[ 87.087533][ T823] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. 2026/07/27 07:15:31 parsed 1 programs 2026/07/27 07:15:31 serving rpc on tcp://35581 [ 97.628758][ T5611] cgroup: Unknown subsys name 'net' [ 97.869889][ T5611] cgroup: Unknown subsys name 'cpuset' [ 97.945673][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.932565][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.605854][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.613782][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.620094][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.638295][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.639157][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.327958][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.327981][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.425585][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.425607][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.111464][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.113216][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.113862][ T5684] bridge_slave_0: entered allmulticast mode [ 110.118759][ T5684] bridge_slave_0: entered promiscuous mode [ 110.132671][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.132998][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.133297][ T5684] bridge_slave_1: entered allmulticast mode [ 110.139683][ T5684] bridge_slave_1: entered promiscuous mode [ 110.207366][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.211982][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.256943][ T5684] team0: Port device team_slave_0 added [ 110.260442][ T5684] team0: Port device team_slave_1 added [ 110.313610][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.313623][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.313639][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.336922][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.336939][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.336964][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.447218][ T5684] hsr_slave_0: entered promiscuous mode [ 110.448947][ T5684] hsr_slave_1: entered promiscuous mode [ 111.039456][ T5684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.125162][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.127566][ T5684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.160914][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.161937][ T5684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.198958][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.199960][ T5684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.241628][ T5684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.608243][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.656401][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.681630][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.681933][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.723628][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.723778][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.265786][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.388994][ T5684] veth0_vlan: entered promiscuous mode [ 112.424794][ T5684] veth1_vlan: entered promiscuous mode [ 112.495863][ T5684] veth0_macvtap: entered promiscuous mode [ 112.512288][ T5684] veth1_macvtap: entered promiscuous mode [ 112.561144][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.582468][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.608727][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.623819][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.629166][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.629534][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.290106][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.651072][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.454367][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 07:15:52 executed programs: 0 [ 114.739519][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.743206][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.764293][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.780329][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.781297][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.320660][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.715924][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.718924][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.719246][ T5733] bridge_slave_0: entered allmulticast mode [ 115.730739][ T5733] bridge_slave_0: entered promiscuous mode [ 115.768768][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.769221][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.769544][ T5733] bridge_slave_1: entered allmulticast mode [ 115.773934][ T5733] bridge_slave_1: entered promiscuous mode [ 115.888095][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.897134][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.049688][ T48] bridge_slave_1: left allmulticast mode [ 116.049809][ T48] bridge_slave_1: left promiscuous mode [ 116.060148][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.226608][ T48] bridge_slave_0: left allmulticast mode [ 116.226649][ T48] bridge_slave_0: left promiscuous mode [ 116.226959][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.926708][ T61] Bluetooth: hci0: command tx timeout [ 116.985419][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.065374][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.087927][ T48] bond0 (unregistering): Released all slaves [ 117.156867][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.233479][ T5733] team0: Port device team_slave_0 added [ 117.249354][ T5733] team0: Port device team_slave_1 added [ 117.303375][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.303394][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.303421][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.310487][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.310504][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.310531][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.594597][ T48] hsr_slave_0: left promiscuous mode [ 117.636563][ T48] hsr_slave_1: left promiscuous mode [ 117.639206][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.639332][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.677213][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.677243][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.789466][ T48] veth1_macvtap: left promiscuous mode [ 117.789732][ T48] veth0_macvtap: left promiscuous mode [ 117.790103][ T48] veth1_vlan: left promiscuous mode [ 117.790483][ T48] veth0_vlan: left promiscuous mode [ 118.525460][ T48] team0 (unregistering): Port device team_slave_1 removed [ 118.575512][ T48] team0 (unregistering): Port device team_slave_0 removed [ 118.767060][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.779955][ T5733] hsr_slave_0: entered promiscuous mode [ 118.782223][ T5733] hsr_slave_1: entered promiscuous mode [ 118.995834][ T61] Bluetooth: hci0: command tx timeout [ 120.907983][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.949181][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.950911][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.002371][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.004106][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.074625][ T61] Bluetooth: hci0: command tx timeout [ 121.079795][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.081530][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.120733][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.393162][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.439370][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.552355][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.552654][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.643513][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.643716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.509896][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.583720][ T5733] veth0_vlan: entered promiscuous mode [ 122.612691][ T5733] veth1_vlan: entered promiscuous mode [ 122.661753][ T5733] veth0_macvtap: entered promiscuous mode [ 122.671114][ T5733] veth1_macvtap: entered promiscuous mode [ 122.711505][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.731207][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.758398][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.767172][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.769166][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.775651][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.153401][ T3284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.153424][ T3284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.156016][ T61] Bluetooth: hci0: command tx timeout [ 123.261852][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.261875][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 07:16:01 executed programs: 2 [ 123.695147][ T5669] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.894698][ T5669] usb 1-1: Using ep0 maxpacket: 16 [ 123.905328][ T5669] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.905355][ T5669] usb 1-1: config 0 has no interface number 0 [ 123.907958][ T5669] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 123.907983][ T5669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.908000][ T5669] usb 1-1: Product: syz [ 123.908013][ T5669] usb 1-1: Manufacturer: syz [ 123.908025][ T5669] usb 1-1: SerialNumber: syz [ 123.963413][ T5669] usb 1-1: config 0 descriptor?? [ 124.010036][ T5669] hub 1-1:0.132: bad descriptor, ignoring hub [ 124.010062][ T5669] hub 1-1:0.132: probe with driver hub failed with error -5 [ 124.023346][ T5669] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input5 [ 124.232477][ T5865] dummy_hcd dummy_hcd.0: remove, state 1 [ 124.250566][ T5865] usb usb1: USB disconnect, device number 1 [ 124.250690][ T5865] usb 1-1: USB disconnect, device number 2 [ 124.573759][ T5865] dummy_hcd dummy_hcd.0: stopped [ 124.573784][ T5865] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 124.631470][ T5865] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 124.631496][ T5865] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 124.631517][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.631540][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.631552][ T5865] RIP: 0010:set_link_state+0x27/0x1200 [ 124.631587][ T5865] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f0 02 8c fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb 59 f8 fa 4d 8b 26 4c 89 74 24 10 [ 124.631603][ T5865] RSP: 0018:ffffc900045b7af8 EFLAGS: 00010246 [ 124.631623][ T5865] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888030e91f40 [ 124.631638][ T5865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.631649][ T5865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.631661][ T5865] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: dffffc0000000000 [ 124.631674][ T5865] R13: ffff88802b1525e9 R14: 0000000000000000 R15: 0000000000000000 [ 124.631687][ T5865] FS: 00005555858d1500(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 124.631705][ T5865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.631719][ T5865] CR2: 0000564b83ace660 CR3: 0000000045cf0000 CR4: 00000000003526f0 [ 124.631739][ T5865] Call Trace: [ 124.631746][ T5865] [ 124.631759][ T5865] dummy_pullup+0xbf/0x120 [ 124.631787][ T5865] ? __pfx_dummy_pullup+0x10/0x10 [ 124.631812][ T5865] usb_gadget_disconnect_locked+0x126/0x480 [ 124.631844][ T5865] gadget_unbind_driver+0xc2/0x410 [ 124.631866][ T5865] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 124.631895][ T5865] device_release_driver_internal+0x48b/0x880 [ 124.631922][ T5865] driver_detach+0x1f3/0x2d0 [ 124.631945][ T5865] bus_remove_driver+0x229/0x320 [ 124.631975][ T5865] usb_gadget_unregister_driver+0x4e/0x70 [ 124.632007][ T5865] raw_release+0xd2/0x260 [ 124.632031][ T5865] ? __pfx_raw_release+0x10/0x10 [ 124.632055][ T5865] __fput+0x42a/0xa80 [ 124.632076][ T5865] task_work_run+0x1d9/0x270 [ 124.632107][ T5865] ? __pfx_task_work_run+0x10/0x10 [ 124.632139][ T5865] exit_to_user_mode_loop+0x1fa/0x730 [ 124.632171][ T5865] ? rcu_is_watching+0x15/0xb0 [ 124.632194][ T5865] do_syscall_64+0x33d/0x530 [ 124.632214][ T5865] ? irqentry_exit+0x10f/0x8f0 [ 124.632233][ T5865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.632253][ T5865] ? clear_bhb_loop+0x40/0x90 [ 124.632276][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.632296][ T5865] RIP: 0033:0x7f7dce22de99 [ 124.632312][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.632328][ T5865] RSP: 002b:00007ffc8bab7fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.632350][ T5865] RAX: 0000000000000000 RBX: 00007ffc8bab80c0 RCX: 00007f7dce22de99 [ 124.632364][ T5865] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 124.632376][ T5865] RBP: 000000000001e08b R08: 0000000000000001 R09: 0000000000000000 [ 124.632387][ T5865] R10: 0000001b32420000 R11: 0000000000000246 R12: 0000000000000000 [ 124.632397][ T5865] R13: 00007f7dce4b5fac R14: 00007f7dce4b5fa8 R15: 00007f7dce4b5fa0 [ 124.632415][ T5865] [ 124.632421][ T5865] Modules linked in: [ 124.632435][ T5865] ---[ end trace 0000000000000000 ]--- [ 124.632446][ T5865] RIP: 0010:set_link_state+0x27/0x1200 [ 124.632472][ T5865] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f0 02 8c fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb 59 f8 fa 4d 8b 26 4c 89 74 24 10 [ 124.632487][ T5865] RSP: 0018:ffffc900045b7af8 EFLAGS: 00010246 [ 124.632503][ T5865] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888030e91f40 [ 124.632517][ T5865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.632528][ T5865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.632539][ T5865] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: dffffc0000000000 [ 124.632552][ T5865] R13: ffff88802b1525e9 R14: 0000000000000000 R15: 0000000000000000 [ 124.632564][ T5865] FS: 00005555858d1500(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 124.632579][ T5865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.632592][ T5865] CR2: 0000564b83ace660 CR3: 0000000045cf0000 CR4: 00000000003526f0 [ 124.632612][ T5865] Kernel panic - not syncing: Fatal exception [ 124.633065][ T5865] Kernel Offset: disabled