Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. 2026/09/10 22:52:58 parsed 1 programs 2026/09/10 22:52:58 serving rpc on tcp://35629 [ 79.087412][ T5784] cgroup: Unknown subsys name 'net' [ 79.224491][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.686470][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.459377][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.528627][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.536317][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.543575][ T5832] bridge_slave_0: entered allmulticast mode [ 83.550832][ T5832] bridge_slave_0: entered promiscuous mode [ 83.559938][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.567023][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.574344][ T5832] bridge_slave_1: entered allmulticast mode [ 83.581121][ T5832] bridge_slave_1: entered promiscuous mode [ 83.612573][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.623476][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.648060][ T5832] team0: Port device team_slave_0 added [ 83.655334][ T5832] team0: Port device team_slave_1 added [ 83.673773][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.681057][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.706991][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.731047][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.738059][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.764814][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.809996][ T5832] hsr_slave_0: entered promiscuous mode [ 83.816165][ T5832] hsr_slave_1: entered promiscuous mode [ 83.950692][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.961465][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.982796][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.992910][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.064169][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.103429][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.134069][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.141318][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.152064][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.159166][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.326826][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.370283][ T5832] veth0_vlan: entered promiscuous mode [ 84.381093][ T5832] veth1_vlan: entered promiscuous mode [ 84.412813][ T5832] veth0_macvtap: entered promiscuous mode [ 84.421633][ T5832] veth1_macvtap: entered promiscuous mode [ 84.441877][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.461020][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.476813][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.486649][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.496560][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506495][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.665386][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.674947][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.682713][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.690984][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.704819][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.712229][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.097271][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.443710][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.453237][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.478670][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.486757][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/10 22:53:08 executed programs: 0 [ 86.830707][ T27] cfg80211: failed to load regulatory.db [ 86.871460][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.879172][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.886598][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.895891][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.904054][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.912432][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.025738][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 87.078943][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.086069][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.093816][ T5890] bridge_slave_0: entered allmulticast mode [ 87.101545][ T5890] bridge_slave_0: entered promiscuous mode [ 87.109204][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.116330][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.123725][ T5890] bridge_slave_1: entered allmulticast mode [ 87.130698][ T5890] bridge_slave_1: entered promiscuous mode [ 87.154009][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.165085][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.190550][ T5890] team0: Port device team_slave_0 added [ 87.198711][ T5890] team0: Port device team_slave_1 added [ 87.218886][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.225852][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.252984][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.265235][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.272782][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.298932][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.332516][ T5890] hsr_slave_0: entered promiscuous mode [ 87.338805][ T5890] hsr_slave_1: entered promiscuous mode [ 87.344890][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.353007][ T5890] Cannot create hsr debugfs directory [ 87.459360][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.988125][ T51] Bluetooth: hci0: command tx timeout [ 90.050176][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.111561][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.011703][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.020954][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.031245][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.042969][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.078140][ T51] Bluetooth: hci0: command tx timeout [ 91.107136][ T62] hsr_slave_0: left promiscuous mode [ 91.113769][ T62] hsr_slave_1: left promiscuous mode [ 91.121316][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.128961][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.136884][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.144396][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.151942][ T62] bridge_slave_1: left allmulticast mode [ 91.157744][ T62] bridge_slave_1: left promiscuous mode [ 91.164001][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.174697][ T62] bridge_slave_0: left allmulticast mode [ 91.181123][ T62] bridge_slave_0: left promiscuous mode [ 91.186762][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.206743][ T62] veth1_macvtap: left promiscuous mode [ 91.212494][ T62] veth0_macvtap: left promiscuous mode [ 91.218701][ T62] veth1_vlan: left promiscuous mode [ 91.224054][ T62] veth0_vlan: left promiscuous mode [ 91.575579][ T62] team0 (unregistering): Port device team_slave_1 removed [ 91.605048][ T62] team0 (unregistering): Port device team_slave_0 removed [ 91.635086][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.663925][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.851729][ T62] bond0 (unregistering): Released all slaves [ 91.943225][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.961183][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.975099][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.982340][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.001764][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.008950][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.186855][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.221754][ T5890] veth0_vlan: entered promiscuous mode [ 92.239613][ T5890] veth1_vlan: entered promiscuous mode [ 92.269008][ T5890] veth0_macvtap: entered promiscuous mode [ 92.282740][ T5890] veth1_macvtap: entered promiscuous mode [ 92.306091][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.318601][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.334680][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.344426][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.353210][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.362468][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.432261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.443667][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473445][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.485479][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.563839][ T5934] Bluetooth: MGMT ver 1.22 [ 92.576408][ T51] list_del corruption, ffff8880766d9180->next is LIST_POISON1 (dead000000000100) [ 92.588763][ T51] ------------[ cut here ]------------ [ 92.594258][ T51] kernel BUG at lib/list_debug.c:58! [ 92.601051][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 92.607151][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 92.614529][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.624584][ T51] Workqueue: hci0 hci_cmd_sync_work [ 92.629789][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 92.636739][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 92.656348][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 92.662426][ T51] RAX: 000000000000004e RBX: ffff8880766d9180 RCX: fc3d1c2f96d6db00 [ 92.670410][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 92.678388][ T51] RBP: 1ffff1100ecdb233 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 92.686362][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 92.694335][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 92.702311][ T51] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 92.711260][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.717848][ T51] CR2: 000055e0994d97d0 CR3: 0000000030a51000 CR4: 00000000003506e0 [ 92.725837][ T51] Call Trace: [ 92.729118][ T51] [ 92.732053][ T51] mgmt_pending_remove+0x53/0x1f0 [ 92.737091][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 92.743864][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 92.750292][ T51] ? msft_monitor_supported+0x69/0x80 [ 92.755676][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 92.760967][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 92.767390][ T51] hci_cmd_sync_work+0x24b/0x380 [ 92.772341][ T51] ? process_scheduled_works+0x975/0x1600 [ 92.778071][ T51] process_scheduled_works+0xa60/0x1600 [ 92.783634][ T51] ? worker_attach_to_pool+0x370/0x370 [ 92.789100][ T51] ? assign_work+0x3cc/0x5d0 [ 92.793697][ T51] worker_thread+0xa5e/0xfe0 [ 92.798313][ T51] kthread+0x2fa/0x390 [ 92.802397][ T51] ? pr_cont_work+0x550/0x550 [ 92.807081][ T51] ? kthread_blkcg+0xd0/0xd0 [ 92.811682][ T51] ret_from_fork+0x48/0x80 [ 92.816103][ T51] ? kthread_blkcg+0xd0/0xd0 [ 92.820697][ T51] ret_from_fork_asm+0x11/0x20 [ 92.825478][ T51] [ 92.828505][ T51] Modules linked in: [ 92.837526][ T51] ---[ end trace 0000000000000000 ]--- [ 92.843898][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 92.851039][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 92.870756][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 92.876847][ T51] RAX: 000000000000004e RBX: ffff8880766d9180 RCX: fc3d1c2f96d6db00 [ 92.884863][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 92.892982][ T51] RBP: 1ffff1100ecdb233 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 92.904534][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 92.912702][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 92.920723][ T51] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 92.929774][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.936604][ T51] CR2: 000055e0994d97d0 CR3: 0000000030a51000 CR4: 00000000003506e0 [ 92.944821][ T51] Kernel panic - not syncing: Fatal exception [ 92.951120][ T51] Kernel Offset: disabled [ 92.955426][ T51] Rebooting in 86400 seconds..