Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. 2025/04/15 18:31:22 ignoring optional flag "sandboxArg"="0" 2025/04/15 18:31:23 parsed 1 programs [ 136.926807][ T6048] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.400770][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.407537][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.911218][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.921717][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.930847][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.943051][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.951510][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.237082][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.245061][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.279627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.287780][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.037482][ T6116] chnl_net:caif_netlink_parms(): no params data found [ 143.130426][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.138154][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.146254][ T6116] bridge_slave_0: entered allmulticast mode [ 143.153803][ T6116] bridge_slave_0: entered promiscuous mode [ 143.162433][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.170012][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.177560][ T6116] bridge_slave_1: entered allmulticast mode [ 143.185115][ T6116] bridge_slave_1: entered promiscuous mode [ 143.223998][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.236743][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.278532][ T6116] team0: Port device team_slave_0 added [ 143.288224][ T6116] team0: Port device team_slave_1 added [ 143.326725][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.333721][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.359985][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.372350][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.379429][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.405615][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.461775][ T6116] hsr_slave_0: entered promiscuous mode [ 143.468314][ T6116] hsr_slave_1: entered promiscuous mode [ 143.474541][ T6116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.482549][ T6116] Cannot create hsr debugfs directory [ 143.621162][ T6116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.679358][ T6116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.757858][ T6116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.832664][ T6116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.964562][ T6116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.974952][ T6116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.987449][ T6116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.998331][ T6116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.024868][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.032791][ T6116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.040397][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.047669][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.061035][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.070113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.142441][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.164937][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.179799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.186988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.205524][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.212722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.411596][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.461919][ T6116] veth0_vlan: entered promiscuous mode [ 144.477378][ T6116] veth1_vlan: entered promiscuous mode [ 144.510384][ T6116] veth0_macvtap: entered promiscuous mode [ 144.520621][ T6116] veth1_macvtap: entered promiscuous mode [ 144.540622][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.553012][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.564617][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.580648][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.591403][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.603512][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.620800][ T6116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.630232][ T6116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.639046][ T6116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.647791][ T6116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/04/15 18:31:37 executed programs: 0 [ 145.429539][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.439595][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.449235][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.458126][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.466467][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.669559][ T6139] chnl_net:caif_netlink_parms(): no params data found [ 145.767808][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.775084][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.783231][ T6139] bridge_slave_0: entered allmulticast mode [ 145.792662][ T6139] bridge_slave_0: entered promiscuous mode [ 145.801672][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.809240][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.816786][ T6139] bridge_slave_1: entered allmulticast mode [ 145.824370][ T6139] bridge_slave_1: entered promiscuous mode [ 145.870196][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.891516][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.934322][ T6139] team0: Port device team_slave_0 added [ 145.943328][ T6139] team0: Port device team_slave_1 added [ 145.986902][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.993897][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.020728][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.035368][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.042626][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.069583][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.139721][ T6139] hsr_slave_0: entered promiscuous mode [ 146.147880][ T6139] hsr_slave_1: entered promiscuous mode [ 146.154355][ T6139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.162602][ T6139] Cannot create hsr debugfs directory [ 146.314939][ T6139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.556873][ T5142] Bluetooth: hci0: command tx timeout [ 147.759278][ T6139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.859159][ T6139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.946536][ T6139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.072971][ T6139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.088200][ T6139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.099050][ T6139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.110459][ T6139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.199070][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.222924][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.243177][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.250418][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.261543][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.268701][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.493291][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.622560][ T6139] veth0_vlan: entered promiscuous mode [ 148.659454][ T6139] veth1_vlan: entered promiscuous mode [ 148.725259][ T6139] veth0_macvtap: entered promiscuous mode [ 148.743980][ T6139] veth1_macvtap: entered promiscuous mode [ 148.791299][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.802195][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.812385][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.823712][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.836512][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.852213][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.862794][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.873599][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.884403][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.897486][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.913158][ T6139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.922423][ T6139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.931442][ T6139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.941338][ T6139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.020160][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.036617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.069111][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.078472][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.163530][ T6152] loop0: detected capacity change from 0 to 2048 [ 149.179028][ T6152] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 149.193894][ T6152] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.205277][ T6152] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 149.220205][ T6152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.234250][ T30] audit: type=1800 audit(1744741901.376:2): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 149.636042][ T5142] Bluetooth: hci0: command tx timeout [ 150.275332][ T6156] loop0: detected capacity change from 0 to 2048 [ 150.287967][ T6156] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 150.300304][ T6156] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 150.312475][ T6156] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 150.325039][ T6156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.338609][ T30] audit: type=1800 audit(1744741902.486:3): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 150.453512][ T6157] [ 150.455898][ T6157] ===================================== [ 150.461460][ T6157] WARNING: bad unlock balance detected! [ 150.466994][ T6157] 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3-dirty #0 Not tainted [ 150.474624][ T6157] ------------------------------------- [ 150.480168][ T6157] syz.0.17/6157 is trying to release lock (&sbi->s_alloc_mutex) at: [ 150.488160][ T6157] [] udf_free_blocks+0x25e/0x23b0 [ 150.494771][ T6157] but there are no more locks to release! [ 150.500650][ T6157] [ 150.500650][ T6157] other info that might help us debug this: [ 150.508702][ T6157] 3 locks held by syz.0.17/6157: [ 150.513691][ T6157] #0: ffff88806ddbc420 (sb_writers#12){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 150.523566][ T6157] #1: ffff88805f0795c0 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: udf_file_write_iter+0x6d/0x6c0 [ 150.534670][ T6157] #2: ffff88805f0793f0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x3b9/0x53f0 [ 150.544467][ T6157] [ 150.544467][ T6157] stack backtrace: [ 150.550359][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.0.17 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3-dirty #0 PREEMPT(full) [ 150.550382][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.550393][ T6157] Call Trace: [ 150.550402][ T6157] [ 150.550411][ T6157] dump_stack_lvl+0x241/0x360 [ 150.550443][ T6157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.550469][ T6157] ? __pfx__printk+0x10/0x10 [ 150.550503][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.550533][ T6157] ? print_lock+0x171/0x1a0 [ 150.550563][ T6157] ? udf_free_blocks+0x25e/0x23b0 [ 150.550591][ T6157] print_unlock_imbalance_bug+0x185/0x1a0 [ 150.550635][ T6157] lock_release+0x1ed/0x3e0 [ 150.550663][ T6157] ? udf_free_blocks+0x25e/0x23b0 [ 150.550690][ T6157] ? udf_free_blocks+0x25e/0x23b0 [ 150.550717][ T6157] __mutex_unlock_slowpath+0xee/0x800 [ 150.550748][ T6157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.550772][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.550792][ T6157] ? __lock_acquire+0xad5/0xd80 [ 150.550822][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.550842][ T6157] ? do_raw_spin_lock+0x151/0x370 [ 150.550867][ T6157] udf_free_blocks+0x25e/0x23b0 [ 150.550896][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.550916][ T6157] ? do_raw_spin_unlock+0x13c/0x8b0 [ 150.550942][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.550961][ T6157] ? _raw_spin_unlock+0x28/0x50 [ 150.550980][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551000][ T6157] ? udf_prealloc_blocks+0xfa8/0x1470 [ 150.551030][ T6157] ? __pfx_udf_free_blocks+0x10/0x10 [ 150.551059][ T6157] ? __pfx_udf_prealloc_blocks+0x10/0x10 [ 150.551089][ T6157] ? udf_next_aext+0x3c5/0x490 [ 150.551109][ T6157] ? udf_map_block+0x32fb/0x53f0 [ 150.551129][ T6157] udf_map_block+0x3061/0x53f0 [ 150.551162][ T6157] ? __pfx_udf_map_block+0x10/0x10 [ 150.551179][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551201][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551221][ T6157] ? xas_load+0x5a1/0x5c0 [ 150.551248][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551273][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551293][ T6157] ? filemap_get_folios_tag+0x1bf/0x790 [ 150.551314][ T6157] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 150.551339][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551359][ T6157] ? clean_bdev_aliases+0x6ff/0x8a0 [ 150.551386][ T6157] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 150.551416][ T6157] __udf_get_block+0x128/0x410 [ 150.551435][ T6157] ? __pfx___udf_get_block+0x10/0x10 [ 150.551456][ T6157] ? _raw_spin_unlock+0x28/0x50 [ 150.551482][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551507][ T6157] ? create_empty_buffers+0x471/0x530 [ 150.551538][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551566][ T6157] __block_write_begin_int+0x693/0x1930 [ 150.551610][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551639][ T6157] ? __pfx_udf_get_block+0x10/0x10 [ 150.551658][ T6157] ? __pfx___block_write_begin_int+0x10/0x10 [ 150.551686][ T6157] ? __pfx_udf_get_block+0x10/0x10 [ 150.551703][ T6157] block_write_begin+0x8f/0x120 [ 150.551728][ T6157] udf_write_begin+0xfc/0x250 [ 150.551747][ T6157] generic_perform_write+0x32b/0xa10 [ 150.551775][ T6157] ? __pfx_generic_perform_write+0x10/0x10 [ 150.551794][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551819][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551839][ T6157] ? __generic_file_write_iter+0x102/0x230 [ 150.551859][ T6157] ? udf_file_write_iter+0x1ac/0x6c0 [ 150.551876][ T6157] udf_file_write_iter+0x2e7/0x6c0 [ 150.551896][ T6157] iter_file_splice_write+0xbe1/0x1530 [ 150.551927][ T6157] ? __pfx_iter_file_splice_write+0x10/0x10 [ 150.551948][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551971][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.551991][ T6157] ? rcu_read_lock_any_held+0xbb/0x160 [ 150.552015][ T6157] ? direct_splice_actor+0x128/0x220 [ 150.552035][ T6157] ? __pfx_iter_file_splice_write+0x10/0x10 [ 150.552054][ T6157] direct_splice_actor+0x11d/0x220 [ 150.552074][ T6157] splice_direct_to_actor+0x597/0xc90 [ 150.552093][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.552120][ T6157] ? __pfx_direct_splice_actor+0x10/0x10 [ 150.552140][ T6157] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 150.552163][ T6157] do_splice_direct+0x281/0x3d0 [ 150.552183][ T6157] ? __pfx_do_splice_direct+0x10/0x10 [ 150.552202][ T6157] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.552226][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.552245][ T6157] ? rw_verify_area+0x246/0x630 [ 150.552272][ T6157] do_sendfile+0x582/0x8c0 [ 150.552297][ T6157] ? __pfx_do_sendfile+0x10/0x10 [ 150.552324][ T6157] __se_sys_sendfile64+0x17e/0x1e0 [ 150.552345][ T6157] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 150.552367][ T6157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 150.552389][ T6157] do_syscall_64+0xf3/0x230 [ 150.552416][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.552434][ T6157] RIP: 0033:0x7fedc3385d29 [ 150.552449][ T6157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.552464][ T6157] RSP: 002b:00007fedc41b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.552482][ T6157] RAX: ffffffffffffffda RBX: 00007fedc3576080 RCX: 00007fedc3385d29 [ 150.552496][ T6157] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 150.552506][ T6157] RBP: 00007fedc3401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 150.552517][ T6157] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 150.552528][ T6157] R13: 0000000000000000 R14: 00007fedc3576080 R15: 00007ffc4f30ca78 [ 150.552564][ T6157] [ 151.716306][ T5142] Bluetooth: hci0: command tx timeout [ 153.796343][ T5142] Bluetooth: hci0: command tx timeout