no interfaces have a carrier
[ 52.022868][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.035678][ T5458] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts.
2026/02/20 11:36:21 parsed 1 programs
syzkaller login: [ 81.828780][ T810] cfg80211: failed to load regulatory.db
[ 82.341215][ T5796] cgroup: Unknown subsys name 'net'
[ 82.582115][ T5796] cgroup: Unknown subsys name 'cpuset'
[ 82.638541][ T5796] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 84.276616][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 87.440928][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.442721][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.443079][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.444102][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.444738][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.568945][ T4038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.568969][ T4038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.984665][ T4038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.984682][ T4038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.990583][ T5851] chnl_net:caif_netlink_parms(): no params data found
[ 90.570738][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.572157][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.572271][ T5851] bridge_slave_0: entered allmulticast mode
[ 90.573679][ T5851] bridge_slave_0: entered promiscuous mode
[ 90.580857][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.581050][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.581205][ T5851] bridge_slave_1: entered allmulticast mode
[ 90.583655][ T5851] bridge_slave_1: entered promiscuous mode
[ 90.630969][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.634812][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.685459][ T5851] team0: Port device team_slave_0 added
[ 90.690547][ T5851] team0: Port device team_slave_1 added
[ 90.719948][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.719960][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.719973][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.721535][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.721548][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.721564][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.799419][ T5851] hsr_slave_0: entered promiscuous mode
[ 90.800871][ T5851] hsr_slave_1: entered promiscuous mode
[ 91.327457][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 91.360295][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 91.396376][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 91.437865][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 92.263015][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.411514][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.496698][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.496807][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.529838][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.531839][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.750593][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.935877][ T5851] veth0_vlan: entered promiscuous mode
[ 92.943065][ T5851] veth1_vlan: entered promiscuous mode
[ 92.971018][ T5851] veth0_macvtap: entered promiscuous mode
[ 92.974753][ T5851] veth1_macvtap: entered promiscuous mode
[ 92.990667][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.995495][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.018605][ T4848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.021908][ T4848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.023022][ T4848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.083782][ T4848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/20 11:36:34 executed programs: 0
[ 93.441463][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.472891][ T5918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.486531][ T5918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 93.495596][ T5918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.501685][ T5918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 93.506211][ T5918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 93.507186][ T5918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 93.508244][ T5918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 93.549657][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.550380][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.551772][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 93.553825][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 93.557724][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 93.560036][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 93.562876][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 93.568943][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 93.569283][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 93.570240][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 93.570883][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 93.575717][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 93.701266][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 93.702394][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 93.702741][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 93.704440][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 93.705038][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 94.902571][ T4848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.170301][ T4848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.509888][ T4848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.570442][ T5113] Bluetooth: hci1: command tx timeout
[ 95.570448][ T5829] Bluetooth: hci0: command tx timeout
[ 95.589181][ T5916] chnl_net:caif_netlink_parms(): no params data found
[ 95.609632][ T5913] chnl_net:caif_netlink_parms(): no params data found
[ 95.616883][ T5924] chnl_net:caif_netlink_parms(): no params data found
[ 95.625672][ T5914] chnl_net:caif_netlink_parms(): no params data found
[ 95.648910][ T5113] Bluetooth: hci2: command tx timeout
[ 95.648916][ T5829] Bluetooth: hci3: command tx timeout
[ 95.808047][ T5113] Bluetooth: hci4: command tx timeout
[ 95.810468][ T4848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.928924][ T5912] chnl_net:caif_netlink_parms(): no params data found
[ 96.172775][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.172952][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.173104][ T5916] bridge_slave_0: entered allmulticast mode
[ 96.174786][ T5916] bridge_slave_0: entered promiscuous mode
[ 96.177185][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.177305][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.177452][ T5913] bridge_slave_0: entered allmulticast mode
[ 96.180850][ T5913] bridge_slave_0: entered promiscuous mode
[ 96.238080][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.238189][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.238391][ T5924] bridge_slave_0: entered allmulticast mode
[ 96.245081][ T5924] bridge_slave_0: entered promiscuous mode
[ 96.248655][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.248771][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.248940][ T5914] bridge_slave_0: entered allmulticast mode
[ 96.251224][ T5914] bridge_slave_0: entered promiscuous mode
[ 96.255570][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.255686][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.255850][ T5913] bridge_slave_1: entered allmulticast mode
[ 96.260843][ T5913] bridge_slave_1: entered promiscuous mode
[ 96.298036][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.298148][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.298351][ T5916] bridge_slave_1: entered allmulticast mode
[ 96.300621][ T5916] bridge_slave_1: entered promiscuous mode
[ 96.322552][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.322670][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.322919][ T5924] bridge_slave_1: entered allmulticast mode
[ 96.325394][ T5924] bridge_slave_1: entered promiscuous mode
[ 96.326936][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.327050][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.327194][ T5914] bridge_slave_1: entered allmulticast mode
[ 96.330879][ T5914] bridge_slave_1: entered promiscuous mode
[ 96.440986][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.441097][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.441204][ T5912] bridge_slave_0: entered allmulticast mode
[ 96.442588][ T5912] bridge_slave_0: entered promiscuous mode
[ 96.499597][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.499809][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.499935][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.500079][ T5912] bridge_slave_1: entered allmulticast mode
[ 96.501779][ T5912] bridge_slave_1: entered promiscuous mode
[ 96.517421][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.556807][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.570687][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.573787][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.605576][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.607476][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.629996][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.713691][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.753543][ T5913] team0: Port device team_slave_0 added
[ 96.756088][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.772680][ T5916] team0: Port device team_slave_0 added
[ 96.774528][ T5924] team0: Port device team_slave_0 added
[ 96.775229][ T4848] bridge_slave_1: left allmulticast mode
[ 96.775419][ T4848] bridge_slave_1: left promiscuous mode
[ 96.777221][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.828830][ T4848] bridge_slave_0: left allmulticast mode
[ 96.828850][ T4848] bridge_slave_0: left promiscuous mode
[ 96.829004][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.508518][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.588488][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.629898][ T4848] bond0 (unregistering): Released all slaves
[ 97.647885][ T5113] Bluetooth: hci1: command tx timeout
[ 97.647914][ T5113] Bluetooth: hci0: command tx timeout
[ 97.727992][ T5829] Bluetooth: hci3: command tx timeout
[ 97.728022][ T5829] Bluetooth: hci2: command tx timeout
[ 97.733117][ T5913] team0: Port device team_slave_1 added
[ 97.734720][ T5914] team0: Port device team_slave_0 added
[ 97.757053][ T5916] team0: Port device team_slave_1 added
[ 97.763978][ T5924] team0: Port device team_slave_1 added
[ 97.888095][ T5829] Bluetooth: hci4: command tx timeout
[ 98.309080][ T5914] team0: Port device team_slave_1 added
[ 98.470757][ T5912] team0: Port device team_slave_0 added
[ 98.534671][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.534687][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.534706][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.557937][ T5912] team0: Port device team_slave_1 added
[ 98.589150][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.589163][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.589182][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.590569][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.590582][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.590604][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.598851][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.598865][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.598887][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.635732][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.635749][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.635771][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.639606][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.639622][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.639645][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.641203][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.641216][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.641238][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.675333][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.675349][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.675370][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.702550][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.702566][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.702588][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.720641][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.720658][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.720680][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.979296][ T4848] hsr_slave_0: left promiscuous mode
[ 99.038000][ T4848] hsr_slave_1: left promiscuous mode
[ 99.038969][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.039023][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.059701][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.059729][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.139121][ T4848] veth1_macvtap: left promiscuous mode
[ 99.139254][ T4848] veth0_macvtap: left promiscuous mode
[ 99.139401][ T4848] veth1_vlan: left promiscuous mode
[ 99.139543][ T4848] veth0_vlan: left promiscuous mode
[ 99.731149][ T5829] Bluetooth: hci0: command tx timeout
[ 99.731176][ T5113] Bluetooth: hci1: command tx timeout
[ 99.772549][ T4848] team0 (unregistering): Port device team_slave_1 removed
[ 99.808087][ T5829] Bluetooth: hci3: command tx timeout
[ 99.808174][ T5113] Bluetooth: hci2: command tx timeout
[ 99.808716][ T4848] team0 (unregistering): Port device team_slave_0 removed
[ 99.967918][ T5113] Bluetooth: hci4: command tx timeout
[ 100.010514][ T5913] hsr_slave_0: entered promiscuous mode
[ 100.011271][ T5913] hsr_slave_1: entered promiscuous mode
[ 100.079646][ T5916] hsr_slave_0: entered promiscuous mode
[ 100.080364][ T5916] hsr_slave_1: entered promiscuous mode
[ 100.080964][ T5916] debugfs: 'hsr0' already exists in 'hsr'
[ 100.081046][ T5916] Cannot create hsr debugfs directory
[ 100.120643][ T5924] hsr_slave_0: entered promiscuous mode
[ 100.121386][ T5924] hsr_slave_1: entered promiscuous mode
[ 100.121879][ T5924] debugfs: 'hsr0' already exists in 'hsr'
[ 100.121897][ T5924] Cannot create hsr debugfs directory
[ 100.127684][ T5914] hsr_slave_0: entered promiscuous mode
[ 100.156649][ T5914] hsr_slave_1: entered promiscuous mode
[ 100.157190][ T5914] debugfs: 'hsr0' already exists in 'hsr'
[ 100.157210][ T5914] Cannot create hsr debugfs directory
[ 100.207054][ T5912] hsr_slave_0: entered promiscuous mode
[ 100.210118][ T5912] hsr_slave_1: entered promiscuous mode
[ 100.211022][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[ 100.211053][ T5912] Cannot create hsr debugfs directory
[ 101.472652][ T5913] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 101.509501][ T5913] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 101.547472][ T5913] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 101.668533][ T5913] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 101.808031][ T5829] Bluetooth: hci1: command tx timeout
[ 101.808071][ T5113] Bluetooth: hci0: command tx timeout
[ 101.887941][ T5829] Bluetooth: hci3: command tx timeout
[ 101.887978][ T5113] Bluetooth: hci2: command tx timeout
[ 102.048581][ T5113] Bluetooth: hci4: command tx timeout
[ 102.184381][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.224321][ T5913] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.241068][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.241266][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.281078][ T69] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.281226][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.501460][ T5916] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 102.580682][ T5916] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 102.666857][ T5916] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 102.724841][ T5916] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 102.834446][ T5914] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 102.869725][ T5914] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 102.911431][ T5914] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 102.988803][ T5914] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 103.103162][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.200165][ T5924] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 103.247508][ T5924] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 103.288168][ T5924] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 103.352533][ T5924] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 103.543111][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.586781][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.626227][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.672627][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.737001][ T5913] veth0_vlan: entered promiscuous mode
[ 103.783075][ T5913] veth1_vlan: entered promiscuous mode
[ 103.799770][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.861015][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.864390][ T5916] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.901671][ T69] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.901788][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.932032][ T69] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.932128][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.960354][ T5913] veth0_macvtap: entered promiscuous mode
[ 103.966406][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.995241][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.006011][ T5913] veth1_macvtap: entered promiscuous mode
[ 104.026787][ T69] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.026968][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.074850][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.074926][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.124354][ T5924] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.133283][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.160406][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.163466][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.164941][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.165086][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.208992][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.209124][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.212896][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.243964][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.248294][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.276098][ T1224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.335597][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.419448][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.419581][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.526879][ T163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.526986][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.626705][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.626726][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.681770][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.743561][ T4038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.743581][ T4038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.840341][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
2026/02/20 11:36:46 executed programs: 10
[ 104.968944][ T5916] veth0_vlan: entered promiscuous mode
[ 105.002281][ T6077] loop1: detected capacity change from 0 to 16
[ 105.003830][ T6077] =======================================================
[ 105.003830][ T6077] WARNING: The mand mount option has been deprecated and
[ 105.003830][ T6077] and is ignored by this kernel. Remove the mand
[ 105.003830][ T6077] option from the mount to silence this warning.
[ 105.003830][ T6077] =======================================================
[ 105.055597][ T5916] veth1_vlan: entered promiscuous mode
[ 105.094843][ T6077] erofs (device loop1): mounted with root inode @ nid 36.
[ 105.111931][ T6077] erofs (device loop1): unknown algorithm 7 @ pos 8192 for [ 105.111931][ T6077] erofs (device loop1): unknown algorithm 7 @ pos 8192 for nid 89, please upgrade kernel
[ 105.111950][ T6077] erofs (device loop1): readahead error at folio 2 @ nid 89
[ 105.112424][ T6077] syz.1.18: attempt to access beyond end of device
[ 105.112424][ T6077] loop1: rw=524288, sector=256, nr_sectors = 8 limit=16
[ 105.114267][ T6077] syz.1.18: attempt to access beyond end of device
[ 105.114267][ T6077] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16
[ 105.116669][ T6077] syz.1.18: attempt to access beyond end of device
[ 105.116669][ T6077] loop1: rw=0, sector=256, nr_sectors = 8 limit=16
[ 105.116912][ T6077] erofs (device loop1): read error -5 @ 1 of nid 89
[ 105.124379][ T5113] ==================================================================
[ 105.124394][ T5113] BUG: KASAN: slab-use-after-free in z_erofs_transform_plain+0x33c/0xa00
[ 105.124433][ T5113] Read of size 4096 at addr ffff88804502c800 by task kworker/u9:1/5113
[ 105.124449][ T5113]
[ 105.124478][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 105.124497][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 105.124509][ T5113] Workqueue: erofs_worker z_erofs_decompressqueue_work
[ 105.124537][ T5113] Call Trace:
[ 105.124547][ T5113]
[ 105.124554][ T5113] dump_stack_lvl+0xe8/0x150
[ 105.124579][ T5113] print_report+0xba/0x230
[ 105.124598][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.124619][ T5113] kasan_report+0x117/0x150
[ 105.124644][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.124668][ T5113] kasan_check_range+0x264/0x2c0
[ 105.124690][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.124712][ T5113] __asan_memcpy+0x29/0x70
[ 105.124730][ T5113] z_erofs_transform_plain+0x33c/0xa00
[ 105.124754][ T5113] ? __kasan_kmalloc+0x93/0xb0
[ 105.124774][ T5113] ? z_erofs_decompress_queue+0x9ee/0x3740
[ 105.124792][ T5113] z_erofs_decompress_queue+0x1af7/0x3740
[ 105.124821][ T5113] ? __pfx_z_erofs_decompress_queue+0x10/0x10
[ 105.124847][ T5113] ? stack_trace_save+0xa9/0x100
[ 105.124884][ T5113] z_erofs_decompressqueue_work+0x88/0xe0
[ 105.124900][ T5113] ? __pfx_z_erofs_decompressqueue_work+0x10/0x10
[ 105.124919][ T5113] ? process_scheduled_works+0xa25/0x1830
[ 105.124940][ T5113] ? process_scheduled_works+0xa25/0x1830
[ 105.124960][ T5113] process_scheduled_works+0xb02/0x1830
[ 105.124990][ T5113] ? __pfx_process_scheduled_works+0x10/0x10
[ 105.125013][ T5113] ? assign_work+0x3d5/0x5e0
[ 105.125035][ T5113] worker_thread+0xa50/0xfc0
[ 105.125065][ T5113] kthread+0x388/0x470
[ 105.125081][ T5113] ? __pfx_worker_thread+0x10/0x10
[ 105.125100][ T5113] ? __pfx_kthread+0x10/0x10
[ 105.125117][ T5113] ret_from_fork+0x51e/0xb90
[ 105.125139][ T5113] ? __pfx_ret_from_fork+0x10/0x10
[ 105.125158][ T5113] ? __switch_to+0xc7d/0x1450
[ 105.125178][ T5113] ? __pfx_kthread+0x10/0x10
[ 105.125194][ T5113] ret_from_fork_asm+0x1a/0x30
[ 105.125215][ T5113]
[ 105.125221][ T5113]
[ 105.125226][ T5113] The buggy address belongs to the physical page:
[ 105.125238][ T5113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804502cb40 pfn:0x4502c
[ 105.125255][ T5113] flags: 0x80000000000000(node=0|zone=1)
[ 105.125277][ T5113] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000
[ 105.125291][ T5113] raw: ffff88804502cb40 fffffffffffffffc 00000001ffffffff 0000000000000000
[ 105.125299][ T5113] page dumped because: kasan: bad access detected
[ 105.125310][ T5113] page_owner tracks the page as allocated
[ 105.125316][ T5113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xc40(GFP_NOFS), pid 6077, tgid 6076 (syz.1.18), ts 105116251989, free_ts 105115720993
[ 105.125341][ T5113] post_alloc_hook+0x231/0x280
[ 105.125361][ T5113] get_page_from_freelist+0x28bb/0x2950
[ 105.125375][ T5113] __alloc_frozen_pages_noprof+0x18d/0x380
[ 105.125387][ T5113] alloc_pages_mpol+0xd1/0x380
[ 105.125405][ T5113] alloc_pages_noprof+0xce/0x1e0
[ 105.125422][ T5113] __erofs_allocpage+0x1a0/0x270
[ 105.125434][ T5113] z_erofs_runqueue+0xb2f/0x20f0
[ 105.125446][ T5113] z_erofs_readahead+0x8ad/0xc10
[ 105.125465][ T5113] read_pages+0x193/0x5a0
[ 105.125481][ T5113] page_cache_ra_unbounded+0x704/0x9b0
[ 105.125499][ T5113] page_cache_ra_order+0x2b5/0x4b0
[ 105.125516][ T5113] filemap_get_pages+0x832/0x1ea0
[ 105.125534][ T5113] filemap_read+0x44a/0x1240
[ 105.125551][ T5113] erofs_file_read_iter+0x249/0x2d0
[ 105.125568][ T5113] __kernel_read+0x50d/0x9c0
[ 105.125586][ T5113] integrity_kernel_read+0x89/0xd0
[ 105.125602][ T5113] page last free pid 6077 tgid 6076 stack trace:
[ 105.125611][ T5113] __free_frozen_pages+0xfe3/0x1170
[ 105.125630][ T5113] __folio_put+0x25d/0x310
[ 105.125647][ T5113] erofs_release_pages+0x1c9/0x270
[ 105.125661][ T5113] z_erofs_decompress_kickoff+0x2aa/0x330
[ 105.125675][ T5113] z_erofs_runqueue+0x1db8/0x20f0
[ 105.125688][ T5113] z_erofs_readahead+0x8ad/0xc10
[ 105.125708][ T5113] read_pages+0x193/0x5a0
[ 105.125725][ T5113] page_cache_ra_unbounded+0x704/0x9b0
[ 105.125743][ T5113] page_cache_ra_order+0x2b5/0x4b0
[ 105.125759][ T5113] filemap_get_pages+0x47c/0x1ea0
[ 105.125777][ T5113] filemap_read+0x44a/0x1240
[ 105.125795][ T5113] erofs_file_read_iter+0x249/0x2d0
[ 105.125812][ T5113] __kernel_read+0x50d/0x9c0
[ 105.125828][ T5113] integrity_kernel_read+0x89/0xd0
[ 105.125850][ T5113] ima_calc_file_hash+0x12cf/0x1800
[ 105.125868][ T5113] ima_collect_measurement+0x491/0x930
[ 105.125888][ T5113]
[ 105.125892][ T5113] Memory state around the buggy address:
[ 105.125901][ T5113] ffff88804502cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 105.125911][ T5113] ffff88804502cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 105.125922][ T5113] >ffff88804502d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.125930][ T5113] ^
[ 105.125938][ T5113] ffff88804502d080: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 105.125949][ T5113] ffff88804502d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.125956][ T5113] ==================================================================
[ 105.125972][ T5113] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.125985][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 105.126003][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 105.126013][ T5113] Workqueue: erofs_worker z_erofs_decompressqueue_work
[ 105.126032][ T5113] Call Trace:
[ 105.126038][ T5113]
[ 105.126044][ T5113] vpanic+0x56c/0xa60
[ 105.126067][ T5113] ? __pfx_vpanic+0x10/0x10
[ 105.126092][ T5113] panic+0xc5/0xd0
[ 105.126112][ T5113] ? __pfx_panic+0x10/0x10
[ 105.126134][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126159][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126180][ T5113] check_panic_on_warn+0x89/0xb0
[ 105.126199][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126224][ T5113] end_report+0x73/0x180
[ 105.126245][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126265][ T5113] kasan_report+0x128/0x150
[ 105.126287][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126312][ T5113] kasan_check_range+0x264/0x2c0
[ 105.126333][ T5113] ? z_erofs_transform_plain+0x33c/0xa00
[ 105.126355][ T5113] __asan_memcpy+0x29/0x70
[ 105.126374][ T5113] z_erofs_transform_plain+0x33c/0xa00
[ 105.126397][ T5113] ? __kasan_kmalloc+0x93/0xb0
[ 105.126418][ T5113] ? z_erofs_decompress_queue+0x9ee/0x3740
[ 105.126436][ T5113] z_erofs_decompress_queue+0x1af7/0x3740
[ 105.126464][ T5113] ? __pfx_z_erofs_decompress_queue+0x10/0x10
[ 105.126484][ T5113] ? stack_trace_save+0xa9/0x100
[ 105.126521][ T5113] z_erofs_decompressqueue_work+0x88/0xe0
[ 105.126538][ T5113] ? __pfx_z_erofs_decompressqueue_work+0x10/0x10
[ 105.126556][ T5113] ? process_scheduled_works+0xa25/0x1830
[ 105.126576][ T5113] ? process_scheduled_works+0xa25/0x1830
[ 105.126596][ T5113] process_scheduled_works+0xb02/0x1830
[ 105.126627][ T5113] ? __pfx_process_scheduled_works+0x10/0x10
[ 105.126650][ T5113] ? assign_work+0x3d5/0x5e0
[ 105.126671][ T5113] worker_thread+0xa50/0xfc0
[ 105.126701][ T5113] kthread+0x388/0x470
[ 105.126717][ T5113] ? __pfx_worker_thread+0x10/0x10
[ 105.126736][ T5113] ? __pfx_kthread+0x10/0x10
[ 105.126756][ T5113] ret_from_fork+0x51e/0xb90
[ 105.126777][ T5113] ? __pfx_ret_from_fork+0x10/0x10
[ 105.126796][ T5113] ? __switch_to+0xc7d/0x1450
[ 105.126816][ T5113] ? __pfx_kthread+0x10/0x10
[ 105.126832][ T5113] ret_from_fork_asm+0x1a/0x30
[ 105.126859][ T5113]
[ 105.127235][ T5113] Kernel Offset: disabled