last executing test programs: 5.991578873s ago: executing program 2 (id=213): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0xfffffffe, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x2, 0x1, 0x9, 0x101, 0x8}]}]}, 0x1ac}}, 0x0) 5.830481697s ago: executing program 2 (id=214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.570982173s ago: executing program 2 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b9ff03076804268c989e14f088a847", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 2.41732939s ago: executing program 2 (id=222): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @loopback}, 0x1ed, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.271565374s ago: executing program 2 (id=224): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) 2.241829535s ago: executing program 1 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) 2.100749968s ago: executing program 1 (id=228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.987561531s ago: executing program 2 (id=229): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f4000040961b110000000000000109022400010000000109040008020300030009210400000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.916512403s ago: executing program 1 (id=230): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.59829103s ago: executing program 1 (id=232): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72be, 0x40, 0x2, 0x310}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x8, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x400, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xc94, 0x0, 0x0}}, 0x0) 1.469872594s ago: executing program 1 (id=233): setuid(0xee01) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) pidfd_getfd(r0, r0, 0x0) 1.468172154s ago: executing program 0 (id=242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) 1.411997385s ago: executing program 3 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 1.315842897s ago: executing program 0 (id=235): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4a23, 0x42003, @loopback, 0x3cc}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x2156, 0x4) sendfile(r0, r1, 0x0, 0xffffffff) 1.20937383s ago: executing program 0 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = io_uring_setup(0x6005, &(0x7f0000000180)={0x0, 0xb700, 0x800, 0x2, 0x24c}) close_range(r0, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5']) 1.167998981s ago: executing program 3 (id=238): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000008dff"}) 1.004313835s ago: executing program 0 (id=239): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0x2402}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) 1.004176095s ago: executing program 3 (id=240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "0f3406ec00000000000092f94413582b", "00001000", "4e6703000000ac2f"}, 0x28) 517.273357ms ago: executing program 3 (id=241): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x81, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x1, 0x1, 0xffffffff, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @can={{0x4}, 0x3, 0x3, 0x0, 0x0, "038f03b06876073f"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x8050) 345.141971ms ago: executing program 3 (id=243): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x0, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72be, 0x40, 0x2, 0x310}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x8, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7a, 0x400, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r8, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xc94, 0x0, 0x0}}, 0x0) 343.674641ms ago: executing program 1 (id=244): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 238.989704ms ago: executing program 3 (id=245): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) close_range(r1, r1, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 64.385588ms ago: executing program 0 (id=246): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000000)=""/31, 0x1f) socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r0, &(0x7f0000000300)=""/266, 0x10a) 0s ago: executing program 0 (id=247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x627, 0x10102, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080)=0x100, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 80.710035][ T5766] cgroup: Unknown subsys name 'net' [ 80.849640][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.524156][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.269599][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.281983][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.290510][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.298766][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.306720][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.314203][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.323564][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.332213][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.351668][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.400203][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.412373][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.419915][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.422089][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.435799][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.466308][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.473574][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.488044][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.488147][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.504168][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.522640][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.530524][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.539166][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.548120][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.556322][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.041892][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 85.092021][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 85.123214][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 85.249672][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.307023][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.315007][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.322664][ T5778] bridge_slave_0: entered allmulticast mode [ 85.330359][ T5778] bridge_slave_0: entered promiscuous mode [ 85.385026][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.392387][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.399627][ T5778] bridge_slave_1: entered allmulticast mode [ 85.406907][ T5778] bridge_slave_1: entered promiscuous mode [ 85.466229][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.473795][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.481365][ T5777] bridge_slave_0: entered allmulticast mode [ 85.488854][ T5777] bridge_slave_0: entered promiscuous mode [ 85.509693][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.516918][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.524419][ T5780] bridge_slave_0: entered allmulticast mode [ 85.534805][ T5780] bridge_slave_0: entered promiscuous mode [ 85.545349][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.555300][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563038][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.570317][ T5777] bridge_slave_1: entered allmulticast mode [ 85.578078][ T5777] bridge_slave_1: entered promiscuous mode [ 85.596713][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.604097][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.611640][ T5780] bridge_slave_1: entered allmulticast mode [ 85.619178][ T5780] bridge_slave_1: entered promiscuous mode [ 85.628434][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.718181][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.730087][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.739717][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747378][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.755117][ T5781] bridge_slave_0: entered allmulticast mode [ 85.762795][ T5781] bridge_slave_0: entered promiscuous mode [ 85.775125][ T5778] team0: Port device team_slave_0 added [ 85.783896][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.807064][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.829027][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.836526][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.844270][ T5781] bridge_slave_1: entered allmulticast mode [ 85.851670][ T5781] bridge_slave_1: entered promiscuous mode [ 85.861083][ T5778] team0: Port device team_slave_1 added [ 85.935777][ T5780] team0: Port device team_slave_0 added [ 85.946683][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.953759][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.980151][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.995222][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.002419][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.028585][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.043998][ T5777] team0: Port device team_slave_0 added [ 86.054513][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.073956][ T5780] team0: Port device team_slave_1 added [ 86.103148][ T5777] team0: Port device team_slave_1 added [ 86.112076][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.145655][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.152724][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.178788][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.243080][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.250084][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.276306][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.291808][ T5781] team0: Port device team_slave_0 added [ 86.298582][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.305734][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.332464][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.365324][ T5781] team0: Port device team_slave_1 added [ 86.372201][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.379236][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.405877][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.423967][ T5778] hsr_slave_0: entered promiscuous mode [ 86.430749][ T5778] hsr_slave_1: entered promiscuous mode [ 86.496248][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.506000][ T51] Bluetooth: hci1: command tx timeout [ 86.511511][ T5795] Bluetooth: hci2: command tx timeout [ 86.517249][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.546100][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.568533][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.578444][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.604870][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.643668][ T5777] hsr_slave_0: entered promiscuous mode [ 86.650207][ T5777] hsr_slave_1: entered promiscuous mode [ 86.657091][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.665714][ T51] Bluetooth: hci3: command tx timeout [ 86.671252][ T5795] Bluetooth: hci0: command tx timeout [ 86.677269][ T5777] Cannot create hsr debugfs directory [ 86.727601][ T5780] hsr_slave_0: entered promiscuous mode [ 86.734940][ T5780] hsr_slave_1: entered promiscuous mode [ 86.741444][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.749071][ T5780] Cannot create hsr debugfs directory [ 86.844067][ T5781] hsr_slave_0: entered promiscuous mode [ 86.850643][ T5781] hsr_slave_1: entered promiscuous mode [ 86.857811][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.865848][ T5781] Cannot create hsr debugfs directory [ 87.436604][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.465109][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.496036][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.522110][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.579492][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.589956][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.609914][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.624428][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.706319][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.727319][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.740009][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.765459][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.850069][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.862520][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.877834][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.906208][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.037754][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.080094][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.097214][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.154111][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.164831][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.181577][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.209733][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.217176][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.234564][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.241790][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.268841][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.276075][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.289458][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.296764][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.335835][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.343054][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.358789][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.366024][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.392664][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.477228][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.489065][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.534488][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.575858][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.587668][ T51] Bluetooth: hci1: command tx timeout [ 88.593293][ T5795] Bluetooth: hci2: command tx timeout [ 88.646255][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.689804][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.697074][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.745860][ T51] Bluetooth: hci0: command tx timeout [ 88.746461][ T5795] Bluetooth: hci3: command tx timeout [ 88.766608][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.773857][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.085776][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.206033][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.254892][ T5781] veth0_vlan: entered promiscuous mode [ 89.294725][ T5781] veth1_vlan: entered promiscuous mode [ 89.371169][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.403653][ T5778] veth0_vlan: entered promiscuous mode [ 89.439033][ T5781] veth0_macvtap: entered promiscuous mode [ 89.454512][ T5781] veth1_macvtap: entered promiscuous mode [ 89.484520][ T5778] veth1_vlan: entered promiscuous mode [ 89.519800][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.569401][ T5777] veth0_vlan: entered promiscuous mode [ 89.585560][ T5777] veth1_vlan: entered promiscuous mode [ 89.605929][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.618486][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.663629][ T5778] veth0_macvtap: entered promiscuous mode [ 89.686546][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.696218][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.711126][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.719921][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742975][ T5778] veth1_macvtap: entered promiscuous mode [ 89.761216][ T5780] veth0_vlan: entered promiscuous mode [ 89.816647][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.827961][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.842769][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.855551][ T5777] veth0_macvtap: entered promiscuous mode [ 89.864746][ T5780] veth1_vlan: entered promiscuous mode [ 89.891398][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.903803][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.916723][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.929230][ T5777] veth1_macvtap: entered promiscuous mode [ 89.949485][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958479][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968436][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978139][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.030720][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.044549][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.056115][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.066720][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.079386][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.124235][ T5780] veth0_macvtap: entered promiscuous mode [ 90.149216][ T5780] veth1_macvtap: entered promiscuous mode [ 90.183336][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.201435][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.212110][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.223069][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.238133][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.257471][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.269006][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.334305][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.352362][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.365635][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.369820][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.384063][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.393083][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.405774][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.416863][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.429739][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.442085][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.452256][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.462797][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.476505][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.535791][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.548291][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.558738][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.569297][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.579596][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.590443][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.603276][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.623714][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.638994][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.661183][ T5795] Bluetooth: hci1: command tx timeout [ 90.661196][ T51] Bluetooth: hci2: command tx timeout [ 90.676250][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.686649][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700345][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709374][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756787][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.795985][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.826821][ T5795] Bluetooth: hci3: command tx timeout [ 90.827973][ T51] Bluetooth: hci0: command tx timeout [ 90.917753][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.940218][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.070796][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.099743][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.176965][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.197615][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.251102][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.259703][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.291858][ T5821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.306730][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.535437][ T5821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.550435][ T5821] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 91.560717][ T5821] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 91.570887][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.607551][ T5821] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 91.628101][ T5821] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 91.762007][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.831784][ T2178] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.958326][ T5820] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.969064][ T5820] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 91.979421][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 91.992897][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 92.004853][ T5820] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 92.014873][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.017078][ T5845] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 92.031022][ T2178] usb 2-1: Using ep0 maxpacket: 16 [ 92.040684][ T5845] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 92.048527][ T174] cfg80211: failed to load regulatory.db [ 92.059911][ T5854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.060764][ T5845] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 92.069640][ T5854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.082830][ T5854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.093922][ T5820] pl2303 3-1:1.0: pl2303 converter detected [ 92.100734][ T2178] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.111937][ T2178] usb 2-1: config 0 has no interface number 0 [ 92.125287][ T5820] usb 3-1: pl2303 converter now attached to ttyUSB1 [ 92.133045][ T2178] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.153982][ T2178] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.183738][ T2178] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 92.193619][ T2178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.206189][ T2178] usb 2-1: config 0 descriptor?? [ 92.208548][ T5845] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 92.282231][ T23] usb 1-1: USB disconnect, device number 2 [ 92.328625][ T23] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 92.346396][ T5820] usb 3-1: USB disconnect, device number 2 [ 92.360164][ T23] spcp8x5 1-1:1.0: device disconnected [ 92.376127][ T5820] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 92.387172][ T5820] pl2303 3-1:1.0: device disconnected [ 92.741612][ T5788] Bluetooth: hci1: command tx timeout [ 92.747138][ T5795] Bluetooth: hci2: command tx timeout [ 92.876049][ T2178] uclogic 0003:28BD:0071.0001: pen parameters not found [ 92.889295][ T5860] syz.0.6[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.894786][ T2178] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 92.906074][ T5795] Bluetooth: hci0: command tx timeout [ 92.912290][ T5795] Bluetooth: hci3: command tx timeout [ 92.922417][ T5860] loop0: detected capacity change from 0 to 128 [ 93.127426][ T2178] usb 2-1: USB disconnect, device number 2 [ 93.501336][ T5821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.690704][ T5821] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.706308][ T5821] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.717403][ T5821] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.732297][ T5821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.739034][ T5821] usb 1-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 93.748606][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.767616][ T5821] usb 1-1: config 0 descriptor?? [ 93.847326][ T5875] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 94.182599][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 94.194743][ T5873] loop2: detected capacity change from 0 to 32768 [ 94.224977][ T5879] loop1: detected capacity change from 0 to 2048 [ 94.273259][ T5873] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (5873) [ 94.284053][ T5821] input: HID 1b96:0011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B96:0011.0002/input/input5 [ 94.335369][ T5879] loop1: p1 p2 p3 p4 [ 94.376757][ T5879] loop1: p1 start 3405774849 is beyond EOD, truncated [ 94.401546][ T5873] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.418403][ T5879] loop1: p2 start 53543428 is beyond EOD, truncated [ 94.452476][ T5879] loop1: p3 start 4259840 is beyond EOD, truncated [ 94.461719][ T5873] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 94.523175][ T5873] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.555847][ T5821] ntrig 0003:1B96:0011.0002: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.0-1/input0 [ 94.563143][ T5873] BTRFS info (device loop2): use zstd compression, level 3 [ 94.582374][ T5821] usb 1-1: USB disconnect, device number 3 [ 94.592776][ T5873] BTRFS info (device loop2): using free space tree [ 94.771003][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.801024][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.830110][ T5873] BTRFS info (device loop2): enabling ssd optimizations [ 94.843665][ T5873] BTRFS info (device loop2): auto enabling async discard [ 94.990959][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 94.991896][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 95.007014][ T5903] fido_id[5903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 95.023478][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.036134][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 95.045802][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.064274][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18112, setting to 1024 [ 95.076796][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.097771][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.112351][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.124597][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.150245][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.160925][ T8] usb 2-1: config 0 descriptor?? [ 95.165956][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.207392][ T5882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.253074][ T8] hub 2-1:0.0: USB hub found [ 95.417112][ T28] usb 4-1: GET_CAPABILITIES returned 0 [ 95.442121][ T28] usbtmc 4-1:16.0: can't read capabilities [ 95.454724][ T5780] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 95.533782][ T8] hub 2-1:0.0: 26 ports detected [ 95.555143][ T8] hub 2-1:0.0: insufficient power available to use all downstream ports [ 95.661763][ T51] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 95.734567][ T8] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 95.744447][ T8] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 95.787514][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 95.798429][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 95.822308][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 95.838270][ T28] usb 4-1: USB disconnect, device number 2 [ 95.874734][ T8] usb 2-1: USB disconnect, device number 3 [ 96.131022][ T2178] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.329105][ T2178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.345106][ T2178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.355595][ T2178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.376029][ T2178] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.387655][ T2178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.417749][ T2178] usb 3-1: config 0 descriptor?? [ 96.863825][ T2178] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 96.889546][ T2178] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 96.936274][ T2178] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.194272][ T2178] usb 3-1: USB disconnect, device number 3 [ 97.459450][ T5930] loop0: detected capacity change from 0 to 1024 [ 97.506094][ T5928] loop3: detected capacity change from 0 to 8192 [ 97.519891][ T5928] ======================================================= [ 97.519891][ T5928] WARNING: The mand mount option has been deprecated and [ 97.519891][ T5928] and is ignored by this kernel. Remove the mand [ 97.519891][ T5928] option from the mount to silence this warning. [ 97.519891][ T5928] ======================================================= [ 97.557558][ T5930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.598852][ T5928] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.630974][ T5928] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 97.691260][ T5928] REISERFS (device loop3): using journaled data mode [ 97.698273][ T5928] reiserfs: using flush barriers [ 97.724115][ T5928] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.759020][ T5928] REISERFS (device loop3): checking transaction log (loop3) [ 97.782832][ T5928] REISERFS (device loop3): Using tea hash to sort names [ 97.804038][ T5928] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.844043][ T5928] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 98.026981][ T5928] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 98.062067][ T5928] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 98.253670][ T5947] netlink: 'syz.0.31': attribute type 21 has an invalid length. [ 98.264271][ T5947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.31'. [ 98.273717][ T5947] netlink: 3 bytes leftover after parsing attributes in process `syz.0.31'. [ 98.512038][ T5960] loop1: detected capacity change from 0 to 2048 [ 98.572202][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.631829][ T5960] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 98.661809][ T5960] EXT4-fs (loop1): Remounting filesystem read-only [ 98.761638][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.361281][ T2178] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.581919][ T2178] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 99.602176][ T2178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.704543][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.714372][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 99.723595][ T51] Bluetooth: hci3: hardware error 0x00 [ 99.747573][ T5991] loop2: detected capacity change from 0 to 1024 [ 99.828873][ T5994] x86/PAT: syz.3.50:5994 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 99.981995][ T2178] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 02:32:c2:1d:25:48 [ 100.199054][ T6006] loop3: detected capacity change from 0 to 512 [ 100.266976][ T28] usb 1-1: USB disconnect, device number 4 [ 100.284528][ T28] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 100.303928][ T6006] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.53: bad orphan inode 11862016 [ 100.403548][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.430998][ T6006] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.449048][ T6012] loop2: detected capacity change from 0 to 2048 [ 100.617055][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.841143][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.041183][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 101.048853][ T5886] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.077445][ T5886] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.102333][ T5886] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.138103][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.163014][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=073a, bcdDevice= 0.00 [ 101.182712][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.216727][ T5886] usb 3-1: config 0 descriptor?? [ 101.628865][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.682956][ T5886] hid-generic 0003:045E:073A.0004: unknown main item tag 0x2 [ 101.690462][ T5886] hid-generic 0003:045E:073A.0004: unbalanced collection at end of report description [ 101.710571][ T5886] hid-generic: probe of 0003:045E:073A.0004 failed with error -22 [ 101.782453][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 101.946769][ T5886] usb 3-1: USB disconnect, device number 4 [ 102.152505][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 102.442514][ T6069] loop3: detected capacity change from 0 to 32768 [ 102.488624][ T6069] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.569193][ T6069] XFS (loop3): Ending clean mount [ 102.585600][ T28] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.597089][ T6069] XFS (loop3): Quotacheck needed: Please wait. [ 102.725452][ T6069] XFS (loop3): Quotacheck: Done. [ 102.771038][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 102.784749][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.792255][ T2178] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.817603][ T27] audit: type=1800 audit(1791210757.466:2): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 102.840898][ T28] usb 2-1: config 1 has an invalid interface number: 21 but max is 0 [ 102.849068][ T28] usb 2-1: config 1 has no interface number 0 [ 102.880401][ T28] usb 2-1: config 1 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 102.896313][ T28] usb 2-1: config 1 interface 21 has no altsetting 0 [ 102.918742][ T28] usb 2-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=17.da [ 102.930483][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.944291][ T28] usb 2-1: Product: syz [ 102.948547][ T28] usb 2-1: Manufacturer: syz [ 102.959275][ T28] usb 2-1: SerialNumber: syz [ 102.959943][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.006267][ T2178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.025805][ T2178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.037664][ T2178] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 103.047130][ T2178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.083511][ T2178] usb 1-1: config 0 descriptor?? [ 103.251677][ T28] smsc95xx v2.0.0 [ 103.255504][ T28] smsc95xx 2-1:1.21 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 103.273446][ T28] smsc95xx: probe of 2-1:1.21 failed with error -22 [ 103.308755][ T28] usb 2-1: USB disconnect, device number 4 [ 103.567406][ T2178] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 103.590912][ T2178] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 103.599258][ T2178] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 103.611152][ T2178] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 103.618672][ T2178] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 103.633349][ T2178] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 103.757046][ T2178] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0 [ 103.781265][ T2178] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 103.811130][ T2178] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 103.831363][ T2178] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 103.849653][ T2178] playstation: probe of 0003:054C:0DF2.0005 failed with error -22 [ 104.039819][ T2178] usb 1-1: USB disconnect, device number 5 [ 104.505945][ T6127] jffs2: notice: (6127) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.631546][ T2178] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.745529][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.811908][ T5821] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.831034][ T2178] usb 2-1: Using ep0 maxpacket: 8 [ 104.844338][ T2178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.858217][ T2178] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.873295][ T2178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.891884][ T2178] usb 2-1: config 0 descriptor?? [ 104.930975][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 104.943253][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.953585][ T8] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 104.962855][ T8] usb 4-1: config 9 has no interface number 0 [ 104.967888][ T6137] loop0: detected capacity change from 0 to 1024 [ 104.969159][ T8] usb 4-1: config 9 interface 57 has no altsetting 0 [ 104.996326][ T8] usb 4-1: string descriptor 0 read error: -22 [ 105.007750][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 105.013768][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 105.030224][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.062052][ T5821] usb 3-1: config 0 has no interfaces? [ 105.073148][ T5821] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 105.085707][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.094267][ T5821] usb 3-1: Product: syz [ 105.099905][ T5821] usb 3-1: Manufacturer: syz [ 105.107962][ T5821] usb 3-1: SerialNumber: syz [ 105.121819][ T5821] usb 3-1: config 0 descriptor?? [ 105.159981][ T2178] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.266187][ T6138] hfsplus: xattr searching failed [ 105.407166][ T5886] usb 3-1: USB disconnect, device number 5 [ 105.451502][ T5821] usb 2-1: USB disconnect, device number 5 [ 105.451635][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 105.845299][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.016656][ T6144] loop2: detected capacity change from 0 to 128 [ 106.034438][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 106.071016][ T28] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 106.087266][ T28] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 106.099200][ T28] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 106.136814][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.146889][ T6144] syz.2.93 (6144) used greatest stack depth: 20848 bytes left [ 106.161079][ T28] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 106.180461][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.188300][ T8] video4linux radio48: keene_cmd_set failed (-71) [ 106.188576][ T8] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 106.214189][ T28] usb 1-1: config 0 descriptor?? [ 106.215869][ T8] usb 4-1: USB disconnect, device number 3 [ 106.666777][ T28] input: HID 0925:8866 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0925:8866.0006/input/input7 [ 106.799663][ T28] smartjoyplus 0003:0925:8866.0006: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 106.820424][ T6147] loop1: detected capacity change from 0 to 32768 [ 106.835494][ T28] smartjoyplus 0003:0925:8866.0006: no output reports found [ 106.862237][ T6147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.95 (6147) [ 106.901257][ T28] usb 1-1: USB disconnect, device number 6 [ 106.952918][ T6147] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.982628][ T6147] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 107.023741][ T6147] BTRFS info (device loop1): using free space tree [ 107.074500][ T6156] fido_id[6156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 107.194142][ T6147] BTRFS info (device loop1): enabling ssd optimizations [ 107.227050][ T6147] BTRFS info (device loop1): auto enabling async discard [ 107.343406][ T27] audit: type=1800 audit(1791210761.996:3): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.95" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 107.532524][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.579915][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 107.682735][ T6182] loop3: detected capacity change from 0 to 512 [ 107.713210][ T5886] kernel read not supported for file /kmsg (pid: 5886 comm: kworker/1:4) [ 107.748201][ T6182] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349) [ 107.800476][ T6182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.858279][ T5779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5779) [ 108.072841][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.111258][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.229557][ T6197] loop0: detected capacity change from 0 to 128 [ 108.297115][ T6197] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.345179][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.384467][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.415853][ T6197] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.476578][ T28] usb 3-1: config 1 has no interface number 0 [ 108.497526][ T28] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 108.532036][ T28] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 108.560063][ T6197] process 'syz.0.110' launched './file0' with NULL argv: empty string added [ 108.581105][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.600553][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.609455][ T28] usb 3-1: Product: syz [ 108.621016][ T28] usb 3-1: Manufacturer: syz [ 108.629670][ T28] usb 3-1: SerialNumber: syz [ 108.759669][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.913949][ T6210] loop3: detected capacity change from 0 to 1024 [ 109.044988][ T6213] hfsplus: xattr searching failed [ 109.181212][ T6210] hfsplus: xattr searching failed [ 109.338604][ T6215] jffs2: notice: (6215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.470369][ T28] cdc_ncm 3-1:1.1: bind() failure [ 109.661079][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.679797][ T9] usb 3-1: USB disconnect, device number 6 [ 109.798248][ T6220] loop0: detected capacity change from 0 to 128 [ 109.814052][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.861153][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 109.875084][ T5886] usb 4-1: config 0 has no interfaces? [ 109.887766][ T5886] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 109.897679][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.906241][ T5886] usb 4-1: Product: syz [ 109.910569][ T5886] usb 4-1: Manufacturer: syz [ 109.916193][ T5886] usb 4-1: SerialNumber: syz [ 109.924399][ T5886] usb 4-1: config 0 descriptor?? [ 110.011085][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 110.019086][ T28] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 110.031634][ T28] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 110.045467][ T28] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 110.058880][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.065883][ T28] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 110.076505][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.087519][ T28] usb 2-1: config 0 descriptor?? [ 110.174452][ T2178] usb 4-1: USB disconnect, device number 4 [ 110.251308][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.441000][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 110.449377][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.461462][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.470565][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.482464][ T9] usb 1-1: config 0 descriptor?? [ 110.517849][ T28] input: HID 0925:8866 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0925:8866.0007/input/input8 [ 110.621886][ T28] smartjoyplus 0003:0925:8866.0007: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 110.634641][ T28] smartjoyplus 0003:0925:8866.0007: no output reports found [ 110.715191][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.812524][ T28] usb 2-1: USB disconnect, device number 6 [ 110.872812][ T6228] Zero length message leads to an empty skb [ 110.938247][ T5886] usb 1-1: USB disconnect, device number 7 [ 110.944222][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 111.129751][ T6237] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.132'. [ 111.231467][ T6240] loop2: detected capacity change from 0 to 1024 [ 111.241345][ T6242] loop3: detected capacity change from 0 to 256 [ 111.434047][ T6243] hfsplus: xattr searching failed [ 111.508170][ T6246] loop3: detected capacity change from 0 to 128 [ 111.570410][ T6240] hfsplus: xattr searching failed [ 111.723588][ T6251] jffs2: notice: (6251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.061491][ T2178] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.114674][ T5886] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.240993][ T2178] usb 2-1: Using ep0 maxpacket: 16 [ 112.250161][ T2178] usb 2-1: config 0 has no interfaces? [ 112.258233][ T2178] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 112.267746][ T2178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.275946][ T2178] usb 2-1: Product: syz [ 112.280211][ T2178] usb 2-1: Manufacturer: syz [ 112.284979][ T2178] usb 2-1: SerialNumber: syz [ 112.294753][ T2178] usb 2-1: config 0 descriptor?? [ 112.301614][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 112.313105][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.325968][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.338727][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.356477][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.369991][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.379164][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.539271][ T2178] usb 2-1: USB disconnect, device number 7 [ 112.599134][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 112.604931][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 112.804229][ T2178] usb 1-1: USB disconnect, device number 8 [ 113.173928][ T6272] loop1: detected capacity change from 0 to 128 [ 113.429355][ T6275] loop1: detected capacity change from 0 to 1024 [ 113.576849][ T6280] hfsplus: xattr searching failed [ 113.596587][ T6281] loop2: detected capacity change from 0 to 64 [ 113.647744][ T6280] hfsplus: xattr searching failed [ 114.430992][ T8] psmouse serio2: Failed to reset mouse on : -5 [ 114.471080][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.612895][ T6292] jffs2: notice: (6292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.691366][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 114.703957][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.714194][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.728028][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.737839][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.748103][ T23] usb 4-1: Product: syz [ 114.758100][ T23] usb 4-1: Manufacturer: syz [ 114.763797][ T23] usb 4-1: SerialNumber: syz [ 114.921160][ T5821] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.692627][ T5795] Bluetooth: hci4: sending frame failed (-49) [ 115.704040][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 115.950812][ C1] sched: RT throttling activated [ 116.007309][ T6301] loop2: detected capacity change from 0 to 131072 [ 116.020711][ T23] usb 4-1: 0:2 : does not exist [ 116.031471][ T6301] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 116.038549][ T6301] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.051485][ T6301] F2FS-fs (loop2): invalid crc value [ 116.057854][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 116.064855][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 116.076385][ T5821] usb 1-1: config 0 has no interfaces? [ 116.088477][ T5821] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 116.100360][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.114222][ T5821] usb 1-1: Product: syz [ 116.118883][ T5821] usb 1-1: Manufacturer: syz [ 116.126720][ T6301] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.193334][ T5821] usb 1-1: SerialNumber: syz [ 116.210985][ T5821] usb 1-1: config 0 descriptor?? [ 116.219115][ T6301] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.226612][ T6301] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 116.255774][ T23] usb 4-1: USB disconnect, device number 5 [ 116.287116][ T27] audit: type=1800 audit(1791210770.936:4): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 116.448186][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.496861][ T5787] usb 1-1: USB disconnect, device number 9 [ 116.910050][ T6313] loop3: detected capacity change from 0 to 256 [ 116.924342][ T6313] exfat: Deprecated parameter 'utf8' [ 116.941571][ T6313] exfat: Deprecated parameter 'utf8' [ 116.980165][ T6313] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 117.298554][ T6319] CIFS: Attempting to mount //127.0.0.1/share [ 117.655544][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 117.681646][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 117.690753][ T6332] netlink: 'syz.0.160': attribute type 7 has an invalid length. [ 117.699111][ T6332] netlink: 'syz.0.160': attribute type 8 has an invalid length. [ 117.707295][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 117.726449][ T6332] erspan0: entered promiscuous mode [ 117.739599][ T6332] gretap0: entered promiscuous mode [ 117.747488][ T6332] erspan0: left promiscuous mode [ 117.755048][ T6332] gretap0: left promiscuous mode [ 118.146369][ T6319] CIFS: VFS: cifs_mount failed w/return code = -512 [ 118.172647][ T6343] jffs2: notice: (6343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.201035][ T8] misc userio: Buffer overflowed, userio client isn't keeping up [ 118.276302][ T6349] sctp: [Deprecated]: syz.2.167 (pid 6349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.276302][ T6349] Use struct sctp_sack_info instead [ 118.378662][ T6351] loop2: detected capacity change from 0 to 1764 [ 118.428770][ T6351] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 118.501014][ T5787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 118.537996][ T6355] capability: warning: `syz.3.171' uses 32-bit capabilities (legacy support in use) [ 118.650717][ T6361] FAULT_INJECTION: forcing a failure. [ 118.650717][ T6361] name failslab, interval 1, probability 0, space 0, times 1 [ 118.664392][ T6361] CPU: 0 PID: 6361 Comm: syz.2.174 Not tainted syzkaller #0 [ 118.671751][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.681887][ T6361] Call Trace: [ 118.685213][ T6361] [ 118.688181][ T6361] dump_stack_lvl+0x18c/0x250 [ 118.692909][ T6361] ? show_regs_print_info+0x20/0x20 [ 118.698329][ T6361] ? load_image+0x420/0x420 [ 118.702873][ T6361] ? __might_sleep+0xe0/0xe0 [ 118.707506][ T6361] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.712570][ T6361] should_fail_ex+0x394/0x4c0 [ 118.717294][ T6361] should_failslab+0x9/0x20 [ 118.721842][ T6361] slab_pre_alloc_hook+0x59/0x300 [ 118.726944][ T6361] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.732027][ T6361] ? security_prepare_creds+0x4b/0x130 [ 118.737533][ T6361] ? security_prepare_creds+0x4b/0x130 [ 118.743048][ T6361] __kmem_cache_alloc_node+0x53/0x250 [ 118.748469][ T6361] ? security_prepare_creds+0x4b/0x130 [ 118.753974][ T6361] __kmalloc+0xa7/0x240 [ 118.758176][ T6361] security_prepare_creds+0x4b/0x130 [ 118.763503][ T6361] prepare_creds+0x427/0x5d0 [ 118.768154][ T6361] join_session_keyring+0x1b/0x440 [ 118.773306][ T6361] lookup_user_key+0x4e6/0x1140 [ 118.778194][ T6361] ? try_to_wake_up+0x6f5/0x10e0 [ 118.783169][ T6361] ? lookup_user_key_possessed+0x40/0x40 [ 118.788846][ T6361] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 118.794872][ T6361] ? futex_wake_mark+0x150/0x150 [ 118.799868][ T6361] keyctl_keyring_move+0x3d/0x110 [ 118.804937][ T6361] __se_sys_keyctl+0x84a/0xb50 [ 118.809735][ T6361] ? __x64_sys_keyctl+0xc0/0xc0 [ 118.814620][ T6361] ? do_futex+0x35d/0x3e0 [ 118.818989][ T6361] ? __ia32_sys_get_robust_list+0x110/0x110 [ 118.824921][ T6361] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.830942][ T6361] ? lock_chain_count+0x20/0x20 [ 118.835833][ T6361] ? lockdep_hardirqs_on+0x98/0x150 [ 118.841083][ T6361] ? __x64_sys_keyctl+0x20/0xc0 [ 118.845987][ T6361] do_syscall_64+0x55/0xb0 [ 118.850474][ T6361] ? clear_bhb_loop+0x40/0x90 [ 118.855181][ T6361] ? clear_bhb_loop+0x40/0x90 [ 118.859894][ T6361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.865845][ T6361] RIP: 0033:0x7fd83739e199 [ 118.870290][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.889933][ T6361] RSP: 002b:00007fd838211028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 118.898402][ T6361] RAX: ffffffffffffffda RBX: 00007fd837625fa0 RCX: 00007fd83739e199 [ 118.906497][ T6361] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 000000000000001e [ 118.914504][ T6361] RBP: 00007fd8374350b8 R08: 0000000000000000 R09: 0000000000000000 [ 118.922513][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.930529][ T6361] R13: 00007fd837626038 R14: 00007fd837625fa0 R15: 00007ffe7162b708 [ 118.938567][ T6361] [ 118.941646][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.005085][ T5787] usb 1-1: Using ep0 maxpacket: 16 [ 119.015455][ T5787] usb 1-1: config 0 has no interfaces? [ 119.028446][ T5787] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 119.050978][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.059060][ T5787] usb 1-1: Product: syz [ 119.073930][ T5787] usb 1-1: Manufacturer: syz [ 119.078616][ T5787] usb 1-1: SerialNumber: syz [ 119.107285][ T5787] usb 1-1: config 0 descriptor?? [ 119.134060][ T6365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.176'. [ 119.348732][ T5787] usb 1-1: USB disconnect, device number 10 [ 119.402562][ T8] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 119.464425][ T6376] 9pnet: p9_errstr2errno: server reported unknown error # [ 119.464425][ T6376] \,7͈^ [ 119.640903][ T8] psmouse serio2: Failed to enable mouse on [ 120.011113][ T6392] loop0: detected capacity change from 0 to 128 [ 120.072981][ T6392] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.140744][ T6392] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.167889][ T6380] loop3: detected capacity change from 0 to 32768 [ 120.296546][ T6380] (syz.3.183,6380,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.360518][ T6380] (syz.3.183,6380,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.411597][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.502402][ T6380] JBD2: Ignoring recovery information on journal [ 120.668843][ T6380] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.704290][ T6405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.767513][ T6407] loop2: detected capacity change from 0 to 512 [ 120.799374][ T6390] loop1: detected capacity change from 0 to 40427 [ 120.864361][ T6390] F2FS-fs (loop1): invalid crc value [ 120.906863][ T6390] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.019931][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 121.055980][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 121.084295][ T6390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.290055][ T5777] syz-executor: attempt to access beyond end of device [ 121.290055][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.340413][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 121.886031][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 122.179186][ T6428] netlink: 27 bytes leftover after parsing attributes in process `syz.2.201'. [ 122.343609][ T6434] jffs2: notice: (6434) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.651072][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.860993][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 122.886949][ T23] usb 4-1: config 0 has no interfaces? [ 122.895721][ T23] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 122.910861][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.919112][ T23] usb 4-1: Product: syz [ 122.930679][ T23] usb 4-1: Manufacturer: syz [ 122.954084][ T23] usb 4-1: SerialNumber: syz [ 122.971358][ T23] usb 4-1: config 0 descriptor?? [ 123.132144][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 123.159897][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.202234][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.225125][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 123.271286][ T23] usb 4-1: USB disconnect, device number 6 [ 123.438715][ T6471] loop0: detected capacity change from 0 to 256 [ 123.540954][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.724096][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 123.733621][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.747805][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.765902][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.775530][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.795394][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.823218][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.847359][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.864825][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.878548][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.889401][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.904101][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.916380][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.930752][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.947679][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.960716][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.974658][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.993168][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.009470][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.020408][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.035988][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.047196][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.056561][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.070674][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.086394][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.096116][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.110364][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.119253][ T8] usb 2-1: Product: syz [ 124.128621][ T8] usb 2-1: Manufacturer: syz [ 124.133493][ T8] usb 2-1: SerialNumber: syz [ 124.141916][ T8] usb 2-1: config 0 descriptor?? [ 124.166177][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 124.397247][ T8] usb 2-1: USB disconnect, device number 8 [ 124.406022][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 126.497462][ T6478] syzkaller1: entered allmulticast mode [ 126.565475][ T6482] Bluetooth: MGMT ver 1.22 [ 127.281009][ T2178] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.485069][ T2178] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.506534][ T2178] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.537123][ T2178] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.567785][ T2178] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.578058][ T2178] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 127.597519][ T2178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.618938][ T2178] usb 3-1: config 0 descriptor?? [ 127.815091][ T6524] warning: `syz.3.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.081923][ T2178] input: HID 1b96:0011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0011.0008/input/input10 [ 128.238899][ T2178] ntrig 0003:1B96:0011.0008: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 128.294440][ T2178] usb 3-1: USB disconnect, device number 7 [ 128.470484][ T6539] fido_id[6539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.656214][ T6544] loop1: detected capacity change from 0 to 4096 [ 128.860506][ T6544] EXT4-fs: Ignoring removed orlov option [ 128.870487][ T6544] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.897717][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.016082][ T6562] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.110120][ T6544] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 129.133965][ T6544] ------------[ cut here ]------------ [ 129.139894][ T6544] WARNING: CPU: 1 PID: 6544 at fs/ext4/ext4_jbd2.c:73 ext4_journal_check_start+0x1eb/0x250 [ 129.150457][ T6544] Modules linked in: [ 129.154893][ T6544] CPU: 1 PID: 6544 Comm: syz.1.244 Not tainted syzkaller #0 [ 129.162471][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.172641][ T6544] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 129.179046][ T6544] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 b8 59 ff 41 bf fb ff ff ff eb e5 e8 b5 b8 59 ff <0f> 0b eb d6 e8 ac b8 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 129.199754][ T6544] RSP: 0018:ffffc90019a07658 EFLAGS: 00010283 [ 129.206134][ T6544] RAX: ffffffff822dd7fb RBX: ffff88802d87c000 RCX: 0000000000080000 [ 129.214269][ T6544] RDX: ffffc9000ccf9000 RSI: 0000000000042a57 RDI: 0000000000042a58 [ 129.222381][ T6544] RBP: 0000000000000bfe R08: ffff88802d87e417 R09: 1ffff11005b0fc82 [ 129.230455][ T6544] R10: dffffc0000000000 R11: ffffed1005b0fc83 R12: dffffc0000000000 [ 129.238652][ T6544] R13: 1ffff11005b0f8c6 R14: ffff88802d87c630 R15: 0000000000000001 [ 129.246812][ T6544] FS: 00007eff9dd206c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 129.255962][ T6544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.262846][ T6544] CR2: 00007fcb96f0ae9c CR3: 000000005e480000 CR4: 00000000003506e0 [ 129.270996][ T6544] Call Trace: [ 129.274335][ T6544] [ 129.277323][ T6544] __ext4_journal_start_sb+0x147/0x560 [ 129.282925][ T6544] __ext4_new_inode+0x13c7/0x3aa0 [ 129.288978][ T6544] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 129.295123][ T6544] ? dquot_initialize+0x20/0x20 [ 129.300071][ T6544] ext4_mkdir+0x40b/0xc90 [ 129.304591][ T6544] ? ext4_symlink+0x940/0x940 [ 129.309368][ T6544] ? inode_permission+0xf3/0x480 [ 129.314823][ T6544] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 129.319918][ T6544] ? security_inode_mkdir+0xb7/0x100 [ 129.325467][ T6544] vfs_mkdir+0x2a5/0x470 [ 129.329871][ T6544] cachefiles_get_directory+0x231/0xa70 [ 129.335674][ T6544] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 129.342045][ T6544] ? vfs_statfs+0x195/0x2c0 [ 129.346615][ T6544] cachefiles_add_cache+0xa88/0xd50 [ 129.351942][ T6544] ? init_once+0x20/0x20 [ 129.356278][ T6544] ? __asan_memcpy+0x40/0x70 [ 129.360986][ T6544] ? kstrdup+0x65/0x80 [ 129.365167][ T6544] ? cachefiles_daemon_bind+0x272/0x3a0 [ 129.370864][ T6544] cachefiles_daemon_write+0x5f9/0x6b0 [ 129.376398][ T6544] ? cachefiles_daemon_read+0x450/0x450 [ 129.382246][ T6544] vfs_write+0x299/0x9a0 [ 129.387272][ T6544] ? file_end_write+0x250/0x250 [ 129.392743][ T6544] ? __fget_files+0x28/0x460 [ 129.397487][ T6544] ? __fget_files+0x3fc/0x460 [ 129.402303][ T6544] ? __fdget_pos+0x1d8/0x330 [ 129.406959][ T6544] ? ksys_write+0x74/0x260 [ 129.411479][ T6544] ksys_write+0x151/0x260 [ 129.415880][ T6544] ? __ia32_sys_read+0x90/0x90 [ 129.420714][ T6544] ? lockdep_hardirqs_on+0x98/0x150 [ 129.426091][ T6544] do_syscall_64+0x55/0xb0 [ 129.430574][ T6544] ? clear_bhb_loop+0x40/0x90 [ 129.435363][ T6544] ? clear_bhb_loop+0x40/0x90 [ 129.440105][ T6544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.446133][ T6544] RIP: 0033:0x7eff9cd9e199 [ 129.450612][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.470667][ T6544] RSP: 002b:00007eff9dd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.479200][ T6544] RAX: ffffffffffffffda RBX: 00007eff9d025fa0 RCX: 00007eff9cd9e199 [ 129.487303][ T6544] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 129.496354][ T6544] RBP: 00007eff9ce350b8 R08: 0000000000000000 R09: 0000000000000000 [ 129.504625][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.512801][ T6544] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fffa3404358 [ 129.521002][ T6544] [ 129.524082][ T6544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.531492][ T6544] CPU: 1 PID: 6544 Comm: syz.1.244 Not tainted syzkaller #0 [ 129.538844][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.549032][ T6544] Call Trace: [ 129.552346][ T6544] [ 129.555306][ T6544] dump_stack_lvl+0x18c/0x250 [ 129.560030][ T6544] ? show_regs_print_info+0x20/0x20 [ 129.565295][ T6544] ? load_image+0x420/0x420 [ 129.569873][ T6544] panic+0x2ca/0x720 [ 129.573810][ T6544] ? bpf_jit_dump+0xd0/0xd0 [ 129.578456][ T6544] __warn+0x2e0/0x470 [ 129.582480][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.588255][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.594031][ T6544] report_bug+0x2be/0x4f0 [ 129.598421][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.604185][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.609984][ T6544] ? ext4_journal_check_start+0x1ed/0x250 [ 129.615751][ T6544] handle_bug+0xcf/0x120 [ 129.620049][ T6544] exc_invalid_op+0x1a/0x50 [ 129.624580][ T6544] asm_exc_invalid_op+0x1a/0x20 [ 129.629471][ T6544] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 129.635840][ T6544] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 b8 59 ff 41 bf fb ff ff ff eb e5 e8 b5 b8 59 ff <0f> 0b eb d6 e8 ac b8 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 129.655500][ T6544] RSP: 0018:ffffc90019a07658 EFLAGS: 00010283 [ 129.661617][ T6544] RAX: ffffffff822dd7fb RBX: ffff88802d87c000 RCX: 0000000000080000 [ 129.669614][ T6544] RDX: ffffc9000ccf9000 RSI: 0000000000042a57 RDI: 0000000000042a58 [ 129.677612][ T6544] RBP: 0000000000000bfe R08: ffff88802d87e417 R09: 1ffff11005b0fc82 [ 129.685609][ T6544] R10: dffffc0000000000 R11: ffffed1005b0fc83 R12: dffffc0000000000 [ 129.693617][ T6544] R13: 1ffff11005b0f8c6 R14: ffff88802d87c630 R15: 0000000000000001 [ 129.701634][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.707407][ T6544] ? ext4_journal_check_start+0x1eb/0x250 [ 129.713167][ T6544] __ext4_journal_start_sb+0x147/0x560 [ 129.718675][ T6544] __ext4_new_inode+0x13c7/0x3aa0 [ 129.723757][ T6544] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 129.729517][ T6544] ? dquot_initialize+0x20/0x20 [ 129.734416][ T6544] ext4_mkdir+0x40b/0xc90 [ 129.738805][ T6544] ? ext4_symlink+0x940/0x940 [ 129.743607][ T6544] ? inode_permission+0xf3/0x480 [ 129.748574][ T6544] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 129.753629][ T6544] ? security_inode_mkdir+0xb7/0x100 [ 129.758953][ T6544] vfs_mkdir+0x2a5/0x470 [ 129.763233][ T6544] cachefiles_get_directory+0x231/0xa70 [ 129.768822][ T6544] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 129.775104][ T6544] ? vfs_statfs+0x195/0x2c0 [ 129.779665][ T6544] cachefiles_add_cache+0xa88/0xd50 [ 129.784909][ T6544] ? init_once+0x20/0x20 [ 129.789224][ T6544] ? __asan_memcpy+0x40/0x70 [ 129.793853][ T6544] ? kstrdup+0x65/0x80 [ 129.797984][ T6544] ? cachefiles_daemon_bind+0x272/0x3a0 [ 129.803568][ T6544] cachefiles_daemon_write+0x5f9/0x6b0 [ 129.809064][ T6544] ? cachefiles_daemon_read+0x450/0x450 [ 129.814650][ T6544] vfs_write+0x299/0x9a0 [ 129.818967][ T6544] ? file_end_write+0x250/0x250 [ 129.823856][ T6544] ? __fget_files+0x28/0x460 [ 129.828483][ T6544] ? __fget_files+0x3fc/0x460 [ 129.833208][ T6544] ? __fdget_pos+0x1d8/0x330 [ 129.837842][ T6544] ? ksys_write+0x74/0x260 [ 129.842295][ T6544] ksys_write+0x151/0x260 [ 129.846670][ T6544] ? __ia32_sys_read+0x90/0x90 [ 129.851485][ T6544] ? lockdep_hardirqs_on+0x98/0x150 [ 129.856883][ T6544] do_syscall_64+0x55/0xb0 [ 129.861346][ T6544] ? clear_bhb_loop+0x40/0x90 [ 129.866085][ T6544] ? clear_bhb_loop+0x40/0x90 [ 129.870795][ T6544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.876745][ T6544] RIP: 0033:0x7eff9cd9e199 [ 129.881238][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.900962][ T6544] RSP: 002b:00007eff9dd20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.909423][ T6544] RAX: ffffffffffffffda RBX: 00007eff9d025fa0 RCX: 00007eff9cd9e199 [ 129.917430][ T6544] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 129.925432][ T6544] RBP: 00007eff9ce350b8 R08: 0000000000000000 R09: 0000000000000000 [ 129.933432][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.941432][ T6544] R13: 00007eff9d026038 R14: 00007eff9d025fa0 R15: 00007fffa3404358 [ 129.949475][ T6544] [ 129.953106][ T6544] Kernel Offset: disabled [ 129.957531][ T6544] Rebooting in 86400 seconds..