Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. 2026/09/21 20:50:14 parsed 1 programs 2026/09/21 20:50:14 serving rpc on tcp://38917 [ 86.530421][ T5789] cgroup: Unknown subsys name 'net' [ 86.694614][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.567351][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.899620][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 92.064412][ T9] cfg80211: failed to load regulatory.db [ 92.297968][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.305214][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.341465][ T5825] bridge_slave_0: entered allmulticast mode [ 92.367175][ T5825] bridge_slave_0: entered promiscuous mode [ 92.402930][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.422795][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.431701][ T5825] bridge_slave_1: entered allmulticast mode [ 92.439645][ T5825] bridge_slave_1: entered promiscuous mode [ 92.576500][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.624292][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.633738][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.642757][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.657920][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.667572][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.679287][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.695173][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.804649][ T5825] team0: Port device team_slave_0 added [ 92.814460][ T5825] team0: Port device team_slave_1 added [ 92.933446][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.943209][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.971846][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.992247][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.000861][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.033476][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.275945][ T5825] hsr_slave_0: entered promiscuous mode [ 93.282518][ T5825] hsr_slave_1: entered promiscuous mode [ 94.495059][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.511785][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.520837][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.564041][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.586151][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.640217][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.750611][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.775417][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.031176][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.081428][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.119723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.127252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.160362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.167752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.564160][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.683536][ T5825] veth0_vlan: entered promiscuous mode [ 95.700315][ T5825] veth1_vlan: entered promiscuous mode [ 95.762352][ T5825] veth0_macvtap: entered promiscuous mode [ 95.774478][ T5825] veth1_macvtap: entered promiscuous mode [ 95.809036][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.833587][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.861145][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.870278][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.880125][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.889255][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/21 20:50:26 executed programs: 0 [ 96.093257][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.106769][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.114545][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.123216][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.132346][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.141491][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.298061][ T5825] syz-executor (5825) used greatest stack depth: 20904 bytes left [ 96.306572][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.331832][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.340781][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.352200][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.384410][ T5905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.395828][ T5905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.403455][ T5905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.414028][ T5905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.424550][ T5905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.446568][ T5905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.459690][ T5905] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.470362][ T5905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.555069][ T5905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.568489][ T5905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.577577][ T5905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.590254][ T5905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.609654][ T5905] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.617236][ T5905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.842922][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.917768][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 97.148025][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.155541][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.162839][ T5896] bridge_slave_0: entered allmulticast mode [ 97.171967][ T5896] bridge_slave_0: entered promiscuous mode [ 97.196393][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.203732][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.211510][ T5896] bridge_slave_1: entered allmulticast mode [ 97.219498][ T5896] bridge_slave_1: entered promiscuous mode [ 97.226616][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 97.328602][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.352400][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.453840][ T5896] team0: Port device team_slave_0 added [ 97.469845][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 97.507447][ T5896] team0: Port device team_slave_1 added [ 97.533020][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.540774][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.548160][ T5901] bridge_slave_0: entered allmulticast mode [ 97.555553][ T5901] bridge_slave_0: entered promiscuous mode [ 97.586894][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.594353][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.601928][ T5901] bridge_slave_1: entered allmulticast mode [ 97.609713][ T5901] bridge_slave_1: entered promiscuous mode [ 97.642592][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 97.667168][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.674271][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.700767][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.758538][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.765606][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.791846][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.817055][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.829320][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.949689][ T5901] team0: Port device team_slave_0 added [ 97.975021][ T5896] hsr_slave_0: entered promiscuous mode [ 97.982093][ T5896] hsr_slave_1: entered promiscuous mode [ 97.989129][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.997651][ T5896] Cannot create hsr debugfs directory [ 98.013480][ T5901] team0: Port device team_slave_1 added [ 98.032365][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.039828][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.048582][ T5907] bridge_slave_0: entered allmulticast mode [ 98.056281][ T5907] bridge_slave_0: entered promiscuous mode [ 98.065296][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.072896][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.080514][ T5907] bridge_slave_1: entered allmulticast mode [ 98.087796][ T5907] bridge_slave_1: entered promiscuous mode [ 98.173365][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.180693][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.188165][ T5903] bridge_slave_0: entered allmulticast mode [ 98.195694][ T5903] bridge_slave_0: entered promiscuous mode [ 98.216442][ T5087] Bluetooth: hci0: command tx timeout [ 98.221928][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.229837][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.256328][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.269859][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.277111][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.305430][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.324826][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.338425][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.368875][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.380392][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.387869][ T5903] bridge_slave_1: entered allmulticast mode [ 98.395002][ T5903] bridge_slave_1: entered promiscuous mode [ 98.453133][ T5087] Bluetooth: hci1: command tx timeout [ 98.486506][ T5907] team0: Port device team_slave_0 added [ 98.502974][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.516746][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.537347][ T5087] Bluetooth: hci2: command tx timeout [ 98.552750][ T5907] team0: Port device team_slave_1 added [ 98.658004][ T5901] hsr_slave_0: entered promiscuous mode [ 98.664500][ T5901] hsr_slave_1: entered promiscuous mode [ 98.671882][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.679619][ T5901] Cannot create hsr debugfs directory [ 98.686879][ T5087] Bluetooth: hci3: command tx timeout [ 98.696931][ T5903] team0: Port device team_slave_0 added [ 98.703805][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.711688][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.738506][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.751427][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.758813][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.785224][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.812241][ T5903] team0: Port device team_slave_1 added [ 98.879094][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.886198][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.912511][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.926018][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.933612][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.959767][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.028268][ T5907] hsr_slave_0: entered promiscuous mode [ 99.036872][ T5907] hsr_slave_1: entered promiscuous mode [ 99.043225][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.051032][ T5907] Cannot create hsr debugfs directory [ 99.144610][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.206669][ T5903] hsr_slave_0: entered promiscuous mode [ 99.213551][ T5903] hsr_slave_1: entered promiscuous mode [ 99.222370][ T5903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.231055][ T5903] Cannot create hsr debugfs directory [ 99.252272][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.303590][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.315326][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.388067][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.650107][ T5901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.665020][ T5901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.677720][ T5901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.690650][ T5901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.789288][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.828050][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.847680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.854922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.890287][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.897509][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.914587][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.963100][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.003155][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.010404][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.025115][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.032318][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.134281][ T5901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.146843][ T5901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.287327][ T5087] Bluetooth: hci0: command tx timeout [ 100.349216][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.419576][ T5896] veth0_vlan: entered promiscuous mode [ 100.438462][ T5896] veth1_vlan: entered promiscuous mode [ 100.478437][ T5896] veth0_macvtap: entered promiscuous mode [ 100.489789][ T5896] veth1_macvtap: entered promiscuous mode [ 100.514857][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.533660][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.538464][ T5087] Bluetooth: hci1: command tx timeout [ 100.557779][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.575114][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.590533][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.603360][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.616713][ T5087] Bluetooth: hci2: command tx timeout [ 100.628554][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.639490][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.650410][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.661412][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.684022][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.747426][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.767442][ T5087] Bluetooth: hci3: command tx timeout [ 100.821597][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.876460][ T5901] veth0_vlan: entered promiscuous mode [ 100.893115][ T5901] veth1_vlan: entered promiscuous mode [ 100.927738][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.952296][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.002627][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.024331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.068454][ T5901] veth0_macvtap: entered promiscuous mode [ 101.082594][ T5901] veth1_macvtap: entered promiscuous mode 2026/09/21 20:50:31 executed programs: 8 [ 101.258295][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.285222][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.299742][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.317977][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.332665][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.344365][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.358717][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.368836][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.379617][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.403511][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.567587][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.591074][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.608240][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.617428][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.834484][ T5955] md: pers->run() failed ... [ 101.960769][ T5955] md: could not open device unknown-block(1,1). [ 102.171143][ T5966] md/raid1:md0: active with 1 out of 2 mirrors [ 102.191102][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.211357][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.366077][ T5087] Bluetooth: hci0: command tx timeout [ 102.401626][ T5966] md/raid:md0: device ram1 operational as raid disk 1 [ 102.482435][ T5966] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 102.501629][ T5971] md: could not open device unknown-block(1,1). [ 102.605667][ T5087] Bluetooth: hci1: command tx timeout [ 102.660095][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.676391][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.688312][ T5087] Bluetooth: hci2: command tx timeout [ 102.795644][ T5907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.822326][ T5907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.847093][ T5087] Bluetooth: hci3: command tx timeout [ 102.856646][ T5907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.960428][ T5907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.031856][ T5980] md/raid1:md0: active with 1 out of 2 mirrors [ 103.220263][ T5984] md/raid:md0: device ram1 operational as raid disk 1 [ 103.321795][ T5984] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 103.370050][ T5903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.403257][ T5903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.525191][ T5903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.635755][ T59] hsr_slave_0: left promiscuous mode [ 103.665050][ T59] hsr_slave_1: left promiscuous mode [ 103.680925][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.703043][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.713406][ T5988] md/raid1:md0: active with 1 out of 2 mirrors [ 103.725287][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.735052][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.756589][ T5991] md/raid:md0: device ram1 operational as raid disk 1 [ 103.766499][ T59] bridge_slave_1: left allmulticast mode [ 103.785456][ T59] bridge_slave_1: left promiscuous mode [ 103.793801][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.842916][ T5991] md/raid:md0: couldn't allocate thread. [ 103.855930][ T59] bridge_slave_0: left allmulticast mode [ 103.861652][ T59] bridge_slave_0: left promiscuous mode [ 103.876851][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.929347][ T5991] ============================================================================= [ 103.929772][ T5991] [ 103.929778][ T5991] ====================================================== [ 103.929784][ T5991] WARNING: possible circular locking dependency detected [ 103.929797][ T5991] syzkaller #0 Not tainted [ 103.929806][ T5991] ------------------------------------------------------ [ 103.929812][ T5991] syz.1.18/5991 is trying to acquire lock: [ 103.929821][ T5991] ffffffff8d1263e0 (console_owner){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 103.929886][ T5991] [ 103.929886][ T5991] but task is already holding lock: [ 103.929891][ T5991] ffff888030b17f18 (&n->list_lock){-.-.}-{2:2}, at: __kmem_cache_shutdown+0x98/0x230 [ 103.929943][ T5991] [ 103.929943][ T5991] which lock already depends on the new lock. [ 103.929943][ T5991] [ 103.929948][ T5991] [ 103.929948][ T5991] the existing dependency chain (in reverse order) is: [ 103.929953][ T5991] [ 103.929953][ T5991] -> #4 (&n->list_lock){-.-.}-{2:2}: [ 103.929977][ T5991] _raw_spin_lock_irqsave+0xb4/0x100 [ 103.929999][ T5991] get_partial_node+0x36/0x550 [ 103.930016][ T5991] ___slab_alloc+0x9cc/0x12f0 [ 103.930032][ T5991] kmem_cache_alloc+0x109/0x2c0 [ 103.930066][ T5991] debug_objects_fill_pool+0x5c2/0x790 [ 103.930092][ T5991] debug_object_activate+0x36/0x500 [ 103.930117][ T5991] insert_work+0x35/0x310 [ 103.930137][ T5991] __queue_work+0xbfd/0xfd0 [ 103.930155][ T5991] queue_work_on+0x128/0x1f0 [ 103.930172][ T5991] netdevice_event+0x755/0x890 [ 103.930198][ T5991] notifier_call_chain+0x18f/0x380 [ 103.930220][ T5991] register_netdevice+0x1670/0x1ba0 [ 103.930242][ T5991] __ip_tunnel_create+0x3bc/0x4d0 [ 103.930264][ T5991] ip_tunnel_init_net+0x2e2/0x7c0 [ 103.930285][ T5991] ops_init+0x391/0x640 [ 103.930322][ T5991] setup_net+0x3b6/0xa20 [ 103.930345][ T5991] copy_net_ns+0x361/0x530 [ 103.930364][ T5991] create_new_namespaces+0x3ce/0x700 [ 103.930386][ T5991] unshare_nsproxy_namespaces+0x11a/0x160 [ 103.930409][ T5991] ksys_unshare+0x4fa/0x8f0 [ 103.930430][ T5991] __x64_sys_unshare+0x38/0x40 [ 103.930450][ T5991] do_syscall_64+0x55/0xb0 [ 103.930474][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.930500][ T5991] [ 103.930500][ T5991] -> #3 (&pool->lock){-.-.}-{2:2}: [ 103.930523][ T5991] _raw_spin_lock+0x2e/0x40 [ 103.930543][ T5991] __queue_work+0x72f/0xfd0 [ 103.930560][ T5991] queue_work_on+0x128/0x1f0 [ 103.930577][ T5991] rpm_suspend+0x1133/0x1b60 [ 103.930602][ T5991] __pm_runtime_idle+0x12f/0x1a0 [ 103.930627][ T5991] __device_attach+0x352/0x420 [ 103.930657][ T5991] bus_probe_device+0x180/0x260 [ 103.930698][ T5991] device_add+0x87c/0xc40 [ 103.930719][ T5991] serial_base_port_add+0x2f6/0x430 [ 103.930741][ T5991] serial_core_register_port+0x378/0x20b0 [ 103.930760][ T5991] serial8250_register_8250_port+0x15fd/0x1f40 [ 103.930784][ T5991] serial_pnp_probe+0x577/0x750 [ 103.930807][ T5991] pnp_device_probe+0x305/0x4b0 [ 103.930831][ T5991] really_probe+0x247/0xae0 [ 103.930848][ T5991] __driver_probe_device+0x1f5/0x390 [ 103.930866][ T5991] driver_probe_device+0x4f/0x420 [ 103.930883][ T5991] __driver_attach+0x444/0x6d0 [ 103.930898][ T5991] bus_for_each_dev+0x235/0x2b0 [ 103.930922][ T5991] bus_add_driver+0x340/0x630 [ 103.930947][ T5991] driver_register+0x23a/0x310 [ 103.930964][ T5991] serial8250_init+0x9a/0x170 [ 103.930982][ T5991] do_one_initcall+0x242/0x790 [ 103.931005][ T5991] do_initcall_level+0x13d/0x1f0 [ 103.931026][ T5991] do_initcalls+0x69/0xd0 [ 103.931052][ T5991] kernel_init_freeable+0x3d9/0x560 [ 103.931070][ T5991] kernel_init+0x1d/0x1c0 [ 103.931089][ T5991] ret_from_fork+0x48/0x80 [ 103.931110][ T5991] ret_from_fork_asm+0x11/0x20 [ 103.931131][ T5991] [ 103.931131][ T5991] -> #2 (&dev->power.lock){-...}-{2:2}: [ 103.931155][ T5991] _raw_spin_lock_irqsave+0xb4/0x100 [ 103.931177][ T5991] __pm_runtime_resume+0x10f/0x170 [ 103.931203][ T5991] __uart_start+0x171/0x3e0 [ 103.931219][ T5991] uart_write+0x449/0x5d0 [ 103.931236][ T5991] n_tty_write+0xd3d/0x11e0 [ 103.931263][ T5991] file_tty_write+0x529/0x960 [ 103.931286][ T5991] vfs_write+0x474/0x9a0 [ 103.931311][ T5991] ksys_write+0x151/0x260 [ 103.931335][ T5991] do_syscall_64+0x55/0xb0 [ 103.931360][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.931386][ T5991] [ 103.931386][ T5991] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 103.931410][ T5991] _raw_spin_lock_irqsave+0xb4/0x100 [ 103.931430][ T5991] serial8250_console_write+0x181/0x18b0 [ 103.931456][ T5991] console_flush_all+0x6ad/0xcf0 [ 103.931480][ T5991] console_unlock+0xad/0x350 [ 103.931502][ T5991] vprintk_emit+0x497/0x610 [ 103.931524][ T5991] _printk+0xde/0x130 [ 103.931544][ T5991] register_console+0xb96/0xf00 [ 103.931567][ T5991] univ8250_console_init+0x45/0x50 [ 103.931585][ T5991] console_init+0x17b/0x5d0 [ 103.931603][ T5991] start_kernel+0x2c8/0x4e0 [ 103.931619][ T5991] x86_64_start_reservations+0x2a/0x30 [ 103.931636][ T5991] copy_bootdata+0x0/0xd0 [ 103.931662][ T5991] secondary_startup_64_no_verify+0x179/0x17b [ 103.931687][ T5991] [ 103.931687][ T5991] -> #0 (console_owner){....}-{0:0}: [ 103.931712][ T5991] __lock_acquire+0x37ef/0x7d80 [ 103.931731][ T5991] lock_acquire+0x19e/0x420 [ 103.931750][ T5991] console_flush_all+0x676/0xcf0 [ 103.931773][ T5991] console_unlock+0xad/0x350 [ 103.931795][ T5991] vprintk_emit+0x497/0x610 [ 103.931816][ T5991] _printk+0xde/0x130 [ 103.931835][ T5991] slab_bug+0x6d/0xc0 [ 103.931856][ T5991] slab_err+0x130/0x170 [ 103.931876][ T5991] list_slab_objects+0x38/0x1a0 [ 103.931899][ T5991] __kmem_cache_shutdown+0x132/0x230 [ 103.931928][ T5991] kmem_cache_destroy+0x56/0x160 [ 103.931955][ T5991] free_conf+0x227/0x4b0 [ 103.931974][ T5991] setup_conf+0x16c4/0x2a30 [ 103.931993][ T5991] raid5_takeover+0x61d/0x8a0 [ 103.932015][ T5991] level_store+0x6b1/0x1a90 [ 103.932033][ T5991] md_attr_store+0x196/0x380 [ 103.932057][ T5991] kernfs_fop_write_iter+0x3a4/0x520 [ 103.932074][ T5991] vfs_write+0x474/0x9a0 [ 103.932099][ T5991] ksys_write+0x151/0x260 [ 103.932124][ T5991] do_syscall_64+0x55/0xb0 [ 103.932147][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.932189][ T5991] [ 103.932189][ T5991] other info that might help us debug this: [ 103.932189][ T5991] [ 103.932195][ T5991] Chain exists of: [ 103.932195][ T5991] console_owner --> &pool->lock --> &n->list_lock [ 103.932195][ T5991] [ 103.932237][ T5991] Possible unsafe locking scenario: [ 103.932237][ T5991] [ 103.932241][ T5991] CPU0 CPU1 [ 103.932246][ T5991] ---- ---- [ 103.932250][ T5991] lock(&n->list_lock); [ 103.932260][ T5991] lock(&pool->lock); [ 103.932271][ T5991] lock(&n->list_lock); [ 103.932282][ T5991] lock(console_owner); [ 103.932292][ T5991] [ 103.932292][ T5991] *** DEADLOCK *** [ 103.932292][ T5991] [ 103.932296][ T5991] 10 locks held by syz.1.18/5991: [ 103.932306][ T5991] #0: ffff888020e02848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 103.932359][ T5991] #1: ffff88807fb98418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 103.932415][ T5991] #2: ffff8880259f8088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 103.932456][ T5991] #3: ffff88807aacb1f8 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 103.932502][ T5991] #4: ffff88802e2942d0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: level_store+0xd0/0x1a90 [ 103.932547][ T5991] #5: ffffffff8cfcd450 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x30/0x160 [ 103.932600][ T5991] #6: ffffffff8d200b58 (slab_mutex){+.+.}-{3:3}, at: kmem_cache_destroy+0x3e/0x160 [ 103.932652][ T5991] #7: ffff888030b17f18 (&n->list_lock){-.-.}-{2:2}, at: __kmem_cache_shutdown+0x98/0x230 [ 103.932708][ T5991] #8: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 103.932754][ T5991] #9: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 103.932805][ T5991] [ 103.932805][ T5991] stack backtrace: [ 103.932828][ T5991] CPU: 1 PID: 5991 Comm: syz.1.18 Not tainted syzkaller #0 [ 103.932847][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.932868][ T5991] Call Trace: [ 103.932874][ T5991] [ 103.932881][ T5991] dump_stack_lvl+0x18c/0x250 [ 103.932909][ T5991] ? load_image+0x420/0x420 [ 103.932931][ T5991] ? show_regs_print_info+0x20/0x20 [ 103.932962][ T5991] ? print_circular_bug+0x12b/0x1a0 [ 103.932988][ T5991] check_noncircular+0x2fc/0x400 [ 103.933016][ T5991] ? print_deadlock_bug+0x5d0/0x5d0 [ 103.933047][ T5991] ? lockdep_lock+0xf5/0x230 [ 103.933074][ T5991] __lock_acquire+0x37ef/0x7d80 [ 103.933110][ T5991] ? verify_lock_unused+0x140/0x140 [ 103.933145][ T5991] lock_acquire+0x19e/0x420 [ 103.933166][ T5991] ? console_flush_all+0x10b/0xcf0 [ 103.933194][ T5991] ? __lock_acquire+0x7d80/0x7d80 [ 103.933216][ T5991] ? do_raw_spin_lock+0x11f/0x2b0 [ 103.933242][ T5991] ? read_lock_is_recursive+0x20/0x20 [ 103.933265][ T5991] ? __rwlock_init+0x150/0x150 [ 103.933318][ T5991] ? do_raw_spin_unlock+0x121/0x230 [ 103.933350][ T5991] console_flush_all+0x676/0xcf0 [ 103.933374][ T5991] ? console_flush_all+0x10b/0xcf0 [ 103.933400][ T5991] ? console_flush_all+0x10b/0xcf0 [ 103.933429][ T5991] ? is_console_locked+0x20/0x20 [ 103.933460][ T5991] console_unlock+0xad/0x350 [ 103.933486][ T5991] ? other_cpu_in_panic+0xf0/0xf0 [ 103.933511][ T5991] ? mark_lock+0x94/0x320 [ 103.933535][ T5991] ? __lock_acquire+0x1336/0x7d80 [ 103.933559][ T5991] vprintk_emit+0x497/0x610 [ 103.933585][ T5991] ? printk_sprint+0x460/0x460 [ 103.933616][ T5991] _printk+0xde/0x130 [ 103.933641][ T5991] ? load_image+0x420/0x420 [ 103.933664][ T5991] ? format_decode+0x19b/0x1400 [ 103.933687][ T5991] ? vsnprintf+0x85c/0x1ba0 [ 103.933709][ T5991] slab_bug+0x6d/0xc0 [ 103.933732][ T5991] ? vsnprintf+0x1ac7/0x1ba0 [ 103.933758][ T5991] slab_err+0x130/0x170 [ 103.933789][ T5991] ? _raw_spin_lock_irq+0xbb/0xf0 [ 103.933812][ T5991] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.933836][ T5991] list_slab_objects+0x38/0x1a0 [ 103.933864][ T5991] __kmem_cache_shutdown+0x132/0x230 [ 103.933898][ T5991] ? free_conf+0x227/0x4b0 [ 103.933919][ T5991] kmem_cache_destroy+0x56/0x160 [ 103.933949][ T5991] free_conf+0x227/0x4b0 [ 103.933972][ T5991] setup_conf+0x16c4/0x2a30 [ 103.934003][ T5991] ? __add_stripe_bio+0x770/0x770 [ 103.934023][ T5991] ? do_raw_spin_lock+0x11f/0x2b0 [ 103.934058][ T5991] ? __rwlock_init+0x150/0x150 [ 103.934087][ T5991] raid5_takeover+0x61d/0x8a0 [ 103.934113][ T5991] level_store+0x6b1/0x1a90 [ 103.934136][ T5991] ? md_attr_store+0x16f/0x380 [ 103.934156][ T5991] ? level_show+0x170/0x170 [ 103.934176][ T5991] ? __rwlock_init+0x150/0x150 [ 103.934204][ T5991] ? do_raw_spin_unlock+0x121/0x230 [ 103.934232][ T5991] md_attr_store+0x196/0x380 [ 103.934254][ T5991] ? sysfs_kf_read+0x360/0x360 [ 103.934272][ T5991] kernfs_fop_write_iter+0x3a4/0x520 [ 103.934294][ T5991] vfs_write+0x474/0x9a0 [ 103.934325][ T5991] ? file_end_write+0x250/0x250 [ 103.934355][ T5991] ? __fget_files+0x3fc/0x460 [ 103.934386][ T5991] ? __fdget_pos+0x2a3/0x330 [ 103.934413][ T5991] ? ksys_write+0x74/0x260 [ 103.934442][ T5991] ksys_write+0x151/0x260 [ 103.934470][ T5991] ? __ia32_sys_read+0x90/0x90 [ 103.934499][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 103.934546][ T5991] do_syscall_64+0x55/0xb0 [ 103.934576][ T5991] ? clear_bhb_loop+0x40/0x90 [ 103.934603][ T5991] ? clear_bhb_loop+0x40/0x90 [ 103.934630][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.934656][ T5991] RIP: 0033:0x7fa18599e159 [ 103.934686][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.934702][ T5991] RSP: 002b:00007fa1867a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.934721][ T5991] RAX: ffffffffffffffda RBX: 00007fa185c26180 RCX: 00007fa18599e159 [ 103.934735][ T5991] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000007 [ 103.934747][ T5991] RBP: 00007fa185a3506b R08: 0000000000000000 R09: 0000000000000000 [ 103.934759][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.934770][ T5991] R13: 00007fa185c26218 R14: 00007fa185c26180 R15: 00007fff35de96a8 [ 103.934791][ T5991] [ 104.486439][ T5087] Bluetooth: hci0: command tx timeout [ 104.489863][ T5991] BUG raid5-md0 (Not tainted): Objects remaining in raid5-md0 on __kmem_cache_shutdown() [ 104.489878][ T5991] ----------------------------------------------------------------------------- [ 104.489878][ T5991] [ 104.489887][ T5991] Slab 0xffffea0000b0ea00 objects=13 used=9 fp=0xffff88802c3aab98 flags=0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 104.685910][ T5087] Bluetooth: hci1: command tx timeout [ 104.692255][ T5991] CPU: 1 PID: 5991 Comm: syz.1.18 Not tainted syzkaller #0 [ 104.692277][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.692289][ T5991] Call Trace: [ 104.692298][ T5991] [ 104.788452][ T5087] Bluetooth: hci2: command tx timeout [ 104.788541][ T5991] dump_stack_lvl+0x18c/0x250 [ 104.936257][ T5087] Bluetooth: hci3: command tx timeout [ 104.938839][ T5991] ? show_regs_print_info+0x20/0x20 [ 105.263596][ T5991] ? load_image+0x420/0x420 [ 105.268150][ T5991] slab_err+0x13d/0x170 [ 105.272351][ T5991] ? _raw_spin_lock_irq+0xbb/0xf0 [ 105.277396][ T5991] ? _raw_spin_lock_irqsave+0x100/0x100 [ 105.282972][ T5991] list_slab_objects+0x38/0x1a0 [ 105.287874][ T5991] __kmem_cache_shutdown+0x132/0x230 [ 105.293216][ T5991] ? free_conf+0x227/0x4b0 [ 105.297654][ T5991] kmem_cache_destroy+0x56/0x160 [ 105.302647][ T5991] free_conf+0x227/0x4b0 [ 105.306916][ T5991] setup_conf+0x16c4/0x2a30 [ 105.311464][ T5991] ? __add_stripe_bio+0x770/0x770 [ 105.316512][ T5991] ? do_raw_spin_lock+0x11f/0x2b0 [ 105.321555][ T5991] ? __rwlock_init+0x150/0x150 [ 105.326361][ T5991] raid5_takeover+0x61d/0x8a0 [ 105.331108][ T5991] level_store+0x6b1/0x1a90 [ 105.335641][ T5991] ? md_attr_store+0x16f/0x380 [ 105.340464][ T5991] ? level_show+0x170/0x170 [ 105.345017][ T5991] ? __rwlock_init+0x150/0x150 [ 105.349832][ T5991] ? do_raw_spin_unlock+0x121/0x230 [ 105.355076][ T5991] md_attr_store+0x196/0x380 [ 105.359720][ T5991] ? sysfs_kf_read+0x360/0x360 [ 105.364518][ T5991] kernfs_fop_write_iter+0x3a4/0x520 [ 105.369826][ T5991] vfs_write+0x474/0x9a0 [ 105.374095][ T5991] ? file_end_write+0x250/0x250 [ 105.378976][ T5991] ? __fget_files+0x3fc/0x460 [ 105.383679][ T5991] ? __fdget_pos+0x2a3/0x330 [ 105.388317][ T5991] ? ksys_write+0x74/0x260 [ 105.392788][ T5991] ksys_write+0x151/0x260 [ 105.397165][ T5991] ? __ia32_sys_read+0x90/0x90 [ 105.401961][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 105.407196][ T5991] do_syscall_64+0x55/0xb0 [ 105.412201][ T5991] ? clear_bhb_loop+0x40/0x90 [ 105.417000][ T5991] ? clear_bhb_loop+0x40/0x90 [ 105.421715][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.427638][ T5991] RIP: 0033:0x7fa18599e159 [ 105.432073][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.451691][ T5991] RSP: 002b:00007fa1867a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.460141][ T5991] RAX: ffffffffffffffda RBX: 00007fa185c26180 RCX: 00007fa18599e159 [ 105.468131][ T5991] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000007 [ 105.476137][ T5991] RBP: 00007fa185a3506b R08: 0000000000000000 R09: 0000000000000000 [ 105.484129][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.492139][ T5991] R13: 00007fa185c26218 R14: 00007fa185c26180 R15: 00007fff35de96a8 [ 105.500168][ T5991] [ 105.503222][ T5991] Object 0xffff88802c3a8000 @offset=0 [ 105.508599][ T5991] Object 0xffff88802c3a84d8 @offset=1240 [ 105.514234][ T5991] Object 0xffff88802c3a89b0 @offset=2480 [ 105.519894][ T5991] Object 0xffff88802c3a8e88 @offset=3720 [ 105.525720][ T5991] Object 0xffff88802c3a9360 @offset=4960 [ 105.531354][ T5991] Object 0xffff88802c3a9838 @offset=6200 [ 105.537001][ T5991] Object 0xffff88802c3a9d10 @offset=7440 [ 105.542668][ T5991] Object 0xffff88802c3aa1e8 @offset=8680 [ 105.548389][ T5991] Object 0xffff88802c3aa6c0 @offset=9920 [ 105.562152][ T59] veth1_macvtap: left promiscuous mode [ 105.567860][ T59] veth0_macvtap: left promiscuous mode [ 105.573506][ T59] veth1_vlan: left promiscuous mode [ 105.577407][ T5991] ------------[ cut here ]------------ [ 105.584678][ T5991] kmem_cache_destroy raid5-md0: Slab cache still has objects when called from free_conf+0x227/0x4b0 [ 105.584984][ T5991] WARNING: CPU: 1 PID: 5991 at mm/slab_common.c:499 kmem_cache_destroy+0x74/0x160 [ 105.596077][ T59] veth0_vlan: left promiscuous mode [ 105.605083][ T5991] Modules linked in: [ 105.605098][ T5991] CPU: 1 PID: 5991 Comm: syz.1.18 Tainted: G B syzkaller #0 [ 105.605121][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.634314][ T5991] RIP: 0010:kmem_cache_destroy+0x74/0x160 [ 105.640480][ T5991] Code: 52 9d 1a 00 48 89 df e8 ea f3 19 00 85 c0 74 33 48 8b 53 60 48 c7 c7 84 49 89 8c 48 c7 c6 31 71 a6 8c 4c 89 f1 e8 7c e5 8b ff <0f> 0b 48 c7 c7 f0 0a 20 8d e8 5e 83 d4 08 5b 41 5e 41 5f 5d e9 63 [ 105.660735][ T5991] RSP: 0018:ffffc90003547930 EFLAGS: 00010246 [ 105.666939][ T5991] RAX: 5c266b2796ac4000 RBX: ffff88814dee8780 RCX: ffff888022645a00 [ 105.674957][ T5991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 105.683064][ T5991] RBP: 0000000048000000 R08: ffffc90003547527 R09: 1ffff920006a8ea4 [ 105.691561][ T5991] R10: dffffc0000000000 R11: fffff520006a8ea5 R12: ffff888079c4a000 [ 105.699681][ T5991] R13: dffffc0000000000 R14: ffffffff8777c207 R15: 0000000000000000 [ 105.707915][ T5991] FS: 00007fa1867a96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 105.716985][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.723615][ T5991] CR2: 00007f048c5eb840 CR3: 000000007e693000 CR4: 00000000003506e0 [ 105.731701][ T5991] Call Trace: [ 105.735020][ T5991] [ 105.738091][ T5991] free_conf+0x227/0x4b0 [ 105.742384][ T5991] setup_conf+0x16c4/0x2a30 [ 105.747167][ T5991] ? __add_stripe_bio+0x770/0x770 [ 105.752272][ T5991] ? do_raw_spin_lock+0x11f/0x2b0 [ 105.757416][ T5991] ? __rwlock_init+0x150/0x150 [ 105.763187][ T5991] raid5_takeover+0x61d/0x8a0 [ 105.767961][ T5991] level_store+0x6b1/0x1a90 [ 105.772514][ T5991] ? md_attr_store+0x16f/0x380 [ 105.777375][ T5991] ? level_show+0x170/0x170 [ 105.781932][ T5991] ? __rwlock_init+0x150/0x150 [ 105.787171][ T5991] ? do_raw_spin_unlock+0x121/0x230 [ 105.792435][ T5991] md_attr_store+0x196/0x380 [ 105.797378][ T5991] ? sysfs_kf_read+0x360/0x360 [ 105.802185][ T5991] kernfs_fop_write_iter+0x3a4/0x520 [ 105.807854][ T5991] vfs_write+0x474/0x9a0 [ 105.812167][ T5991] ? file_end_write+0x250/0x250 [ 105.817144][ T5991] ? __fget_files+0x3fc/0x460 [ 105.821875][ T5991] ? __fdget_pos+0x2a3/0x330 [ 105.826545][ T5991] ? ksys_write+0x74/0x260 [ 105.831024][ T5991] ksys_write+0x151/0x260 [ 105.835531][ T5991] ? __ia32_sys_read+0x90/0x90 [ 105.840362][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 105.845641][ T5991] do_syscall_64+0x55/0xb0 [ 105.850099][ T5991] ? clear_bhb_loop+0x40/0x90 [ 105.854800][ T5991] ? clear_bhb_loop+0x40/0x90 [ 105.859579][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.865552][ T5991] RIP: 0033:0x7fa18599e159 [ 105.870006][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.890418][ T5991] RSP: 002b:00007fa1867a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.899458][ T5991] RAX: ffffffffffffffda RBX: 00007fa185c26180 RCX: 00007fa18599e159 [ 105.907546][ T5991] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000007 [ 105.915603][ T5991] RBP: 00007fa185a3506b R08: 0000000000000000 R09: 0000000000000000 [ 105.923632][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.931702][ T5991] R13: 00007fa185c26218 R14: 00007fa185c26180 R15: 00007fff35de96a8 [ 105.939756][ T5991] [ 105.942982][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.950280][ T5991] CPU: 1 PID: 5991 Comm: syz.1.18 Tainted: G B syzkaller #0 [ 105.958981][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.969140][ T5991] Call Trace: [ 105.972435][ T5991] [ 105.975497][ T5991] dump_stack_lvl+0x18c/0x250 [ 105.980251][ T5991] ? show_regs_print_info+0x20/0x20 [ 105.985491][ T5991] ? load_image+0x420/0x420 [ 105.990012][ T5991] panic+0x2ca/0x720 [ 105.993924][ T5991] ? bpf_jit_dump+0xd0/0xd0 [ 105.998473][ T5991] __warn+0x2e0/0x470 [ 106.002497][ T5991] ? kmem_cache_destroy+0x74/0x160 [ 106.007659][ T5991] ? kmem_cache_destroy+0x74/0x160 [ 106.012821][ T5991] report_bug+0x2be/0x4f0 [ 106.017190][ T5991] ? kmem_cache_destroy+0x74/0x160 [ 106.022405][ T5991] ? kmem_cache_destroy+0x74/0x160 [ 106.027537][ T5991] ? kmem_cache_destroy+0x76/0x160 [ 106.032670][ T5991] handle_bug+0xcf/0x120 [ 106.036959][ T5991] exc_invalid_op+0x1a/0x50 [ 106.041481][ T5991] asm_exc_invalid_op+0x1a/0x20 [ 106.046368][ T5991] RIP: 0010:kmem_cache_destroy+0x74/0x160 [ 106.052144][ T5991] Code: 52 9d 1a 00 48 89 df e8 ea f3 19 00 85 c0 74 33 48 8b 53 60 48 c7 c7 84 49 89 8c 48 c7 c6 31 71 a6 8c 4c 89 f1 e8 7c e5 8b ff <0f> 0b 48 c7 c7 f0 0a 20 8d e8 5e 83 d4 08 5b 41 5e 41 5f 5d e9 63 [ 106.071961][ T5991] RSP: 0018:ffffc90003547930 EFLAGS: 00010246 [ 106.078832][ T5991] RAX: 5c266b2796ac4000 RBX: ffff88814dee8780 RCX: ffff888022645a00 [ 106.087459][ T5991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 106.095566][ T5991] RBP: 0000000048000000 R08: ffffc90003547527 R09: 1ffff920006a8ea4 [ 106.103678][ T5991] R10: dffffc0000000000 R11: fffff520006a8ea5 R12: ffff888079c4a000 [ 106.111682][ T5991] R13: dffffc0000000000 R14: ffffffff8777c207 R15: 0000000000000000 [ 106.119777][ T5991] ? free_conf+0x227/0x4b0 [ 106.124405][ T5991] free_conf+0x227/0x4b0 [ 106.128673][ T5991] setup_conf+0x16c4/0x2a30 [ 106.133208][ T5991] ? __add_stripe_bio+0x770/0x770 [ 106.138257][ T5991] ? do_raw_spin_lock+0x11f/0x2b0 [ 106.143317][ T5991] ? __rwlock_init+0x150/0x150 [ 106.148127][ T5991] raid5_takeover+0x61d/0x8a0 [ 106.152842][ T5991] level_store+0x6b1/0x1a90 [ 106.157397][ T5991] ? md_attr_store+0x16f/0x380 [ 106.162192][ T5991] ? level_show+0x170/0x170 [ 106.166761][ T5991] ? __rwlock_init+0x150/0x150 [ 106.171570][ T5991] ? do_raw_spin_unlock+0x121/0x230 [ 106.176941][ T5991] md_attr_store+0x196/0x380 [ 106.181931][ T5991] ? sysfs_kf_read+0x360/0x360 [ 106.186809][ T5991] kernfs_fop_write_iter+0x3a4/0x520 [ 106.192328][ T5991] vfs_write+0x474/0x9a0 [ 106.196611][ T5991] ? file_end_write+0x250/0x250 [ 106.201500][ T5991] ? __fget_files+0x3fc/0x460 [ 106.206389][ T5991] ? __fdget_pos+0x2a3/0x330 [ 106.211019][ T5991] ? ksys_write+0x74/0x260 [ 106.215492][ T5991] ksys_write+0x151/0x260 [ 106.219920][ T5991] ? __ia32_sys_read+0x90/0x90 [ 106.224907][ T5991] ? lockdep_hardirqs_on+0x98/0x150 [ 106.230505][ T5991] do_syscall_64+0x55/0xb0 [ 106.235095][ T5991] ? clear_bhb_loop+0x40/0x90 [ 106.240221][ T5991] ? clear_bhb_loop+0x40/0x90 [ 106.245436][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.251704][ T5991] RIP: 0033:0x7fa18599e159 [ 106.256191][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.276277][ T5991] RSP: 002b:00007fa1867a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.284809][ T5991] RAX: ffffffffffffffda RBX: 00007fa185c26180 RCX: 00007fa18599e159 [ 106.292831][ T5991] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000007 [ 106.301025][ T5991] RBP: 00007fa185a3506b R08: 0000000000000000 R09: 0000000000000000 [ 106.309823][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.318106][ T5991] R13: 00007fa185c26218 R14: 00007fa185c26180 R15: 00007fff35de96a8 [ 106.326213][ T5991] [ 106.329872][ T5991] Kernel Offset: disabled [ 106.334328][ T5991] Rebooting in 86400 seconds..