last executing test programs: 5.405771524s ago: executing program 0 (id=62): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x3}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.030129774s ago: executing program 0 (id=66): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000200)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@mode}, {@session}, {@noadinicb}, {@nostrict}, {@uid}, {@shortad}, {@uid_ignore}, {@shortad}, {@uid_ignore}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x165142, 0x110) fallocate(r0, 0x10, 0x0, 0x2000) 4.603861199s ago: executing program 0 (id=68): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x1, 0xfffffeff, 0x6, 0x40008, 0x5, 0x1}) 3.509091197s ago: executing program 3 (id=73): r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 3.127360298s ago: executing program 3 (id=76): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 2.419385325s ago: executing program 1 (id=81): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) 2.383208338s ago: executing program 3 (id=82): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xee00) 2.290510765s ago: executing program 2 (id=83): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300001, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x2) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x9) 2.211117201s ago: executing program 1 (id=84): r0 = io_uring_setup(0x25c7, &(0x7f0000000640)={0x0, 0xffffffee, 0x40, 0x103fc, 0x14e}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.058287834s ago: executing program 2 (id=85): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r1, 0x0, &(0x7f0000fb3000/0xf000)=nil, 0xf000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000015c0)={0x28, 0x5, r1, r1, 0xa92, 0x910a0000, 0x3fff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 1.994028939s ago: executing program 0 (id=86): r0 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.899710697s ago: executing program 1 (id=87): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) wait4(r0, 0x0, 0x40000000, 0x0) 1.804187575s ago: executing program 2 (id=88): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0xfffffffc, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.755734288s ago: executing program 0 (id=89): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX], 0x0) 1.61570646s ago: executing program 2 (id=90): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x58) 1.407014076s ago: executing program 2 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 1.401637837s ago: executing program 1 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.12306358s ago: executing program 3 (id=93): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 898.914488ms ago: executing program 1 (id=94): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 243.26693ms ago: executing program 3 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 109.604051ms ago: executing program 2 (id=96): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1000, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) unlink(&(0x7f0000000080)='./file1\x00') 61.259675ms ago: executing program 3 (id=97): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) 4.40552ms ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) dup2(r0, r1) 0s ago: executing program 0 (id=99): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b01fe2c13a32ded8d67cc00000000000025fe8000000000000000000000000000aaff"], 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 83.301228][ T5773] cgroup: Unknown subsys name 'net' [ 83.438502][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.210957][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.946658][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.958578][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.967348][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.000003][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.014273][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.020731][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.024315][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.030600][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.036849][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.051464][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.057935][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.059664][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.068211][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.074809][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.082147][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.087835][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.099677][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.103073][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.109389][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.117149][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.134807][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.146130][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.166012][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.175273][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.692712][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.938416][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.011254][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.061851][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.071499][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.083670][ T5783] bridge_slave_0: entered allmulticast mode [ 88.091630][ T5783] bridge_slave_0: entered promiscuous mode [ 88.124709][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.132985][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.141123][ T5783] bridge_slave_1: entered allmulticast mode [ 88.148634][ T5783] bridge_slave_1: entered promiscuous mode [ 88.165698][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.272933][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.281462][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.290054][ T5786] bridge_slave_0: entered allmulticast mode [ 88.297819][ T5786] bridge_slave_0: entered promiscuous mode [ 88.331499][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.363575][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.371269][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.378786][ T5786] bridge_slave_1: entered allmulticast mode [ 88.387153][ T5786] bridge_slave_1: entered promiscuous mode [ 88.431350][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.468224][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.476426][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.484301][ T5782] bridge_slave_0: entered allmulticast mode [ 88.492686][ T5782] bridge_slave_0: entered promiscuous mode [ 88.535695][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.543297][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.552418][ T5782] bridge_slave_1: entered allmulticast mode [ 88.560910][ T5782] bridge_slave_1: entered promiscuous mode [ 88.570557][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.584261][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.601649][ T5783] team0: Port device team_slave_0 added [ 88.665525][ T5783] team0: Port device team_slave_1 added [ 88.701720][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.715323][ T5786] team0: Port device team_slave_0 added [ 88.724457][ T5786] team0: Port device team_slave_1 added [ 88.744186][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751632][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.759004][ T5788] bridge_slave_0: entered allmulticast mode [ 88.767513][ T5788] bridge_slave_0: entered promiscuous mode [ 88.777592][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.826748][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.834171][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.842438][ T5788] bridge_slave_1: entered allmulticast mode [ 88.849986][ T5788] bridge_slave_1: entered promiscuous mode [ 88.902873][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.911025][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.937376][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.971758][ T5782] team0: Port device team_slave_0 added [ 88.980806][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.992103][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.999354][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.025513][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.038262][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.045634][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.071714][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.085627][ T5782] team0: Port device team_slave_1 added [ 89.107283][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.117483][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.124858][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.150954][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.190258][ T5787] Bluetooth: hci1: command tx timeout [ 89.196716][ T5796] Bluetooth: hci2: command tx timeout [ 89.203004][ T5790] Bluetooth: hci0: command tx timeout [ 89.241914][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.248945][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.269732][ T5787] Bluetooth: hci3: command tx timeout [ 89.279232][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.310487][ T5788] team0: Port device team_slave_0 added [ 89.333864][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.340921][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.367616][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.409354][ T5786] hsr_slave_0: entered promiscuous mode [ 89.416057][ T5786] hsr_slave_1: entered promiscuous mode [ 89.426378][ T5788] team0: Port device team_slave_1 added [ 89.451211][ T5783] hsr_slave_0: entered promiscuous mode [ 89.457845][ T5783] hsr_slave_1: entered promiscuous mode [ 89.465413][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.473515][ T5783] Cannot create hsr debugfs directory [ 89.519902][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.526913][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.553053][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.610566][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.617705][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.644194][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.678950][ T5782] hsr_slave_0: entered promiscuous mode [ 89.686684][ T5782] hsr_slave_1: entered promiscuous mode [ 89.694090][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.703141][ T5782] Cannot create hsr debugfs directory [ 89.833489][ T5788] hsr_slave_0: entered promiscuous mode [ 89.841145][ T5788] hsr_slave_1: entered promiscuous mode [ 89.847748][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.856465][ T5788] Cannot create hsr debugfs directory [ 90.197163][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.211579][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.226450][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.236885][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.320540][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.341785][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.354020][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.376922][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.451337][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.467495][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.492721][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.507104][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.577967][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.591972][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.603655][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.613900][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.675026][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.777836][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.806113][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.850958][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.858614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.905162][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.912632][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.941324][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.004050][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.020769][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.028135][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.045056][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.076578][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.084319][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.139891][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.168528][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.184245][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.191555][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.219678][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.226920][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.269372][ T5787] Bluetooth: hci0: command tx timeout [ 91.270379][ T5790] Bluetooth: hci2: command tx timeout [ 91.274860][ T5787] Bluetooth: hci1: command tx timeout [ 91.334572][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.350310][ T5787] Bluetooth: hci3: command tx timeout [ 91.385935][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.432812][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.440106][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.485934][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.494203][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.553314][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.564251][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.679719][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.823517][ T5786] veth0_vlan: entered promiscuous mode [ 91.876226][ T5786] veth1_vlan: entered promiscuous mode [ 91.954008][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.004019][ T5786] veth0_macvtap: entered promiscuous mode [ 92.029637][ T5786] veth1_macvtap: entered promiscuous mode [ 92.110744][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.148144][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.180467][ T5783] veth0_vlan: entered promiscuous mode [ 92.200199][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.213144][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.222500][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.233123][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.242531][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260080][ T5783] veth1_vlan: entered promiscuous mode [ 92.307048][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.384994][ T5782] veth0_vlan: entered promiscuous mode [ 92.473842][ T5782] veth1_vlan: entered promiscuous mode [ 92.480558][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.488775][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.505667][ T55] cfg80211: failed to load regulatory.db [ 92.514639][ T5783] veth0_macvtap: entered promiscuous mode [ 92.548095][ T5783] veth1_macvtap: entered promiscuous mode [ 92.606895][ T5788] veth0_vlan: entered promiscuous mode [ 92.616699][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.628248][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.645246][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.657061][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.668465][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.680420][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.690790][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.698163][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.722830][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.731971][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740906][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.751217][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.773735][ T5788] veth1_vlan: entered promiscuous mode [ 92.906604][ T5782] veth0_macvtap: entered promiscuous mode [ 92.947195][ T5788] veth0_macvtap: entered promiscuous mode [ 92.988976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.012387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.027367][ T5782] veth1_macvtap: entered promiscuous mode [ 93.051371][ T5788] veth1_macvtap: entered promiscuous mode [ 93.108038][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.127345][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140752][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.151607][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.164646][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.192748][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.204052][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.216653][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.228482][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.242255][ T5878] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 93.251487][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.265941][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275865][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.285780][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295014][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.310840][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.318822][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.353109][ T5787] Bluetooth: hci2: command tx timeout [ 93.358700][ T5796] Bluetooth: hci0: command tx timeout [ 93.359885][ T5790] Bluetooth: hci1: command tx timeout [ 93.390482][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.404595][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.416898][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.439899][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.443855][ T5790] Bluetooth: hci3: command tx timeout [ 93.450700][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.467090][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.479824][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.497740][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.523713][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.535302][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.546228][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.557452][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.568675][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.580977][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.598606][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.608543][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.667988][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.706798][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.732425][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.764213][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.852854][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.865210][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.047101][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.058875][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.137668][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.168687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.274798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.300573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.481868][ T5896] syz.2.3[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.575882][ T5896] loop2: detected capacity change from 0 to 2048 [ 94.641998][ T5896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.658451][ T5898] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 95.430976][ T5790] Bluetooth: hci2: command tx timeout [ 95.431347][ T5787] Bluetooth: hci0: command tx timeout [ 95.436430][ T5790] Bluetooth: hci1: command tx timeout [ 95.511134][ T5787] Bluetooth: hci3: command tx timeout [ 95.934599][ T5928] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 95.952201][ T5928] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 95.967326][ T5928] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 96.115313][ T5936] loop0: detected capacity change from 0 to 512 [ 96.128310][ T5934] loop1: detected capacity change from 0 to 8192 [ 96.153748][ T5938] loop2: detected capacity change from 0 to 64 [ 96.174942][ T5934] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.203970][ T5934] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 96.220543][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.252396][ T5934] REISERFS (device loop1): using ordered data mode [ 96.258995][ T5934] reiserfs: using flush barriers [ 96.269326][ T5934] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.345797][ T5934] REISERFS (device loop1): checking transaction log (loop1) [ 96.555451][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.686391][ T5934] REISERFS (device loop1): Using tea hash to sort names [ 96.716675][ T5934] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 96.792627][ T5946] netlink: 128 bytes leftover after parsing attributes in process `syz.0.30'. [ 96.845423][ T5946] netlink: 128 bytes leftover after parsing attributes in process `syz.0.30'. [ 96.935081][ T5948] netlink: 'syz.3.31': attribute type 4 has an invalid length. [ 96.944738][ T5948] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.31'. [ 97.796796][ T5966] loop3: detected capacity change from 0 to 256 [ 97.864159][ T5966] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.926734][ T5966] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 97.976077][ T5966] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 98.113559][ T5966] exFAT-fs (loop3): invalid start cluster (2155889475) [ 98.176764][ T5958] loop1: detected capacity change from 0 to 32768 [ 98.198442][ T5952] loop0: detected capacity change from 0 to 40427 [ 98.260578][ T5958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.34 (5958) [ 98.296799][ T5952] F2FS-fs (loop0): invalid crc value [ 98.351173][ T5958] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.364005][ T5952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.386617][ T5960] loop2: detected capacity change from 0 to 32768 [ 98.396196][ T5958] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.406972][ T5958] BTRFS info (device loop1): setting nodatasum [ 98.445816][ T5972] loop3: detected capacity change from 0 to 256 [ 98.461831][ T5958] BTRFS info (device loop1): force zlib compression, level 3 [ 98.485721][ T5958] BTRFS info (device loop1): enabling ssd optimizations [ 98.516616][ T5958] BTRFS info (device loop1): allowing degraded mounts [ 98.524229][ T5972] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.574627][ T5958] BTRFS info (device loop1): using free space tree [ 98.592394][ T5972] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 98.613624][ T28] audit: type=1800 audit(1756476310.994:2): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 98.618716][ T5952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.691284][ T5972] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 98.919641][ T5967] f2fs_ckpt-7:0: attempt to access beyond end of device [ 98.919641][ T5967] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.978094][ T5967] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.628305][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.332738][ T6010] loop3: detected capacity change from 0 to 40427 [ 101.394441][ T6010] F2FS-fs (loop3): invalid crc value [ 101.426266][ T6010] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.667656][ T6010] F2FS-fs (loop3): Start checkpoint disabled! [ 101.727404][ T6010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 101.800867][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.818280][ T6039] Zero length message leads to an empty skb [ 102.038657][ T6048] loop0: detected capacity change from 0 to 2048 [ 102.061097][ T6048] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 102.117426][ T6048] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 102.152601][ T12] kworker/u4:1: attempt to access beyond end of device [ 102.152601][ T12] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 102.167920][ T6048] UDF-fs: Scanning with blocksize 512 failed [ 102.169740][ T55] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.184601][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.193723][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.202246][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.216291][ T6050] loop1: detected capacity change from 0 to 2048 [ 102.232341][ T6048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.287823][ T6050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.321324][ C1] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 102.439465][ T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.464288][ T55] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.490561][ T55] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.511213][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.535586][ T55] usb 3-1: Product: syz [ 102.547102][ T55] usb 3-1: Manufacturer: syz [ 102.569179][ T55] usb 3-1: SerialNumber: syz [ 102.747951][ T6054] loop1: detected capacity change from 0 to 2048 [ 102.777927][ T6054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.831922][ T55] usb 3-1: 0:2 : does not exist [ 102.853685][ T55] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 102.941494][ T55] usb 3-1: USB disconnect, device number 2 [ 102.949215][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.013708][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.035156][ T6056] loop3: detected capacity change from 0 to 4096 [ 103.064799][ T6056] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.173890][ T6056] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 103.187327][ T6056] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.223259][ T5836] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.232596][ T6056] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.247937][ T6056] ntfs: volume version 3.1. [ 103.255659][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.298389][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.324570][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.340049][ T5836] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.354180][ T5836] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.372497][ T5836] usb 1-1: Manufacturer: syz [ 103.401321][ T5836] usb 1-1: config 0 descriptor?? [ 103.496489][ T59] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 103.515519][ T5782] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 103.873790][ T5836] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 103.894024][ T5836] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 103.968316][ T5836] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 103.985588][ T6071] loop3: detected capacity change from 0 to 512 [ 104.133315][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.240855][ T6071] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.343718][ T55] usb 1-1: USB disconnect, device number 2 [ 104.405801][ T6084] loop2: detected capacity change from 0 to 512 [ 104.423270][ T6078] fido_id[6078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 104.614469][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.117236][ T6097] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 105.447518][ T6108] loop2: detected capacity change from 0 to 128 [ 105.629249][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.706847][ T6112] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.747595][ T6114] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.821072][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.842427][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.864685][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.878051][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.892600][ T8] usb 1-1: Product: syz [ 105.922735][ T8] usb 1-1: Manufacturer: syz [ 105.937831][ T8] usb 1-1: SerialNumber: syz [ 106.031185][ T28] audit: type=1326 audit(1756476318.414:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.139174][ T28] audit: type=1326 audit(1756476318.444:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051f72ade9 code=0x7ffc0000 [ 106.174903][ T8] usb 1-1: 0:2 : does not exist [ 106.211466][ T28] audit: type=1326 audit(1756476318.444:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.234176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.251970][ T28] audit: type=1326 audit(1756476318.444:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051f72ade9 code=0x7ffc0000 [ 106.252460][ T6118] loop1: detected capacity change from 0 to 16 [ 106.274874][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 106.294784][ T28] audit: type=1326 audit(1756476318.444:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.343271][ T28] audit: type=1326 audit(1756476318.444:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.379876][ T8] usb 1-1: USB disconnect, device number 3 [ 106.388308][ T28] audit: type=1326 audit(1756476318.444:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051f72ade9 code=0x7ffc0000 [ 106.485603][ T28] audit: type=1326 audit(1756476318.444:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.532625][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.541730][ T6118] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.629645][ T28] audit: type=1326 audit(1756476318.444:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051f72ade9 code=0x7ffc0000 [ 106.657439][ T28] audit: type=1326 audit(1756476318.444:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051f78ebe9 code=0x7ffc0000 [ 106.666009][ T6118] syz.1.94: attempt to access beyond end of device [ 106.666009][ T6118] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 106.719321][ T6118] syz.1.94: attempt to access beyond end of device [ 106.719321][ T6118] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 106.822009][ T6118] syz.1.94: attempt to access beyond end of device [ 106.822009][ T6118] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 106.977189][ T6122] loop2: detected capacity change from 0 to 512 [ 106.986650][ T5783] BUG: Bad page state in process syz-executor pfn:2d148 [ 106.994654][ T5783] page:ffffea0000b45200 refcount:0 mapcount:0 mapping:ffff88805f5a8270 index:0x2 pfn:0x2d148 [ 107.000579][ T6122] ======================================================= [ 107.000579][ T6122] WARNING: The mand mount option has been deprecated and [ 107.000579][ T6122] and is ignored by this kernel. Remove the mand [ 107.000579][ T6122] option from the mount to silence this warning. [ 107.000579][ T6122] ======================================================= [ 107.005774][ T5783] aops:z_erofs_cache_aops ino:0 [ 107.047276][ T5783] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 107.055447][ T5783] page_type: 0xffffffff() [ 107.060171][ T5783] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f5a8270 [ 107.068862][ T5783] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 107.077967][ T5783] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 107.086204][ T5783] page_owner tracks the page as allocated [ 107.092746][ T5783] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6118, tgid 6117 (syz.1.94), ts 106665503029, free_ts 106066027138 [ 107.115246][ T5783] post_alloc_hook+0x1cd/0x210 [ 107.120132][ T5783] get_page_from_freelist+0x195c/0x19f0 [ 107.125765][ T5783] __alloc_pages+0x1e3/0x460 [ 107.130515][ T5783] z_erofs_do_read_page+0x20c0/0x3680 [ 107.136060][ T5783] z_erofs_readahead+0x862/0xd50 [ 107.141136][ T5783] read_pages+0x177/0x840 [ 107.146297][ T5783] page_cache_ra_unbounded+0x692/0x770 [ 107.152021][ T5783] force_page_cache_ra+0x2c1/0x320 [ 107.157317][ T5783] generic_fadvise+0x44f/0x730 [ 107.162274][ T5783] __x64_sys_fadvise64+0x140/0x180 [ 107.167461][ T5783] do_syscall_64+0x55/0xb0 [ 107.172243][ T5783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.178291][ T5783] page last free stack trace: [ 107.183061][ T5783] free_unref_page_prepare+0x7ce/0x8e0 [ 107.188671][ T5783] free_unref_page_list+0xbe/0x860 [ 107.198073][ T5783] release_pages+0x1fa0/0x2220 [ 107.205634][ T5783] tlb_flush_mmu+0x368/0x4f0 [ 107.210381][ T5783] tlb_finish_mmu+0xc3/0x1d0 [ 107.215382][ T5783] exit_mmap+0x3f0/0xb50 [ 107.219734][ T5783] __mmput+0x118/0x3c0 [ 107.223854][ T5783] exit_mm+0x1da/0x2c0 [ 107.227996][ T5783] do_exit+0x88e/0x23c0 [ 107.232319][ T5783] do_group_exit+0x21b/0x2d0 [ 107.234363][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.236979][ T5783] get_signal+0x12fc/0x1400 [ 107.255424][ T5783] arch_do_signal_or_restart+0x96/0x780 [ 107.261238][ T5783] exit_to_user_mode_loop+0x70/0x110 [ 107.266713][ T5783] exit_to_user_mode_prepare+0xb1/0x140 [ 107.272449][ T5783] syscall_exit_to_user_mode+0x1a/0x50 [ 107.277979][ T5783] do_syscall_64+0x61/0xb0 [ 107.282550][ T5783] Modules linked in: [ 107.286245][ T6122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.286493][ T5783] CPU: 1 PID: 5783 Comm: syz-executor Not tainted syzkaller #0 [ 107.303910][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.314022][ T5783] Call Trace: [ 107.317437][ T5783] [ 107.320438][ T5783] dump_stack_lvl+0x16c/0x230 [ 107.325180][ T5783] ? show_regs_print_info+0x20/0x20 [ 107.330522][ T5783] ? swiotlb_print_info+0x70/0x70 [ 107.335712][ T5783] bad_page+0x14b/0x170 [ 107.340082][ T5783] free_unref_page_prepare+0x887/0x8e0 [ 107.345665][ T5783] free_unref_page+0x32/0x2e0 [ 107.350404][ T5783] ? __folio_put+0xef/0x210 [ 107.354962][ T5783] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 107.361440][ T5783] erofs_shrink_workstation+0x118/0x290 [ 107.367057][ T5783] ? erofs_shrinker_unregister+0x170/0x170 [ 107.373020][ T5783] ? io_schedule+0xd0/0xd0 [ 107.377502][ T5783] ? kobject_put+0x43c/0x470 [ 107.382173][ T5783] erofs_shrinker_unregister+0x5d/0x170 [ 107.387868][ T5783] erofs_put_super+0x4e/0x150 [ 107.392677][ T5783] ? erofs_free_inode+0xb0/0xb0 [ 107.397664][ T5783] generic_shutdown_super+0x134/0x2b0 [ 107.403254][ T5783] kill_block_super+0x44/0x90 [ 107.408037][ T5783] erofs_kill_sb+0x4c/0x140 [ 107.412600][ T5783] deactivate_locked_super+0x97/0x100 [ 107.417998][ T5783] cleanup_mnt+0x429/0x4c0 [ 107.422466][ T5783] task_work_run+0x1ce/0x250 [ 107.427114][ T5783] ? task_work_cancel+0x240/0x240 [ 107.432254][ T5783] ? exit_to_user_mode_loop+0x3b/0x110 [ 107.437739][ T5783] exit_to_user_mode_loop+0xe6/0x110 [ 107.443049][ T5783] exit_to_user_mode_prepare+0xb1/0x140 [ 107.448622][ T5783] syscall_exit_to_user_mode+0x1a/0x50 [ 107.454117][ T5783] do_syscall_64+0x61/0xb0 [ 107.458553][ T5783] ? clear_bhb_loop+0x40/0x90 [ 107.463246][ T5783] ? clear_bhb_loop+0x40/0x90 [ 107.468116][ T5783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.474045][ T5783] RIP: 0033:0x7fb1c278ff17 [ 107.478747][ T5783] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 107.498630][ T5783] RSP: 002b:00007fffd52c82a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.507066][ T5783] RAX: 0000000000000000 RBX: 00007fb1c2811c05 RCX: 00007fb1c278ff17 [ 107.515172][ T5783] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd52c8360 [ 107.523246][ T5783] RBP: 00007fffd52c8360 R08: 0000000000000000 R09: 0000000000000000 [ 107.531240][ T5783] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd52c93f0 [ 107.539235][ T5783] R13: 00007fb1c2811c05 R14: 000000000001a138 R15: 00007fffd52c9430 [ 107.547325][ T5783] [ 107.551402][ T5783] Disabling lock debugging due to kernel taint [ 107.559689][ T6122] EXT4-fs (loop2): 1 truncate cleaned up [ 107.603220][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.849160][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.029160][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 108.036532][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.045961][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.062144][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 108.074545][ T8] pvrusb2: ********** [ 108.078747][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 108.090190][ T8] pvrusb2: Important functionality might not be entirely working. [ 108.098123][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 108.112376][ T8] pvrusb2: ********** [ 108.274582][ T2318] pvrusb2: Invalid write control endpoint [ 108.326987][ T2318] pvrusb2: Invalid write control endpoint [ 108.341060][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 108.350506][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 108.358258][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 108.368291][ T2318] pvrusb2: Device being rendered inoperable [ 108.375261][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 108.382484][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 108.395569][ T2318] pvrusb2: Attached sub-driver cx25840 [ 108.401119][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 108.411357][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 108.493135][ T6124] pvrusb2: Attempted to execute control transfer when device not ok [ 108.502560][ T5857] usb 4-1: USB disconnect, device number 2