last executing test programs: 4.398019079s ago: executing program 0 (id=241): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x0, 0xa, 0x6}) 4.254442617s ago: executing program 0 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 4.021483891s ago: executing program 0 (id=247): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070"], 0x40}}, 0x0) 3.758601497s ago: executing program 0 (id=251): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) 3.580474097s ago: executing program 0 (id=254): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.37463895s ago: executing program 3 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 3.214200469s ago: executing program 2 (id=257): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x80}]}, 0x10) 3.183842201s ago: executing program 3 (id=258): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x3, 0x1, 0x101, 0x800}) 2.978212813s ago: executing program 2 (id=260): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) 2.940794575s ago: executing program 3 (id=261): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r0, 0x0, 0x90, 0x0, 0x0) 2.880700059s ago: executing program 1 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.818355732s ago: executing program 3 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x18, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 2.810932733s ago: executing program 2 (id=264): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x34, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.737039447s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008f9000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000008000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) 2.633880913s ago: executing program 2 (id=266): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x54, 0x12, 0x1, 0x0, 0x0, {0x15, 0x0, 0x0, 0x1f, {0x0, 0x4e22, [0x0, 0xffffffff, 0x0, 0x1], [0x0, 0xfffffffc], 0x0, [0xfffffffe, 0x3]}, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "1130ff00"}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) 2.584564337s ago: executing program 3 (id=267): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x210, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 2.570282137s ago: executing program 1 (id=268): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 2.414362326s ago: executing program 2 (id=269): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.313532662s ago: executing program 1 (id=270): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r0, 0x1000, 0x3) 1.448104724s ago: executing program 1 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x240}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) 468.392362ms ago: executing program 0 (id=272): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 468.304432ms ago: executing program 3 (id=273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock2(&(0x7f00000e4000/0x3000)=nil, 0x3000, 0x1) 198.613328ms ago: executing program 1 (id=274): r0 = mq_open(&(0x7f0000000440)='syztnl1\x00', 0x41, 0x30, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x9, 0x0) 0s ago: executing program 2 (id=275): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 81.762442][ T5757] cgroup: Unknown subsys name 'net' [ 81.900196][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.598081][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.326466][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.341686][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.351227][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.359218][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.368105][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.376026][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.383588][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.389858][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.398270][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.406900][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.416545][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.423168][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.428791][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.437700][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.440184][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.447950][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.455558][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.468729][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.473655][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.477050][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.487245][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.497413][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.510317][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.521268][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.009368][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.114429][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.138367][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 86.222152][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.230432][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.238603][ T5769] bridge_slave_0: entered allmulticast mode [ 86.246937][ T5769] bridge_slave_0: entered promiscuous mode [ 86.283850][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.293644][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.300984][ T5769] bridge_slave_1: entered allmulticast mode [ 86.308066][ T5769] bridge_slave_1: entered promiscuous mode [ 86.340516][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 86.368424][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.411673][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.453385][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.460769][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.468064][ T5770] bridge_slave_0: entered allmulticast mode [ 86.476393][ T5770] bridge_slave_0: entered promiscuous mode [ 86.533131][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.540309][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.548622][ T5770] bridge_slave_1: entered allmulticast mode [ 86.556157][ T5770] bridge_slave_1: entered promiscuous mode [ 86.578245][ T5769] team0: Port device team_slave_0 added [ 86.587009][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.594277][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.602480][ T5768] bridge_slave_0: entered allmulticast mode [ 86.609617][ T5768] bridge_slave_0: entered promiscuous mode [ 86.624145][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.632140][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.639411][ T5768] bridge_slave_1: entered allmulticast mode [ 86.646802][ T5768] bridge_slave_1: entered promiscuous mode [ 86.666713][ T5769] team0: Port device team_slave_1 added [ 86.704556][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.717762][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.739670][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.746713][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.774038][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.828668][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.835819][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.861933][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.884206][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.898148][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.907603][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.915329][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.922718][ T5771] bridge_slave_0: entered allmulticast mode [ 86.929961][ T5771] bridge_slave_0: entered promiscuous mode [ 86.979191][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.989851][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.997786][ T5771] bridge_slave_1: entered allmulticast mode [ 87.007962][ T5771] bridge_slave_1: entered promiscuous mode [ 87.029163][ T5770] team0: Port device team_slave_0 added [ 87.038566][ T5770] team0: Port device team_slave_1 added [ 87.048224][ T5768] team0: Port device team_slave_0 added [ 87.093463][ T5769] hsr_slave_0: entered promiscuous mode [ 87.100137][ T5769] hsr_slave_1: entered promiscuous mode [ 87.109224][ T5768] team0: Port device team_slave_1 added [ 87.188901][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.200856][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.232066][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.284650][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.294302][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.320637][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.341106][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.351522][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.358514][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.386025][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.428648][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.436821][ T5084] Bluetooth: hci2: command tx timeout [ 87.437951][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.474114][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.491830][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.510762][ T5084] Bluetooth: hci3: command tx timeout [ 87.590903][ T5776] Bluetooth: hci0: command tx timeout [ 87.597043][ T5084] Bluetooth: hci1: command tx timeout [ 87.627146][ T5770] hsr_slave_0: entered promiscuous mode [ 87.639039][ T5770] hsr_slave_1: entered promiscuous mode [ 87.646341][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.659876][ T5770] Cannot create hsr debugfs directory [ 87.678322][ T5771] team0: Port device team_slave_0 added [ 87.739103][ T5771] team0: Port device team_slave_1 added [ 87.782017][ T5768] hsr_slave_0: entered promiscuous mode [ 87.788932][ T5768] hsr_slave_1: entered promiscuous mode [ 87.795478][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.803204][ T5768] Cannot create hsr debugfs directory [ 87.900441][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.907610][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.934116][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.969524][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.976812][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.003334][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.170460][ T5771] hsr_slave_0: entered promiscuous mode [ 88.178090][ T5771] hsr_slave_1: entered promiscuous mode [ 88.185229][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.193164][ T5771] Cannot create hsr debugfs directory [ 88.307053][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.328165][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.371891][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.383986][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.514773][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.531853][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.557133][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.575569][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.649746][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.662811][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.674198][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.686495][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.808533][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.832195][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.847476][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.859114][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.957363][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.012874][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.065189][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.073164][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.098614][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.106019][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.156541][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.188654][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.208604][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.239141][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.246658][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.300303][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.339658][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.346968][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.378302][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.385554][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.438570][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.445979][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.460200][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.512138][ T5084] Bluetooth: hci2: command tx timeout [ 89.591725][ T5084] Bluetooth: hci3: command tx timeout [ 89.637700][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.670817][ T5776] Bluetooth: hci0: command tx timeout [ 89.677038][ T5084] Bluetooth: hci1: command tx timeout [ 89.717763][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.725010][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.736390][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.743637][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.821538][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.037064][ T5769] veth0_vlan: entered promiscuous mode [ 90.084108][ T5769] veth1_vlan: entered promiscuous mode [ 90.149115][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.249035][ T5769] veth0_macvtap: entered promiscuous mode [ 90.277926][ T5769] veth1_macvtap: entered promiscuous mode [ 90.300517][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.362268][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.415629][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.436002][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445680][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.455362][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464624][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.479168][ T5768] veth0_vlan: entered promiscuous mode [ 90.499848][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.522791][ T5768] veth1_vlan: entered promiscuous mode [ 90.596632][ T5770] veth0_vlan: entered promiscuous mode [ 90.653819][ T5770] veth1_vlan: entered promiscuous mode [ 90.717195][ T5768] veth0_macvtap: entered promiscuous mode [ 90.723746][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.739922][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.773075][ T5771] veth0_vlan: entered promiscuous mode [ 90.798838][ T5771] veth1_vlan: entered promiscuous mode [ 90.811691][ T5768] veth1_macvtap: entered promiscuous mode [ 90.856609][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.866699][ T5770] veth0_macvtap: entered promiscuous mode [ 90.877252][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.899744][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.916846][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.929521][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.940383][ T5770] veth1_macvtap: entered promiscuous mode [ 90.967187][ T5771] veth0_macvtap: entered promiscuous mode [ 90.977254][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.991246][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.003275][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.056965][ T5771] veth1_macvtap: entered promiscuous mode [ 91.079812][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.096589][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.107995][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.136035][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.147908][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.201729][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216576][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.225786][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.239534][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.279305][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.303332][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.323108][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.340453][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.355002][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.387674][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413050][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442385][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.452248][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.476159][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.489390][ T5867] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 91.500305][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.510322][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.524380][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.538048][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.550420][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.568713][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.596642][ T5084] Bluetooth: hci2: command tx timeout [ 91.654680][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.672548][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.676272][ T5084] Bluetooth: hci3: command tx timeout [ 91.684726][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.700965][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.711292][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.722660][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.734780][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.752186][ T5084] Bluetooth: hci1: command tx timeout [ 91.757690][ T5084] Bluetooth: hci0: command tx timeout [ 91.825765][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.839228][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.848562][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.857486][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.914206][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.929725][ T5874] syz.2.9[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.943922][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.078926][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.106598][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.175677][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.202123][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.249445][ T8] cfg80211: failed to load regulatory.db [ 92.304658][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.346407][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.395168][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.417017][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.484248][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.502957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.902023][ T5874] loop2: detected capacity change from 0 to 32768 [ 92.920490][ T5874] ======================================================= [ 92.920490][ T5874] WARNING: The mand mount option has been deprecated and [ 92.920490][ T5874] and is ignored by this kernel. Remove the mand [ 92.920490][ T5874] option from the mount to silence this warning. [ 92.920490][ T5874] ======================================================= [ 93.059637][ T5874] JBD2: Ignoring recovery information on journal [ 93.121380][ T5772] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.173188][ T5874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.296507][ T5874] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923141632 [ 93.296569][ T5892] bridge1: entered promiscuous mode [ 93.321326][ T5772] usb 1-1: Using ep0 maxpacket: 32 [ 93.327399][ T5892] bridge1: entered allmulticast mode [ 93.332234][ T5874] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 93.342957][ T5155] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.355057][ T5772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.367397][ T5772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.378625][ T5874] OCFS2: File system is now read-only. [ 93.384528][ T5772] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.393686][ T5874] (syz.2.9,5874,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 93.410333][ T5874] (syz.2.9,5874,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 93.418404][ T5874] (syz.2.9,5874,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 93.428186][ T5874] (syz.2.9,5874,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 93.442372][ T5772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.452894][ T5874] (syz.2.9,5874,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 93.460974][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.461022][ T5772] usb 1-1: Product: syz [ 93.461038][ T5772] usb 1-1: Manufacturer: syz [ 93.489444][ T5772] usb 1-1: SerialNumber: syz [ 93.509320][ T5874] (syz.2.9,5874,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 93.536860][ T5874] (syz.2.9,5874,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 93.542359][ T5155] usb 4-1: Using ep0 maxpacket: 32 [ 93.554882][ T5874] (syz.2.9,5874,1):ocfs2_mknod:385 ERROR: status = -30 [ 93.565529][ T5874] (syz.2.9,5874,1):ocfs2_mknod:502 ERROR: status = -30 [ 93.568344][ T5772] cdc_ncm 1-1:1.0: skipping garbage [ 93.587087][ T5874] (syz.2.9,5874,1):ocfs2_mkdir:659 ERROR: status = -30 [ 93.601029][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 93.617493][ T5772] cdc_ncm 1-1:1.0: skipping garbage [ 93.623686][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 93.641405][ T5772] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 93.651221][ T5772] cdc_ncm 1-1:1.0: bind() failure [ 93.662637][ T5155] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 93.682025][ T5084] Bluetooth: hci2: command tx timeout [ 93.689235][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.717517][ T5155] usb 4-1: Product: syz [ 93.729289][ T5155] usb 4-1: Manufacturer: syz [ 93.745757][ T5155] usb 4-1: SerialNumber: syz [ 93.752803][ T5084] Bluetooth: hci3: command tx timeout [ 93.776787][ T5155] usb 4-1: config 0 descriptor?? [ 93.831412][ T5084] Bluetooth: hci0: command tx timeout [ 93.836993][ T5776] Bluetooth: hci1: command tx timeout [ 93.845777][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 93.866583][ T5155] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 93.898676][ T787] usb 1-1: USB disconnect, device number 2 [ 94.123857][ T5155] usb 4-1: USB disconnect, device number 2 [ 94.271008][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.461491][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 94.474142][ T5868] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.488197][ T5868] usb 2-1: config 179 has no interface number 0 [ 94.499288][ T5868] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 94.512177][ T5868] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 94.529035][ T5868] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 94.541753][ T5868] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 94.563355][ T5906] tmpfs: Bad value for 'mpol' [ 94.589252][ T5868] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.610429][ T5868] usb 2-1: config 179 interface 65 has no altsetting 0 [ 94.618094][ T5868] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 94.636530][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.691107][ T5868] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 94.739009][ T5124] input input6: unable to receive magic message: -110 [ 94.771357][ T27] audit: type=1326 audit(1769469083.711:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 94.778124][ T5124] input input6: unable to receive magic message: -32 [ 94.779098][ T27] audit: type=1326 audit(1769469083.721:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 94.783857][ T27] audit: type=1326 audit(1769469083.731:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 94.783914][ T27] audit: type=1326 audit(1769469083.731:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 94.791905][ T5124] input input6: unable to receive magic message: -32 [ 94.832328][ T5124] input input6: unable to receive magic message: -32 [ 94.866709][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.970751][ T5788] input input6: unable to receive magic message: -32 [ 95.024909][ T5124] input input6: unable to receive magic message: -32 [ 95.078259][ T5124] input input6: unable to receive magic message: -32 [ 95.154282][ T5915] loop2: detected capacity change from 0 to 2048 [ 95.252947][ T5917] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.304449][ T5155] usb 2-1: USB disconnect, device number 2 [ 95.304976][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.334339][ T5155] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.441923][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 95.477928][ T5915] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 95.499365][ T5915] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 95.536505][ T5915] Remounting filesystem read-only [ 95.552328][ T5915] NILFS (loop2): error -5 truncating bmap (ino=16) [ 95.668036][ T5769] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 95.701806][ T5769] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 95.715458][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.730067][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.745409][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.759626][ T5769] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 95.780219][ T5769] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 95.792388][ T5769] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 95.815096][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.840490][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.868422][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.890151][ T5769] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 95.914180][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.934032][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.945374][ T5769] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 95.956392][ T5769] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.520721][ T5868] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.575731][ T5950] loop2: detected capacity change from 0 to 16 [ 96.619254][ T5950] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.695239][ T5950] syz.2.41: attempt to access beyond end of device [ 96.695239][ T5950] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 96.722207][ T5868] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 96.737861][ T5868] usb 1-1: config 0 has no interface number 0 [ 96.754455][ T5950] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[4096] [ 96.777979][ T5868] usb 1-1: New USB device found, idVendor=0403, idProduct=a951, bcdDevice=c0.f8 [ 96.805078][ T27] audit: type=1800 audit(1769469085.751:6): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.41" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 96.828231][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.854285][ T5868] usb 1-1: config 0 descriptor?? [ 96.872275][ T5868] hub 1-1:0.40: bad descriptor, ignoring hub [ 96.889603][ T5868] hub: probe of 1-1:0.40 failed with error -5 [ 96.900529][ T5868] ftdi_sio 1-1:0.40: FTDI USB Serial Device converter detected [ 96.911881][ T5958] netlink: 256 bytes leftover after parsing attributes in process `syz.3.45'. [ 96.924148][ T5868] ftdi_sio ttyUSB0: unknown device type: 0xc0f8 [ 96.934567][ T5958] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 97.272697][ T5813] usb 1-1: USB disconnect, device number 3 [ 97.289726][ T5813] ftdi_sio 1-1:0.40: device disconnected [ 97.332687][ T5968] loop1: detected capacity change from 0 to 2048 [ 97.389462][ T5968] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 97.445623][ T5968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.778473][ T5979] Unknown options in mask b7f2 [ 97.798973][ T5982] loop2: detected capacity change from 0 to 512 [ 97.917712][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.959545][ T5982] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.125193][ T5982] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 98.168213][ T5982] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.210927][ T5982] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.57: Failed to acquire dquot type 0 [ 98.418568][ T5997] loop0: detected capacity change from 0 to 2048 [ 98.430214][ T5997] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.443735][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.466282][ T6000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.480356][ T5997] syz.0.63: attempt to access beyond end of device [ 98.480356][ T5997] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 98.579879][ T5997] syz.0.63: attempt to access beyond end of device [ 98.579879][ T5997] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 98.610167][ T5997] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 98.751627][ T6004] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 98.759550][ T6004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.65'. [ 98.884155][ T5989] loop1: detected capacity change from 0 to 32768 [ 98.899284][ T5989] (syz.1.60,5989,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.918979][ T5989] (syz.1.60,5989,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.932890][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.958977][ T5989] (syz.1.60,5989,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 99.017167][ T5989] JBD2: Ignoring recovery information on journal [ 99.088263][ T5989] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.128291][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.151496][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.210739][ T8] usb 4-1: config 220 has no interface number 2 [ 99.217252][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.255552][ T6016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.71'. [ 99.275822][ T8] usb 4-1: config 220 interface 0 has no altsetting 0 [ 99.290886][ T8] usb 4-1: config 220 interface 76 has no altsetting 0 [ 99.304003][ T8] usb 4-1: config 220 interface 1 has no altsetting 0 [ 99.317047][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.332196][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.370705][ T8] usb 4-1: Product: syz [ 99.378999][ T5989] (syz.1.60,5989,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 99.386098][ T8] usb 4-1: Manufacturer: syz [ 99.418194][ T5989] (syz.1.60,5989,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 99.430872][ T8] usb 4-1: SerialNumber: syz [ 99.455058][ T5989] (syz.1.60,5989,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 99.490979][ T5989] (syz.1.60,5989,1):ocfs2_quota_read:201 ERROR: status = -5 [ 99.498808][ T5989] Quota error (device loop1): find_next_id: Can't read quota tree block 5 [ 99.589802][ T5989] (syz.1.60,5989,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 99.682057][ T8] usb 4-1: selecting invalid altsetting 0 [ 99.724758][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 99.742227][ T8] usb 4-1: No valid video chain found. [ 99.764132][ T8] usb 4-1: selecting invalid altsetting 0 [ 99.769959][ T8] usbtest: probe of 4-1:220.1 failed with error -22 [ 99.820182][ T8] usb 4-1: USB disconnect, device number 3 [ 99.861483][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 100.192184][ T27] audit: type=1326 audit(1769469089.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 100.272975][ T27] audit: type=1326 audit(1769469089.161:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 100.355032][ T27] audit: type=1326 audit(1769469089.181:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 100.422490][ T27] audit: type=1326 audit(1769469089.181:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 100.667379][ T6044] loop3: detected capacity change from 0 to 256 [ 100.679648][ T6045] sctp: [Deprecated]: syz.1.84 (pid 6045) Use of int in max_burst socket option. [ 100.679648][ T6045] Use struct sctp_assoc_value instead [ 101.000783][ T967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.019298][ C1] sd 0:0:1:0: [sda] tag#6072 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 101.029861][ C1] sd 0:0:1:0: [sda] tag#6072 CDB: Read(6) 08 00 9f d1 fe de [ 101.193446][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 101.231562][ T967] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.260848][ T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.289155][ T967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.313111][ T967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.329003][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.337500][ T967] usb 1-1: Product: syz [ 101.346225][ T967] usb 1-1: Manufacturer: syz [ 101.356332][ T967] usb 1-1: SerialNumber: syz [ 101.398637][ T6065] netlink: 'syz.1.95': attribute type 6 has an invalid length. [ 101.424724][ T6067] loop2: detected capacity change from 0 to 256 [ 101.576152][ T6067] FAT-fs (loop2): Directory bread(block 64) failed [ 101.606152][ T6067] FAT-fs (loop2): Directory bread(block 65) failed [ 101.634453][ T6067] FAT-fs (loop2): Directory bread(block 66) failed [ 101.641969][ T967] usb 1-1: 0:2 : does not exist [ 101.654769][ T6067] FAT-fs (loop2): Directory bread(block 67) failed [ 101.675419][ T6067] FAT-fs (loop2): Directory bread(block 68) failed [ 101.683816][ T967] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 101.697390][ T6067] FAT-fs (loop2): Directory bread(block 69) failed [ 101.704597][ T6067] FAT-fs (loop2): Directory bread(block 70) failed [ 101.720655][ T6067] FAT-fs (loop2): Directory bread(block 71) failed [ 101.731204][ T6067] FAT-fs (loop2): Directory bread(block 72) failed [ 101.741108][ T6067] FAT-fs (loop2): Directory bread(block 73) failed [ 101.782840][ T6075] loop1: detected capacity change from 0 to 8 [ 101.801385][ T967] usb 1-1: USB disconnect, device number 4 [ 101.890248][ T6075] cramfs: Error -3 while decompressing! [ 101.922848][ T6075] cramfs: ffffffff973f3368(26)->ffff8880766e0000(4096) [ 101.968176][ T6075] cramfs: Error -3 while decompressing! [ 101.981812][ T6075] cramfs: ffffffff973f3382(26)->ffff88807674a000(4096) [ 101.998440][ T6075] cramfs: Error -3 while decompressing! [ 102.017117][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.019481][ T5784] udevd[5784]: incorrect cramfs checksum on /dev/loop1 [ 102.040172][ T6075] cramfs: ffffffff973f339c(16)->ffff888075951000(4096) [ 102.090906][ T6075] cramfs: Error -3 while decompressing! [ 102.099715][ T6080] netlink: 'syz.3.102': attribute type 3 has an invalid length. [ 102.126162][ T6075] cramfs: ffffffff973f3368(26)->ffff8880766e0000(4096) [ 102.133816][ T6080] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.102'. [ 102.149408][ T27] audit: type=1800 audit(1769469091.091:11): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.100" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 102.207930][ T5788] udevd[5788]: incorrect cramfs checksum on /dev/loop1 [ 102.271884][ T5773] udevd[5773]: incorrect cramfs checksum on /dev/loop1 [ 102.967847][ T6100] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 103.044425][ T6096] loop1: detected capacity change from 0 to 4096 [ 103.073459][ T6096] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 103.333679][ T6108] loop3: detected capacity change from 0 to 8 [ 103.334549][ T6096] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 103.468556][ T5773] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.523010][ T6108] SQUASHFS error: Failed to read block 0x2fc: -5 [ 103.534276][ T6108] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 103.550749][ T6108] SQUASHFS error: Unable to read directory block [247:26] [ 103.659205][ T6090] loop2: detected capacity change from 0 to 40427 [ 103.711935][ T6090] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.720038][ T6090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.805152][ T6090] F2FS-fs (loop2): invalid crc value [ 103.854013][ T6090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.861172][ T6119] netlink: 'syz.1.120': attribute type 9 has an invalid length. [ 103.886773][ T6119] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.120'. [ 103.995504][ T6114] loop3: detected capacity change from 0 to 4096 [ 104.059329][ T6090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.095020][ T6090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.253197][ T6114] ntfs3: loop3: ino=5, "/" directory corrupted [ 104.304185][ T6124] netlink: 'syz.0.122': attribute type 6 has an invalid length. [ 104.340854][ T6124] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.531671][ T6126] loop0: detected capacity change from 0 to 512 [ 104.688836][ T6126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.710306][ T6126] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.759900][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.800311][ T6135] netlink: 3 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.820729][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.832238][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.862651][ T6135] vlan0: entered promiscuous mode [ 105.008266][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.036717][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 105.048063][ T5868] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 105.071856][ T5868] usb 2-1: config 0 has no interface number 0 [ 105.090735][ T5868] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 105.110870][ T5868] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 105.139336][ T5868] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 105.170765][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 105.206370][ T5868] usb 2-1: Product: syz [ 105.219229][ T5868] usb 2-1: SerialNumber: syz [ 105.233816][ T5868] usb 2-1: config 0 descriptor?? [ 105.257596][ T5868] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 105.277975][ T5868] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 105.446022][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 105.509738][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 105.774054][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 105.783042][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.790459][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.797937][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.805273][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.812587][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.820943][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.828189][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.835469][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.842738][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.845421][ T6155] xt_ecn: cannot match TCP bits for non-tcp packets [ 105.850257][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 105.865352][ T5813] usb 2-1: USB disconnect, device number 3 [ 105.871386][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 105.896843][ T5813] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 106.073328][ T6153] loop3: detected capacity change from 0 to 8192 [ 106.113483][ T6153] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.175550][ T6153] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 106.185998][ T6153] REISERFS (device loop3): using ordered data mode [ 106.193214][ T6153] reiserfs: using flush barriers [ 106.202864][ T6153] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.220344][ T6153] REISERFS (device loop3): checking transaction log (loop3) [ 106.231549][ T6162] loop2: detected capacity change from 0 to 64 [ 106.260834][ T6164] loop0: detected capacity change from 0 to 512 [ 106.332974][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.140: inode has both inline data and extents flags [ 106.364341][ T6162] syz.2.139: attempt to access beyond end of device [ 106.364341][ T6162] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 106.396363][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.140: couldn't read orphan inode 15 (err -117) [ 106.422242][ T6162] Buffer I/O error on dev loop2, logical block 1295, async page read [ 106.476864][ T6162] syz.2.139: attempt to access beyond end of device [ 106.476864][ T6162] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 106.535548][ T6153] REISERFS (device loop3): Using tea hash to sort names [ 106.551821][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.570940][ T6162] Buffer I/O error on dev loop2, logical block 1295, async page read [ 106.592024][ T6153] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 106.604319][ T27] audit: type=1800 audit(1769469095.551:12): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.139" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 106.712801][ T6162] syz.2.139 (6162) used greatest stack depth: 19984 bytes left [ 106.815587][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.159929][ T6179] comedi comedi0: Cannot bond this driver to itself! [ 107.353575][ T6185] loop2: detected capacity change from 0 to 64 [ 107.383491][ T6181] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 107.612536][ T6191] netlink: 'syz.3.153': attribute type 30 has an invalid length. [ 107.832305][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.844267][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 108.092927][ T6207] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 108.267767][ T6212] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 108.302823][ T6217] loop2: detected capacity change from 0 to 8 [ 108.303678][ T6212] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 108.501466][ T6217] SQUASHFS error: Failed to read block 0x2fc: -5 [ 108.521970][ T6217] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 108.534003][ T6217] SQUASHFS error: Unable to read directory block [247:26] [ 108.581568][ T6223] x_tables: duplicate underflow at hook 3 [ 109.165711][ T27] audit: type=1326 audit(1769469098.111:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.246515][ T27] audit: type=1326 audit(1769469098.111:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.309567][ T27] audit: type=1326 audit(1769469098.131:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.381804][ T27] audit: type=1326 audit(1769469098.131:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.455145][ T6221] loop3: detected capacity change from 0 to 32768 [ 109.480713][ T27] audit: type=1326 audit(1769469098.141:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.533688][ T6221] (syz.3.168,6221,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.556623][ T27] audit: type=1326 audit(1769469098.141:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.602943][ T6221] (syz.3.168,6221,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.632923][ T27] audit: type=1326 audit(1769469098.141:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.670257][ T27] audit: type=1326 audit(1769469098.141:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 109.691478][ T6221] JBD2: Ignoring recovery information on journal [ 109.844567][ T6221] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.119763][ T6254] loop0: detected capacity change from 0 to 4096 [ 110.216404][ T6237] loop1: detected capacity change from 0 to 32768 [ 110.238187][ T6258] loop2: detected capacity change from 0 to 64 [ 110.284713][ T6237] JBD2: Ignoring recovery information on journal [ 110.305271][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 110.393107][ T6258] syz.2.185: attempt to access beyond end of device [ 110.393107][ T6258] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 110.428368][ T6237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.463289][ T6258] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 110.842196][ T6266] overlayfs: missing 'lowerdir' [ 110.878959][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 111.211128][ T6272] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 111.230944][ T6272] netlink: 244 bytes leftover after parsing attributes in process `syz.3.192'. [ 111.381200][ T6276] xt_ecn: cannot match TCP bits for non-tcp packets [ 111.431925][ T6279] loop2: detected capacity change from 0 to 64 [ 111.570774][ T6282] process 'syz.1.196' launched './file2' with NULL argv: empty string added [ 111.922830][ T6262] loop0: detected capacity change from 0 to 32768 [ 111.976812][ T6262] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.989426][ T6262] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.051385][ T6262] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 112.082754][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.091719][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.257817][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 166ms [ 112.292908][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.300998][ T6262] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.468981][ T6262] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (first in block) [ 112.535257][ T6262] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 112.535257][ T6262] inode = 12 2341 [ 112.535257][ T6262] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 112.590812][ T6262] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 112.612409][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.623730][ T6262] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6262 [syz.0.187] __gfs2_lookup+0xad/0x2a0 [ 112.635287][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.674030][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.681230][ T6262] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 112.704342][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.728901][ T6262] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 112.731157][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.750220][ T6262] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 112.776585][ T6262] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 112.781539][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.798120][ T6262] gfs2: fsid=syz:syz.0: File system withdrawn [ 112.810932][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.818144][ T6262] CPU: 0 PID: 6262 Comm: syz.0.187 Not tainted syzkaller #0 [ 112.828081][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.838213][ T6262] Call Trace: [ 112.841565][ T6262] [ 112.842431][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.844525][ T6262] dump_stack_lvl+0x18c/0x250 [ 112.844563][ T6262] ? kobject_uevent_env+0x363/0x8b0 [ 112.864276][ T6262] ? show_regs_print_info+0x20/0x20 [ 112.867970][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 112.869519][ T6262] ? load_image+0x400/0x400 [ 112.869553][ T6262] ? kobject_uevent_env+0x363/0x8b0 [ 112.889071][ T6262] gfs2_withdraw+0xb24/0x13d0 [ 112.893820][ T6262] ? gfs2_lm+0x240/0x240 [ 112.898102][ T6262] ? load_image+0x400/0x400 [ 112.902644][ T6262] ? gfs2_consist_inode_i+0xf5/0x110 [ 112.907967][ T6262] gfs2_dirent_scan+0x525/0x650 [ 112.912859][ T6262] ? gfs2_dirent_search+0x7f0/0x7f0 [ 112.918090][ T6262] gfs2_dirent_search+0x2ed/0x7f0 [ 112.923154][ T6262] ? gfs2_dirent_search+0x7f0/0x7f0 [ 112.928391][ T6262] ? gfs2_permission+0x384/0x460 [ 112.933369][ T6262] ? __might_sleep+0xe0/0xe0 [ 112.937989][ T6262] ? gfs2_dir_search+0x220/0x220 [ 112.942962][ T6262] ? gfs2_lookupi+0x640/0x640 [ 112.947766][ T6262] ? do_raw_spin_lock+0x11f/0x2c0 [ 112.952843][ T6262] gfs2_dir_search+0x4d/0x220 [ 112.957581][ T6262] gfs2_lookupi+0x45c/0x640 [ 112.962130][ T6262] ? gfs2_lookup_meta+0x180/0x180 [ 112.967194][ T6262] ? __gfs2_lookup+0xad/0x2a0 [ 112.971921][ T6262] __gfs2_lookup+0xad/0x2a0 [ 112.976467][ T6262] ? gfs2_atomic_open+0x220/0x220 [ 112.981536][ T6262] ? do_raw_spin_unlock+0x121/0x230 [ 112.986863][ T6262] ? _raw_spin_unlock+0x28/0x40 [ 112.991776][ T6262] ? d_alloc+0x1eb/0x250 [ 112.996095][ T6262] lookup_one_qstr_excl+0x112/0x250 [ 113.001331][ T6262] filename_create+0x23e/0x480 [ 113.006125][ T6262] ? kern_path_create+0x50/0x50 [ 113.011024][ T6262] ? __virt_addr_valid+0x18c/0x540 [ 113.016174][ T6262] ? __virt_addr_valid+0x18c/0x540 [ 113.021318][ T6262] do_mknodat+0x18b/0x500 [ 113.025788][ T6262] ? do_o_path+0x200/0x200 [ 113.030261][ T6262] __x64_sys_mknod+0x8e/0xa0 [ 113.034893][ T6262] do_syscall_64+0x55/0xa0 [ 113.039347][ T6262] ? clear_bhb_loop+0x40/0x90 [ 113.044057][ T6262] ? clear_bhb_loop+0x40/0x90 [ 113.048804][ T6262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.055001][ T6262] RIP: 0033:0x7f9ae739aeb9 [ 113.059493][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.079501][ T6262] RSP: 002b:00007f9ae81f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 113.087963][ T6262] RAX: ffffffffffffffda RBX: 00007f9ae7615fa0 RCX: 00007f9ae739aeb9 [ 113.095967][ T6262] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000200000000000 [ 113.103962][ T6262] RBP: 00007f9ae7408c1f R08: 0000000000000000 R09: 0000000000000000 [ 113.111972][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.119990][ T6262] R13: 00007f9ae7616038 R14: 00007f9ae7615fa0 R15: 00007fff1b012f48 [ 113.128068][ T6262] [ 113.316139][ T6309] net_ratelimit: 453 callbacks suppressed [ 113.316159][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 113.356918][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 113.380767][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 113.400776][ T6309] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 113.698870][ T27] audit: type=1326 audit(1769469102.641:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 113.771475][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 113.785328][ T27] audit: type=1326 audit(1769469102.651:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 113.825037][ T6330] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 113.859805][ T27] audit: type=1326 audit(1769469102.671:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 113.929398][ T27] audit: type=1326 audit(1769469102.671:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 114.008512][ T27] audit: type=1326 audit(1769469102.671:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24999aeb9 code=0x7ffc0000 [ 114.105215][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 114.271160][ T6343] Cannot find add_set index 0 as target [ 114.476120][ T6351] loop0: detected capacity change from 0 to 1024 [ 114.539478][ T6351] hfsplus: Filesystem is marked locked, mounting read-only. [ 114.671096][ T6351] hfsplus: filesystem is marked locked, leaving read-only. [ 114.979792][ T6367] loop2: detected capacity change from 0 to 256 [ 115.099121][ T6367] FAT-fs (loop2): Directory bread(block 64) failed [ 115.146467][ T6367] FAT-fs (loop2): Directory bread(block 65) failed [ 115.155140][ T6367] FAT-fs (loop2): Directory bread(block 66) failed [ 115.162301][ T6367] FAT-fs (loop2): Directory bread(block 67) failed [ 115.169416][ T6367] FAT-fs (loop2): Directory bread(block 68) failed [ 115.198914][ T6367] FAT-fs (loop2): Directory bread(block 69) failed [ 115.209260][ T6367] FAT-fs (loop2): Directory bread(block 70) failed [ 115.230911][ T6367] FAT-fs (loop2): Directory bread(block 71) failed [ 115.248413][ T6367] FAT-fs (loop2): Directory bread(block 72) failed [ 115.264700][ T6367] FAT-fs (loop2): Directory bread(block 73) failed [ 115.721819][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.755934][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 115.870990][ T6395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.935280][ T6392] loop1: detected capacity change from 0 to 4096 [ 115.968112][ T6392] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 116.007093][ T6392] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.123674][ T6392] ntfs: volume version 3.1. [ 116.143040][ T6392] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 116.193075][ T6392] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 116.221607][ T6404] loop0: detected capacity change from 0 to 8 [ 116.241115][ T6392] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 116.361716][ T6404] SQUASHFS error: xz decompression failed, data probably corrupt [ 116.370028][ T6404] SQUASHFS error: Failed to read block 0x108: -5 [ 116.400776][ T6404] SQUASHFS error: Unable to read metadata cache entry [106] [ 116.413079][ T6404] SQUASHFS error: Unable to read inode 0x11f [ 116.890807][ T5772] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.959792][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 116.977288][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.263'. [ 116.990721][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 117.112743][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 117.125409][ T5772] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 117.139013][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 117.152353][ T5772] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 117.167344][ T5772] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 117.187262][ T5772] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 117.219863][ T6430] loop3: detected capacity change from 0 to 256 [ 117.234715][ T5772] usb 1-1: Manufacturer: syz [ 117.266561][ T5772] usb 1-1: config 0 descriptor?? [ 117.282024][ T6404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.293844][ T5772] smsusb:smsusb_probe: board id=9, interface number 0 [ 117.316858][ T5772] smsusb:siano_media_device_register: media controller created [ 117.371782][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.379218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.386635][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.394023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.401405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.410736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.418351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.425851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.433206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.440560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.447914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.456687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.464049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.471688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.479039][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.486408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.493786][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.501123][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.510908][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.518330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.525699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.533022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.540326][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.547658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.556026][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.563475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.570817][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.578193][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.585730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.593112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.602784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.610200][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.617704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.625080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.632433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.639802][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.660956][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.668394][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.675875][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.683266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.690699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.698057][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.705854][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.713273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.720601][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.727931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.735267][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.742663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.751119][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.758470][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.766075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.773496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.780920][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.788277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.796126][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.803512][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.810930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.818268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.825700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.833007][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.843616][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.850971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.858300][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.865646][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.872987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.880326][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.888036][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.895435][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.902809][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.910201][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.917585][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.924987][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.932743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.940089][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.947428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.954779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.962097][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.969435][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.978704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.986075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 117.993421][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.001121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.008490][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.015948][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.024270][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.031686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.039068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.046449][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.053866][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.061228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.069010][ T5772] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 118.077743][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.077874][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.077971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078055][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078386][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078467][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.078559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.152803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.160161][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.167505][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.174944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.182380][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.189715][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.197064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.204431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.213266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.220636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.227982][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.235324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.242670][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.249997][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.258013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.265375][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.272685][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.279955][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.287426][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.294701][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.301962][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.309220][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.316499][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.323779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.331800][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.339159][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.346495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.353830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.361160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.368625][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.376401][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.386032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.393386][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.400711][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.412535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.419902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.427242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.434735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.442772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.450112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.457827][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.465475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.472826][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.480266][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.487591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.495038][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.504564][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.512021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.519384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.526729][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.534078][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.541437][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.548781][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.558097][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.565636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.573020][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.580389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.588289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.595683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.603049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.610602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.617944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.625293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.632887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.640243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.647573][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.654900][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.663728][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.671094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.678409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.685895][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.693180][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.700463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.708179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.715530][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.722861][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.730198][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.737636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.745463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.752805][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.760150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.767509][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.774849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.782194][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.790141][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.797490][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.804820][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.812153][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.819480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.826791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.834135][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.841461][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.848793][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.856136][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.864440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.871797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.879237][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.886556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.894215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.901556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.908905][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.916260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.923601][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.931005][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.938683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.946034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.953368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.960747][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.968094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.975413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.982796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.990069][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 118.998964][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.006324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.013652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.021392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.028721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.036050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.043412][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.050720][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.058160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.066881][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.074285][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.081621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.088961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.096289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.103653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.113851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.121218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.128555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.136417][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.143762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.151531][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.158860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.166222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.173627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.181143][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.191843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.200028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.207758][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.215131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.222497][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.229947][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.237295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.244632][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.252018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.259721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.267372][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.274716][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.282033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.289314][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.296677][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.303951][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.311271][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.318575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.326285][ T5772] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 119.334099][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334209][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334583][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334673][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.334852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.402366][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.409750][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.417105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.424450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.431886][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.439201][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.446534][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.453873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.461184][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.469773][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.477181][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.484524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.491910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.499510][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.507023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.514373][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.521694][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.530438][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.537814][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.545185][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.552797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.560149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.567495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.574876][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.582817][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.590814][ T5772] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 119.598876][ T5772] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 119.607160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607375][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607467][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607569][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607669][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607757][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607840][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.607929][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.676064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.683686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.691236][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.698567][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.705914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.713282][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.720635][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.727947][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.735965][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.743357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.750709][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.760725][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.768215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.775703][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.783041][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.790411][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.797748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.805107][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.813438][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.821195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.828562][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.836383][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.843748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.851083][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.858370][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.865647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.873017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.880806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.888150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.895476][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.902774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.910120][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.917483][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.925230][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.932584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.939969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.947315][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.954639][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.961966][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.969288][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.976602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.984548][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.991906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 119.999243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.006653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.013977][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.021803][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.029228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.036632][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.044774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.052305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.059635][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.067287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.074737][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.082168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.089626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.097053][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.105195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.112514][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.119910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.127299][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.134633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.141970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.149297][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.156640][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.164577][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.171934][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.179275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.186618][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.193968][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.201393][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.208934][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.216269][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.224306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.232068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.239440][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.246719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.254006][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.261551][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.269060][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.276392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.283722][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.291072][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.298463][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.306573][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.313914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.321511][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.328849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.336192][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.343524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.350857][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 120.358132][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.366211][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.373544][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.380862][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.388187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.395540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.402907][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.412299][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.421208][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.428588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.435928][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.440841][ T27] audit: type=1326 audit(1769469109.371:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001379aeb9 code=0x7ffc0000 [ 120.443472][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.473012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.480769][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.488171][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.495519][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.503262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.510630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.518020][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.526212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.533586][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.541545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.548894][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.556394][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.563765][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.571857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.579922][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.587576][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.595009][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.602376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.609914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.617258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.624906][ T5772] ------------[ cut here ]------------ [ 120.631218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.631375][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.631476][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.631574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.631671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.631767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 120.657218][ T27] audit: type=1326 audit(1769469109.371:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001379aeb9 code=0x7ffc0000 [ 120.661589][ T5772] WARNING: CPU: 0 PID: 5772 at kernel/workqueue.c:668 __cancel_work_timer+0x526/0x560 [ 120.708862][ T5772] Modules linked in: [ 120.713083][ T5772] CPU: 0 PID: 5772 Comm: kworker/0:4 Not tainted syzkaller #0 [ 120.720764][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.731051][ T5772] Workqueue: usb_hub_wq hub_event [ 120.736166][ T5772] RIP: 0010:__cancel_work_timer+0x526/0x560 [ 120.742506][ T5772] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 15 5b 2f 00 0f 0b e9 e2 fd ff ff e8 09 5b 2f 00 e8 a4 53 2c 09 e9 92 fe ff ff e8 fa 5a 2f 00 <0f> 0b 43 80 3c 2e 00 0f 85 08 ff ff ff e9 0b ff ff ff e8 83 52 2c [ 120.762642][ T5772] RSP: 0018:ffffc900044aeb40 EFLAGS: 00010283 [ 120.768794][ T5772] RAX: ffffffff8157b826 RBX: ffff88802b916568 RCX: 0000000000100000 [ 120.776952][ T5772] RDX: ffffc90018bdb000 RSI: 0000000000078b93 RDI: 0000000000078b94 [ 120.785190][ T5772] RBP: ffffc900044aec58 R08: ffff88802b91656f R09: 1ffff11005722cad [ 120.793722][ T5772] R10: dffffc0000000000 R11: ffffed1005722cae R12: 1ffff92000895d6c [ 120.801949][ T5772] R13: dffffc0000000000 R14: 1ffff11005722cad R15: 0000000000000000 [ 120.810304][ T5772] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 120.819558][ T5772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.826405][ T5772] CR2: 00007f9ba0ba8000 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 120.834703][ T5772] Call Trace: [ 120.838038][ T5772] [ 120.841126][ T5772] ? cancel_work_sync+0x20/0x20 [ 120.846155][ T5772] ? usb_unlink_urb+0xa0/0xa0 [ 120.850968][ T5772] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 120.857033][ T5772] ? _raw_spin_unlock+0x40/0x40 [ 120.862015][ T5772] ? smscore_putbuffer+0x81/0x120 [ 120.867152][ T5772] smsusb_term_device+0xcb/0x220 [ 120.872303][ T5772] smsusb_probe+0x17a0/0x1e50 [ 120.877078][ T5772] ? s2255_print_cfg+0x1b0/0x1b0 [ 120.882201][ T5772] ? smsusb1_detectmode+0x260/0x260 [ 120.887495][ T5772] ? pm_runtime_enable+0xa7/0x2c0 [ 120.892697][ T5772] ? __pm_runtime_set_status+0x8ab/0xb80 [ 120.898425][ T5772] usb_probe_interface+0x5c9/0xb20 [ 120.903690][ T5772] ? usb_register_driver+0x3d0/0x3d0 [ 120.909045][ T5772] really_probe+0x25b/0xb20 [ 120.914003][ T5772] ? pm_runtime_barrier+0x14b/0x1c0 [ 120.919294][ T5772] __driver_probe_device+0x18c/0x330 [ 120.924821][ T5772] driver_probe_device+0x4f/0x420 [ 120.930025][ T5772] __device_attach_driver+0x2ca/0x510 [ 120.935539][ T5772] bus_for_each_drv+0x252/0x2e0 [ 120.940462][ T5772] ? coredump_store+0x90/0x90 [ 120.945401][ T5772] ? bus_find_device+0x300/0x300 [ 120.950471][ T5772] __device_attach+0x2c2/0x420 [ 120.955447][ T5772] ? device_attach+0x20/0x20 [ 120.960231][ T5772] ? __kmem_cache_free+0xba/0x1e0 [ 120.965429][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 120.970737][ T5772] bus_probe_device+0x180/0x260 [ 120.975857][ T5772] device_add+0x85b/0xc20 [ 120.980371][ T5772] usb_set_configuration+0x1a79/0x20c0 [ 120.986129][ T5772] usb_generic_driver_probe+0x8d/0x150 [ 120.991730][ T5772] usb_probe_device+0x13d/0x270 [ 120.996705][ T5772] ? usb_register_device_driver+0x230/0x230 [ 121.002885][ T5772] really_probe+0x25b/0xb20 [ 121.007463][ T5772] ? pm_runtime_barrier+0x14b/0x1c0 [ 121.013182][ T5772] __driver_probe_device+0x18c/0x330 [ 121.018550][ T5772] driver_probe_device+0x4f/0x420 [ 121.023781][ T5772] __device_attach_driver+0x2ca/0x510 [ 121.029249][ T5772] bus_for_each_drv+0x252/0x2e0 [ 121.037513][ T5772] ? coredump_store+0x90/0x90 [ 121.043395][ T5772] ? bus_find_device+0x300/0x300 [ 121.048438][ T5772] __device_attach+0x2c2/0x420 [ 121.053356][ T5772] ? device_attach+0x20/0x20 [ 121.058026][ T5772] ? __kmem_cache_free+0xba/0x1e0 [ 121.063666][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 121.069060][ T5772] bus_probe_device+0x180/0x260 [ 121.074051][ T5772] device_add+0x85b/0xc20 [ 121.078467][ T5772] usb_new_device+0xa3c/0x1660 [ 121.083376][ T5772] ? usb_disconnect+0x8a0/0x8a0 [ 121.088349][ T5772] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.093785][ T5772] ? lockdep_hardirqs_on+0x98/0x150 [ 121.099066][ T5772] hub_event+0x29bf/0x49f0 [ 121.103649][ T5772] ? hub_post_resume+0x120/0x120 [ 121.108692][ T5772] ? read_lock_is_recursive+0x20/0x20 [ 121.114565][ T5772] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.119847][ T5772] ? process_scheduled_works+0x96f/0x15d0 [ 121.126121][ T5772] ? process_scheduled_works+0x96f/0x15d0 [ 121.132057][ T5772] process_scheduled_works+0xa5d/0x15d0 [ 121.137723][ T5772] ? assign_work+0x430/0x430 [ 121.142487][ T5772] ? assign_work+0x3d0/0x430 [ 121.147162][ T5772] worker_thread+0xa55/0xfc0 [ 121.151944][ T5772] kthread+0x2fa/0x390 [ 121.156093][ T5772] ? pr_cont_work+0x560/0x560 [ 121.161023][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 121.165698][ T5772] ret_from_fork+0x48/0x80 [ 121.170195][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 121.174972][ T5772] ret_from_fork_asm+0x11/0x20 [ 121.179828][ T5772] [ 121.183109][ T5772] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.190463][ T5772] CPU: 0 PID: 5772 Comm: kworker/0:4 Not tainted syzkaller #0 [ 121.198470][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.208677][ T5772] Workqueue: usb_hub_wq hub_event [ 121.213767][ T5772] Call Trace: [ 121.217095][ T5772] [ 121.220169][ T5772] dump_stack_lvl+0x18c/0x250 [ 121.224923][ T5772] ? show_regs_print_info+0x20/0x20 [ 121.230185][ T5772] ? load_image+0x400/0x400 [ 121.234767][ T5772] panic+0x2dc/0x730 [ 121.238733][ T5772] ? bpf_jit_dump+0xd0/0xd0 [ 121.243367][ T5772] ? ret_from_fork_asm+0x11/0x20 [ 121.248382][ T5772] __warn+0x2e0/0x470 [ 121.252427][ T5772] ? __cancel_work_timer+0x526/0x560 [ 121.257780][ T5772] ? __cancel_work_timer+0x526/0x560 [ 121.263129][ T5772] report_bug+0x2be/0x4f0 [ 121.267511][ T5772] ? __cancel_work_timer+0x526/0x560 [ 121.272827][ T5772] ? __cancel_work_timer+0x526/0x560 [ 121.278181][ T5772] ? __cancel_work_timer+0x528/0x560 [ 121.283493][ T5772] handle_bug+0xcf/0x120 [ 121.287774][ T5772] exc_invalid_op+0x1a/0x50 [ 121.292317][ T5772] asm_exc_invalid_op+0x1a/0x20 [ 121.297198][ T5772] RIP: 0010:__cancel_work_timer+0x526/0x560 [ 121.303125][ T5772] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 15 5b 2f 00 0f 0b e9 e2 fd ff ff e8 09 5b 2f 00 e8 a4 53 2c 09 e9 92 fe ff ff e8 fa 5a 2f 00 <0f> 0b 43 80 3c 2e 00 0f 85 08 ff ff ff e9 0b ff ff ff e8 83 52 2c [ 121.322892][ T5772] RSP: 0018:ffffc900044aeb40 EFLAGS: 00010283 [ 121.328995][ T5772] RAX: ffffffff8157b826 RBX: ffff88802b916568 RCX: 0000000000100000 [ 121.337019][ T5772] RDX: ffffc90018bdb000 RSI: 0000000000078b93 RDI: 0000000000078b94 [ 121.345124][ T5772] RBP: ffffc900044aec58 R08: ffff88802b91656f R09: 1ffff11005722cad [ 121.353221][ T5772] R10: dffffc0000000000 R11: ffffed1005722cae R12: 1ffff92000895d6c [ 121.361225][ T5772] R13: dffffc0000000000 R14: 1ffff11005722cad R15: 0000000000000000 [ 121.369324][ T5772] ? __cancel_work_timer+0x526/0x560 [ 121.374749][ T5772] ? cancel_work_sync+0x20/0x20 [ 121.379641][ T5772] ? usb_unlink_urb+0xa0/0xa0 [ 121.384448][ T5772] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 121.390563][ T5772] ? _raw_spin_unlock+0x40/0x40 [ 121.395462][ T5772] ? smscore_putbuffer+0x81/0x120 [ 121.400541][ T5772] smsusb_term_device+0xcb/0x220 [ 121.405608][ T5772] smsusb_probe+0x17a0/0x1e50 [ 121.410366][ T5772] ? s2255_print_cfg+0x1b0/0x1b0 [ 121.415578][ T5772] ? smsusb1_detectmode+0x260/0x260 [ 121.420829][ T5772] ? pm_runtime_enable+0xa7/0x2c0 [ 121.425907][ T5772] ? __pm_runtime_set_status+0x8ab/0xb80 [ 121.431597][ T5772] usb_probe_interface+0x5c9/0xb20 [ 121.436760][ T5772] ? usb_register_driver+0x3d0/0x3d0 [ 121.442081][ T5772] really_probe+0x25b/0xb20 [ 121.446625][ T5772] ? pm_runtime_barrier+0x14b/0x1c0 [ 121.452046][ T5772] __driver_probe_device+0x18c/0x330 [ 121.457438][ T5772] driver_probe_device+0x4f/0x420 [ 121.462526][ T5772] __device_attach_driver+0x2ca/0x510 [ 121.467951][ T5772] bus_for_each_drv+0x252/0x2e0 [ 121.472868][ T5772] ? coredump_store+0x90/0x90 [ 121.477589][ T5772] ? bus_find_device+0x300/0x300 [ 121.482691][ T5772] __device_attach+0x2c2/0x420 [ 121.487524][ T5772] ? device_attach+0x20/0x20 [ 121.492157][ T5772] ? __kmem_cache_free+0xba/0x1e0 [ 121.497289][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 121.502554][ T5772] bus_probe_device+0x180/0x260 [ 121.507457][ T5772] device_add+0x85b/0xc20 [ 121.511853][ T5772] usb_set_configuration+0x1a79/0x20c0 [ 121.517399][ T5772] usb_generic_driver_probe+0x8d/0x150 [ 121.522902][ T5772] usb_probe_device+0x13d/0x270 [ 121.528057][ T5772] ? usb_register_device_driver+0x230/0x230 [ 121.534083][ T5772] really_probe+0x25b/0xb20 [ 121.538641][ T5772] ? pm_runtime_barrier+0x14b/0x1c0 [ 121.543891][ T5772] __driver_probe_device+0x18c/0x330 [ 121.549214][ T5772] driver_probe_device+0x4f/0x420 [ 121.554289][ T5772] __device_attach_driver+0x2ca/0x510 [ 121.559724][ T5772] bus_for_each_drv+0x252/0x2e0 [ 121.564651][ T5772] ? coredump_store+0x90/0x90 [ 121.569364][ T5772] ? bus_find_device+0x300/0x300 [ 121.574346][ T5772] __device_attach+0x2c2/0x420 [ 121.579153][ T5772] ? device_attach+0x20/0x20 [ 121.584074][ T5772] ? __kmem_cache_free+0xba/0x1e0 [ 121.589300][ T5772] ? do_raw_spin_unlock+0x121/0x230 [ 121.594536][ T5772] bus_probe_device+0x180/0x260 [ 121.599691][ T5772] device_add+0x85b/0xc20 [ 121.604062][ T5772] usb_new_device+0xa3c/0x1660 [ 121.608888][ T5772] ? usb_disconnect+0x8a0/0x8a0 [ 121.613785][ T5772] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.619038][ T5772] ? lockdep_hardirqs_on+0x98/0x150 [ 121.624387][ T5772] hub_event+0x29bf/0x49f0 [ 121.628881][ T5772] ? hub_post_resume+0x120/0x120 [ 121.634026][ T5772] ? read_lock_is_recursive+0x20/0x20 [ 121.639443][ T5772] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.644670][ T5772] ? process_scheduled_works+0x96f/0x15d0 [ 121.650434][ T5772] ? process_scheduled_works+0x96f/0x15d0 [ 121.656399][ T5772] process_scheduled_works+0xa5d/0x15d0 [ 121.662008][ T5772] ? assign_work+0x430/0x430 [ 121.666650][ T5772] ? assign_work+0x3d0/0x430 [ 121.671280][ T5772] worker_thread+0xa55/0xfc0 [ 121.675963][ T5772] kthread+0x2fa/0x390 [ 121.680064][ T5772] ? pr_cont_work+0x560/0x560 [ 121.684796][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 121.689420][ T5772] ret_from_fork+0x48/0x80 [ 121.693885][ T5772] ? kthread_blkcg+0xd0/0xd0 [ 121.698532][ T5772] ret_from_fork_asm+0x11/0x20 [ 121.703369][ T5772] [ 121.706984][ T5772] Kernel Offset: disabled [ 121.711380][ T5772] Rebooting in 86400 seconds..