[ 92.007640][ T204] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. 2026/07/29 05:12:14 parsed 1 programs 2026/07/29 05:12:14 serving rpc on tcp://46467 [ 101.900745][ T5609] cgroup: Unknown subsys name 'net' [ 102.161939][ T5609] cgroup: Unknown subsys name 'cpuset' [ 102.207051][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.252853][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.185234][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.192764][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.193600][ T5651] bridge_slave_0: entered allmulticast mode [ 111.208505][ T5651] bridge_slave_0: entered promiscuous mode [ 111.234695][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.235062][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.235357][ T5651] bridge_slave_1: entered allmulticast mode [ 111.253794][ T5651] bridge_slave_1: entered promiscuous mode [ 111.315581][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.334038][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.529789][ T5651] team0: Port device team_slave_0 added [ 111.534679][ T5651] team0: Port device team_slave_1 added [ 111.591143][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.591163][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.591184][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.595934][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.595946][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.595967][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.801665][ T5651] hsr_slave_0: entered promiscuous mode [ 111.803614][ T5651] hsr_slave_1: entered promiscuous mode [ 112.348089][ T5651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.394693][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.404186][ T5651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.440457][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.444068][ T5651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.481776][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.483301][ T5651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.524275][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.696911][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.774979][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.813055][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.813243][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.849264][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.849439][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.443104][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.578724][ T5651] veth0_vlan: entered promiscuous mode [ 113.603428][ T5651] veth1_vlan: entered promiscuous mode [ 113.679853][ T5651] veth0_macvtap: entered promiscuous mode [ 113.709166][ T5651] veth1_macvtap: entered promiscuous mode [ 113.765536][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.797727][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.836656][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.839347][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.843818][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.880154][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.744638][ T1034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.158769][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.184297][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.185507][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.205622][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.217226][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.363739][ T1034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.815850][ T1034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.305020][ T1034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.097086][ T1034] bridge_slave_1: left allmulticast mode [ 117.097296][ T1034] bridge_slave_1: left promiscuous mode [ 117.105605][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.298820][ T1034] bridge_slave_0: left allmulticast mode [ 117.298848][ T1034] bridge_slave_0: left promiscuous mode [ 117.305813][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.117028][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.196868][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.218899][ T1034] bond0 (unregistering): Released all slaves [ 118.292100][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 118.686257][ T1034] hsr_slave_0: left promiscuous mode [ 118.726212][ T1034] hsr_slave_1: left promiscuous mode [ 118.728267][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.728408][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.768433][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.768462][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.869498][ T1034] veth1_macvtap: left promiscuous mode [ 118.872114][ T1034] veth0_macvtap: left promiscuous mode [ 118.880209][ T1034] veth1_vlan: left promiscuous mode [ 118.892799][ T1034] veth0_vlan: left promiscuous mode [ 119.656994][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 119.716890][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 119.935735][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.982363][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.982386][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.108493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.108514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.858552][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 121.853132][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 2026/07/29 05:12:40 executed programs: 0 [ 123.654290][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.681925][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.693225][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.709462][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.710229][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.098903][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.099260][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.099465][ T5799] bridge_slave_0: entered allmulticast mode [ 125.102178][ T5799] bridge_slave_0: entered promiscuous mode [ 125.105965][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.117474][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.118664][ T5799] bridge_slave_1: entered allmulticast mode [ 125.135707][ T5799] bridge_slave_1: entered promiscuous mode [ 125.203694][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.218832][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.278543][ T5799] team0: Port device team_slave_0 added [ 125.282986][ T5799] team0: Port device team_slave_1 added [ 125.330544][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.330558][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.330577][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.333304][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.333316][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.333335][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.493430][ T5799] hsr_slave_0: entered promiscuous mode [ 125.495179][ T5799] hsr_slave_1: entered promiscuous mode [ 125.828278][ T4912] Bluetooth: hci0: command tx timeout [ 127.916260][ T4912] Bluetooth: hci0: command tx timeout [ 128.242113][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.284886][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.293813][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.328605][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.329702][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.378726][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.380113][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.424914][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.690101][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.748773][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.772226][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.772487][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.806740][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.806972][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.684976][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.925004][ T5799] veth0_vlan: entered promiscuous mode [ 129.983459][ T5799] veth1_vlan: entered promiscuous mode [ 129.987426][ T4912] Bluetooth: hci0: command tx timeout [ 130.089257][ T5799] veth0_macvtap: entered promiscuous mode [ 130.120646][ T5799] veth1_macvtap: entered promiscuous mode [ 130.252311][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.312103][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.375971][ T1034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.419132][ T1034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.484374][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.487445][ T1034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.216579][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.216605][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.337021][ T2309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.337043][ T2309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 05:12:48 executed programs: 2 [ 131.528900][ T5948] dummy_hcd dummy_hcd.0: remove, state 4 [ 131.529101][ T5948] usb usb1: USB disconnect, device number 1 [ 131.739575][ T5948] dummy_hcd dummy_hcd.0: stopped [ 131.739599][ T5948] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 131.818523][ T5948] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 131.818550][ T5948] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 131.818586][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.818610][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.818623][ T5948] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 131.818659][ T5948] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 a5 09 8c fa eb 0c e8 9e 09 8c fa eb 05 e8 97 09 8c fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 61 60 f8 fa 4d 8b 36 4c 89 f7 e8 [ 131.818679][ T5948] RSP: 0018:ffffc90004717810 EFLAGS: 00010246 [ 131.818703][ T5948] RAX: 0000000000000000 RBX: ffff888037b72090 RCX: ffff888025eaddc0 [ 131.818719][ T5948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.818731][ T5948] RBP: ffff88802b05f000 R08: ffff888025eaddc0 R09: 0000000000000004 [ 131.818746][ T5948] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 131.818760][ T5948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 131.818771][ T5948] FS: 000055557fd25500(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 131.818789][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.818803][ T5948] CR2: 00007f37d98f7000 CR3: 0000000034afc000 CR4: 00000000003526f0 [ 131.818821][ T5948] Call Trace: [ 131.818829][ T5948] [ 131.818838][ T5948] ? __pfx_dummy_udc_start+0x10/0x10 [ 131.818869][ T5948] gadget_bind_driver+0x3a8/0x9e0 [ 131.818896][ T5948] ? __pfx_gadget_bind_driver+0x10/0x10 [ 131.818916][ T5948] really_probe+0x254/0xae0 [ 131.818944][ T5948] __driver_probe_device+0x1e8/0x360 [ 131.818970][ T5948] driver_probe_device+0x4f/0x240 [ 131.818997][ T5948] __driver_attach+0x339/0x600 [ 131.819024][ T5948] bus_for_each_dev+0x23e/0x2c0 [ 131.819055][ T5948] ? __pfx___driver_attach+0x10/0x10 [ 131.819079][ T5948] ? __pfx_bus_for_each_dev+0x10/0x10 [ 131.819109][ T5948] ? rt_spin_unlock+0x157/0x200 [ 131.819139][ T5948] ? rt_spin_unlock+0x163/0x200 [ 131.819166][ T5948] bus_add_driver+0x348/0x670 [ 131.819200][ T5948] driver_register+0x23a/0x320 [ 131.819228][ T5948] usb_gadget_register_driver_owner+0xf9/0x270 [ 131.819264][ T5948] raw_ioctl+0x1503/0x40d0 [ 131.819302][ T5948] ? tomoyo_path_number_perm+0x219/0x5f0 [ 131.819331][ T5948] ? do_vfs_ioctl+0x1184/0x1550 [ 131.819360][ T5948] ? __pfx_raw_ioctl+0x10/0x10 [ 131.819385][ T5948] ? handle_mm_fault+0x274d/0x28d0 [ 131.819415][ T5948] ? lock_vma_under_rcu+0x1d1/0x500 [ 131.819464][ T5948] ? exc_page_fault+0x6a/0xc0 [ 131.819484][ T5948] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.819517][ T5948] ? __pfx_raw_ioctl+0x10/0x10 [ 131.819542][ T5948] __se_sys_ioctl+0xff/0x170 [ 131.819569][ T5948] do_syscall_64+0x17b/0x530 [ 131.819589][ T5948] ? irqentry_exit+0x10f/0x8f0 [ 131.819608][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.819629][ T5948] ? clear_bhb_loop+0x40/0x90 [ 131.819654][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.819674][ T5948] RIP: 0033:0x7f37d990db2b [ 131.819699][ T5948] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 131.819717][ T5948] RSP: 002b:00007ffc930ddae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.819739][ T5948] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f37d990db2b [ 131.819754][ T5948] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 131.819782][ T5948] RBP: 00007ffc930debb0 R08: 0000000000000001 R09: 00000000ffffffff [ 131.819796][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.819809][ T5948] R13: 00002000000000c0 R14: 0000000000000002 R15: 0000000000000000 [ 131.819832][ T5948] [ 131.819839][ T5948] Modules linked in: [ 131.819865][ T5948] ---[ end trace 0000000000000000 ]--- [ 131.819880][ T5954] ------------[ cut here ]------------ [ 131.819890][ T5954] mas->ld_seq != lock_sequence(map) [ 131.819880][ T5948] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 131.819911][ T5948] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 a5 09 8c fa eb 0c e8 9e 09 8c fa eb 05 e8 97 09 8c fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 61 60 f8 fa 4d 8b 36 4c 89 f7 e8 [ 131.819906][ T5954] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: rm/5954 [ 131.819929][ T5948] RSP: 0018:ffffc90004717810 EFLAGS: 00010246 [ 131.819938][ T5954] Modules linked in: [ 131.819943][ T5948] [ 131.819951][ T5948] RAX: 0000000000000000 RBX: ffff888037b72090 RCX: ffff888025eaddc0 [ 131.819960][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: rm Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 131.819966][ T5948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.819978][ T5948] RBP: ffff88802b05f000 R08: ffff888025eaddc0 R09: 0000000000000004 [ 131.819989][ T5954] Tainted: [D]=DIE [ 131.819993][ T5948] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 131.819997][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.820007][ T5948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 131.820010][ T5954] RIP: 0010:mas_find+0xa02/0xca0 [ 131.820021][ T5948] FS: 000055557fd25500(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 131.820032][ T5954] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 131.820040][ T5948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.820050][ T5954] RSP: 0018:ffffc900047271f8 EFLAGS: 00010293 [ 131.820055][ T5948] CR2: 00007f37d98f7000 CR3: 0000000034afc000 CR4: 00000000003526f0 [ 131.820065][ T5954] [ 131.820071][ T5954] RAX: ffffffff8b48c241 RBX: 1ffff920008e4e5d RCX: ffff888025eabe80 [ 131.820077][ T5948] Kernel panic - not syncing: Fatal exception [ 131.820237][ T5948] Kernel Offset: disabled