Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. 2026/11/05 19:09:48 parsed 1 programs 2026/11/05 19:09:48 serving rpc on tcp://43141 [ 86.874612][ T9] cfg80211: failed to load regulatory.db [ 87.321384][ T5796] cgroup: Unknown subsys name 'net' [ 87.488718][ T5796] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.830178][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.534569][ T5808] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.739064][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.747869][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.757718][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.768822][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.776982][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.784264][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.599079][ T5858] (null): rxe_set_mtu: Set mtu to 1024 [ 92.647063][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.659786][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.668423][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.812158][ T5858] infiniband rxe0: set active [ 92.820924][ T5858] infiniband rxe0: added rxe_eth0 [ 92.836603][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.891384][ T5858] RDS/IB: rxe0: added [ 92.907930][ T5858] smc: adding ib device rxe0 with port count 1 [ 92.924393][ T5858] smc: ib device rxe0 port 1 has pnetid [ 92.931530][ T791] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.941847][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.161304][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.316407][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.426494][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.505753][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.585091][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.663953][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.764820][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.265931][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 94.378530][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.386360][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.394657][ T5858] bridge_slave_0: entered allmulticast mode [ 94.401394][ T5858] bridge_slave_0: entered promiscuous mode [ 94.410002][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.417278][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.424656][ T5858] bridge_slave_1: entered allmulticast mode [ 94.431347][ T5858] bridge_slave_1: entered promiscuous mode [ 94.461577][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.476360][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.508818][ T5858] team0: Port device team_slave_0 added [ 94.517616][ T5858] team0: Port device team_slave_1 added [ 94.546521][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.553789][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.580380][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.593840][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.600797][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.626866][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.682657][ T5858] hsr_slave_0: entered promiscuous mode [ 94.689207][ T5858] hsr_slave_1: entered promiscuous mode [ 94.830192][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.841254][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.850556][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.860079][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.890382][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.897612][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.905426][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.912575][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.969508][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.986578][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.998005][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.015000][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.030956][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.038086][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.050779][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.057901][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.107013][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.248496][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.290546][ T5858] veth0_vlan: entered promiscuous mode [ 95.301089][ T5858] veth1_vlan: entered promiscuous mode [ 95.344662][ T5858] veth0_macvtap: entered promiscuous mode [ 95.357646][ T5858] veth1_macvtap: entered promiscuous mode [ 95.380483][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.411817][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.427037][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.475678][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485987][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.494897][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730539][ T5858] syz-executor (5858) used greatest stack depth: 20840 bytes left [ 95.737546][ T5898] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.795469][ T2968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.946046][ T5903] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.080252][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.092125][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.118352][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.126308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.348313][ T5908] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.587772][ T5913] rxe_eth0 speed is unknown, defaulting to 1000 2026/11/05 19:10:00 executed programs: 0 [ 97.025204][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.033494][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.040980][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.052138][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.060235][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.068098][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.100011][ T5917] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.265787][ T5917] chnl_net:caif_netlink_parms(): no params data found [ 97.328125][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.335322][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.343252][ T5917] bridge_slave_0: entered allmulticast mode [ 97.349930][ T5917] bridge_slave_0: entered promiscuous mode [ 97.358132][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.365450][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.372977][ T5917] bridge_slave_1: entered allmulticast mode [ 97.379688][ T5917] bridge_slave_1: entered promiscuous mode [ 97.410457][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.422161][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.448683][ T5917] team0: Port device team_slave_0 added [ 97.456738][ T5917] team0: Port device team_slave_1 added [ 97.477151][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.484170][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.510391][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.527743][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.534847][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.561599][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.595641][ T5917] hsr_slave_0: entered promiscuous mode [ 97.602082][ T5917] hsr_slave_1: entered promiscuous mode [ 97.609281][ T5917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.617180][ T5917] Cannot create hsr debugfs directory [ 98.253589][ T2968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.113289][ T52] Bluetooth: hci0: command tx timeout [ 100.633610][ T2968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.684817][ T2968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.203235][ T52] Bluetooth: hci0: command tx timeout [ 101.582984][ T2968] hsr_slave_0: left promiscuous mode [ 101.589221][ T2968] hsr_slave_1: left promiscuous mode [ 101.595455][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.603009][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.611098][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.618734][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.627719][ T2968] bridge_slave_1: left allmulticast mode [ 101.634062][ T2968] bridge_slave_1: left promiscuous mode [ 101.640874][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.653942][ T2968] bridge_slave_0: left allmulticast mode [ 101.659624][ T2968] bridge_slave_0: left promiscuous mode [ 101.665712][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.700398][ T2968] veth1_macvtap: left promiscuous mode [ 101.706251][ T2968] veth0_macvtap: left promiscuous mode [ 101.711798][ T2968] veth1_vlan: left promiscuous mode [ 101.719811][ T2968] veth0_vlan: left promiscuous mode [ 102.081093][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 102.111114][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 102.138376][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.171541][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.387481][ T2968] bond0 (unregistering): Released all slaves [ 102.474480][ T5917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.486453][ T5917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.504026][ T5917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.514505][ T5917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.581041][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.613508][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.626492][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.633625][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.650377][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.657560][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.840610][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.900863][ T5917] veth0_vlan: entered promiscuous mode [ 102.915839][ T5917] veth1_vlan: entered promiscuous mode [ 102.951696][ T5917] veth0_macvtap: entered promiscuous mode [ 102.961808][ T5917] veth1_macvtap: entered promiscuous mode [ 102.977987][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.991165][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.006412][ T5917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.015379][ T5917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.026045][ T5917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.035184][ T5917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.114386][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.122222][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.150853][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.165420][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.224379][ T5959] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 103.236132][ T5959] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 103.244554][ T5959] CPU: 0 PID: 5959 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.251742][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.261792][ T5959] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 103.268126][ T5959] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 103.287732][ T5959] RSP: 0018:ffffc900033378e0 EFLAGS: 00010002 [ 103.293787][ T5959] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: ffff88802d848000 [ 103.301745][ T5959] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 103.309733][ T5959] RBP: ffffc900033379f8 R08: 0000000000000003 R09: 0000000000000004 [ 103.317697][ T5959] R10: dffffc0000000000 R11: fffff52000666f1c R12: 0000000000000000 [ 103.325660][ T5959] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 103.333642][ T5959] FS: 000055557565f500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 103.342560][ T5959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.349131][ T5959] CR2: 0000001b2e824008 CR3: 000000001e73f000 CR4: 00000000003506f0 [ 103.357105][ T5959] Call Trace: [ 103.360382][ T5959] [ 103.363308][ T5959] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 103.369121][ T5959] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 103.374574][ T5959] ? _raw_spin_lock+0x40/0x40 [ 103.379246][ T5959] percpu_ref_kill_and_confirm+0x9b/0x130 [ 103.384969][ T5959] __mddev_suspend+0x2d1/0x630 [ 103.389725][ T5959] ? rcu_read_unlock+0xa0/0xa0 [ 103.394477][ T5959] ? _parse_integer_limit+0x19c/0x1e0 [ 103.399836][ T5959] ? kstrtoull+0x130/0x1d0 [ 103.404241][ T5959] raid_disks_store+0xb8/0x550 [ 103.408989][ T5959] ? md_attr_store+0x175/0x390 [ 103.413743][ T5959] ? __lock_acquire+0x7eb0/0x7eb0 [ 103.418757][ T5959] ? raid_disks_show+0x140/0x140 [ 103.423683][ T5959] ? do_raw_spin_unlock+0x121/0x230 [ 103.428869][ T5959] md_attr_store+0x19c/0x390 [ 103.433443][ T5959] ? sysfs_kf_read+0x360/0x360 [ 103.438198][ T5959] kernfs_fop_write_iter+0x3a4/0x520 [ 103.443469][ T5959] vfs_write+0x474/0x9a0 [ 103.447704][ T5959] ? file_end_write+0x250/0x250 [ 103.452546][ T5959] ? __ia32_sys_get_robust_list+0x110/0x110 [ 103.458428][ T5959] ? __fdget_pos+0x2ba/0x330 [ 103.463026][ T5959] ksys_write+0x151/0x260 [ 103.467347][ T5959] ? __ia32_sys_read+0x90/0x90 [ 103.472104][ T5959] ? lockdep_hardirqs_on+0x98/0x150 [ 103.477312][ T5959] do_syscall_64+0x55/0xb0 [ 103.481718][ T5959] ? clear_bhb_loop+0x40/0x90 [ 103.486387][ T5959] ? clear_bhb_loop+0x40/0x90 [ 103.491061][ T5959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.496948][ T5959] RIP: 0033:0x7eff6db9fb19 [ 103.501372][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.520966][ T5959] RSP: 002b:00007fff4a34f208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.529367][ T5959] RAX: ffffffffffffffda RBX: 00007eff6de25fa0 RCX: 00007eff6db9fb19 [ 103.537325][ T5959] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 103.545281][ T5959] RBP: 00007eff6dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.553238][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.561197][ T5959] R13: 00007eff6de25fac R14: 00007eff6de25fa0 R15: 00007eff6de25fa0 [ 103.569159][ T5959] [ 103.572178][ T5959] Modules linked in: [ 103.576160][ T5959] ---[ end trace 0000000000000000 ]--- [ 103.581600][ T5959] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 103.587921][ T5959] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 103.607532][ T5959] RSP: 0018:ffffc900033378e0 EFLAGS: 00010002 [ 103.613590][ T5959] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: ffff88802d848000 [ 103.621548][ T5959] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 103.629507][ T5959] RBP: ffffc900033379f8 R08: 0000000000000003 R09: 0000000000000004 [ 103.637465][ T5959] R10: dffffc0000000000 R11: fffff52000666f1c R12: 0000000000000000 [ 103.645424][ T5959] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 103.653381][ T5959] FS: 000055557565f500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 103.662301][ T5959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.668870][ T5959] CR2: 0000001b2e824008 CR3: 000000001e73f000 CR4: 00000000003506f0 [ 103.676836][ T5959] Kernel panic - not syncing: Fatal exception [ 103.683120][ T5959] Kernel Offset: disabled [ 103.687431][ T5959] Rebooting in 86400 seconds..