last executing test programs: 8.973879636s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.774532194s ago: executing program 1 (id=2): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c39000101020301010902200001010080fa0904000002ffffff000705010200020007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x3, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x4, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x5, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) 6.657116373s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freezer\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='freeze\n ', 0x8) 6.514978929s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040addeefbe0001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303100008"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x5, 0x8, '\x00t\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/r8152/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dead beef\x00', 0xa) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.597852429s ago: executing program 0 (id=5): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000008030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc1, 0x1, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='saa7115 0x21\x00', 0xd) 5.279429173s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband\x00', 0x90000, 0x0) getdents64(r0, &(0x7f0000000300), 0x1000) 4.88040296s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc0, 0xb1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 4.394555544s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 3.295970618s ago: executing program 1 (id=9): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r3, 0x3e8, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 3.103453163s ago: executing program 3 (id=10): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x40, 0x3, 0x18b1, 0x37, 0x0, 0x0, "0101010101010101010101010101010101010101010101010101010101010101010101010101012af500010101010101010101010101010101010126f9000101"}}, 0x158) read(r0, &(0x7f0000001300)=""/4376, 0x1118) 1.792412915s ago: executing program 0 (id=11): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000000)="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000370003004c050000e60c000000000000000000000600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0", 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write(r0, &(0x7f0000002000)="0a00000001000000000014000900"/32, 0x111c) write(r0, &(0x7f0000002000)="0a00000002000000000040002000"/64, 0x111c) write(r0, &(0x7f0000002000)="0a00000003000000000029000500"/53, 0x111c) nanosleep(&(0x7f0000001000)={0x0, 0x1dcd6500}, 0x0) 1.395679241s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\x00\x00\x00\x00', 0x4) 831.905564ms ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x4) 485.741836ms ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,port=2049,vers=4.2\x00') (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r3, &(0x7f0000000340), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r4, &(0x7f00000003c0), 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000440), 0x64) 0s ago: executing program 0 (id=15): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 91.986626][ T199] cfg80211: failed to load regulatory.db [ 92.556209][ T5580] cgroup: Unknown subsys name 'net' [ 92.796255][ T5580] cgroup: Unknown subsys name 'cpuset' [ 92.870715][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.870714][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.127874][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.130248][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.155026][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.197037][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.197836][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.199366][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.206548][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.208013][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.208341][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.218647][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.221244][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.223963][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.242486][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.264849][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.268811][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.278943][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.291560][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.341172][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.347989][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.351479][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.322736][ T61] Bluetooth: hci3: command tx timeout [ 101.471078][ T61] Bluetooth: hci1: command tx timeout [ 101.552574][ T61] Bluetooth: hci0: command tx timeout [ 101.552599][ T5608] Bluetooth: hci2: command tx timeout [ 101.786724][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.787004][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.789402][ T5600] bridge_slave_0: entered allmulticast mode [ 101.804560][ T5600] bridge_slave_0: entered promiscuous mode [ 101.873402][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.873675][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.873905][ T5600] bridge_slave_1: entered allmulticast mode [ 101.877933][ T5600] bridge_slave_1: entered promiscuous mode [ 101.972217][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.972539][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.972745][ T5599] bridge_slave_0: entered allmulticast mode [ 101.976354][ T5599] bridge_slave_0: entered promiscuous mode [ 101.979249][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.979618][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.979894][ T5601] bridge_slave_0: entered allmulticast mode [ 101.990474][ T5601] bridge_slave_0: entered promiscuous mode [ 102.069993][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.072126][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.073306][ T5599] bridge_slave_1: entered allmulticast mode [ 102.083298][ T5599] bridge_slave_1: entered promiscuous mode [ 102.097772][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.098033][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.098511][ T5601] bridge_slave_1: entered allmulticast mode [ 102.106608][ T5601] bridge_slave_1: entered promiscuous mode [ 102.151036][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.231163][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.231503][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.231726][ T5597] bridge_slave_0: entered allmulticast mode [ 102.234348][ T5597] bridge_slave_0: entered promiscuous mode [ 102.248061][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.311467][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.311824][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.312127][ T5597] bridge_slave_1: entered allmulticast mode [ 102.314793][ T5597] bridge_slave_1: entered promiscuous mode [ 102.364333][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.376580][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.431515][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.436263][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.477746][ T5600] team0: Port device team_slave_0 added [ 102.526369][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.538879][ T5600] team0: Port device team_slave_1 added [ 102.588724][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.624355][ T5599] team0: Port device team_slave_0 added [ 102.638831][ T5601] team0: Port device team_slave_0 added [ 102.692704][ T5601] team0: Port device team_slave_1 added [ 102.696322][ T5599] team0: Port device team_slave_1 added [ 102.724629][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.724646][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.724666][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.800604][ T5597] team0: Port device team_slave_0 added [ 102.802738][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.802750][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.802770][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.884262][ T5597] team0: Port device team_slave_1 added [ 102.904053][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.904066][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.904085][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.906596][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.906609][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.906628][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.005611][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.005625][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.005646][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.007841][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.007854][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.007873][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.124097][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.124110][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.124130][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.187127][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.187140][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.187160][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.391968][ T61] Bluetooth: hci3: command tx timeout [ 103.540178][ T5600] hsr_slave_0: entered promiscuous mode [ 103.542461][ T5600] hsr_slave_1: entered promiscuous mode [ 103.550814][ T61] Bluetooth: hci1: command tx timeout [ 103.630548][ T61] Bluetooth: hci2: command tx timeout [ 103.630583][ T61] Bluetooth: hci0: command tx timeout [ 103.656216][ T5601] hsr_slave_0: entered promiscuous mode [ 103.658077][ T5601] hsr_slave_1: entered promiscuous mode [ 103.659760][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 103.659862][ T5601] Cannot create hsr debugfs directory [ 103.689786][ T5599] hsr_slave_0: entered promiscuous mode [ 103.696254][ T5599] hsr_slave_1: entered promiscuous mode [ 103.697794][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 103.697824][ T5599] Cannot create hsr debugfs directory [ 103.805555][ T5597] hsr_slave_0: entered promiscuous mode [ 103.807303][ T5597] hsr_slave_1: entered promiscuous mode [ 103.808735][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 103.808759][ T5597] Cannot create hsr debugfs directory [ 104.794334][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.851880][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.865564][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.885902][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.901330][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.947451][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.979265][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.007108][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.130964][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.159501][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.178659][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.216609][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.218970][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.258188][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.291572][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.335298][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.470234][ T5608] Bluetooth: hci3: command tx timeout [ 105.505355][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.538439][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.558604][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.609068][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.629153][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.631561][ T5608] Bluetooth: hci1: command tx timeout [ 105.665081][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.697894][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.710491][ T5608] Bluetooth: hci0: command tx timeout [ 105.710528][ T5608] Bluetooth: hci2: command tx timeout [ 105.736239][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.946973][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.988261][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.009234][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.046883][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.060295][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.107826][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.128764][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.159722][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.222130][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.344989][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.405994][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.406198][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.449637][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.515155][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.515329][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.642059][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.734250][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.736346][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.736712][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.793055][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.794445][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.924246][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.004065][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.004340][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.040420][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.094804][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.094959][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.223001][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.321332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.321510][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.394381][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.394547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.550297][ T61] Bluetooth: hci3: command tx timeout [ 107.710269][ T61] Bluetooth: hci1: command tx timeout [ 107.800401][ T5608] Bluetooth: hci0: command tx timeout [ 107.800454][ T61] Bluetooth: hci2: command tx timeout [ 108.458621][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.936919][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.018756][ T5600] veth0_vlan: entered promiscuous mode [ 109.141137][ T5600] veth1_vlan: entered promiscuous mode [ 109.259701][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.298766][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.389868][ T5599] veth0_vlan: entered promiscuous mode [ 109.430274][ T5600] veth0_macvtap: entered promiscuous mode [ 109.464052][ T5600] veth1_macvtap: entered promiscuous mode [ 109.485475][ T5599] veth1_vlan: entered promiscuous mode [ 109.587926][ T5597] veth0_vlan: entered promiscuous mode [ 109.623769][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.626112][ T5601] veth0_vlan: entered promiscuous mode [ 109.657738][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.679675][ T5597] veth1_vlan: entered promiscuous mode [ 109.712645][ T5601] veth1_vlan: entered promiscuous mode [ 109.728592][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.758421][ T194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.772123][ T194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.802493][ T5599] veth0_macvtap: entered promiscuous mode [ 109.805344][ T194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.895396][ T5599] veth1_macvtap: entered promiscuous mode [ 110.187279][ T5597] veth0_macvtap: entered promiscuous mode [ 110.237156][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.260775][ T5601] veth0_macvtap: entered promiscuous mode [ 110.273141][ T5597] veth1_macvtap: entered promiscuous mode [ 110.310989][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.343680][ T5601] veth1_macvtap: entered promiscuous mode [ 110.383768][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.383790][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.397787][ T194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.437337][ T194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.459453][ T194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.475427][ T194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.513210][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.583752][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.616651][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.693058][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.727708][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.727729][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.846786][ T194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.957053][ T194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.995349][ T194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.049785][ T194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075513][ T194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.101755][ T194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.106914][ T194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.106961][ T194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.603368][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.603389][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.367298][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.367318][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.671846][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.718292][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.718314][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.795876][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.795897][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.937804][ T32] usb 3-1: config index 0 descriptor too short (expected 46, got 44) [ 112.937836][ T32] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 112.938033][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 112.938061][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 112.938086][ T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 112.938121][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.938169][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 112.938194][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.134641][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.134661][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.223966][ T5745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.228120][ T5745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.228395][ T5745] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.283524][ T5674] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.331905][ T32] usb 3-1: probing VID:PID(0424:012C) [ 113.398386][ T32] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 113.398421][ T32] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 113.398442][ T32] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 113.398461][ T32] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 113.512152][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.512174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.589266][ T5674] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 113.589297][ T5674] usb 2-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 113.589319][ T5674] usb 2-1: Product: syz [ 113.589333][ T5674] usb 2-1: Manufacturer: syz [ 113.589348][ T5674] usb 2-1: SerialNumber: syz [ 113.627619][ T32] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 113.822241][ T5674] pvrusb2: Hardware description: Terratec Grabster AV400 [ 113.822265][ T5674] pvrusb2: ********** [ 113.822273][ T5674] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 113.822286][ T5674] pvrusb2: Important functionality might not be entirely working. [ 113.822296][ T5674] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 113.822308][ T5674] pvrusb2: ********** [ 114.902025][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.108491][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.126627][ T32] usb 4-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 115.126656][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.126675][ T32] usb 4-1: Product: syz [ 115.126689][ T32] usb 4-1: Manufacturer: syz [ 115.126703][ T32] usb 4-1: SerialNumber: syz [ 115.302864][ T199] usb 3-1: USB disconnect, device number 2 [ 115.526150][ T2397] pvrusb2: Failed to submit write-control URB status=-2 [ 115.526174][ T2397] pvrusb2: Device being rendered inoperable [ 115.552464][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 115.552480][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 115.787989][ T5762] usb 4-1: Unknown version 0x0000 [ 115.872748][ T5674] usb 2-1: USB disconnect, device number 2 [ 116.060617][ T5325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.230295][ T5325] usb 1-1: Using ep0 maxpacket: 8 [ 116.248369][ T5325] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 116.248400][ T5325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.496761][ T5325] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 002 [ 116.559939][ T5681] usb 4-1: USB disconnect, device number 2 [ 116.942312][ T199] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.303262][ T199] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 117.303285][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.303300][ T199] usb 3-1: Product: syz [ 117.303310][ T199] usb 3-1: Manufacturer: syz [ 117.303362][ T199] usb 3-1: SerialNumber: syz [ 117.921408][ T5778] lo speed is unknown, defaulting to 1000 [ 117.973260][ T5778] lo speed is unknown, defaulting to 1000 [ 118.380386][ T5778] lo speed is unknown, defaulting to 1000 [ 118.681548][ T5778] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.681607][ T5778] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.681659][ T5778] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.763096][ T5325] i2c i2c-1: failure reading functionality [ 118.900408][ T5778] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.069697][ T199] redrat3 3-1:1.0: Problem fetching firmware ID [ 119.118671][ T5778] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.398262][ T5325] i2c i2c-1: connected i2c-tiny-usb device [ 119.417308][ T5789] PM: hibernation: hibernation entry [ 119.443527][ T199] redrat3 3-1:1.0: Failed to read timeout from hardware [ 119.486626][ T5325] usb 1-1: USB disconnect, device number 2 [ 119.573466][ T199] rc_core: IR keymap rc-hauppauge not found [ 119.573484][ T199] Registered IR keymap rc-empty [ 119.725999][ T199] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 119.927377][ T199] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input5 [ 120.194804][ T199] redrat3 3-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 120.195263][ T199] redrat3 3-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 120.195312][ T199] redrat3 3-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 120.387653][ T199] redrat3 3-1:1.0: probe with driver redrat3 failed with error -5 [ 120.553808][ T199] usb 3-1: USB disconnect, device number 3 [ 120.568390][ T4959] ================================================================== [ 120.568404][ T4959] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 120.568436][ T4959] Read of size 1 at addr ffff888060c63748 by task udevd/4959 [ 120.568452][ T4959] [ 120.568480][ T4959] CPU: 1 UID: 0 PID: 4959 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.568502][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.568520][ T4959] Call Trace: [ 120.568529][ T4959] [ 120.568536][ T4959] dump_stack_lvl+0xe8/0x150 [ 120.568562][ T4959] print_address_description+0x55/0x1e0 [ 120.568592][ T4959] ? string+0x216/0x2d0 [ 120.568617][ T4959] print_report+0x58/0x70 [ 120.568642][ T4959] kasan_report+0x117/0x150 [ 120.568662][ T4959] ? string+0x216/0x2d0 [ 120.568689][ T4959] string+0x216/0x2d0 [ 120.568714][ T4959] vsnprintf+0x74a/0xef0 [ 120.568742][ T4959] add_uevent_var+0x1ce/0x460 [ 120.568773][ T4959] ? __pfx_add_uevent_var+0x10/0x10 [ 120.568799][ T4959] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.568818][ T4959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.568837][ T4959] ? mutex_lock_nested+0x152/0x1d0 [ 120.568862][ T4959] ? rc_dev_uevent+0x34/0x1a0 [ 120.568883][ T4959] rc_dev_uevent+0x164/0x1a0 [ 120.568901][ T4959] dev_uevent+0x53a/0x870 [ 120.568929][ T4959] ? __pfx_dev_uevent+0x10/0x10 [ 120.568954][ T4959] ? __kasan_kmalloc+0x93/0xb0 [ 120.568982][ T4959] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 120.569011][ T4959] ? uevent_show+0x15c/0x310 [ 120.569040][ T4959] uevent_show+0x1a0/0x310 [ 120.569069][ T4959] dev_attr_show+0x58/0xc0 [ 120.569103][ T4959] ? __pfx_dev_attr_show+0x[ 120.569103][ T4959] ? __pfx_dev_attr_show+0x10/0x10 [ 120.569130][ T4959] sysfs_kf_seq_show+0x331/0x490 [ 120.569164][ T4959] seq_read_iter+0x464/0xcb0 [ 120.569197][ T4959] vfs_read+0x59e/0xa90 [ 120.569223][ T4959] ? __pfx_vfs_read+0x10/0x10 [ 120.569245][ T4959] ? do_sys_openat2+0x14e/0x200 [ 120.569280][ T4959] ksys_read+0x156/0x270 [ 120.569300][ T4959] ? __pfx_ksys_read+0x10/0x10 [ 120.569324][ T4959] do_syscall_64+0x17b/0x530 [ 120.569343][ T4959] ? irqentry_exit+0x10f/0x8f0 [ 120.569361][ T4959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.569381][ T4959] ? clear_bhb_loop+0x40/0x90 [ 120.569404][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.569430][ T4959] RIP: 0033:0x7fc5cf300407 [ 120.569457][ T4959] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 120.569476][ T4959] RSP: 002b:00007fffffbab700 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 120.569504][ T4959] RAX: ffffffffffffffda RBX: 00007fc5cf212880 RCX: 00007fc5cf300407 [ 120.569520][ T4959] RDX: 0000000000001000 RSI: 00005562fb334a80 RDI: 000000000000000c [ 120.569535][ T4959] RBP: 00007fc5cf448ff0 R08: 0000000000000000 R09: 0000000000000000 [ 120.569549][ T4959] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 120.569562][ T4959] R13: 00007fc5cf448ea0 R14: 0000000000000000 R15: 00005562fb311280 [ 120.569585][ T4959] [ 120.569593][ T4959] [ 120.569598][ T4959] Allocated by task 199: [ 120.569608][ T4959] kasan_save_track+0x3e/0x80 [ 120.569637][ T4959] __kasan_kmalloc+0x93/0xb0 [ 120.569665][ T4959] __kmalloc_cache_noprof+0x3cd/0x670 [ 120.569695][ T4959] redrat3_dev_probe+0x477/0x2570 [ 120.569725][ T4959] usb_probe_interface+0x788/0xe50 [ 120.569750][ T4959] really_probe+0x254/0xae0 [ 120.569773][ T4959] __driver_probe_device+0x1e8/0x360 [ 120.569796][ T4959] driver_probe_device+0x4f/0x240 [ 120.569819][ T4959] __device_attach_driver+0x270/0x410 [ 120.569842][ T4959] bus_for_each_drv+0x25b/0x2f0 [ 120.569872][ T4959] __device_attach+0x2c7/0x450 [ 120.569893][ T4959] device_initial_probe+0xa1/0xd0 [ 120.569915][ T4959] bus_probe_device+0x12d/0x220 [ 120.569942][ T4959] device_add+0x7d7/0xb80 [ 120.569961][ T4959] usb_set_configuration+0x1ad8/0x2180 [ 120.569985][ T4959] usb_generic_driver_probe+0x8d/0x150 [ 120.570008][ T4959] usb_probe_device+0x1c3/0x3b0 [ 120.570033][ T4959] really_probe+0x254/0xae0 [ 120.570056][ T4959] __driver_probe_device+0x1e8/0x360 [ 120.570078][ T4959] driver_probe_device+0x4f/0x240 [ 120.570111][ T4959] __device_attach_driver+0x270/0x410 [ 120.570133][ T4959] bus_for_each_drv+0x25b/0x2f0 [ 120.570162][ T4959] __device_attach+0x2c7/0x450 [ 120.570183][ T4959] device_initial_probe+0xa1/0xd0 [ 120.570205][ T4959] bus_probe_device+0x12d/0x220 [ 120.570234][ T4959] device_add+0x7d7/0xb80 [ 120.570253][ T4959] usb_new_device+0x98d/0x1610 [ 120.570272][ T4959] hub_event+0x28cf/0x4cf0 [ 120.570295][ T4959] process_one_work+0xaaf/0x1480 [ 120.570314][ T4959] worker_thread+0xb05/0x10d0 [ 120.570334][ T4959] kthread+0x388/0x470 [ 120.570358][ T4959] ret_from_fork+0x514/0xb70 [ 120.570385][ T4959] ret_from_fork_asm+0x1a/0x30 [ 120.570411][ T4959] [ 120.570416][ T4959] Freed by task 199: [ 120.570425][ T4959] kasan_save_track+0x3e/0x80 [ 120.570452][ T4959] kasan_save_free_info+0x40/0x50 [ 120.570473][ T4959] __kasan_slab_free+0x5c/0x80 [ 120.570499][ T4959] kfree+0x1c5/0x6c0 [ 120.570521][ T4959] redrat3_dev_probe+0x1bf4/0x2570 [ 120.570550][ T4959] usb_probe_interface+0x788/0xe50 [ 120.570578][ T4959] really_probe+0x254/0xae0 [ 120.570602][ T4959] __driver_probe_device+0x1e8/0x360 [ 120.570624][ T4959] driver_probe_device+0x4f/0x240 [ 120.570649][ T4959] __device_attach_driver+0x270/0x410 [ 120.570672][ T4959] bus_for_each_drv+0x25b/0x2f0 [ 120.570699][ T4959] __device_attach+0x2c7/0x450 [ 120.570719][ T4959] device_initial_probe+0xa1/0xd0 [ 120.570741][ T4959] bus_probe_device+0x12d/0x220 [ 120.570770][ T4959] device_add+0x7d7/0xb80 [ 120.570788][ T4959] usb_set_configuration+0x1ad8/0x2180 [ 120.570811][ T4959] usb_generic_driver_probe+0x8d/0x150 [ 120.570835][ T4959] usb_probe_device+0x1c3/0x3b0 [ 120.570860][ T4959] really_probe+0x254/0xae0 [ 120.570882][ T4959] __driver_probe_device+0x1e8/0x360 [ 120.570904][ T4959] driver_probe_device+0x4f/0x240 [ 120.570927][ T4959] __device_attach_driver+0x270/0x410 [ 120.570950][ T4959] bus_for_each_drv+0x25b/0x2f0 [ 120.570978][ T4959] __device_attach+0x2c7/0x450 [ 120.570999][ T4959] device_initial_probe+0xa1/0xd0 [ 120.571022][ T4959] bus_probe_device+0x12d/0x220 [ 120.571051][ T4959] device_add+0x7d7/0xb80 [ 120.571070][ T4959] usb_new_device+0x98d/0x1610 [ 120.571089][ T4959] hub_event+0x28cf/0x4cf0 [ 120.571119][ T4959] process_one_work+0xaaf/0x1480 [ 120.571138][ T4959] worker_thread+0xb05/0x10d0 [ 120.571158][ T4959] kthread+0x388/0x470 [ 120.571183][ T4959] ret_from_fork+0x514/0xb70 [ 120.571206][ T4959] ret_from_fork_asm+0x1a/0x30 [ 120.571232][ T4959] [ 120.571237][ T4959] The buggy address belongs to the object at ffff888060c63000 [ 120.571237][ T4959] which belongs to the cache kmalloc-2k of size 2048 [ 120.571256][ T4959] The buggy address is located 1864 bytes inside of [ 120.571256][ T4959] freed 2048-byte region [ffff888060c63000, ffff888060c63800) [ 120.571277][ T4959] [ 120.571283][ T4959] The buggy address belongs to the physical page: [ 120.571301][ T4959] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60c60 [ 120.571319][ T4959] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.571337][ T4959] flags: 0x80000000000040(head|node=0|zone=1) [ 120.571363][ T4959] page_type: f5(slab) [ 120.571382][ T4959] raw: 0080000000000040 ffff88813fe3c000 dead000000000100 dead000000000122 [ 120.571400][ T4959] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 120.571420][ T4959] head: 0080000000000040 ffff88813fe3c000 dead000000000100 dead000000000122 [ 120.571439][ T4959] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 120.571458][ T4959] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 120.571475][ T4959] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 120.571486][ T4959] page dumped because: kasan: bad access detected [ 120.571505][ T4959] page_owner tracks the page as allocated [ 120.571512][ T4959] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 117542994478 [ 120.571546][ T4959] post_alloc_hook+0x1f9/0x250 [ 120.571573][ T4959] get_page_from_freelist+0x264c/0x26c0 [ 120.571606][ T4959] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 120.571638][ T4959] allocate_slab+0x7c/0x5e0 [ 120.571659][ T4959] refill_objects+0x2d8/0x350 [ 120.571682][ T4959] __pcs_replace_empty_main+0x330/0x690 [ 120.571704][ T4959] __kmalloc_noprof+0x543/0x790 [ 120.571731][ T4959] ___neigh_create+0x719/0x23a0 [ 120.571754][ T4959] ip6_finish_output2+0x6d6/0x1410 [ 120.571772][ T4959] ip6_output+0x337/0x540 [ 120.571800][ T4959] ndisc_send_skb+0xcb2/0x1650 [ 120.571821][ T4959] addrconf_dad_completed+0x6e3/0xe60 [ 120.571850][ T4959] addrconf_dad_work+0xdda/0x16e0 [ 120.571875][ T4959] process_one_work+0xaaf/0x1480 [ 120.571893][ T4959] worker_thread+0xb05/0x10d0 [ 120.571913][ T4959] kthread+0x388/0x470 [ 120.571938][ T4959] page last free pid 5580 tgid 5580 ts 117491932382 stack trace: [ 120.571953][ T4959] __free_frozen_pages+0x1185/0x1270 [ 120.571981][ T4959] __folio_put+0x30f/0x3c0 [ 120.572011][ T4959] skb_release_data+0x573/0xab0 [ 120.572039][ T4959] __kfree_skb+0x5d/0x210 [ 120.572065][ T4959] tcp_ack+0x28f7/0x8050 [ 120.572098][ T4959] tcp_rcv_established+0xcae/0x2910 [ 120.572126][ T4959] tcp_v4_do_rcv+0x959/0x13f0 [ 120.572144][ T4959] __release_sock+0x28e/0x3d0 [ 120.572162][ T4959] release_sock+0x1be/0x290 [ 120.572185][ T4959] tcp_sendmsg+0x39/0x50 [ 120.572213][ T4959] sock_sendmsg_nosec+0x10e/0x180 [ 120.572234][ T4959] sock_write_iter+0x2e4/0x3f0 [ 120.572253][ T4959] vfs_write+0x61e/0xbb0 [ 120.572274][ T4959] ksys_write+0x156/0x270 [ 120.572297][ T4959] do_syscall_64+0x17b/0x530 [ 120.572315][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.572335][ T4959] [ 120.572340][ T4959] Memory state around the buggy address: [ 120.572352][ T4959] ffff888060c63600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.572366][ T4959] ffff888060c63680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.572380][ T4959] >ffff888060c63700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.572391][ T4959] ^ [ 120.572402][ T4959] ffff888060c63780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.572416][ T4959] ffff888060c63800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.572427][ T4959] ================================================================== [ 120.746432][ T4959] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.746503][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.746570][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.746605][ T4959] Call Trace: [ 120.746636][ T4959] [ 120.746659][ T4959] vpanic+0x56c/0xa60 [ 120.746734][ T4959] ? __pfx_vpanic+0x10/0x10 [ 120.746788][ T4959] ? __pfx___schedule+0x10/0x10 [ 120.746878][ T4959] panic+0xc5/0xd0 [ 120.746933][ T4959] ? __pfx_panic+0x10/0x10 [ 120.746974][ T4959] ? preempt_schedule_thunk+0x16/0x40 [ 120.747047][ T4959] ? string+0x216/0x2d0 [ 120.747116][ T4959] check_panic_on_warn+0x89/0xb0 [ 120.747202][ T4959] ? string+0x216/0x2d0 [ 120.747277][ T4959] end_report+0x73/0x170 [ 120.747333][ T4959] ? string+0x216/0x2d0 [ 120.747401][ T4959] kasan_report+0x128/0x150 [ 120.747468][ T4959] ? string+0x216/0x2d0 [ 120.747546][ T4959] string+0x216/0x2d0 [ 120.747625][ T4959] vsnprintf+0x74a/0xef0 [ 120.747680][ T4959] add_uevent_var+0x1ce/0x460 [ 120.747752][ T4959] ? __pfx_add_uevent_var+0x10/0x10 [ 120.747864][ T4959] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.747920][ T4959] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.747971][ T4959] ? mutex_lock_nested+0x152/0x1d0 [ 120.748046][ T4959] ? rc_dev_uevent+0x34/0x1a0 [ 120.748111][ T4959] rc_dev_uevent+0x164/0x1a0 [ 120.748168][ T4959] dev_uevent+0x53a/0x870 [ 120.748266][ T4959] ? __pfx_dev_uevent+0x10/0x10 [ 120.748356][ T4959] ? __kasan_kmalloc+0x93/0xb0 [ 120.748452][ T4959] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 120.748541][ T4959] ? uevent_show+0x15c/0x310 [ 120.748628][ T4959] uevent_show+0x1a0/0x310 [ 120.748707][ T4959] dev_attr_show+0x58/0xc0 [ 120.748784][ T4959] ? __pfx_dev_attr_show+0x10/0x10 [ 120.748862][ T4959] sysfs_kf_seq_show+0x331/0x490 [ 120.748959][ T4959] seq_read_iter+0x464/0xcb0 [ 120.749069][ T4959] vfs_read+0x59e/0xa90 [ 120.749153][ T4959] ? __pfx_vfs_read+0x10/0x10 [ 120.749193][ T4959] ? do_sys_openat2+0x14e/0x200 [ 120.749317][ T4959] ksys_read+0x156/0x270 [ 120.749384][ T4959] ? __pfx_ksys_read+0x10/0x10 [ 120.749462][ T4959] do_syscall_64+0x17b/0x530 [ 120.749518][ T4959] ? irqentry_exit+0x10f/0x8f0 [ 120.749573][ T4959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.749632][ T4959] ? clear_bhb_loop+0x40/0x90 [ 120.749699][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.749756][ T4959] RIP: 0033:0x7fc5cf300407 [ 120.749810][ T4959] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 120.749856][ T4959] RSP: 002b:00007fffffbab700 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 120.749921][ T4959] RAX: ffffffffffffffda RBX: 00007fc5cf212880 RCX: 00007fc5cf300407 [ 120.749960][ T4959] RDX: 0000000000001000 RSI: 00005562fb334a80 RDI: 000000000000000c [ 120.749995][ T4959] RBP: 00007fc5cf448ff0 R08: 0000000000000000 R09: 0000000000000000 [ 120.750024][ T4959] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 120.750036][ T4959] R13: 00007fc5cf448ea0 R14: 0000000000000000 R15: 00005562fb311280 [ 120.750058][ T4959] [ 120.750659][ T4959] Kernel Offset: disabled