the first superblock [ 1409.177370][T18721] loop8: detected capacity change from 0 to 1 [ 1409.193313][T18721] Dev loop8: unable to read RDB block 1 [ 1409.199705][T18721] loop8: unable to read partition table [ 1409.267712][T18721] loop8: partition table beyond EOD, truncated [ 1409.286643][T18721] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1409.304378][T18315] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1409.336246][T18721] futex_wake_op: syz.0.3995 tries to shift op by -33; fix this program [ 1409.360990][T18721] netdevsim netdevsim0: Direct firmware load for . [ 1409.360990][T18721] failed with error -2 [ 1409.372784][T18721] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1409.372784][T18721] [ 1409.536196][T18315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1409.617509][T18315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1409.709622][T18315] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1409.729209][T18315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.738441][T18315] usb 3-1: Product: syz [ 1409.742644][T18315] usb 3-1: Manufacturer: syz [ 1409.748635][T18315] usb 3-1: SerialNumber: syz [ 1409.763769][T18315] usb 3-1: config 0 descriptor?? [ 1409.770121][T18719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1409.778165][T18719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1409.783835][T18702] loop4: detected capacity change from 0 to 32768 [ 1410.002337][T18719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1410.017694][T18719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1410.738475][T18315] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1410.745865][T18702] JBD2: recovery failed [ 1410.752425][T18702] (syz.4.3992,18702,1):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 1410.762030][T18702] (syz.4.3992,18702,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -5 [ 1410.772614][T18702] (syz.4.3992,18702,1):ocfs2_check_volume:2486 ERROR: status = -5 [ 1410.781802][T18702] (syz.4.3992,18702,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 1410.811837][T18702] (syz.4.3992,18702,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1411.166446][T18315] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1412.055826][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4004'. [ 1412.164330][ T4295] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1412.334356][ T4295] usb 4-1: device descriptor read/64, error -71 [ 1412.365496][T18315] usb 3-1: USB disconnect, device number 44 [ 1412.664478][ T4295] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1412.824533][ T4295] usb 4-1: device descriptor read/64, error -71 [ 1413.014901][ T4295] usb usb4-port1: attempt power cycle [ 1413.564358][ T4295] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1413.611601][ T4295] usb 4-1: device descriptor read/8, error -71 [ 1413.904397][ T4295] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1414.001665][ T4295] usb 4-1: device descriptor read/8, error -71 [ 1415.075050][ T4295] usb usb4-port1: unable to enumerate USB device [ 1417.482294][T18798] loop8: detected capacity change from 0 to 1 [ 1417.556550][T18798] Dev loop8: unable to read RDB block 1 [ 1417.609936][T18798] loop8: unable to read partition table [ 1418.138393][T18798] loop8: partition table beyond EOD, truncated [ 1418.153469][T18804] futex_wake_op: syz.1.4017 tries to shift op by -33; fix this program [ 1418.164672][T18798] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1418.185580][T18804] netdevsim netdevsim1: Direct firmware load for . [ 1418.185580][T18804] failed with error -2 [ 1418.197476][T18804] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1418.197476][T18804] [ 1418.804715][ T7170] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1419.644437][ T7170] usb 3-1: device descriptor read/64, error -71 [ 1420.854297][ T7170] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1421.034362][ T7170] usb 3-1: device descriptor read/64, error -71 [ 1421.175438][ T7170] usb usb3-port1: attempt power cycle [ 1421.594330][ T7170] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1421.674369][ T7170] usb 3-1: device descriptor read/8, error -71 [ 1422.335503][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1423.144560][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.150927][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.549903][ T4259] Bluetooth: hci4: Invalid handle: 0xff00 > 0x0eff [ 1424.484413][T18315] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1424.654319][T18315] usb 2-1: device descriptor read/64, error -71 [ 1425.704487][T18315] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1425.896184][T18315] usb 2-1: device descriptor read/64, error -71 [ 1426.034495][T18315] usb usb2-port1: attempt power cycle [ 1426.877159][T18315] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1427.864120][T18315] usb 2-1: device descriptor read/8, error -71 [ 1428.057046][T18881] device syzkaller0 entered promiscuous mode [ 1429.590219][T18894] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1429.601932][T18894] cramfs: wrong magic [ 1431.185709][T18910] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1431.197797][T18910] File: /dev/nullb0 PID: 18910 Comm: syz.2.4055 [ 1433.759590][ T7170] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1433.975638][ T7170] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1433.986314][ T7170] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1434.001984][ T7170] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1434.011548][ T7170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.029707][ T7170] usb 1-1: config 0 descriptor?? [ 1434.049754][ T7170] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1434.547765][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4053'. [ 1435.857871][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4058'. [ 1437.475315][ T27] usb 1-1: USB disconnect, device number 72 [ 1440.562297][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1440.931364][T18961] device syzkaller0 entered promiscuous mode [ 1445.557173][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1448.330765][ T27] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1448.534367][ T27] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1448.564387][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1448.578281][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1448.589377][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.648122][ T27] usb 3-1: config 0 descriptor?? [ 1449.168014][ T27] usb 3-1: can't set config #0, error -71 [ 1449.184242][ T27] usb 3-1: USB disconnect, device number 49 [ 1450.068059][T19002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1451.765878][T19027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1451.831917][T19029] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1451.844737][T19029] File: /dev/nullb0 PID: 19029 Comm: syz.2.4084 [ 1452.742422][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1455.917951][T15334] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1456.307392][T15334] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1456.318009][T15334] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1456.345711][T15334] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1456.424326][T15334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.445208][T15334] usb 5-1: config 0 descriptor?? [ 1456.453265][T15334] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1460.104756][T19086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4096'. [ 1462.675005][T18295] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1462.878506][T18295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.899014][T18295] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1463.006760][T18295] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1463.048331][T18295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.081984][T18295] usb 4-1: Product: syz [ 1463.102302][T18295] usb 4-1: Manufacturer: syz [ 1463.115746][T18295] usb 4-1: SerialNumber: syz [ 1463.457409][T18295] usb 4-1: config 0 descriptor?? [ 1464.027514][ T7170] usb 5-1: USB disconnect, device number 64 [ 1464.496893][T19132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1467.526793][ T27] usb 4-1: USB disconnect, device number 72 [ 1469.704348][ T27] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1469.960528][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1470.604093][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1470.738034][ T27] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1470.813257][T10266] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1470.884357][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.914750][ T27] usb 4-1: Product: syz [ 1470.924334][ T27] usb 4-1: Manufacturer: syz [ 1470.935885][ T27] usb 4-1: SerialNumber: syz [ 1470.952223][ T27] usb 4-1: config 0 descriptor?? [ 1470.976869][T19167] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1470.993128][T19167] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1471.129143][T10266] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1472.055636][T10266] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1472.548019][T10266] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.670098][ T27] dm9601: probe of 4-1:0.0 failed with error -71 [ 1472.719118][ T27] usb 4-1: USB disconnect, device number 73 [ 1472.784401][T10266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.829887][T10266] usb 1-1: config 0 descriptor?? [ 1472.851252][T10266] usb 1-1: can't set config #0, error -71 [ 1472.881331][T10266] usb 1-1: USB disconnect, device number 73 [ 1472.935469][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1472.954847][T19189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1473.014522][T13335] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1473.825400][T13335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.845530][T13335] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1474.014879][T13335] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1474.023984][T13335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.044293][T13335] usb 2-1: Product: syz [ 1474.048533][T13335] usb 2-1: Manufacturer: syz [ 1474.053147][T13335] usb 2-1: SerialNumber: syz [ 1474.075765][T13335] usb 2-1: config 0 descriptor?? [ 1477.441224][ T4295] usb 2-1: USB disconnect, device number 67 [ 1477.580671][T19232] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1477.590530][T19232] hfsplus: unable to find HFS+ superblock [ 1477.602061][T19232] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1477.608922][T10266] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1477.619502][T19232] cramfs: wrong magic [ 1477.824282][T18315] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1478.233453][T10266] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1478.425001][T10266] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1478.430718][T19231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1478.495182][T10266] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1478.520941][T10266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.563730][T10266] usb 1-1: Product: syz [ 1478.571215][T18315] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1478.600554][T18315] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1478.619767][T10266] usb 1-1: Manufacturer: syz [ 1478.625939][T10266] usb 1-1: SerialNumber: syz [ 1478.672617][T10266] usb 1-1: config 0 descriptor?? [ 1478.678110][T18315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1478.689083][T19223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1478.697164][T18315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.706259][T19223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1478.726740][T18315] usb 4-1: config 0 descriptor?? [ 1478.744747][T18315] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1478.936597][T19223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1478.956531][T19223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1479.495492][T10266] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1480.887350][ T4329] usb 4-1: USB disconnect, device number 74 [ 1480.992976][T10266] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1481.397819][T10266] usb 1-1: USB disconnect, device number 74 [ 1482.772072][T18845] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 1482.906919][T19281] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1482.917591][T19281] hfsplus: unable to find HFS+ superblock [ 1482.927641][T19281] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1482.936888][T19281] cramfs: wrong magic [ 1483.774080][T19282] netlink: 'syz.3.4158': attribute type 1 has an invalid length. [ 1483.980867][T19282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1484.007156][T19284] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1484.022151][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1484.274365][T10266] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1484.632402][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.804587][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.906532][T10266] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1484.943400][T10266] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1484.956986][T18295] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1485.046749][T10266] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1485.061410][T10266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.089872][T10266] usb 3-1: config 0 descriptor?? [ 1485.105906][T10266] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1485.159796][T18295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1485.179959][T18295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1485.212298][T18295] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1485.236864][T18295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.268359][T18295] usb 2-1: Product: syz [ 1485.272668][T18295] usb 2-1: Manufacturer: syz [ 1485.277636][T18295] usb 2-1: SerialNumber: syz [ 1485.293928][T18295] usb 2-1: config 0 descriptor?? [ 1485.498192][T19294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1485.509632][T19294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1485.822336][T19294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1486.034078][T19294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1486.825398][T18295] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1487.228485][T18295] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1488.269158][T19329] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1488.281261][T19329] cramfs: wrong magic [ 1488.673112][ T4295] usb 3-1: USB disconnect, device number 50 [ 1488.930743][T18845] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 1488.942256][T18319] usb 2-1: USB disconnect, device number 68 [ 1489.001756][T19335] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 1489.038800][T19335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1489.844312][T18319] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1490.066512][T18319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1490.081623][T18319] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1490.093032][T18319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.105258][T18319] usb 2-1: Product: syz [ 1490.109635][T18319] usb 2-1: Manufacturer: syz [ 1490.117158][T18319] usb 2-1: SerialNumber: syz [ 1490.141372][T18319] usb 2-1: config 0 descriptor?? [ 1490.974408][T18319] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1491.705202][T18319] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1491.716630][T18319] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1491.726213][T19372] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1491.730870][T18319] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1491.746510][T18319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.756278][T19372] cramfs: wrong magic [ 1491.756295][T19376] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1491.775446][T18319] usb 3-1: config 0 descriptor?? [ 1491.791278][T19376] hfsplus: unable to find HFS+ superblock [ 1491.793481][T18319] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1491.966284][T18845] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 1492.028330][T19386] netlink: 'syz.4.4189': attribute type 1 has an invalid length. [ 1492.089610][T19386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1492.120565][T18319] usb 2-1: USB disconnect, device number 69 [ 1492.204347][ T7170] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1492.503641][ T7170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1492.532463][ T7170] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1493.258405][ T7170] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1493.274658][ T7170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.283462][ T7170] usb 4-1: Product: syz [ 1493.289014][ T7170] usb 4-1: Manufacturer: syz [ 1493.295891][ T7170] usb 4-1: SerialNumber: syz [ 1493.313550][ T7170] usb 4-1: config 0 descriptor?? [ 1493.320545][T19381] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1493.332858][T19381] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1493.552451][T19381] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1493.573590][T19381] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1494.021452][ T7170] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1494.377910][T18319] usb 3-1: USB disconnect, device number 51 [ 1494.842808][ T7170] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1494.887974][T19413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4196'. [ 1494.911806][ T7170] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, f2:80:ab:47:b4:ca [ 1494.949962][ T7170] usb 4-1: USB disconnect, device number 75 [ 1494.965609][ T7170] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 1495.796500][T19420] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1495.806334][T19420] hfsplus: unable to find HFS+ superblock [ 1495.817320][T19420] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1495.826938][T19420] cramfs: wrong magic [ 1497.191082][T19427] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 1497.213761][T19427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1497.463161][ T4295] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1497.666220][ T4295] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1497.874840][ T4295] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1498.029644][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.183943][ T4295] usb 5-1: Product: syz [ 1498.218947][ T4295] usb 5-1: Manufacturer: syz [ 1498.238423][ T4295] usb 5-1: SerialNumber: syz [ 1498.303913][ T4295] usb 5-1: config 0 descriptor?? [ 1498.668119][T19450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1498.884512][ T7170] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1500.690670][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1500.713346][ T7170] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1500.746410][ T7170] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1500.777186][ T7170] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1500.817474][T18295] usb 5-1: USB disconnect, device number 65 [ 1500.896198][T19467] loop4: detected capacity change from 0 to 128 [ 1500.900551][ T7170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.413887][ T7170] usb 3-1: Product: syz [ 1501.422067][T19467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1501.467804][ T7170] usb 3-1: Manufacturer: syz [ 1501.489768][ T7170] usb 3-1: SerialNumber: syz [ 1501.527127][T19467] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.580533][ T7170] usb 3-1: config 0 descriptor?? [ 1501.644901][ T7170] usb 3-1: can't set config #0, error -71 [ 1501.758321][T19475] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 1501.821082][ T7170] usb 3-1: USB disconnect, device number 52 [ 1502.249559][T19475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1502.270187][T14609] EXT4-fs (loop4): unmounting filesystem. [ 1506.344408][T18295] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1506.537389][T18845] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff [ 1506.547549][T18295] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1506.566613][T18295] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1506.594633][T18295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.602828][T18295] usb 2-1: Product: syz [ 1506.607176][T18295] usb 2-1: Manufacturer: syz [ 1506.612993][T18295] usb 2-1: SerialNumber: syz [ 1506.624694][T18295] usb 2-1: config 0 descriptor?? [ 1506.664325][T10266] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1506.902371][T19522] netlink: 'syz.3.4229': attribute type 1 has an invalid length. [ 1506.939046][T19522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1506.996742][T10266] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1507.006787][T10266] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1507.023006][T10266] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1507.034593][T10266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.043776][T10266] usb 3-1: Product: syz [ 1507.049050][T10266] usb 3-1: Manufacturer: syz [ 1507.053782][T10266] usb 3-1: SerialNumber: syz [ 1507.062683][T10266] usb 3-1: config 0 descriptor?? [ 1507.068774][T19514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.079787][T19514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.311548][T19514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.509854][T19514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.880130][T10266] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1508.330594][ T7170] usb 2-1: USB disconnect, device number 70 [ 1508.985773][T10266] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1508.999844][T10266] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 9e:87:b4:6d:11:5b [ 1509.015159][T10266] usb 3-1: USB disconnect, device number 53 [ 1509.022509][T10266] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 1510.154394][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1510.259545][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1514.667539][T19590] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1514.677153][T19590] hfsplus: unable to find HFS+ superblock [ 1514.684108][T19590] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1514.691405][T19590] cramfs: wrong magic [ 1519.317818][T19613] loop8: detected capacity change from 0 to 1 [ 1519.326424][T19613] Dev loop8: unable to read RDB block 1 [ 1519.332037][T19613] loop8: unable to read partition table [ 1519.337967][T19613] loop8: partition table beyond EOD, truncated [ 1519.344155][T19613] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1519.362411][T19613] futex_wake_op: syz.0.4247 tries to shift op by -33; fix this program [ 1519.373056][T19613] netdevsim netdevsim0: Direct firmware load for . [ 1519.373056][T19613] failed with error -2 [ 1519.383745][T19613] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1519.383745][T19613] [ 1521.280272][T19644] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1521.290500][T19644] hfsplus: unable to find HFS+ superblock [ 1521.326656][T19644] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1521.340179][T19644] cramfs: wrong magic [ 1523.112436][T19662] tipc: Started in network mode [ 1523.141203][T19662] tipc: Node identity 5f11040000000000002e, cluster identity 4711 [ 1525.463753][T19677] loop8: detected capacity change from 0 to 1 [ 1525.478163][T19677] Dev loop8: unable to read RDB block 1 [ 1525.490065][T19677] loop8: unable to read partition table [ 1525.496315][T19677] loop8: partition table beyond EOD, truncated [ 1525.502485][T19677] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1525.640552][T19677] futex_wake_op: syz.3.4275 tries to shift op by -33; fix this program [ 1525.652714][T19677] netdevsim netdevsim3: Direct firmware load for . [ 1525.652714][T19677] failed with error -2 [ 1525.663523][T19677] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1525.663523][T19677] [ 1525.935105][T19687] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1525.944999][T19687] cramfs: wrong magic [ 1528.855291][T19724] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1528.867730][T19724] cramfs: wrong magic [ 1530.237627][T19726] input: syz1 as /devices/virtual/input/input44 [ 1530.456435][T19735] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1530.466046][T19735] cramfs: wrong magic [ 1531.695582][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1531.939268][T19754] fuse: Bad value for 'rootmode' [ 1533.030549][T19764] loop4: detected capacity change from 0 to 512 [ 1533.113953][T19764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1533.608388][T19764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1533.642909][T19764] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.662206][T19786] fuse: Bad value for 'rootmode' [ 1535.319254][T14609] EXT4-fs (loop4): unmounting filesystem. [ 1536.475836][T19823] fuse: Unknown parameter 'use00000000000000000000' [ 1538.834562][T18845] Bluetooth: hci0: command 0x0c20 tx timeout [ 1538.860276][T19860] dccp_close: ABORT with 68 bytes unread [ 1539.153986][T19868] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1539.164772][T19868] hfsplus: unable to find HFS+ superblock [ 1539.301325][T19868] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1539.310848][T19868] cramfs: wrong magic [ 1541.019070][T19878] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1541.215764][T19878] File: /dev/nullb0 PID: 19878 Comm: syz.2.4339 [ 1542.846961][T19911] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1542.857002][T19911] cramfs: wrong magic [ 1544.324693][T19935] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1544.335506][T19935] hfsplus: unable to find HFS+ superblock [ 1544.346400][T19935] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1544.356054][T19935] cramfs: wrong magic [ 1544.434825][ T4295] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1545.322920][ T4295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.334058][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1545.350618][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1545.444366][ T4295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.535598][ T4295] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1545.594764][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.651584][ T4295] usb 5-1: config 0 descriptor?? [ 1545.690689][ T4295] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 1545.807719][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.814068][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.997572][T18312] usb 5-1: USB disconnect, device number 66 [ 1546.529712][T18312] appletouch 5-1:0.0: input: appletouch disconnected [ 1547.907519][T19971] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1547.917921][T19971] hfsplus: unable to find HFS+ superblock [ 1547.936825][T19971] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1547.955320][T19971] cramfs: wrong magic [ 1550.760014][T19995] loop3: detected capacity change from 0 to 256 [ 1550.824050][T19997] fuse: Unknown parameter 'user_i00000000000000000000' [ 1550.877442][T19995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1550.904633][T10266] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1551.123715][T20003] vivid-000: disconnect [ 1551.145132][T10266] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1551.157656][T20003] Illegal XDP return value 1804946040 on prog (id 487) dev N/A, expect packet loss! [ 1552.002813][T20001] vivid-000: reconnect [ 1552.011661][T10266] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1552.020846][T10266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.039477][T10266] usb 2-1: config 0 descriptor?? [ 1552.129102][T20006] loop4: detected capacity change from 0 to 128 [ 1552.476495][T10266] ath6kl: Failed to submit usb control message: -71 [ 1552.612325][T10266] ath6kl: unable to send the bmi data to the device: -71 [ 1552.761079][T10266] ath6kl: Unable to send get target info: -71 [ 1552.777965][T10266] ath6kl: Failed to init ath6kl core: -71 [ 1552.942834][T10266] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1552.976647][T10266] usb 2-1: USB disconnect, device number 71 [ 1554.439245][T20031] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1554.448948][T20031] hfsplus: unable to find HFS+ superblock [ 1554.459024][T20031] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1554.468050][T20031] cramfs: wrong magic [ 1555.190997][T20034] fuse: Unknown parameter 'user_i00000000000000000000' [ 1555.891895][T20044] loop4: detected capacity change from 0 to 8 [ 1558.642352][T20055] loop3: detected capacity change from 0 to 4096 [ 1558.832007][T20059] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1559.787539][T20070] loop4: detected capacity change from 0 to 64 [ 1561.443118][T20084] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1561.452737][T20084] hfsplus: unable to find HFS+ superblock [ 1561.462388][T20084] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1561.465385][T20084] cramfs: wrong magic [ 1562.274894][T20086] loop4: detected capacity change from 0 to 128 [ 1562.323875][T20086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1562.324106][T20086] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.717885][T14609] EXT4-fs (loop4): unmounting filesystem. [ 1563.977517][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1564.057790][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1564.096890][T20108] loop4: detected capacity change from 0 to 2048 [ 1564.104687][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1564.303873][T20108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1564.534294][T10266] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1566.094314][T10266] usb 4-1: Using ep0 maxpacket: 16 [ 1566.101331][T10266] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 1566.120118][T10266] usb 4-1: config 0 has no interface number 0 [ 1566.136901][T10266] usb 4-1: config 0 interface 114 has no altsetting 0 [ 1566.156755][T10266] usb 4-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f2.69 [ 1566.235567][T10266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.287635][T10266] usb 4-1: Product: syz [ 1566.295953][T10266] usb 4-1: Manufacturer: syz [ 1566.357925][T10266] usb 4-1: SerialNumber: syz [ 1566.427258][T10266] usb 4-1: config 0 descriptor?? [ 1566.438310][T14609] EXT4-fs (loop4): unmounting filesystem. [ 1566.638917][T10266] usb 4-1: USB disconnect, device number 76 [ 1567.631012][T20141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4423'. [ 1568.254226][T20145] loop3: detected capacity change from 0 to 1024 [ 1570.507340][T20145] hfsplus: xattr search failed [ 1573.229025][T15352] hfsplus: node 4:3 still has 1 user(s)! [ 1573.389293][T20181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1573.490836][T20185] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1573.500544][T20185] hfsplus: unable to find HFS+ superblock [ 1573.511716][T20185] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1573.522037][T20185] cramfs: wrong magic [ 1573.554270][T18312] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1574.456147][T18312] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1574.477534][T18312] usb 5-1: config 0 has no interface number 0 [ 1574.919209][T18312] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1574.929758][T18312] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1574.940078][T18312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.970627][T18312] usb 5-1: Product: syz [ 1574.976446][T18312] usb 5-1: Manufacturer: syz [ 1574.989386][T18312] usb 5-1: SerialNumber: syz [ 1575.011286][T18312] usb 5-1: config 0 descriptor?? [ 1575.877157][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.029786][T18312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1576.238007][T20209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1576.274505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.283211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.291466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.354694][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.515112][T18319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.523664][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.546588][T18319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.871369][T18845] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1576.932702][T20217] fuse: Bad value for 'fd' [ 1576.964070][T20219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1577.328565][T20226] loop3: detected capacity change from 0 to 32768 [ 1577.345770][T20226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4450 (20226) [ 1577.362593][T18312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1577.375839][T20226] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1577.386073][T20226] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1577.395082][T20226] BTRFS info (device loop3): enabling ssd optimizations [ 1577.402021][T20226] BTRFS info (device loop3): using free space tree [ 1577.404577][T13335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.417967][T18312] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1577.444384][T18312] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1577.457323][T18312] usb 5-1: USB disconnect, device number 67 [ 1578.663703][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.706594][T15352] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1580.995102][ T7170] net_ratelimit: 5 callbacks suppressed [ 1580.995120][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.680226][T20279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4458'. [ 1581.893601][T20283] fuse: Bad value for 'fd' [ 1582.035137][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4461'. [ 1582.044594][T13335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.294308][T20266] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1582.563319][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1582.756371][T20266] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 1582.774452][T20266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.813983][T20266] usb 3-1: config 0 has no interfaces? [ 1584.101887][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.110416][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.121798][T20266] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1584.138665][T20266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.149157][T20266] usb 3-1: Product: syz [ 1584.157890][T20266] usb 3-1: Manufacturer: syz [ 1584.164502][T20266] usb 3-1: SerialNumber: syz [ 1584.189281][T20266] usb 3-1: config 0 descriptor?? [ 1584.419600][T20266] usb 3-1: USB disconnect, device number 54 [ 1585.381689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.390112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.398270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.709152][T20318] fuse: Bad value for 'fd' [ 1585.874091][T20319] dccp_close: ABORT with 68 bytes unread [ 1586.201125][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.314832][T20325] loop2: detected capacity change from 0 to 2048 [ 1587.648196][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.656378][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.665257][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.696807][T20325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1587.824239][T20266] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1588.155207][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4475'. [ 1588.662138][T14175] EXT4-fs (loop2): unmounting filesystem. [ 1588.713585][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.724363][T20266] usb 2-1: Using ep0 maxpacket: 16 [ 1588.736181][T20266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.786914][T20266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1588.837652][T20266] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1588.926188][T20266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.994521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.002996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.114837][T20266] usb 2-1: Product: syz [ 1589.201475][T20266] usb 2-1: Manufacturer: syz [ 1589.328372][T20266] usb 2-1: SerialNumber: syz [ 1589.714793][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.745573][T20266] usb 2-1: can't set config #1, error -71 [ 1589.781575][T20266] usb 2-1: USB disconnect, device number 72 [ 1590.028580][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1590.676590][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.224030][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.581600][T20366] fuse: Unknown parameter '0x0000000000000003' [ 1591.876346][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.274974][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.694172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.702524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.715369][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.736356][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.940156][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.040979][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1596.372542][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.385919][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.395495][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.404500][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.589810][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.631727][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.771452][T20407] fuse: Unknown parameter '0x0000000000000003' [ 1597.954418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.962835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.675288][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.234642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.877069][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.886713][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.919889][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.930699][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.939618][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.950144][T13335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.130428][T20421] bridge0: port 3(syz_tun) entered blocking state [ 1602.149348][T20421] bridge0: port 3(syz_tun) entered disabled state [ 1602.177389][T20421] device syz_tun entered promiscuous mode [ 1602.198283][T20421] bridge0: port 3(syz_tun) entered blocking state [ 1602.204924][T20421] bridge0: port 3(syz_tun) entered forwarding state [ 1602.212015][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1603.489017][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.993871][T20439] fuse: Unknown parameter '0x0000000000000003' [ 1604.514885][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.284981][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.314769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.329594][T18845] Bluetooth: hci5: Invalid handle: 0xff00 > 0x0eff [ 1607.239815][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.246683][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.424274][ T4295] net_ratelimit: 3 callbacks suppressed [ 1607.424292][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.812872][T20472] loop2: detected capacity change from 0 to 32768 [ 1607.821249][T20472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4516 (20472) [ 1607.838126][T20472] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1607.848474][T20472] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1607.857267][T20472] BTRFS info (device loop2): enabling ssd optimizations [ 1607.864334][T20472] BTRFS info (device loop2): using free space tree [ 1608.214842][T20475] netlink: 'syz.4.4515': attribute type 9 has an invalid length. [ 1608.434750][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.679367][T14175] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1608.720878][T20500] fuse: Unknown parameter '0x0000000000000003' [ 1609.365012][T15725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.164659][T15726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.366879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.375208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.383397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.397885][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.089742][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.098044][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.183931][T18845] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 1613.244384][T15334] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1613.434582][T15334] usb 1-1: device descriptor read/64, error -71 [ 1613.504321][ T7170] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1613.686936][ T7170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.698346][ T7170] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1613.707939][T15334] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 1613.716525][ T7170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.743101][ T7170] usb 5-1: config 0 descriptor?? [ 1613.864622][T15334] usb 1-1: device descriptor read/64, error -71 [ 1614.012839][T15334] usb usb1-port1: attempt power cycle [ 1614.125057][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.243633][ T7170] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 1614.317300][ T7170] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001E/input/input46 [ 1614.622770][ T7170] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1614.779359][ T7170] usb 5-1: USB disconnect, device number 68 [ 1615.154889][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.374523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.382870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.391352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.411069][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.485220][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.555060][T20548] fuse: Unknown parameter '0x0000000000000003' [ 1616.644725][T20551] loop3: detected capacity change from 0 to 1024 [ 1616.755986][T20551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1616.830765][T20549] loop4: detected capacity change from 0 to 32768 [ 1616.842191][T20549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4531 (20549) [ 1616.862774][T20549] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1616.873016][T20549] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1616.881834][T20549] BTRFS info (device loop4): enabling ssd optimizations [ 1616.888821][T20549] BTRFS info (device loop4): using free space tree [ 1618.354764][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.672150][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.732206][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.833606][T15352] EXT4-fs (loop3): unmounting filesystem. [ 1619.840941][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1619.946886][T18845] Bluetooth: hci4: Invalid handle: 0xff00 > 0x0eff [ 1620.767787][T15725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.853434][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.062093][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1621.815475][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.835665][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.874455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.882744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.954659][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.096480][T20619] netlink: 'syz.1.4537': attribute type 1 has an invalid length. [ 1623.130647][T20619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1623.331007][T20623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1623.625096][ T4676] net_ratelimit: 4 callbacks suppressed [ 1623.625110][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.874797][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.897421][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.125131][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.414369][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.423094][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.463544][T20631] loop8: detected capacity change from 0 to 1 [ 1625.470281][T20631] Dev loop8: unable to read RDB block 1 [ 1625.475921][T20631] loop8: unable to read partition table [ 1625.481659][T20631] loop8: partition table beyond EOD, truncated [ 1625.487840][T20631] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1625.714487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.722798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.944421][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.953729][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.986380][T20631] futex_wake_op: syz.0.4550 tries to shift op by -33; fix this program [ 1626.007066][T20642] loop2: detected capacity change from 0 to 4096 [ 1626.018518][T20631] netdevsim netdevsim0: Direct firmware load for . [ 1626.018518][T20631] failed with error -2 [ 1626.029316][T20631] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1626.029316][T20631] [ 1626.090862][T20642] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1626.115760][T20642] NILFS (loop2): trying rollback from an earlier position [ 1626.169838][T20642] NILFS (loop2): recovery complete [ 1626.213533][T20644] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.086400][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1627.924332][T20515] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1628.871113][T17694] net_ratelimit: 7 callbacks suppressed [ 1628.871133][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.892195][T20515] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1628.922673][T20515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.007462][T20664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.195279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.511734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.520269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.545594][T20515] usb 3-1: Product: syz [ 1630.567197][T20515] usb 3-1: Manufacturer: syz [ 1630.640132][T20515] usb 3-1: SerialNumber: syz [ 1630.771131][T20515] usb 3-1: config 0 descriptor?? [ 1631.006650][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.009496][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.026252][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.029837][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.060490][T20515] usb 3-1: can't set config #0, error -71 [ 1631.098884][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.102390][T20667] netlink: 'syz.3.4559': attribute type 1 has an invalid length. [ 1631.133361][T20515] usb 3-1: USB disconnect, device number 55 [ 1631.295017][T20667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1632.593317][T20677] vivid-000: disconnect [ 1632.621557][T20674] vivid-000: reconnect [ 1632.635094][T20683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1634.236515][T10266] net_ratelimit: 15 callbacks suppressed [ 1634.236535][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.251123][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.349898][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 1634.723462][T18991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.744341][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.753392][T18991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.763381][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.773252][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.944813][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.953409][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.439419][T20710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.567506][T20712] loop8: detected capacity change from 0 to 1 [ 1636.598720][T20712] Dev loop8: unable to read RDB block 1 [ 1636.610887][T20712] loop8: unable to read partition table [ 1636.643080][T20712] loop8: partition table beyond EOD, truncated [ 1636.720554][T20712] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1636.739369][T20714] futex_wake_op: syz.4.4568 tries to shift op by -33; fix this program [ 1636.784378][T20712] netdevsim netdevsim4: Direct firmware load for . [ 1636.784378][T20712] failed with error -2 [ 1636.799394][T20712] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1636.799394][T20712] [ 1636.839934][T20717] loop3: detected capacity change from 0 to 64 [ 1637.298110][T20719] loop2: detected capacity change from 0 to 32768 [ 1637.591443][T20719] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4573 (20719) [ 1637.641319][T20719] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1637.651678][T20719] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1637.660346][T20719] BTRFS info (device loop2): enabling ssd optimizations [ 1637.667330][T20719] BTRFS info (device loop2): using free space tree [ 1637.767383][ T4295] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1637.988071][ T4295] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1638.139852][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.144439][T20744] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 1638.532359][ T4295] usb 1-1: Product: syz [ 1638.537361][ T4295] usb 1-1: Manufacturer: syz [ 1638.543281][ T4295] usb 1-1: SerialNumber: syz [ 1638.750197][ T4295] usb 1-1: config 0 descriptor?? [ 1638.763072][T14175] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1638.766566][T20744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1639.088213][ T4295] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1639.110893][T20534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (20534) [ 1639.149483][T20755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1640.208567][T15334] net_ratelimit: 13 callbacks suppressed [ 1640.208586][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.215122][T15289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.231802][T15334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.253919][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.264392][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.439663][ T4295] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1640.485370][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 1640.522040][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.594412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.602696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.611940][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.675403][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.026005][ T7] usb 1-1: USB disconnect, device number 78 [ 1642.115894][T18845] Bluetooth: Wrong link type (-22) [ 1642.697402][T20790] loop2: detected capacity change from 0 to 32768 [ 1643.267537][T20790] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1643.278093][T20790] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1643.286881][T20790] BTRFS info (device loop2): enabling ssd optimizations [ 1643.293854][T20790] BTRFS info (device loop2): using free space tree [ 1643.803181][T20815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4590'. [ 1643.813371][T20813] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1643.822949][T20813] hfsplus: unable to find HFS+ superblock [ 1643.838809][T20813] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1643.845938][T20813] cramfs: wrong magic [ 1645.011631][T14175] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1645.199407][T20825] vivid-000: disconnect [ 1645.395079][ T5077] net_ratelimit: 14 callbacks suppressed [ 1645.395099][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.705566][ T4307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.995858][T20823] vivid-000: reconnect [ 1646.029042][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.585795][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.593992][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.614317][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.676470][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.772070][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.887047][T20845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1647.502301][T15773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.564346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.781023][ T4295] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1648.329478][ T4295] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1648.599579][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.634491][ T4295] usb 1-1: Product: syz [ 1648.648863][ T4295] usb 1-1: Manufacturer: syz [ 1648.839735][ T4295] usb 1-1: SerialNumber: syz [ 1648.862778][ T4295] usb 1-1: config 0 descriptor?? [ 1649.824452][ T4295] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1649.837065][T20863] loop8: detected capacity change from 0 to 1 [ 1649.843697][T20863] Dev loop8: unable to read RDB block 1 [ 1649.849334][T20863] loop8: unable to read partition table [ 1649.855101][T20863] loop8: partition table beyond EOD, truncated [ 1649.861248][T20863] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1649.874934][T20863] futex_wake_op: syz.4.4600 tries to shift op by -33; fix this program [ 1649.893892][T20863] netdevsim netdevsim4: Direct firmware load for . [ 1649.893892][T20863] failed with error -2 [ 1649.904480][T20863] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1649.904480][T20863] [ 1650.615179][T15773] net_ratelimit: 14 callbacks suppressed [ 1650.615201][T15773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.834964][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.843982][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.852824][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.432771][T20887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.441896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.451860][T20887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.461429][T20887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.469676][T20887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.926265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.971013][ T4295] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1652.906922][T20511] usb 1-1: USB disconnect, device number 79 [ 1653.067374][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 1653.950657][T20900] vivid-000: disconnect [ 1654.720846][T20898] vivid-000: reconnect [ 1656.133416][T20838] net_ratelimit: 24 callbacks suppressed [ 1656.133433][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.141671][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.155438][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.164251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.172524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.200457][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.208656][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.155478][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.164050][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.804996][T20916] futex_wake_op: syz.2.4615 tries to shift op by -33; fix this program [ 1657.812927][T20917] netdevsim netdevsim2: Direct firmware load for . [ 1657.812927][T20917] failed with error -2 [ 1657.845722][T20917] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1657.845722][T20917] [ 1657.995973][ T4510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.228252][T20939] loop4: detected capacity change from 0 to 32768 [ 1660.249504][T20939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4612 (20939) [ 1660.269859][T20939] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1660.280414][T20939] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1660.289123][T20939] BTRFS info (device loop4): enabling ssd optimizations [ 1660.296135][T20939] BTRFS info (device loop4): using free space tree [ 1660.394270][T20511] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1660.527950][T20959] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1660.537774][T20959] hfsplus: unable to find HFS+ superblock [ 1660.551185][T20959] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1660.563405][T20959] cramfs: wrong magic [ 1660.752748][T20511] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1661.325602][T20511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.335311][T20511] usb 4-1: Product: syz [ 1661.346092][T20511] usb 4-1: Manufacturer: syz [ 1661.350829][T20511] usb 4-1: SerialNumber: syz [ 1661.358590][T20511] usb 4-1: config 0 descriptor?? [ 1661.649171][T20511] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1661.848659][T20969] vivid-000: disconnect [ 1661.944532][T19828] net_ratelimit: 13 callbacks suppressed [ 1661.944552][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.053894][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1662.201905][T20964] vivid-000: reconnect [ 1662.227334][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.235596][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.489481][T13573] Bluetooth: hci0: command 0x2016 tx timeout [ 1662.547554][T20262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.348471][T20511] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1663.547416][T20979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.556844][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.561274][T20759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.573123][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.694994][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.034000][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1664.595431][T20841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.935237][T20841] usb 4-1: USB disconnect, device number 77 [ 1665.911055][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1666.051803][T21002] futex_wake_op: syz.4.4629 tries to shift op by -33; fix this program [ 1666.108608][T21002] netdevsim netdevsim4: Direct firmware load for . [ 1666.108608][T21002] failed with error -2 [ 1666.122002][T21002] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1666.122002][T21002] [ 1667.260586][T20979] net_ratelimit: 19 callbacks suppressed [ 1667.260608][T20979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.274725][T20759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.286387][T16453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.640556][T21020] vivid-000: disconnect [ 1668.146859][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.156030][T20841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.318693][T21016] vivid-000: reconnect [ 1668.698210][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.716547][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.750425][T20979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.834342][T20841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.842811][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.965827][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.274731][T20759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.334269][T20979] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1670.627848][T20979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1670.647350][T20979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.669168][T20979] usb 4-1: Product: syz [ 1670.673376][T20979] usb 4-1: Manufacturer: syz [ 1670.699536][T20979] usb 4-1: SerialNumber: syz [ 1670.872289][T20979] usb 4-1: config 0 descriptor?? [ 1671.118667][T20979] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1672.135576][T21053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4646'. [ 1672.404666][T16014] net_ratelimit: 9 callbacks suppressed [ 1672.404683][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.483387][T20979] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1673.157683][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.167137][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.355253][T18312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.602521][T20759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.906545][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.025764][T20759] usb 4-1: USB disconnect, device number 78 [ 1674.120959][T21073] vivid-000: disconnect [ 1674.205134][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.213558][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.354385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.362804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.860450][T21071] vivid-000: reconnect [ 1675.093463][T21075] loop4: detected capacity change from 0 to 32768 [ 1675.108470][T21075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4653 (21075) [ 1675.122594][T21075] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1675.132782][T21075] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1675.141446][T21075] BTRFS info (device loop4): enabling ssd optimizations [ 1675.148491][T21075] BTRFS info (device loop4): using free space tree [ 1675.406644][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 1676.380675][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1676.586991][T21094] loop3: detected capacity change from 0 to 4096 [ 1676.946079][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1677.996189][ T46] net_ratelimit: 11 callbacks suppressed [ 1677.996207][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.563951][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.572275][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.674326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.682751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.691091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.724251][ T4295] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1678.957428][ T4295] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1679.070049][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.110985][T21128] delete_channel: no stack [ 1679.158137][ T4295] usb 3-1: Product: syz [ 1679.162354][ T4295] usb 3-1: Manufacturer: syz [ 1679.199488][ T4295] usb 3-1: SerialNumber: syz [ 1679.282001][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.331394][T21138] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1679.341157][T21138] hfsplus: unable to find HFS+ superblock [ 1679.349353][T21138] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1679.358239][T21138] cramfs: wrong magic [ 1679.954358][T18845] Bluetooth: hci3: command 0x2016 tx timeout [ 1680.023460][ T4666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.033316][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.041658][T20840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.096626][ T4295] usb 3-1: config 0 descriptor?? [ 1680.340381][ T4295] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1680.787812][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4669'. [ 1681.837874][ T4295] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1682.364245][T21158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1683.149004][T20838] usb 3-1: USB disconnect, device number 56 [ 1683.328941][T20839] net_ratelimit: 11 callbacks suppressed [ 1683.328959][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.342860][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.364320][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.365999][T15773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.374300][T20511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.394534][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.404346][T20515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.413018][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.154609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.162815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.704640][T21178] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1685.714330][T21178] hfsplus: unable to find HFS+ superblock [ 1685.725739][T21178] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1685.735332][T21178] cramfs: wrong magic [ 1686.928309][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1687.523105][T21189] loop8: detected capacity change from 0 to 1 [ 1687.540879][T21189] Dev loop8: unable to read RDB block 1 [ 1687.550710][T21189] loop8: unable to read partition table [ 1687.565177][T21189] loop8: partition table beyond EOD, truncated [ 1687.593892][T21189] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1687.667231][T21189] futex_wake_op: syz.1.4683 tries to shift op by -33; fix this program [ 1687.690617][T21189] netdevsim netdevsim1: Direct firmware load for . [ 1687.690617][T21189] failed with error -2 [ 1687.712601][T21189] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1687.712601][T21189] [ 1688.214239][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1688.256199][T21198] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1688.265800][T21198] hfsplus: unable to find HFS+ superblock [ 1688.275477][T21198] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1688.284311][T21198] cramfs: wrong magic [ 1688.354429][T20839] net_ratelimit: 11 callbacks suppressed [ 1688.354449][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.368715][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.514400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.522722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.125693][T17737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.154519][T18991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.163422][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.172058][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.405906][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.414645][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.970704][T21213] loop4: detected capacity change from 0 to 32768 [ 1691.978777][T21213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4691 (21213) [ 1691.997620][T21213] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1692.007842][T21213] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1692.016596][T21213] BTRFS info (device loop4): enabling ssd optimizations [ 1692.023568][T21213] BTRFS info (device loop4): using free space tree [ 1693.055058][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1693.639446][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1693.879403][T21246] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1693.889392][T21246] hfsplus: unable to find HFS+ superblock [ 1693.897703][T21246] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1693.907108][T21246] cramfs: wrong magic [ 1694.058710][ T4297] net_ratelimit: 16 callbacks suppressed [ 1694.058731][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.114594][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.155011][ T4666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.536301][T21251] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1694.545681][T21251] hfsplus: unable to find HFS+ superblock [ 1694.606969][T21251] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1694.614198][T21251] cramfs: wrong magic [ 1695.526766][T21252] delete_channel: no stack [ 1695.640927][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.649987][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.664227][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.724166][T21247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.964295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.972584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.361382][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.161241][ T4297] net_ratelimit: 10 callbacks suppressed [ 1699.161264][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.315776][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.394556][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.402871][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.303030][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.335830][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.634558][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.154356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.162794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.171245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.372316][T21296] delete_channel: no stack [ 1702.317352][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1702.531085][T21315] vivid-000: disconnect [ 1703.061784][T21309] vivid-000: reconnect [ 1704.643454][T20839] net_ratelimit: 12 callbacks suppressed [ 1704.643474][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.657706][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.765625][T20260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.388198][T21334] loop4: detected capacity change from 0 to 32768 [ 1705.396169][T21334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4724 (21334) [ 1705.411416][T21334] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1705.421600][T21334] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1705.430325][T21334] BTRFS info (device loop4): enabling ssd optimizations [ 1705.437337][T21334] BTRFS info (device loop4): using free space tree [ 1705.456464][T21098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.714382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.722845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.731176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.741435][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.751047][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.570597][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1706.755929][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.835061][T21355] delete_channel: no stack [ 1707.003691][T21361] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1707.011087][T21361] cramfs: wrong magic [ 1709.884339][ C1] net_ratelimit: 11 callbacks suppressed [ 1709.884374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.898324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.993998][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.002455][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.005443][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.018927][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.519393][ T4241] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1711.728461][ T4241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1711.789269][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.926921][ T4241] usb 5-1: Product: syz [ 1712.012614][ T4241] usb 5-1: Manufacturer: syz [ 1712.035316][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.043775][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.084822][ T4241] usb 5-1: SerialNumber: syz [ 1712.157782][ T4241] usb 5-1: config 0 descriptor?? [ 1712.267546][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.368318][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.635249][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1712.691210][ T4241] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1713.289574][T21399] loop3: detected capacity change from 0 to 32768 [ 1713.305541][T21399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4737 (21399) [ 1713.320230][T21399] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1713.330444][T21399] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1713.339148][T21399] BTRFS info (device loop3): enabling ssd optimizations [ 1713.346154][T21399] BTRFS info (device loop3): using free space tree [ 1713.789913][T21411] overlayfs: failed to resolve './file0': -2 [ 1715.225230][ C0] net_ratelimit: 15 callbacks suppressed [ 1715.225248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.239298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.259036][T21429] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1715.268513][T21429] cramfs: wrong magic [ 1715.486594][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.495001][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.514394][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.522740][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.651360][T20980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.701547][T21399] BTRFS error (device loop3): open_ctree failed: -22 [ 1716.905792][ T4241] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1716.951058][ T4241] usb 5-1: USB disconnect, device number 69 [ 1716.991204][T16390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.479282][T21440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.489054][T20837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.433843][T21456] overlayfs: failed to resolve './file0': -2 [ 1720.984637][ C0] net_ratelimit: 5 callbacks suppressed [ 1720.984668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.998499][T21440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.006738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.017255][T21440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.054326][T20934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.086015][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.094801][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.103012][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.116097][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.124334][T21465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.483541][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1721.908103][T21474] vivid-000: disconnect [ 1722.194500][T13573] Bluetooth: hci1: command 0xfc11 tx timeout [ 1722.201616][T18845] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1722.228497][T21466] sp0: Synchronizing with TNC [ 1722.706797][T21472] vivid-000: reconnect [ 1724.178654][ T2164] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1724.279811][T21489] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 1724.326434][T21489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1724.367666][ T2164] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1724.407287][ T2164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.506470][ T2164] usb 4-1: Product: syz [ 1724.527100][ T2164] usb 4-1: Manufacturer: syz [ 1724.538531][ T2164] usb 4-1: SerialNumber: syz [ 1724.772897][ T2164] usb 4-1: config 0 descriptor?? [ 1725.044903][ T2164] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1725.191306][T21505] overlayfs: failed to resolve './file0': -2 [ 1726.610748][T21440] net_ratelimit: 23 callbacks suppressed [ 1726.610767][T21440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.625307][T20837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.721512][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1726.934832][T21098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.328108][ T2164] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1727.356338][ T2164] usb 4-1: USB disconnect, device number 79 [ 1727.466579][T21520] vivid-000: disconnect [ 1727.794437][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.185689][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.199458][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.231271][T21517] vivid-000: reconnect [ 1728.246052][T21440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.254525][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.234312][T21526] loop4: detected capacity change from 0 to 32768 [ 1729.242014][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.268531][T21526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4769 (21526) [ 1729.303437][T21534] delete_channel: no stack [ 1729.325375][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.779328][T21535] netlink: 'syz.2.4772': attribute type 1 has an invalid length. [ 1729.788217][T21526] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1729.798820][T21526] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1729.807544][T21526] BTRFS info (device loop4): enabling ssd optimizations [ 1729.814545][T21526] BTRFS info (device loop4): using free space tree [ 1729.857243][T21535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1729.925090][T21537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4772'. [ 1730.818484][T21553] loop3: detected capacity change from 0 to 32768 [ 1730.842552][T21553] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.4775 (21553) [ 1731.600938][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.607354][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.619455][ T4297] net_ratelimit: 8 callbacks suppressed [ 1731.619471][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.654306][T20422] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1731.896609][T21553] overlayfs: failed to resolve './file1': -2 [ 1731.942078][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.944425][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1732.144189][T21526] BTRFS error (device loop4): open_ctree failed: -12 [ 1732.245553][T18991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.275074][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.896379][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.005875][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.615135][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.714600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.722984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.960315][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.860301][T21588] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1734.869416][T21588] cramfs: wrong magic [ 1734.984257][ T4299] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1735.889709][ T4299] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1735.954312][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.032151][T21598] delete_channel: no stack [ 1736.101701][ T4299] usb 4-1: Product: syz [ 1736.185934][ T4299] usb 4-1: Manufacturer: syz [ 1736.299148][ T4299] usb 4-1: SerialNumber: syz [ 1736.472193][ T4299] usb 4-1: config 0 descriptor?? [ 1736.724295][ T4299] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1736.754402][T18150] net_ratelimit: 20 callbacks suppressed [ 1736.754416][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.768682][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.835175][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.994466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.003100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.011570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.170643][T21605] loop4: detected capacity change from 0 to 32768 [ 1737.179278][T21605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4788 (21605) [ 1737.197376][T21605] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1737.208159][T21605] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1737.216909][T21605] BTRFS info (device loop4): enabling ssd optimizations [ 1737.223920][T21605] BTRFS info (device loop4): using free space tree [ 1737.425710][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1737.716290][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.753178][ T4307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.804620][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.805012][T14506] [ 1737.815076][T14506] ============================================ [ 1737.821239][T14506] WARNING: possible recursive locking detected [ 1737.827431][T14506] 6.1.134-syzkaller #0 Not tainted [ 1737.832551][T14506] -------------------------------------------- [ 1737.838729][T14506] kworker/u4:1/14506 is trying to acquire lock: [ 1737.844981][T14506] ffff88807c49b218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x22db/0x3d50 [ 1737.857002][T14506] [ 1737.857002][T14506] but task is already holding lock: [ 1737.864375][T14506] ffff8880586e2258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x12c7/0x3d50 [ 1737.876418][T14506] [ 1737.876418][T14506] other info that might help us debug this: [ 1737.884493][T14506] Possible unsafe locking scenario: [ 1737.884493][T14506] [ 1737.891958][T14506] CPU0 [ 1737.895248][T14506] ---- [ 1737.898532][T14506] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 1737.905494][T14506] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 1737.912445][T14506] [ 1737.912445][T14506] *** DEADLOCK *** [ 1737.912445][T14506] [ 1737.920589][T14506] May be due to missing lock nesting notation [ 1737.920589][T14506] [ 1737.928905][T14506] 7 locks held by kworker/u4:1/14506: [ 1737.934271][T14506] #0: ffff88807ad21138 ((wq_completion)bond1#3){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1737.944805][T14506] #1: ffffc90003117d20 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1737.957090][T14506] #2: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: bond_alb_monitor+0x10c/0x1750 [ 1737.966800][T14506] #3: ffffffff8d32e7a0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3d50 [ 1737.976821][T14506] #4: ffff8880586e2258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x12c7/0x3d50 [ 1737.989292][T14506] #5: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: ip_finish_output2+0x3ee/0x1270 [ 1737.999099][T14506] #6: ffffffff8d32e7a0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3d50 [ 1738.009127][T14506] [ 1738.009127][T14506] stack backtrace: [ 1738.015142][T14506] CPU: 0 PID: 14506 Comm: kworker/u4:1 Not tainted 6.1.134-syzkaller #0 [ 1738.023600][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1738.033694][T14506] Workqueue: bond1 bond_alb_monitor [ 1738.038933][T14506] Call Trace: [ 1738.042235][T14506] [ 1738.045163][T14506] dump_stack_lvl+0x1e3/0x2cb [ 1738.049889][T14506] ? nf_tcp_handle_invalid+0x647/0x647 [ 1738.055370][T14506] ? panic+0x764/0x764 [ 1738.059484][T14506] validate_chain+0x4711/0x5950 [ 1738.064370][T14506] ? reacquire_held_locks+0x660/0x660 [ 1738.069776][T14506] ? reacquire_held_locks+0x660/0x660 [ 1738.075179][T14506] ? __nf_conntrack_find_get+0x8d/0x760 [ 1738.080828][T14506] ? lockdep_hardirqs_on+0x94/0x130 [ 1738.086056][T14506] ? __lock_acquire+0x1f80/0x1f80 [ 1738.091102][T14506] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 1738.097374][T14506] ? validate_chain+0x112/0x5950 [ 1738.102358][T14506] ? nf_ct_key_equal+0x4b9/0x690 [ 1738.107338][T14506] ? mark_lock+0x9a/0x340 [ 1738.111705][T14506] __lock_acquire+0x125b/0x1f80 [ 1738.116579][T14506] lock_acquire+0x1f8/0x5a0 [ 1738.121114][T14506] ? __dev_queue_xmit+0x22db/0x3d50 [ 1738.126334][T14506] ? read_lock_is_recursive+0x10/0x10 [ 1738.131726][T14506] ? read_lock_is_recursive+0x10/0x10 [ 1738.137132][T14506] ? __local_bh_enable_ip+0x164/0x1f0 [ 1738.142539][T14506] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1738.148715][T14506] ? rcu_read_lock_bh_held+0x7a/0x110 [ 1738.154121][T14506] ? rcu_read_lock_held+0x40/0x40 [ 1738.159176][T14506] _raw_spin_lock+0x2a/0x40 [ 1738.163700][T14506] ? __dev_queue_xmit+0x22db/0x3d50 [ 1738.168924][T14506] __dev_queue_xmit+0x22db/0x3d50 [ 1738.173964][T14506] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1738.179088][T14506] ? netdev_core_pick_tx+0x320/0x320 [ 1738.184389][T14506] ? mark_lock+0x9a/0x340 [ 1738.188742][T14506] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1738.194751][T14506] ? ip_finish_output2+0xb12/0x1270 [ 1738.199967][T14506] ? ip_finish_output2+0x3ee/0x1270 [ 1738.205287][T14506] ip_finish_output2+0xd6e/0x1270 [ 1738.210356][T14506] ? ip_finish_output2+0x3ee/0x1270 [ 1738.215574][T14506] ? ip_fragment+0x220/0x220 [ 1738.220225][T14506] ? ip_skb_dst_mtu+0x609/0x980 [ 1738.225091][T14506] ? __ip_finish_output+0x3e0/0x4b0 [ 1738.230324][T14506] iptunnel_xmit+0x51a/0x920 [ 1738.235058][T14506] ip_tunnel_xmit+0x1b52/0x2550 [ 1738.240062][T14506] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1738.245098][T14506] ? gre_build_header+0x2fb/0x9a0 [ 1738.250146][T14506] gre_tap_xmit+0x4eb/0x6e0 [ 1738.254666][T14506] dev_hard_start_xmit+0x261/0x8c0 [ 1738.259801][T14506] sch_direct_xmit+0x2b2/0x5e0 [ 1738.264577][T14506] ? mrp_pdu_parse_vecattr_event+0x260/0x260 [ 1738.270668][T14506] __dev_queue_xmit+0x1a7a/0x3d50 [ 1738.275711][T14506] ? __dev_queue_xmit+0x2d6/0x3d50 [ 1738.280839][T14506] ? __build_skb_around+0x21d/0x370 [ 1738.286062][T14506] ? netdev_core_pick_tx+0x320/0x320 [ 1738.291377][T14506] ? __alloc_skb+0x1d3/0x2c0 [ 1738.296003][T14506] ? __netdev_alloc_skb+0x10e/0x530 [ 1738.301213][T14506] ? napi_skb_cache_get+0x1e0/0x1e0 [ 1738.306423][T14506] ? skb_put+0x110/0x1f0 [ 1738.310702][T14506] ? memset+0x1f/0x40 [ 1738.314696][T14506] ? alb_send_lp_vid+0x392/0x670 [ 1738.319679][T14506] alb_send_learning_packets+0x197/0x370 [ 1738.325361][T14506] ? bond_alb_monitor+0x1750/0x1750 [ 1738.330593][T14506] bond_alb_monitor+0x3ef/0x1750 [ 1738.335546][T14506] ? bond_alb_monitor+0x10c/0x1750 [ 1738.340690][T14506] ? print_irqtrace_events+0x210/0x210 [ 1738.346168][T14506] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1738.352092][T14506] ? bond_alb_xmit+0x40/0x40 [ 1738.356705][T14506] ? do_raw_spin_unlock+0x137/0x8a0 [ 1738.361918][T14506] ? process_one_work+0x806/0x1260 [ 1738.367037][T14506] process_one_work+0x917/0x1260 [ 1738.371982][T14506] ? worker_detach_from_pool+0x260/0x260 [ 1738.377621][T14506] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1738.383184][T14506] ? kthread_data+0x4e/0xc0 [ 1738.387702][T14506] ? wq_worker_running+0x97/0x190 [ 1738.392771][T14506] worker_thread+0xa47/0x1200 [ 1738.397491][T14506] kthread+0x28d/0x320 [ 1738.401579][T14506] ? worker_clr_flags+0x190/0x190 [ 1738.406642][T14506] ? kthread_blkcg+0xd0/0xd0 [ 1738.411239][T14506] ret_from_fork+0x1f/0x30 [ 1738.415667][T14506] [ 1738.418780][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.943627][ T4299] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1739.242298][ T4299] usb 4-1: USB disconnect, device number 80 [ 1739.390735][T14609] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1741.964377][ T4299] net_ratelimit: 24 callbacks suppressed [ 1741.964395][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.334428][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.434320][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.674500][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.682680][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.714328][ T4368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.004278][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.444435][T14506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.554349][T18315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.714410][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.154330][T18150] net_ratelimit: 23 callbacks suppressed [ 1747.154347][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.168134][T18150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.794340][T20266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog