Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. 2026/01/07 00:24:33 parsed 1 programs [ 87.734469][ T5772] cgroup: Unknown subsys name 'net' [ 87.875150][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.809583][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.020680][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.030878][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.039527][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.049221][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.057987][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.066421][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.237755][ T788] cfg80211: failed to load regulatory.db [ 92.927229][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.948495][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.995827][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.003792][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.365673][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 95.468878][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.477514][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.484789][ T5854] bridge_slave_0: entered allmulticast mode [ 95.493430][ T5854] bridge_slave_0: entered promiscuous mode [ 95.504376][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.512034][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.520154][ T5854] bridge_slave_1: entered allmulticast mode [ 95.527715][ T5854] bridge_slave_1: entered promiscuous mode [ 95.567051][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.580476][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.621020][ T5854] team0: Port device team_slave_0 added [ 95.630389][ T5854] team0: Port device team_slave_1 added [ 95.666621][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.673615][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.699662][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.713985][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.721218][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.747300][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.800407][ T5854] hsr_slave_0: entered promiscuous mode [ 95.807339][ T5854] hsr_slave_1: entered promiscuous mode [ 96.007784][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.020373][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.040820][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.051071][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.095439][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.103139][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.111428][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.118603][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.201700][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.225742][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.234283][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.261374][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.278550][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.285792][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.314449][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.321669][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.563822][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.624597][ T5854] veth0_vlan: entered promiscuous mode [ 96.638662][ T5854] veth1_vlan: entered promiscuous mode [ 96.673487][ T5854] veth0_macvtap: entered promiscuous mode [ 96.684658][ T5854] veth1_macvtap: entered promiscuous mode [ 96.711958][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.728264][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.740521][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.749928][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.760212][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.770888][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.942863][ T5854] syz-executor (5854) used greatest stack depth: 20904 bytes left [ 96.967770][ T1085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/07 00:24:45 executed programs: 0 [ 97.427002][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.435744][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.443789][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.452760][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.464387][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.472036][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.645805][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 97.728931][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.736465][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.743673][ T5880] bridge_slave_0: entered allmulticast mode [ 97.751457][ T5880] bridge_slave_0: entered promiscuous mode [ 97.761682][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.768927][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.776214][ T5880] bridge_slave_1: entered allmulticast mode [ 97.783443][ T5880] bridge_slave_1: entered promiscuous mode [ 97.817270][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.829733][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.869627][ T5880] team0: Port device team_slave_0 added [ 97.880065][ T5880] team0: Port device team_slave_1 added [ 97.915939][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.922949][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.949719][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.962522][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.969637][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.996281][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.042448][ T5880] hsr_slave_0: entered promiscuous mode [ 98.049446][ T5880] hsr_slave_1: entered promiscuous mode [ 98.056679][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.064643][ T5880] Cannot create hsr debugfs directory [ 99.495625][ T5798] Bluetooth: hci0: command tx timeout [ 99.580584][ T1085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.575778][ T5798] Bluetooth: hci0: command tx timeout [ 101.848621][ T1085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.922247][ T1085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.865811][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.878663][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.898924][ T1085] hsr_slave_0: left promiscuous mode [ 102.906364][ T1085] hsr_slave_1: left promiscuous mode [ 102.912669][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.920600][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.930455][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.940240][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.948664][ T1085] bridge_slave_1: left allmulticast mode [ 102.954380][ T1085] bridge_slave_1: left promiscuous mode [ 102.961744][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.975898][ T1085] bridge_slave_0: left allmulticast mode [ 102.986963][ T1085] bridge_slave_0: left promiscuous mode [ 102.992880][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.027656][ T1085] veth1_macvtap: left promiscuous mode [ 103.033646][ T1085] veth0_macvtap: left promiscuous mode [ 103.042969][ T1085] veth1_vlan: left promiscuous mode [ 103.049640][ T1085] veth0_vlan: left promiscuous mode [ 103.535849][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 103.578053][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 103.617220][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.655372][ T5798] Bluetooth: hci0: command tx timeout [ 103.661508][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.011219][ T1085] bond0 (unregistering): Released all slaves [ 104.082360][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.092368][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.195736][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.233589][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.250384][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.257563][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.272609][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.279848][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.513097][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.572963][ T5880] veth0_vlan: entered promiscuous mode [ 104.586277][ T5880] veth1_vlan: entered promiscuous mode [ 104.624121][ T5880] veth0_macvtap: entered promiscuous mode [ 104.636871][ T5880] veth1_macvtap: entered promiscuous mode [ 104.660947][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.675703][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.688765][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.698711][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.708783][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.717885][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.799342][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.810827][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.839757][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.850450][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.743215][ T5929] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 105.745824][ T5798] Bluetooth: hci0: command tx timeout [ 105.755066][ T5929] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 105.755101][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.755120][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.755136][ T5929] RIP: 0010:rose_transmit_link+0x32/0x740 [ 105.792105][ T5929] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 a9 60 25 f8 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 65 05 00 00 41 0f b6 1f 31 ff 89 de e8 [ 105.811760][ T5929] RSP: 0018:ffffc90003227910 EFLAGS: 00010207 [ 105.817951][ T5929] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802cfa3c00 [ 105.825973][ T5929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029246b40 [ 105.833979][ T5929] RBP: 0000000000000000 R08: ffff88802cfa3c00 R09: 0000000000000008 [ 105.841980][ T5929] R10: 000000000000000f R11: 0000000000000000 R12: ffff888029246b40 [ 105.849981][ T5929] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036 [ 105.857981][ T5929] FS: 00007ff3393ec6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 105.866931][ T5929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.873540][ T5929] CR2: 00007ff3393caf98 CR3: 00000000755ca000 CR4: 00000000003506e0 [ 105.881541][ T5929] Call Trace: [ 105.884850][ T5929] [ 105.887813][ T5929] ? skb_put+0x11b/0x210 [ 105.892088][ T5929] rose_write_internal+0x11d1/0x1ab0 [ 105.897414][ T5929] ? rose_validate_nr+0x120/0x120 [ 105.902463][ T5929] ? __timer_delete+0x6b/0x290 [ 105.907270][ T5929] ? skb_queue_purge_reason+0x6c/0x1c0 [ 105.912785][ T5929] rose_release+0x236/0x4e0 [ 105.917339][ T5929] sock_close+0xbd/0x230 [ 105.921607][ T5929] ? sock_mmap+0xa0/0xa0 [ 105.925879][ T5929] __fput+0x234/0x970 [ 105.929907][ T5929] task_work_run+0x1ce/0x250 [ 105.934523][ T5929] ? task_work_cancel+0x240/0x240 [ 105.939580][ T5929] get_signal+0x1235/0x1400 [ 105.944115][ T5929] ? kick_process+0xe4/0x150 [ 105.948733][ T5929] ? task_work_add+0x3a3/0x440 [ 105.953529][ T5929] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 105.958929][ T5929] ? wake_bit_function+0x200/0x200 [ 105.964064][ T5929] arch_do_signal_or_restart+0x9c/0x7b0 [ 105.969650][ T5929] ? fput+0x15b/0x1a0 [ 105.973665][ T5929] ? get_sigframe_size+0x20/0x20 [ 105.978635][ T5929] ? __sys_connect+0x240/0x420 [ 105.983434][ T5929] ? exit_to_user_mode_loop+0x3b/0x110 [ 105.988924][ T5929] exit_to_user_mode_loop+0x70/0x110 [ 105.994239][ T5929] exit_to_user_mode_prepare+0xf6/0x180 [ 105.999830][ T5929] syscall_exit_to_user_mode+0x1a/0x50 [ 106.005320][ T5929] do_syscall_64+0x61/0xb0 [ 106.009755][ T5929] ? clear_bhb_loop+0x40/0x90 [ 106.014456][ T5929] ? clear_bhb_loop+0x40/0x90 [ 106.019154][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.025067][ T5929] RIP: 0033:0x7ff33858f749 [ 106.029520][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.049153][ T5929] RSP: 002b:00007ff3393ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 106.057593][ T5929] RAX: 0000000000000000 RBX: 00007ff3387e5fa0 RCX: 00007ff33858f749 [ 106.065675][ T5929] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 106.073674][ T5929] RBP: 00007ff338613f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.081669][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.089666][ T5929] R13: 00007ff3387e6038 R14: 00007ff3387e5fa0 R15: 00007ffdf7d7f0c8 [ 106.097671][ T5929] [ 106.100719][ T5929] Modules linked in: [ 106.108860][ T5929] ---[ end trace 0000000000000000 ]--- [ 106.114411][ T5929] RIP: 0010:rose_transmit_link+0x32/0x740 [ 106.120671][ T5929] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 a9 60 25 f8 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 65 05 00 00 41 0f b6 1f 31 ff 89 de e8 [ 106.144913][ T5929] RSP: 0018:ffffc90003227910 EFLAGS: 00010207 [ 106.151084][ T5929] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802cfa3c00 [ 106.159731][ T5929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029246b40 [ 106.167917][ T5929] RBP: 0000000000000000 R08: ffff88802cfa3c00 R09: 0000000000000008 [ 106.176556][ T5929] R10: 000000000000000f R11: 0000000000000000 R12: ffff888029246b40 [ 106.184580][ T5929] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036 [ 106.193259][ T5929] FS: 00007ff3393ec6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 106.202351][ T5929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.209528][ T5929] CR2: 00007ff3393caf98 CR3: 00000000755ca000 CR4: 00000000003506e0 [ 106.217915][ T5929] Kernel panic - not syncing: Fatal exception [ 106.224591][ T5929] Kernel Offset: disabled [ 106.228930][ T5929] Rebooting in 86400 seconds..