[ 71.013622][ T41] cfg80211: failed to load regulatory.db [ 71.020067][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.020103][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x151000) [ 71.519181][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 71.519203][ T1131] ata1: failed to read log page 10h (errno=-5) [ 71.519219][ T1131] ata1.00: exception Emask 0x1 SAct 0x18000000 SErr 0x0 action 0x0 [ 71.519235][ T1131] ata1.00: irq_stat 0x40000000 [ 71.519250][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 71.519260][ T1131] ata1.00: cmd 61/88:d8:3e:e9:05/0a:00:00:00:00/40 tag 27 ncq dma 1380352 ou [ 71.519260][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 71.519306][ T1131] ata1.00: status: { DRDY } [ 71.519317][ T1131] ata1.00: error: { ABRT } [ 71.519331][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 71.519339][ T1131] ata1.00: cmd 61/e0:e0:c6:f3:05/02:00:00:00:00/40 tag 28 ncq dma 376832 out [ 71.519339][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 71.519383][ T1131] ata1.00: status: { DRDY } [ 71.519395][ T1131] ata1.00: error: { ABRT } [ 71.522614][ T1131] ata1.00: configured for UDMA/100 [ 71.524700][ T1131] ata1: EH complete Warning: Permanently added '[localhost]:18501' (ED25519) to the list of known hosts. 2026/11/05 05:55:24 parsed 1 programs 2026/11/05 05:55:24 serving rpc on tcp://35205 Setting up swapspace version 1, size = 127995904 bytes [ 75.942859][ T6097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.165644][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.165725][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.165783][ T6149] bridge_slave_0: entered allmulticast mode [ 79.168387][ T6149] bridge_slave_0: entered promiscuous mode [ 79.169531][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.169571][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.169620][ T6149] bridge_slave_1: entered allmulticast mode [ 79.171273][ T6149] bridge_slave_1: entered promiscuous mode [ 79.187397][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.189770][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.205713][ T6149] team0: Port device team_slave_0 added [ 79.207225][ T6149] team0: Port device team_slave_1 added [ 79.221687][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.221697][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.221708][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.222486][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.222493][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.222504][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.257724][ T6149] hsr_slave_0: entered promiscuous mode [ 79.258191][ T6149] hsr_slave_1: entered promiscuous mode [ 79.640018][ T6149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.641706][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.642236][ T6149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.643901][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.644386][ T6149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.646434][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.646932][ T6149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.655626][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.671634][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.671717][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.671913][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.672005][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.714603][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.722240][ T229] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.722704][ T229] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.732621][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.739847][ T229] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.739892][ T229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.742704][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.742745][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.006368][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.035870][ T6149] veth0_vlan: entered promiscuous mode [ 80.040349][ T6149] veth1_vlan: entered promiscuous mode [ 80.054444][ T6149] veth0_macvtap: entered promiscuous mode [ 80.056971][ T6149] veth1_macvtap: entered promiscuous mode [ 80.066512][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.072918][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.108118][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108145][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108162][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108178][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.204820][ T5839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.287315][ T5839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.348669][ T5839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.438986][ T5839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.963147][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.965958][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.966774][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.967534][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.971532][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.188779][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.188799][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.210686][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.210707][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/11/05 05:55:33 executed programs: 0 [ 81.727889][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.729235][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.729660][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.731187][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.731628][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.075983][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.076054][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.076112][ T6309] bridge_slave_0: entered allmulticast mode [ 82.076818][ T6309] bridge_slave_0: entered promiscuous mode [ 82.086482][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.086553][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.086642][ T6309] bridge_slave_1: entered allmulticast mode [ 82.092532][ T6309] bridge_slave_1: entered promiscuous mode [ 82.110306][ T6309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.112077][ T6309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.126771][ T6309] team0: Port device team_slave_0 added [ 82.128870][ T6309] team0: Port device team_slave_1 added [ 82.145365][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.145379][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.145397][ T6309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.146779][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.146790][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.146807][ T6309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.168714][ T6309] hsr_slave_0: entered promiscuous mode [ 82.169482][ T6309] hsr_slave_1: entered promiscuous mode [ 82.170941][ T6309] debugfs: 'hsr0' already exists in 'hsr' [ 82.170955][ T6309] Cannot create hsr debugfs directory [ 83.599122][ T5839] bridge_slave_1: left allmulticast mode [ 83.599140][ T5839] bridge_slave_1: left promiscuous mode [ 83.599247][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.601502][ T5839] bridge_slave_0: left allmulticast mode [ 83.601520][ T5839] bridge_slave_0: left promiscuous mode [ 83.601675][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.722834][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.725041][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.726241][ T5839] bond0 (unregistering): Released all slaves [ 83.793075][ T5839] hsr_slave_0: left promiscuous mode [ 83.793661][ T5839] hsr_slave_1: left promiscuous mode [ 83.794266][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.794280][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.794954][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.794966][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.803020][ T5839] veth1_macvtap: left promiscuous mode [ 83.803422][ T5839] veth0_macvtap: left promiscuous mode [ 83.803500][ T5839] veth1_vlan: left promiscuous mode [ 83.803549][ T5839] veth0_vlan: left promiscuous mode [ 83.809347][ T5147] Bluetooth: hci0: command tx timeout [ 83.967313][ T5839] team0 (unregistering): Port device team_slave_1 removed [ 83.974728][ T5839] team0 (unregistering): Port device team_slave_0 removed [ 84.031177][ T5502] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.274718][ T6309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.276773][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.277505][ T6309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.282570][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.283034][ T6309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.289708][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.293338][ T6309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.299487][ T6309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.354992][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.366265][ T6309] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.372066][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.372141][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.379340][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.379419][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.866399][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.887220][ T6309] veth0_vlan: entered promiscuous mode [ 84.893099][ T6309] veth1_vlan: entered promiscuous mode [ 84.940286][ T6309] veth0_macvtap: entered promiscuous mode [ 84.943987][ T6309] veth1_macvtap: entered promiscuous mode [ 84.955754][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.961474][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.969600][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996350][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.996362][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.008422][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.008533][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.008690][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.014557][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.014568][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.101549][ T6373] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000dd: 0000 [#1] SMP KASAN NOPTI [ 85.106501][ T6373] KASAN: null-ptr-deref in range [0x00000000000006e8-0x00000000000006ef] [ 85.110020][ T6373] CPU: 3 UID: 0 PID: 6373 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 85.113831][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.117337][ T6373] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 85.119305][ T6373] Code: db 74 09 e8 9e 4d f6 f9 4d 8d 66 f0 e8 95 4d f6 f9 49 8d bc 24 ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f0 [ 85.125615][ T6373] RSP: 0018:ffffc90002dc7b00 EFLAGS: 00010207 [ 85.127667][ T6373] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.130419][ T6373] RDX: 00000000000000dd RSI: ffffffff8817872b RDI: 00000000000006ec [ 85.132959][ T6373] RBP: ffff888024281000 R08: 0000000000000000 R09: 0000000000000000 [ 85.135557][ T6373] R10: ffff888000cddb43 R11: 0000000000000001 R12: 0000000000000000 [ 85.138214][ T6373] R13: ffff888024281430 R14: 0000000000000000 R15: ffff888024281070 [ 85.140865][ T6373] FS: 0000000000000000(0000) GS:ffff88809557e000(0063) knlGS:00000000f686eb40 [ 85.143769][ T6373] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 85.145977][ T6373] CR2: 000000002f063fff CR3: 0000000068074000 CR4: 0000000000352ef0 [ 85.148619][ T6373] Call Trace: [ 85.149817][ T6373] [ 85.150762][ T6373] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 85.152494][ T6373] platform_probe+0x106/0x1d0 [ 85.154125][ T6373] ? __pfx_platform_probe+0x10/0x10 [ 85.155831][ T6373] really_probe+0x241/0xa60 [ 85.157339][ T6373] __driver_probe_device+0x210/0x460 [ 85.159137][ T6373] device_driver_attach+0xaa/0x230 [ 85.160844][ T6373] bind_store+0xf4/0x190 [ 85.162321][ T6373] ? __pfx_bind_store+0x10/0x10 [ 85.163983][ T6373] drv_attr_store+0x74/0xb0 [ 85.165492][ T6373] ? __pfx_drv_attr_store+0x10/0x10 [ 85.167221][ T6373] sysfs_kf_write+0xf2/0x150 [ 85.168764][ T6373] kernfs_fop_write_iter+0x3e0/0x5f0 [ 85.170675][ T6373] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.172379][ T6373] vfs_write+0x6af/0x1050 [ 85.173816][ T6373] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 85.175700][ T6373] ? __pfx_vfs_write+0x10/0x10 [ 85.177296][ T6373] ? find_held_lock+0x2b/0x80 [ 85.179207][ T6373] ksys_write+0x12a/0x250 [ 85.180651][ T6373] ? __pfx_ksys_write+0x10/0x10 [ 85.182242][ T6373] __do_fast_syscall_32+0x14b/0x8c0 [ 85.183965][ T6373] do_fast_syscall_32+0x32/0x70 [ 85.185569][ T6373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.187667][ T6373] RIP: 0023:0xf744efbc [ 85.189092][ T6373] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.195293][ T6373] RSP: 002b:00000000f686e50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 85.198060][ T6373] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000600 [ 85.200688][ T6373] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.203255][ T6373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.205832][ T6373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.208592][ T6373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.211589][ T6373] [ 85.212813][ T6373] Modules linked in: [ 85.214659][ T6373] ---[ end trace 0000000000000000 ]--- [ 85.217219][ T6373] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 85.217246][ T6373] Code: db 74 09 e8 9e 4d f6 f9 4d 8d 66 f0 e8 95 4d f6 f9 49 8d bc 24 ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f0 [ 85.217260][ T6373] RSP: 0018:ffffc90002dc7b00 EFLAGS: 00010207 [ 85.217273][ T6373] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.217279][ T6373] RDX: 00000000000000dd RSI: ffffffff8817872b RDI: 00000000000006ec [ 85.217285][ T6373] RBP: ffff888024281000 R08: 0000000000000000 R09: 0000000000000000 [ 85.217291][ T6373] R10: ffff888000cddb43 R11: 0000000000000001 R12: 0000000000000000 [ 85.217296][ T6373] R13: ffff888024281430 R14: 0000000000000000 R15: ffff888024281070 [ 85.217302][ T6373] FS: 0000000000000000(0000) GS:ffff88809557e000(0063) knlGS:00000000f686eb40 [ 85.217325][ T6373] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 85.217333][ T6373] CR2: 000000002f063fff CR3: 0000000068074000 CR4: 0000000000352ef0 [ 85.217341][ T6373] Kernel panic - not syncing: Fatal exception [ 85.250030][ T6373] Kernel Offset: disabled [ 85.251469][ T6373] Rebooting in 86400 seconds..