no interfaces have a carrier [ 39.297597][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.307191][ T5453] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. 2025/11/23 03:32:03 parsed 1 programs syzkaller login: [ 69.827896][ T5787] cgroup: Unknown subsys name 'net' [ 69.960534][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.380035][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.549343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.556210][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.015065][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.023905][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.055246][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.063107][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.822123][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 74.907113][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.915241][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.922394][ T5842] bridge_slave_0: entered allmulticast mode [ 74.931054][ T5842] bridge_slave_0: entered promiscuous mode [ 74.948851][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.956110][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.963339][ T5842] bridge_slave_1: entered allmulticast mode [ 74.970014][ T5842] bridge_slave_1: entered promiscuous mode [ 74.994553][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.016126][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.043149][ T5842] team0: Port device team_slave_0 added [ 75.052812][ T5842] team0: Port device team_slave_1 added [ 75.085856][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.092812][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.118772][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.135037][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.142009][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.168171][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.212045][ T5842] hsr_slave_0: entered promiscuous mode [ 75.218630][ T5842] hsr_slave_1: entered promiscuous mode [ 75.349706][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.360897][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.391961][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.402441][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.461000][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.468263][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.476337][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.483867][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.564229][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.589216][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.599756][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.610205][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.636216][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.643513][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.660476][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.667660][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.847232][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.885861][ T5842] veth0_vlan: entered promiscuous mode [ 75.898005][ T5842] veth1_vlan: entered promiscuous mode [ 75.928014][ T5842] veth0_macvtap: entered promiscuous mode [ 75.938901][ T5842] veth1_macvtap: entered promiscuous mode [ 75.961232][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.975661][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.988290][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.998448][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.007218][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.016216][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.119419][ T5842] syz-executor (5842) used greatest stack depth: 20848 bytes left [ 76.430079][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.950130][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.959314][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.968483][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.978053][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.991271][ T5883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.999150][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/23 03:32:12 executed programs: 0 [ 78.004529][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.012629][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.021214][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.029880][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.038826][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.047959][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.171337][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 78.227249][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.235630][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.242796][ T5897] bridge_slave_0: entered allmulticast mode [ 78.249749][ T5897] bridge_slave_0: entered promiscuous mode [ 78.257694][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.265596][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.272844][ T5897] bridge_slave_1: entered allmulticast mode [ 78.280365][ T5897] bridge_slave_1: entered promiscuous mode [ 78.304394][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.316365][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.343037][ T5897] team0: Port device team_slave_0 added [ 78.350964][ T5897] team0: Port device team_slave_1 added [ 78.372787][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.379827][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.406520][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.419174][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.426446][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.452581][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.486627][ T5897] hsr_slave_0: entered promiscuous mode [ 78.493066][ T5897] hsr_slave_1: entered promiscuous mode [ 78.499476][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.508386][ T5897] Cannot create hsr debugfs directory [ 78.883167][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.103900][ T5104] Bluetooth: hci0: command tx timeout [ 81.075562][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.166783][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.786378][ T9] cfg80211: failed to load regulatory.db [ 82.056976][ T11] hsr_slave_0: left promiscuous mode [ 82.066275][ T11] hsr_slave_1: left promiscuous mode [ 82.073856][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.081310][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.090742][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.098288][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.106866][ T11] bridge_slave_1: left allmulticast mode [ 82.112515][ T11] bridge_slave_1: left promiscuous mode [ 82.118997][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.129650][ T11] bridge_slave_0: left allmulticast mode [ 82.136414][ T11] bridge_slave_0: left promiscuous mode [ 82.142103][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.162232][ T11] veth1_macvtap: left promiscuous mode [ 82.168532][ T11] veth0_macvtap: left promiscuous mode [ 82.174311][ T11] veth1_vlan: left promiscuous mode [ 82.179893][ T11] veth0_vlan: left promiscuous mode [ 82.193834][ T5104] Bluetooth: hci0: command tx timeout [ 82.522892][ T11] team0 (unregistering): Port device team_slave_1 removed [ 82.552550][ T11] team0 (unregistering): Port device team_slave_0 removed [ 82.580865][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.617319][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.885968][ T11] bond0 (unregistering): Released all slaves [ 82.966580][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.978195][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.987604][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.998788][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.079639][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.106066][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.122965][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.130172][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.144129][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.151217][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.352869][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.388793][ T5897] veth0_vlan: entered promiscuous mode [ 83.399533][ T5897] veth1_vlan: entered promiscuous mode [ 83.434885][ T5897] veth0_macvtap: entered promiscuous mode [ 83.447278][ T5897] veth1_macvtap: entered promiscuous mode [ 83.485520][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.508107][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.528716][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.538790][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.548113][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.556971][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/11/23 03:32:18 executed programs: 2 [ 83.654904][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.662743][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.688992][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.697246][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.741524][ T5946] syz.0.17[5946]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.969842][ T5946] loop0: detected capacity change from 0 to 32768 [ 84.045022][ T5946] UFO tlock:0xffffc9000288a1b0 [ 84.263614][ T5104] Bluetooth: hci0: command tx timeout [ 84.451928][ T5947] loop0: detected capacity change from 0 to 32768 [ 84.471230][ T5947] UFO tlock:0xffffc9000288a090 [ 84.882860][ T5948] loop0: detected capacity change from 0 to 32768 [ 84.910707][ T5948] UFO tlock:0xffffc9000288a1b0 [ 85.466809][ T5949] loop0: detected capacity change from 0 to 32768 [ 85.506299][ T5949] UFO tlock:0xffffc9000288a090 [ 85.918049][ T5950] loop0: detected capacity change from 0 to 32768 [ 85.936136][ T5950] UFO tlock:0xffffc9000288a1b0 [ 86.343738][ T5104] Bluetooth: hci0: command tx timeout [ 86.463864][ T5951] loop0: detected capacity change from 0 to 32768 [ 86.488279][ T5951] UFO tlock:0xffffc9000288a090 [ 86.757897][ T5952] loop0: detected capacity change from 0 to 32768 [ 86.777599][ T5952] UFO tlock:0xffffc9000288a1b0 [ 86.789882][ T112] general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN [ 86.801658][ T112] KASAN: maybe wild-memory-access in range [0xdead000000000108-0xdead00000000010f] [ 86.810929][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 86.818101][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.828132][ T112] RIP: 0010:__list_add_valid_or_report+0x3d/0xf0 [ 86.834457][ T112] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d4 e3 b6 fd 49 8b 14 24 4c 39 f2 [ 86.854073][ T112] RSP: 0018:ffffc90002647c70 EFLAGS: 00010806 [ 86.860127][ T112] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 86.868073][ T112] RDX: dead000000000100 RSI: ffffc90002669230 RDI: ffff88801cae9108 [ 86.876018][ T112] RBP: ffff88801cae90f8 R08: 0000000000000003 R09: 0000000000000004 [ 86.883963][ T112] R10: dffffc0000000000 R11: fffff520004c8f70 R12: dead000000000108 [ 86.891907][ T112] R13: dffffc0000000000 R14: ffffc90002669230 R15: ffff88801cae9108 [ 86.899865][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 86.908768][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.915323][ T112] CR2: 00007face47fa000 CR3: 000000002f0c7000 CR4: 00000000003506f0 [ 86.923275][ T112] Call Trace: [ 86.926536][ T112] [ 86.929445][ T112] diUpdatePMap+0x62d/0xe50 [ 86.933933][ T112] txUpdateMap+0x6c2/0x890 [ 86.938323][ T112] jfs_lazycommit+0x42b/0xa60 [ 86.942973][ T112] ? txFreelock+0x5a0/0x5a0 [ 86.947450][ T112] ? do_task_dead+0xd0/0xd0 [ 86.951928][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 86.956845][ T112] kthread+0x2fa/0x390 [ 86.960886][ T112] ? txFreelock+0x5a0/0x5a0 [ 86.965364][ T112] ? kthread_blkcg+0xd0/0xd0 [ 86.969929][ T112] ret_from_fork+0x48/0x80 [ 86.974322][ T112] ? kthread_blkcg+0xd0/0xd0 [ 86.978886][ T112] ret_from_fork_asm+0x11/0x20 [ 86.983631][ T112] [ 86.986627][ T112] Modules linked in: [ 86.990505][ T112] ---[ end trace 0000000000000000 ]--- [ 86.995935][ T112] RIP: 0010:__list_add_valid_or_report+0x3d/0xf0 [ 87.002240][ T112] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d4 e3 b6 fd 49 8b 14 24 4c 39 f2 [ 87.021819][ T112] RSP: 0018:ffffc90002647c70 EFLAGS: 00010806 [ 87.027859][ T112] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 87.035805][ T112] RDX: dead000000000100 RSI: ffffc90002669230 RDI: ffff88801cae9108 [ 87.043759][ T112] RBP: ffff88801cae90f8 R08: 0000000000000003 R09: 0000000000000004 [ 87.051707][ T112] R10: dffffc0000000000 R11: fffff520004c8f70 R12: dead000000000108 [ 87.059657][ T112] R13: dffffc0000000000 R14: ffffc90002669230 R15: ffff88801cae9108 [ 87.067612][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 87.076515][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.083075][ T112] CR2: 00007face47fa000 CR3: 000000002f0c7000 CR4: 00000000003506f0 [ 87.091025][ T112] Kernel panic - not syncing: Fatal exception [ 88.189812][ T112] Shutting down cpus with NMI [ 88.194787][ T112] Kernel Offset: disabled [ 88.199099][ T112] Rebooting in 86400 seconds..