no interfaces have a carrier [ 64.371713][ T5465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.377854][ T5465] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 92.122695][ T1232] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. 2025/12/01 01:48:05 parsed 1 programs [ 99.844151][ T5808] cgroup: Unknown subsys name 'net' [ 100.085062][ T5808] cgroup: Unknown subsys name 'cpuset' [ 100.120176][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.180183][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.298931][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.308503][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.309987][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.315035][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.316065][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.923901][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.923932][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.067046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.067069][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.658183][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 110.311065][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.311224][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.311467][ T5853] bridge_slave_0: entered allmulticast mode [ 110.338939][ T5853] bridge_slave_0: entered promiscuous mode [ 110.383530][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.383768][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.384132][ T5853] bridge_slave_1: entered allmulticast mode [ 110.387073][ T5853] bridge_slave_1: entered promiscuous mode [ 110.674538][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.701384][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.994044][ T5853] team0: Port device team_slave_0 added [ 110.998840][ T5853] team0: Port device team_slave_1 added [ 111.464694][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.464713][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.464736][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.530398][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.530416][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.530443][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.920764][ T5853] hsr_slave_0: entered promiscuous mode [ 111.922020][ T5853] hsr_slave_1: entered promiscuous mode [ 112.747902][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.789974][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.833493][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.907631][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.070431][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.105067][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.125663][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.126488][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.141024][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.143831][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.487150][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.850877][ T5853] veth0_vlan: entered promiscuous mode [ 113.858344][ T5853] veth1_vlan: entered promiscuous mode [ 113.904102][ T5853] veth0_macvtap: entered promiscuous mode [ 113.908285][ T5853] veth1_macvtap: entered promiscuous mode [ 113.935910][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.950768][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.967871][ T1128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.974274][ T1128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.975583][ T1128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.976457][ T1128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/01 01:48:23 executed programs: 0 [ 114.388917][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.407188][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.418558][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.433206][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.451987][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.495083][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.502718][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.505026][ T5930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.530459][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.537129][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.783742][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.795069][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.800153][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.802835][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.803752][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.835320][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.855853][ T5930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.857437][ T5930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.863951][ T5930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.865120][ T5930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.866452][ T5930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.866951][ T5930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.880856][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.916128][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.928790][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.665020][ T1160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.680842][ T5831] Bluetooth: hci1: command tx timeout [ 116.681429][ T5831] Bluetooth: hci0: command tx timeout [ 116.801260][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 116.811951][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 116.839369][ T62] Bluetooth: hci2: command tx timeout [ 116.992777][ T1160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.999325][ T62] Bluetooth: hci3: command tx timeout [ 116.999492][ T62] Bluetooth: hci4: command tx timeout [ 117.056832][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 117.256307][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 117.265033][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 117.391854][ T1160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.691639][ T1160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.256162][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.256379][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.256574][ T5925] bridge_slave_0: entered allmulticast mode [ 118.268303][ T5925] bridge_slave_0: entered promiscuous mode [ 118.274680][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.274903][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.275530][ T5927] bridge_slave_0: entered allmulticast mode [ 118.278745][ T5927] bridge_slave_0: entered promiscuous mode [ 118.379762][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.379896][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.380248][ T5925] bridge_slave_1: entered allmulticast mode [ 118.383388][ T5925] bridge_slave_1: entered promiscuous mode [ 118.384911][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.385031][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.385198][ T5927] bridge_slave_1: entered allmulticast mode [ 118.387775][ T5927] bridge_slave_1: entered promiscuous mode [ 118.393764][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.393916][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.394139][ T5934] bridge_slave_0: entered allmulticast mode [ 118.397281][ T5934] bridge_slave_0: entered promiscuous mode [ 118.720574][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.720692][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.720832][ T5934] bridge_slave_1: entered allmulticast mode [ 118.722910][ T5934] bridge_slave_1: entered promiscuous mode [ 118.759424][ T5831] Bluetooth: hci0: command tx timeout [ 118.759433][ T62] Bluetooth: hci1: command tx timeout [ 118.919324][ T5831] Bluetooth: hci2: command tx timeout [ 119.079457][ T62] Bluetooth: hci3: command tx timeout [ 119.079648][ T5831] Bluetooth: hci4: command tx timeout [ 119.092098][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.092250][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.092518][ T5935] bridge_slave_0: entered allmulticast mode [ 119.095784][ T5935] bridge_slave_0: entered promiscuous mode [ 119.101933][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.102083][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.102345][ T5936] bridge_slave_0: entered allmulticast mode [ 119.105610][ T5936] bridge_slave_0: entered promiscuous mode [ 119.114364][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.126365][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.221116][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.221244][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.221417][ T5935] bridge_slave_1: entered allmulticast mode [ 119.223816][ T5935] bridge_slave_1: entered promiscuous mode [ 119.227455][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.257532][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.257694][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.258286][ T5936] bridge_slave_1: entered allmulticast mode [ 119.268216][ T5936] bridge_slave_1: entered promiscuous mode [ 119.281498][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.288881][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.603749][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.003705][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.005913][ T5925] team0: Port device team_slave_0 added [ 120.012209][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.242488][ T5927] team0: Port device team_slave_0 added [ 120.333260][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.335070][ T5925] team0: Port device team_slave_1 added [ 120.362315][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.366156][ T5927] team0: Port device team_slave_1 added [ 120.371440][ T5934] team0: Port device team_slave_0 added [ 120.652417][ T5934] team0: Port device team_slave_1 added [ 120.810896][ T1160] bridge_slave_1: left allmulticast mode [ 120.811115][ T1160] bridge_slave_1: left promiscuous mode [ 120.812823][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.839268][ T5831] Bluetooth: hci1: command tx timeout [ 120.839303][ T5831] Bluetooth: hci0: command tx timeout [ 120.881257][ T1160] bridge_slave_0: left allmulticast mode [ 120.881282][ T1160] bridge_slave_0: left promiscuous mode [ 120.881465][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.999301][ T62] Bluetooth: hci2: command tx timeout [ 121.159292][ T62] Bluetooth: hci4: command tx timeout [ 121.159327][ T62] Bluetooth: hci3: command tx timeout [ 122.590271][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.650088][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.682363][ T1160] bond0 (unregistering): Released all slaves [ 122.929668][ T62] Bluetooth: hci1: command tx timeout [ 122.929720][ T5831] Bluetooth: hci0: command tx timeout [ 123.072602][ T5935] team0: Port device team_slave_0 added [ 123.074407][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.074425][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.074456][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.079437][ T5831] Bluetooth: hci2: command tx timeout [ 123.207035][ T5936] team0: Port device team_slave_0 added [ 123.208305][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.208322][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.208361][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.239624][ T62] Bluetooth: hci4: command tx timeout [ 123.239693][ T5831] Bluetooth: hci3: command tx timeout [ 123.323802][ T5935] team0: Port device team_slave_1 added [ 123.324922][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.324938][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.324961][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.328308][ T5936] team0: Port device team_slave_1 added [ 123.333664][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.333683][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.333716][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.335983][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.336000][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.336030][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.601714][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.601733][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.601755][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.793240][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.793254][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.793273][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.795636][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.795650][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.795669][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.892292][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.892310][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.892339][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.971833][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.971851][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.971880][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.145182][ T5925] hsr_slave_0: entered promiscuous mode [ 124.146242][ T5925] hsr_slave_1: entered promiscuous mode [ 124.147090][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 124.147180][ T5925] Cannot create hsr debugfs directory [ 124.238423][ T5927] hsr_slave_0: entered promiscuous mode [ 124.240803][ T5927] hsr_slave_1: entered promiscuous mode [ 124.242031][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 124.242059][ T5927] Cannot create hsr debugfs directory [ 124.331527][ T5934] hsr_slave_0: entered promiscuous mode [ 124.332489][ T5934] hsr_slave_1: entered promiscuous mode [ 124.333237][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 124.333262][ T5934] Cannot create hsr debugfs directory [ 124.969676][ T1160] hsr_slave_0: left promiscuous mode [ 124.989430][ T1160] hsr_slave_1: left promiscuous mode [ 124.990436][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.990512][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.043763][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.043795][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.118205][ T1160] veth1_macvtap: left promiscuous mode [ 125.118387][ T1160] veth0_macvtap: left promiscuous mode [ 125.118593][ T1160] veth1_vlan: left promiscuous mode [ 125.118793][ T1160] veth0_vlan: left promiscuous mode [ 127.170089][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 127.340086][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 129.317300][ T5935] hsr_slave_0: entered promiscuous mode [ 129.318278][ T5935] hsr_slave_1: entered promiscuous mode [ 129.357052][ T5936] hsr_slave_0: entered promiscuous mode [ 129.358499][ T5936] hsr_slave_1: entered promiscuous mode [ 129.367231][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 129.367264][ T5936] Cannot create hsr debugfs directory [ 131.227485][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.370822][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.398917][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.445250][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.972124][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.998745][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.016746][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.017689][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.043630][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.043753][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.372120][ T5927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.410057][ T5927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.437953][ T5927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.487900][ T5927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.712636][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.741043][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.781965][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.853394][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.902924][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.997627][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.043322][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.078015][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.134337][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.284683][ T5935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.336658][ T5935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.373464][ T5935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.428041][ T5935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.487116][ T5925] veth0_vlan: entered promiscuous mode [ 133.538167][ T5925] veth1_vlan: entered promiscuous mode [ 133.565052][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.641640][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.684774][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.686770][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.686963][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.732977][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.733159][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.735121][ T5925] veth0_macvtap: entered promiscuous mode [ 133.777822][ T5925] veth1_macvtap: entered promiscuous mode [ 133.802739][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.828498][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.850626][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.850790][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.887542][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.887656][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.903697][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.937820][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.954049][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.986328][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.994894][ T4464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.005539][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.006574][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.017585][ T4464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.031787][ T4464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.047565][ T4464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.065660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.065893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.224359][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.314454][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.315822][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.395898][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.397611][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.460233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.460257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.588056][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.603433][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.603454][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/01 01:48:43 executed programs: 10 [ 134.811902][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.997845][ T5927] veth0_vlan: entered promiscuous mode [ 135.063733][ T5927] veth1_vlan: entered promiscuous mode [ 135.185951][ T5934] veth0_vlan: entered promiscuous mode [ 135.228695][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.246995][ T5934] veth1_vlan: entered promiscuous mode [ 135.265750][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.318743][ T5927] veth0_macvtap: entered promiscuous mode [ 135.350309][ T5927] veth1_macvtap: entered promiscuous mode [ 135.512770][ T5934] veth0_macvtap: entered promiscuous mode [ 135.518409][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.551708][ T5936] veth0_vlan: entered promiscuous mode [ 135.552827][ T5934] veth1_macvtap: entered promiscuous mode [ 135.574818][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.646158][ T2972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.659196][ T2972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.661372][ T5936] veth1_vlan: entered promiscuous mode [ 135.675005][ T2972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.679598][ T2972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.731285][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.733708][ T6058] loop0: detected capacity change from 0 to 32768 [ 135.855236][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.877429][ T6058] non-latin1 character 0xffff found in JFS file name [ 135.877448][ T6058] mount with iocharset=utf8 to access [ 136.070719][ T760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.104404][ T760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.153643][ T760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.154716][ T760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.286066][ T5936] veth0_macvtap: entered promiscuous mode [ 136.300892][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.300915][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.381875][ T5936] veth1_macvtap: entered promiscuous mode [ 136.564245][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.564267][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.585610][ T5935] veth0_vlan: entered promiscuous mode [ 136.662722][ T6070] loop0: detected capacity change from 0 to 32768 [ 136.701406][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.714455][ T6070] ================================================================== [ 136.714470][ T6070] BUG: KASAN: slab-out-of-bounds in jfs_readdir+0x1973/0x3ae0 [ 136.714506][ T6070] Read of size 1 at addr ffff88805be67a25 by task syz.0.22/6070 [ 136.714525][ T6070] [ 136.714557][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.714584][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.714608][ T6070] Call Trace: [ 136.714621][ T6070] [ 136.714631][ T6070] dump_stack_lvl+0x189/0x250 [ 136.714669][ T6070] ? __kasan_check_byte+0x12/0x40 [ 136.714704][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.714739][ T6070] ? lock_release+0x4b/0x3e0 [ 136.714776][ T6070] ? __virt_addr_valid+0x4a5/0x5c0 [ 136.714813][ T6070] print_report+0xca/0x240 [ 136.714845][ T6070] ? jfs_readdir+0x1973/0x3ae0 [ 136.714870][ T6070] kasan_report+0x118/0x150 [ 136.714904][ T6070] ? jfs_readdir+0x1973/0x3ae0 [ 136.714934][ T6070] jfs_readdir+0x1973/0x3ae0 [ 136.714960][ T6070] ? preempt_schedule+0xae/0xc0 [ 136.714994][ T6070] ? __pfx_preempt_schedule+0x10/0x10 [ 136.715039][ T6070] ? __pfx_jfs_readdir+0x10/0x10 [ 136.715081][ T6070] ? rwbase_write_lock+0x56f/0x750 [ 136.715109][ T6070] ? __pfx_jfs_readdir+0x10/0x10 [ 136.715144][ T6070] wrap_directory_iterator+0x99/0xe0 [ 136.715173][ T6070] iterate_dir+0x3a5/0x580 [ 136.715203][ T6070] __se_sys_getdents64+0xe4/0x260 [ 136.715232][ T6070] ? __pfx___se_sys_getdents64+0x10/0x10 [ 136.715260][ T6070] ? __pfx_filldir64+0x10/0x10 [ 136.715291][ T6070] ? do_syscall_64+0xbe/0xfa0 [ 136.715329][ T6070] do_syscall_64+0xfa/0xfa0 [ 136.715363][ T6070] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.715396][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.715421][ T6070] ? clear_bhb_loop+0x60/0xb0 [ 136.715449][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.715472][ T6070] RIP: 0033:0x7fe019bbf749 [ 136.715497][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.715518][ T6070] RSP: 002b:00007fe019226038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 136.715552][ T6070] RAX: ffffffffffffffda RBX: 00007fe019e15fa0 RCX: 00007fe019bbf749 [ 136.715571][ T6070] RDX: 0000000000000099 RSI: 0000200000000280 RDI: 0000000000000005 [ 136.715585][ T6070] RBP: 00007fe019c43f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.715601][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.715614][ T6070] R13: 00007fe019e16038 R14: 00007fe019e15fa0 R15: 00007fff7fb48e68 [ 136.715642][ T6070] [ 136.715650][ T6070] [ 136.715660][ T6070] The buggy address belongs to the object at ffff88805be67500 [ 136.715660][ T6070] which belongs to the cache jfs_ip of size 2368 [ 136.715679][ T6070] The buggy address is located 1317 bytes inside of [ 136.715679][ T6070] allocated 2368-byte region [ffff88805be67500, ffff88805be67e40) [ 136.715705][ T6070] [ 136.715711][ T6070] The buggy address belongs to the physical page: [ 136.715735][ T6070] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5be60 [ 136.715757][ T6070] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 136.715776][ T6070] memcg:ffff888027e52101 [ 136.715786][ T6070] flags: 0x80000000000040(head|node=0|zone=1) [ 136.715809][ T6070] page_type: f5(slab) [ 136.715829][ T6070] raw: 0080000000000040 ffff888146eca280 dead000000000122 0000000000000000 [ 136.715851][ T6070] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff888027e52101 [ 136.715872][ T6070] head: 0080000000000040 ffff888146eca280 dead000000000122 0000000000000000 [ 136.715891][ T6070] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff888027e52101 [ 136.715912][ T6070] head: 0080000000000003 ffffea00016f9801 00000000ffffffff 00000000ffffffff [ 136.715931][ T6070] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 136.715942][ T6070] page dumped because: kasan: bad access detected [ 136.715959][ T6070] page_owner tracks the page as allocated [ 136.715967][ T6070] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6058, tgid 6055 (syz.0.17), ts 135789185674, free_ts 0 [ 136.716008][ T6070] post_alloc_hook+0x234/0x290 [ 136.716037][ T6070] get_page_from_freelist+0x28c0/0x2960 [ 136.716072][ T6070] __alloc_frozen_pages_noprof+0x181/0x370 [ 136.716104][ T6070] alloc_pages_mpol+0xd1/0x380 [ 136.716140][ T6070] allocate_slab+0x96/0x350 [ 136.716163][ T6070] ___slab_alloc+0xb10/0x1400 [ 136.716181][ T6070] __slab_alloc+0xc6/0x1f0 [ 136.716199][ T6070] kmem_cache_alloc_lru_noprof+0xf0/0x6b0 [ 136.716226][ T6070] jfs_alloc_inode+0x28/0x70 [ 136.716249][ T6070] alloc_inode+0x6a/0x1b0 [ 136.716276][ T6070] new_inode+0x22/0x170 [ 136.716313][ T6070] diReadSpecial+0x52/0x710 [ 136.716350][ T6070] jfs_mount+0x73/0x870 [ 136.716376][ T6070] jfs_fill_super+0x6bc/0xd80 [ 136.716398][ T6070] get_tree_bdev_flags+0x40e/0x4d0 [ 136.716425][ T6070] vfs_get_tree+0x92/0x2b0 [ 136.716450][ T6070] page_owner free stack trace missing [ 136.716458][ T6070] [ 136.716464][ T6070] Memory state around the buggy address: [ 136.716476][ T6070] ffff88805be67900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.716492][ T6070] ffff88805be67980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.716506][ T6070] >ffff88805be67a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.716517][ T6070] ^ [ 136.716530][ T6070] ffff88805be67a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.716545][ T6070] ffff88805be67b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.716557][ T6070] ================================================================== [ 136.716577][ T6070] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.716592][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.716618][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.716633][ T6070] Call Trace: [ 136.716641][ T6070] [ 136.716650][ T6070] dump_stack_lvl+0x99/0x250 [ 136.716684][ T6070] ? __asan_memcpy+0x40/0x70 [ 136.716711][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.716747][ T6070] ? __pfx__printk+0x10/0x10 [ 136.716781][ T6070] vpanic+0x237/0x6d0 [ 136.716803][ T6070] ? __pfx_vpanic+0x10/0x10 [ 136.716831][ T6070] panic+0xb9/0xc0 [ 136.716852][ T6070] ? __pfx_panic+0x10/0x10 [ 136.716873][ T6070] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 136.716902][ T6070] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.716934][ T6070] ? jfs_readdir+0x1973/0x3ae0 [ 136.716957][ T6070] check_panic_on_warn+0x89/0xb0 [ 136.716977][ T6070] ? jfs_readdir+0x1973/0x3ae0 [ 136.716998][ T6070] end_report+0x78/0x160 [ 136.717026][ T6070] kasan_report+0x129/0x150 [ 136.717057][ T6070] ? jfs_readdir+0x1973/0x3ae0 [ 136.717085][ T6070] jfs_readdir+0x1973/0x3ae0 [ 136.717108][ T6070] ? preempt_schedule+0xae/0xc0 [ 136.717143][ T6070] ? __pfx_preempt_schedule+0x10/0x10 [ 136.717184][ T6070] ? __pfx_jfs_readdir+0x10/0x10 [ 136.717222][ T6070] ? rwbase_write_lock+0x56f/0x750 [ 136.717246][ T6070] ? __pfx_jfs_readdir+0x10/0x10 [ 136.717270][ T6070] wrap_directory_iterator+0x99/0xe0 [ 136.717295][ T6070] iterate_dir+0x3a5/0x580 [ 136.717322][ T6070] __se_sys_getdents64+0xe4/0x260 [ 136.717348][ T6070] ? __pfx___se_sys_getdents64+0x10/0x10 [ 136.717373][ T6070] ? __pfx_filldir64+0x10/0x10 [ 136.717402][ T6070] ? do_syscall_64+0xbe/0xfa0 [ 136.717434][ T6070] do_syscall_64+0xfa/0xfa0 [ 136.717463][ T6070] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.717493][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.717514][ T6070] ? clear_bhb_loop+0x60/0xb0 [ 136.717536][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.717552][ T6070] RIP: 0033:0x7fe019bbf749 [ 136.717566][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.717582][ T6070] RSP: 002b:00007fe019226038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 136.717598][ T6070] RAX: ffffffffffffffda RBX: 00007fe019e15fa0 RCX: 00007fe019bbf749 [ 136.717610][ T6070] RDX: 0000000000000099 RSI: 0000200000000280 RDI: 0000000000000005 [ 136.717620][ T6070] RBP: 00007fe019c43f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.717630][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.717639][ T6070] R13: 00007fe019e16038 R14: 00007fe019e15fa0 R15: 00007fff7fb48e68 [ 136.717658][ T6070] [ 136.717978][ T6070] Kernel Offset: disabled