no interfaces have a carrier [ 54.936916][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.958017][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. 2026/03/22 14:51:36 parsed 1 programs syzkaller login: [ 84.181537][ T5772] cgroup: Unknown subsys name 'net' [ 84.342381][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.056815][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.534345][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.544102][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.580257][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.589141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.099434][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.190812][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.202107][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.209552][ T5844] bridge_slave_0: entered allmulticast mode [ 91.216897][ T5844] bridge_slave_0: entered promiscuous mode [ 91.226123][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.233596][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.241027][ T5844] bridge_slave_1: entered allmulticast mode [ 91.248578][ T5844] bridge_slave_1: entered promiscuous mode [ 91.278656][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.292738][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.326996][ T5844] team0: Port device team_slave_0 added [ 91.336124][ T5844] team0: Port device team_slave_1 added [ 91.368299][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.376291][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.402814][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.416295][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.423742][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.450030][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.506324][ T5844] hsr_slave_0: entered promiscuous mode [ 91.512643][ T5844] hsr_slave_1: entered promiscuous mode [ 91.692024][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.703552][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.716656][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.727598][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.752578][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.759860][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.768106][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.775444][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.850177][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.872329][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.881366][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.907517][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.920539][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.927829][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.954937][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.962179][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.169096][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.222390][ T5844] veth0_vlan: entered promiscuous mode [ 92.247850][ T5844] veth1_vlan: entered promiscuous mode [ 92.280556][ T5844] veth0_macvtap: entered promiscuous mode [ 92.302136][ T5844] veth1_macvtap: entered promiscuous mode [ 92.321830][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.338101][ T3063] cfg80211: failed to load regulatory.db [ 92.351243][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.366405][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.375746][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385088][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393823][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.591671][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.611514][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.620331][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.629360][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.638397][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.647590][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.656601][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/22 14:51:48 executed programs: 0 [ 93.823306][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.833290][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.842267][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.851059][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.862498][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.870870][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.004894][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 94.071018][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.078665][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.086593][ T5878] bridge_slave_0: entered allmulticast mode [ 94.093661][ T5878] bridge_slave_0: entered promiscuous mode [ 94.103785][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.111245][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.118706][ T5878] bridge_slave_1: entered allmulticast mode [ 94.126034][ T5878] bridge_slave_1: entered promiscuous mode [ 94.151080][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.162627][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.193512][ T5878] team0: Port device team_slave_0 added [ 94.202834][ T5878] team0: Port device team_slave_1 added [ 94.226082][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.233440][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.264966][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.280648][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.287903][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.315174][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.360039][ T5878] hsr_slave_0: entered promiscuous mode [ 94.366940][ T5878] hsr_slave_1: entered promiscuous mode [ 94.373106][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.381534][ T5878] Cannot create hsr debugfs directory [ 95.157722][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.935112][ T5084] Bluetooth: hci0: command tx timeout [ 97.374508][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.439550][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.019474][ T5084] Bluetooth: hci0: command tx timeout [ 98.295848][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.315769][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.328482][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.341712][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.456099][ T1140] hsr_slave_0: left promiscuous mode [ 98.464981][ T1140] hsr_slave_1: left promiscuous mode [ 98.471314][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.483380][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.493454][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.502640][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.511220][ T1140] bridge_slave_1: left allmulticast mode [ 98.517570][ T1140] bridge_slave_1: left promiscuous mode [ 98.524238][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.538869][ T1140] bridge_slave_0: left allmulticast mode [ 98.547199][ T1140] bridge_slave_0: left promiscuous mode [ 98.553401][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.574904][ T1140] veth1_macvtap: left promiscuous mode [ 98.581113][ T1140] veth0_macvtap: left promiscuous mode [ 98.587445][ T1140] veth1_vlan: left promiscuous mode [ 98.592902][ T1140] veth0_vlan: left promiscuous mode [ 99.048963][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 99.095561][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 99.132212][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.168577][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.499565][ T1140] bond0 (unregistering): Released all slaves [ 99.724356][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.791905][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.817063][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.824327][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.860800][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.868174][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.094578][ T5084] Bluetooth: hci0: command tx timeout [ 100.113908][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.180032][ T5878] veth0_vlan: entered promiscuous mode [ 100.191610][ T5878] veth1_vlan: entered promiscuous mode [ 100.221411][ T5878] veth0_macvtap: entered promiscuous mode [ 100.231820][ T5878] veth1_macvtap: entered promiscuous mode [ 100.262758][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.277983][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.291419][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.300512][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.310312][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.319359][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.411631][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.422997][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/22 14:51:54 executed programs: 2 [ 100.468494][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.476604][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.544036][ T5920] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 100.560620][ T5920] process '/newroot/0/file0' started with executable stack [ 100.659482][ T5924] ------------[ cut here ]------------ [ 100.665263][ T5924] WARNING: CPU: 1 PID: 5924 at kernel/signal.c:772 zap_other_threads+0x391/0x440 [ 100.674604][ T5924] Modules linked in: [ 100.678570][ T5924] CPU: 1 PID: 5924 Comm: file0 Not tainted syzkaller #0 [ 100.685526][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.695688][ T5924] RIP: 0010:zap_other_threads+0x391/0x440 [ 100.701446][ T5924] Code: 8a 00 48 81 e5 ff ff c0 ff 49 89 6d 00 f0 83 44 24 fc 00 4c 89 ef be 15 00 00 00 e8 c9 03 11 00 e9 82 fd ff ff e8 2f a7 32 00 <0f> 0b e9 23 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8c fd ff [ 100.721164][ T5924] RSP: 0000:ffffc90003337c00 EFLAGS: 00010093 [ 100.727240][ T5924] RAX: ffffffff81547531 RBX: 1ffff110053d0bec RCX: ffff888029e80000 [ 100.735407][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.743395][ T5924] RBP: 0000000000000109 R08: 0000000000000003 R09: 0000000000000004 [ 100.751423][ T5924] R10: dffffc0000000000 R11: fffff52000666f68 R12: 0000000000000000 [ 100.759482][ T5924] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888029e85a00 [ 100.767563][ T5924] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 100.776503][ T5924] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 100.783101][ T5924] CR2: 0000000000000097 CR3: 0000000074fdd000 CR4: 00000000003506e0 [ 100.791113][ T5924] Call Trace: [ 100.794606][ T5924] [ 100.797661][ T5924] do_group_exit+0x197/0x2d0 [ 100.802272][ T5924] get_signal+0x12fc/0x13f0 [ 100.806821][ T5924] arch_do_signal_or_restart+0xc2/0x800 [ 100.812467][ T5924] ? force_sig_info_to_task+0x32b/0x450 [ 100.818021][ T5924] ? get_sigframe_size+0x20/0x20 [ 100.822964][ T5924] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 100.829127][ T5924] ? exit_to_user_mode_loop+0x3b/0x110 [ 100.834694][ T5924] exit_to_user_mode_loop+0x70/0x110 [ 100.840112][ T5924] exit_to_user_mode_prepare+0xee/0x180 [ 100.845748][ T5924] irqentry_exit_to_user_mode+0x9/0x30 [ 100.851300][ T5924] exc_page_fault+0x8c/0x100 [ 100.855893][ T5924] asm_exc_page_fault+0x26/0x30 [ 100.860746][ T5924] RIP: 0023:0x97 [ 100.864410][ T5924] Code: Unable to access opcode bytes at 0x6d. [ 100.870661][ T5924] RSP: 002b:00000000ff908350 EFLAGS: 00010202 [ 100.876905][ T5924] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 100.885142][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.893388][ T5924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.901636][ T5924] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 100.909707][ T5924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.917799][ T5924] [ 100.920822][ T5924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.928183][ T5924] CPU: 1 PID: 5924 Comm: file0 Not tainted syzkaller #0 [ 100.935169][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.945325][ T5924] Call Trace: [ 100.948777][ T5924] [ 100.951803][ T5924] dump_stack_lvl+0x18c/0x250 [ 100.956491][ T5924] ? show_regs_print_info+0x20/0x20 [ 100.961795][ T5924] ? load_image+0x400/0x400 [ 100.966492][ T5924] panic+0x2dc/0x730 [ 100.970468][ T5924] ? bpf_jit_dump+0xd0/0xd0 [ 100.975097][ T5924] __warn+0x2e0/0x470 [ 100.979181][ T5924] ? zap_other_threads+0x391/0x440 [ 100.984467][ T5924] ? zap_other_threads+0x391/0x440 [ 100.989608][ T5924] report_bug+0x2be/0x4f0 [ 100.993952][ T5924] ? zap_other_threads+0x391/0x440 [ 100.999175][ T5924] ? zap_other_threads+0x391/0x440 [ 101.004479][ T5924] ? zap_other_threads+0x393/0x440 [ 101.009598][ T5924] handle_bug+0xcf/0x120 [ 101.013844][ T5924] exc_invalid_op+0x1a/0x50 [ 101.018369][ T5924] asm_exc_invalid_op+0x1a/0x20 [ 101.023362][ T5924] RIP: 0010:zap_other_threads+0x391/0x440 [ 101.029098][ T5924] Code: 8a 00 48 81 e5 ff ff c0 ff 49 89 6d 00 f0 83 44 24 fc 00 4c 89 ef be 15 00 00 00 e8 c9 03 11 00 e9 82 fd ff ff e8 2f a7 32 00 <0f> 0b e9 23 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8c fd ff [ 101.048803][ T5924] RSP: 0000:ffffc90003337c00 EFLAGS: 00010093 [ 101.054976][ T5924] RAX: ffffffff81547531 RBX: 1ffff110053d0bec RCX: ffff888029e80000 [ 101.062967][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.071126][ T5924] RBP: 0000000000000109 R08: 0000000000000003 R09: 0000000000000004 [ 101.079372][ T5924] R10: dffffc0000000000 R11: fffff52000666f68 R12: 0000000000000000 [ 101.087410][ T5924] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888029e85a00 [ 101.095657][ T5924] ? zap_other_threads+0x391/0x440 [ 101.100784][ T5924] do_group_exit+0x197/0x2d0 [ 101.105467][ T5924] get_signal+0x12fc/0x13f0 [ 101.109973][ T5924] arch_do_signal_or_restart+0xc2/0x800 [ 101.115646][ T5924] ? force_sig_info_to_task+0x32b/0x450 [ 101.121249][ T5924] ? get_sigframe_size+0x20/0x20 [ 101.126375][ T5924] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 101.132658][ T5924] ? exit_to_user_mode_loop+0x3b/0x110 [ 101.138149][ T5924] exit_to_user_mode_loop+0x70/0x110 [ 101.143567][ T5924] exit_to_user_mode_prepare+0xee/0x180 [ 101.149118][ T5924] irqentry_exit_to_user_mode+0x9/0x30 [ 101.154610][ T5924] exc_page_fault+0x8c/0x100 [ 101.159308][ T5924] asm_exc_page_fault+0x26/0x30 [ 101.164154][ T5924] RIP: 0023:0x97 [ 101.167722][ T5924] Code: Unable to access opcode bytes at 0x6d. [ 101.174126][ T5924] RSP: 002b:00000000ff908350 EFLAGS: 00010202 [ 101.180651][ T5924] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 101.188733][ T5924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.196725][ T5924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.204894][ T5924] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 101.213144][ T5924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.221189][ T5924] [ 101.224351][ T5924] Kernel Offset: disabled [ 101.228770][ T5924] Rebooting in 86400 seconds..