[ 138.257877][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.261544][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:21519' (ED25519) to the list of known hosts. 2025/06/13 07:34:28 ignoring optional flag "sandboxArg"="0" 2025/06/13 07:34:28 ignoring optional flag "type"="qemu" 2025/06/13 07:34:29 parsed 1 programs [ 146.238443][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 151.625108][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.631384][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.635197][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.641658][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.645546][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.040263][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.043878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.075631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.082292][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.067094][ T5688] chnl_net:caif_netlink_parms(): no params data found [ 153.133635][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.139353][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.142845][ T5688] bridge_slave_0: entered allmulticast mode [ 153.147151][ T5688] bridge_slave_0: entered promiscuous mode [ 153.155058][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.159370][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.162723][ T5688] bridge_slave_1: entered allmulticast mode [ 153.169980][ T5688] bridge_slave_1: entered promiscuous mode [ 153.198302][ T5688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.204988][ T5688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.232710][ T5688] team0: Port device team_slave_0 added [ 153.237222][ T5688] team0: Port device team_slave_1 added [ 153.259018][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.262573][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.277125][ T5688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.285869][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.290351][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.303884][ T5688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.338206][ T5688] hsr_slave_0: entered promiscuous mode [ 153.344164][ T5688] hsr_slave_1: entered promiscuous mode [ 154.032696][ T5688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.052144][ T5688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.070223][ T5688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.082812][ T5688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.256129][ T5688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.293972][ T5688] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.315642][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.318945][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.341933][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.345680][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.788278][ T5688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.873177][ T5688] veth0_vlan: entered promiscuous mode [ 154.892428][ T5688] veth1_vlan: entered promiscuous mode [ 154.955808][ T5688] veth0_macvtap: entered promiscuous mode [ 154.972066][ T5688] veth1_macvtap: entered promiscuous mode [ 155.003235][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.030601][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.050167][ T5688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.054427][ T5688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.070243][ T5688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.074995][ T5688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.421713][ T1035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.524279][ T1035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.651969][ T1035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.341711][ T1035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/06/13 07:34:45 executed programs: 0 [ 156.603934][ T4673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.610824][ T4673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.631025][ T4673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.635497][ T4673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.640506][ T4673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.061173][ T5753] chnl_net:caif_netlink_parms(): no params data found [ 157.230884][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.235292][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.239572][ T5753] bridge_slave_0: entered allmulticast mode [ 157.249884][ T5753] bridge_slave_0: entered promiscuous mode [ 157.263120][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.271111][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.274796][ T5753] bridge_slave_1: entered allmulticast mode [ 157.294758][ T5753] bridge_slave_1: entered promiscuous mode [ 157.391897][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.410959][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.466824][ T5753] team0: Port device team_slave_0 added [ 157.481404][ T5753] team0: Port device team_slave_1 added [ 157.532968][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.536079][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.573765][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.601872][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.605434][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.639403][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.820644][ T5753] hsr_slave_0: entered promiscuous mode [ 157.824372][ T5753] hsr_slave_1: entered promiscuous mode [ 157.839878][ T5753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.843472][ T5753] Cannot create hsr debugfs directory [ 157.846580][ T1035] bridge_slave_1: left allmulticast mode [ 157.859320][ T1035] bridge_slave_1: left promiscuous mode [ 157.862237][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.870409][ T1035] bridge_slave_0: left allmulticast mode [ 157.873137][ T1035] bridge_slave_0: left promiscuous mode [ 157.876078][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.350154][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.357260][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.363377][ T1035] bond0 (unregistering): Released all slaves [ 158.508099][ T1035] hsr_slave_0: left promiscuous mode [ 158.515180][ T1035] hsr_slave_1: left promiscuous mode [ 158.526680][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.539061][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.544154][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.547671][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.568645][ T1035] veth1_macvtap: left promiscuous mode [ 158.571678][ T1035] veth0_macvtap: left promiscuous mode [ 158.589341][ T1035] veth1_vlan: left promiscuous mode [ 158.591935][ T1035] veth0_vlan: left promiscuous mode [ 158.730647][ T4673] Bluetooth: hci0: command tx timeout [ 159.295043][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 159.343684][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 160.531905][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.552215][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.567895][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.586729][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.756122][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.793937][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.809421][ T4673] Bluetooth: hci0: command tx timeout [ 160.819428][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.823416][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.847863][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.851517][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.234588][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.322551][ T5753] veth0_vlan: entered promiscuous mode [ 161.340388][ T5753] veth1_vlan: entered promiscuous mode [ 161.394134][ T5753] veth0_macvtap: entered promiscuous mode [ 161.420807][ T5753] veth1_macvtap: entered promiscuous mode [ 161.447567][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.475426][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.497752][ T5753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.518583][ T5753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.522697][ T5753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.526619][ T5753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.699462][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.703080][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.782908][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.786631][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/13 07:34:50 executed programs: 2 [ 162.148738][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.309988][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 162.316637][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 162.341071][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 162.346841][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 162.370987][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 162.375010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.390785][ T9] usb 5-1: Product: syz [ 162.392940][ T9] usb 5-1: Manufacturer: syz [ 162.395067][ T9] usb 5-1: SerialNumber: syz [ 162.419690][ T9] usb 5-1: config 0 descriptor?? [ 162.441225][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 162.457532][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 162.701735][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.714215][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 162.720593][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 162.724391][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 162.727845][ T9] em28xx 5-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 162.817055][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.827007][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 162.833346][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 162.836430][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 162.889360][ T4673] Bluetooth: hci0: command tx timeout [ 163.893450][ T9] usb 5-1: USB disconnect, device number 2 [ 163.920066][ T9] em28xx 5-1:0.0: Disconnecting em28xx #1 [ 163.923022][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 163.964819][ T9] em28xx 5-1:0.0: Freeing device [ 163.967734][ T9] em28xx 5-1:0.0: Freeing device [ 164.289380][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.438565][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 164.445755][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.451700][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 164.457949][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 164.468268][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 164.472933][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.476970][ T9] usb 5-1: Product: syz [ 164.480416][ T9] usb 5-1: Manufacturer: syz [ 164.482858][ T9] usb 5-1: SerialNumber: syz [ 164.487948][ T9] usb 5-1: config 0 descriptor?? [ 164.500613][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 164.505425][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 164.759020][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 164.764222][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 164.768871][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 164.772054][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 164.774714][ T9] non-slab/vmalloc memory [ 164.776885][ T9] list_add corruption. prev->next should be next (ffffffff8f140940), but was 0000000000000000. (prev=ffff88804eab8250). [ 164.785162][ T9] ------------[ cut here ]------------ [ 164.787790][ T9] kernel BUG at lib/list_debug.c:34! [ 164.790785][ T9] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 164.795510][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller-g27605c8c0f69 #0 PREEMPT(full) [ 164.800720][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.805798][ T9] Workqueue: usb_hub_wq hub_event [ 164.808652][ T9] RIP: 0010:__list_add_valid_or_report+0x123/0x130 [ 164.811714][ T9] Code: e8 32 97 3b fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 83 67 5c fd 49 8b 16 48 c7 c7 40 85 e2 8b 48 89 de 4c 89 f1 e8 1e 20 60 fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 164.820876][ T9] RSP: 0018:ffffc900001b6ac0 EFLAGS: 00010246 [ 164.823633][ T9] RAX: 0000000000000075 RBX: ffffffff8f140940 RCX: a05b406bdfa72300 [ 164.827478][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 164.831437][ T9] RBP: 1ffffffff1e28129 R08: ffffc900001b67e7 R09: 1ffff92000036cfc [ 164.835476][ T9] R10: dffffc0000000000 R11: fffff52000036cfd R12: 1ffff11009d5704a [ 164.839150][ T9] R13: dffffc0000000000 R14: ffff88804eab8250 R15: ffff888043f48250 [ 164.842534][ T9] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 164.846682][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.850240][ T9] CR2: 0000001b3335ffff CR3: 0000000011b24000 CR4: 0000000000352ef0 [ 164.854031][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.857747][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 164.861791][ T9] Call Trace: [ 164.863626][ T9] [ 164.865188][ T9] em28xx_init_extension+0x56/0x1c0 [ 164.867769][ T9] ? media_device_init+0x280/0x450 [ 164.870131][ T9] em28xx_init_dev+0x9bd/0x20b0 [ 164.872412][ T9] ? __pfx_em28xx_init_dev+0x10/0x10 [ 164.875153][ T9] ? __pfx__dev_info+0x10/0x10 [ 164.877935][ T9] em28xx_usb_probe+0x14e9/0x2a20 [ 164.880349][ T9] usb_probe_interface+0x641/0xbc0 [ 164.882680][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 164.885299][ T9] really_probe+0x26a/0x9a0 [ 164.887763][ T9] __driver_probe_device+0x18c/0x2f0 [ 164.890813][ T9] driver_probe_device+0x4f/0x430 [ 164.893240][ T9] __device_attach_driver+0x2ce/0x530 [ 164.895700][ T9] bus_for_each_drv+0x251/0x2e0 [ 164.897868][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 164.900485][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 164.902944][ T9] __device_attach+0x2b8/0x400 [ 164.905302][ T9] ? __pfx___device_attach+0x10/0x10 [ 164.908218][ T9] ? do_raw_spin_unlock+0x4d/0x240 [ 164.910786][ T9] bus_probe_device+0x185/0x260 [ 164.913084][ T9] device_add+0x7b6/0xb50 [ 164.915112][ T9] usb_set_configuration+0x1a87/0x20e0 [ 164.917587][ T9] usb_generic_driver_probe+0x8d/0x150 [ 164.920321][ T9] usb_probe_device+0x1c4/0x390 [ 164.923132][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 164.925750][ T9] really_probe+0x26a/0x9a0 [ 164.927786][ T9] __driver_probe_device+0x18c/0x2f0 [ 164.930197][ T9] driver_probe_device+0x4f/0x430 [ 164.932522][ T9] __device_attach_driver+0x2ce/0x530 [ 164.935354][ T9] bus_for_each_drv+0x251/0x2e0 [ 164.937916][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 164.940502][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 164.942912][ T9] __device_attach+0x2b8/0x400 [ 164.945085][ T9] ? __pfx___device_attach+0x10/0x10 [ 164.947722][ T9] ? do_raw_spin_unlock+0x4d/0x240 [ 164.950561][ T9] bus_probe_device+0x185/0x260 [ 164.952884][ T9] device_add+0x7b6/0xb50 [ 164.954867][ T9] usb_new_device+0xa39/0x16c0 [ 164.957023][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 164.959524][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.962198][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.964963][ T9] hub_event+0x2941/0x4a00 [ 164.967311][ T9] ? __pfx_hub_event+0x10/0x10 [ 164.969559][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 164.972102][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.974477][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 164.977159][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 164.980382][ T9] process_scheduled_works+0xae1/0x17b0 [ 164.983257][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.985917][ T9] worker_thread+0x8a0/0xda0 [ 164.988039][ T9] kthread+0x70e/0x8a0 [ 164.989935][ T9] ? __pfx_worker_thread+0x10/0x10 [ 164.992163][ T9] ? __pfx_kthread+0x10/0x10 [ 164.994209][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.996857][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.999736][ T9] ? __pfx_kthread+0x10/0x10 [ 165.001919][ T9] ret_from_fork+0x3fc/0x770 [ 165.004014][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 165.006124][ T9] ? __pfx_kthread+0x10/0x10 [ 165.008230][ T9] ret_from_fork_asm+0x1a/0x30 [ 165.010550][ T9] [ 165.012270][ T9] Modules linked in: [ 165.015634][ T9] ---[ end trace 0000000000000000 ]--- [ 165.019153][ T4673] Bluetooth: hci0: command tx timeout [ 165.027750][ T9] RIP: 0010:__list_add_valid_or_report+0x123/0x130 [ 165.031153][ T9] Code: e8 32 97 3b fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 83 67 5c fd 49 8b 16 48 c7 c7 40 85 e2 8b 48 89 de 4c 89 f1 e8 1e 20 60 fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 165.040567][ T9] RSP: 0018:ffffc900001b6ac0 EFLAGS: 00010246 [ 165.043484][ T9] RAX: 0000000000000075 RBX: ffffffff8f140940 RCX: a05b406bdfa72300 [ 165.047294][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 165.052000][ T9] RBP: 1ffffffff1e28129 R08: ffffc900001b67e7 R09: 1ffff92000036cfc [ 165.055504][ T9] R10: dffffc0000000000 R11: fffff52000036cfd R12: 1ffff11009d5704a [ 165.059783][ T9] R13: dffffc0000000000 R14: ffff88804eab8250 R15: ffff888043f48250 [ 165.063930][ T9] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 165.069156][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.072132][ T9] CR2: 0000001b3335ffff CR3: 0000000035bad000 CR4: 0000000000352ef0 [ 165.076634][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.081319][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.084911][ T9] Kernel panic - not syncing: Fatal exception [ 165.088045][ T9] Kernel Offset: disabled [ 165.090104][ T9] Rebooting in 86400 seconds..