last executing test programs: 5.132459887s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 4.886500994s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='* / 2147483647 0 0 0 1 0\n\x00', 0x19) 4.708516139s ago: executing program 0 (id=6): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c39000101020301010902200001010080fa0904000002ffffff000705010200020007058102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0xa, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) 4.586546552s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 4.478631535s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,port=2049,vers=4.2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r3, &(0x7f0000000340), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r4, &(0x7f00000003c0), 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000440), 0x64) 4.366388167s ago: executing program 3 (id=4): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, 'BBBB', {0x3, 0x100, 0x0, 0x1, 0x100}}) nanosleep(&(0x7f0000000300)={0x5}, 0x0) 2.783843978s ago: executing program 1 (id=7): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x0, @private=0xa010101}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @empty}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) 1.406746534s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x559d, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x242, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x242, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) fallocate(r1, 0x0, 0x0, 0x1000000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x0, 0x1000000, 0x1, 0x0, 0x0, [{{r1}}]}) 1.223109938s ago: executing program 3 (id=9): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') 1.110660861s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='disk\n\x00\x00\x00\x00\x00', 0xb) 931.645506ms ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/reg-dummy/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='reg-dummy\x00', 0xa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/reg-dummy/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vga16fb\x00', 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/drivers/vga16fb/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='reg-dummy\x00', 0xa) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/vga16fb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='reg-dummy\x00', 0xa) 830.656948ms ago: executing program 1 (id=12): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc17691900010102030109022e0001010080fa0904000004ffffff0007058102000200070501020002000705820100020107050601000201"], 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 692.659182ms ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r3, &(0x7f0000000800)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000a00)='4096\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='run\x00', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/serialize_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='1\x00', 0x1) 467.515087ms ago: executing program 3 (id=14): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1, 0x35a4e900}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="9001") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="8801") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 0s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002e2f6465762f6c6f6f7030202e2f6465762f6c6f6f703120313238203000", 0x46) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01000038010000010000000000000000000000000000000000000000000000000000007468696e706f6f6c00") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 83.158052][ T5760] cgroup: Unknown subsys name 'net' [ 83.270473][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.034006][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.766142][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.774500][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.783394][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.783584][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.793654][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.805150][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.813210][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.814673][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.829418][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.838340][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.851423][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.852095][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.860611][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.874785][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.886045][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.893561][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.901022][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.906768][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.909224][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.925368][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.939655][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.955650][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.964021][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.971450][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.535895][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.678769][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.752551][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.826596][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.835369][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.844881][ T5775] bridge_slave_0: entered allmulticast mode [ 87.853102][ T5775] bridge_slave_0: entered promiscuous mode [ 87.867687][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.874941][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.882535][ T5775] bridge_slave_1: entered allmulticast mode [ 87.889777][ T5775] bridge_slave_1: entered promiscuous mode [ 88.020921][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.030890][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.039311][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.046912][ T5773] bridge_slave_0: entered allmulticast mode [ 88.054395][ T5773] bridge_slave_0: entered promiscuous mode [ 88.067246][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.074580][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.081975][ T5773] bridge_slave_1: entered allmulticast mode [ 88.089234][ T5773] bridge_slave_1: entered promiscuous mode [ 88.108191][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.117974][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.140338][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.149786][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.157153][ T5774] bridge_slave_0: entered allmulticast mode [ 88.165022][ T5774] bridge_slave_0: entered promiscuous mode [ 88.200048][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.207774][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.215213][ T5774] bridge_slave_1: entered allmulticast mode [ 88.222784][ T5774] bridge_slave_1: entered promiscuous mode [ 88.250282][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.273988][ T5775] team0: Port device team_slave_0 added [ 88.292788][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.317543][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.329361][ T5775] team0: Port device team_slave_1 added [ 88.364329][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.430102][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.439656][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.468096][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.483796][ T5773] team0: Port device team_slave_0 added [ 88.502782][ T5773] team0: Port device team_slave_1 added [ 88.520080][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.527156][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.553725][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.576636][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.584517][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.592662][ T5772] bridge_slave_0: entered allmulticast mode [ 88.600474][ T5772] bridge_slave_0: entered promiscuous mode [ 88.619601][ T5774] team0: Port device team_slave_0 added [ 88.646008][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.653090][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.685264][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.697888][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.705391][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.712797][ T5772] bridge_slave_1: entered allmulticast mode [ 88.720299][ T5772] bridge_slave_1: entered promiscuous mode [ 88.730697][ T5774] team0: Port device team_slave_1 added [ 88.750808][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.758865][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.785367][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.829948][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.837143][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.863456][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.876798][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.883949][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.910143][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.983685][ T5775] hsr_slave_0: entered promiscuous mode [ 88.990400][ T5775] hsr_slave_1: entered promiscuous mode [ 88.994046][ T5784] Bluetooth: hci0: command tx timeout [ 88.996355][ T5786] Bluetooth: hci3: command tx timeout [ 89.002855][ T5784] Bluetooth: hci2: command tx timeout [ 89.008306][ T5787] Bluetooth: hci1: command tx timeout [ 89.038804][ T5773] hsr_slave_0: entered promiscuous mode [ 89.045597][ T5773] hsr_slave_1: entered promiscuous mode [ 89.054816][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.063108][ T5773] Cannot create hsr debugfs directory [ 89.071511][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.105451][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.123367][ T5774] hsr_slave_0: entered promiscuous mode [ 89.130170][ T5774] hsr_slave_1: entered promiscuous mode [ 89.136946][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.144828][ T5774] Cannot create hsr debugfs directory [ 89.217132][ T5772] team0: Port device team_slave_0 added [ 89.262252][ T5772] team0: Port device team_slave_1 added [ 89.368178][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.376211][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.405213][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.457384][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.464692][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.490867][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.707045][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.738437][ T5772] hsr_slave_0: entered promiscuous mode [ 89.745767][ T5772] hsr_slave_1: entered promiscuous mode [ 89.753192][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.760820][ T5772] Cannot create hsr debugfs directory [ 89.775960][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.786319][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.798440][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.907787][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.923956][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.950077][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.991896][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.091498][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.104816][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.115826][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.127194][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.266373][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.279283][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.291092][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.312901][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.345706][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.390083][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.419103][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.426538][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.454219][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.470333][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.477589][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.517053][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.559346][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.566576][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.593548][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.623814][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.630982][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.665904][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.716539][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.723946][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.747925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.788488][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.909571][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.951394][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.958668][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.018222][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.025481][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.079492][ T5784] Bluetooth: hci2: command tx timeout [ 91.079503][ T5787] Bluetooth: hci0: command tx timeout [ 91.090756][ T5787] Bluetooth: hci1: command tx timeout [ 91.090793][ T5787] Bluetooth: hci3: command tx timeout [ 91.477288][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.494887][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.513132][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.624846][ T5774] veth0_vlan: entered promiscuous mode [ 91.648526][ T5774] veth1_vlan: entered promiscuous mode [ 91.726534][ T5775] veth0_vlan: entered promiscuous mode [ 91.753151][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.770753][ T5775] veth1_vlan: entered promiscuous mode [ 91.787447][ T5773] veth0_vlan: entered promiscuous mode [ 91.811182][ T5774] veth0_macvtap: entered promiscuous mode [ 91.838313][ T5773] veth1_vlan: entered promiscuous mode [ 91.855417][ T5774] veth1_macvtap: entered promiscuous mode [ 91.894351][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.908873][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.944112][ T5775] veth0_macvtap: entered promiscuous mode [ 91.959156][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968309][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.978295][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987268][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.019860][ T5772] veth0_vlan: entered promiscuous mode [ 92.036281][ T5773] veth0_macvtap: entered promiscuous mode [ 92.045542][ T5775] veth1_macvtap: entered promiscuous mode [ 92.073909][ T5772] veth1_vlan: entered promiscuous mode [ 92.098592][ T5773] veth1_macvtap: entered promiscuous mode [ 92.146246][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.157206][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.170846][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.196986][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.209710][ T28] cfg80211: failed to load regulatory.db [ 92.218287][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.228746][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.239959][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.254125][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.263326][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.274545][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.290610][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.365764][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.377702][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.387686][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.398589][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.411978][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.424386][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434892][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.444568][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.453710][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467474][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.481971][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.492632][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.502937][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514614][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.523475][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551074][ T5772] veth0_macvtap: entered promiscuous mode [ 92.600383][ T5772] veth1_macvtap: entered promiscuous mode [ 92.612222][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.620202][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.710561][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.729132][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.739415][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.750178][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.760256][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.770928][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.784240][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.825938][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.846939][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.857180][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.868597][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.878530][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.889221][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.900887][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.973232][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.988763][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.011615][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.020407][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.052162][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.060145][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.088670][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.091947][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.153162][ T5786] Bluetooth: hci1: command tx timeout [ 93.158660][ T5786] Bluetooth: hci0: command tx timeout [ 93.164448][ T5787] Bluetooth: hci2: command tx timeout [ 93.170031][ T5784] Bluetooth: hci3: command tx timeout [ 93.270878][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.279273][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293057][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.301011][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.343929][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.381846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.487043][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.533874][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.794038][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.018731][ T5819] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 94.029264][ T5819] usb 1-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 94.040575][ T5819] usb 1-1: Product: syz [ 94.046186][ T5819] usb 1-1: Manufacturer: syz [ 94.050953][ T5819] usb 1-1: SerialNumber: syz [ 94.079308][ T5819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 94.082244][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.090033][ T5819] pvrusb2: ********** [ 94.098839][ T5819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 94.110782][ T5819] pvrusb2: Important functionality might not be entirely working. [ 94.120623][ T5819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 94.133765][ T5819] pvrusb2: ********** [ 94.292288][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.301418][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.311107][ T8] usb 4-1: Product: syz [ 94.316200][ T8] usb 4-1: Manufacturer: syz [ 94.320867][ T8] usb 4-1: SerialNumber: syz [ 94.405714][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.062562][ T5852] NFSD: attempt to initialize umh client tracking in a container ignored. [ 95.075925][ T5852] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 95.089722][ T5852] NFSD: Unable to initialize client recovery tracking! (-22) [ 95.097856][ T5852] NFSD: starting 90-second grace period (net f000042a) [ 95.232646][ T5787] Bluetooth: hci0: command tx timeout [ 95.232677][ T5084] Bluetooth: hci2: command tx timeout [ 95.238173][ T5786] Bluetooth: hci3: command tx timeout [ 95.252318][ T5784] Bluetooth: hci1: command tx timeout [ 95.874916][ T9] usb 4-1: Service connection timeout for: 257 [ 95.881277][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 95.929591][ T9] ath9k_htc: Failed to initialize the device [ 95.943168][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 96.318721][ T2323] pvrusb2: Failed to submit write-control URB status=-2 [ 96.336080][ T2323] pvrusb2: Device being rendered inoperable [ 96.343252][ T5819] usb 1-1: USB disconnect, device number 2 [ 96.357448][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.368956][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.501814][ T5858] NFSD: attempt to initialize umh client tracking in a container ignored. [ 96.510947][ T5858] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 96.520139][ T5858] NFSD: Unable to initialize client recovery tracking! (-22) [ 96.530279][ T5858] NFSD: starting 90-second grace period (net f000047d) [ 96.750190][ T5863] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.782604][ T5865] syz.2.8[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.811360][ T5863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 96.858887][ T5816] usb 4-1: USB disconnect, device number 2 [ 96.999782][ T5868] loop0: detected capacity change from 0 to 128 [ 97.028774][ T5868] syz.3.9: attempt to access beyond end of device [ 97.028774][ T5868] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 97.114528][ T5870] PM: hibernation: hibernation entry [ 97.447718][ T5865] loop2: detected capacity change from 0 to 32768 [ 97.479885][ T5865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (5865) [ 97.523336][ T5865] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.535266][ T5865] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 97.548766][ T5865] BTRFS info (device loop2): using free space tree [ 97.574036][ T5876] md: serialize_policy is only effective for raid1 [ 97.621749][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.639612][ T5865] BTRFS info (device loop2): enabling ssd optimizations [ 97.647283][ T5865] BTRFS info (device loop2): auto enabling async discard [ 97.830649][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 97.851823][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.872977][ T9] usb 2-1: Product: syz [ 97.887592][ T9] usb 2-1: Manufacturer: syz [ 97.899700][ T5870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.906659][ T9] usb 2-1: SerialNumber: syz [ 97.926255][ T5870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.949388][ T9] usb 2-1: selecting invalid altsetting 1 [ 97.974189][ T5870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.994159][ T9] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 98.000688][ T9] usb 2-1: unable to init card! (ret=-5) [ 98.014097][ T5870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.032455][ T9] snd-usb-caiaq: probe of 2-1:1.0 failed with error -5 [ 98.033312][ T5815] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.047665][ T5870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.105521][ T5870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.120370][ T5775] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 98.154411][ T5870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.161184][ T5870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.185054][ T5870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.203396][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.209477][ T5870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.242169][ T5870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.267176][ T5815] usb 4-1: not running at top speed; connect to a high speed hub [ 98.293353][ T5815] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 98.325364][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.426506][ T5816] usb 2-1: USB disconnect, device number 2 [ 98.817577][ T5870] Filesystems sync: 0.517 seconds [ 98.826458][ T5870] Freezing user space processes [ 99.002464][ T5870] Freezing user space processes completed (elapsed 0.171 seconds) [ 99.010638][ T5870] OOM killer disabled. [ 99.232222][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.260321][ T5870] PM: hibernation: Preallocating image memory [ 100.074386][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.192795][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.281749][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.681983][ T5815] cxacru 4-1:1.0: receive of cm 0x90 failed (-104) [ 100.699108][ T5906] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 100.723266][ T5906] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 100.732149][ T5906] ------------[ cut here ]------------ [ 100.737668][ T5906] WARNING: CPU: 1 PID: 5906 at drivers/base/firmware_loader/fallback.c:144 firmware_fallback_sysfs+0x722/0x950 [ 100.749887][ T5906] Modules linked in: [ 100.753922][ T5906] CPU: 1 PID: 5906 Comm: cxacru Not tainted syzkaller #0 [ 100.760989][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.771171][ T5906] RIP: 0010:firmware_fallback_sysfs+0x722/0x950 [ 100.777624][ T5906] Code: df e8 c2 3c f9 ff 45 89 e7 eb bc e8 f8 61 33 fc c6 05 76 f1 22 09 01 48 c7 c7 a0 8b 42 8b e8 e5 53 2d 05 eb a7 e8 de 61 33 fc <0f> 0b 4c 89 f7 48 c7 c6 80 8c 42 8b 4c 89 e2 e8 ba 93 31 05 eb 8c [ 100.797365][ T5906] RSP: 0018:ffffc90004a67ac0 EFLAGS: 00010293 [ 100.803543][ T5906] RAX: ffffffff85540fa2 RBX: dffffc0000000000 RCX: ffff888025f11e00 [ 100.811615][ T5906] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 100.819628][ T5906] RBP: 0000000000000001 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 100.828704][ T5906] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffc90004a67d20 [ 100.836977][ T5906] R13: 0000000000001770 R14: ffff88802a1c3078 R15: 00000000fffffff5 [ 100.845036][ T5906] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 100.854061][ T5906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.860687][ T5906] CR2: 0000001b2d524220 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 100.868768][ T5906] Call Trace: [ 100.872175][ T5906] [ 100.875149][ T5906] ? kmem_cache_free+0xf8/0x290 [ 100.880058][ T5906] _request_firmware+0xf29/0x1520 [ 100.885193][ T5906] ? request_firmware+0x50/0x50 [ 100.890093][ T5906] ? vsprintf+0x30/0x30 [ 100.894516][ T5906] request_firmware+0x36/0x50 [ 100.899308][ T5906] cxacru_find_firmware+0x105/0x230 [ 100.904705][ T5906] ? cxacru_timeout_kill+0x40/0x40 [ 100.909896][ T5906] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 100.916022][ T5906] cxacru_heavy_init+0x17e/0xc40 [ 100.921125][ T5906] ? cxacru_bind+0x1020/0x1020 [ 100.927082][ T5906] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 100.933320][ T5906] ? _raw_spin_unlock+0x40/0x40 [ 100.938258][ T5906] ? complete+0xb1/0x1b0 [ 100.942607][ T5906] ? cxacru_bind+0x1020/0x1020 [ 100.947477][ T5906] usbatm_do_heavy_init+0x8e/0x110 [ 100.952740][ T5906] kthread+0x2fa/0x390 [ 100.956866][ T5906] ? skb_copy_to_linear_data+0x50/0x50 [ 100.962482][ T5906] ? kthread_blkcg+0xd0/0xd0 [ 100.967135][ T5906] ret_from_fork+0x48/0x80 [ 100.971659][ T5906] ? kthread_blkcg+0xd0/0xd0 [ 100.976320][ T5906] ret_from_fork_asm+0x11/0x20 [ 100.981180][ T5906] [ 100.984316][ T5906] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.991662][ T5906] CPU: 1 PID: 5906 Comm: cxacru Not tainted syzkaller #0 [ 100.998733][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.008841][ T5906] Call Trace: [ 101.012164][ T5906] [ 101.015139][ T5906] dump_stack_lvl+0x18c/0x250 [ 101.019875][ T5906] ? show_regs_print_info+0x20/0x20 [ 101.025131][ T5906] ? load_image+0x420/0x420 [ 101.029721][ T5906] panic+0x2ca/0x720 [ 101.033702][ T5906] ? bpf_jit_dump+0xd0/0xd0 [ 101.038283][ T5906] ? ret_from_fork_asm+0x11/0x20 [ 101.043291][ T5906] __warn+0x2e0/0x470 [ 101.047412][ T5906] ? firmware_fallback_sysfs+0x722/0x950 [ 101.053189][ T5906] ? firmware_fallback_sysfs+0x722/0x950 [ 101.058890][ T5906] report_bug+0x2be/0x4f0 [ 101.063284][ T5906] ? firmware_fallback_sysfs+0x722/0x950 [ 101.068970][ T5906] ? firmware_fallback_sysfs+0x722/0x950 [ 101.074659][ T5906] ? firmware_fallback_sysfs+0x724/0x950 [ 101.080331][ T5906] handle_bug+0xcf/0x120 [ 101.084612][ T5906] exc_invalid_op+0x1a/0x50 [ 101.089157][ T5906] asm_exc_invalid_op+0x1a/0x20 [ 101.094045][ T5906] RIP: 0010:firmware_fallback_sysfs+0x722/0x950 [ 101.100330][ T5906] Code: df e8 c2 3c f9 ff 45 89 e7 eb bc e8 f8 61 33 fc c6 05 76 f1 22 09 01 48 c7 c7 a0 8b 42 8b e8 e5 53 2d 05 eb a7 e8 de 61 33 fc <0f> 0b 4c 89 f7 48 c7 c6 80 8c 42 8b 4c 89 e2 e8 ba 93 31 05 eb 8c [ 101.119970][ T5906] RSP: 0018:ffffc90004a67ac0 EFLAGS: 00010293 [ 101.126072][ T5906] RAX: ffffffff85540fa2 RBX: dffffc0000000000 RCX: ffff888025f11e00 [ 101.134107][ T5906] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 101.142113][ T5906] RBP: 0000000000000001 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 101.150117][ T5906] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffc90004a67d20 [ 101.158125][ T5906] R13: 0000000000001770 R14: ffff88802a1c3078 R15: 00000000fffffff5 [ 101.166142][ T5906] ? firmware_fallback_sysfs+0x722/0x950 [ 101.171830][ T5906] ? kmem_cache_free+0xf8/0x290 [ 101.176730][ T5906] _request_firmware+0xf29/0x1520 [ 101.181813][ T5906] ? request_firmware+0x50/0x50 [ 101.186706][ T5906] ? vsprintf+0x30/0x30 [ 101.190907][ T5906] request_firmware+0x36/0x50 [ 101.195627][ T5906] cxacru_find_firmware+0x105/0x230 [ 101.200869][ T5906] ? cxacru_timeout_kill+0x40/0x40 [ 101.206026][ T5906] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 101.212046][ T5906] cxacru_heavy_init+0x17e/0xc40 [ 101.217031][ T5906] ? cxacru_bind+0x1020/0x1020 [ 101.221835][ T5906] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 101.227775][ T5906] ? _raw_spin_unlock+0x40/0x40 [ 101.232677][ T5906] ? complete+0xb1/0x1b0 [ 101.236957][ T5906] ? cxacru_bind+0x1020/0x1020 [ 101.241772][ T5906] usbatm_do_heavy_init+0x8e/0x110 [ 101.246928][ T5906] kthread+0x2fa/0x390 [ 101.251038][ T5906] ? skb_copy_to_linear_data+0x50/0x50 [ 101.256533][ T5906] ? kthread_blkcg+0xd0/0xd0 [ 101.261160][ T5906] ret_from_fork+0x48/0x80 [ 101.265613][ T5906] ? kthread_blkcg+0xd0/0xd0 [ 101.270233][ T5906] ret_from_fork_asm+0x11/0x20 [ 101.275053][ T5906] [ 101.278690][ T5906] Kernel Offset: disabled [ 101.283068][ T5906] Rebooting in 86400 seconds..