last executing test programs: 2.252463086s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x40) 2.107496179s ago: executing program 2 (id=5): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x3, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, r0, 0x0) 1.901553391s ago: executing program 2 (id=6): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.796050028s ago: executing program 0 (id=1): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 1.633740397s ago: executing program 0 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900480000fc0200800000000000af5897ac8800b69d00000000000001ff0200000000000000000500"], 0x7e) 1.045337113s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, &(0x7f0000000040)) 678.13099ms ago: executing program 1 (id=18): r0 = socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 660.63984ms ago: executing program 3 (id=19): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xeb) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 577.59229ms ago: executing program 3 (id=20): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r1, 0x0, &(0x7f0000000480)="e1cc", 0x2, 0x4}) 470.928941ms ago: executing program 3 (id=21): capset(&(0x7f0000000080)={0x20080522}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) 445.079057ms ago: executing program 1 (id=22): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 346.998126ms ago: executing program 1 (id=23): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000800)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 280.728848ms ago: executing program 3 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 256.173246ms ago: executing program 1 (id=25): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x8, 0x400) fanotify_mark(r2, 0x1, 0x40000000, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 151.427627ms ago: executing program 3 (id=26): r0 = getpid() capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 136.708403ms ago: executing program 1 (id=27): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 56.278936ms ago: executing program 3 (id=28): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffdf6, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c7807e8773eed7b94fa099ab84feadec2ea95f67aba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e9b8e4fb4634f8d4c0000000d75f34bb50d8f7084000000000000000000") 0s ago: executing program 1 (id=29): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 66.441866][ T5818] cgroup: Unknown subsys name 'net' [ 66.547488][ T5818] cgroup: Unknown subsys name 'cpuset' [ 66.556257][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.849740][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.854243][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.862887][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.874558][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.885936][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.894090][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.901819][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.910075][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.917598][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.925999][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.935046][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.966530][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.977360][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.987045][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.995145][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.006337][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.026009][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.033815][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.041282][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.049660][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.058632][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.438495][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 70.610813][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.623319][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.651841][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.659541][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.667217][ T5833] bridge_slave_0: entered allmulticast mode [ 70.674168][ T5833] bridge_slave_0: entered promiscuous mode [ 70.693919][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.705278][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.712422][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.719971][ T5833] bridge_slave_1: entered allmulticast mode [ 70.727057][ T5833] bridge_slave_1: entered promiscuous mode [ 70.835428][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.861399][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.968317][ T5833] team0: Port device team_slave_0 added [ 70.974127][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.982193][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.990472][ T5829] bridge_slave_0: entered allmulticast mode [ 70.997744][ T5829] bridge_slave_0: entered promiscuous mode [ 71.005495][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012643][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.020180][ T5837] bridge_slave_0: entered allmulticast mode [ 71.027231][ T5837] bridge_slave_0: entered promiscuous mode [ 71.034243][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.041685][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.048870][ T5840] bridge_slave_0: entered allmulticast mode [ 71.055917][ T5840] bridge_slave_0: entered promiscuous mode [ 71.065039][ T5833] team0: Port device team_slave_1 added [ 71.070792][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.078392][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.086174][ T5829] bridge_slave_1: entered allmulticast mode [ 71.093087][ T5829] bridge_slave_1: entered promiscuous mode [ 71.100143][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107303][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.114461][ T5837] bridge_slave_1: entered allmulticast mode [ 71.121568][ T5837] bridge_slave_1: entered promiscuous mode [ 71.128770][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.135943][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.143038][ T5840] bridge_slave_1: entered allmulticast mode [ 71.150093][ T5840] bridge_slave_1: entered promiscuous mode [ 71.236105][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.243062][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.269418][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.283508][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.303854][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.306730][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315888][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.329640][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.332690][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.346114][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.353060][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.379762][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.393295][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.405187][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.463084][ T5840] team0: Port device team_slave_0 added [ 71.491482][ T5837] team0: Port device team_slave_0 added [ 71.499144][ T5840] team0: Port device team_slave_1 added [ 71.506730][ T5829] team0: Port device team_slave_0 added [ 71.523097][ T5837] team0: Port device team_slave_1 added [ 71.541682][ T5829] team0: Port device team_slave_1 added [ 71.593609][ T5833] hsr_slave_0: entered promiscuous mode [ 71.600193][ T5833] hsr_slave_1: entered promiscuous mode [ 71.620401][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.627686][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.653854][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.676595][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.683543][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.709730][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.721577][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.728866][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.755020][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.767012][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.773955][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.800458][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.818580][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.825556][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.851519][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.863137][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.870403][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.896351][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.005406][ T51] Bluetooth: hci0: command tx timeout [ 72.011168][ T5832] Bluetooth: hci1: command tx timeout [ 72.012840][ T5840] hsr_slave_0: entered promiscuous mode [ 72.023334][ T5840] hsr_slave_1: entered promiscuous mode [ 72.029952][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.035839][ T5840] Cannot create hsr debugfs directory [ 72.084778][ T5832] Bluetooth: hci2: command tx timeout [ 72.095051][ T5832] Bluetooth: hci3: command tx timeout [ 72.123326][ T5837] hsr_slave_0: entered promiscuous mode [ 72.129834][ T5837] hsr_slave_1: entered promiscuous mode [ 72.136348][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.142072][ T5837] Cannot create hsr debugfs directory [ 72.154084][ T5829] hsr_slave_0: entered promiscuous mode [ 72.160671][ T5829] hsr_slave_1: entered promiscuous mode [ 72.166977][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 72.172700][ T5829] Cannot create hsr debugfs directory [ 72.577364][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.612968][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.623904][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.645910][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.710991][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.720801][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.737121][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.748408][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.866253][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.880373][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.927310][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.938872][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.029746][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.053467][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.063361][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.080468][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.091393][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.140408][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.159234][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.181858][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.189124][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.222663][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.229815][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.252123][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.288381][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.295505][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.322863][ T4544] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.330054][ T4544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.367582][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.422667][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.442554][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.511301][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.518526][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.542020][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.549208][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.570334][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.601058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.608298][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.671269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.678514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.759701][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.771960][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.829838][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.987370][ T5833] veth0_vlan: entered promiscuous mode [ 74.005885][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.034306][ T5833] veth1_vlan: entered promiscuous mode [ 74.088478][ T5832] Bluetooth: hci1: command tx timeout [ 74.093906][ T5832] Bluetooth: hci0: command tx timeout [ 74.148210][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.159506][ T5829] veth0_vlan: entered promiscuous mode [ 74.175127][ T5832] Bluetooth: hci3: command tx timeout [ 74.175179][ T51] Bluetooth: hci2: command tx timeout [ 74.180613][ T5833] veth0_macvtap: entered promiscuous mode [ 74.202048][ T5833] veth1_macvtap: entered promiscuous mode [ 74.215845][ T5829] veth1_vlan: entered promiscuous mode [ 74.264163][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.279599][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.294130][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.320819][ T5837] veth0_vlan: entered promiscuous mode [ 74.328963][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.343687][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.367059][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.375960][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.399737][ T5837] veth1_vlan: entered promiscuous mode [ 74.407558][ T5829] veth0_macvtap: entered promiscuous mode [ 74.447724][ T5829] veth1_macvtap: entered promiscuous mode [ 74.479497][ T5840] veth0_vlan: entered promiscuous mode [ 74.522593][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.529133][ T5840] veth1_vlan: entered promiscuous mode [ 74.541983][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.544301][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.579871][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.588899][ T5837] veth0_macvtap: entered promiscuous mode [ 74.622445][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636878][ T5837] veth1_macvtap: entered promiscuous mode [ 74.652205][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.666760][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.668023][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.684730][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704127][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713840][ T5840] veth0_macvtap: entered promiscuous mode [ 74.724265][ T5840] veth1_macvtap: entered promiscuous mode [ 74.741410][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.773025][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.793174][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.824197][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.835524][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.859315][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.867365][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.879079][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.932077][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.982078][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.996367][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.024146][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.039743][ T4544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.051647][ T4544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.071942][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171895][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.192390][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.211297][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.235112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.305367][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.313216][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.420110][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.439785][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.492187][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508442][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.688120][ T5928] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.697398][ T5926] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 75.715991][ T5926] syzkaller1: entered promiscuous mode [ 75.721478][ T5926] syzkaller1: entered allmulticast mode [ 75.770830][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.034147][ T5940] input: syz1 as /devices/virtual/input/input5 [ 76.058805][ T5940] input: failed to attach handler leds to device input5, error: -6 [ 76.168792][ T51] Bluetooth: hci0: command tx timeout [ 76.168804][ T5832] Bluetooth: hci1: command tx timeout [ 76.244948][ T5832] Bluetooth: hci2: command tx timeout [ 76.255256][ T5832] Bluetooth: hci3: command tx timeout [ 76.406608][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.531766][ T5956] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.542267][ T5956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.549655][ T5956] IPv6: NLM_F_CREATE should be set when creating new route [ 76.556964][ T5956] IPv6: NLM_F_CREATE should be set when creating new route [ 76.587896][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.602662][ T9] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.607661][ T5959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.623647][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.661396][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.689984][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.723788][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 76.960212][ T5971] process 'syz.1.25' launched '/dev/fd/4' with NULL argv: empty string added [ 77.036875][ T5973] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 77.053160][ T5975] warning: `syz.1.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.374454][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.394488][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.528851][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.539894][ T5873] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.549340][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 77.554439][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.568002][ T5873] usb 4-1: config 0 descriptor?? [ 77.574785][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 77.583831][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.595856][ T5893] usb 2-1: Product: syz [ 77.600067][ T5893] usb 2-1: Manufacturer: syz [ 77.605006][ T5893] usb 2-1: SerialNumber: syz [ 77.611838][ T5893] usb 2-1: config 0 descriptor?? [ 77.822962][ T5893] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 77.981614][ T5873] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 77.995073][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input6 [ 78.105815][ T5873] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 78.184709][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 78.196654][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 78.205102][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 78.214046][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 78.224089][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 78.229284][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 78.248879][ C1] RSP: 0018:ffffc90000a07eb8 EFLAGS: 00010002 [ 78.254949][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 78.262908][ C1] RDX: ffffc90002362000 RSI: 0000000000000543 RDI: 0000000000000544 [ 78.270870][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 78.278837][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 78.286803][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 78.294764][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 78.303682][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.310251][ C1] CR2: 000000110c3929a1 CR3: 0000000076b20000 CR4: 00000000003526f0 [ 78.318222][ C1] Call Trace: [ 78.321490][ C1] [ 78.324320][ C1] ? __asan_memcpy+0x40/0x70 [ 78.328925][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 78.335179][ C1] queue_work_on+0x106/0x1d0 [ 78.339775][ C1] puts_queue+0xa3/0xe0 [ 78.343923][ C1] ? __pfx_puts_queue+0x10/0x10 [ 78.348767][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 78.353874][ C1] ? rcu_is_watching+0x15/0xb0 [ 78.358636][ C1] k_fn+0x7c/0xd0 [ 78.362260][ C1] k_pad+0x79a/0xa90 [ 78.366139][ C1] ? lock_acquire+0x106/0x330 [ 78.370808][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 78.376611][ C1] ? __pfx_k_pad+0x10/0x10 [ 78.381030][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 78.386851][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 78.392662][ C1] kbd_event+0x2ec1/0x40d0 [ 78.397072][ C1] ? kernel_fpu_end+0x4f/0x80 [ 78.401748][ C1] ? blake2s_compress+0x1e17/0x1eb0 [ 78.406937][ C1] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 78.412739][ C1] ? __pfx_kbd_event+0x10/0x10 [ 78.417488][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 78.422409][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 78.427332][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 78.432701][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 78.437627][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 78.442566][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 78.447606][ C1] ? input_pass_values+0x8d/0x890 [ 78.452630][ C1] ? lock_acquire+0x106/0x330 [ 78.457302][ C1] ? input_pass_values+0x8d/0x890 [ 78.462317][ C1] input_handle_events_default+0xd4/0x1a0 [ 78.468037][ C1] ? input_pass_values+0x8d/0x890 [ 78.473065][ C1] input_pass_values+0x288/0x890 [ 78.477993][ C1] ? input_handle_event+0xc35/0xf30 [ 78.483186][ C1] input_event_dispose+0x3e5/0x6b0 [ 78.488295][ C1] input_event+0x89/0xe0 [ 78.492536][ C1] hidinput_hid_event+0x1487/0x1e60 [ 78.497730][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 78.503265][ C1] ? hidinput_hid_event+0x14b6/0x1e60 [ 78.508624][ C1] hid_process_event+0x4be/0x620 [ 78.513554][ C1] hid_input_array_field+0x41c/0x5f0 [ 78.518831][ C1] hid_report_raw_event+0xdd7/0x1720 [ 78.524117][ C1] hid_input_report+0x44b/0x580 [ 78.528963][ C1] hid_irq_in+0x47e/0x6d0 [ 78.533287][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 78.538648][ C1] dummy_timer+0xbbd/0x45d0 [ 78.543153][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 78.548077][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 78.553869][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 78.558793][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 78.563717][ C1] __hrtimer_run_queues+0x529/0xc30 [ 78.568913][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 78.574623][ C1] ? read_tsc+0x9/0x20 [ 78.578685][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 78.583791][ C1] handle_softirqs+0x22a/0x7c0 [ 78.588542][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 78.593294][ C1] __irq_exit_rcu+0x5f/0x150 [ 78.597871][ C1] irq_exit_rcu+0x9/0x30 [ 78.602100][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 78.607719][ C1] [ 78.610633][ C1] [ 78.613546][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 78.619514][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 78.625139][ C1] Code: 81 81 02 e9 c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 be 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 78.644732][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 78.650794][ C1] RAX: 000000000005f6e7 RBX: ffffffff819a49dd RCX: 0000000080000001 [ 78.658751][ C1] RDX: 0000000000000001 RSI: ffffffff8dff8547 RDI: ffffffff8c294900 [ 78.666711][ C1] RBP: ffffc90000197f10 R08: ffff8880b853375b R09: 1ffff110170a66eb [ 78.674671][ C1] R10: dffffc0000000000 R11: ffffed10170a66ec R12: ffffffff903219b0 [ 78.682633][ C1] R13: 1ffff11003bd3000 R14: 0000000000000001 R15: 0000000000000001 [ 78.690603][ C1] ? do_idle+0x1bd/0x500 [ 78.694858][ C1] default_idle+0x9/0x20 [ 78.699105][ C1] default_idle_call+0x72/0xb0 [ 78.703865][ C1] do_idle+0x1bd/0x500 [ 78.707928][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 78.714075][ C1] ? __pfx_do_idle+0x10/0x10 [ 78.718657][ C1] cpu_startup_entry+0x43/0x60 [ 78.723411][ C1] start_secondary+0x101/0x110 [ 78.728159][ C1] common_startup_64+0x13e/0x147 [ 78.733094][ C1] [ 78.736097][ C1] Modules linked in: [ 78.739991][ C1] ---[ end trace 0000000000000000 ]--- [ 78.745428][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 78.750620][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 78.770213][ C1] RSP: 0018:ffffc90000a07eb8 EFLAGS: 00010002 [ 78.776270][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 78.784228][ C1] RDX: ffffc90002362000 RSI: 0000000000000543 RDI: 0000000000000544 [ 78.792186][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 78.800147][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 78.808106][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 78.816073][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 78.825004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.831584][ C1] CR2: 000000110c3929a1 CR3: 0000000076b20000 CR4: 00000000003526f0 [ 78.839553][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 78.847075][ C1] Kernel Offset: disabled [ 78.851386][ C1] Rebooting in 86400 seconds..