[ 143.309836][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.314151][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:13250' (ED25519) to the list of known hosts. 2026/03/06 04:56:16 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 152.842866][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.516100][ T5663] chnl_net:caif_netlink_parms(): no params data found [ 163.636232][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.654273][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.657797][ T5663] bridge_slave_0: entered allmulticast mode [ 163.674246][ T5663] bridge_slave_0: entered promiscuous mode [ 163.685454][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.688766][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.691997][ T5663] bridge_slave_1: entered allmulticast mode [ 163.714436][ T5663] bridge_slave_1: entered promiscuous mode [ 163.807143][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.825013][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.873146][ T5663] team0: Port device team_slave_0 added [ 163.879096][ T5663] team0: Port device team_slave_1 added [ 163.903069][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.906550][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.920741][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.928982][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.932146][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.946820][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.987833][ T5663] hsr_slave_0: entered promiscuous mode [ 163.991332][ T5663] hsr_slave_1: entered promiscuous mode [ 164.487394][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.511119][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.527881][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.546621][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.729402][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.765010][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.788487][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.792035][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.829384][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.832823][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.208730][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.286070][ T5663] veth0_vlan: entered promiscuous mode [ 165.318799][ T5663] veth1_vlan: entered promiscuous mode [ 165.360531][ T5663] veth0_macvtap: entered promiscuous mode [ 165.377551][ T5663] veth1_macvtap: entered promiscuous mode [ 165.425356][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.450817][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.477145][ T1087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.481262][ T1087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.507429][ T1087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.525990][ T1087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.798234][ T4663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.808095][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.815234][ T4663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.819302][ T4663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.823304][ T4663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.828175][ T4663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.941234][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.980719][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.447880][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.452239][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.550047][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.566982][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.860224][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.266537][ T1042] bridge_slave_1: left allmulticast mode [ 168.269358][ T1042] bridge_slave_1: left promiscuous mode [ 168.272160][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.302212][ T1042] bridge_slave_0: left allmulticast mode [ 168.319841][ T1042] bridge_slave_0: left promiscuous mode [ 168.330003][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state 2026/03/06 04:56:36 executed programs: 0 [ 168.619682][ T4663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.626045][ T4663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.630818][ T4663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.635267][ T4663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.639012][ T4663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.720323][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.726366][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.736505][ T1042] bond0 (unregistering): Released all slaves [ 168.851292][ T1042] hsr_slave_0: left promiscuous mode [ 168.865878][ T1042] hsr_slave_1: left promiscuous mode [ 168.877637][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.881016][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.895050][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.898549][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.919747][ T1042] veth1_macvtap: left promiscuous mode [ 168.922840][ T1042] veth0_macvtap: left promiscuous mode [ 168.935202][ T1042] veth1_vlan: left promiscuous mode [ 168.937806][ T1042] veth0_vlan: left promiscuous mode [ 169.355020][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 169.390634][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 170.151407][ T5749] chnl_net:caif_netlink_parms(): no params data found [ 170.485955][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.490610][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.496671][ T5749] bridge_slave_0: entered allmulticast mode [ 170.504448][ T5749] bridge_slave_0: entered promiscuous mode [ 170.515920][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.519142][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.522601][ T5749] bridge_slave_1: entered allmulticast mode [ 170.535518][ T5749] bridge_slave_1: entered promiscuous mode [ 170.610544][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.631551][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.667056][ T4663] Bluetooth: hci0: command tx timeout [ 170.717456][ T5749] team0: Port device team_slave_0 added [ 170.723593][ T5749] team0: Port device team_slave_1 added [ 170.777081][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.780184][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.826997][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.836510][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.839960][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.874586][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.945325][ T5749] hsr_slave_0: entered promiscuous mode [ 170.948652][ T5749] hsr_slave_1: entered promiscuous mode [ 171.526266][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.543757][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.567722][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.576719][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.757155][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.782601][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.800461][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.803872][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.818532][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.822894][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.898498][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.180147][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.259474][ T5749] veth0_vlan: entered promiscuous mode [ 172.279721][ T5749] veth1_vlan: entered promiscuous mode [ 172.348268][ T5749] veth0_macvtap: entered promiscuous mode [ 172.367423][ T5749] veth1_macvtap: entered promiscuous mode [ 172.403421][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.416403][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.429140][ T1087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.438930][ T1087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.451871][ T1087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.481132][ T1087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.513563][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.520646][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.553766][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.558616][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.748028][ T4663] Bluetooth: hci0: command tx timeout [ 172.913500][ T5816] loop0: detected capacity change from 0 to 32768 [ 172.942539][ T5816] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.955030][ T5816] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.008752][ T5816] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 173.022796][ T5487] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 173.027368][ T5487] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 173.083177][ T5487] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 173.091402][ T5487] gfs2: fsid=syz:syz.0: jid=0: Done [ 173.096220][ T5816] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 173.229102][ T5821] ------------[ cut here ]------------ [ 173.231817][ T5821] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888046fac318, owner = 0x0, curr 0xffff888034380000, list empty [ 173.241314][ T5821] WARNING: kernel/locking/rwsem.c:1381 at up_write+0x2d6/0x410, CPU#0: syz.0.17/5821 [ 173.249526][ T5821] Modules linked in: [ 173.252319][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 173.257754][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.262385][ T5821] RIP: 0010:up_write+0x388/0x410 [ 173.264899][ T5821] Code: cc 8b 49 c7 c2 80 eb cc 8b 4c 0f 44 d0 48 8b 7c 24 08 48 c7 c6 e0 ed cc 8b 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 10 41 52 <67> 48 0f b9 3a 48 83 c4 08 e8 7a a0 0b 03 e9 67 fd ff ff 48 c7 c1 [ 173.274377][ T5821] RSP: 0018:ffffc90004e77d80 EFLAGS: 00010246 [ 173.277378][ T5821] RAX: ffffffff8bcceb60 RBX: ffff888046fac318 RCX: ffff888046fac318 [ 173.280919][ T5821] RDX: 0000000000000000 RSI: ffffffff8bccede0 RDI: ffffffff901506e0 [ 173.284679][ T5821] RBP: ffff888046fac370 R08: 0000000000000000 R09: ffff888034380000 [ 173.288494][ T5821] R10: ffffffff8bcceb60 R11: ffffed1008df5865 R12: 0000000000000000 [ 173.293038][ T5821] R13: dffffc0000000000 R14: ffff888046fac318 R15: 1ffff11008df5864 [ 173.297504][ T5821] FS: 00007f56261876c0(0000) GS:ffff88808ca58000(0000) knlGS:0000000000000000 [ 173.301473][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.305516][ T5821] CR2: 0000000000000000 CR3: 0000000037fcc000 CR4: 0000000000352ef0 [ 173.309775][ T5821] Call Trace: [ 173.311673][ T5821] [ 173.313299][ T5821] filename_symlinkat+0x20a/0x430 [ 173.315874][ T5821] ? __pfx_filename_symlinkat+0x10/0x10 [ 173.318482][ T5821] ? do_getname+0x151/0x250 [ 173.320620][ T5821] __se_sys_symlinkat+0x4e/0x2b0 [ 173.323429][ T5821] do_syscall_64+0x14d/0xf80 [ 173.325775][ T5821] ? trace_irq_disable+0x3b/0x150 [ 173.328442][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.332064][ T5821] ? clear_bhb_loop+0x40/0x90 [ 173.334584][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.337498][ T5821] RIP: 0033:0x7f562539c799 [ 173.339526][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.349216][ T5821] RSP: 002b:00007f5626187028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 173.353118][ T5821] RAX: ffffffffffffffda RBX: 00007f5625616090 RCX: 00007f562539c799 [ 173.356856][ T5821] RDX: 00002000000003c0 RSI: 0000000000000007 RDI: 0000200000000240 [ 173.360960][ T5821] RBP: 00007f5625432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 173.365055][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.368579][ T5821] R13: 00007f5625616128 R14: 00007f5625616090 R15: 00007ffcc1726508 [ 173.372026][ T5821] [ 173.373356][ T5821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.376746][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 173.381138][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.386783][ T5821] Call Trace: [ 173.388469][ T5821] [ 173.389909][ T5821] vpanic+0x56c/0xa60 [ 173.392193][ T5821] ? __pfx__printk+0x10/0x10 [ 173.394834][ T5821] ? __pfx_vpanic+0x10/0x10 [ 173.397479][ T5821] ? is_bpf_text_address+0x292/0x2b0 [ 173.400111][ T5821] ? is_bpf_text_address+0x26/0x2b0 [ 173.402691][ T5821] panic+0xc5/0xd0 [ 173.404865][ T5821] ? __pfx_panic+0x10/0x10 [ 173.407000][ T5821] __warn+0x315/0x4f0 [ 173.408988][ T5821] ? up_write+0x2d6/0x410 [ 173.410797][ T5821] ? up_write+0x2d6/0x410 [ 173.412675][ T5821] __report_bug+0x29a/0x540 [ 173.414730][ T5821] ? up_write+0x2d6/0x410 [ 173.416822][ T5821] ? __pfx___report_bug+0x10/0x10 [ 173.419292][ T5821] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.421854][ T5821] ? up_write+0x38d/0x410 [ 173.424391][ T5821] report_bug_entry+0x19a/0x290 [ 173.427094][ T5821] ? up_write+0x388/0x410 [ 173.429308][ T5821] ? up_write+0x38d/0x410 [ 173.431268][ T5821] handle_bug+0xce/0x200 [ 173.433174][ T5821] exc_invalid_op+0x1a/0x50 [ 173.435282][ T5821] asm_exc_invalid_op+0x1a/0x20 [ 173.437566][ T5821] RIP: 0010:up_write+0x388/0x410 [ 173.439927][ T5821] Code: cc 8b 49 c7 c2 80 eb cc 8b 4c 0f 44 d0 48 8b 7c 24 08 48 c7 c6 e0 ed cc 8b 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 10 41 52 <67> 48 0f b9 3a 48 83 c4 08 e8 7a a0 0b 03 e9 67 fd ff ff 48 c7 c1 [ 173.450313][ T5821] RSP: 0018:ffffc90004e77d80 EFLAGS: 00010246 [ 173.453059][ T5821] RAX: ffffffff8bcceb60 RBX: ffff888046fac318 RCX: ffff888046fac318 [ 173.456615][ T5821] RDX: 0000000000000000 RSI: ffffffff8bccede0 RDI: ffffffff901506e0 [ 173.460742][ T5821] RBP: ffff888046fac370 R08: 0000000000000000 R09: ffff888034380000 [ 173.464900][ T5821] R10: ffffffff8bcceb60 R11: ffffed1008df5865 R12: 0000000000000000 [ 173.468525][ T5821] R13: dffffc0000000000 R14: ffff888046fac318 R15: 1ffff11008df5864 [ 173.472301][ T5821] filename_symlinkat+0x20a/0x430 [ 173.475028][ T5821] ? __pfx_filename_symlinkat+0x10/0x10 [ 173.478105][ T5821] ? do_getname+0x151/0x250 [ 173.480415][ T5821] __se_sys_symlinkat+0x4e/0x2b0 [ 173.482905][ T5821] do_syscall_64+0x14d/0xf80 [ 173.485063][ T5821] ? trace_irq_disable+0x3b/0x150 [ 173.487458][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.490278][ T5821] ? clear_bhb_loop+0x40/0x90 [ 173.492411][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.495363][ T5821] RIP: 0033:0x7f562539c799 [ 173.498013][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.507155][ T5821] RSP: 002b:00007f5626187028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 173.510921][ T5821] RAX: ffffffffffffffda RBX: 00007f5625616090 RCX: 00007f562539c799 [ 173.515135][ T5821] RDX: 00002000000003c0 RSI: 0000000000000007 RDI: 0000200000000240 [ 173.519071][ T5821] RBP: 00007f5625432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 173.522549][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.526138][ T5821] R13: 00007f5625616128 R14: 00007f5625616090 R15: 00007ffcc1726508 [ 173.530084][ T5821] [ 173.531847][ T5821] Kernel Offset: disabled [ 173.534267][ T5821] Rebooting in 86400 seconds..