last executing test programs: 3.329387002s ago: executing program 1 (id=402): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) fallocate(r0, 0x0, 0x0, 0x8800000) read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020) 2.068862724s ago: executing program 3 (id=404): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) preadv(r0, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/132, 0x84}, {0x0}, {0x0}], 0x5, 0x6, 0x9adf822) 1.827430343s ago: executing program 0 (id=405): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$cgroup_devices(r0, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) 1.817318824s ago: executing program 3 (id=406): close(0x4) 1.725927431s ago: executing program 0 (id=407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.668355146s ago: executing program 1 (id=409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.668309146s ago: executing program 3 (id=410): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/10, 0xa}, 0x7}], 0x1, 0x2001, 0x0) 1.560783874s ago: executing program 0 (id=411): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 1.479267921s ago: executing program 3 (id=412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x1, 0x13, 0xfffe) 1.451206773s ago: executing program 0 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000008c0), 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0xa, 0x4, {0x2, @usage, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc4, @struct={0x6, 0xce82}, 0x44000, 0x8, [0x2, 0x8, 0x6]}, {0xfffffffffffffffe, @usage=0x8000000000000001, 0x0, 0xee, 0x1, 0x1, 0x0, 0x0, 0x404, @struct={0x2, 0xf136}, 0x9, 0xa, [0x4, 0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x10001, @struct={0x3ff, 0x3ff}, 0x0, 0x7, 0x887fe, 0x20000000000006, 0x3ff, 0xffffffffffffffff, 0x48b, @struct={0x2f, 0x2}, 0x10000003, 0x4, [0x7ffffffc, 0x2000000000800004, 0x2000000, 0x3ff, 0x6, 0x5]}, {0x3, 0x0, 0x80000000000006}}) 1.402356317s ago: executing program 2 (id=414): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 1.254902829s ago: executing program 2 (id=415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29ce1f378ab3d790ec8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee8a1d4046930548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589eec11969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e279595ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73f01dd1f9033c8aea8734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada6b3e62557174b6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000580), &(0x7f0000000940)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 1.099800722s ago: executing program 1 (id=416): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 893.288438ms ago: executing program 2 (id=417): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$cgroup_devices(r0, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) 858.788481ms ago: executing program 1 (id=418): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) preadv(r0, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/132, 0x84}, {0x0}, {0x0}], 0x5, 0x6, 0x9adf822) 671.291626ms ago: executing program 0 (id=419): close(0x4) 613.427831ms ago: executing program 2 (id=420): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/10, 0xa}, 0x7}], 0x1, 0x2001, 0x0) 551.385716ms ago: executing program 1 (id=421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 444.316734ms ago: executing program 3 (id=422): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x3, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x0, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 397.379108ms ago: executing program 2 (id=423): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 344.896852ms ago: executing program 1 (id=424): syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x5b, 0x93, 0x14, 0x20, 0x2a39, 0x3f8c, 0xe895, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0xff, 0x1a, 0x4d}}]}}]}}, 0x0) 208.353743ms ago: executing program 0 (id=425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0) r3 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x9, 0x100) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc000000010902"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000000)=ANY=[]) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000500)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x0, 0x0, 0xc, "24c8c8c5c8a9e40da8eb767e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xad, 0xc1, 0x95, 0x8, 0x781, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xde, 0x6, 0xa4}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 207.598593ms ago: executing program 2 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 0s ago: executing program 3 (id=427): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x2, "bcc9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000bc0)={0x0, 0xab09b0e22bce7cc1}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 81.438366][ T5777] cgroup: Unknown subsys name 'net' [ 81.608921][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.344473][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.093032][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.102640][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.107575][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.111066][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.119399][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.126619][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.131923][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.140416][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.152374][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.153253][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.160386][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.174823][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.177208][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.184118][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.190562][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.199393][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.206549][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.214538][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.218862][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.224688][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.293828][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.302008][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.312661][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.321453][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.833309][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.988747][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 85.999313][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.009588][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 86.125353][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.132677][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.141160][ T5787] bridge_slave_0: entered allmulticast mode [ 86.148278][ T5787] bridge_slave_0: entered promiscuous mode [ 86.185763][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.193467][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.201074][ T5787] bridge_slave_1: entered allmulticast mode [ 86.208029][ T5787] bridge_slave_1: entered promiscuous mode [ 86.286495][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.294147][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.302265][ T5792] bridge_slave_0: entered allmulticast mode [ 86.309250][ T5792] bridge_slave_0: entered promiscuous mode [ 86.371692][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.378967][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.386492][ T5792] bridge_slave_1: entered allmulticast mode [ 86.394421][ T5792] bridge_slave_1: entered promiscuous mode [ 86.415369][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.426331][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.434068][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.442540][ T5788] bridge_slave_0: entered allmulticast mode [ 86.449527][ T5788] bridge_slave_0: entered promiscuous mode [ 86.457379][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.464844][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.472611][ T5794] bridge_slave_0: entered allmulticast mode [ 86.480700][ T5794] bridge_slave_0: entered promiscuous mode [ 86.505526][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.515022][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.522580][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.529766][ T5788] bridge_slave_1: entered allmulticast mode [ 86.537331][ T5788] bridge_slave_1: entered promiscuous mode [ 86.556594][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.564008][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.571718][ T5794] bridge_slave_1: entered allmulticast mode [ 86.578779][ T5794] bridge_slave_1: entered promiscuous mode [ 86.588374][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.650472][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.663556][ T5787] team0: Port device team_slave_0 added [ 86.672483][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.685743][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.721242][ T5787] team0: Port device team_slave_1 added [ 86.742336][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.755026][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.822262][ T5792] team0: Port device team_slave_0 added [ 86.843688][ T5788] team0: Port device team_slave_0 added [ 86.851056][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.858041][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.885017][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.911497][ T5792] team0: Port device team_slave_1 added [ 86.921373][ T5794] team0: Port device team_slave_0 added [ 86.930947][ T5788] team0: Port device team_slave_1 added [ 86.937582][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.944864][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.971014][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.003665][ T5794] team0: Port device team_slave_1 added [ 87.052558][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.059559][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.090462][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.134027][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.142243][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.169289][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.182518][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.189500][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.216617][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.229836][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.240046][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.269820][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.282998][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.290425][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.317152][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.361972][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.368980][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.395978][ T50] Bluetooth: hci0: command tx timeout [ 87.402358][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.407238][ T5790] Bluetooth: hci1: command tx timeout [ 87.420497][ T5790] Bluetooth: hci3: command tx timeout [ 87.424977][ T5795] Bluetooth: hci2: command tx timeout [ 87.526333][ T5787] hsr_slave_0: entered promiscuous mode [ 87.550601][ T5787] hsr_slave_1: entered promiscuous mode [ 87.567768][ T5788] hsr_slave_0: entered promiscuous mode [ 87.574627][ T5788] hsr_slave_1: entered promiscuous mode [ 87.586014][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.594666][ T5788] Cannot create hsr debugfs directory [ 87.653111][ T5792] hsr_slave_0: entered promiscuous mode [ 87.659819][ T5792] hsr_slave_1: entered promiscuous mode [ 87.669124][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.677712][ T5792] Cannot create hsr debugfs directory [ 87.705807][ T5794] hsr_slave_0: entered promiscuous mode [ 87.713547][ T5794] hsr_slave_1: entered promiscuous mode [ 87.721295][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.728901][ T5794] Cannot create hsr debugfs directory [ 88.190072][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.205345][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.218299][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.228330][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.314449][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.327611][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.343139][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.354176][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.444006][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.455726][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.466092][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.477434][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.564896][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.575721][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.588045][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.598631][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.654560][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.713426][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.734134][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.741494][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.812831][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.820089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.865629][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.896870][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.932347][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.939518][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.968837][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.976011][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.026876][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.042205][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.108312][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.149670][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.187398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.194644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.223169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.230442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.272965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.280210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.366910][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.374148][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.443537][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.450783][ T5795] Bluetooth: hci2: command tx timeout [ 89.456292][ T5103] Bluetooth: hci3: command tx timeout [ 89.456555][ T5790] Bluetooth: hci1: command tx timeout [ 89.464116][ T50] Bluetooth: hci0: command tx timeout [ 89.632225][ T5788] veth0_vlan: entered promiscuous mode [ 89.708154][ T5788] veth1_vlan: entered promiscuous mode [ 89.729298][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.836103][ T5788] veth0_macvtap: entered promiscuous mode [ 89.892758][ T5788] veth1_macvtap: entered promiscuous mode [ 89.908441][ T5787] veth0_vlan: entered promiscuous mode [ 89.939340][ T5787] veth1_vlan: entered promiscuous mode [ 89.959420][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.995048][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.014735][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.023923][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.033797][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.043442][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.059054][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.083610][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.239130][ T5787] veth0_macvtap: entered promiscuous mode [ 90.259347][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.277932][ T5794] veth0_vlan: entered promiscuous mode [ 90.284945][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.288033][ T5787] veth1_macvtap: entered promiscuous mode [ 90.312609][ T5792] veth0_vlan: entered promiscuous mode [ 90.350798][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.358722][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.358741][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.379231][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.393367][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.404727][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.416615][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.434229][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.456146][ T5792] veth1_vlan: entered promiscuous mode [ 90.471818][ T5794] veth1_vlan: entered promiscuous mode [ 90.493419][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505889][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517026][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526564][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.655119][ T5794] veth0_macvtap: entered promiscuous mode [ 90.699438][ T5878] syz.3.4[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.705383][ T5794] veth1_macvtap: entered promiscuous mode [ 90.718237][ T5792] veth0_macvtap: entered promiscuous mode [ 90.737926][ T5792] veth1_macvtap: entered promiscuous mode [ 90.783303][ T5878] loop3: detected capacity change from 0 to 4096 [ 90.803338][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.841710][ T5878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.842087][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.863974][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.877463][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.898088][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.909633][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.925513][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.994633][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.016954][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.028586][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.044833][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.075918][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.086635][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.102119][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.111229][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.122168][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.123851][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.142479][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.153693][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.166248][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.181644][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.191273][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213257][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.221244][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.240219][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273664][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.298233][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.332207][ T5882] loop3: detected capacity change from 0 to 256 [ 91.339590][ T5882] exfat: Deprecated parameter 'utf8' [ 91.347914][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.360694][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.373151][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.384006][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.396510][ T5882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 91.399157][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.447067][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.474951][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.484713][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.498131][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532263][ T5795] Bluetooth: hci0: command tx timeout [ 91.548133][ T5103] Bluetooth: hci2: command tx timeout [ 91.550895][ T5790] Bluetooth: hci3: command tx timeout [ 91.562868][ T50] Bluetooth: hci1: command tx timeout [ 91.808708][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.830403][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.875424][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.896655][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.954270][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.982219][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.036310][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.082125][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.182736][ T786] cfg80211: failed to load regulatory.db [ 92.497490][ T5897] loop1: detected capacity change from 0 to 2048 [ 92.557086][ T5897] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 92.599066][ T5897] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 92.599107][ T5897] UDF-fs: Scanning with blocksize 512 failed [ 92.605520][ T5897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.716057][ T5887] loop0: detected capacity change from 0 to 32768 [ 92.732142][ T5887] ======================================================= [ 92.732142][ T5887] WARNING: The mand mount option has been deprecated and [ 92.732142][ T5887] and is ignored by this kernel. Remove the mand [ 92.732142][ T5887] option from the mount to silence this warning. [ 92.732142][ T5887] ======================================================= [ 92.936235][ T5887] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.127158][ T5919] loop1: detected capacity change from 0 to 1024 [ 93.136825][ T5919] EXT4-fs: Ignoring removed orlov option [ 93.202398][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.213346][ T5925] loop2: detected capacity change from 0 to 164 [ 93.259808][ T5887] XFS (loop0): Ending clean mount [ 93.311046][ T5885] XFS (loop0): Corruption warning: Metadata has LSN (2:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 93.341554][ T5925] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 93.350765][ T5885] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 93.370297][ T5885] XFS (loop0): Unmount and run xfs_repair [ 93.393911][ T5885] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 93.406874][ T5885] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 93.445084][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.460077][ T5885] 00000010: 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 80 ................ [ 93.468999][ T5885] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 93.510240][ T5885] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 93.525495][ T5885] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 93.555627][ T5885] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.604516][ T5885] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.613233][ T50] Bluetooth: hci1: command tx timeout [ 93.618962][ T5795] Bluetooth: hci0: command tx timeout [ 93.624526][ T5790] Bluetooth: hci3: command tx timeout [ 93.625660][ T5103] Bluetooth: hci2: command tx timeout [ 93.651010][ T5885] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 93.710353][ T5887] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 4 error 74 [ 93.731340][ T5887] XFS (loop0): Failed to initialize disk quotas. [ 93.890320][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.074954][ T5937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.333585][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.568478][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 94.608017][ T5937] loop1: detected capacity change from 0 to 32768 [ 94.611181][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.633881][ T5946] loop0: detected capacity change from 0 to 2048 [ 94.646610][ T5937] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.656021][ T5937] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.685407][ T5937] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 94.696626][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.725491][ T5946] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 94.754773][ T5937] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 94.764123][ T5937] gfs2: fsid=syz:syz.s: can't get quota file inode: -2 [ 94.764674][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.784688][ T5946] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 94.847318][ T5946] UDF-fs: Scanning with blocksize 512 failed [ 94.882570][ T5885] usb 3-1: config 0 descriptor?? [ 94.958082][ T5885] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 94.982313][ T5946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.693815][ T5959] loop0: detected capacity change from 0 to 4096 [ 95.709152][ T5959] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 95.826673][ T28] audit: type=1800 audit(1756350446.245:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.32" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 96.221837][ T5970] loop0: detected capacity change from 0 to 128 [ 96.327039][ T5972] loop1: detected capacity change from 0 to 2048 [ 96.343263][ T5972] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 96.374099][ T5972] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 96.383114][ T5972] UDF-fs: Scanning with blocksize 512 failed [ 96.398445][ T5972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.840747][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.978311][ T5988] netlink: 22756 bytes leftover after parsing attributes in process `syz.3.44'. [ 97.105108][ T5833] usb 3-1: USB disconnect, device number 2 [ 97.355837][ T5993] loop1: detected capacity change from 0 to 4096 [ 97.557851][ T6001] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.932478][ T6000] loop0: detected capacity change from 0 to 65536 [ 97.972159][ T6000] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 98.108119][ T6000] XFS (loop0): Ending clean mount [ 98.276129][ T5787] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 98.670346][ T6017] loop1: detected capacity change from 0 to 4096 [ 98.854670][ T6003] loop2: detected capacity change from 0 to 32768 [ 98.924470][ T6003] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.207121][ T6003] XFS (loop2): Ending clean mount [ 99.237109][ T5876] XFS (loop2): Corruption warning: Metadata has LSN (2:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 99.283052][ T5876] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 99.320162][ T5876] XFS (loop2): Unmount and run xfs_repair [ 99.330504][ T5876] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 99.341522][ T5876] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 99.371503][ T5876] 00000010: 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 80 ................ [ 99.396082][ T6037] loop1: detected capacity change from 0 to 1024 [ 99.400134][ T5876] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 99.427194][ T5876] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 99.452496][ T5876] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 99.462020][ T5876] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.483328][ T5876] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.494456][ T6032] loop0: detected capacity change from 0 to 4096 [ 99.501392][ T5876] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.512972][ T6032] ntfs3: Unknown parameter '' [ 99.547230][ T6003] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 4 error 74 [ 99.560425][ T6003] XFS (loop2): Failed to initialize disk quotas. [ 99.563735][ T5797] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.655658][ T3454] hfsplus: b-tree write err: -5, ino 4 [ 99.703459][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.873276][ T6035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.943996][ T6039] loop1: detected capacity change from 0 to 2048 [ 100.008639][ T6039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.292970][ T6045] loop0: detected capacity change from 0 to 128 [ 100.477857][ T6047] loop1: detected capacity change from 0 to 256 [ 100.566282][ T6044] loop2: detected capacity change from 0 to 32768 [ 100.613246][ T6044] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.624241][ T6047] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.664634][ T6047] FAT-fs (loop1): Filesystem has been set read-only [ 100.739634][ T6044] XFS (loop2): Ending clean mount [ 100.758591][ T6044] XFS (loop2): Quotacheck needed: Please wait. [ 100.882375][ T6044] XFS (loop2): Quotacheck: Done. [ 101.041777][ T5792] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.561653][ T6081] loop2: detected capacity change from 0 to 128 [ 101.717558][ T6083] loop0: detected capacity change from 0 to 4096 [ 101.734508][ T6083] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 101.878930][ T6085] loop1: detected capacity change from 0 to 1024 [ 101.994073][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.921518][ T6103] loop2: detected capacity change from 0 to 128 [ 103.004607][ T6107] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 103.011542][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.054931][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 103.064025][ T6112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.082451][ T6107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.092100][ T6107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.112151][ T6107] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 103.118839][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.179427][ T6112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.202357][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 103.204587][ T6112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.273713][ T6116] syzkaller0: entered promiscuous mode [ 103.279263][ T6116] syzkaller0: entered allmulticast mode [ 103.286220][ T5885] vhci_hcd: vhci_device speed not set [ 103.340193][ T6112] vhci_hcd vhci_hcd.0: port 0 already used [ 103.368015][ T6107] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(16) [ 103.374690][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.390403][ T5885] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 103.415267][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 103.447028][ T6119] vhci_hcd: connection closed [ 103.449875][ T3454] vhci_hcd: stop threads [ 103.463991][ T6113] vhci_hcd: connection closed [ 103.475102][ T3454] vhci_hcd: release socket [ 103.508009][ T3454] vhci_hcd: disconnect device [ 103.514252][ T6108] vhci_hcd: connection reset by peer [ 103.518321][ T6118] loop2: detected capacity change from 0 to 32768 [ 103.525703][ T3454] vhci_hcd: stop threads [ 103.542730][ T3454] vhci_hcd: release socket [ 103.552576][ T3454] vhci_hcd: disconnect device [ 103.564441][ T3454] vhci_hcd: stop threads [ 103.573300][ T3454] vhci_hcd: release socket [ 103.578064][ T3454] vhci_hcd: disconnect device [ 103.626529][ T6118] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.659723][ T6118] (syz.2.85,6118,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 103.685876][ T6118] ocfs2: Unmounting device (7,2) on (node local) [ 104.588697][ T6129] loop2: detected capacity change from 0 to 32768 [ 104.619504][ T6129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.88 (6129) [ 104.712018][ T6129] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.750289][ T6129] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 104.773948][ T6129] BTRFS info (device loop2): max_inline at 0 [ 104.794855][ T6129] BTRFS info (device loop2): enabling disk space caching [ 104.795380][ T6135] loop0: detected capacity change from 0 to 4096 [ 104.816165][ T6129] BTRFS info (device loop2): setting nodatasum [ 104.844332][ T6129] BTRFS info (device loop2): turning off barriers [ 104.866392][ T6129] BTRFS info (device loop2): turning on flush-on-commit [ 104.886275][ T6129] BTRFS info (device loop2): doing ref verification [ 104.913914][ T6129] BTRFS info (device loop2): force clearing of disk cache [ 104.925794][ T6137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.934445][ T6129] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 105.009306][ T6129] BTRFS info (device loop2): enabling ssd optimizations [ 105.045062][ T6129] BTRFS info (device loop2): max_inline at 0 [ 105.054163][ T6135] syz.0.91 (6135) used greatest stack depth: 19920 bytes left [ 105.068903][ T6129] BTRFS info (device loop2): disk space caching is enabled [ 105.399211][ T6129] BTRFS info (device loop2): auto enabling async discard [ 105.434426][ T6129] BTRFS info (device loop2): rebuilding free space tree [ 105.599409][ T6129] BTRFS info (device loop2): disabling free space tree [ 105.606594][ T6129] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.660999][ T6129] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.912819][ T6159] loop0: detected capacity change from 0 to 128 [ 105.978159][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.658660][ T6163] loop0: detected capacity change from 0 to 32768 [ 106.666308][ T6163] XFS: noikeep mount option is deprecated. [ 106.672602][ T6163] XFS (loop0): sunit and swidth options incompatible with the noalign option [ 106.789373][ T5797] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.782867][ T6171] loop2: detected capacity change from 0 to 32768 [ 107.863191][ T6171] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.095852][ T6171] XFS (loop2): Ending clean mount [ 108.119568][ T6171] XFS (loop2): Quotacheck needed: Please wait. [ 108.242953][ T6171] XFS (loop2): Quotacheck: Done. [ 108.410655][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.517361][ T5885] vhci_hcd: vhci_device speed not set [ 108.565465][ T6191] loop0: detected capacity change from 0 to 32768 [ 108.633176][ T6191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.105 (6191) [ 108.672375][ T6191] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.700215][ T6191] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.709284][ T6191] BTRFS info (device loop0): max_inline at 0 [ 108.730554][ T6191] BTRFS info (device loop0): enabling disk space caching [ 108.737678][ T6191] BTRFS info (device loop0): setting nodatasum [ 108.770286][ T6191] BTRFS info (device loop0): turning off barriers [ 108.776814][ T6191] BTRFS info (device loop0): turning on flush-on-commit [ 108.819214][ T6191] BTRFS info (device loop0): doing ref verification [ 108.826289][ T6191] BTRFS info (device loop0): force clearing of disk cache [ 108.852906][ T6191] BTRFS warning (device loop0): excessive commit interval 2147483647 [ 108.870606][ T6191] BTRFS info (device loop0): enabling ssd optimizations [ 108.877671][ T6191] BTRFS info (device loop0): max_inline at 0 [ 108.894945][ T6191] BTRFS info (device loop0): disk space caching is enabled [ 109.198780][ T6194] loop2: detected capacity change from 0 to 32768 [ 109.209149][ T6194] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.106 (6194) [ 109.301499][ T6191] BTRFS info (device loop0): auto enabling async discard [ 109.337178][ T5789] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5789) [ 109.343920][ T6191] BTRFS info (device loop0): rebuilding free space tree [ 109.440864][ T6191] BTRFS info (device loop0): disabling free space tree [ 109.466471][ T6191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 109.506927][ T6191] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.806412][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.059760][ T6216] loop2: detected capacity change from 0 to 4096 [ 110.125992][ T6216] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 110.268486][ T6224] loop1: detected capacity change from 0 to 1024 [ 110.307549][ T6224] EXT4-fs: Ignoring removed nobh option [ 110.361115][ T6224] EXT4-fs: Ignoring removed bh option [ 110.380420][ T6224] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.474822][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.571935][ T5103] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 110.581319][ T5103] Bluetooth: hci0: Injecting HCI hardware error event [ 110.589959][ T5103] Bluetooth: hci0: hardware error 0x00 [ 110.602090][ T28] audit: type=1800 audit(1756350461.035:3): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.113" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 110.746940][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.908147][ T6234] loop0: detected capacity change from 0 to 128 [ 111.219902][ T6242] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.239262][ T6242] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 111.258937][ T6242] overlayfs: missing 'lowerdir' [ 111.748145][ T6250] loop0: detected capacity change from 0 to 4096 [ 111.790185][ T6250] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 111.907248][ T6238] loop2: detected capacity change from 0 to 32768 [ 111.950240][ T6238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (6238) [ 112.008727][ T6238] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.051950][ T6238] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 112.094925][ T6238] BTRFS info (device loop2): max_inline at 0 [ 112.137215][ T6238] BTRFS info (device loop2): enabling disk space caching [ 112.220507][ T6238] BTRFS info (device loop2): setting nodatasum [ 112.226758][ T6238] BTRFS info (device loop2): turning off barriers [ 112.290256][ T6238] BTRFS info (device loop2): turning on flush-on-commit [ 112.328085][ T6238] BTRFS info (device loop2): doing ref verification [ 112.391164][ T6255] fuse: Bad value for 'fd' [ 112.395853][ T6238] BTRFS info (device loop2): force clearing of disk cache [ 112.453831][ T6238] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 112.498968][ T6238] BTRFS info (device loop2): enabling ssd optimizations [ 112.525299][ T6238] BTRFS info (device loop2): max_inline at 0 [ 112.539677][ T6238] BTRFS info (device loop2): disk space caching is enabled [ 112.636921][ T6260] loop0: detected capacity change from 0 to 128 [ 112.730362][ T5103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 112.787873][ T6249] loop1: detected capacity change from 0 to 32768 [ 112.804330][ T6238] BTRFS info (device loop2): auto enabling async discard [ 112.827353][ T6249] (syz.1.124,6249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.865254][ T6249] (syz.1.124,6249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.887740][ T6238] BTRFS info (device loop2): rebuilding free space tree [ 112.945991][ T6238] BTRFS info (device loop2): disabling free space tree [ 112.971436][ T6238] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.000302][ T6238] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.044948][ T6249] JBD2: Ignoring recovery information on journal [ 113.138117][ T6249] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.304845][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.412467][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 113.562099][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 113.811039][ T6291] fuse: Bad value for 'fd' [ 113.829110][ T6294] loop0: detected capacity change from 0 to 128 [ 113.854013][ T6295] loop6: detected capacity change from 0 to 7 [ 113.915480][ T6295] Dev loop6: unable to read RDB block 7 [ 113.946538][ T6295] loop6: unable to read partition table [ 113.960435][ T6295] loop6: partition table beyond EOD, truncated [ 113.982854][ T6295] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 114.393712][ T6305] sctp: [Deprecated]: syz.3.141 (pid 6305) Use of int in max_burst socket option deprecated. [ 114.393712][ T6305] Use struct sctp_assoc_value instead [ 114.721368][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.742460][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.749444][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.756381][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.763284][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.770156][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.777173][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.784100][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.790999][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 114.797853][ T6313] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 115.029805][ T5174] IPVS: starting estimator thread 0... [ 115.170356][ T6316] IPVS: using max 17 ests per chain, 40800 per kthread [ 115.364613][ T6302] loop1: detected capacity change from 0 to 32768 [ 115.441698][ T6302] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.675712][ T6303] loop2: detected capacity change from 0 to 32768 [ 115.752430][ T6303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.140 (6303) [ 115.863906][ T6303] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.895745][ T6303] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 115.906117][ T6327] loop0: detected capacity change from 0 to 4096 [ 115.941438][ T6303] BTRFS info (device loop2): max_inline at 0 [ 115.960642][ T6302] XFS (loop1): Ending clean mount [ 115.972606][ T6327] NILFS (loop0): invalid segment: Checksum error in segment payload [ 115.974400][ T6303] BTRFS info (device loop2): enabling disk space caching [ 115.998477][ T6302] XFS (loop1): Quotacheck needed: Please wait. [ 116.005757][ T6327] NILFS (loop0): trying rollback from an earlier position [ 116.028913][ T6303] BTRFS info (device loop2): setting nodatasum [ 116.056119][ T6303] BTRFS info (device loop2): turning off barriers [ 116.073788][ T6327] NILFS (loop0): recovery complete [ 116.076011][ T6303] BTRFS info (device loop2): turning on flush-on-commit [ 116.110146][ T6303] BTRFS info (device loop2): doing ref verification [ 116.120557][ T6330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.140751][ T6302] XFS (loop1): Quotacheck: Done. [ 116.155932][ T6303] BTRFS info (device loop2): force clearing of disk cache [ 116.187323][ T6303] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 116.210193][ T6303] BTRFS info (device loop2): enabling ssd optimizations [ 116.244894][ T6303] BTRFS info (device loop2): max_inline at 0 [ 116.271914][ T6303] BTRFS info (device loop2): disk space caching is enabled [ 116.302725][ T6333] fuse: Unknown parameter '0xffffffffffffffff' [ 116.352327][ T5794] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.483385][ T6303] BTRFS info (device loop2): auto enabling async discard [ 116.529644][ T6303] BTRFS info (device loop2): rebuilding free space tree [ 116.556373][ T6303] BTRFS info (device loop2): disabling free space tree [ 116.568070][ T6303] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.629425][ T6303] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.635825][ T6350] lo speed is unknown, defaulting to 1000 [ 116.675548][ T6350] lo speed is unknown, defaulting to 1000 [ 116.784727][ T6350] lo speed is unknown, defaulting to 1000 [ 116.833023][ T6350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.911263][ T5792] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.930821][ T6350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.045514][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.085416][ T6350] lo speed is unknown, defaulting to 1000 [ 117.104023][ T6350] lo speed is unknown, defaulting to 1000 [ 117.126575][ T6350] lo speed is unknown, defaulting to 1000 [ 117.167465][ T6350] lo speed is unknown, defaulting to 1000 [ 117.288478][ T5885] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 117.316379][ T5885] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 117.340134][ T5885] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 117.349169][ T5885] usb 1-1: config 0 has no interface number 0 [ 117.393857][ T6363] loop1: detected capacity change from 0 to 2048 [ 117.394408][ T5885] usb 1-1: config 0 has no interface number 1 [ 117.416890][ T5885] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 117.440226][ T5885] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 117.482340][ T5885] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 117.483532][ T6366] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.524062][ T5885] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 117.560223][ T5885] usb 1-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0x12, skipping [ 117.590277][ T5885] usb 1-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0xE6, skipping [ 117.624876][ T5885] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 117.690629][ T5885] usb 1-1: config 0 interface 66 has no altsetting 0 [ 117.713411][ T5885] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 117.743028][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.778286][ T6366] NILFS (loop1): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 117.780224][ T5885] usb 1-1: Product: syz [ 117.812748][ T5885] usb 1-1: Manufacturer: syz [ 117.817435][ T5885] usb 1-1: SerialNumber: syz [ 117.824890][ T6370] loop2: detected capacity change from 0 to 2048 [ 117.858750][ T5885] usb 1-1: config 0 descriptor?? [ 117.865682][ T6366] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=6) [ 117.952236][ T6370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.979268][ T6366] Remounting filesystem read-only [ 118.247721][ T5885] usb 1-1: USB disconnect, device number 2 [ 118.266774][ T5794] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 118.297773][ T5794] NILFS (loop1): discard dirty page: offset=57344, ino=15 [ 118.306193][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.316869][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.326316][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.347231][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.367166][ T6375] Zero length message leads to an empty skb [ 118.381467][ T5794] NILFS (loop1): discard dirty page: offset=61440, ino=15 [ 118.388687][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.400529][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.408835][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.427095][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.442849][ T5794] NILFS (loop1): discard dirty page: offset=65536, ino=15 [ 118.451332][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.472480][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.487517][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.495080][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.507553][ T5794] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 118.514376][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.526837][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.535963][ T5794] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 118.547386][ T5794] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 118.558296][ T5794] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 118.565153][ T5794] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 118.572682][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.582863][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.591879][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.602168][ T5794] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 118.609334][ T5794] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 118.616906][ T5794] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 118.625459][ T5794] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 118.632864][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.641975][ T5794] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 118.650346][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.659372][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.672116][ T5794] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 118.680109][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.688373][ T5794] NILFS (loop1): discard dirty page: offset=233472, ino=3 [ 118.695609][ T5794] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 118.704337][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.713413][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.722395][ T5794] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.740217][ T5833] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 118.939042][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 118.969815][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 118.976458][ T5833] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.000153][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.019807][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 119.032687][ T5833] usb 3-1: config 0 descriptor?? [ 119.040457][ T6377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.242172][ T6396] overlayfs: failed to clone upperpath [ 119.251327][ T6396] overlayfs: failed to clone upperpath [ 119.341022][ T6397] loop0: detected capacity change from 0 to 4096 [ 119.544495][ T5833] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 119.556007][ T28] audit: type=1800 audit(1756350469.965:4): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.166" name="file1" dev="overlay" ino=30 res=0 errno=0 [ 119.782921][ T6388] loop1: detected capacity change from 0 to 32768 [ 119.873241][ T6388] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.112927][ T6388] XFS (loop1): Ending clean mount [ 120.146001][ T6388] XFS (loop1): Quotacheck needed: Please wait. [ 120.254779][ T6388] XFS (loop1): Quotacheck: Done. [ 120.453683][ T5794] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.577050][ T6420] loop0: detected capacity change from 0 to 32768 [ 120.597054][ T6420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.174 (6420) [ 120.622347][ T6420] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.634095][ T6420] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 120.642956][ T6420] BTRFS info (device loop0): setting nodatacow, compression disabled [ 120.651350][ T6420] BTRFS info (device loop0): setting datasum, datacow enabled [ 120.658869][ T6420] BTRFS info (device loop0): enabling ssd optimizations [ 120.665982][ T6420] BTRFS info (device loop0): turning off barriers [ 120.672486][ T6420] BTRFS info (device loop0): turning on barriers [ 120.678872][ T6420] BTRFS info (device loop0): doing ref verification [ 120.685681][ T6420] BTRFS info (device loop0): force clearing of disk cache [ 120.692997][ T6420] BTRFS info (device loop0): turning on async discard [ 120.699911][ T6420] BTRFS info (device loop0): disabling tree log [ 120.706320][ T6420] BTRFS info (device loop0): using free space tree [ 120.962503][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.298774][ T6452] loop1: detected capacity change from 0 to 128 [ 121.436155][ T6452] syz.1.176: attempt to access beyond end of device [ 121.436155][ T6452] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 121.481222][ T5833] usb 3-1: USB disconnect, device number 3 [ 121.599184][ T6452] syz.1.176: attempt to access beyond end of device [ 121.599184][ T6452] loop1: rw=2049, sector=241, nr_sectors = 352 limit=128 [ 121.730859][ T6452] syz.1.176: attempt to access beyond end of device [ 121.730859][ T6452] loop1: rw=0, sector=241, nr_sectors = 1 limit=128 [ 121.803273][ T6451] syz.1.176: attempt to access beyond end of device [ 121.803273][ T6451] loop1: rw=524288, sector=249, nr_sectors = 248 limit=128 [ 121.839676][ T6451] syz.1.176: attempt to access beyond end of device [ 121.839676][ T6451] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 121.897526][ T6451] syz.1.176: attempt to access beyond end of device [ 121.897526][ T6451] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 121.957464][ T6452] syz.1.176: attempt to access beyond end of device [ 121.957464][ T6452] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 122.011433][ T6452] syz.1.176: attempt to access beyond end of device [ 122.011433][ T6452] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 122.072959][ T6464] loop2: detected capacity change from 0 to 32768 [ 122.074214][ T6452] syz.1.176: attempt to access beyond end of device [ 122.074214][ T6452] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 122.094184][ T6464] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.187 (6464) [ 122.112137][ T6464] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 122.122567][ T6464] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.131955][ T6464] BTRFS info (device loop2): using free space tree [ 122.137463][ T6452] syz.1.176: attempt to access beyond end of device [ 122.137463][ T6452] loop1: rw=0, sector=257, nr_sectors = 8 limit=128 [ 122.276128][ T6464] BTRFS info (device loop2): enabling ssd optimizations [ 122.283257][ T6464] BTRFS info (device loop2): auto enabling async discard [ 122.362667][ T6464] BTRFS info (device loop2): balance: start -f -sprofiles=data|0x10000,usage=4393751544831,usage=1023..1023,drange=7..559102,stripes=268435459..4 [ 122.380356][ T6464] BTRFS info (device loop2): balance: ended with status: 0 [ 122.403684][ T8] IPVS: starting estimator thread 0... [ 122.502484][ T5792] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 122.510317][ T6491] IPVS: using max 17 ests per chain, 40800 per kthread [ 122.576010][ T6493] loop1: detected capacity change from 0 to 256 [ 122.625688][ T6493] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.685786][ T6493] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 122.758243][ T6493] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 122.770303][ T5833] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 122.803716][ T6493] UDF-fs: Scanning with blocksize 512 failed [ 122.851506][ T5833] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 122.864081][ T6493] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.942515][ T6493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.133605][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 123.307679][ T6507] loop0: detected capacity change from 0 to 1764 [ 123.576544][ T6512] loop2: detected capacity change from 0 to 4096 [ 123.856407][ T6510] loop1: detected capacity change from 0 to 40427 [ 123.873395][ T6510] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 123.882198][ T6510] F2FS-fs (loop1): Image doesn't support compression [ 123.888975][ T6510] F2FS-fs (loop1): Image doesn't support compression [ 123.927698][ T6510] F2FS-fs (loop1): invalid crc value [ 123.960624][ T6510] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.023517][ T6510] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.630123][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.810877][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 124.822414][ T5876] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 124.843323][ T5876] usb 1-1: config 150 has no interface number 0 [ 124.849678][ T5876] usb 1-1: config 150 interface 204 has no altsetting 0 [ 124.890693][ T5876] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 124.900308][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.920115][ T5876] usb 1-1: Product: syz [ 124.924463][ T5876] usb 1-1: Manufacturer: syz [ 124.934577][ T5876] usb 1-1: SerialNumber: syz [ 125.195685][ T5876] usb 1-1: USB disconnect, device number 3 [ 125.324547][ T6527] loop2: detected capacity change from 0 to 40427 [ 125.396600][ T6527] F2FS-fs (loop2): invalid crc value [ 125.460806][ T6527] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.476966][ T6538] loop1: detected capacity change from 0 to 40427 [ 125.497963][ T6538] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 125.628992][ T6527] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.691431][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 125.903142][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 126.248321][ T6546] loop0: detected capacity change from 0 to 32768 [ 126.368926][ T6546] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.500740][ T6546] XFS (loop0): Ending clean mount [ 126.527563][ T6546] XFS (loop0): Quotacheck needed: Please wait. [ 126.634424][ T6550] loop1: detected capacity change from 0 to 32768 [ 126.640308][ T6546] XFS (loop0): Quotacheck: Done. [ 126.646450][ T6546] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.688260][ T6550] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.808787][ T6550] XFS (loop1): Ending clean mount [ 126.976429][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.633844][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.643530][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.683457][ T6576] loop2: detected capacity change from 0 to 4096 [ 127.715476][ T6576] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 128.315618][ T6580] loop0: detected capacity change from 0 to 4096 [ 128.990829][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.053525][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.122037][ T6582] loop2: detected capacity change from 0 to 40427 [ 129.148385][ T6582] F2FS-fs (loop2): invalid crc value [ 129.181675][ T6582] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.300621][ T6582] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.369915][ T28] audit: type=1804 audit(1756350479.795:5): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.222" name="/newroot/43/file0/bus" dev="loop2" ino=10 res=1 errno=0 [ 129.410694][ T28] audit: type=1800 audit(1756350479.795:6): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 129.474246][ T5792] bio_check_eod: 1 callbacks suppressed [ 129.474265][ T5792] syz-executor: attempt to access beyond end of device [ 129.474265][ T5792] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.499379][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 129.815151][ T6569] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824248][ T6569] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.833388][ T6569] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.842469][ T6569] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.201832][ T6600] loop2: detected capacity change from 0 to 16 [ 130.254961][ T6600] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.553229][ T6604] loop1: detected capacity change from 0 to 4096 [ 130.589379][ T6604] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 130.593627][ T6602] loop0: detected capacity change from 0 to 32768 [ 130.606017][ T6602] XFS: attr2 mount option is deprecated. [ 130.625902][ T6602] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 130.637424][ T6602] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.687170][ T6602] XFS (loop0): Ending clean mount [ 130.696996][ T6602] XFS (loop0): Quotacheck needed: Please wait. [ 130.787188][ T6602] XFS (loop0): Quotacheck: Done. [ 130.810286][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.933903][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.030185][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 131.047900][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.073528][ T23] usb 3-1: config 255 has an invalid interface number: 81 but max is 0 [ 131.098411][ T23] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 131.137801][ T23] usb 3-1: config 255 has no interface number 0 [ 131.168315][ T23] usb 3-1: config 255 interface 81 altsetting 3 has an invalid endpoint with address 0x93, skipping [ 131.223844][ T23] usb 3-1: config 255 interface 81 has no altsetting 0 [ 131.265700][ T23] usb 3-1: string descriptor 0 read error: -22 [ 131.272842][ T23] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 131.291589][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.534625][ T23] usb 3-1: USB disconnect, device number 4 [ 131.959766][ T6640] loop1: detected capacity change from 0 to 4096 [ 131.984165][ T6640] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 132.498751][ T6644] loop2: detected capacity change from 0 to 4096 [ 132.522290][ T6644] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 132.664267][ T6630] loop0: detected capacity change from 0 to 40427 [ 132.728145][ T6630] F2FS-fs (loop0): invalid crc value [ 132.733956][ T6644] ntfs3: loop2: failed to convert "c46c" to cp862 [ 132.773458][ T6630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.928335][ T6648] loop1: detected capacity change from 0 to 4096 [ 132.984143][ T6630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.084565][ T28] audit: type=1804 audit(1756350483.515:7): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.233" name="/newroot/66/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 133.138581][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148094][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181656][ T5787] syz-executor: attempt to access beyond end of device [ 133.181656][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.190335][ T28] audit: type=1800 audit(1756350483.515:8): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 133.244210][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 133.625598][ T6666] loop2: detected capacity change from 0 to 512 [ 133.738573][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.809940][ T6666] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.841502][ T6664] loop1: detected capacity change from 0 to 32768 [ 133.868043][ T6664] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.908423][ T6664] XFS (loop1): Ending clean mount [ 133.925864][ T6664] XFS (loop1): Quotacheck needed: Please wait. [ 133.956149][ T6669] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 134.026805][ T6669] EXT4-fs (loop2): Remounting filesystem read-only [ 134.041810][ T6664] XFS (loop1): Quotacheck: Done. [ 134.131825][ T6664] loop1: detected capacity change from 32768 to 64 [ 134.143187][ T6682] syz.1.250: attempt to access beyond end of device [ 134.143187][ T6682] loop1: rw=524288, sector=12252, nr_sectors = 4 limit=64 [ 134.170707][ T6682] syz.1.250: attempt to access beyond end of device [ 134.170707][ T6682] loop1: rw=0, sector=12252, nr_sectors = 4 limit=64 [ 134.215021][ T28] audit: type=1800 audit(1756350484.645:9): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.250" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 134.288112][ T6664] syz.1.250: attempt to access beyond end of device [ 134.288112][ T6664] loop1: rw=2049, sector=12416, nr_sectors = 132 limit=64 [ 134.310780][ T786] loop1: writeback error on inode 6150, offset 2048, sector 12416 [ 134.449288][ T5794] syz-executor: attempt to access beyond end of device [ 134.449288][ T5794] loop1: rw=432129, sector=128, nr_sectors = 16 limit=64 [ 134.482308][ T24] XFS (loop1): log I/O error -5 [ 134.487862][ T24] XFS (loop1): Filesystem has been shut down due to log error (0x2). [ 134.497773][ T24] XFS (loop1): Please unmount the filesystem and rectify the problem(s). [ 134.510672][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.582443][ T6686] Bluetooth: MGMT ver 1.22 [ 134.782203][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.180129][ T6593] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.372707][ T6593] usb 2-1: Using ep0 maxpacket: 8 [ 135.395929][ T6593] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 135.434994][ T6593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.517954][ T6593] pvrusb2: Hardware description: Terratec Grabster AV400 [ 135.550668][ T6593] pvrusb2: ********** [ 135.554740][ T6593] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 135.599291][ T6593] pvrusb2: Important functionality might not be entirely working. [ 135.621463][ T6593] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.652336][ T6593] pvrusb2: ********** [ 135.685054][ T6705] loop2: detected capacity change from 0 to 4096 [ 135.693130][ T6690] loop0: detected capacity change from 0 to 40427 [ 135.713056][ T6705] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 135.719694][ T2319] pvrusb2: Invalid write control endpoint [ 135.786483][ T6690] F2FS-fs (loop0): invalid crc value [ 135.838250][ T6690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.936782][ T2319] pvrusb2: Invalid write control endpoint [ 135.981160][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 136.023190][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 136.045588][ T6690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.057790][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 136.093058][ T2319] pvrusb2: Device being rendered inoperable [ 136.117752][ T5174] usb 2-1: USB disconnect, device number 2 [ 136.130229][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 136.146047][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 136.175745][ T28] audit: type=1804 audit(1756350486.605:10): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.256" name="/newroot/68/file0/bus" dev="loop0" ino=10 res=1 errno=0 [ 136.195047][ T6717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.264'. [ 136.212460][ T2319] pvrusb2: Attached sub-driver cx25840 [ 136.218490][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 136.260567][ T28] audit: type=1800 audit(1756350486.605:11): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.256" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 136.285070][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 136.305991][ T5787] syz-executor: attempt to access beyond end of device [ 136.305991][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.333734][ T6719] loop2: detected capacity change from 0 to 256 [ 136.350483][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 136.362556][ T6719] exfat: Deprecated parameter 'namecase' [ 136.375607][ T6719] exfat: Deprecated parameter 'utf8' [ 136.423477][ T6719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 136.487396][ T6719] process 'syz.2.265' launched '/dev/fd/4' with NULL argv: empty string added [ 136.716346][ T6723] loop2: detected capacity change from 0 to 1024 [ 136.871023][ T6725] netlink: 'syz.1.269': attribute type 7 has an invalid length. [ 137.130432][ T28] audit: type=1804 audit(1756350487.555:12): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.271" name="/newroot/56/file0/file1" dev="overlay" ino=335 res=1 errno=0 [ 137.438487][ T6735] loop1: detected capacity change from 0 to 256 [ 137.515170][ T6735] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000006) [ 137.524994][ T6735] FAT-fs (loop1): Filesystem has been set read-only [ 137.641541][ T6736] loop2: detected capacity change from 0 to 4096 [ 137.671826][ T6736] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 137.739502][ T6742] loop1: detected capacity change from 0 to 1024 [ 137.876329][ T42] hfsplus: b-tree write err: -5, ino 4 [ 138.073747][ T6752] loop1: detected capacity change from 0 to 64 [ 138.156109][ T6752] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 138.537200][ T6754] loop0: detected capacity change from 0 to 40427 [ 138.553236][ T6754] F2FS-fs (loop0): invalid crc value [ 138.567574][ T6754] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.633735][ T6754] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.833772][ T6770] loop1: detected capacity change from 0 to 1024 [ 138.867337][ T6772] loop2: detected capacity change from 0 to 512 [ 138.877031][ T6770] EXT4-fs: Ignoring removed nobh option [ 138.887754][ T6770] EXT4-fs: Ignoring removed bh option [ 138.902137][ T5787] syz-executor: attempt to access beyond end of device [ 138.902137][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.917953][ T6770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.923395][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.987768][ T6772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.021885][ T6770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.068770][ T6772] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.158119][ T28] audit: type=1800 audit(1756350489.585:13): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.288" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 139.181009][ T6770] EXT4-fs (loop1): shut down requested (0) [ 139.254189][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.376821][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.561837][ T6784] loop1: detected capacity change from 0 to 128 [ 139.763035][ T6788] loop0: detected capacity change from 0 to 512 [ 139.799028][ T6788] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.857852][ T6788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.912811][ T6788] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 139.949927][ T6788] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.980940][ T6788] EXT4-fs (loop0): 1 truncate cleaned up [ 139.988064][ T6788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.137012][ T6795] block device autoloading is deprecated and will be removed. [ 140.154228][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.291636][ T5103] Bluetooth: hci3: link tx timeout [ 140.297584][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.556021][ T6809] loop1: detected capacity change from 0 to 16 [ 140.578957][ T6809] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.662035][ T28] audit: type=1800 audit(1756350491.095:14): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.301" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 140.680246][ T6593] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.784624][ T6811] loop1: detected capacity change from 0 to 128 [ 140.892050][ T6593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 140.917663][ T6593] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 140.956777][ T6593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 141.000113][ T6593] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 141.035982][ T6593] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 141.045223][ T6593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.062293][ T6593] usb 1-1: Product: syz [ 141.066535][ T6593] usb 1-1: Manufacturer: syz [ 141.071625][ T6593] usb 1-1: SerialNumber: syz [ 141.095199][ T6593] usb 1-1: config 0 descriptor?? [ 141.108021][ T6593] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 141.338136][ T6593] scsi host1: usb-storage 1-1:0.0 [ 141.376175][ T6593] usb 1-1: USB disconnect, device number 4 [ 141.433592][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 141.605289][ T6827] fuse: Bad value for 'fd' [ 142.045728][ T6833] loop1: detected capacity change from 0 to 128 [ 142.331222][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 142.433811][ T6840] fuse: Bad value for 'fd' [ 142.714138][ T6844] loop0: detected capacity change from 0 to 1024 [ 143.179366][ T6856] overlayfs: failed to clone upperpath [ 143.319728][ T6858] loop1: detected capacity change from 0 to 128 [ 143.926775][ T6864] loop1: detected capacity change from 0 to 32768 [ 143.962615][ T6864] [ 143.962615][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.962615][ T6864] [ 144.013363][ T6864] [ 144.013363][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.013363][ T6864] [ 144.024736][ T6864] [ 144.024736][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.024736][ T6864] [ 144.035295][ T6864] [ 144.035295][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.035295][ T6864] [ 144.046069][ T6864] [ 144.046069][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.046069][ T6864] [ 144.057847][ T6864] [ 144.057847][ T6864] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.057847][ T6864] [ 144.079789][ T111] [ 144.079789][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.079789][ T111] [ 144.165782][ T6865] [ 144.165782][ T6865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.165782][ T6865] [ 144.200629][ T6865] [ 144.200629][ T6865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.200629][ T6865] [ 144.236612][ T6865] [ 144.236612][ T6865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.236612][ T6865] [ 144.290345][ T6865] [ 144.290345][ T6865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.290345][ T6865] [ 144.319588][ T6865] [ 144.319588][ T6865] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.319588][ T6865] [ 144.407215][ T110] [ 144.407215][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.407215][ T110] [ 144.489019][ T5794] [ 144.489019][ T5794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.489019][ T5794] [ 144.517409][ T5794] [ 144.517409][ T5794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 144.517409][ T5794] [ 145.099317][ T6875] fuse: Bad value for 'fd' [ 145.507672][ T6884] loop2: detected capacity change from 0 to 128 [ 145.884172][ T6883] loop0: detected capacity change from 0 to 40427 [ 145.906164][ T6883] F2FS-fs (loop0): invalid crc value [ 145.908906][ T6883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.956569][ T6883] F2FS-fs (loop0): Start checkpoint disabled! [ 145.978160][ T6883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 146.119015][ T6895] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.132790][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.212076][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.319582][ T42] kworker/u4:2: attempt to access beyond end of device [ 146.319582][ T42] loop0: rw=1, sector=45096, nr_sectors = 24 limit=40427 [ 146.345645][ T42] kworker/u4:2: attempt to access beyond end of device [ 146.345645][ T42] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 146.365911][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 146.375326][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 146.383508][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 146.826101][ T6913] loop0: detected capacity change from 0 to 256 [ 146.849308][ T6913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 147.345158][ T6919] loop0: detected capacity change from 0 to 2048 [ 147.419089][ T6922] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.553768][ T6922] NILFS (loop0): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 147.586541][ T6922] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=6) [ 147.618178][ T6922] Remounting filesystem read-only [ 147.627837][ T5787] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 147.635111][ T5787] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.644909][ T5787] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.655239][ T5787] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 147.666260][ T5787] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 147.679257][ T5787] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 147.687554][ T5787] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 147.702743][ T5787] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.714230][ T5787] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.727847][ T5787] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.103919][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.127858][ T2191] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.290250][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 148.296103][ T786] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 148.305255][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.313400][ T786] usb 2-1: config 0 has no interface number 0 [ 148.316838][ T2191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.322420][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.336445][ T2191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.338853][ T786] usb 2-1: config 0 has no interface number 0 [ 148.348855][ T2191] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.356324][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.373851][ T2191] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.375986][ T786] usb 2-1: config 0 has no interface number 0 [ 148.394337][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.402725][ T786] usb 2-1: config 0 has no interface number 0 [ 148.408962][ T2191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.411033][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.425781][ T786] usb 2-1: config 0 has no interface number 0 [ 148.427118][ T2191] usb 1-1: config 0 descriptor?? [ 148.435041][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.448169][ T786] usb 2-1: config 0 has no interface number 0 [ 148.463665][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.471894][ T786] usb 2-1: config 0 has no interface number 0 [ 148.479201][ T786] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.487990][ T786] usb 2-1: config 0 has no interface number 0 [ 148.512871][ T786] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 148.530011][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.538138][ T786] usb 2-1: Product: syz [ 148.560029][ T786] usb 2-1: Manufacturer: syz [ 148.564689][ T786] usb 2-1: SerialNumber: syz [ 148.584803][ T786] usb 2-1: config 0 descriptor?? [ 148.601989][ T786] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 148.830260][ T786] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 148.877437][ T2191] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 148.930482][ T2191] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.786231][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.797537][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0055. [ 149.806911][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.808932][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 149.824382][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 149.827082][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.833770][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x036E. [ 149.851472][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 149.855782][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.859474][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 149.886611][ T5454] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 149.896888][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.915774][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.931238][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0044. [ 149.942363][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 149.950386][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 149.958185][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x25C9. [ 149.969190][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 149.977214][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 149.985005][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0DBE. [ 149.996014][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.004035][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.011830][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x29E1. [ 150.022840][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.030866][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.038667][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xFA5D. [ 150.049676][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.057702][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.066025][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xEB33. [ 150.077026][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.085014][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.092762][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xD071. [ 150.103722][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.111706][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.119450][ C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x126E. [ 150.130418][ C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 150.138402][ C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 150.610274][ T5174] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.790078][ T5174] usb 3-1: Using ep0 maxpacket: 16 [ 150.797765][ T5174] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.805960][ T5174] usb 3-1: config 0 has no interface number 0 [ 150.815371][ T5174] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 150.824631][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.833084][ T5174] usb 3-1: Product: syz [ 150.838007][ T5174] usb 3-1: Manufacturer: syz [ 150.842706][ T5174] usb 3-1: SerialNumber: syz [ 150.852344][ T5174] usb 3-1: config 0 descriptor?? [ 150.970336][ T5454] etas_es58x 2-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 150.979371][ C0] net_ratelimit: 3321 callbacks suppressed [ 150.979490][ T5454] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 151.065720][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.098180][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.144492][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.180885][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.206215][ T5174] usb 3-1: selecting invalid altsetting 1 [ 151.227615][ T5174] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 151.248541][ T5174] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 151.257027][ T5174] speedtch: probe of 3-1:0.1 failed with error -22 [ 151.273851][ T5174] usb 3-1: USB disconnect, device number 5 [ 151.387911][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 151.387950][ T23] usb 2-1: USB disconnect, device number 3 [ 151.397193][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 151.397487][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 151.421603][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 151.430899][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 151.441622][ T2191] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 151.451425][ T23] etas_es58x 2-1:0.2: Disconnecting syz syz [ 151.642738][ T2191] usb 1-1: device firmware changed [ 151.648905][ T6594] usb 1-1: USB disconnect, device number 5 [ 151.840948][ T6594] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.951958][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.057996][ T6594] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.074187][ T6594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.083418][ T6594] usb 1-1: Product: syz [ 152.087720][ T6594] usb 1-1: Manufacturer: syz [ 152.092421][ T6594] usb 1-1: SerialNumber: syz [ 152.130201][ T2191] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.151811][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 152.163307][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.179620][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.197023][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.210089][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 152.219634][ T23] usb 2-1: Product: syz [ 152.229350][ T23] usb 2-1: Manufacturer: syz [ 152.255158][ T23] hub 2-1:4.0: USB hub found [ 152.335120][ T2191] usb 3-1: config 95 has an invalid interface number: 22 but max is 0 [ 152.350533][ T2191] usb 3-1: config 95 has no interface number 0 [ 152.374544][ T2191] usb 3-1: New USB device found, idVendor=07aa, idProduct=0018, bcdDevice= 7.dc [ 152.384132][ T2191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.392361][ T2191] usb 3-1: Product: syz [ 152.396865][ T2191] usb 3-1: Manufacturer: syz [ 152.401694][ T2191] usb 3-1: SerialNumber: syz [ 152.461031][ T23] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 152.524573][ T7008] fuse: Bad value for 'fd' [ 152.639230][ T2191] usb 3-1: USB disconnect, device number 6 [ 152.752693][ T6594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 152.770402][ T6594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 152.793536][ T6594] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 152.810539][ T6593] usb 2-1: USB disconnect, device number 4 [ 152.837249][ T6594] lan78xx: probe of 1-1:1.0 failed with error -32 [ 153.560191][ T6594] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.616273][ T2191] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.743042][ T6594] usb 3-1: Using ep0 maxpacket: 32 [ 153.750162][ T6594] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 153.758483][ T6594] usb 3-1: config 0 has no interface number 0 [ 153.764984][ T6594] usb 3-1: config 0 interface 89 has no altsetting 0 [ 153.774421][ T6594] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 153.783683][ T6594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.791894][ T6594] usb 3-1: Product: syz [ 153.796109][ T6594] usb 3-1: Manufacturer: syz [ 153.803046][ T6594] usb 3-1: SerialNumber: syz [ 153.809132][ T2191] usb 2-1: not running at top speed; connect to a high speed hub [ 153.820420][ T6594] usb 3-1: config 0 descriptor?? [ 153.826303][ T2191] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 153.837639][ T6594] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 153.847235][ T2191] usb 2-1: config 95 has no interface number 0 [ 153.853682][ T2191] usb 2-1: config 95 interface 1 has no altsetting 0 [ 153.860670][ T6594] em28xx 3-1:0.89: Video interface 89 found: bulk [ 153.873850][ T2191] usb 2-1: string descriptor 0 read error: -22 [ 153.880417][ T2191] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 153.889504][ T2191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.967351][ T5174] usb 1-1: USB disconnect, device number 6 [ 154.322761][ T786] usb 2-1: USB disconnect, device number 5 [ 154.457233][ T6594] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 154.500467][ T5174] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 154.681888][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.693147][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.702998][ T5174] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.712229][ T5174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.722548][ T5174] usb 1-1: config 0 descriptor?? [ 154.737121][ T5174] hub 1-1:0.0: USB hub found [ 154.942917][ T5174] hub 1-1:0.0: 1 port detected [ 155.180058][ T2191] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.365383][ T2191] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 155.376203][ T2191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.384426][ T2191] usb 2-1: Product: syz [ 155.388666][ T2191] usb 2-1: Manufacturer: syz [ 155.393742][ T2191] usb 2-1: SerialNumber: syz [ 155.556848][ T786] hub 1-1:0.0: activate --> -90 [ 156.014871][ T2191] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:79:61:fc:65:93 [ 156.038088][ T2191] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 156.368493][ T2191] usb 1-1: USB disconnect, device number 7 [ 156.430214][ T786] usb 1-1.1: new full-speed USB device number 8 using dummy_hcd [ 156.443435][ T786] usb 1-1-port1: attempt power cycle [ 156.902724][ T6594] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 156.911740][ T6594] em28xx 3-1:0.89: board has no eeprom [ 156.990248][ T6594] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 156.997953][ T6594] em28xx 3-1:0.89: analog set to bulk mode. [ 157.004519][ T6591] em28xx 3-1:0.89: Registering V4L2 extension [ 157.023742][ T6594] usb 3-1: USB disconnect, device number 7 [ 157.038025][ T6594] em28xx 3-1:0.89: Disconnecting em28xx [ 157.093628][ T6591] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 157.102230][ T6591] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 157.109316][ T6591] em28xx 3-1:0.89: No AC97 audio processor [ 157.123661][ T6591] usb 3-1: Decoder not found [ 157.128472][ T6591] em28xx 3-1:0.89: failed to create media graph [ 157.134920][ T6591] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 157.148220][ T6591] em28xx 3-1:0.89: Registering snapshot button... [ 157.160516][ T6591] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 157.179099][ T6591] em28xx 3-1:0.89: Remote control support is not available for this card. [ 157.189553][ T6594] em28xx 3-1:0.89: Closing input extension [ 157.197376][ T6594] em28xx 3-1:0.89: Deregistering snapshot button [ 157.236507][ T6594] em28xx 3-1:0.89: Freeing device [ 157.320099][ T2191] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 157.525102][ T2191] usb 1-1: not running at top speed; connect to a high speed hub [ 157.535213][ T2191] usb 1-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 157.545767][ T2191] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.558632][ T2191] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.578667][ T2191] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.588714][ T2191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.601871][ T2191] usb 1-1: Product: syz [ 157.606080][ T2191] usb 1-1: Manufacturer: syz [ 157.612703][ T2191] usb 1-1: SerialNumber: syz [ 157.730213][ T6594] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.831698][ T2191] cdc_ncm 1-1:1.0: skipping garbage [ 157.841243][ T2191] cdc_ncm 1-1:1.0: skipping garbage [ 157.846603][ T2191] cdc_ncm 1-1:1.0: skipping garbage [ 157.852022][ T2191] cdc_ncm 1-1:1.0: skipping garbage [ 157.857285][ T2191] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 157.864398][ T2191] cdc_ncm 1-1:1.0: bind() failure [ 157.874653][ T2191] usb 1-1: USB disconnect, device number 12 [ 157.922062][ T6594] usb 3-1: Using ep0 maxpacket: 16 [ 157.940916][ T6594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.960345][ T6594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.981800][ T6594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.010201][ T6594] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.019930][ T6594] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.061023][ T6594] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.078861][ T6594] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.087504][ T6594] usb 3-1: Manufacturer: syz [ 158.105016][ C1] usb 2-1: Rx status -71 [ 158.109422][ C1] usb 2-1: eth1: intr status -71 [ 158.110963][ T6594] usb 3-1: config 0 descriptor?? [ 158.114634][ C1] usb 2-1: eth1: Tx status -71 [ 158.130694][ C1] usb 2-1: Rx status -71 [ 158.135093][ C1] usb 2-1: eth1: intr status -71 [ 158.140153][ C1] usb 2-1: eth1: Tx status -71 [ 158.145933][ T23] usb 2-1: USB disconnect, device number 6 [ 158.151912][ C1] usb 2-1: Rx status -71 [ 158.151963][ C1] usb 2-1: eth1: intr status -71 [ 158.451079][ T6594] rc_core: IR keymap rc-hauppauge not found [ 158.458880][ T6594] Registered IR keymap rc-empty [ 158.465828][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.500593][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.550592][ T6594] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 158.580792][ T6594] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 158.615272][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.670425][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.726255][ T6591] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 158.739910][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.790399][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.820654][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.853793][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.900791][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.930151][ T6591] usb 1-1: Using ep0 maxpacket: 32 [ 158.935616][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.952479][ T6591] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 158.970589][ T6591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 158.990108][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.990257][ T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.998670][ T6591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 159.019829][ T6591] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 159.030507][ T6594] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.037793][ T6591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.046677][ T6591] usb 1-1: Product: syz [ 159.051365][ T6591] usb 1-1: Manufacturer: syz [ 159.056037][ T6591] usb 1-1: SerialNumber: syz [ 159.063901][ T6591] usb 1-1: config 0 descriptor?? [ 159.074441][ T6594] mceusb 3-1:0.0: Registered ࠝ with mce emulator interface version 1 [ 159.093679][ T6594] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.119438][ T6594] usb 3-1: USB disconnect, device number 8 [ 159.239590][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.259050][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.271932][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.285418][ T786] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.296015][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.311466][ T786] usb 2-1: config 0 descriptor?? [ 159.759812][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.780780][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.788245][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.808861][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.817478][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.825449][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.833267][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.841234][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.855623][ T5174] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.865459][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.873735][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.881673][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.889369][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.900254][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.907789][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.920234][ T786] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 159.928553][ T786] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 159.971406][ T786] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 160.007319][ T786] usb 2-1: USB disconnect, device number 7 [ 160.040091][ T5174] usb 3-1: Using ep0 maxpacket: 8 [ 160.055548][ T5174] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 160.084023][ T5174] usb 3-1: config 0 has no interface number 0 [ 160.104354][ T5174] usb 3-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 160.140017][ T5174] usb 3-1: config 0 interface 200 has no altsetting 0 [ 160.156427][ T7123] fido_id[7123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.159327][ T5174] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 160.204591][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.221017][ T5174] usb 3-1: Product: syz [ 160.226067][ T5174] usb 3-1: Manufacturer: syz [ 160.236341][ T5174] usb 3-1: SerialNumber: syz [ 160.260715][ T5174] usb 3-1: config 0 descriptor?? [ 160.281150][ T7115] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 160.533688][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.557989][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.594674][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.608074][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.639487][ T5174] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 160.678372][ T5174] usb 3-1: USB disconnect, device number 9 [ 160.881601][ T6594] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.071158][ T6594] usb 2-1: Using ep0 maxpacket: 16 [ 161.087253][ T6594] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.099051][ T6594] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 161.107897][ T6594] usb 2-1: config 0 has no interface number 0 [ 161.117346][ T6594] usb 2-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 161.126524][ T6594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.135192][ T6594] usb 2-1: Product: syz [ 161.139409][ T6594] usb 2-1: Manufacturer: syz [ 161.144520][ T6594] usb 2-1: SerialNumber: syz [ 161.160663][ T6594] usb 2-1: config 0 descriptor?? [ 161.374927][ T6593] usb 2-1: USB disconnect, device number 8 [ 161.462975][ T786] usb 1-1: USB disconnect, device number 13 [ 161.511726][ T6594] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 161.702665][ T6594] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 161.710926][ T6594] usb 3-1: config 6 has no interface number 0 [ 161.717040][ T6594] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.726827][ T6594] usb 3-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 161.740052][ T6594] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 161.749161][ T6594] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 161.757373][ T6594] usb 3-1: Product: syz [ 161.761788][ T6594] usb 3-1: Manufacturer: syz [ 161.766562][ T6594] usb 3-1: SerialNumber: syz [ 161.777744][ T6594] hso 3-1:6.2: Failed to find INT IN ep [ 161.950147][ T786] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 161.960424][ T6593] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.984248][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.995475][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.151284][ T6593] usb 2-1: Using ep0 maxpacket: 16 [ 162.157604][ T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.159825][ T6593] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.178058][ T6593] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 162.178836][ T786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.186362][ T6593] usb 2-1: config 0 has no interface number 0 [ 162.189614][ T6593] usb 2-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 162.203158][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.211578][ T6593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.211602][ T6593] usb 2-1: Product: syz [ 162.211617][ T6593] usb 2-1: Manufacturer: syz [ 162.211640][ T6593] usb 2-1: SerialNumber: syz [ 162.214583][ T6593] usb 2-1: config 0 descriptor?? [ 162.237568][ T786] usb 1-1: Product: syz [ 162.257976][ T786] usb 1-1: Manufacturer: syz [ 162.262995][ T786] usb 1-1: SerialNumber: syz [ 162.264140][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.288299][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.301517][ T5174] usb 3-1: USB disconnect, device number 10 [ 162.449104][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.460734][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.869268][ T7164] loop2: detected capacity change from 0 to 128 [ 163.027010][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.037274][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.263951][ T6593] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 163.279889][ T786] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 163.286659][ T786] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 163.294441][ T786] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 163.450137][ T6593] usb 3-1: Using ep0 maxpacket: 8 [ 163.457402][ T6593] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 163.466872][ T6593] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 163.477576][ T6593] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.488815][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.499001][ T6593] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.508420][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.516380][ T6593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.525748][ T786] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 163.526664][ T6593] usb 3-1: Product: syz [ 163.536600][ T6593] usb 3-1: Manufacturer: syz [ 163.541632][ T6593] usb 3-1: SerialNumber: syz [ 163.563058][ T786] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 163.582383][ T786] usb 1-1: USB disconnect, device number 14 [ 163.592703][ T786] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 163.770719][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.780838][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.163746][ T6593] usb 3-1: 0:2 : does not exist [ 164.214179][ T6593] usb 3-1: USB disconnect, device number 11 [ 164.246780][ T6528] udevd[6528]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.470220][ T786] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 164.660059][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 164.667689][ T786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 164.676092][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.685951][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.695816][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.705863][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.724295][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.744782][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.833580][ T6593] usb 2-1: USB disconnect, device number 9 [ 164.969322][ T786] usb 1-1: GET_CAPABILITIES returned 0 [ 164.976463][ T786] usbtmc 1-1:16.0: can't read capabilities [ 165.060091][ T5885] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 165.262918][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 165.278063][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 165.294540][ T5885] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 165.303936][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.316653][ T5885] usb 3-1: config 0 descriptor?? [ 165.331318][ T7178] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 165.556085][ T7174] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 165.762528][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.789121][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.813704][ T786] usb 1-1: USB disconnect, device number 15 [ 165.870362][ T5885] sony 0003:054C:0268.0005: hiddev1,hidraw0: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 165.920084][ T5885] sony 0003:054C:0268.0005: failed to claim input [ 166.015997][ T5885] usb 3-1: USB disconnect, device number 12 [ 167.237948][ T7212] loop0: detected capacity change from 0 to 32768 [ 167.246413][ T7212] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.413 (7212) [ 167.267310][ T7212] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 167.277603][ T7212] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 167.286947][ T7212] BTRFS info (device loop0): using free space tree [ 167.352515][ T7212] BTRFS info (device loop0): enabling ssd optimizations [ 167.359611][ T7212] BTRFS info (device loop0): auto enabling async discard [ 167.500711][ T7212] BTRFS info (device loop0): balance: start -f -sprofiles=data|0x10000,usage=4393751544831,usage=1023..1023,drange=7..559102,stripes=268435459..4 [ 167.515731][ T7212] BTRFS info (device loop0): balance: ended with status: 0 [ 167.603632][ T5787] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 168.310786][ T6593] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 168.400098][ T2191] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.420146][ T6594] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 168.500100][ T6593] usb 2-1: Using ep0 maxpacket: 32 [ 168.507251][ T6593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.516571][ T6593] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=e8.95 [ 168.525799][ T6593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.533914][ T6593] usb 2-1: Product: syz [ 168.538191][ T6593] usb 2-1: Manufacturer: syz [ 168.542915][ T6593] usb 2-1: SerialNumber: syz [ 168.549470][ T6593] usb 2-1: config 0 descriptor?? [ 168.590326][ T2191] usb 3-1: Using ep0 maxpacket: 32 [ 168.599184][ T2191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.610748][ T2191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.621317][ T2191] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 168.630502][ T2191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.639322][ T6594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.651243][ T6594] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.662434][ T2191] usb 3-1: config 0 descriptor?? [ 168.668485][ T6594] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.680831][ T6594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.691647][ T6594] usb 1-1: config 0 descriptor?? [ 168.767120][ T5885] usb 2-1: USB disconnect, device number 10 [ 169.096200][ T2191] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 169.119246][ T2191] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 169.135586][ T2191] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 169.147377][ T2191] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 169.155840][ T2191] CPU: 0 PID: 2191 Comm: kworker/0:3 Not tainted 6.6.102-syzkaller #0 [ 169.164067][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.174147][ T2191] Workqueue: usb_hub_wq hub_event [ 169.179201][ T2191] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 169.184849][ T2191] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 c7 02 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 3f 03 fa f9 48 8d 44 24 60 49 89 07 [ 169.204548][ T2191] RSP: 0018:ffffc90004fce780 EFLAGS: 00010202 [ 169.210620][ T2191] RAX: 0000000000000015 RBX: ffff888021034030 RCX: dffffc0000000000 [ 169.218608][ T2191] RDX: 0000000000000000 RSI: ffffc90004fce8a0 RDI: ffff88802ff4ca68 [ 169.226598][ T2191] RBP: ffffc90004fce998 R08: 0000000000000000 R09: 0000000000000000 [ 169.234578][ T2191] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888021034300 [ 169.242553][ T2191] R13: 1ffff920009f9cf8 R14: ffff888021034418 R15: 00000000000000a8 [ 169.250551][ T2191] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.259495][ T2191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.260485][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.266088][ T2191] CR2: 000055fff7cdbd38 CR3: 0000000061c0a000 CR4: 00000000003506f0 [ 169.266110][ T2191] Call Trace: [ 169.266119][ T2191] [ 169.266132][ T2191] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 169.278078][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.282423][ T2191] ? add_early_randomness+0x1e/0x1a0 [ 169.293543][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.294186][ T2191] ? mutex_unlock+0x10/0x10 [ 169.302428][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.307196][ T2191] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 169.333490][ T2191] add_early_randomness+0x7a/0x1a0 [ 169.338648][ T2191] hwrng_register+0x3db/0x4a0 [ 169.343389][ T2191] devm_hwrng_register+0x47/0xb0 [ 169.348364][ T2191] u2fzero_probe+0x348/0x460 [ 169.353013][ T2191] hid_device_probe+0x293/0x5b0 [ 169.358007][ T2191] ? hid_uevent+0x350/0x350 [ 169.362552][ T2191] really_probe+0x25b/0xb40 [ 169.367090][ T2191] ? pm_runtime_barrier+0x14b/0x1c0 [ 169.372324][ T2191] __driver_probe_device+0x18c/0x330 [ 169.377651][ T2191] driver_probe_device+0x4f/0x420 [ 169.382714][ T2191] __device_attach_driver+0x2ca/0x520 [ 169.388130][ T2191] bus_for_each_drv+0x24b/0x2d0 [ 169.393014][ T2191] ? coredump_store+0x90/0x90 [ 169.393331][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.397707][ T2191] ? bus_find_device+0x320/0x320 [ 169.397735][ T2191] __device_attach+0x2b5/0x400 [ 169.415810][ T2191] ? device_attach+0x20/0x20 [ 169.420441][ T2191] ? do_raw_spin_unlock+0x121/0x230 [ 169.425682][ T2191] bus_probe_device+0x180/0x260 [ 169.430568][ T2191] device_add+0x85b/0xc20 [ 169.432980][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.434923][ T2191] hid_add_device+0x38d/0x530 [ 169.447349][ T2191] usbhid_probe+0xe02/0x1220 [ 169.451993][ T2191] usb_probe_interface+0x5a4/0xb00 [ 169.457159][ T2191] ? usb_register_driver+0x3d0/0x3d0 [ 169.462488][ T2191] really_probe+0x25b/0xb40 [ 169.467033][ T2191] ? pm_runtime_barrier+0x14b/0x1c0 [ 169.472269][ T2191] __driver_probe_device+0x18c/0x330 [ 169.477596][ T2191] driver_probe_device+0x4f/0x420 [ 169.482663][ T2191] __device_attach_driver+0x2ca/0x520 [ 169.488076][ T2191] bus_for_each_drv+0x24b/0x2d0 [ 169.492959][ T2191] ? coredump_store+0x90/0x90 [ 169.497683][ T2191] ? bus_find_device+0x320/0x320 [ 169.502652][ T2191] __device_attach+0x2b5/0x400 [ 169.507445][ T2191] ? device_attach+0x20/0x20 [ 169.512066][ T2191] ? __kmem_cache_free+0xba/0x1f0 [ 169.517129][ T2191] ? do_raw_spin_unlock+0x121/0x230 [ 169.522363][ T2191] bus_probe_device+0x180/0x260 [ 169.527247][ T2191] device_add+0x85b/0xc20 [ 169.531612][ T2191] usb_set_configuration+0x1a79/0x20c0 [ 169.537292][ T2191] usb_generic_driver_probe+0x8d/0x150 [ 169.542790][ T2191] usb_probe_device+0x13d/0x280 [ 169.547685][ T2191] ? usb_register_device_driver+0x230/0x230 [ 169.553617][ T2191] really_probe+0x25b/0xb40 [ 169.558154][ T2191] ? pm_runtime_barrier+0x14b/0x1c0 [ 169.563387][ T2191] __driver_probe_device+0x18c/0x330 [ 169.568739][ T2191] driver_probe_device+0x4f/0x420 [ 169.573799][ T2191] __device_attach_driver+0x2ca/0x520 [ 169.579206][ T2191] bus_for_each_drv+0x24b/0x2d0 [ 169.584067][ T2191] ? coredump_store+0x90/0x90 [ 169.588786][ T2191] ? bus_find_device+0x320/0x320 [ 169.593747][ T2191] __device_attach+0x2b5/0x400 [ 169.598570][ T2191] ? device_attach+0x20/0x20 [ 169.601947][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.603173][ T2191] ? __kmem_cache_free+0xba/0x1f0 [ 169.613717][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.616529][ T2191] ? do_raw_spin_unlock+0x121/0x230 [ 169.629566][ T2191] bus_probe_device+0x180/0x260 [ 169.634441][ T2191] device_add+0x85b/0xc20 [ 169.638893][ T2191] usb_new_device+0xa31/0x1630 [ 169.643693][ T2191] ? usb_disconnect+0x8a0/0x8a0 [ 169.648657][ T2191] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.653885][ T2191] ? lockdep_hardirqs_on+0x98/0x150 [ 169.659092][ T2191] hub_event+0x2962/0x49c0 [ 169.663527][ T2191] ? hub_post_resume+0x120/0x120 [ 169.668465][ T2191] ? read_lock_is_recursive+0x20/0x20 [ 169.673840][ T2191] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.679045][ T2191] ? process_scheduled_works+0x957/0x15b0 [ 169.684778][ T2191] ? process_scheduled_works+0x957/0x15b0 [ 169.690514][ T2191] process_scheduled_works+0xa45/0x15b0 [ 169.696076][ T2191] ? assign_work+0x400/0x400 [ 169.700668][ T2191] ? assign_work+0x39e/0x400 [ 169.705275][ T2191] worker_thread+0xa55/0xfc0 [ 169.709897][ T2191] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 169.715827][ T2191] ? _raw_spin_unlock+0x40/0x40 [ 169.720805][ T2191] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 169.726713][ T2191] kthread+0x2fa/0x390 [ 169.730782][ T2191] ? pr_cont_work+0x560/0x560 [ 169.735552][ T2191] ? kthread_blkcg+0xd0/0xd0 [ 169.740176][ T2191] ret_from_fork+0x48/0x80 [ 169.744639][ T2191] ? kthread_blkcg+0xd0/0xd0 [ 169.749255][ T2191] ret_from_fork_asm+0x11/0x20 [ 169.754033][ T2191] [ 169.757056][ T2191] Modules linked in: [ 169.763472][ T2191] ---[ end trace 0000000000000000 ]--- [ 169.768972][ T2191] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 169.774685][ T2191] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 c7 02 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 3f 03 fa f9 48 8d 44 24 60 49 89 07 [ 169.795387][ T2191] RSP: 0018:ffffc90004fce780 EFLAGS: 00010202 [ 169.801572][ T2191] RAX: 0000000000000015 RBX: ffff888021034030 RCX: dffffc0000000000 [ 169.809569][ T2191] RDX: 0000000000000000 RSI: ffffc90004fce8a0 RDI: ffff88802ff4ca68 [ 169.817704][ T2191] RBP: ffffc90004fce998 R08: 0000000000000000 R09: 0000000000000000 [ 169.825755][ T2191] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888021034300 [ 169.833581][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.833807][ T2191] R13: 1ffff920009f9cf8 R14: ffff888021034418 R15: 00000000000000a8 [ 169.846661][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.850368][ T2191] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.867173][ T2191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.873879][ T2191] CR2: 000055fff7cdbd38 CR3: 0000000061c0a000 CR4: 00000000003506f0 [ 169.882797][ T2191] Kernel panic - not syncing: Fatal exception [ 169.889151][ T2191] Kernel Offset: disabled [ 169.893480][ T2191] Rebooting in 86400 seconds..