no interfaces have a carrier
[ 51.152288][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0
[ 51.170807][ T5466] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts.
syzkaller login: [ 81.592611][ T31] cfg80211: failed to load regulatory.db
2026/01/19 04:57:16 parsed 1 programs
[ 84.584010][ T5810] cgroup: Unknown subsys name 'net'
[ 84.823463][ T5810] cgroup: Unknown subsys name 'cpuset'
[ 84.879393][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.505781][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.177290][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.189922][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.191212][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.193246][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.194086][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.751362][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.751387][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.813768][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.813787][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.016176][ T5856] chnl_net:caif_netlink_parms(): no params data found
[ 92.114016][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.115510][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.115648][ T5856] bridge_slave_0: entered allmulticast mode
[ 92.117140][ T5856] bridge_slave_0: entered promiscuous mode
[ 92.123843][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.124030][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.124229][ T5856] bridge_slave_1: entered allmulticast mode
[ 92.126622][ T5856] bridge_slave_1: entered promiscuous mode
[ 92.179470][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.182023][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.222849][ T5856] team0: Port device team_slave_0 added
[ 92.225575][ T5856] team0: Port device team_slave_1 added
[ 92.256887][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.256898][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.256911][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.261108][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.261123][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.261147][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.330967][ T5856] hsr_slave_0: entered promiscuous mode
[ 92.332452][ T5856] hsr_slave_1: entered promiscuous mode
[ 92.751647][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.805213][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.833504][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.872608][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.948035][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.950450][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.951692][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.951843][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.023994][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.081064][ T1547] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.099304][ T1547] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.338693][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.344742][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.344868][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.382001][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.382105][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.570166][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.618046][ T5856] veth0_vlan: entered promiscuous mode
[ 93.633437][ T5856] veth1_vlan: entered promiscuous mode
[ 93.663216][ T5856] veth0_macvtap: entered promiscuous mode
[ 93.666724][ T5856] veth1_macvtap: entered promiscuous mode
[ 93.685399][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.703447][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.718397][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.718464][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.718500][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.728865][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.453114][ T3470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.730327][ T3470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.991885][ T3470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.291043][ T3470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.507007][ T3470] bridge_slave_1: left allmulticast mode
[ 96.507164][ T3470] bridge_slave_1: left promiscuous mode
[ 96.528720][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.640312][ T3470] bridge_slave_0: left allmulticast mode
[ 96.640330][ T3470] bridge_slave_0: left promiscuous mode
[ 96.640653][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.929291][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.009255][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.031051][ T3470] bond0 (unregistering): Released all slaves
[ 98.392262][ T3470] hsr_slave_0: left promiscuous mode
[ 98.438721][ T3470] hsr_slave_1: left promiscuous mode
[ 98.440211][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 98.440272][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 98.500638][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 98.500666][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 98.598157][ T3470] veth1_macvtap: left promiscuous mode
[ 98.598385][ T3470] veth0_macvtap: left promiscuous mode
[ 98.604796][ T3470] veth1_vlan: left promiscuous mode
[ 98.605153][ T3470] veth0_vlan: left promiscuous mode
[ 100.919592][ T3470] team0 (unregistering): Port device team_slave_1 removed
[ 101.119375][ T3470] team0 (unregistering): Port device team_slave_0 removed
2026/01/19 04:57:38 executed programs: 0
[ 103.860913][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.862770][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.863872][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.865901][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.867126][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.696244][ T5962] chnl_net:caif_netlink_parms(): no params data found
[ 104.881692][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.881899][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.882063][ T5962] bridge_slave_0: entered allmulticast mode
[ 104.884560][ T5962] bridge_slave_0: entered promiscuous mode
[ 104.889287][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.889474][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.889619][ T5962] bridge_slave_1: entered allmulticast mode
[ 104.891962][ T5962] bridge_slave_1: entered promiscuous mode
[ 104.936710][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.942723][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.998472][ T5962] team0: Port device team_slave_0 added
[ 105.008300][ T5962] team0: Port device team_slave_1 added
[ 105.055834][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.055851][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.055875][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.058474][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.058488][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.058511][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.337809][ T5962] hsr_slave_0: entered promiscuous mode
[ 105.345003][ T5962] hsr_slave_1: entered promiscuous mode
[ 105.910588][ T61] Bluetooth: hci0: command tx timeout
[ 107.026617][ T5962] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.053790][ T5962] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.094239][ T5962] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.133745][ T5962] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.310360][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.332438][ T5962] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.342452][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.342987][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.353893][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.354336][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.663991][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.746565][ T5962] veth0_vlan: entered promiscuous mode
[ 107.763495][ T5962] veth1_vlan: entered promiscuous mode
[ 107.815521][ T5962] veth0_macvtap: entered promiscuous mode
[ 107.832310][ T5962] veth1_macvtap: entered promiscuous mode
[ 107.863059][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.882784][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.902398][ T3470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.902622][ T3470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.902657][ T3470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.902691][ T3470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.988715][ T61] Bluetooth: hci0: command tx timeout
[ 108.193848][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.193868][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.254057][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.254077][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.684363][ T6074] loop0: detected capacity change from 0 to 32768
[ 108.752353][ T6074]
[ 108.752353][ T6074] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 108.752353][ T6074]
[ 108.847273][ T6074] read_mapping_page failed!
[ 108.847579][ T6074] ERROR: (device loop0): txCommit:
[ 108.847579][ T6074]
[ 108.916202][ T6074] ------------[ cut here ]------------
[ 108.916216][ T6074] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3700:8
[ 108.916233][ T6074] index -1 is out of range for type 'struct dtslot[128]'
[ 108.916260][ T6074] CPU: 1 UID: 0 PID: 6074 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 108.916281][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 108.916302][ T6074] Call Trace:
[ 108.916313][ T6074]
[ 108.916322][ T6074] dump_stack_lvl+0xe8/0x150
[ 108.916353][ T6074] ubsan_epilogue+0xa/0x30
[ 108.916378][ T6074] __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 108.916408][ T6074] dtInsertEntry+0x936/0x1430
[ 108.916460][ T6074] dtSplitPage+0x290b/0x37c0
[ 108.916501][ T6074] ? lockdep_hardirqs_on+0x7a/0x110
[ 108.916553][ T6074] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 108.916594][ T6074] dtInsert+0x107a/0x5de0
[ 108.916625][ T6074] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 108.916646][ T6074] ? lockdep_hardirqs_on+0x7a/0x110
[ 108.916670][ T6074] ? reacquire_held_locks+0x104/0x190
[ 108.916697][ T6074] ? rt_spin_lock+0x1e0/0x400
[ 108.916727][ T6074] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 108.916754][ T6074] ? rt_spin_unlock+0x160/0x200
[ 108.916782][ T6074] ? __pfx_dtInsert+0x10/0x10
[ 108.916811][ T6074] ? txLock+0xaf3/0x1cc0
[ 108.916861][ T6074] ? dtInitRoot+0x22a/0x670
[ 108.916889][ T6074] jfs_mkdir+0x783/0xb00
[ 108.916915][ T6074] ? __pfx_smack_log+0x10/0x10
[ 108.916944][ T6074] ? __pfx_jfs_mkdir+0x10/0x10
[ 108.916996][ T6074] ? generic_permission+0x2e4/0x690
[ 108.917027][ T6074] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 108.917060][ T6074] vfs_mkdir+0x52c/0x5d0
[ 108.917092][ T6074] do_mkdirat+0x281/0x4c0
[ 108.917122][ T6074] ? __pfx_do_mkdirat+0x10/0x10
[ 108.917151][ T6074] ? getname_flags+0x1e4/0x540
[ 108.917172][ T6074] __x64_sys_mkdirat+0x87/0xa0
[ 108.917195][ T6074] do_syscall_64+0xe2/0xf80
[ 108.917216][ T6074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.917232][ T6074] ? trace_irq_disable+0x37/0x100
[ 108.917250][ T6074] ? clear_bhb_loop+0x60/0xb0
[ 108.917271][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.917288][ T6074] RIP: 0033:0x7febb3dd9b97
[ 108.917308][ T6074] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.917322][ T6074] RSP: 002b:00007fff3a6059f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 108.917341][ T6074] RAX: ffffffffffffffda RBX: 00007fff3a605a80 RCX: 00007febb3dd9b97
[ 108.917353][ T6074] RDX: 00000000000001ff RSI: 0000200000000540 RDI: 00000000ffffff9c
[ 108.917365][ T6074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 108.917376][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540
[ 108.917388][ T6074] R13: 00007fff3a605a40 R14: 0000000000000000 R15: 0000000000000000
[ 108.917417][ T6074]
[ 108.917423][ T6074] ---[ end trace ]---
[ 108.917432][ T6074] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 108.917449][ T6074] CPU: 1 UID: 0 PID: 6074 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 108.917470][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 108.917481][ T6074] Call Trace:
[ 108.917487][ T6074]
[ 108.917495][ T6074] vpanic+0x1e0/0x670
[ 108.917531][ T6074] panic+0xc5/0xd0
[ 108.917553][ T6074] ? __pfx_panic+0x10/0x10
[ 108.917578][ T6074] ? __pfx__printk+0x10/0x10
[ 108.917600][ T6074] ? dump_stack_lvl+0x103/0x150
[ 108.917626][ T6074] check_panic_on_warn+0x89/0xb0
[ 108.917655][ T6074] __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 108.917681][ T6074] dtInsertEntry+0x936/0x1430
[ 108.917729][ T6074] dtSplitPage+0x290b/0x37c0
[ 108.917769][ T6074] ? lockdep_hardirqs_on+0x7a/0x110
[ 108.917810][ T6074] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 108.917849][ T6074] dtInsert+0x107a/0x5de0
[ 108.917877][ T6074] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 108.917898][ T6074] ? lockdep_hardirqs_on+0x7a/0x110
[ 108.917920][ T6074] ? reacquire_held_locks+0x104/0x190
[ 108.917947][ T6074] ? rt_spin_lock+0x1e0/0x400
[ 108.917973][ T6074] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 108.917999][ T6074] ? rt_spin_unlock+0x160/0x200
[ 108.918026][ T6074] ? __pfx_dtInsert+0x10/0x10
[ 108.918046][ T6074] ? txLock+0xaf3/0x1cc0
[ 108.918092][ T6074] ? dtInitRoot+0x22a/0x670
[ 108.918118][ T6074] jfs_mkdir+0x783/0xb00
[ 108.918143][ T6074] ? __pfx_smack_log+0x10/0x10
[ 108.918170][ T6074] ? __pfx_jfs_mkdir+0x10/0x10
[ 108.918220][ T6074] ? generic_permission+0x2e4/0x690
[ 108.918249][ T6074] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 108.918274][ T6074] vfs_mkdir+0x52c/0x5d0
[ 108.918302][ T6074] do_mkdirat+0x281/0x4c0
[ 108.918331][ T6074] ? __pfx_do_mkdirat+0x10/0x10
[ 108.918357][ T6074] ? getname_flags+0x1e4/0x540
[ 108.918379][ T6074] __x64_sys_mkdirat+0x87/0xa0
[ 108.918404][ T6074] do_syscall_64+0xe2/0xf80
[ 108.918425][ T6074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.918442][ T6074] ? trace_irq_disable+0x37/0x100
[ 108.918460][ T6074] ? clear_bhb_loop+0x60/0xb0
[ 108.918481][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.918516][ T6074] RIP: 0033:0x7febb3dd9b97
[ 108.918531][ T6074] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.918546][ T6074] RSP: 002b:00007fff3a6059f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 108.918565][ T6074] RAX: ffffffffffffffda RBX: 00007fff3a605a80 RCX: 00007febb3dd9b97
[ 108.918582][ T6074] RDX: 00000000000001ff RSI: 0000200000000540 RDI: 00000000ffffff9c
[ 108.918592][ T6074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 108.918602][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540
[ 108.918613][ T6074] R13: 00007fff3a605a40 R14: 0000000000000000 R15: 0000000000000000
[ 108.918640][ T6074]
[ 108.919013][ T6074] Kernel Offset: disabled