last executing test programs: 19.739279802s ago: executing program 1 (id=1809): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 18.204172549s ago: executing program 1 (id=1811): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 14.906882949s ago: executing program 3 (id=1816): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 12.255976843s ago: executing program 0 (id=1828): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 11.748513976s ago: executing program 1 (id=1821): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb236100000001"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9.265412876s ago: executing program 0 (id=1822): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.117487199s ago: executing program 2 (id=1823): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 8.912143914s ago: executing program 2 (id=1824): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 8.385957227s ago: executing program 1 (id=1825): socket(0x11, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=r4], 0x14) 8.303438909s ago: executing program 3 (id=1826): syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000380), &(0x7f0000000540), &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) 6.929029213s ago: executing program 2 (id=1827): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2, &(0x7f0000000280)=ANY=[@ANYRES64]) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0) 6.500928343s ago: executing program 3 (id=1829): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 6.123850842s ago: executing program 0 (id=1830): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffffbffb}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="68000000000000002900000036000000ff09000000000000c204000000070726000000000e1901000200000000000000450900000000000001000000000000000500000000000000000000000000000003000000000000000100000000000000050202b2000000005000000000000000290000003600"], 0xb8}, 0x3400c8d4) 6.102286273s ago: executing program 3 (id=1831): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 4.645756438s ago: executing program 3 (id=1832): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 4.54417369s ago: executing program 0 (id=1833): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 4.526439451s ago: executing program 1 (id=1834): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.421187643s ago: executing program 0 (id=1835): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 2.220645987s ago: executing program 3 (id=1836): syz_usb_connect(0x3, 0xf5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 2.217278637s ago: executing program 2 (id=1844): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 2.010955332s ago: executing program 2 (id=1837): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.329759428s ago: executing program 1 (id=1838): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 865.28623ms ago: executing program 0 (id=1839): syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000380), &(0x7f0000000540), &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) 0s ago: executing program 2 (id=1840): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): 549.466245][ T174] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 550.198188][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 551.344549][ T174] usb 4-1: Using ep0 maxpacket: 8 [ 551.357441][ T174] usb 4-1: config 0 has no interfaces? [ 551.362976][ T174] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.386766][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.397265][ T174] usb 4-1: config 0 descriptor?? [ 551.618713][T10016] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.656011][ T174] usb 4-1: USB disconnect, device number 27 [ 551.869202][T10032] loop2: detected capacity change from 0 to 1024 [ 551.881530][T10032] EXT4-fs: Ignoring removed bh option [ 551.926937][T10032] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 552.003477][T10032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.475509][T10038] loop3: detected capacity change from 0 to 32768 [ 552.485973][T10038] (syz.3.1240,10038,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 552.500507][T10038] (syz.3.1240,10038,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 552.532014][T10038] JBD2: Ignoring recovery information on journal [ 552.575481][T10038] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 552.587839][ T6128] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 552.776814][ T6128] usb 3-1: Using ep0 maxpacket: 32 [ 552.799328][ T6128] usb 3-1: unable to get BOS descriptor or descriptor too short [ 552.821385][ T6128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.844188][ T6128] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 552.887432][ T6128] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 552.915935][ T6128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.928284][ T6128] usb 3-1: Product: syz [ 552.932684][ T6128] usb 3-1: Manufacturer: syz [ 552.938928][ T6128] usb 3-1: SerialNumber: syz [ 554.761641][ T6128] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 554.772352][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 554.799263][ T6128] usb 3-1: USB disconnect, device number 24 [ 554.889962][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.934077][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.429307][T10054] loop1: detected capacity change from 0 to 32768 [ 555.458678][T10054] (syz.1.1245,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 555.473281][T10054] (syz.1.1245,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 555.539606][T10054] JBD2: Ignoring recovery information on journal [ 555.584062][T10054] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 556.567336][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 556.987653][ T6128] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 557.189611][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 557.211782][ T6128] usb 2-1: config 0 has no interfaces? [ 557.237206][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.274888][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.288737][ T6128] usb 2-1: config 0 descriptor?? [ 557.560148][T10072] loop0: detected capacity change from 0 to 32768 [ 557.581768][T10072] (syz.0.1249,10072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.595691][T10072] (syz.0.1249,10072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.631509][T10065] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.635125][T10072] JBD2: Ignoring recovery information on journal [ 557.657561][ T9] usb 2-1: USB disconnect, device number 24 [ 557.696799][T10072] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 558.471571][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 562.872192][T10092] loop0: detected capacity change from 0 to 1024 [ 562.892393][T10092] EXT4-fs: Ignoring removed bh option [ 562.920674][T10092] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 563.159086][T10096] loop1: detected capacity change from 0 to 32768 [ 563.168067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.174439][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.185306][T10092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.200609][T10096] (syz.1.1257,10096,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 563.214588][T10096] (syz.1.1257,10096,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 563.273727][T10096] JBD2: Ignoring recovery information on journal [ 563.321457][T10096] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 564.382601][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 564.527015][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 564.746761][T10103] loop2: detected capacity change from 0 to 32768 [ 564.786368][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 564.792156][T10103] (syz.2.1258,10103,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 564.814804][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 564.827551][T10103] (syz.2.1258,10103,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 564.846601][ T174] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 564.864552][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.893830][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 564.913974][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 564.923863][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.933474][ T9] usb 1-1: Product: syz [ 564.938062][T10103] JBD2: Ignoring recovery information on journal [ 564.944742][ T9] usb 1-1: Manufacturer: syz [ 564.951106][ T9] usb 1-1: SerialNumber: syz [ 565.067889][ T174] usb 2-1: Using ep0 maxpacket: 8 [ 565.078062][T10103] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 565.092024][ T174] usb 2-1: config 0 has no interfaces? [ 565.108149][ T174] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.136428][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.392771][ T174] usb 2-1: config 0 descriptor?? [ 565.423216][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 565.446031][ T9] usb 1-1: USB disconnect, device number 29 [ 565.508823][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.594193][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 565.621382][ T6128] usb 2-1: USB disconnect, device number 25 [ 566.050668][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.852250][T10139] loop3: detected capacity change from 0 to 32768 [ 569.875160][T10139] (syz.3.1269,10139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.888965][T10139] (syz.3.1269,10139,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.942340][T10139] JBD2: Ignoring recovery information on journal [ 570.001415][T10139] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 570.958878][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 571.144069][T10154] loop2: detected capacity change from 0 to 32768 [ 571.182229][T10154] (syz.2.1271,10154,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.208286][T10154] (syz.2.1271,10154,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.262095][T10154] JBD2: Ignoring recovery information on journal [ 571.329246][T10154] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 572.283640][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 574.346299][ T6128] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 574.546975][ T6128] usb 3-1: Using ep0 maxpacket: 8 [ 574.561557][ T6128] usb 3-1: config 0 has no interfaces? [ 574.579096][ T6128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 574.596269][ T6128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.618908][ T6128] usb 3-1: config 0 descriptor?? [ 575.894442][ T9] usb 3-1: USB disconnect, device number 25 [ 576.088843][T10178] loop2: detected capacity change from 0 to 1024 [ 576.121486][T10178] EXT4-fs: Ignoring removed bh option [ 576.140065][T10178] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 576.189327][T10178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.353749][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.651917][T10188] loop1: detected capacity change from 0 to 32768 [ 576.695230][T10188] (syz.1.1282,10188,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 576.709746][T10188] (syz.1.1282,10188,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 576.791641][T10188] JBD2: Ignoring recovery information on journal [ 576.994068][T10192] loop2: detected capacity change from 0 to 32768 [ 577.013356][T10192] (syz.2.1281,10192,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.027233][T10192] (syz.2.1281,10192,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.051027][T10192] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 577.063439][T10188] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 577.088184][T10192] JBD2: Ignoring recovery information on journal [ 577.383962][T10192] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 578.673906][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 580.217575][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 581.336274][ T6125] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 581.516273][ T6125] usb 2-1: Using ep0 maxpacket: 8 [ 581.523689][ T6125] usb 2-1: config 0 has no interfaces? [ 581.530955][ T6125] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 581.541086][ T6125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.562185][ T6125] usb 2-1: config 0 descriptor?? [ 583.340226][ T6128] usb 2-1: USB disconnect, device number 26 [ 583.982104][T10221] loop0: detected capacity change from 0 to 1024 [ 584.008272][T10221] EXT4-fs: Ignoring removed bh option [ 584.054432][T10221] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 584.137059][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.335844][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.568603][T10232] loop1: detected capacity change from 0 to 32768 [ 584.578458][T10232] (syz.1.1291,10232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.596832][T10232] (syz.1.1291,10232,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.631029][T10232] JBD2: Ignoring recovery information on journal [ 584.675773][T10232] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 585.838894][T10241] loop3: detected capacity change from 0 to 32768 [ 585.849345][T10241] (syz.3.1294,10241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 585.863494][T10241] (syz.3.1294,10241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 585.896393][T10241] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 585.935211][T10241] JBD2: Ignoring recovery information on journal [ 585.979747][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 585.990267][T10241] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 587.566388][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 587.776775][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 587.804767][ T9] usb 3-1: config 0 has no interfaces? [ 587.814652][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 587.835065][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.860080][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 587.868015][ T9] usb 3-1: config 0 descriptor?? [ 588.106756][ T9] usb 3-1: USB disconnect, device number 26 [ 592.334270][T10290] loop1: detected capacity change from 0 to 32768 [ 592.371827][T10290] (syz.1.1310,10290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 592.385561][T10290] (syz.1.1310,10290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 592.428909][T10290] JBD2: Ignoring recovery information on journal [ 592.469284][T10290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 593.289779][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 593.549810][T10300] loop3: detected capacity change from 0 to 1024 [ 593.568153][T10300] EXT4-fs: Ignoring removed bh option [ 593.590638][T10300] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 593.654452][T10300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.323579][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.606524][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 596.687773][ T5087] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 596.806260][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 596.842035][ T9] usb 4-1: config 0 has no interfaces? [ 596.859587][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 596.879459][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.895678][ T9] usb 4-1: config 0 descriptor?? [ 597.101907][T10328] loop2: detected capacity change from 0 to 32768 [ 597.135356][T10328] (syz.2.1321,10328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 597.149749][T10328] (syz.2.1321,10328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 597.175038][T10328] JBD2: Ignoring recovery information on journal [ 597.199884][ T6125] usb 4-1: USB disconnect, device number 28 [ 597.227277][T10328] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 598.090240][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 602.319254][T10363] loop2: detected capacity change from 0 to 1024 [ 602.385699][T10363] hfsplus: failed to load attributes file [ 602.544868][T10351] loop1: detected capacity change from 0 to 131072 [ 602.554496][T10351] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 602.562756][T10351] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 602.574004][T10351] F2FS-fs (loop1): invalid crc value [ 602.590001][T10351] F2FS-fs (loop1): Found nat_bits in checkpoint [ 602.677370][T10351] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 602.684490][T10351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 603.003048][T10370] loop2: detected capacity change from 0 to 32768 [ 603.031265][T10370] (syz.2.1332,10370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 603.044993][T10370] (syz.2.1332,10370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 603.092728][T10370] JBD2: Ignoring recovery information on journal [ 603.132616][T10370] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 603.705255][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 604.001607][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 604.049117][T10379] loop0: detected capacity change from 0 to 1024 [ 604.070207][T10379] EXT4-fs: Ignoring removed bh option [ 604.095695][T10379] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 604.097080][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 604.141299][ T9] usb 4-1: config 0 has no interfaces? [ 604.152022][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.162035][T10379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.186236][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.464903][ T9] usb 4-1: config 0 descriptor?? [ 606.477218][ T6125] usb 4-1: USB disconnect, device number 29 [ 606.523103][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.894087][T10407] loop0: detected capacity change from 0 to 131072 [ 608.907370][T10407] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 608.915510][T10407] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 608.927749][T10407] F2FS-fs (loop0): invalid crc value [ 608.959767][T10407] F2FS-fs (loop0): Found nat_bits in checkpoint [ 609.043157][T10407] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 609.050421][T10407] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 609.104627][T10418] loop3: detected capacity change from 0 to 1024 [ 609.155340][T10418] hfsplus: failed to load attributes file [ 609.564834][T10420] loop0: detected capacity change from 0 to 32768 [ 609.573292][T10393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.592769][T10420] (syz.0.1344,10420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 609.617311][T10420] (syz.0.1344,10420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 609.668734][T10420] JBD2: Ignoring recovery information on journal [ 609.741282][T10420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 612.747756][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 614.818570][T10455] loop0: detected capacity change from 0 to 131072 [ 615.588368][T10455] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 615.614362][T10455] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 615.860548][T10455] F2FS-fs (loop0): invalid crc value [ 617.545199][T10455] F2FS-fs (loop0): Found nat_bits in checkpoint [ 618.117876][ T6128] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 618.367559][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 618.395968][ T6128] usb 2-1: config 0 has no interfaces? [ 618.419977][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.437715][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.524528][ T6128] usb 2-1: config 0 descriptor?? [ 618.924335][ T6128] usb 2-1: USB disconnect, device number 27 [ 619.139866][T10473] loop0: detected capacity change from 0 to 1024 [ 619.172968][T10473] hfsplus: failed to load attributes file [ 623.109152][T10499] loop0: detected capacity change from 0 to 32768 [ 623.144752][T10499] (syz.0.1370,10499,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 623.159444][T10499] (syz.0.1370,10499,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 623.187347][T10499] JBD2: Ignoring recovery information on journal [ 623.237587][T10499] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 624.107922][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 624.500589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.508160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.567082][ T6128] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 625.540023][T10509] loop1: detected capacity change from 0 to 131072 [ 625.552118][T10509] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 625.560936][T10509] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 625.571480][T10509] F2FS-fs (loop1): invalid crc value [ 625.577325][ T6128] usb 1-1: Using ep0 maxpacket: 8 [ 625.584672][ T6128] usb 1-1: config 0 has no interfaces? [ 625.594021][ T6128] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.603454][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.621207][T10509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 625.658403][ T6128] usb 1-1: config 0 descriptor?? [ 625.675002][T10509] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 625.682593][T10509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 625.704892][ T27] audit: type=1800 audit(1787101782.142:9): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1369" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 625.889056][ T6128] usb 1-1: USB disconnect, device number 30 [ 629.414259][T10537] loop3: detected capacity change from 0 to 64 [ 629.446509][T10537] MINIX-fs: bad superblock [ 629.964835][T10542] loop1: detected capacity change from 0 to 1024 [ 630.036838][T10542] hfsplus: failed to load attributes file [ 630.500108][T10546] loop2: detected capacity change from 0 to 1024 [ 630.542417][T10546] EXT4-fs: Ignoring removed bh option [ 630.602950][T10546] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 630.702751][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.772292][T10540] loop3: detected capacity change from 0 to 131072 [ 630.781966][T10540] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 630.790191][T10540] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 630.802939][T10540] F2FS-fs (loop3): invalid crc value [ 630.851183][T10540] F2FS-fs (loop3): Found nat_bits in checkpoint [ 630.909465][T10540] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 630.916683][T10540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 630.944189][ T27] audit: type=1800 audit(1787101787.382:10): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1383" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 630.993318][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.864172][T10561] loop0: detected capacity change from 0 to 32768 [ 632.875877][T10561] (syz.0.1382,10561,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 632.892083][T10561] (syz.0.1382,10561,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 632.959358][T10561] JBD2: Ignoring recovery information on journal [ 632.995340][T10561] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 633.890553][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 634.096402][T10574] loop0: detected capacity change from 0 to 64 [ 634.132606][T10574] MINIX-fs: bad superblock [ 634.223459][T10574] loop0: detected capacity change from 0 to 1024 [ 634.507638][ T6128] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 634.698631][ T6128] usb 3-1: config 0 has no interfaces? [ 634.704490][ T6128] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 634.726427][ T6128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.762068][ T6128] usb 3-1: config 0 descriptor?? [ 634.988902][ T6125] usb 3-1: USB disconnect, device number 27 [ 635.426443][ T6128] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 635.617560][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 635.653763][ T6128] usb 2-1: config 0 has no interfaces? [ 635.654349][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.654517][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.685167][ T6128] usb 2-1: config 0 descriptor?? [ 636.052655][ T9925] usb 2-1: USB disconnect, device number 28 [ 636.589732][T10596] loop2: detected capacity change from 0 to 1024 [ 636.630630][T10596] EXT4-fs: Ignoring removed bh option [ 636.710393][T10596] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 638.294298][T10596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.074386][T10605] loop1: detected capacity change from 0 to 131072 [ 639.273394][T10607] loop0: detected capacity change from 0 to 32768 [ 639.302249][T10605] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 639.310575][T10605] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 639.320536][T10607] (syz.0.1400,10607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.334311][T10607] (syz.0.1400,10607,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 639.372782][T10607] JBD2: Ignoring recovery information on journal [ 639.425080][T10605] F2FS-fs (loop1): invalid crc value [ 639.469576][T10607] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 639.504338][T10605] F2FS-fs (loop1): Found nat_bits in checkpoint [ 639.566563][T10605] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 639.573670][T10605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 639.607052][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.616671][ T27] audit: type=1800 audit(1787101796.042:11): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1398" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 640.739882][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 642.866478][ T6128] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 644.573968][T10639] loop3: detected capacity change from 0 to 1024 [ 644.626740][ T6128] usb 1-1: Using ep0 maxpacket: 8 [ 644.633819][ T6128] usb 1-1: config 0 has no interfaces? [ 644.639917][ T6128] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.656799][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.718024][ T6128] usb 1-1: config 0 descriptor?? [ 644.748587][T10639] hfsplus: failed to load attributes file [ 644.965014][ T6128] usb 1-1: USB disconnect, device number 31 [ 645.258647][T10643] loop1: detected capacity change from 0 to 64 [ 645.299699][T10643] MINIX-fs: bad superblock [ 645.496790][ T174] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 645.727678][ T174] usb 4-1: config 0 has no interfaces? [ 645.733241][ T174] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 645.776928][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.821310][ T174] usb 4-1: config 0 descriptor?? [ 645.924573][T10647] loop0: detected capacity change from 0 to 1024 [ 645.956808][T10647] EXT4-fs: Ignoring removed bh option [ 645.985202][T10647] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 646.041435][T10647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.318528][ T6128] usb 4-1: USB disconnect, device number 30 [ 646.379093][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.575541][T10653] loop0: detected capacity change from 0 to 64 [ 646.591462][T10653] MINIX-fs: bad superblock [ 649.359993][T10659] loop3: detected capacity change from 0 to 32768 [ 649.421736][T10659] (syz.3.1412,10659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 649.435994][T10659] (syz.3.1412,10659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 649.469672][T10659] JBD2: Ignoring recovery information on journal [ 649.546897][T10659] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 651.039775][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 652.157026][ T6128] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 652.346491][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 652.385087][ T6128] usb 2-1: config 0 has no interfaces? [ 652.385407][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.385579][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.543644][ T6128] usb 2-1: config 0 descriptor?? [ 652.788345][ T6128] usb 2-1: USB disconnect, device number 29 [ 653.574179][T10689] loop3: detected capacity change from 0 to 1024 [ 653.627800][T10689] EXT4-fs: Ignoring removed bh option [ 653.676603][T10689] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 653.728611][T10689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.846385][ T6128] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 653.866813][ T6125] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 653.918128][T10698] loop2: detected capacity change from 0 to 64 [ 653.950629][T10698] MINIX-fs: bad superblock [ 654.029939][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.058774][T10698] loop2: detected capacity change from 0 to 1024 [ 654.096509][ T6125] usb 1-1: Using ep0 maxpacket: 8 [ 654.116028][ T6128] usb 2-1: config 0 has no interfaces? [ 654.129365][ T6128] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 654.139891][ T6125] usb 1-1: config 0 has no interfaces? [ 654.146398][ T6125] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.155502][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.164048][ T6125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.206895][ T6128] usb 2-1: config 0 descriptor?? [ 654.232688][ T6125] usb 1-1: config 0 descriptor?? [ 654.485638][ T6128] usb 2-1: USB disconnect, device number 30 [ 654.529071][ T174] usb 1-1: USB disconnect, device number 32 [ 655.175022][T10706] loop1: detected capacity change from 0 to 64 [ 655.232221][T10706] MINIX-fs: bad superblock [ 655.344902][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.492464][T10714] loop0: detected capacity change from 0 to 32768 [ 658.517719][T10714] (syz.0.1426,10714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 658.531456][T10714] (syz.0.1426,10714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 658.552794][T10714] JBD2: Ignoring recovery information on journal [ 658.630351][T10714] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 660.507745][T10737] loop1: detected capacity change from 0 to 1024 [ 660.512753][T10737] EXT4-fs: Ignoring removed bh option [ 660.555518][T10737] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 661.248976][T10737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.379128][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 661.503461][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.857213][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 661.936969][ T6125] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 662.116780][ T6125] usb 2-1: Using ep0 maxpacket: 8 [ 662.119443][ T6125] usb 2-1: config 0 has no interfaces? [ 662.119469][ T6125] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.119485][ T6125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.127163][ T6125] usb 2-1: config 0 descriptor?? [ 662.436413][ T6125] usb 2-1: USB disconnect, device number 31 [ 663.910759][T10760] loop3: detected capacity change from 0 to 32768 [ 663.946640][T10760] (syz.3.1442,10760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 663.960801][T10760] (syz.3.1442,10760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 663.999910][T10760] JBD2: Ignoring recovery information on journal [ 664.053065][T10760] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 664.374671][ T174] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 665.146969][ T174] usb 1-1: config 0 has no interfaces? [ 665.152552][ T174] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 665.839122][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.907303][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 666.008754][ T174] usb 1-1: config 0 descriptor?? [ 666.449463][T10775] loop2: detected capacity change from 0 to 1024 [ 666.478096][ T174] usb 1-1: USB disconnect, device number 33 [ 666.497394][T10775] EXT4-fs: Ignoring removed bh option [ 666.560057][T10777] loop3: detected capacity change from 0 to 64 [ 666.621598][T10775] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 666.639584][T10777] MINIX-fs: bad superblock [ 667.091231][T10775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.118510][ T6128] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 667.590647][ T6128] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 667.662715][ T6128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.716040][ T6128] usb 2-1: Product: syz [ 667.762292][ T6128] usb 2-1: Manufacturer: syz [ 667.799169][ T6128] usb 2-1: SerialNumber: syz [ 668.190008][ T6128] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 668.364266][ T6128] scsi host1: usb-storage 2-1:1.0 [ 668.461293][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.728088][ T6128] ums_eneub6250: probe of 2-1:1.0 failed with error 3 [ 668.808640][ T6128] usb 2-1: USB disconnect, device number 32 [ 669.386462][ T6128] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 670.496978][ T6128] usb 1-1: Using ep0 maxpacket: 8 [ 670.504311][ T6128] usb 1-1: config 0 has no interfaces? [ 670.516278][ T6128] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 670.745230][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.774380][ T6128] usb 1-1: config 0 descriptor?? [ 671.122622][T10807] loop3: detected capacity change from 0 to 32768 [ 671.149065][T10807] (syz.3.1452,10807,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 671.163290][T10807] (syz.3.1452,10807,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 671.182885][ T174] usb 1-1: USB disconnect, device number 34 [ 671.213960][T10807] JBD2: Ignoring recovery information on journal [ 671.342668][T10807] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 672.025577][T10795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.571972][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 673.916653][ T6125] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 674.118917][ T6125] usb 3-1: config 0 has no interfaces? [ 674.118945][ T6125] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 674.118961][ T6125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.130251][ T6125] usb 3-1: config 0 descriptor?? [ 674.368246][ T6125] usb 3-1: USB disconnect, device number 28 [ 675.260828][T10829] loop2: detected capacity change from 0 to 64 [ 675.386823][T10829] MINIX-fs: bad superblock [ 675.506855][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.523677][T10833] loop1: detected capacity change from 0 to 1024 [ 675.653227][T10833] EXT4-fs: Ignoring removed bh option [ 675.837919][ T6125] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 675.925609][T10833] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 676.230578][ T6125] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 676.240840][ T6125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.251765][ T6125] usb 1-1: Product: syz [ 676.255990][ T6125] usb 1-1: Manufacturer: syz [ 676.263073][T10833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.276237][ T6125] usb 1-1: SerialNumber: syz [ 676.313235][ T6125] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 676.680496][ T6125] scsi host1: usb-storage 1-1:1.0 [ 677.855623][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.050957][T10846] loop3: detected capacity change from 0 to 32768 [ 678.070432][ T6125] ums_eneub6250: probe of 1-1:1.0 failed with error 3 [ 678.084064][ T6125] usb 1-1: USB disconnect, device number 35 [ 678.124064][T10846] (syz.3.1462,10846,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 678.138778][T10846] (syz.3.1462,10846,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 678.191730][T10846] JBD2: Ignoring recovery information on journal [ 678.248524][T10846] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 679.182565][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 679.730166][ T5863] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 681.196515][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 681.203763][ T5863] usb 2-1: config 0 has no interfaces? [ 681.426606][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 681.542194][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.609649][ T5863] usb 2-1: config 0 descriptor?? [ 682.288627][ T6128] usb 2-1: USB disconnect, device number 33 [ 682.470365][T10874] loop0: detected capacity change from 0 to 512 [ 682.512392][T10874] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1472: bad orphan inode 15 [ 682.514609][T10874] ext4_test_bit(bit=14, block=5) = 0 [ 682.516075][T10874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.616012][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.831593][T10878] loop0: detected capacity change from 0 to 64 [ 682.843609][T10878] MINIX-fs: bad superblock [ 685.057652][T10883] loop1: detected capacity change from 0 to 32768 [ 685.180785][T10883] (syz.1.1474,10883,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 685.181275][T10883] (syz.1.1474,10883,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 685.338845][T10883] JBD2: Ignoring recovery information on journal [ 685.379129][T10883] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 685.941196][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.941301][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.387089][T10891] loop0: detected capacity change from 0 to 1024 [ 687.423524][T10891] EXT4-fs: Ignoring removed bh option [ 687.471828][T10891] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 687.572912][T10891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.016989][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.448403][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 690.647027][ T9925] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 691.266566][ T6128] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 691.477370][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 691.505910][ T6128] usb 2-1: config 0 has no interfaces? [ 691.507044][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.507158][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.543768][ T6128] usb 2-1: config 0 descriptor?? [ 691.697174][ T9925] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 691.697207][ T9925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.697228][ T9925] usb 4-1: Product: syz [ 691.697243][ T9925] usb 4-1: Manufacturer: syz [ 691.697259][ T9925] usb 4-1: SerialNumber: syz [ 691.711019][ T9925] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 691.721864][ T9925] scsi host1: usb-storage 4-1:1.0 [ 691.823065][ T174] usb 2-1: USB disconnect, device number 34 [ 692.186472][ T9925] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 692.190622][ T9925] usb 4-1: USB disconnect, device number 31 [ 692.668871][T10929] loop2: detected capacity change from 0 to 1024 [ 692.678810][T10929] EXT4-fs: Ignoring removed bh option [ 692.692188][T10929] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 692.768150][T10929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.946950][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.658695][T10947] loop2: detected capacity change from 0 to 32768 [ 693.682891][T10947] (syz.2.1491,10947,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 693.703934][T10947] (syz.2.1491,10947,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 693.726756][T10947] JBD2: Ignoring recovery information on journal [ 693.755225][T10950] loop3: detected capacity change from 0 to 512 [ 693.865303][T10947] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 694.680174][T10950] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1490: ea_inode with extended attributes [ 694.777219][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 694.783753][T10950] EXT4-fs (loop3): Remounting filesystem read-only [ 694.827301][T10950] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -5) [ 694.923306][T10950] EXT4-fs (loop3): 1 orphan inode deleted [ 694.947807][T10950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.474208][ T5863] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 695.710361][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 695.919405][ T5863] usb 3-1: config 0 has no interfaces? [ 696.076475][ T5863] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.085589][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.147515][ T5863] usb 3-1: config 0 descriptor?? [ 696.395509][ T5863] usb 3-1: USB disconnect, device number 29 [ 696.783986][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.142241][T10972] loop3: detected capacity change from 0 to 1024 [ 697.153795][T10972] EXT4-fs: Ignoring removed bh option [ 697.189276][T10972] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 697.234240][T10972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.373642][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.383284][ T6128] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 698.737395][ T6128] usb 2-1: Using ep0 maxpacket: 8 [ 699.408854][ T6128] usb 2-1: config 0 has no interfaces? [ 699.429426][ T6128] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.439082][ T6128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.457018][ T6128] usb 2-1: config 0 descriptor?? [ 699.550923][ T9925] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 699.790171][ T9] usb 2-1: USB disconnect, device number 35 [ 700.433819][ T9925] usb 3-1: device descriptor read/all, error -71 [ 700.820901][T10990] loop2: detected capacity change from 0 to 32768 [ 700.848622][T10990] (syz.2.1502,10990,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 700.848897][T10990] (syz.2.1502,10990,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 700.912083][T10990] JBD2: Ignoring recovery information on journal [ 700.948977][T10990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 701.974237][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 703.723102][T11010] loop2: detected capacity change from 0 to 1024 [ 703.724367][T11010] EXT4-fs: Ignoring removed bh option [ 703.748784][T11010] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 703.789932][T11010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.224574][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.796023][T11024] loop0: detected capacity change from 0 to 512 [ 706.075378][T11024] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1510: ea_inode with extended attributes [ 706.178421][T11024] EXT4-fs (loop0): Remounting filesystem read-only [ 706.185960][T11024] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5) [ 706.256221][T11024] EXT4-fs (loop0): 1 orphan inode deleted [ 706.273844][T11024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.619464][T11031] loop1: detected capacity change from 0 to 32768 [ 706.640844][T11031] (syz.1.1514,11031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 706.654760][T11031] (syz.1.1514,11031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 706.692251][T11031] JBD2: Ignoring recovery information on journal [ 706.765968][T11031] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 707.637256][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 707.865447][T11037] loop1: detected capacity change from 0 to 1024 [ 707.886031][T11037] EXT4-fs: Ignoring removed bh option [ 707.935616][T11037] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 708.009545][T11037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.220273][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.058963][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.138433][T11070] loop1: detected capacity change from 0 to 32768 [ 714.152072][T11070] (syz.1.1525,11070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 714.166841][T11070] (syz.1.1525,11070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 714.193407][T11070] JBD2: Ignoring recovery information on journal [ 714.260072][T11070] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 715.058417][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 717.275044][T11093] loop0: detected capacity change from 0 to 1024 [ 717.283548][T11093] EXT4-fs: Ignoring removed bh option [ 717.298097][T11093] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 717.368621][T11093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.524686][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.756906][T11111] loop1: detected capacity change from 0 to 512 [ 718.833080][T11111] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1533: ea_inode with extended attributes [ 718.870660][T11111] EXT4-fs (loop1): Remounting filesystem read-only [ 718.879826][T11111] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -5) [ 718.893334][T11111] EXT4-fs (loop1): 1 orphan inode deleted [ 718.900492][T11111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.908257][T11087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.097238][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.118909][T11123] loop1: detected capacity change from 0 to 32768 [ 721.154742][T11123] (syz.1.1537,11123,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 721.169228][T11123] (syz.1.1537,11123,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 721.214386][T11123] JBD2: Ignoring recovery information on journal [ 721.267655][T11123] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 723.452393][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 725.837684][T11151] loop2: detected capacity change from 0 to 1024 [ 725.990669][T11151] EXT4-fs: Ignoring removed bh option [ 726.020373][T11151] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 726.671219][T11151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.828659][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.333021][T11170] loop2: detected capacity change from 0 to 512 [ 729.437482][T11170] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1547: ea_inode with extended attributes [ 729.643855][T11170] EXT4-fs (loop2): Remounting filesystem read-only [ 730.050599][T11170] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -5) [ 730.164212][T11170] EXT4-fs (loop2): 1 orphan inode deleted [ 730.454553][T11176] loop0: detected capacity change from 0 to 32768 [ 730.463399][T11176] (syz.0.1552,11176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 730.463660][T11176] (syz.0.1552,11176,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 730.487866][T11170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.562863][T11176] JBD2: Ignoring recovery information on journal [ 730.627512][T11176] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 731.597586][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 733.276878][ T6125] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 734.646894][ T6125] usb 1-1: Using ep0 maxpacket: 8 [ 734.672560][ T6125] usb 1-1: config 0 has no interfaces? [ 734.680033][ T6125] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 734.708972][ T6125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.748423][ T6125] usb 1-1: config 0 descriptor?? [ 734.782673][ T6125] usb 1-1: can't set config #0, error -71 [ 734.799383][ T6125] usb 1-1: USB disconnect, device number 36 [ 735.058159][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.045301][T11212] loop0: detected capacity change from 0 to 32768 [ 736.054820][T11212] (syz.0.1563,11212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 736.068564][T11212] (syz.0.1563,11212,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 736.104312][T11212] JBD2: Ignoring recovery information on journal [ 736.158119][T11212] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 737.208210][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 737.243718][T11226] loop1: detected capacity change from 0 to 1024 [ 737.251426][T11226] EXT4-fs: Ignoring removed bh option [ 737.272995][T11226] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 737.390442][T11226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.583536][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.176632][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 740.396190][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 740.409024][ T9] usb 2-1: config 0 has no interfaces? [ 740.414569][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 740.446267][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.477499][ T9] usb 2-1: config 0 descriptor?? [ 740.709302][T11243] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.719544][ T6128] usb 2-1: USB disconnect, device number 36 [ 740.953863][T11254] loop0: detected capacity change from 0 to 512 [ 741.018810][T11254] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1571: ea_inode with extended attributes [ 741.063729][T11254] EXT4-fs (loop0): Remounting filesystem read-only [ 741.153006][T11254] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5) [ 741.173157][T11254] EXT4-fs (loop0): 1 orphan inode deleted [ 741.179582][ T6125] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 741.211606][T11254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.502110][T11260] loop2: detected capacity change from 0 to 32768 [ 741.525454][T11260] (syz.2.1575,11260,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 741.540988][T11260] (syz.2.1575,11260,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 741.555201][ T6125] usb 4-1: Using ep0 maxpacket: 16 [ 741.572314][T11260] JBD2: Ignoring recovery information on journal [ 741.601397][ T6125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.611894][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.624929][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 741.658784][T11260] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 741.690497][ T6125] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 741.767149][ T6125] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.837255][ T6125] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.862955][ T6125] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.942381][ T6125] usb 4-1: Manufacturer: syz [ 742.055210][ T6125] usb 4-1: config 0 descriptor?? [ 742.724123][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 742.749449][ T6125] rc_core: IR keymap rc-hauppauge not found [ 742.755424][ T6125] Registered IR keymap rc-empty [ 742.787466][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 742.842862][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 742.889067][ T6125] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 742.922867][ T6125] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 742.975888][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 743.051329][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 744.876674][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 744.906602][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 744.948701][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 744.996657][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 745.044846][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 745.119295][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 745.163968][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 745.239103][ T6125] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 745.288576][ T6125] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 745.334462][ T6125] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 745.383079][ T6125] usb 4-1: USB disconnect, device number 32 [ 746.761019][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.396913][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.403333][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.956009][T11311] loop1: detected capacity change from 0 to 32768 [ 748.975772][T11311] (syz.1.1586,11311,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 748.989654][T11311] (syz.1.1586,11311,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.020348][T11311] JBD2: Ignoring recovery information on journal [ 749.061038][T11311] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 749.106725][T10398] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 749.326997][T10398] usb 1-1: Using ep0 maxpacket: 16 [ 749.420339][T10398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.431159][T10398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.442518][T10398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 749.456486][T10398] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 749.491683][T10398] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.624539][T10398] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 749.670732][T10398] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 749.695354][T10398] usb 1-1: Manufacturer: syz [ 749.897550][T10398] usb 1-1: config 0 descriptor?? [ 749.998231][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 750.296142][T10398] rc_core: IR keymap rc-hauppauge not found [ 750.312357][T10398] Registered IR keymap rc-empty [ 750.319721][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 750.367980][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.287776][T10398] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 751.302999][T10398] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 751.396603][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.426521][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.458849][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.517482][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.552814][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.601431][T11325] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 751.620561][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.647453][T11325] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1595'. [ 751.686657][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.748149][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.816219][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.876626][T10398] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 751.949163][T10398] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 751.997969][T10398] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.068127][T10398] usb 1-1: USB disconnect, device number 37 [ 753.504036][T11343] loop0: detected capacity change from 0 to 32768 [ 753.548609][T11343] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 753.559453][T11343] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 753.568383][T11343] BTRFS info (device loop0): turning on sync discard [ 753.575193][T11343] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 753.584776][T11343] BTRFS info (device loop0): use zstd compression, level 3 [ 753.592595][T11343] BTRFS info (device loop0): turning on async discard [ 753.599526][T11343] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 753.610255][T11343] BTRFS info (device loop0): trying to use backup root at mount time [ 753.619025][T11343] BTRFS info (device loop0): enabling auto defrag [ 753.625477][T11343] BTRFS info (device loop0): using free space tree [ 755.006971][ T1117] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 755.020639][T11343] BTRFS error (device loop0): failed to load root extent [ 755.028418][T11343] BTRFS warning (device loop0): try to load backup roots slot 1 [ 755.038049][ T1112] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 755.127154][T11343] BTRFS warning (device loop0): couldn't read tree root [ 755.134227][T11343] BTRFS warning (device loop0): try to load backup roots slot 2 [ 755.143854][ T1100] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 755.161440][T11343] BTRFS warning (device loop0): couldn't read tree root [ 755.169032][T11343] BTRFS warning (device loop0): try to load backup roots slot 3 [ 755.206334][T11343] BTRFS info (device loop0): enabling ssd optimizations [ 755.214485][T11343] BTRFS info (device loop0): rebuilding free space tree [ 755.259967][T11343] BTRFS info (device loop0): checking UUID tree [ 755.439980][T11363] loop1: detected capacity change from 0 to 32768 [ 755.469245][T11363] (syz.1.1601,11363,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 755.483055][T11363] (syz.1.1601,11363,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 755.527751][T11363] JBD2: Ignoring recovery information on journal [ 755.720935][T11363] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 757.024139][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 757.128862][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 757.697229][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 757.918865][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 757.927016][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.941984][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 757.968873][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 757.997624][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 758.040911][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.109263][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.119015][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.134863][ T9] usb 2-1: Manufacturer: syz [ 758.170609][ T9] usb 2-1: config 0 descriptor?? [ 758.546774][ T9] rc_core: IR keymap rc-hauppauge not found [ 758.566280][ T9] Registered IR keymap rc-empty [ 758.577976][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.626520][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.667775][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 758.702343][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 758.779567][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.830996][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.889122][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.919582][ T27] audit: type=1400 audit(1787101915.362:12): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11399 comm="syz.3.1609" [ 758.927441][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.957174][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 758.987386][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.017254][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.076168][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.116866][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.149072][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 760.330449][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 760.330476][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.336413][ T9] usb 2-1: USB disconnect, device number 37 [ 762.018608][T11415] loop1: detected capacity change from 0 to 32768 [ 762.028955][T11415] (syz.1.1613,11415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.042780][T11415] (syz.1.1613,11415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.063735][T11415] JBD2: Ignoring recovery information on journal [ 762.168191][T11415] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 763.661646][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 764.143636][T11428] loop3: detected capacity change from 0 to 32768 [ 764.160680][T11428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1612 (11428) [ 764.207022][T11428] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 764.217304][T11428] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 764.226035][T11428] BTRFS info (device loop3): turning on sync discard [ 764.233456][T11428] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 764.242879][T11428] BTRFS info (device loop3): use zstd compression, level 3 [ 764.250124][T11428] BTRFS info (device loop3): turning on async discard [ 764.257332][T11428] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 764.267978][T11428] BTRFS info (device loop3): trying to use backup root at mount time [ 764.276218][T11428] BTRFS info (device loop3): enabling auto defrag [ 764.282675][T11428] BTRFS info (device loop3): using free space tree [ 764.531237][ T49] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 764.626181][T11428] BTRFS error (device loop3): failed to load root extent [ 764.633304][T11428] BTRFS warning (device loop3): try to load backup roots slot 1 [ 764.641659][ T1117] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 764.675963][T11428] BTRFS warning (device loop3): couldn't read tree root [ 764.683604][T11428] BTRFS warning (device loop3): try to load backup roots slot 2 [ 764.691966][ T1100] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 764.752869][T11428] BTRFS warning (device loop3): couldn't read tree root [ 764.759955][T11428] BTRFS warning (device loop3): try to load backup roots slot 3 [ 764.834440][T11428] BTRFS info (device loop3): enabling ssd optimizations [ 764.845520][T11428] BTRFS info (device loop3): rebuilding free space tree [ 764.862701][T11428] BTRFS info (device loop3): checking UUID tree [ 766.134909][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 766.166407][ T9925] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 766.330730][ T9925] usb 3-1: device descriptor read/64, error -71 [ 767.496836][ T9925] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 767.571181][T11443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.671314][ T9925] usb 3-1: device descriptor read/64, error -71 [ 767.813759][ T9925] usb usb3-port1: attempt power cycle [ 768.276547][ T9925] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 768.326552][ T9925] usb 3-1: device descriptor read/8, error -71 [ 768.495237][T11467] syz.3.1621 (11467): drop_caches: 2 [ 768.596827][ T9925] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 768.627379][ T9925] usb 3-1: device descriptor read/8, error -71 [ 768.747798][ T9925] usb usb3-port1: unable to enumerate USB device [ 769.216285][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 769.696820][ T9925] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 770.136736][ T9] usb 2-1: device descriptor read/64, error -71 [ 770.257598][ T9925] usb 3-1: Using ep0 maxpacket: 16 [ 770.265953][ T9925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.281620][ T9925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.300175][ T9925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 770.320532][ T9925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 770.333694][ T9925] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.364169][ T9925] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 770.395380][ T9925] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 770.406999][ T9925] usb 3-1: Manufacturer: syz [ 770.419797][ T9925] usb 3-1: config 0 descriptor?? [ 770.437922][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 770.617102][ T9] usb 2-1: device descriptor read/64, error -71 [ 770.879680][T11487] loop3: detected capacity change from 0 to 32768 [ 770.888695][ T9] usb usb2-port1: attempt power cycle [ 770.898729][T11487] (syz.3.1625,11487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.912732][T11487] (syz.3.1625,11487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 770.941913][T11487] JBD2: Ignoring recovery information on journal [ 770.980494][T11487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 771.329768][ T9925] rc_core: IR keymap rc-hauppauge not found [ 771.415809][ T9925] Registered IR keymap rc-empty [ 771.475921][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.603228][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 771.720528][ T9] usb 2-1: device descriptor read/8, error -71 [ 771.726832][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.770036][ T9925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 771.784657][ T9925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 771.802703][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.847734][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.877211][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.917258][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 771.947362][T11472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.957398][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.017450][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 772.025240][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.067150][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.117326][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.159156][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.195458][ T9925] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 772.243035][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 772.256866][ T9] usb 2-1: device not accepting address 41, error -71 [ 772.265957][ T9925] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 772.286385][ T9] usb usb2-port1: unable to enumerate USB device [ 772.292833][ T9925] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 772.352175][ T9925] usb 3-1: USB disconnect, device number 36 [ 775.190616][T11516] loop2: detected capacity change from 0 to 32768 [ 775.226950][T11516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1633 (11516) [ 775.255137][T11516] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 775.265428][T11516] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 775.274692][T11516] BTRFS info (device loop2): turning on sync discard [ 775.281577][T11516] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 775.291036][T11516] BTRFS info (device loop2): use zstd compression, level 3 [ 775.298840][T11516] BTRFS info (device loop2): turning on async discard [ 775.305623][T11516] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 775.316373][T11516] BTRFS info (device loop2): trying to use backup root at mount time [ 775.324455][T11516] BTRFS info (device loop2): enabling auto defrag [ 775.331328][T11516] BTRFS info (device loop2): using free space tree [ 775.541407][ T1100] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 775.576253][T11516] BTRFS error (device loop2): failed to load root extent [ 775.583375][T11516] BTRFS warning (device loop2): try to load backup roots slot 1 [ 775.591732][ T1100] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 775.649357][T11516] BTRFS warning (device loop2): couldn't read tree root [ 775.656950][T11516] BTRFS warning (device loop2): try to load backup roots slot 2 [ 775.664993][ T1100] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 775.706174][ T9925] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 775.805118][T11516] BTRFS warning (device loop2): couldn't read tree root [ 775.813191][T11516] BTRFS warning (device loop2): try to load backup roots slot 3 [ 775.851638][T11516] BTRFS info (device loop2): enabling ssd optimizations [ 775.859171][T11516] BTRFS info (device loop2): rebuilding free space tree [ 775.874555][T11516] BTRFS info (device loop2): checking UUID tree [ 775.906316][ T9925] usb 4-1: device descriptor read/64, error -71 [ 776.196391][ T9925] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 777.233152][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 777.291977][ T9925] usb 4-1: device descriptor read/64, error -71 [ 777.452850][ T9925] usb usb4-port1: attempt power cycle [ 777.916432][ T9925] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 777.997531][ T9925] usb 4-1: device descriptor read/8, error -71 [ 779.166750][ T9925] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 779.406859][ T9925] usb 4-1: device not accepting address 36, error -71 [ 779.512019][ T9925] usb usb4-port1: unable to enumerate USB device [ 779.697867][T11558] loop0: detected capacity change from 0 to 32768 [ 780.293543][T11558] (syz.0.1639,11558,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 780.309833][T11544] syz.1.1635 (11544): drop_caches: 2 [ 780.315218][T11558] (syz.0.1639,11558,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 780.364121][T11558] JBD2: Ignoring recovery information on journal [ 780.427825][T11558] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 783.044792][T11552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.241884][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 783.636631][ T6125] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 783.828885][ T6125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.828936][ T6125] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 783.828952][ T6125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.830480][ T6125] usb 4-1: config 0 descriptor?? [ 783.833248][ T6125] pwc: Askey VC010 type 2 USB webcam detected. [ 784.057125][T10398] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 784.226301][T10398] usb 1-1: device descriptor read/64, error -71 [ 784.246805][ T6125] pwc: recv_control_msg error -32 req 02 val 2b00 [ 784.458327][ T6125] pwc: recv_control_msg error -71 req 02 val 2c00 [ 784.459322][ T6125] pwc: recv_control_msg error -71 req 04 val 1000 [ 784.461073][ T6125] pwc: recv_control_msg error -71 req 04 val 1300 [ 784.461443][ T6125] pwc: recv_control_msg error -71 req 04 val 1400 [ 784.461867][ T6125] pwc: recv_control_msg error -71 req 02 val 2000 [ 784.462774][ T6125] pwc: recv_control_msg error -71 req 02 val 2100 [ 784.463512][ T6125] pwc: recv_control_msg error -71 req 04 val 1500 [ 784.463932][ T6125] pwc: recv_control_msg error -71 req 02 val 2500 [ 784.464314][ T6125] pwc: recv_control_msg error -71 req 02 val 2400 [ 784.466301][ T6125] pwc: recv_control_msg error -71 req 02 val 2600 [ 784.467977][ T6125] pwc: recv_control_msg error -71 req 02 val 2900 [ 784.469133][ T6125] pwc: recv_control_msg error -71 req 02 val 2800 [ 784.470287][ T6125] pwc: recv_control_msg error -71 req 04 val 1100 [ 784.470601][ T6125] pwc: recv_control_msg error -71 req 04 val 1200 [ 784.472856][ T6125] pwc: Registered as video103. [ 784.474146][ T6125] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 784.485120][ T6125] usb 4-1: USB disconnect, device number 37 [ 784.497005][T10398] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 784.656759][T10398] usb 1-1: device descriptor read/64, error -71 [ 784.777219][T10398] usb usb1-port1: attempt power cycle [ 785.256465][T10398] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 785.289887][T10398] usb 1-1: device descriptor read/8, error -71 [ 785.576264][T10398] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 785.616998][T10398] usb 1-1: device descriptor read/8, error -71 [ 785.688133][T11587] loop1: detected capacity change from 0 to 32768 [ 785.698716][T11587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1650 (11587) [ 785.728673][T11587] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 785.737443][T10398] usb usb1-port1: unable to enumerate USB device [ 785.740533][T11587] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 785.754036][T11587] BTRFS info (device loop1): turning on sync discard [ 785.760825][T11587] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 785.770897][T11587] BTRFS info (device loop1): use zstd compression, level 3 [ 785.778355][T11587] BTRFS info (device loop1): turning on async discard [ 785.785176][T11587] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 785.795907][T11587] BTRFS info (device loop1): trying to use backup root at mount time [ 785.804699][T11587] BTRFS info (device loop1): enabling auto defrag [ 785.811291][T11587] BTRFS info (device loop1): using free space tree [ 785.851880][ T1112] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 785.882371][T11587] BTRFS error (device loop1): failed to load root extent [ 785.890611][T11587] BTRFS warning (device loop1): try to load backup roots slot 1 [ 785.898741][ T1100] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 785.936476][T11587] BTRFS warning (device loop1): couldn't read tree root [ 785.944991][T11587] BTRFS warning (device loop1): try to load backup roots slot 2 [ 785.959271][ T1100] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 785.985608][T11587] BTRFS warning (device loop1): couldn't read tree root [ 785.992740][T11587] BTRFS warning (device loop1): try to load backup roots slot 3 [ 786.017575][T11587] BTRFS info (device loop1): enabling ssd optimizations [ 786.025328][T11587] BTRFS info (device loop1): rebuilding free space tree [ 786.055561][T11587] BTRFS info (device loop1): checking UUID tree [ 787.287967][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 787.622656][T11614] syz.0.1652 (11614): drop_caches: 2 [ 787.628516][T11617] loop2: detected capacity change from 0 to 32768 [ 787.647881][T11617] (syz.2.1655,11617,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 787.662689][T11617] (syz.2.1655,11617,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 787.722933][T11617] JBD2: Ignoring recovery information on journal [ 787.784055][T11617] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 792.214985][T11619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 792.381545][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 792.806298][ T9925] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 792.996700][ T9925] usb 4-1: device descriptor read/64, error -71 [ 793.276198][ T9925] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 793.436188][ T9925] usb 4-1: device descriptor read/64, error -71 [ 793.792081][T11657] loop0: detected capacity change from 0 to 32768 [ 793.801256][ T9925] usb usb4-port1: attempt power cycle [ 793.809419][T11657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1665 (11657) [ 793.880033][T11657] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 793.890331][T11657] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 793.899564][T11657] BTRFS info (device loop0): turning on sync discard [ 793.906388][T11657] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 793.915805][T11657] BTRFS info (device loop0): use zstd compression, level 3 [ 793.923082][T11657] BTRFS info (device loop0): turning on async discard [ 793.930292][T11657] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 793.940989][T11657] BTRFS info (device loop0): trying to use backup root at mount time [ 793.949104][T11657] BTRFS info (device loop0): enabling auto defrag [ 793.955547][T11657] BTRFS info (device loop0): using free space tree [ 794.281253][ T9925] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 794.482439][ T9925] usb 4-1: device descriptor read/8, error -71 [ 794.551251][ T1112] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 794.598399][T11657] BTRFS error (device loop0): failed to load root extent [ 794.605505][T11657] BTRFS warning (device loop0): try to load backup roots slot 1 [ 794.613807][ T1112] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 794.633093][T11657] BTRFS warning (device loop0): couldn't read tree root [ 794.640496][T11657] BTRFS warning (device loop0): try to load backup roots slot 2 [ 794.649225][ T49] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 794.684972][T11657] BTRFS warning (device loop0): couldn't read tree root [ 794.692580][T11657] BTRFS warning (device loop0): try to load backup roots slot 3 [ 794.752150][T11657] BTRFS info (device loop0): enabling ssd optimizations [ 794.760226][T11657] BTRFS info (device loop0): rebuilding free space tree [ 794.782234][T11657] BTRFS info (device loop0): checking UUID tree [ 794.846423][ T9925] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 794.893904][ T9925] usb 4-1: device descriptor read/8, error -71 [ 795.075322][ T9925] usb usb4-port1: unable to enumerate USB device [ 795.975020][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 796.344781][T11684] loop3: detected capacity change from 0 to 32768 [ 796.372801][T11682] syz.2.1668 (11682): drop_caches: 2 [ 796.401132][T11684] (syz.3.1669,11684,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 796.414864][T11684] (syz.3.1669,11684,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 796.459198][T11684] JBD2: Ignoring recovery information on journal [ 796.504246][T11684] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 797.669375][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 797.714690][T11696] FAULT_INJECTION: forcing a failure. [ 797.714690][T11696] name fail_futex, interval 1, probability 0, space 0, times 1 [ 797.762687][T11696] CPU: 0 PID: 11696 Comm: syz.1.1672 Not tainted syzkaller #0 [ 797.770197][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.780275][T11696] Call Trace: [ 797.783565][T11696] [ 797.786518][T11696] dump_stack_lvl+0x18c/0x250 [ 797.791224][T11696] ? show_regs_print_info+0x20/0x20 [ 797.796467][T11696] ? load_image+0x420/0x420 [ 797.801025][T11696] ? rcu_read_lock_sched_held+0x8a/0x110 [ 797.806700][T11696] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 797.812929][T11696] should_fail_ex+0x394/0x4c0 [ 797.817672][T11696] get_futex_key+0x136/0x1030 [ 797.822404][T11696] ? futex_setup_timer+0xc0/0xc0 [ 797.827373][T11696] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 797.833378][T11696] ? __lock_acquire+0x7d80/0x7d80 [ 797.838422][T11696] ? lock_chain_count+0x20/0x20 [ 797.843297][T11696] futex_wait_setup+0xbc/0x270 [ 797.848098][T11696] ? futex_wait_multiple+0x920/0x920 [ 797.853395][T11696] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 797.859315][T11696] ? _raw_spin_unlock+0x40/0x40 [ 797.864187][T11696] futex_wait+0x1bc/0x5c0 [ 797.868541][T11696] ? futex_wait_setup+0x270/0x270 [ 797.873598][T11696] ? file_end_write+0x159/0x250 [ 797.878485][T11696] ? vfs_write+0x5de/0x9a0 [ 797.882933][T11696] do_futex+0x2ff/0x3e0 [ 797.887113][T11696] ? __ia32_sys_get_robust_list+0x110/0x110 [ 797.893081][T11696] __se_sys_futex+0x3a9/0x440 [ 797.897787][T11696] ? __x64_sys_futex+0xf0/0xf0 [ 797.902587][T11696] ? __x64_sys_futex+0x21/0xf0 [ 797.907377][T11696] do_syscall_64+0x55/0xb0 [ 797.911813][T11696] ? clear_bhb_loop+0x40/0x90 [ 797.916548][T11696] ? clear_bhb_loop+0x40/0x90 [ 797.921274][T11696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.927213][T11696] RIP: 0033:0x7f388a39e0d9 [ 797.931687][T11696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.951335][T11696] RSP: 002b:00007f388b1c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 797.959792][T11696] RAX: ffffffffffffffda RBX: 00007f388a625fa8 RCX: 00007f388a39e0d9 [ 797.967796][T11696] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f388a625fa8 [ 797.975896][T11696] RBP: 00007f388a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 797.983914][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.991920][T11696] R13: 00007f388a626038 R14: 00007fffdbabbe80 R15: 00007fffdbabbf68 [ 797.999942][T11696] [ 799.886264][ T5863] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 800.046320][ T5863] usb 4-1: device descriptor read/64, error -71 [ 800.316257][ T5863] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 800.466391][ T5863] usb 4-1: device descriptor read/64, error -71 [ 800.587117][ T5863] usb usb4-port1: attempt power cycle [ 800.681548][ T174] smpboot: CPU 1 is now offline [ 800.737941][T11722] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 801.159156][T11725] loop2: detected capacity change from 0 to 32768 [ 801.174975][ T5863] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 801.189916][T11725] (syz.2.1680,11725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 801.205933][T11725] (syz.2.1680,11725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 801.505619][T11727] loop0: detected capacity change from 0 to 32768 [ 801.514254][T11727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1678 (11727) [ 801.531151][ T5863] usb 4-1: device descriptor read/8, error -71 [ 801.589442][T11725] JBD2: Ignoring recovery information on journal [ 801.603505][T11727] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 801.613804][T11727] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 801.623748][T11727] BTRFS info (device loop0): turning on sync discard [ 801.630606][T11727] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 801.640174][T11727] BTRFS info (device loop0): use zstd compression, level 3 [ 801.648518][T11727] BTRFS info (device loop0): turning on async discard [ 801.655341][T11727] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 801.666173][T11727] BTRFS info (device loop0): trying to use backup root at mount time [ 801.674295][T11727] BTRFS info (device loop0): enabling auto defrag [ 801.681901][T11727] BTRFS info (device loop0): using free space tree [ 801.717721][T11725] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 801.739730][ T1138] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 801.826235][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 802.007590][ T5863] usb 4-1: device descriptor read/8, error -71 [ 802.085520][T11727] BTRFS error (device loop0): failed to load root extent [ 802.092787][T11727] BTRFS warning (device loop0): try to load backup roots slot 1 [ 802.104675][ T1138] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 802.177802][T11727] BTRFS warning (device loop0): couldn't read tree root [ 802.184866][T11727] BTRFS warning (device loop0): try to load backup roots slot 2 [ 802.216473][ T5863] usb usb4-port1: unable to enumerate USB device [ 802.285806][ T1138] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 802.318232][T11727] BTRFS warning (device loop0): couldn't read tree root [ 802.325261][T11727] BTRFS warning (device loop0): try to load backup roots slot 3 [ 802.344592][T11727] BTRFS info (device loop0): enabling ssd optimizations [ 802.352454][T11727] BTRFS info (device loop0): rebuilding free space tree [ 802.377460][T11727] BTRFS info (device loop0): checking UUID tree [ 802.518444][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 802.895932][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 805.471905][T11774] loop0: detected capacity change from 0 to 256 [ 805.507596][T11774] exfat: Deprecated parameter 'utf8' [ 805.575771][T11774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 805.836461][T11754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.202659][ T9925] smpboot: CPU 1 is now offline [ 806.237961][T11784] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 806.441463][T11785] loop0: detected capacity change from 0 to 32768 [ 806.468841][T11785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1693 (11785) [ 806.484151][T11785] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.495191][T11785] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 806.503971][T11785] BTRFS info (device loop0): turning on sync discard [ 806.510710][T11785] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 806.520777][T11785] BTRFS info (device loop0): use zstd compression, level 3 [ 806.528068][T11785] BTRFS info (device loop0): turning on async discard [ 806.534858][T11785] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 806.545528][T11785] BTRFS info (device loop0): trying to use backup root at mount time [ 806.554419][T11785] BTRFS info (device loop0): enabling auto defrag [ 806.560906][T11785] BTRFS info (device loop0): using free space tree [ 806.649248][ T1100] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 806.745876][T11785] BTRFS error (device loop0): failed to load root extent [ 806.753302][T11785] BTRFS warning (device loop0): try to load backup roots slot 1 [ 806.765430][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 806.841639][T11785] BTRFS warning (device loop0): couldn't read tree root [ 806.849784][T11785] BTRFS warning (device loop0): try to load backup roots slot 2 [ 806.859307][ T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 806.902010][T11785] BTRFS warning (device loop0): couldn't read tree root [ 806.910601][T11785] BTRFS warning (device loop0): try to load backup roots slot 3 [ 806.918950][ T9925] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 806.949025][T11785] BTRFS info (device loop0): enabling ssd optimizations [ 806.957106][T11785] BTRFS info (device loop0): rebuilding free space tree [ 806.979211][T11785] BTRFS info (device loop0): checking UUID tree [ 807.271931][T11805] loop3: detected capacity change from 0 to 32768 [ 807.310189][T11805] (syz.3.1694,11805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 807.324048][T11805] (syz.3.1694,11805,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 807.355602][T11805] JBD2: Ignoring recovery information on journal [ 807.397366][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 807.425718][T11805] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 807.438338][ T9925] usb 2-1: no configurations [ 807.442991][ T9925] usb 2-1: can't read configurations, error -22 [ 807.540902][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.547396][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.617324][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 807.676389][ T9925] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 807.965852][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 808.000651][ T9925] usb 2-1: no configurations [ 808.040777][ T9925] usb 2-1: can't read configurations, error -22 [ 808.101266][ T9925] usb usb2-port1: attempt power cycle [ 809.836182][ T9925] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 810.098603][ T9925] usb 2-1: device descriptor read/8, error -71 [ 810.308587][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 811.139928][T11828] loop3: detected capacity change from 0 to 256 [ 811.167627][T11828] exfat: Deprecated parameter 'utf8' [ 811.215661][T11828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 811.722217][ T9925] smpboot: CPU 1 is now offline [ 811.778890][T11838] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 813.573211][T11843] loop0: detected capacity change from 0 to 32768 [ 813.590687][T11843] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1707 (11843) [ 814.916422][T11843] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 814.927859][T11843] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 814.936722][T11843] BTRFS info (device loop0): turning on sync discard [ 814.943469][T11843] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 814.952983][T11843] BTRFS info (device loop0): use zstd compression, level 3 [ 814.961421][T11843] BTRFS info (device loop0): turning on async discard [ 814.968332][T11843] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 814.979079][T11843] BTRFS info (device loop0): trying to use backup root at mount time [ 814.988434][T11843] BTRFS info (device loop0): enabling auto defrag [ 814.994905][T11843] BTRFS info (device loop0): using free space tree [ 815.002414][T11818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.116731][ T1100] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 815.146279][T11843] BTRFS error (device loop0): failed to load root extent [ 815.153490][T11843] BTRFS warning (device loop0): try to load backup roots slot 1 [ 815.162191][ T1100] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 815.213313][T11843] BTRFS warning (device loop0): couldn't read tree root [ 815.220696][T11843] BTRFS warning (device loop0): try to load backup roots slot 2 [ 815.229838][ T1138] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 815.257607][T11843] BTRFS warning (device loop0): couldn't read tree root [ 815.264814][T11843] BTRFS warning (device loop0): try to load backup roots slot 3 [ 815.293385][T11843] BTRFS info (device loop0): enabling ssd optimizations [ 815.302384][T11843] BTRFS info (device loop0): rebuilding free space tree [ 815.317436][T11843] BTRFS info (device loop0): checking UUID tree [ 817.667456][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 817.741892][T11868] loop2: detected capacity change from 0 to 256 [ 817.768364][T11868] exfat: Deprecated parameter 'utf8' [ 817.848185][T11868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 821.266251][ T9925] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 821.788835][ T9925] usb 4-1: Using ep0 maxpacket: 8 [ 821.797205][ T9925] usb 4-1: no configurations [ 821.806779][ T9925] usb 4-1: can't read configurations, error -22 [ 821.977026][ T9925] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 822.187229][ T9925] usb 4-1: Using ep0 maxpacket: 8 [ 822.197107][ T9925] usb 4-1: no configurations [ 822.201747][ T9925] usb 4-1: can't read configurations, error -22 [ 822.226452][ T9925] usb usb4-port1: attempt power cycle [ 822.656528][ T9925] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 822.697741][ T9925] usb 4-1: Using ep0 maxpacket: 8 [ 822.703438][ T9925] usb 4-1: no configurations [ 822.708340][ T9925] usb 4-1: can't read configurations, error -22 [ 822.856222][ T9925] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 822.886902][ T9925] usb 4-1: Using ep0 maxpacket: 8 [ 822.892515][ T9925] usb 4-1: no configurations [ 822.897340][ T9925] usb 4-1: can't read configurations, error -22 [ 822.913906][ T9925] usb usb4-port1: unable to enumerate USB device [ 825.468189][T11888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 827.921191][ T9925] smpboot: CPU 1 is now offline [ 827.972736][T11910] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 829.466360][T11897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.326166][ T174] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 831.536238][ T174] usb 4-1: Using ep0 maxpacket: 8 [ 831.557653][ T174] usb 4-1: no configurations [ 831.566154][ T174] usb 4-1: can't read configurations, error -22 [ 831.744459][ T174] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 831.947225][ T174] usb 4-1: Using ep0 maxpacket: 8 [ 832.271234][ T174] usb 4-1: no configurations [ 832.275913][ T174] usb 4-1: can't read configurations, error -22 [ 833.858608][ T174] usb usb4-port1: attempt power cycle [ 834.212989][T11941] loop2: detected capacity change from 0 to 256 [ 835.493223][T11941] exfat: Deprecated parameter 'utf8' [ 835.572199][T11941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 835.691902][ T9925] smpboot: CPU 1 is now offline [ 835.758019][T11946] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 838.296200][ T174] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 838.476110][ T174] usb 1-1: Using ep0 maxpacket: 8 [ 838.787222][T11948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.547763][ T174] usb 1-1: no configurations [ 840.170269][ T174] usb 1-1: can't read configurations, error -22 [ 840.336300][ T174] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 844.951649][ T174] smpboot: CPU 1 is now offline [ 844.998369][T11991] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 847.037165][ T174] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 848.409286][T11992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.507172][ T174] usb 2-1: Using ep0 maxpacket: 8 [ 848.606338][ T174] usb 2-1: device descriptor read/all, error -71 [ 850.210254][ T9925] smpboot: CPU 1 is now offline [ 850.249473][T12017] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 853.008930][T12029] loop3: detected capacity change from 0 to 32768 [ 853.029061][T12029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1759 (12029) [ 853.071588][T12029] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 853.097684][T12029] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 853.107394][T12029] BTRFS info (device loop3): turning on sync discard [ 853.127274][T12029] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 853.146215][T12029] BTRFS info (device loop3): use zstd compression, level 3 [ 853.153526][T12029] BTRFS info (device loop3): turning on async discard [ 853.176629][T12029] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 853.196507][T12029] BTRFS info (device loop3): trying to use backup root at mount time [ 853.204635][T12029] BTRFS info (device loop3): enabling auto defrag [ 853.236760][T12029] BTRFS info (device loop3): using free space tree [ 853.365539][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 853.396437][T12029] BTRFS error (device loop3): failed to load root extent [ 853.427501][T12029] BTRFS warning (device loop3): try to load backup roots slot 1 [ 853.471124][ T1100] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 854.792144][T12029] BTRFS warning (device loop3): couldn't read tree root [ 854.821417][T12029] BTRFS warning (device loop3): try to load backup roots slot 2 [ 854.850472][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 854.877356][T12029] BTRFS warning (device loop3): couldn't read tree root [ 854.904966][T12029] BTRFS warning (device loop3): try to load backup roots slot 3 [ 855.001273][T12029] BTRFS info (device loop3): enabling ssd optimizations [ 855.025597][T12029] BTRFS info (device loop3): rebuilding free space tree [ 855.075338][T12029] BTRFS info (device loop3): checking UUID tree [ 855.235116][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 855.367026][ T9925] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 855.556142][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 856.987331][ T9925] usb 2-1: no configurations [ 856.992074][ T9925] usb 2-1: can't read configurations, error -22 [ 857.536183][ T9925] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 859.036196][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 859.050480][ T9925] usb 2-1: device descriptor read/all, error -71 [ 859.096583][ T9925] usb usb2-port1: attempt power cycle [ 863.545354][T12091] loop1: detected capacity change from 0 to 32768 [ 863.562877][T12091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1784 (12091) [ 863.591453][T12091] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.601825][T12091] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 863.611205][T12091] BTRFS info (device loop1): turning on sync discard [ 863.618567][T12091] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 863.628122][T12091] BTRFS info (device loop1): use zstd compression, level 3 [ 863.635387][T12091] BTRFS info (device loop1): turning on async discard [ 863.642927][T12091] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 863.654245][T12091] BTRFS info (device loop1): trying to use backup root at mount time [ 863.662611][T12091] BTRFS info (device loop1): enabling auto defrag [ 863.669724][T12091] BTRFS info (device loop1): using free space tree [ 863.728911][ T1100] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 863.750241][T12091] BTRFS error (device loop1): failed to load root extent [ 863.758125][T12091] BTRFS warning (device loop1): try to load backup roots slot 1 [ 863.766912][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 863.810625][T12091] BTRFS warning (device loop1): couldn't read tree root [ 863.818514][T12091] BTRFS warning (device loop1): try to load backup roots slot 2 [ 863.827339][ T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 863.856964][T12091] BTRFS warning (device loop1): couldn't read tree root [ 863.864078][T12091] BTRFS warning (device loop1): try to load backup roots slot 3 [ 863.896727][T12091] BTRFS info (device loop1): enabling ssd optimizations [ 863.904563][T12091] BTRFS info (device loop1): rebuilding free space tree [ 863.926859][T12091] BTRFS info (device loop1): checking UUID tree [ 865.450292][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 866.233298][T12085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.485541][ T9925] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 869.561612][T12130] loop2: detected capacity change from 0 to 256 [ 869.597587][T12130] exfat: Deprecated parameter 'utf8' [ 869.647198][T12130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 871.038373][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.044741][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.076682][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 871.206899][ T9925] usb 2-1: device descriptor read/all, error -71 [ 871.339414][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 871.432614][T12135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.513048][T12139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.581017][T12139] bond1: (slave bond0): Enslaving as an active interface with an up link [ 872.019603][T12143] loop2: detected capacity change from 0 to 32768 [ 872.037135][T12143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1796 (12143) [ 872.060688][T12143] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 872.071814][T12143] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 872.081259][T12143] BTRFS info (device loop2): turning on sync discard [ 872.088101][T12143] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 872.098361][T12143] BTRFS info (device loop2): use zstd compression, level 3 [ 872.105629][T12143] BTRFS info (device loop2): turning on async discard [ 872.113108][T12143] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 872.123876][T12143] BTRFS info (device loop2): trying to use backup root at mount time [ 872.132623][T12143] BTRFS info (device loop2): enabling auto defrag [ 872.139906][T12143] BTRFS info (device loop2): using free space tree [ 873.575993][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 873.607724][T12143] BTRFS error (device loop2): failed to load root extent [ 873.614919][T12143] BTRFS warning (device loop2): try to load backup roots slot 1 [ 873.623811][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 873.666947][T12143] BTRFS warning (device loop2): couldn't read tree root [ 873.674136][T12143] BTRFS warning (device loop2): try to load backup roots slot 2 [ 873.682538][ T49] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 873.707368][T12143] BTRFS warning (device loop2): couldn't read tree root [ 873.714477][T12143] BTRFS warning (device loop2): try to load backup roots slot 3 [ 873.737298][T12143] BTRFS info (device loop2): enabling ssd optimizations [ 873.746933][T12143] BTRFS info (device loop2): rebuilding free space tree [ 873.763137][T12143] BTRFS info (device loop2): checking UUID tree [ 875.179732][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 880.260123][T12173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.694338][T12193] loop1: detected capacity change from 0 to 256 [ 881.725268][T12193] exfat: Deprecated parameter 'utf8' [ 883.198026][T12193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 884.875587][ T9925] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 885.136789][T12207] loop0: detected capacity change from 0 to 32768 [ 885.145270][T12207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1810 (12207) [ 885.165852][T12207] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 885.176253][T12207] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 885.185025][T12207] BTRFS info (device loop0): turning on sync discard [ 885.192939][T12207] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 885.202467][T12207] BTRFS info (device loop0): use zstd compression, level 3 [ 885.209834][T12207] BTRFS info (device loop0): turning on async discard [ 885.217847][T12207] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 885.228639][T12207] BTRFS info (device loop0): trying to use backup root at mount time [ 885.236991][T12207] BTRFS info (device loop0): enabling auto defrag [ 885.243473][T12207] BTRFS info (device loop0): using free space tree [ 885.277697][ T9925] usb 4-1: Using ep0 maxpacket: 8 [ 885.288337][ T9925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 885.304688][ T49] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 885.316329][ T9925] usb 4-1: can't read configurations, error -61 [ 885.337566][T12207] BTRFS error (device loop0): failed to load root extent [ 885.344678][T12207] BTRFS warning (device loop0): try to load backup roots slot 1 [ 885.355175][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 885.419062][T12207] BTRFS warning (device loop0): couldn't read tree root [ 885.427542][T12207] BTRFS warning (device loop0): try to load backup roots slot 2 [ 885.436657][ T49] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 885.457424][T12207] BTRFS warning (device loop0): couldn't read tree root [ 885.464470][T12207] BTRFS warning (device loop0): try to load backup roots slot 3 [ 885.489246][T12207] BTRFS info (device loop0): enabling ssd optimizations [ 885.498607][T12207] BTRFS info (device loop0): rebuilding free space tree [ 885.518158][T12207] BTRFS info (device loop0): checking UUID tree [ 885.536140][ T9925] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 887.126515][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 887.306141][ T9925] usb 4-1: device not accepting address 54, error -71 [ 887.326236][ T9925] usb usb4-port1: attempt power cycle [ 887.911049][ T9] smpboot: CPU 1 is now offline [ 887.939676][T12234] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 888.400172][T12246] loop0: detected capacity change from 0 to 256 [ 888.447480][T12246] exfat: Deprecated parameter 'utf8' [ 888.572584][T12246] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 888.711345][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 888.844642][T12248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.930063][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.033402][T12250] bond1: (slave bond0): Enslaving as an active interface with an up link [ 891.736167][ T9925] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 891.916121][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 891.918915][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 891.918954][ T9925] usb 2-1: can't read configurations, error -61 [ 892.076365][ T9925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 892.257440][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 892.279249][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 892.299636][ T9925] usb 2-1: can't read configurations, error -61 [ 892.327172][ T9925] usb usb2-port1: attempt power cycle [ 894.106406][ T9925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 894.185707][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 894.218370][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 894.236162][ T9925] usb 2-1: can't read configurations, error -61 [ 894.489013][T12278] loop2: detected capacity change from 0 to 32768 [ 894.507285][T12278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1824 (12278) [ 894.537078][T12278] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 894.548582][T12278] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 894.557435][T12278] BTRFS info (device loop2): turning on sync discard [ 894.564171][T12278] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 894.573710][T12278] BTRFS info (device loop2): use zstd compression, level 3 [ 894.582206][T12278] BTRFS info (device loop2): turning on async discard [ 894.589132][T12278] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 894.599897][T12278] BTRFS info (device loop2): trying to use backup root at mount time [ 894.609304][T12278] BTRFS info (device loop2): enabling auto defrag [ 894.615799][T12278] BTRFS info (device loop2): using free space tree [ 894.622961][ T9925] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 894.675373][ T1100] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 894.677129][ T9925] usb 2-1: device descriptor read/8, error -71 [ 894.744373][T12278] BTRFS error (device loop2): failed to load root extent [ 894.752063][T12278] BTRFS warning (device loop2): try to load backup roots slot 1 [ 894.771368][ T1117] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 894.802171][T12278] BTRFS warning (device loop2): couldn't read tree root [ 894.811179][T12278] BTRFS warning (device loop2): try to load backup roots slot 2 [ 894.822422][ T1117] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 894.856541][T12278] BTRFS warning (device loop2): couldn't read tree root [ 894.863640][T12278] BTRFS warning (device loop2): try to load backup roots slot 3 [ 894.872008][ T9925] usb usb2-port1: unable to enumerate USB device [ 894.896369][T12278] BTRFS info (device loop2): enabling ssd optimizations [ 894.917197][T12278] BTRFS info (device loop2): rebuilding free space tree [ 894.955534][T12278] BTRFS info (device loop2): checking UUID tree [ 896.165946][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 896.321056][ T9925] smpboot: CPU 1 is now offline [ 896.412313][T12307] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 896.706507][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 896.800835][T12309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 896.831249][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.860640][T12311] bond1: (slave bond0): Enslaving as an active interface with an up link [ 898.057456][T12294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.067581][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 898.646101][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 898.653835][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 898.679145][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 898.708225][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 898.736178][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.760006][ T9] usb 3-1: Product: syz [ 898.764216][ T9] usb 3-1: Manufacturer: syz [ 898.796396][ T9] usb 3-1: SerialNumber: syz [ 898.808834][ T9] usb 3-1: config 0 descriptor?? [ 898.896471][ T9925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 899.060870][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 899.114922][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 899.130062][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 899.140687][ T9925] usb 2-1: can't read configurations, error -61 [ 899.316424][ T9925] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 899.387290][ T9] rc_core: IR keymap rc-imon-pad not found [ 899.393222][ T9] Registered IR keymap rc-empty [ 899.436580][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 899.477525][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 899.531435][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 899.547721][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 899.589262][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 899.589291][ T9925] usb 2-1: can't read configurations, error -61 [ 899.589554][ T9925] usb usb2-port1: attempt power cycle [ 899.592082][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 899.610876][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:37> initialized [ 899.786480][ C0] imon 3-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 899.991992][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 899.993257][ T9] usb 3-1: USB disconnect, device number 37 [ 899.996190][ T9925] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 900.027600][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 900.030871][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 900.030914][ T9925] usb 2-1: can't read configurations, error -61 [ 900.176411][ T9925] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 900.225306][ T9925] usb 2-1: Using ep0 maxpacket: 8 [ 900.230679][ T9925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 900.230722][ T9925] usb 2-1: can't read configurations, error -61 [ 900.231132][ T9925] usb usb2-port1: unable to enumerate USB device [ 901.382561][T12341] loop2: detected capacity change from 0 to 32768 [ 901.401377][T12341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1837 (12341) [ 901.434883][T12341] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 901.445377][T12341] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 901.454274][T12341] BTRFS info (device loop2): turning on sync discard [ 901.462201][T12341] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 901.471828][T12341] BTRFS info (device loop2): use zstd compression, level 3 [ 901.479328][T12341] BTRFS info (device loop2): turning on async discard [ 901.487346][T12341] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 901.498275][T12341] BTRFS info (device loop2): trying to use backup root at mount time [ 901.506510][T12341] BTRFS info (device loop2): enabling auto defrag [ 901.513002][T12341] BTRFS info (device loop2): using free space tree [ 901.562233][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 901.628634][T12341] BTRFS error (device loop2): failed to load root extent [ 901.635793][T12341] BTRFS warning (device loop2): try to load backup roots slot 1 [ 901.645721][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 901.702710][T12341] BTRFS warning (device loop2): couldn't read tree root [ 901.709898][T12341] BTRFS warning (device loop2): try to load backup roots slot 2 [ 901.718117][ T1117] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 901.744859][T12341] BTRFS warning (device loop2): couldn't read tree root [ 901.751982][T12341] BTRFS warning (device loop2): try to load backup roots slot 3 [ 901.792048][T12341] BTRFS info (device loop2): enabling ssd optimizations [ 901.809450][T12341] BTRFS info (device loop2): rebuilding free space tree [ 901.838209][T12341] BTRFS info (device loop2): checking UUID tree [ 903.170250][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 903.434145][ T9925] smpboot: CPU 1 is now offline [ 903.497557][T12367] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 903.550357][T12329] ------------[ cut here ]------------ [ 903.551891][T12329] [ 903.551896][T12329] ====================================================== [ 903.551902][T12329] WARNING: possible circular locking dependency detected [ 903.551914][T12329] syzkaller #0 Not tainted [ 903.551923][T12329] ------------------------------------------------------ [ 903.551928][T12329] syz.0.1835/12329 is trying to acquire lock: [ 903.551937][T12329] ffffffff8d1260a0 (console_owner){-...}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 903.551989][T12329] [ 903.551989][T12329] but task is already holding lock: [ 903.551994][T12329] ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 903.552041][T12329] [ 903.552041][T12329] which lock already depends on the new lock. [ 903.552041][T12329] [ 903.552046][T12329] [ 903.552046][T12329] the existing dependency chain (in reverse order) is: [ 903.552052][T12329] [ 903.552052][T12329] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 903.552073][T12329] _raw_spin_lock_nested+0x32/0x50 [ 903.552090][T12329] raw_spin_rq_lock_nested+0x29/0x130 [ 903.552115][T12329] task_fork_fair+0x62/0x1f0 [ 903.552132][T12329] sched_cgroup_fork+0x352/0x3e0 [ 903.552148][T12329] copy_process+0x21fd/0x3da0 [ 903.552165][T12329] kernel_clone+0x24b/0x8a0 [ 903.552183][T12329] user_mode_thread+0x111/0x180 [ 903.552201][T12329] rest_init+0x27/0x300 [ 903.552225][T12329] arch_call_rest_init+0xe/0x10 [ 903.552249][T12329] start_kernel+0x461/0x4e0 [ 903.552271][T12329] x86_64_start_reservations+0x2a/0x30 [ 903.552292][T12329] copy_bootdata+0x0/0xd0 [ 903.552311][T12329] secondary_startup_64_no_verify+0x179/0x17b [ 903.552336][T12329] [ 903.552336][T12329] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 903.552358][T12329] _raw_spin_lock_irqsave+0xb4/0x100 [ 903.552384][T12329] try_to_wake_up+0x5b/0x10e0 [ 903.552399][T12329] __wake_up_common+0x28e/0x4d0 [ 903.552418][T12329] __wake_up+0x125/0x1a0 [ 903.552435][T12329] tty_port_default_wakeup+0xa2/0xf0 [ 903.552452][T12329] serial8250_tx_chars+0x6a2/0x8b0 [ 903.552472][T12329] serial8250_handle_irq+0x567/0x730 [ 903.552493][T12329] serial8250_default_handle_irq+0xb8/0x1a0 [ 903.552516][T12329] serial8250_interrupt+0x9f/0x1c0 [ 903.552535][T12329] __handle_irq_event_percpu+0x271/0x940 [ 903.552561][T12329] handle_irq_event+0x8b/0x1e0 [ 903.552585][T12329] handle_edge_irq+0x246/0xb20 [ 903.552603][T12329] __common_interrupt+0x13b/0x230 [ 903.552624][T12329] common_interrupt+0xb4/0xd0 [ 903.552642][T12329] asm_common_interrupt+0x26/0x40 [ 903.552661][T12329] pv_native_safe_halt+0xf/0x10 [ 903.552682][T12329] default_idle+0x13/0x20 [ 903.552705][T12329] default_idle_call+0x6c/0xa0 [ 903.552729][T12329] do_idle+0x334/0x5c0 [ 903.552748][T12329] cpu_startup_entry+0x43/0x60 [ 903.552767][T12329] rest_init+0x2e2/0x300 [ 903.552791][T12329] arch_call_rest_init+0xe/0x10 [ 903.552813][T12329] start_kernel+0x461/0x4e0 [ 903.552841][T12329] x86_64_start_reservations+0x2a/0x30 [ 903.552863][T12329] copy_bootdata+0x0/0xd0 [ 903.552882][T12329] secondary_startup_64_no_verify+0x179/0x17b [ 903.552905][T12329] [ 903.552905][T12329] -> #2 (&tty->write_wait){-...}-{2:2}: [ 903.552927][T12329] _raw_spin_lock_irqsave+0xb4/0x100 [ 903.552952][T12329] __wake_up+0x10b/0x1a0 [ 903.552969][T12329] tty_port_default_wakeup+0xa2/0xf0 [ 903.552985][T12329] serial8250_tx_chars+0x6a2/0x8b0 [ 903.553005][T12329] serial8250_handle_irq+0x567/0x730 [ 903.553025][T12329] serial8250_default_handle_irq+0xb8/0x1a0 [ 903.553048][T12329] serial8250_interrupt+0x9f/0x1c0 [ 903.553067][T12329] __handle_irq_event_percpu+0x271/0x940 [ 903.553092][T12329] handle_irq_event+0x8b/0x1e0 [ 903.553116][T12329] handle_edge_irq+0x246/0xb20 [ 903.553134][T12329] __common_interrupt+0x13b/0x230 [ 903.553153][T12329] common_interrupt+0xb4/0xd0 [ 903.553172][T12329] asm_common_interrupt+0x26/0x40 [ 903.553189][T12329] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 903.553214][T12329] uart_write+0x45b/0x5d0 [ 903.553228][T12329] n_tty_write+0xd3d/0x11e0 [ 903.553249][T12329] file_tty_write+0x529/0x960 [ 903.553268][T12329] vfs_write+0x474/0x9a0 [ 903.553290][T12329] ksys_write+0x151/0x260 [ 903.553312][T12329] do_syscall_64+0x55/0xb0 [ 903.553329][T12329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.553348][T12329] [ 903.553348][T12329] -> #1 (&port_lock_key){-...}-{2:2}: [ 903.553370][T12329] _raw_spin_lock_irqsave+0xb4/0x100 [ 903.553395][T12329] serial8250_console_write+0x181/0x18b0 [ 903.553417][T12329] console_flush_all+0x6ad/0xcf0 [ 903.553437][T12329] console_unlock+0xad/0x350 [ 903.553457][T12329] vprintk_emit+0x497/0x610 [ 903.553476][T12329] _printk+0xde/0x130 [ 903.553500][T12329] register_console+0xb96/0xf00 [ 903.553520][T12329] univ8250_console_init+0x45/0x50 [ 903.553542][T12329] console_init+0x17b/0x5d0 [ 903.553566][T12329] start_kernel+0x2c8/0x4e0 [ 903.553589][T12329] x86_64_start_reservations+0x2a/0x30 [ 903.553611][T12329] copy_bootdata+0x0/0xd0 [ 903.553630][T12329] secondary_startup_64_no_verify+0x179/0x17b [ 903.553652][T12329] [ 903.553652][T12329] -> #0 (console_owner){-...}-{0:0}: [ 903.553673][T12329] __lock_acquire+0x37ef/0x7d80 [ 903.553691][T12329] lock_acquire+0x19e/0x420 [ 903.553709][T12329] console_flush_all+0x676/0xcf0 [ 903.553729][T12329] console_unlock+0xad/0x350 [ 903.553748][T12329] vprintk_emit+0x497/0x610 [ 903.553767][T12329] _printk+0xde/0x130 [ 903.553790][T12329] report_bug+0x34e/0x4f0 [ 903.553808][T12329] handle_bug+0xcf/0x120 [ 903.553849][T12329] exc_invalid_op+0x1a/0x50 [ 903.553867][T12329] asm_exc_invalid_op+0x1a/0x20 [ 903.553883][T12329] update_rq_clock+0x32e/0x4b0 [ 903.553908][T12329] __schedule+0x2c72/0x4660 [ 903.553928][T12329] preempt_schedule_irq+0xbf/0x150 [ 903.553948][T12329] irqentry_exit+0x67/0x70 [ 903.553970][T12329] asm_sysvec_call_function_single+0x1a/0x20 [ 903.553990][T12329] kasan_check_range+0x1bc/0x290 [ 903.554011][T12329] find_lock_entries+0x4bd/0x1020 [ 903.554029][T12329] shmem_undo_range+0x294/0x1a80 [ 903.554047][T12329] shmem_evict_inode+0x285/0xa70 [ 903.554067][T12329] evict+0x4b7/0x8a0 [ 903.554086][T12329] __dentry_kill+0x412/0x630 [ 903.554120][T12329] dentry_kill+0xb8/0x290 [ 903.554143][T12329] dput+0xfe/0x1e0 [ 903.554166][T12329] __fput+0x5b2/0x940 [ 903.554180][T12329] task_work_run+0x1d4/0x260 [ 903.554220][T12329] do_exit+0x986/0x2530 [ 903.554245][T12329] do_group_exit+0x22d/0x2f0 [ 903.554276][T12329] get_signal+0x12a6/0x1390 [ 903.554292][T12329] arch_do_signal_or_restart+0xc2/0x7b0 [ 903.554319][T12329] exit_to_user_mode_loop+0x70/0x110 [ 903.554343][T12329] exit_to_user_mode_prepare+0xee/0x180 [ 903.554367][T12329] irqentry_exit_to_user_mode+0x9/0x30 [ 903.554389][T12329] exc_page_fault+0x8c/0x100 [ 903.554411][T12329] asm_exc_page_fault+0x26/0x30 [ 903.554427][T12329] [ 903.554427][T12329] other info that might help us debug this: [ 903.554427][T12329] [ 903.554432][T12329] Chain exists of: [ 903.554432][T12329] console_owner --> &p->pi_lock --> &rq->__lock [ 903.554432][T12329] [ 903.554456][T12329] Possible unsafe locking scenario: [ 903.554456][T12329] [ 903.554461][T12329] CPU0 CPU1 [ 903.554464][T12329] ---- ---- [ 903.554468][T12329] lock(&rq->__lock); [ 903.554477][T12329] lock(&p->pi_lock); [ 903.554488][T12329] lock(&rq->__lock); [ 903.554498][T12329] lock(console_owner); [ 903.554508][T12329] [ 903.554508][T12329] *** DEADLOCK *** [ 903.554508][T12329] [ 903.554511][T12329] 4 locks held by syz.0.1835/12329: [ 903.554521][T12329] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: find_lock_entries+0x120/0x1020 [ 903.554565][T12329] #1: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 903.554613][T12329] #2: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 903.554660][T12329] #3: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 903.554704][T12329] [ 903.554704][T12329] stack backtrace: [ 903.554709][T12329] CPU: 0 PID: 12329 Comm: syz.0.1835 Not tainted syzkaller #0 [ 903.554726][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.554737][T12329] Call Trace: [ 903.554743][T12329] [ 903.554750][T12329] dump_stack_lvl+0x18c/0x250 [ 903.554770][T12329] ? load_image+0x420/0x420 [ 903.554797][T12329] ? show_regs_print_info+0x20/0x20 [ 903.554821][T12329] ? print_circular_bug+0x12b/0x1a0 [ 903.554860][T12329] check_noncircular+0x2fc/0x400 [ 903.554886][T12329] ? print_deadlock_bug+0x5d0/0x5d0 [ 903.554907][T12329] ? lockdep_lock+0xf5/0x230 [ 903.554934][T12329] __lock_acquire+0x37ef/0x7d80 [ 903.554967][T12329] ? verify_lock_unused+0x140/0x140 [ 903.554999][T12329] lock_acquire+0x19e/0x420 [ 903.555019][T12329] ? console_flush_all+0x10b/0xcf0 [ 903.555046][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 903.555065][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 903.555089][T12329] ? read_lock_is_recursive+0x20/0x20 [ 903.555110][T12329] ? __rwlock_init+0x150/0x150 [ 903.555136][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 903.555161][T12329] console_flush_all+0x676/0xcf0 [ 903.555184][T12329] ? console_flush_all+0x10b/0xcf0 [ 903.555208][T12329] ? console_flush_all+0x10b/0xcf0 [ 903.555235][T12329] ? is_console_locked+0x20/0x20 [ 903.555263][T12329] console_unlock+0xad/0x350 [ 903.555286][T12329] ? other_cpu_in_panic+0xf0/0xf0 [ 903.555308][T12329] ? __lock_acquire+0x1336/0x7d80 [ 903.555335][T12329] vprintk_emit+0x497/0x610 [ 903.555358][T12329] ? printk_sprint+0x460/0x460 [ 903.555387][T12329] _printk+0xde/0x130 [ 903.555415][T12329] ? load_image+0x420/0x420 [ 903.555444][T12329] ? find_bug+0xa5/0x3a0 [ 903.555463][T12329] ? update_rq_clock+0x32e/0x4b0 [ 903.555491][T12329] report_bug+0x34e/0x4f0 [ 903.555512][T12329] ? update_rq_clock+0x32e/0x4b0 [ 903.555538][T12329] ? update_rq_clock+0x32e/0x4b0 [ 903.555564][T12329] ? update_rq_clock+0x330/0x4b0 [ 903.555590][T12329] handle_bug+0xcf/0x120 [ 903.555610][T12329] exc_invalid_op+0x1a/0x50 [ 903.555631][T12329] asm_exc_invalid_op+0x1a/0x20 [ 903.555650][T12329] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 903.555677][T12329] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 fb 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 903.555693][T12329] RSP: 0018:ffffc9000347eec0 EFLAGS: 00010046 [ 903.555708][T12329] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: c28670c32236e200 [ 903.555721][T12329] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 903.555733][T12329] RBP: ffffc9000347f110 R08: ffff8880b8e3c3dc R09: 0000000000000001 [ 903.555745][T12329] R10: ffff88807c52a418 R11: ffffed100f8a5485 R12: ffffffff8ca95a38 [ 903.555758][T12329] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 903.555799][T12329] __schedule+0x2c72/0x4660 [ 903.555859][T12329] ? asan.module_dtor+0x20/0x20 [ 903.555882][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 903.555908][T12329] ? preempt_schedule_irq+0xb4/0x150 [ 903.555933][T12329] preempt_schedule_irq+0xbf/0x150 [ 903.555955][T12329] ? preempt_schedule_notrace+0x110/0x110 [ 903.555983][T12329] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 903.556010][T12329] irqentry_exit+0x67/0x70 [ 903.556033][T12329] asm_sysvec_call_function_single+0x1a/0x20 [ 903.556054][T12329] RIP: 0010:kasan_check_range+0x1bc/0x290 [ 903.556078][T12329] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 903.556093][T12329] RSP: 0018:ffffc9000347f298 EFLAGS: 00000256 [ 903.556108][T12329] RAX: ffffffff81b63001 RBX: 0000000000000333 RCX: ffffffff81b6305d [ 903.556120][T12329] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000162b480 [ 903.556132][T12329] RBP: ffffc9000347f3f0 R08: ffffea000162b487 R09: 1ffffd40002c5690 [ 903.556146][T12329] R10: dffffc0000000000 R11: fffff940002c5691 R12: dffffc0000000000 [ 903.556159][T12329] R13: ffffc9000347f5e0 R14: fffff940002c5691 R15: 1ffffd40002c5690 [ 903.556175][T12329] ? find_lock_entries+0x461/0x1020 [ 903.556194][T12329] ? find_lock_entries+0x4bd/0x1020 [ 903.556217][T12329] find_lock_entries+0x4bd/0x1020 [ 903.556237][T12329] ? find_lock_entries+0x120/0x1020 [ 903.556258][T12329] ? find_get_entries+0x900/0x900 [ 903.556284][T12329] shmem_undo_range+0x294/0x1a80 [ 903.556306][T12329] ? verify_lock_unused+0x140/0x140 [ 903.556331][T12329] ? shmem_truncate_range+0xa0/0xa0 [ 903.556350][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 903.556378][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 903.556407][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 903.556435][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 903.556455][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 903.556482][T12329] shmem_evict_inode+0x285/0xa70 [ 903.556507][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 903.556533][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 903.556557][T12329] ? sb_clear_inode_writeback+0x330/0x330 [ 903.556582][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 903.556608][T12329] ? bit_waitqueue+0x30/0x30 [ 903.556629][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 903.556655][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 903.556679][T12329] evict+0x4b7/0x8a0 [ 903.556700][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 903.556729][T12329] ? proc_nr_inodes+0x230/0x230 [ 903.556751][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 903.556777][T12329] ? _raw_spin_unlock+0x28/0x40 [ 903.556807][T12329] __dentry_kill+0x412/0x630 [ 903.556847][T12329] dentry_kill+0xb8/0x290 [ 903.556873][T12329] ? dput+0x3b/0x1e0 [ 903.556898][T12329] dput+0xfe/0x1e0 [ 903.556924][T12329] __fput+0x5b2/0x940 [ 903.556946][T12329] task_work_run+0x1d4/0x260 [ 903.556973][T12329] ? task_work_cancel+0x220/0x220 [ 903.557003][T12329] do_exit+0x986/0x2530 [ 903.557030][T12329] ? nfs_stat_to_errno+0x170/0x170 [ 903.557053][T12329] ? put_task_struct+0xc0/0xc0 [ 903.557084][T12329] ? lock_chain_count+0x20/0x20 [ 903.557107][T12329] do_group_exit+0x22d/0x2f0 [ 903.557135][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 903.557160][T12329] get_signal+0x12a6/0x1390 [ 903.557188][T12329] arch_do_signal_or_restart+0xc2/0x7b0 [ 903.557218][T12329] ? get_sigframe_size+0x20/0x20 [ 903.557253][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 903.557288][T12329] ? exit_to_user_mode_loop+0x3b/0x110 [ 903.557315][T12329] exit_to_user_mode_loop+0x70/0x110 [ 903.557349][T12329] exit_to_user_mode_prepare+0xee/0x180 [ 903.557376][T12329] irqentry_exit_to_user_mode+0x9/0x30 [ 903.557402][T12329] exc_page_fault+0x8c/0x100 [ 903.557426][T12329] asm_exc_page_fault+0x26/0x30 [ 903.557445][T12329] RIP: 0033:0x7f269519e0e1 [ 903.557459][T12329] Code: Unable to access opcode bytes at 0x7f269519e0b7. [ 903.557468][T12329] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 903.557483][T12329] RAX: 0000000000000000 RBX: 00007f2695426090 RCX: 00007f269519e0d9 [ 903.557495][T12329] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 903.557506][T12329] RBP: 00007f2695235024 R08: 0000000000000000 R09: 0000000000000000 [ 903.557517][T12329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 903.557527][T12329] R13: 00007f2695426128 R14: 00007f2695426090 R15: 00007fff908f2418 [ 903.557547][T12329] [ 905.070670][T12329] WARNING: CPU: 0 PID: 12329 at kernel/sched/sched.h:1370 update_rq_clock+0x32e/0x4b0 [ 905.080273][T12329] Modules linked in: [ 905.084193][T12329] CPU: 0 PID: 12329 Comm: syz.0.1835 Not tainted syzkaller #0 [ 905.091696][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.101777][T12329] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 905.107379][T12329] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 fb 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 905.127008][T12329] RSP: 0018:ffffc9000347eec0 EFLAGS: 00010046 [ 905.133103][T12329] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: c28670c32236e200 [ 905.141099][T12329] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 905.149093][T12329] RBP: ffffc9000347f110 R08: ffff8880b8e3c3dc R09: 0000000000000001 [ 905.157086][T12329] R10: ffff88807c52a418 R11: ffffed100f8a5485 R12: ffffffff8ca95a38 [ 905.165083][T12329] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 905.173159][T12329] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 905.182134][T12329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.188748][T12329] CR2: 000000110c2ef129 CR3: 000000007d4c5000 CR4: 00000000003506f0 [ 905.196753][T12329] Call Trace: [ 905.200056][T12329] [ 905.203021][T12329] __schedule+0x2c72/0x4660 [ 905.207568][T12329] ? asan.module_dtor+0x20/0x20 [ 905.212448][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 905.218459][T12329] ? preempt_schedule_irq+0xb4/0x150 [ 905.223779][T12329] preempt_schedule_irq+0xbf/0x150 [ 905.228924][T12329] ? preempt_schedule_notrace+0x110/0x110 [ 905.234676][T12329] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 905.240514][T12329] irqentry_exit+0x67/0x70 [ 905.244964][T12329] asm_sysvec_call_function_single+0x1a/0x20 [ 905.250971][T12329] RIP: 0010:kasan_check_range+0x1bc/0x290 [ 905.256735][T12329] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 905.276380][T12329] RSP: 0018:ffffc9000347f298 EFLAGS: 00000256 [ 905.282496][T12329] RAX: ffffffff81b63001 RBX: 0000000000000333 RCX: ffffffff81b6305d [ 905.290491][T12329] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000162b480 [ 905.298486][T12329] RBP: ffffc9000347f3f0 R08: ffffea000162b487 R09: 1ffffd40002c5690 [ 905.306502][T12329] R10: dffffc0000000000 R11: fffff940002c5691 R12: dffffc0000000000 [ 905.314505][T12329] R13: ffffc9000347f5e0 R14: fffff940002c5691 R15: 1ffffd40002c5690 [ 905.322518][T12329] ? find_lock_entries+0x461/0x1020 [ 905.327747][T12329] ? find_lock_entries+0x4bd/0x1020 [ 905.332993][T12329] find_lock_entries+0x4bd/0x1020 [ 905.338140][T12329] ? find_lock_entries+0x120/0x1020 [ 905.343419][T12329] ? find_get_entries+0x900/0x900 [ 905.348509][T12329] shmem_undo_range+0x294/0x1a80 [ 905.353515][T12329] ? verify_lock_unused+0x140/0x140 [ 905.358768][T12329] ? shmem_truncate_range+0xa0/0xa0 [ 905.364026][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 905.370048][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 905.375289][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 905.381043][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 905.386101][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 905.391164][T12329] shmem_evict_inode+0x285/0xa70 [ 905.396140][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 905.401898][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 905.407478][T12329] ? sb_clear_inode_writeback+0x330/0x330 [ 905.413227][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 905.418285][T12329] ? bit_waitqueue+0x30/0x30 [ 905.422910][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 905.428146][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 905.433721][T12329] evict+0x4b7/0x8a0 [ 905.437653][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 905.442732][T12329] ? proc_nr_inodes+0x230/0x230 [ 905.447616][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 905.452854][T12329] ? _raw_spin_unlock+0x28/0x40 [ 905.457749][T12329] __dentry_kill+0x412/0x630 [ 905.462376][T12329] dentry_kill+0xb8/0x290 [ 905.466742][T12329] ? dput+0x3b/0x1e0 [ 905.470670][T12329] dput+0xfe/0x1e0 [ 905.474424][T12329] __fput+0x5b2/0x940 [ 905.478434][T12329] task_work_run+0x1d4/0x260 [ 905.483061][T12329] ? task_work_cancel+0x220/0x220 [ 905.488146][T12329] do_exit+0x986/0x2530 [ 905.492341][T12329] ? nfs_stat_to_errno+0x170/0x170 [ 905.497480][T12329] ? put_task_struct+0xc0/0xc0 [ 905.502282][T12329] ? lock_chain_count+0x20/0x20 [ 905.507173][T12329] do_group_exit+0x22d/0x2f0 [ 905.511821][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 905.517059][T12329] get_signal+0x12a6/0x1390 [ 905.521599][T12329] arch_do_signal_or_restart+0xc2/0x7b0 [ 905.527186][T12329] ? get_sigframe_size+0x20/0x20 [ 905.532155][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 905.538171][T12329] ? exit_to_user_mode_loop+0x3b/0x110 [ 905.543663][T12329] exit_to_user_mode_loop+0x70/0x110 [ 905.548982][T12329] exit_to_user_mode_prepare+0xee/0x180 [ 905.554562][T12329] irqentry_exit_to_user_mode+0x9/0x30 [ 905.560068][T12329] exc_page_fault+0x8c/0x100 [ 905.564717][T12329] asm_exc_page_fault+0x26/0x30 [ 905.569601][T12329] RIP: 0033:0x7f269519e0e1 [ 905.574048][T12329] Code: Unable to access opcode bytes at 0x7f269519e0b7. [ 905.581087][T12329] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 905.587179][T12329] RAX: 0000000000000000 RBX: 00007f2695426090 RCX: 00007f269519e0d9 [ 905.595174][T12329] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 905.603165][T12329] RBP: 00007f2695235024 R08: 0000000000000000 R09: 0000000000000000 [ 905.611156][T12329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 905.619150][T12329] R13: 00007f2695426128 R14: 00007f2695426090 R15: 00007fff908f2418 [ 905.627160][T12329] [ 905.630205][T12329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 905.637501][T12329] CPU: 0 PID: 12329 Comm: syz.0.1835 Not tainted syzkaller #0 [ 905.644997][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.655084][T12329] Call Trace: [ 905.658403][T12329] [ 905.661366][T12329] dump_stack_lvl+0x18c/0x250 [ 905.666092][T12329] ? show_regs_print_info+0x20/0x20 [ 905.671328][T12329] ? load_image+0x420/0x420 [ 905.675874][T12329] panic+0x2ca/0x720 [ 905.679806][T12329] ? bpf_jit_dump+0xd0/0xd0 [ 905.684371][T12329] __warn+0x2e0/0x470 [ 905.688385][T12329] ? update_rq_clock+0x32e/0x4b0 [ 905.693357][T12329] ? update_rq_clock+0x32e/0x4b0 [ 905.698329][T12329] report_bug+0x2be/0x4f0 [ 905.702685][T12329] ? update_rq_clock+0x32e/0x4b0 [ 905.707658][T12329] ? update_rq_clock+0x32e/0x4b0 [ 905.712626][T12329] ? update_rq_clock+0x330/0x4b0 [ 905.717590][T12329] handle_bug+0xcf/0x120 [ 905.721866][T12329] exc_invalid_op+0x1a/0x50 [ 905.726399][T12329] asm_exc_invalid_op+0x1a/0x20 [ 905.731290][T12329] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 905.736895][T12329] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 fb 82 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 905.756522][T12329] RSP: 0018:ffffc9000347eec0 EFLAGS: 00010046 [ 905.762612][T12329] RAX: 0000000000000000 RBX: ffff8880b8f3c280 RCX: c28670c32236e200 [ 905.770609][T12329] RDX: 0000000000000003 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 905.778603][T12329] RBP: ffffc9000347f110 R08: ffff8880b8e3c3dc R09: 0000000000000001 [ 905.786622][T12329] R10: ffff88807c52a418 R11: ffffed100f8a5485 R12: ffffffff8ca95a38 [ 905.794638][T12329] R13: dffffc0000000000 R14: ffff8880b8f3cfc8 R15: ffff8880b8f3c280 [ 905.802647][T12329] __schedule+0x2c72/0x4660 [ 905.807199][T12329] ? asan.module_dtor+0x20/0x20 [ 905.812106][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 905.818121][T12329] ? preempt_schedule_irq+0xb4/0x150 [ 905.823443][T12329] preempt_schedule_irq+0xbf/0x150 [ 905.828583][T12329] ? preempt_schedule_notrace+0x110/0x110 [ 905.834352][T12329] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 905.840208][T12329] irqentry_exit+0x67/0x70 [ 905.844668][T12329] asm_sysvec_call_function_single+0x1a/0x20 [ 905.850684][T12329] RIP: 0010:kasan_check_range+0x1bc/0x290 [ 905.856445][T12329] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 905.876087][T12329] RSP: 0018:ffffc9000347f298 EFLAGS: 00000256 [ 905.882186][T12329] RAX: ffffffff81b63001 RBX: 0000000000000333 RCX: ffffffff81b6305d [ 905.890200][T12329] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000162b480 [ 905.898208][T12329] RBP: ffffc9000347f3f0 R08: ffffea000162b487 R09: 1ffffd40002c5690 [ 905.906216][T12329] R10: dffffc0000000000 R11: fffff940002c5691 R12: dffffc0000000000 [ 905.914222][T12329] R13: ffffc9000347f5e0 R14: fffff940002c5691 R15: 1ffffd40002c5690 [ 905.922229][T12329] ? find_lock_entries+0x461/0x1020 [ 905.927462][T12329] ? find_lock_entries+0x4bd/0x1020 [ 905.932697][T12329] find_lock_entries+0x4bd/0x1020 [ 905.937754][T12329] ? find_lock_entries+0x120/0x1020 [ 905.942979][T12329] ? find_get_entries+0x900/0x900 [ 905.948038][T12329] shmem_undo_range+0x294/0x1a80 [ 905.953007][T12329] ? verify_lock_unused+0x140/0x140 [ 905.958254][T12329] ? shmem_truncate_range+0xa0/0xa0 [ 905.963499][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 905.969512][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 905.974743][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 905.980501][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 905.985551][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 905.990610][T12329] shmem_evict_inode+0x285/0xa70 [ 905.995615][T12329] ? inode_wait_for_writeback+0x1e3/0x230 [ 906.001383][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 906.007500][T12329] ? sb_clear_inode_writeback+0x330/0x330 [ 906.013272][T12329] ? do_raw_spin_lock+0x11f/0x2b0 [ 906.018348][T12329] ? bit_waitqueue+0x30/0x30 [ 906.023020][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 906.028280][T12329] ? shmem_free_in_core_inode+0xb0/0xb0 [ 906.033870][T12329] evict+0x4b7/0x8a0 [ 906.037806][T12329] ? __lock_acquire+0x7d80/0x7d80 [ 906.042877][T12329] ? proc_nr_inodes+0x230/0x230 [ 906.047764][T12329] ? do_raw_spin_unlock+0x121/0x230 [ 906.053001][T12329] ? _raw_spin_unlock+0x28/0x40 [ 906.057890][T12329] __dentry_kill+0x412/0x630 [ 906.062517][T12329] dentry_kill+0xb8/0x290 [ 906.066888][T12329] ? dput+0x3b/0x1e0 [ 906.070817][T12329] dput+0xfe/0x1e0 [ 906.074574][T12329] __fput+0x5b2/0x940 [ 906.078588][T12329] task_work_run+0x1d4/0x260 [ 906.083214][T12329] ? task_work_cancel+0x220/0x220 [ 906.088275][T12329] do_exit+0x986/0x2530 [ 906.092464][T12329] ? nfs_stat_to_errno+0x170/0x170 [ 906.097611][T12329] ? put_task_struct+0xc0/0xc0 [ 906.102413][T12329] ? lock_chain_count+0x20/0x20 [ 906.107317][T12329] do_group_exit+0x22d/0x2f0 [ 906.111949][T12329] ? lockdep_hardirqs_on+0x98/0x150 [ 906.117181][T12329] get_signal+0x12a6/0x1390 [ 906.121726][T12329] arch_do_signal_or_restart+0xc2/0x7b0 [ 906.127315][T12329] ? get_sigframe_size+0x20/0x20 [ 906.132311][T12329] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 906.138327][T12329] ? exit_to_user_mode_loop+0x3b/0x110 [ 906.143824][T12329] exit_to_user_mode_loop+0x70/0x110 [ 906.149150][T12329] exit_to_user_mode_prepare+0xee/0x180 [ 906.154730][T12329] irqentry_exit_to_user_mode+0x9/0x30 [ 906.160224][T12329] exc_page_fault+0x8c/0x100 [ 906.164854][T12329] asm_exc_page_fault+0x26/0x30 [ 906.169737][T12329] RIP: 0033:0x7f269519e0e1 [ 906.174183][T12329] Code: Unable to access opcode bytes at 0x7f269519e0b7. [ 906.181217][T12329] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 906.187318][T12329] RAX: 0000000000000000 RBX: 00007f2695426090 RCX: 00007f269519e0d9 [ 906.195317][T12329] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 906.203316][T12329] RBP: 00007f2695235024 R08: 0000000000000000 R09: 0000000000000000 [ 906.211351][T12329] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 906.219370][T12329] R13: 00007f2695426128 R14: 00007f2695426090 R15: 00007fff908f2418 [ 906.227395][T12329] [ 906.231151][T12329] Kernel Offset: disabled [ 906.235506][T12329] Rebooting in 86400 seconds..