[ 87.035005][ T840] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:17326' (ED25519) to the list of known hosts. 2025/10/03 14:34:32 parsed 1 programs [ 97.296163][ T40] audit: type=1400 audit(1759502075.489:118): avc: denied { unlink } for pid=6181 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 98.509398][ T6181] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.494863][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.499509][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.504010][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.510020][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.513382][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.059527][ T40] audit: type=1401 audit(1759502079.249:119): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 101.496960][ T6216] chnl_net:caif_netlink_parms(): no params data found [ 101.592618][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.595855][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.598905][ T6216] bridge_slave_0: entered allmulticast mode [ 101.602864][ T6216] bridge_slave_0: entered promiscuous mode [ 101.634834][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.637690][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.640880][ T6216] bridge_slave_1: entered allmulticast mode [ 101.643854][ T6216] bridge_slave_1: entered promiscuous mode [ 101.674914][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.679497][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.720867][ T6216] team0: Port device team_slave_0 added [ 101.729342][ T6216] team0: Port device team_slave_1 added [ 101.771250][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.773393][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.784165][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.788915][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.791259][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.799530][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.857573][ T6216] hsr_slave_0: entered promiscuous mode [ 101.861065][ T6216] hsr_slave_1: entered promiscuous mode [ 102.389501][ T6216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.401401][ T6216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.409849][ T6216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.419131][ T6216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.500111][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.516052][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.523309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.526616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.536275][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.539503][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.568785][ T6216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.720403][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.764541][ T6216] veth0_vlan: entered promiscuous mode [ 102.773173][ T6216] veth1_vlan: entered promiscuous mode [ 102.801951][ T6216] veth0_macvtap: entered promiscuous mode [ 102.807966][ T6216] veth1_macvtap: entered promiscuous mode [ 102.827611][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.837032][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.846822][ T95] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.850849][ T95] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.855918][ T95] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.859191][ T95] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.966301][ T95] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.175186][ T95] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.254961][ T95] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.360007][ T95] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.535021][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.538271][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.569735][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.575973][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/03 14:34:42 executed programs: 0 [ 104.812309][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.816291][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.820232][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.826146][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.829754][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.969090][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 105.059987][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.062676][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.066277][ T6344] bridge_slave_0: entered allmulticast mode [ 105.069516][ T6344] bridge_slave_0: entered promiscuous mode [ 105.074366][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.077971][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.081271][ T6344] bridge_slave_1: entered allmulticast mode [ 105.086826][ T6344] bridge_slave_1: entered promiscuous mode [ 105.146650][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.154106][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.217260][ T6344] team0: Port device team_slave_0 added [ 105.222931][ T6344] team0: Port device team_slave_1 added [ 105.270333][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.273224][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.282847][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.289094][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.291804][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.302081][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.347251][ T6344] hsr_slave_0: entered promiscuous mode [ 105.349846][ T6344] hsr_slave_1: entered promiscuous mode [ 105.352431][ T6344] debugfs: 'hsr0' already exists in 'hsr' [ 105.354881][ T6344] Cannot create hsr debugfs directory [ 106.153196][ T95] bridge_slave_1: left allmulticast mode [ 106.155766][ T95] bridge_slave_1: left promiscuous mode [ 106.158319][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.163753][ T95] bridge_slave_0: left allmulticast mode [ 106.166245][ T95] bridge_slave_0: left promiscuous mode [ 106.169079][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.469983][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.476860][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.482410][ T95] bond0 (unregistering): Released all slaves [ 106.641304][ T95] hsr_slave_0: left promiscuous mode [ 106.644874][ T95] hsr_slave_1: left promiscuous mode [ 106.648638][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.652950][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.657167][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.660574][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.685639][ T95] veth1_macvtap: left promiscuous mode [ 106.688294][ T95] veth0_macvtap: left promiscuous mode [ 106.690965][ T95] veth1_vlan: left promiscuous mode [ 106.693675][ T95] veth0_vlan: left promiscuous mode [ 106.883689][ T5305] Bluetooth: hci0: command tx timeout [ 107.267505][ T95] team0 (unregistering): Port device team_slave_1 removed [ 107.328329][ T95] team0 (unregistering): Port device team_slave_0 removed [ 108.260630][ T6344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.269152][ T6344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.276390][ T6344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.282255][ T6344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.350288][ T6344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.371233][ T6344] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.380719][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.383069][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.389267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.392140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.681310][ T6344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.739932][ T6344] veth0_vlan: entered promiscuous mode [ 108.748346][ T6344] veth1_vlan: entered promiscuous mode [ 108.779866][ T6344] veth0_macvtap: entered promiscuous mode [ 108.800906][ T6344] veth1_macvtap: entered promiscuous mode [ 108.817441][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.827912][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.842066][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.845627][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.868827][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.872909][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.926034][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.930260][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.964356][ T5305] Bluetooth: hci0: command tx timeout [ 108.979987][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.982604][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.018970][ T40] audit: type=1400 audit(1759502087.209:120): avc: denied { create } for pid=6389 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.026984][ T40] audit: type=1400 audit(1759502087.209:121): avc: denied { write } for pid=6389 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.070750][ T40] audit: type=1400 audit(1759502087.259:122): avc: denied { read write } for pid=6389 comm="syz.0.16" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.082479][ T40] audit: type=1400 audit(1759502087.259:123): avc: denied { open } for pid=6389 comm="syz.0.16" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.144713][ T6390] infiniband syz1: set active [ 109.146930][ T6390] infiniband syz1: added syz_tun [ 109.180737][ T6390] RDS/IB: syz1: added [ 109.316607][ T6395] syz1: rxe_newlink: already configured on syz_tun [ 109.335474][ T6398] syz1: rxe_newlink: already configured on syz_tun [ 109.342689][ T46] ================================================================== [ 109.346075][ T46] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xadb/0xb30 [ 109.348646][ T46] Read of size 8 at addr ffff8880282dd210 by task kworker/u32:2/46 [ 109.353942][ T46] [ 109.355005][ T46] CPU: 3 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 109.355028][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.355040][ T46] Workqueue: rdma_cm cma_iboe_join_work_handler [ 109.355075][ T46] Call Trace: [ 109.355081][ T46] [ 109.355087][ T46] dump_stack_lvl+0x116/0x1f0 [ 109.355113][ T46] print_report+0xcd/0x630 [ 109.355132][ T46] ? __virt_addr_valid+0x81/0x610 [ 109.355156][ T46] ? __phys_addr+0xe8/0x180 [ 109.355180][ T46] ? ucma_create_uevent+0xadb/0xb30 [ 109.355200][ T46] kasan_report+0xe0/0x110 [ 109.355218][ T46] ? ucma_create_uevent+0xadb/0xb30 [ 109.355241][ T46] ucma_create_uevent+0xadb/0xb30 [ 109.355262][ T46] ucma_event_handler+0x102/0x940 [ 109.355284][ T46] ? rcu_is_watching+0x12/0xc0 [ 109.355307][ T46] cma_cm_event_handler+0x94/0x300 [ 109.355324][ T46] cma_iboe_join_work_handler+0xca/0x170 [ 109.355343][ T46] process_one_work+0x9cf/0x1b70 [ 109.355367][ T46] ? __pfx_process_one_work+0x10/0x10 [ 109.355388][ T46] ? assign_work+0x1a0/0x250 [ 109.355406][ T46] worker_thread+0x6c8/0xf10 [ 109.355429][ T46] ? __pfx_worker_thread+0x10/0x10 [ 109.355449][ T46] kthread+0x3c2/0x780 [ 109.355466][ T46] ? __pfx_kthread+0x10/0x10 [ 109.355483][ T46] ? rcu_is_watching+0x12/0xc0 [ 109.355504][ T46] ? __pfx_kthread+0x10/0x10 [ 109.355522][ T46] ret_from_fork+0x56a/0x730 [ 109.355537][ T46] ? __pfx_kthread+0x10/0x10 [ 109.355554][ T46] ret_from_fork_asm+0x1a/0x30 [ 109.355579][ T46] [ 109.355585][ T46] [ 109.422200][ T46] Allocated by task 6398: [ 109.423992][ T46] kasan_save_stack+0x33/0x60 [ 109.425967][ T46] kasan_save_track+0x14/0x30 [ 109.427985][ T46] __kasan_kmalloc+0xaa/0xb0 [ 109.429812][ T46] ucma_process_join+0x237/0xa30 [ 109.432319][ T46] ucma_join_multicast+0xe8/0x160 [ 109.434538][ T46] ucma_write+0x1f8/0x330 [ 109.436145][ T46] vfs_write+0x29d/0x11d0 [ 109.437615][ T46] ksys_write+0x1f8/0x250 [ 109.439005][ T46] do_syscall_64+0xcd/0x4e0 [ 109.440553][ T46] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.442494][ T46] [ 109.443330][ T46] Freed by task 6398: [ 109.444661][ T46] kasan_save_stack+0x33/0x60 [ 109.446293][ T46] kasan_save_track+0x14/0x30 [ 109.447800][ T46] __kasan_save_free_info+0x3b/0x60 [ 109.449607][ T46] __kasan_slab_free+0x5f/0x80 [ 109.451788][ T46] kfree+0x2b8/0x6d0 [ 109.453604][ T46] ucma_process_join+0x3b9/0xa30 [ 109.456268][ T46] ucma_join_multicast+0xe8/0x160 [ 109.458506][ T46] ucma_write+0x1f8/0x330 [ 109.460415][ T46] vfs_write+0x29d/0x11d0 [ 109.462277][ T46] ksys_write+0x1f8/0x250 [ 109.464140][ T46] do_syscall_64+0xcd/0x4e0 [ 109.466089][ T46] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.468423][ T46] [ 109.469386][ T46] The buggy address belongs to the object at ffff8880282dd200 [ 109.469386][ T46] which belongs to the cache kmalloc-192 of size 192 [ 109.477009][ T46] The buggy address is located 16 bytes inside of [ 109.477009][ T46] freed 192-byte region [ffff8880282dd200, ffff8880282dd2c0) [ 109.483453][ T46] [ 109.484449][ T46] The buggy address belongs to the physical page: [ 109.487061][ T46] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x282dd [ 109.490864][ T46] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 109.494914][ T46] page_type: f5(slab) [ 109.497140][ T46] raw: 00fff00000000000 ffff88801b0423c0 ffffea0000857e00 dead000000000004 [ 109.501191][ T46] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 109.504649][ T46] page dumped because: kasan: bad access detected [ 109.507324][ T46] page_owner tracks the page as allocated [ 109.509691][ T46] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1146, tgid 1146 (kworker/u32:6), ts 12414326666, free_ts 12343823919 [ 109.518120][ T46] post_alloc_hook+0x1c0/0x230 [ 109.520395][ T46] get_page_from_freelist+0x10a3/0x3a30 [ 109.522718][ T46] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 109.525180][ T46] alloc_pages_mpol+0x1fb/0x550 [ 109.527275][ T46] new_slab+0x24a/0x360 [ 109.529155][ T46] ___slab_alloc+0xdc4/0x1ae0 [ 109.531451][ T46] __slab_alloc.constprop.0+0x63/0x110 [ 109.534115][ T46] __kmalloc_cache_node_noprof+0x453/0x7a0 [ 109.536983][ T46] create_worker+0x10f/0x7e0 [ 109.539054][ T46] worker_thread+0x9dd/0xf10 [ 109.541056][ T46] kthread+0x3c2/0x780 [ 109.542803][ T46] ret_from_fork+0x56a/0x730 [ 109.544681][ T46] ret_from_fork_asm+0x1a/0x30 [ 109.546655][ T46] page last free pid 840 tgid 840 stack trace: [ 109.549204][ T46] __free_frozen_pages+0x7df/0x1160 [ 109.551699][ T46] vfree+0x1fd/0xb50 [ 109.553751][ T46] delayed_vfree_work+0x56/0x70 [ 109.556376][ T46] process_one_work+0x9cf/0x1b70 [ 109.558892][ T46] worker_thread+0x6c8/0xf10 [ 109.560753][ T46] kthread+0x3c2/0x780 [ 109.562518][ T46] ret_from_fork+0x56a/0x730 [ 109.564437][ T46] ret_from_fork_asm+0x1a/0x30 [ 109.566553][ T46] [ 109.567575][ T46] Memory state around the buggy address: [ 109.570024][ T46] ffff8880282dd100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.574349][ T46] ffff8880282dd180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 109.578046][ T46] >ffff8880282dd200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.581431][ T46] ^ [ 109.583404][ T46] ffff8880282dd280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 109.586858][ T46] ffff8880282dd300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.590738][ T46] ================================================================== [ 109.596173][ T46] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.598949][ T46] CPU: 2 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 109.602177][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.606135][ T46] Workqueue: rdma_cm cma_iboe_join_work_handler [ 109.608951][ T46] Call Trace: [ 109.610815][ T46] [ 109.612509][ T46] dump_stack_lvl+0x3d/0x1f0 [ 109.614570][ T46] vpanic+0x640/0x6f0 [ 109.616140][ T46] panic+0xca/0xd0 [ 109.617686][ T46] ? __pfx_panic+0x10/0x10 [ 109.619688][ T46] ? ucma_create_uevent+0xadb/0xb30 [ 109.622361][ T46] ? preempt_schedule_common+0x44/0xc0 [ 109.624706][ T46] ? preempt_schedule_thunk+0x16/0x30 [ 109.628106][ T46] ? check_panic_on_warn+0x1f/0xb0 [ 109.631311][ T46] check_panic_on_warn+0xab/0xb0 [ 109.633683][ T46] end_report+0x107/0x170 [ 109.635604][ T46] kasan_report+0xee/0x110 [ 109.637591][ T46] ? ucma_create_uevent+0xadb/0xb30 [ 109.639990][ T46] ucma_create_uevent+0xadb/0xb30 [ 109.642427][ T46] ucma_event_handler+0x102/0x940 [ 109.644607][ T46] ? rcu_is_watching+0x12/0xc0 [ 109.646729][ T46] cma_cm_event_handler+0x94/0x300 [ 109.648832][ T46] cma_iboe_join_work_handler+0xca/0x170 [ 109.651016][ T46] process_one_work+0x9cf/0x1b70 [ 109.653087][ T46] ? __pfx_process_one_work+0x10/0x10 [ 109.654862][ T46] ? assign_work+0x1a0/0x250 [ 109.656535][ T46] worker_thread+0x6c8/0xf10 [ 109.658044][ T46] ? __pfx_worker_thread+0x10/0x10 [ 109.659644][ T46] kthread+0x3c2/0x780 [ 109.660988][ T46] ? __pfx_kthread+0x10/0x10 [ 109.662906][ T46] ? rcu_is_watching+0x12/0xc0 [ 109.664860][ T46] ? __pfx_kthread+0x10/0x10 [ 109.666785][ T46] ret_from_fork+0x56a/0x730 [ 109.668295][ T46] ? __pfx_kthread+0x10/0x10 [ 109.670246][ T46] ret_from_fork_asm+0x1a/0x30 [ 109.672495][ T46] [ 109.675209][ T46] Kernel Offset: disabled [ 109.677073][ T46] Rebooting in 86400 seconds..