[ 71.383222][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383318][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:52125' (ED25519) to the list of known hosts. [ 76.513372][ T10] cfg80211: failed to load regulatory.db 2026/09/04 01:47:57 parsed 1 programs 2026/09/04 01:47:57 serving rpc on tcp://41291 Setting up swapspace version 1, size = 127995904 bytes [ 82.431060][ T6064] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.280045][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.282884][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.362329][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.362393][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.958382][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.961529][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.962669][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.963608][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.964500][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.137864][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.138111][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.138287][ T6085] bridge_slave_0: entered allmulticast mode [ 86.139949][ T6085] bridge_slave_0: entered promiscuous mode [ 86.143561][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.143652][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.143756][ T6085] bridge_slave_1: entered allmulticast mode [ 86.145127][ T6085] bridge_slave_1: entered promiscuous mode [ 86.195992][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.198945][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.241412][ T6085] team0: Port device team_slave_0 added [ 86.246639][ T6085] team0: Port device team_slave_1 added [ 86.503149][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.503193][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.503238][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.512533][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.512587][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.512636][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.609586][ T6085] hsr_slave_0: entered promiscuous mode [ 86.615707][ T6085] hsr_slave_1: entered promiscuous mode [ 87.657626][ T6085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.669318][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.674506][ T6085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.682488][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.683611][ T6085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.691069][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.691894][ T6085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.697672][ T6085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.771396][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.789601][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.801304][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.801461][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.812185][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.812339][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.228531][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.254021][ T6085] veth0_vlan: entered promiscuous mode [ 88.260966][ T6085] veth1_vlan: entered promiscuous mode [ 88.285019][ T6085] veth0_macvtap: entered promiscuous mode [ 88.289756][ T6085] veth1_macvtap: entered promiscuous mode [ 88.309617][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.316197][ T6085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.376505][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380090][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380158][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.386112][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/04 01:48:08 executed programs: 0 [ 88.505302][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.507816][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.511360][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.514749][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.516075][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.579042][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.585628][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.587112][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.588404][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.589940][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.624237][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.630768][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.632409][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.633788][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.647365][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.650929][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.653205][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.653786][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.661909][ T6231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.662919][ T6231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.961251][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.060717][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.484892][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.488499][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.492602][ T6214] bridge_slave_0: entered allmulticast mode [ 89.494033][ T6214] bridge_slave_0: entered promiscuous mode [ 89.532479][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.532596][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.532745][ T6214] bridge_slave_1: entered allmulticast mode [ 89.534052][ T6214] bridge_slave_1: entered promiscuous mode [ 89.633301][ T6214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.638526][ T6214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.653173][ T6214] team0: Port device team_slave_0 added [ 89.656780][ T6214] team0: Port device team_slave_1 added [ 89.711268][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.714888][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.714907][ T6214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.739568][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.739634][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.739719][ T6214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.818446][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.818619][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.818727][ T6220] bridge_slave_0: entered allmulticast mode [ 89.820193][ T6220] bridge_slave_0: entered promiscuous mode [ 89.858429][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.858582][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.858733][ T6220] bridge_slave_1: entered allmulticast mode [ 89.860520][ T6220] bridge_slave_1: entered promiscuous mode [ 89.867277][ T6214] hsr_slave_0: entered promiscuous mode [ 89.868167][ T6214] hsr_slave_1: entered promiscuous mode [ 89.868675][ T6214] debugfs: 'hsr0' already exists in 'hsr' [ 89.868692][ T6214] Cannot create hsr debugfs directory [ 89.941390][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.944183][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.964978][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.965168][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.965280][ T6222] bridge_slave_0: entered allmulticast mode [ 89.966235][ T6222] bridge_slave_0: entered promiscuous mode [ 89.968315][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.968393][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.968572][ T6222] bridge_slave_1: entered allmulticast mode [ 89.970990][ T6222] bridge_slave_1: entered promiscuous mode [ 89.986922][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.987064][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.988462][ T6223] bridge_slave_0: entered allmulticast mode [ 89.989911][ T6223] bridge_slave_0: entered promiscuous mode [ 90.009899][ T6220] team0: Port device team_slave_0 added [ 90.028616][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.028738][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.028884][ T6223] bridge_slave_1: entered allmulticast mode [ 90.030330][ T6223] bridge_slave_1: entered promiscuous mode [ 90.057185][ T6220] team0: Port device team_slave_1 added [ 90.058990][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.076197][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.085793][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.101892][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.138815][ T6222] team0: Port device team_slave_0 added [ 90.143090][ T6222] team0: Port device team_slave_1 added [ 90.152091][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.152150][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.152203][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.158491][ T6223] team0: Port device team_slave_0 added [ 90.177725][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.177825][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.178242][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.189164][ T6223] team0: Port device team_slave_1 added [ 90.234675][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.234852][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.234888][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.252462][ T6220] hsr_slave_0: entered promiscuous mode [ 90.253019][ T6220] hsr_slave_1: entered promiscuous mode [ 90.253457][ T6220] debugfs: 'hsr0' already exists in 'hsr' [ 90.253470][ T6220] Cannot create hsr debugfs directory [ 90.263698][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.263770][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.264234][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.356843][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.356898][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.356938][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.413365][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.413413][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.413732][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.448552][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.498717][ T6222] hsr_slave_0: entered promiscuous mode [ 90.499793][ T6222] hsr_slave_1: entered promiscuous mode [ 90.500440][ T6222] debugfs: 'hsr0' already exists in 'hsr' [ 90.500465][ T6222] Cannot create hsr debugfs directory [ 90.574880][ T66] Bluetooth: hci0: command tx timeout [ 90.612811][ T6223] hsr_slave_0: entered promiscuous mode [ 90.613777][ T6223] hsr_slave_1: entered promiscuous mode [ 90.614412][ T6223] debugfs: 'hsr0' already exists in 'hsr' [ 90.614431][ T6223] Cannot create hsr debugfs directory [ 90.655913][ T66] Bluetooth: hci1: command tx timeout [ 90.736657][ T5099] Bluetooth: hci2: command tx timeout [ 90.736957][ T66] Bluetooth: hci3: command tx timeout [ 90.985786][ T6220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.998103][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.999215][ T6220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.011136][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.012116][ T6220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.026408][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.027350][ T6220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.035857][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.119874][ T6214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.126356][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.128308][ T6214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.133081][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.134503][ T6214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.142358][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.143844][ T6214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.147502][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.227817][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.262015][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.281886][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.282054][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.292591][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.292757][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.322996][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.381986][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.404258][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.404406][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.412652][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.412803][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.741049][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.782351][ T6220] veth0_vlan: entered promiscuous mode [ 91.795721][ T6220] veth1_vlan: entered promiscuous mode [ 91.814266][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.824905][ T6220] veth0_macvtap: entered promiscuous mode [ 91.830167][ T6220] veth1_macvtap: entered promiscuous mode [ 91.859928][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.878793][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.884153][ T6214] veth0_vlan: entered promiscuous mode [ 91.909959][ T6214] veth1_vlan: entered promiscuous mode [ 91.930505][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.955157][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.955390][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.989908][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.997220][ T6214] veth0_macvtap: entered promiscuous mode [ 92.009041][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.009102][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.016744][ T6214] veth1_macvtap: entered promiscuous mode [ 92.039083][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.039158][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.043834][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.050297][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.066887][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.214510][ T6407] ------------[ cut here ]------------ [ 92.214533][ T6407] !list_empty(&work->entry) [ 92.214539][ T6407] WARNING: kernel/workqueue.c:2432 at __queue_work+0xee4/0x1370, CPU#0: syz.3.20/6407 [ 92.221620][ T6407] Modules linked in: [ 92.223742][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 92.227253][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.230433][ T6407] RIP: 0010:__queue_work+0xee4/0x1370 [ 92.232469][ T6407] Code: 44 89 f6 e8 9e 35 3b 00 45 84 f6 0f 85 f7 f1 ff ff e9 54 7f 51 ff e8 7b 3b 3b 00 90 0f 0b 90 e9 7c f4 ff ff e8 6d 3b 3b 00 90 <0f> 0b 90 e9 95 f5 ff ff e8 5f 3b 3b 00 4c 89 e2 48 b8 00 00 00 00 [ 92.238989][ T6407] RSP: 0018:ffffc90003f57af8 EFLAGS: 00010093 [ 92.241138][ T6407] RAX: 0000000000000000 RBX: ffff888029078800 RCX: 0000000000000001 [ 92.243716][ T6407] RDX: ffff8880290a0000 RSI: ffffffff81d000c3 RDI: ffff8880290a0000 [ 92.246322][ T6407] RBP: ffff88804c6c8b10 R08: 0000000000000001 R09: 0000000000000000 [ 92.248898][ T6407] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804c6c8b18 [ 92.251826][ T6407] R13: 1ffff920007eaf69 R14: ffff8880280cd000 R15: dffffc0000000000 [ 92.254691][ T6407] FS: 0000000000000000(0000) GS:ffff888096967000(0063) knlGS:00000000f6804b40 [ 92.258856][ T6407] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 92.261795][ T6407] CR2: 00007f04c5506e9c CR3: 000000004e47d000 CR4: 0000000000352ef0 [ 92.264422][ T6407] Call Trace: [ 92.265675][ T6407] [ 92.266827][ T6407] ? find_held_lock+0x2b/0x80 [ 92.268669][ T6407] ? __pfx___queue_work+0x10/0x10 [ 92.270251][ T6407] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.272488][ T6407] ? queue_work_on+0xea/0x1e0 [ 92.274082][ T6407] ? __pfx_nvme_sysfs_reset+0x10/0x10 [ 92.276408][ T6407] queue_work_on+0x180/0x1e0 [ 92.278204][ T6407] ? __pfx_nvme_sysfs_reset+0x10/0x10 [ 92.280450][ T6407] nvme_reset_ctrl_sync+0x51/0xe0 [ 92.282483][ T6407] nvme_sysfs_reset+0x35/0x80 [ 92.284404][ T6407] dev_attr_store+0x58/0x80 [ 92.286045][ T6407] ? __pfx_dev_attr_store+0x10/0x10 [ 92.288103][ T6407] sysfs_kf_write+0xf2/0x150 [ 92.290057][ T6407] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.292093][ T6407] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.294342][ T6407] vfs_write+0x6af/0x1050 [ 92.295887][ T6407] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.297787][ T6407] ? __pfx_vfs_write+0x10/0x10 [ 92.299655][ T6407] ? find_held_lock+0x2b/0x80 [ 92.301261][ T6407] ksys_write+0x12a/0x250 [ 92.302677][ T6407] ? __pfx_ksys_write+0x10/0x10 [ 92.304453][ T6407] __do_fast_syscall_32+0x13a/0x8b0 [ 92.306475][ T6407] do_fast_syscall_32+0x32/0x70 [ 92.308444][ T6407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.311029][ T6407] RIP: 0023:0xf702efec [ 92.312558][ T6407] Code: Unable to access opcode bytes at 0xf702efc2. [ 92.314673][ T6407] RSP: 002b:00000000f680450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 92.317566][ T6407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 92.320082][ T6407] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.323039][ T6407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.326438][ T6407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.330280][ T6407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.334093][ T6407] [ 92.335447][ T6407] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.338325][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 92.342324][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.347803][ T6407] Call Trace: [ 92.349363][ T6407] [ 92.350685][ T6407] dump_stack_lvl+0x100/0x190 [ 92.352725][ T6407] vpanic+0x553/0x970 [ 92.354385][ T6407] ? __pfx_vpanic+0x10/0x10 [ 92.356280][ T6407] panic+0xd1/0xe0 [ 92.357820][ T6407] ? __pfx_panic+0x10/0x10 [ 92.359744][ T6407] check_panic_on_warn.cold+0x19/0x34 [ 92.362218][ T6407] ? __queue_work+0xee4/0x1370 [ 92.364603][ T6407] __warn.cold+0x191/0x318 [ 92.366637][ T6407] __report_bug+0x30f/0x440 [ 92.368565][ T6407] ? __queue_work+0xee4/0x1370 [ 92.370586][ T6407] ? __pfx___report_bug+0x10/0x10 [ 92.372818][ T6407] ? rcu_is_watching+0x13/0xc0 [ 92.375228][ T6407] ? trace_contention_end.constprop.0+0x145/0x1a0 [ 92.378492][ T6407] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 92.381408][ T6407] ? __queue_work+0xee4/0x1370 [ 92.383478][ T6407] report_bug+0xb3/0x220 [ 92.385317][ T6407] ? __queue_work+0xee4/0x1370 [ 92.387291][ T6407] handle_bug+0x16a/0x2a0 [ 92.389087][ T6407] exc_invalid_op+0x17/0x50 [ 92.390981][ T6407] asm_exc_invalid_op+0x1a/0x20 [ 92.393439][ T6407] RIP: 0010:__queue_work+0xee4/0x1370 [ 92.396372][ T6407] Code: 44 89 f6 e8 9e 35 3b 00 45 84 f6 0f 85 f7 f1 ff ff e9 54 7f 51 ff e8 7b 3b 3b 00 90 0f 0b 90 e9 7c f4 ff ff e8 6d 3b 3b 00 90 <0f> 0b 90 e9 95 f5 ff ff e8 5f 3b 3b 00 4c 89 e2 48 b8 00 00 00 00 [ 92.404572][ T6407] RSP: 0018:ffffc90003f57af8 EFLAGS: 00010093 [ 92.407229][ T6407] RAX: 0000000000000000 RBX: ffff888029078800 RCX: 0000000000000001 [ 92.410798][ T6407] RDX: ffff8880290a0000 RSI: ffffffff81d000c3 RDI: ffff8880290a0000 [ 92.414191][ T6407] RBP: ffff88804c6c8b10 R08: 0000000000000001 R09: 0000000000000000 [ 92.417483][ T6407] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804c6c8b18 [ 92.420870][ T6407] R13: 1ffff920007eaf69 R14: ffff8880280cd000 R15: dffffc0000000000 [ 92.424255][ T6407] ? __queue_work+0xee3/0x1370 [ 92.426614][ T6407] ? __queue_work+0xee3/0x1370 [ 92.429187][ T6407] ? find_held_lock+0x2b/0x80 [ 92.431580][ T6407] ? __pfx___queue_work+0x10/0x10 [ 92.433752][ T6407] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.436188][ T6407] ? queue_work_on+0xea/0x1e0 [ 92.438129][ T6407] ? __pfx_nvme_sysfs_reset+0x10/0x10 [ 92.440528][ T6407] queue_work_on+0x180/0x1e0 [ 92.442459][ T6407] ? __pfx_nvme_sysfs_reset+0x10/0x10 [ 92.444663][ T6407] nvme_reset_ctrl_sync+0x51/0xe0 [ 92.447039][ T6407] nvme_sysfs_reset+0x35/0x80 [ 92.449992][ T6407] dev_attr_store+0x58/0x80 [ 92.452294][ T6407] ? __pfx_dev_attr_store+0x10/0x10 [ 92.454413][ T6407] sysfs_kf_write+0xf2/0x150 [ 92.456371][ T6407] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.458522][ T6407] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.460714][ T6407] vfs_write+0x6af/0x1050 [ 92.462507][ T6407] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.465018][ T6407] ? __pfx_vfs_write+0x10/0x10 [ 92.467613][ T6407] ? find_held_lock+0x2b/0x80 [ 92.470515][ T6407] ksys_write+0x12a/0x250 [ 92.472535][ T6407] ? __pfx_ksys_write+0x10/0x10 [ 92.474605][ T6407] __do_fast_syscall_32+0x13a/0x8b0 [ 92.476892][ T6407] do_fast_syscall_32+0x32/0x70 [ 92.478957][ T6407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.481716][ T6407] RIP: 0023:0xf702efec [ 92.483536][ T6407] Code: Unable to access opcode bytes at 0xf702efc2. [ 92.487424][ T6407] RSP: 002b:00000000f680450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 92.491746][ T6407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 92.495144][ T6407] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.498472][ T6407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.501965][ T6407] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.505876][ T6407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.509860][ T6407] [ 93.608640][ T6407] Shutting down cpus with NMI [ 93.611811][ T6407] Kernel Offset: disabled [ 93.613670][ T6407] Rebooting in 86400 seconds..