syzkaller login: [ 91.850836][ T1403] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:20255' (ED25519) to the list of known hosts. 2026/09/11 05:28:18 parsed 1 programs 2026/09/11 05:28:18 serving rpc on tcp://38485 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xef000) [ 115.328527][ T5307] cgroup: Unknown subsys name 'net' [ 115.371081][ T5307] cgroup: Unknown subsys name 'cpuset' [ 115.374991][ T5307] cgroup: Unknown subsys name 'rlimit' [ 137.930427][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.930500][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.987243][ T1024] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 144.987274][ T1024] ata1.00: failed command: WRITE FPDMA QUEUED [ 144.987289][ T1024] ata1.00: cmd 61/78:70:86:9a:05/07:00:00:00:00/40 tag 14 ncq dma 978944 out [ 144.987289][ T1024] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 144.987326][ T1024] ata1.00: status: { DRDY } [ 144.996978][ T1024] ata1: hard resetting link [ 145.317645][ T1024] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 145.318735][ T1024] ata1.00: configured for UDMA/100 [ 145.318977][ T1024] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 146.662903][ T5307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 154.417988][ T5331] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 160.581066][ T5371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.584324][ T5371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.586091][ T5371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.596165][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.600898][ T5371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2cd000) [ 160.978063][ T1024] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 160.978084][ T1024] ata1: failed to read log page 10h (errno=-5) [ 160.978096][ T1024] ata1.00: NCQ disabled due to excessive errors [ 160.978104][ T1024] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 160.978117][ T1024] ata1.00: irq_stat 0x41000000 [ 160.978128][ T1024] ata1.00: failed command: READ FPDMA QUEUED [ 160.978137][ T1024] ata1.00: cmd 60/68:70:96:ef:04/16:00:00:00:00/40 tag 14 ncq dma 2936832 in [ 160.978137][ T1024] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 160.978173][ T1024] ata1.00: status: { DRDY } [ 160.978181][ T1024] ata1.00: error: { ABRT } [ 160.983992][ T1024] ata1.00: configured for UDMA/100 [ 161.024760][ T1024] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 161.024787][ T1024] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 161.024801][ T1024] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 161.024828][ T1024] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 04 ef 96 00 16 68 00 [ 161.024837][ T1024] I/O error, dev sda, sector 323478 op 0x0:(READ) flags 0x80700 phys_seg 121 prio class 2 [ 161.053325][ T1024] ata1: EH complete [ 162.648385][ T5371] Bluetooth: hci0: command tx timeout [ 163.107812][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.107893][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.108008][ T5329] bridge_slave_0: entered allmulticast mode [ 163.128504][ T5329] bridge_slave_0: entered promiscuous mode [ 163.148496][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.148514][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.328678][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.328727][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.328801][ T5329] bridge_slave_1: entered allmulticast mode [ 163.348647][ T5329] bridge_slave_1: entered promiscuous mode [ 164.144027][ T5329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.152825][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.152878][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.298876][ T5329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.932460][ T5329] team0: Port device team_slave_0 added [ 165.033471][ T5329] team0: Port device team_slave_1 added [ 165.193546][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.193560][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.193576][ T5329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.264103][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.264117][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.264133][ T5329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.590817][ T5329] hsr_slave_0: entered promiscuous mode [ 165.592554][ T5329] hsr_slave_1: entered promiscuous mode [ 166.342277][ T5329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.378597][ T5329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.382056][ T5329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.403932][ T5329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.406605][ T5329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.425425][ T5329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.434918][ T5329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.452391][ T5329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.693287][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.744086][ T5329] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.766283][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.766984][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.802132][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.802203][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.622983][ T5329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.719295][ T5329] veth0_vlan: entered promiscuous mode [ 167.740583][ T5329] veth1_vlan: entered promiscuous mode [ 167.807766][ T5329] veth0_macvtap: entered promiscuous mode [ 167.826610][ T5329] veth1_macvtap: entered promiscuous mode [ 167.865141][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.901290][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.038364][ T25] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.038388][ T25] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.038401][ T25] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.038413][ T25] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/11 05:29:14 executed programs: 0 [ 168.905090][ T5329] syz-executor (5329) used greatest stack depth: 15856 bytes left [ 169.012244][ T5451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.026420][ T5451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.034591][ T5451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.042137][ T5451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.046527][ T5451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.055125][ T5451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.055361][ T5451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.063840][ T5451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.079058][ T5371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.079484][ T5371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.133265][ T5451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.135585][ T5451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.140715][ T5451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.155015][ T5451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.166161][ T5451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.261008][ T5371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.271614][ T5371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.274057][ T5371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.275458][ T5371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.289211][ T4649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.325004][ T5451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.334674][ T5451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.336605][ T5451] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.353791][ T4649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.356763][ T4649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.388192][ T4649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.411989][ T5371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.416694][ T5371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.431045][ T5371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.433965][ T5371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.001637][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.128851][ T5451] Bluetooth: hci1: command tx timeout [ 171.129286][ T5451] Bluetooth: hci0: command tx timeout [ 171.273741][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.287077][ T5371] Bluetooth: hci2: command tx timeout [ 171.367045][ T5371] Bluetooth: hci3: command tx timeout [ 171.438924][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.447107][ T5371] Bluetooth: hci4: command tx timeout [ 171.529756][ T5371] Bluetooth: hci5: command tx timeout [ 171.547559][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.025414][ T44] bridge_slave_1: left allmulticast mode [ 172.025448][ T44] bridge_slave_1: left promiscuous mode [ 172.026238][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.050824][ T44] bridge_slave_0: left allmulticast mode [ 172.050847][ T44] bridge_slave_0: left promiscuous mode [ 172.050973][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.285156][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.292385][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.293648][ T44] bond0 (unregistering): Released all slaves [ 172.505936][ T44] hsr_slave_0: left promiscuous mode [ 172.506678][ T44] hsr_slave_1: left promiscuous mode [ 172.522219][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.522261][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.523432][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.523446][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.562897][ T44] veth1_macvtap: left promiscuous mode [ 172.562981][ T44] veth0_macvtap: left promiscuous mode [ 172.569326][ T44] veth1_vlan: left promiscuous mode [ 172.569460][ T44] veth0_vlan: left promiscuous mode [ 172.796522][ T44] team0 (unregistering): Port device team_slave_1 removed [ 172.810308][ T44] team0 (unregistering): Port device team_slave_0 removed [ 173.208085][ T5371] Bluetooth: hci0: command tx timeout [ 173.208112][ T5371] Bluetooth: hci1: command tx timeout [ 173.367365][ T5451] Bluetooth: hci2: command tx timeout [ 173.448690][ T5451] Bluetooth: hci3: command tx timeout [ 173.527330][ T5451] Bluetooth: hci4: command tx timeout [ 173.607686][ T5451] Bluetooth: hci5: command tx timeout [ 174.073572][ T4995] 8021q: adding VLAN 0 to HW filter on device eth2 [ 174.379763][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.379874][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.379964][ T5455] bridge_slave_0: entered allmulticast mode [ 174.381345][ T5455] bridge_slave_0: entered promiscuous mode [ 174.482451][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.482605][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.495894][ T5455] bridge_slave_1: entered allmulticast mode [ 174.504014][ T5455] bridge_slave_1: entered promiscuous mode [ 174.798928][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.799029][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.799163][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.799218][ T5445] bridge_slave_0: entered allmulticast mode [ 174.802374][ T5445] bridge_slave_0: entered promiscuous mode [ 175.025897][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.068973][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.069043][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.069317][ T5445] bridge_slave_1: entered allmulticast mode [ 175.074230][ T5445] bridge_slave_1: entered promiscuous mode [ 175.151440][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.151511][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.151593][ T5449] bridge_slave_0: entered allmulticast mode [ 175.153574][ T5449] bridge_slave_0: entered promiscuous mode [ 175.173755][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.173889][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.174005][ T5447] bridge_slave_0: entered allmulticast mode [ 175.186584][ T5447] bridge_slave_0: entered promiscuous mode [ 175.194609][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.194683][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.194769][ T5459] bridge_slave_0: entered allmulticast mode [ 175.209184][ T5459] bridge_slave_0: entered promiscuous mode [ 175.250136][ T4995] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.250431][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.250501][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.250695][ T5450] bridge_slave_0: entered allmulticast mode [ 175.253282][ T5450] bridge_slave_0: entered promiscuous mode [ 175.274917][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.274994][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.275078][ T5449] bridge_slave_1: entered allmulticast mode [ 175.287245][ T5451] Bluetooth: hci1: command tx timeout [ 175.287268][ T5451] Bluetooth: hci0: command tx timeout [ 175.293516][ T5449] bridge_slave_1: entered promiscuous mode [ 175.307142][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.307215][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.307296][ T5447] bridge_slave_1: entered allmulticast mode [ 175.308799][ T5447] bridge_slave_1: entered promiscuous mode [ 175.321621][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.321692][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.321753][ T5459] bridge_slave_1: entered allmulticast mode [ 175.323477][ T5459] bridge_slave_1: entered promiscuous mode [ 175.338051][ T5455] team0: Port device team_slave_0 added [ 175.352869][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.352949][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.353038][ T5450] bridge_slave_1: entered allmulticast mode [ 175.355521][ T5450] bridge_slave_1: entered promiscuous mode [ 175.401282][ T5455] team0: Port device team_slave_1 added [ 175.417801][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.439419][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.447097][ T5371] Bluetooth: hci2: command tx timeout [ 175.483997][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.511470][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.516289][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.527374][ T5371] Bluetooth: hci3: command tx timeout [ 175.528413][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.528947][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.528956][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.528969][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.571255][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.593572][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.595094][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.595550][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.595558][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.595572][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.607557][ T5371] Bluetooth: hci4: command tx timeout [ 175.647531][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.651371][ T5449] team0: Port device team_slave_0 added [ 175.687946][ T5371] Bluetooth: hci5: command tx timeout [ 175.748620][ T5445] team0: Port device team_slave_0 added [ 175.796585][ T5449] team0: Port device team_slave_1 added [ 175.838070][ T5447] team0: Port device team_slave_0 added [ 175.872698][ T5445] team0: Port device team_slave_1 added [ 175.904638][ T5450] team0: Port device team_slave_0 added [ 175.932927][ T5447] team0: Port device team_slave_1 added [ 175.961030][ T5459] team0: Port device team_slave_0 added [ 175.993831][ T5450] team0: Port device team_slave_1 added [ 176.016097][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.016112][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.016128][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.060621][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.060635][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.060649][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.131500][ T5459] team0: Port device team_slave_1 added [ 176.144308][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.144320][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.144334][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.175774][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.175788][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.175803][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.197660][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.197669][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.197678][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.203878][ T4995] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.235906][ T5455] hsr_slave_0: entered promiscuous mode [ 176.236687][ T5455] hsr_slave_1: entered promiscuous mode [ 176.255660][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.255675][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.255752][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.312689][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.312704][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.312719][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.382379][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.382393][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.382407][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.386191][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.386267][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.386284][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.447667][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.447681][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.447696][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.504763][ T5449] hsr_slave_0: entered promiscuous mode [ 176.505522][ T5449] hsr_slave_1: entered promiscuous mode [ 176.506158][ T5449] debugfs: 'hsr0' already exists in 'hsr' [ 176.506238][ T5449] Cannot create hsr debugfs directory [ 176.600200][ T5445] hsr_slave_0: entered promiscuous mode [ 176.601031][ T5445] hsr_slave_1: entered promiscuous mode [ 176.601662][ T5445] debugfs: 'hsr0' already exists in 'hsr' [ 176.601676][ T5445] Cannot create hsr debugfs directory [ 176.619910][ T5447] hsr_slave_0: entered promiscuous mode [ 176.620664][ T5447] hsr_slave_1: entered promiscuous mode [ 176.621235][ T5447] debugfs: 'hsr0' already exists in 'hsr' [ 176.621248][ T5447] Cannot create hsr debugfs directory [ 176.702738][ T5450] hsr_slave_0: entered promiscuous mode [ 176.703445][ T5450] hsr_slave_1: entered promiscuous mode [ 176.705103][ T5450] debugfs: 'hsr0' already exists in 'hsr' [ 176.706034][ T5450] Cannot create hsr debugfs directory [ 176.822171][ T5459] hsr_slave_0: entered promiscuous mode [ 176.822917][ T5459] hsr_slave_1: entered promiscuous mode [ 176.823328][ T5459] debugfs: 'hsr0' already exists in 'hsr' [ 176.823341][ T5459] Cannot create hsr debugfs directory [ 177.354868][ T4995] 8021q: adding VLAN 0 to HW filter on device eth5 [ 177.367083][ T5451] Bluetooth: hci1: command tx timeout [ 177.367126][ T5371] Bluetooth: hci0: command tx timeout [ 177.526984][ T5371] Bluetooth: hci2: command tx timeout [ 177.607425][ T5371] Bluetooth: hci3: command tx timeout [ 177.687107][ T5371] Bluetooth: hci4: command tx timeout [ 177.767894][ T5371] Bluetooth: hci5: command tx timeout [ 177.828796][ T5455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.850774][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.853772][ T5455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.882083][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.883805][ T5455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.899341][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.902397][ T5455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.922288][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.422417][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.464692][ T5455] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.528747][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.529534][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.624727][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.624806][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.697445][ T5449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.714010][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.721956][ T5449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.747408][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.748205][ T5449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.751484][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.783884][ T5449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.796782][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.062765][ T5445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.079613][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.080208][ T5445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.101703][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.121364][ T5445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.143030][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.146169][ T5445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.169284][ T5445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.599366][ T5459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.619513][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.639844][ T5459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.645501][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.646052][ T5459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.669102][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.713156][ T5459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.726695][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.100084][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.288951][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.290097][ T5450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.309441][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.310861][ T5450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.332719][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.366267][ T5450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.394692][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.452533][ T5450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.472607][ T5450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.562864][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.562937][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.598219][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.724914][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.724982][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.930036][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.963385][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.966568][ T5447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.986685][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.021165][ T5447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.040914][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.042485][ T5447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.067084][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.117302][ T5447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.143312][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.178954][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.179029][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.235878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.235932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.354465][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.509104][ T5459] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.657969][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.658042][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.679392][ T5455] veth0_vlan: entered promiscuous mode [ 181.735418][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.735541][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.782161][ T5455] veth1_vlan: entered promiscuous mode [ 181.965669][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.094337][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.126429][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.156546][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.156619][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.171014][ T5455] veth0_macvtap: entered promiscuous mode [ 182.228628][ T5455] veth1_macvtap: entered promiscuous mode [ 182.261011][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.261069][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.311393][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.409409][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.409452][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.458461][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.458529][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.480809][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.520000][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.757540][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.780590][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.780623][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.780645][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.260680][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.322621][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.322639][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.571457][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.571476][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.830136][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.902204][ T5449] veth0_vlan: entered promiscuous mode [ 184.024224][ T5449] veth1_vlan: entered promiscuous mode 2026/09/11 05:29:29 executed programs: 12 [ 184.350609][ T5703] IPv4: Oversized IP packet from 127.202.26.0 [ 184.382860][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.398767][ T5445] veth0_vlan: entered promiscuous mode [ 184.463652][ T5449] veth0_macvtap: entered promiscuous mode [ 184.494610][ T5445] veth1_vlan: entered promiscuous mode [ 184.525771][ T5449] veth1_macvtap: entered promiscuous mode [ 184.694748][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.733799][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.839199][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.839235][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.839612][ T5445] veth0_macvtap: entered promiscuous mode [ 184.868140][ T180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.900148][ T5445] veth1_macvtap: entered promiscuous mode [ 185.098237][ T180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.183424][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.264339][ T5707] Console: switching to colour dummy device 80x25 [ 185.281309][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.319188][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.448487][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.454596][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.454640][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.454649][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.456187][ T25] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.477674][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.725252][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.749987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.750004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.012919][ T5450] veth0_vlan: entered promiscuous mode [ 186.034842][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.034859][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.119551][ T5707] ------------[ cut here ]------------ [ 186.119564][ T5707] Memory manager not clean during takedown. [ 186.119570][ T5707] WARNING: drivers/gpu/drm/drm_mm.c:966 at drm_mm_takedown+0x54/0x70, CPU#0: syz.3.21/5707 [ 186.131911][ T5707] Modules linked in: [ 186.133696][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 186.137669][ T5707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.142032][ T5707] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 186.144345][ T5707] Code: 4c 89 f7 e8 de a7 a1 fc 49 8b 06 4c 39 f0 75 0e e8 61 09 30 fc 5b 41 5e e9 19 37 52 06 cc e8 53 09 30 fc 48 8d 3d 7c 4d ee 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 186.152216][ T5707] RSP: 0018:ffffc90007ac7720 EFLAGS: 00010293 [ 186.154734][ T5707] RAX: ffffffff8597d24d RBX: ffff888034d28468 RCX: ffff8880336a4b00 [ 186.157858][ T5707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90861fd0 [ 186.161198][ T5707] RBP: ffffffff85968160 R08: ffff88801f738200 R09: ffffffff8c8103c0 [ 186.164281][ T5707] R10: dffffc0000000000 R11: ffffffff85968160 R12: ffff88801f738200 [ 186.168211][ T5707] R13: dffffc0000000000 R14: ffff888034d284a0 R15: dffffc0000000000 [ 186.171606][ T5707] FS: 00007f46a00836c0(0000) GS:ffff88808c2c7000(0000) knlGS:0000000000000000 [ 186.175454][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.178615][ T5707] CR2: 00007f207f5afdd0 CR3: 000000004f0c0000 CR4: 0000000000352ef0 [ 186.181940][ T5707] Call Trace: [ 186.183488][ T5707] [ 186.184785][ T5707] drm_managed_release+0x208/0x380 [ 186.187216][ T5707] ? __pfx_virtio_gpu_release+0x10/0x10 [ 186.189700][ T5707] drm_dev_put+0xe0/0x120 [ 186.191587][ T5707] virtio_dev_remove+0x9c/0x1b0 [ 186.193749][ T5707] ? __pfx_virtio_dev_remove+0x10/0x10 [ 186.196165][ T5707] device_release_driver_internal+0x48b/0x880 [ 186.199117][ T5707] bus_remove_device+0x444/0x560 [ 186.201211][ T5707] ? __pfx_bus_remove_device+0x10/0x10 [ 186.203462][ T5707] ? kernfs_remove_by_name_ns+0x101/0x140 [ 186.205887][ T5707] device_del+0x524/0x8f0 [ 186.208049][ T5707] ? __pfx_device_del+0x10/0x10 [ 186.210228][ T5707] device_unregister+0x21/0xf0 [ 186.212391][ T5707] unregister_virtio_device+0x37/0x60 [ 186.214831][ T5707] virtio_pci_remove+0x7f/0xf0 [ 186.217000][ T5707] pci_device_remove+0x99/0x1c0 [ 186.219033][ T5707] ? __pfx_pci_device_remove+0x10/0x10 [ 186.221272][ T5707] device_release_driver_internal+0x48b/0x880 [ 186.223764][ T5707] pci_stop_bus_device+0xf6/0x120 [ 186.225804][ T5707] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 186.229135][ T5707] remove_store+0xe5/0x150 [ 186.230975][ T5707] ? __pfx_remove_store+0x10/0x10 [ 186.233067][ T5707] ? sysfs_file_kobj+0x1e4/0x230 [ 186.235108][ T5707] ? sysfs_kf_write+0x166/0x260 [ 186.237795][ T5707] ? __pfx_sysfs_kf_write+0x10/0x10 [ 186.240120][ T5707] kernfs_fop_write_iter+0x3a4/0x540 [ 186.242475][ T5707] vfs_write+0x612/0xba0 [ 186.244377][ T5707] ? __pfx_vfs_write+0x10/0x10 [ 186.246572][ T5707] ? __fget_files+0x2a/0x420 [ 186.249499][ T5707] ksys_write+0x150/0x270 [ 186.251487][ T5707] ? __pfx_ksys_write+0x10/0x10 [ 186.253604][ T5707] do_syscall_64+0x166/0x520 [ 186.255630][ T5707] ? trace_irq_disable+0x3b/0x140 [ 186.257912][ T5707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.260517][ T5707] ? clear_bhb_loop+0x70/0xc0 [ 186.262569][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.265087][ T5707] RIP: 0033:0x7f469f19e159 [ 186.267099][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.275275][ T5707] RSP: 002b:00007f46a0083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.279076][ T5707] RAX: ffffffffffffffda RBX: 00007f469f426090 RCX: 00007f469f19e159 [ 186.282165][ T5707] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000e [ 186.285450][ T5707] RBP: 00007f469f23503b R08: 0000000000000000 R09: 0000000000000000 [ 186.289058][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.292488][ T5707] R13: 00007f469f426128 R14: 00007f469f426090 R15: 00007ffd58a3f458 [ 186.295861][ T5707] [ 186.297409][ T5707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.300646][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 186.304695][ T5707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.309212][ T5707] Call Trace: [ 186.310761][ T5707] [ 186.312124][ T5707] vpanic+0x56d/0xa60 [ 186.314056][ T5707] ? __pfx__printk+0x10/0x10 [ 186.316120][ T5707] ? __pfx_vpanic+0x10/0x10 [ 186.318141][ T5707] ? is_bpf_text_address+0x292/0x2b0 [ 186.320515][ T5707] ? is_bpf_text_address+0x26/0x2b0 [ 186.322863][ T5707] panic+0xc5/0xd0 [ 186.324574][ T5707] ? __pfx_panic+0x10/0x10 [ 186.326613][ T5707] __warn+0x315/0x4c0 [ 186.328446][ T5707] ? drm_mm_takedown+0x54/0x70 [ 186.330619][ T5707] ? drm_mm_takedown+0x54/0x70 [ 186.332656][ T5707] __report_bug+0x276/0x570 [ 186.334623][ T5707] ? virtio_dev_remove+0x9c/0x1b0 [ 186.336864][ T5707] ? device_release_driver_internal+0x48b/0x880 [ 186.339798][ T5707] ? bus_remove_device+0x444/0x560 [ 186.341896][ T5707] ? drm_mm_takedown+0x54/0x70 [ 186.343789][ T5707] ? __pfx___report_bug+0x10/0x10 [ 186.345842][ T5707] ? do_syscall_64+0x166/0x520 [ 186.347934][ T5707] report_bug_entry+0x19b/0x290 [ 186.350108][ T5707] ? drm_mm_takedown+0x54/0x70 [ 186.352765][ T5707] ? drm_mm_takedown+0x59/0x70 [ 186.355023][ T5707] handle_bug+0xce/0x200 [ 186.356879][ T5707] exc_invalid_op+0x1a/0x50 [ 186.358710][ T5707] asm_exc_invalid_op+0x1a/0x20 [ 186.360864][ T5707] RIP: 0010:drm_mm_takedown+0x54/0x70 [ 186.363289][ T5707] Code: 4c 89 f7 e8 de a7 a1 fc 49 8b 06 4c 39 f0 75 0e e8 61 09 30 fc 5b 41 5e e9 19 37 52 06 cc e8 53 09 30 fc 48 8d 3d 7c 4d ee 0a <67> 48 0f b9 3a 48 89 df 5b 41 5e eb 1f 66 66 66 66 66 66 2e 0f 1f [ 186.371875][ T5707] RSP: 0018:ffffc90007ac7720 EFLAGS: 00010293 [ 186.374542][ T5707] RAX: ffffffff8597d24d RBX: ffff888034d28468 RCX: ffff8880336a4b00 [ 186.378070][ T5707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90861fd0 [ 186.381653][ T5707] RBP: ffffffff85968160 R08: ffff88801f738200 R09: ffffffff8c8103c0 [ 186.385107][ T5707] R10: dffffc0000000000 R11: ffffffff85968160 R12: ffff88801f738200 [ 186.388573][ T5707] R13: dffffc0000000000 R14: ffff888034d284a0 R15: dffffc0000000000 [ 186.392053][ T5707] ? __pfx_drm_gem_init_release+0x10/0x10 [ 186.394116][ T5707] ? __pfx_drm_gem_init_release+0x10/0x10 [ 186.396394][ T5707] ? drm_mm_takedown+0x4d/0x70 [ 186.398447][ T5707] drm_managed_release+0x208/0x380 [ 186.400852][ T5707] ? __pfx_virtio_gpu_release+0x10/0x10 [ 186.402917][ T5707] drm_dev_put+0xe0/0x120 [ 186.405056][ T5707] virtio_dev_remove+0x9c/0x1b0 [ 186.407438][ T5707] ? __pfx_virtio_dev_remove+0x10/0x10 [ 186.409826][ T5707] device_release_driver_internal+0x48b/0x880 [ 186.412525][ T5707] bus_remove_device+0x444/0x560 [ 186.414599][ T5707] ? __pfx_bus_remove_device+0x10/0x10 [ 186.417000][ T5707] ? kernfs_remove_by_name_ns+0x101/0x140 [ 186.419688][ T5707] device_del+0x524/0x8f0 [ 186.421584][ T5707] ? __pfx_device_del+0x10/0x10 [ 186.423663][ T5707] device_unregister+0x21/0xf0 [ 186.425686][ T5707] unregister_virtio_device+0x37/0x60 [ 186.428021][ T5707] virtio_pci_remove+0x7f/0xf0 [ 186.430104][ T5707] pci_device_remove+0x99/0x1c0 [ 186.432095][ T5707] ? __pfx_pci_device_remove+0x10/0x10 [ 186.434469][ T5707] device_release_driver_internal+0x48b/0x880 [ 186.437087][ T5707] pci_stop_bus_device+0xf6/0x120 [ 186.439393][ T5707] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 186.441905][ T5707] remove_store+0xe5/0x150 [ 186.443841][ T5707] ? __pfx_remove_store+0x10/0x10 [ 186.446079][ T5707] ? sysfs_file_kobj+0x1e4/0x230 [ 186.448269][ T5707] ? sysfs_kf_write+0x166/0x260 [ 186.450412][ T5707] ? __pfx_sysfs_kf_write+0x10/0x10 [ 186.452706][ T5707] kernfs_fop_write_iter+0x3a4/0x540 [ 186.455043][ T5707] vfs_write+0x612/0xba0 [ 186.456980][ T5707] ? __pfx_vfs_write+0x10/0x10 [ 186.459070][ T5707] ? __fget_files+0x2a/0x420 [ 186.461172][ T5707] ksys_write+0x150/0x270 [ 186.463054][ T5707] ? __pfx_ksys_write+0x10/0x10 [ 186.465232][ T5707] do_syscall_64+0x166/0x520 [ 186.467449][ T5707] ? trace_irq_disable+0x3b/0x140 [ 186.469736][ T5707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.472421][ T5707] ? clear_bhb_loop+0x70/0xc0 [ 186.474479][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.477087][ T5707] RIP: 0033:0x7f469f19e159 [ 186.479124][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.487611][ T5707] RSP: 002b:00007f46a0083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.491324][ T5707] RAX: ffffffffffffffda RBX: 00007f469f426090 RCX: 00007f469f19e159 [ 186.494684][ T5707] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000e [ 186.497989][ T5707] RBP: 00007f469f23503b R08: 0000000000000000 R09: 0000000000000000 [ 186.501371][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.504690][ T5707] R13: 00007f469f426128 R14: 00007f469f426090 R15: 00007ffd58a3f458 [ 186.508120][ T5707] [ 186.509815][ T5707] Kernel Offset: disabled [ 186.511646][ T5707] Rebooting in 86400 seconds..