Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. 2026/01/12 20:00:35 parsed 1 programs [ 139.231431][ T5799] cgroup: Unknown subsys name 'net' [ 139.367396][ T5799] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 141.196739][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 143.254215][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.262590][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.270785][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.280699][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.294117][ T5813] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.301905][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.595120][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.613902][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.657889][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.666818][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.225499][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 146.342018][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.349927][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.357122][ T5852] bridge_slave_0: entered allmulticast mode [ 146.364653][ T5852] bridge_slave_0: entered promiscuous mode [ 146.374865][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.382189][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.390072][ T5852] bridge_slave_1: entered allmulticast mode [ 146.397096][ T5852] bridge_slave_1: entered promiscuous mode [ 146.429120][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.441520][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.491086][ T5852] team0: Port device team_slave_0 added [ 146.500258][ T5852] team0: Port device team_slave_1 added [ 146.542361][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.549500][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.575806][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.597625][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.604650][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.630858][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.676569][ T5852] hsr_slave_0: entered promiscuous mode [ 146.683196][ T5852] hsr_slave_1: entered promiscuous mode [ 146.875232][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.887760][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.898325][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.922755][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.022576][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.058888][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.075620][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.083089][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.102011][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.109276][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.343646][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.395564][ T5852] veth0_vlan: entered promiscuous mode [ 147.408087][ T5852] veth1_vlan: entered promiscuous mode [ 147.442562][ T5852] veth0_macvtap: entered promiscuous mode [ 147.452503][ T5852] veth1_macvtap: entered promiscuous mode [ 147.473834][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.489812][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.503646][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.513402][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.523223][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.532253][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.691410][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/12 20:00:48 executed programs: 0 [ 149.303258][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.311657][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.321826][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.330519][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.338632][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.346903][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.522709][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 149.595605][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.603096][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.610451][ T5904] bridge_slave_0: entered allmulticast mode [ 149.617510][ T5904] bridge_slave_0: entered promiscuous mode [ 149.626944][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.634780][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.642188][ T5904] bridge_slave_1: entered allmulticast mode [ 149.650067][ T5904] bridge_slave_1: entered promiscuous mode [ 149.685988][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.698186][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.734848][ T5904] team0: Port device team_slave_0 added [ 149.743353][ T5904] team0: Port device team_slave_1 added [ 149.774650][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.782662][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.809557][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.821941][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.828991][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.855106][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.899453][ T5904] hsr_slave_0: entered promiscuous mode [ 149.906196][ T5904] hsr_slave_1: entered promiscuous mode [ 149.912905][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.920970][ T5904] Cannot create hsr debugfs directory [ 150.443020][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.419570][ T5085] Bluetooth: hci0: command tx timeout [ 152.961130][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.036349][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.503571][ T5085] Bluetooth: hci0: command tx timeout [ 153.986837][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.002026][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.034641][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.048076][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.099161][ T59] hsr_slave_0: left promiscuous mode [ 154.105628][ T59] hsr_slave_1: left promiscuous mode [ 154.116190][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.124076][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.136562][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.144634][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.155432][ T59] bridge_slave_1: left allmulticast mode [ 154.161989][ T59] bridge_slave_1: left promiscuous mode [ 154.168613][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.184607][ T59] bridge_slave_0: left allmulticast mode [ 154.192066][ T59] bridge_slave_0: left promiscuous mode [ 154.197870][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.235979][ T59] veth1_macvtap: left promiscuous mode [ 154.245772][ T59] veth0_macvtap: left promiscuous mode [ 154.251967][ T59] veth1_vlan: left promiscuous mode [ 154.257547][ T59] veth0_vlan: left promiscuous mode [ 154.695316][ T59] team0 (unregistering): Port device team_slave_1 removed [ 154.731048][ T59] team0 (unregistering): Port device team_slave_0 removed [ 154.763571][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.804234][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.147858][ T59] bond0 (unregistering): Released all slaves [ 155.297642][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.324064][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.344723][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.351976][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.380092][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.387275][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.581322][ T5085] Bluetooth: hci0: command tx timeout [ 155.665570][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.746119][ T5904] veth0_vlan: entered promiscuous mode [ 155.771015][ T5904] veth1_vlan: entered promiscuous mode [ 155.817974][ T5904] veth0_macvtap: entered promiscuous mode [ 155.831106][ T5904] veth1_macvtap: entered promiscuous mode [ 155.852910][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.866878][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.880185][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.889108][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.897851][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.907870][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.973523][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.987456][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.044487][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.053234][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.128416][ T5954] syz.0.17[5954]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 156.155779][ T5954] loop0: detected capacity change from 0 to 1024 [ 156.215017][ T5954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.261094][ T28] audit: type=1800 audit(1768248055.085:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 156.488361][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] PREEMPT SMP KASAN [ 156.500183][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 156.508656][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 156.515972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.526044][ C0] RIP: 0010:__queue_work+0xa7/0x1020 [ 156.531355][ C0] Code: ee e8 ad 38 2f 00 85 ed 0f 85 db 0c 00 00 e8 f0 34 2f 00 48 89 1c 24 49 8d af c0 01 00 00 48 89 e8 48 c1 e8 03 48 89 44 24 48 <42> 0f b6 04 28 84 c0 0f 85 05 0d 00 00 8b 5d 00 89 de 81 e6 00 80 [ 156.550979][ C0] RSP: 0018:ffffc900001579d0 EFLAGS: 00010002 [ 156.557056][ C0] RAX: 0000000000000038 RBX: ffff88802e356c40 RCX: ffff88801be5da00 [ 156.565034][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.573054][ C0] RBP: 00000000000001c0 R08: ffff88802e356c47 R09: 1ffff11005c6ad88 [ 156.581034][ C0] R10: dffffc0000000000 R11: ffffed1005c6ad89 R12: 0000000000000008 [ 156.589018][ C0] R13: dffffc0000000000 R14: ffff88802e356c40 R15: 0000000000000000 [ 156.597008][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 156.605952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.612553][ C0] CR2: 00002000006ad000 CR3: 000000002e2a1000 CR4: 00000000003506f0 [ 156.620547][ C0] Call Trace: [ 156.623843][ C0] [ 156.626780][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 156.632770][ C0] ? rcu_is_watching+0x15/0xb0 [ 156.637542][ C0] queue_work_on+0x121/0x1e0 [ 156.642145][ C0] ? wq_worker_last_func+0x40/0x40 [ 156.647270][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 156.653176][ C0] ? _raw_spin_unlock+0x40/0x40 [ 156.658063][ C0] iomap_dio_bio_end_io+0x462/0x630 [ 156.663291][ C0] blk_update_request+0x597/0xe40 [ 156.668340][ C0] blk_mq_end_request+0x3e/0x70 [ 156.673203][ C0] blk_done_softirq+0x10b/0x160 [ 156.678064][ C0] handle_softirqs+0x280/0x820 [ 156.682837][ C0] ? run_ksoftirqd+0x9c/0xf0 [ 156.687438][ C0] ? do_softirq+0x180/0x180 [ 156.691965][ C0] run_ksoftirqd+0x9c/0xf0 [ 156.696382][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 156.701599][ C0] ? takeover_tasklets+0x810/0x810 [ 156.706752][ C0] ? takeover_tasklets+0x810/0x810 [ 156.711905][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 156.717111][ C0] smpboot_thread_fn+0x635/0xa00 [ 156.722153][ C0] ? smpboot_thread_fn+0x50/0xa00 [ 156.727213][ C0] kthread+0x2fa/0x390 [ 156.731289][ C0] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 156.737717][ C0] ? kthread_blkcg+0xd0/0xd0 [ 156.742312][ C0] ret_from_fork+0x48/0x80 [ 156.746746][ C0] ? kthread_blkcg+0xd0/0xd0 [ 156.751345][ C0] ret_from_fork_asm+0x11/0x20 [ 156.756144][ C0] [ 156.759177][ C0] Modules linked in: [ 156.763128][ C0] ---[ end trace 0000000000000000 ]--- [ 156.768601][ C0] RIP: 0010:__queue_work+0xa7/0x1020 [ 156.773905][ C0] Code: ee e8 ad 38 2f 00 85 ed 0f 85 db 0c 00 00 e8 f0 34 2f 00 48 89 1c 24 49 8d af c0 01 00 00 48 89 e8 48 c1 e8 03 48 89 44 24 48 <42> 0f b6 04 28 84 c0 0f 85 05 0d 00 00 8b 5d 00 89 de 81 e6 00 80 [ 156.793522][ C0] RSP: 0018:ffffc900001579d0 EFLAGS: 00010002 [ 156.799599][ C0] RAX: 0000000000000038 RBX: ffff88802e356c40 RCX: ffff88801be5da00 [ 156.807588][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.815571][ C0] RBP: 00000000000001c0 R08: ffff88802e356c47 R09: 1ffff11005c6ad88 [ 156.823555][ C0] R10: dffffc0000000000 R11: ffffed1005c6ad89 R12: 0000000000000008 [ 156.831535][ C0] R13: dffffc0000000000 R14: ffff88802e356c40 R15: 0000000000000000 [ 156.839518][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 156.848452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.855040][ C0] CR2: 00002000006ad000 CR3: 000000002e2a1000 CR4: 00000000003506f0 [ 156.863031][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 156.870819][ C0] Kernel Offset: disabled [ 156.875153][ C0] Rebooting in 86400 seconds..