no interfaces have a carrier [ 54.621193][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.631723][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. 2026/04/13 04:32:09 parsed 1 programs syzkaller login: [ 86.822403][ T5775] cgroup: Unknown subsys name 'net' [ 86.969572][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.815741][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.302123][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.310726][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.350340][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.358567][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.035685][ T23] cfg80211: failed to load regulatory.db [ 92.584465][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.600734][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.609726][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.623929][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.632910][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.640895][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.425503][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 94.556089][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.563771][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.571489][ T5851] bridge_slave_0: entered allmulticast mode [ 94.579068][ T5851] bridge_slave_0: entered promiscuous mode [ 94.588777][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.596257][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.603786][ T5851] bridge_slave_1: entered allmulticast mode [ 94.611029][ T5851] bridge_slave_1: entered promiscuous mode [ 94.650926][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.665146][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.706650][ T5851] team0: Port device team_slave_0 added [ 94.716372][ T5851] team0: Port device team_slave_1 added [ 94.751861][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.759312][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.785686][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.799346][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.807629][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.833758][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.877474][ T5851] hsr_slave_0: entered promiscuous mode [ 94.885574][ T5851] hsr_slave_1: entered promiscuous mode [ 95.090076][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.107042][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.119083][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.130245][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.244606][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.288515][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.311339][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.319408][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.345511][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.352734][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.608046][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.655557][ T5851] veth0_vlan: entered promiscuous mode [ 95.668931][ T5851] veth1_vlan: entered promiscuous mode [ 95.706187][ T5851] veth0_macvtap: entered promiscuous mode [ 95.717163][ T5851] veth1_macvtap: entered promiscuous mode [ 95.736222][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.752200][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.766686][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.776565][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786175][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.795736][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.982577][ T2952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/13 04:32:22 executed programs: 0 [ 97.295782][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.306499][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.315892][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.326629][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.335773][ T5828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.345013][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.621465][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 97.698586][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.705963][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.713411][ T5880] bridge_slave_0: entered allmulticast mode [ 97.721180][ T5880] bridge_slave_0: entered promiscuous mode [ 97.732435][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.740914][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.749302][ T5880] bridge_slave_1: entered allmulticast mode [ 97.757185][ T5880] bridge_slave_1: entered promiscuous mode [ 97.788208][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.802038][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.840173][ T5880] team0: Port device team_slave_0 added [ 97.849739][ T5880] team0: Port device team_slave_1 added [ 97.879303][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.886474][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.913051][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.925803][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.933035][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.961861][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.007797][ T5880] hsr_slave_0: entered promiscuous mode [ 98.014709][ T5880] hsr_slave_1: entered promiscuous mode [ 98.021214][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.029381][ T5880] Cannot create hsr debugfs directory [ 98.728034][ T2952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.394565][ T5085] Bluetooth: hci0: command tx timeout [ 100.919565][ T2952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.979900][ T2952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.476894][ T5085] Bluetooth: hci0: command tx timeout [ 101.990758][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.010327][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.032512][ T2952] hsr_slave_0: left promiscuous mode [ 102.039879][ T2952] hsr_slave_1: left promiscuous mode [ 102.047116][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.054761][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.064083][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.071585][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.081520][ T2952] bridge_slave_1: left allmulticast mode [ 102.089995][ T2952] bridge_slave_1: left promiscuous mode [ 102.097618][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.116421][ T2952] bridge_slave_0: left allmulticast mode [ 102.122245][ T2952] bridge_slave_0: left promiscuous mode [ 102.131031][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.165047][ T2952] veth1_macvtap: left promiscuous mode [ 102.171102][ T2952] veth0_macvtap: left promiscuous mode [ 102.177921][ T2952] veth1_vlan: left promiscuous mode [ 102.184433][ T2952] veth0_vlan: left promiscuous mode [ 102.754930][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 102.801990][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 102.846892][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.896373][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.185972][ T2952] bond0 (unregistering): Released all slaves [ 103.285502][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.297742][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.406020][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.442012][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.458078][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.465368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.497921][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.505143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.564052][ T5085] Bluetooth: hci0: command tx timeout [ 103.788029][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.858143][ T5880] veth0_vlan: entered promiscuous mode [ 103.883259][ T5880] veth1_vlan: entered promiscuous mode [ 103.920604][ T5880] veth0_macvtap: entered promiscuous mode [ 103.942816][ T5880] veth1_macvtap: entered promiscuous mode [ 103.965575][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.997715][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.010711][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.019809][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.029061][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038474][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.129824][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.142102][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.186611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.199743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.260558][ T5920] syz.0.17[5920]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.333444][ T5920] loop0: detected capacity change from 0 to 4096 [ 104.351833][ T5920] ------------[ cut here ]------------ [ 104.357972][ T5920] kernel BUG at fs/ntfs/aops.c:186! [ 104.366980][ T5920] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 104.373152][ T5920] CPU: 1 PID: 5920 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.380409][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.390526][ T5920] RIP: 0010:ntfs_read_folio+0x26f8/0x2990 [ 104.396336][ T5920] Code: bc 24 80 00 00 00 00 0f 84 cf 00 00 00 e8 e0 79 c6 fe e9 43 02 00 00 e8 d6 79 c6 fe 0f 0b e8 cf 79 c6 fe 0f 0b e8 c8 79 c6 fe <0f> 0b 48 8b 7c 24 18 be 08 00 00 00 e8 17 b3 1e ff 48 b8 00 00 00 [ 104.416350][ T5920] RSP: 0018:ffffc900033175c0 EFLAGS: 00010293 [ 104.422569][ T5920] RAX: ffffffff82c0a838 RBX: 0000000000000000 RCX: ffff88802bfa0000 [ 104.430608][ T5920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.438802][ T5920] RBP: ffffc900033177b0 R08: ffff88805ed68057 R09: 1ffff1100bdad00a [ 104.446842][ T5920] R10: dffffc0000000000 R11: ffffed100bdad00b R12: dffffc0000000000 [ 104.454957][ T5920] R13: 1ffffd40002f0c70 R14: ffff888076cd1000 R15: ffffea0001786380 [ 104.462999][ T5920] FS: 000055556b1c8500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 104.472176][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.478918][ T5920] CR2: 00007fcc0804b53c CR3: 000000007352d000 CR4: 00000000003506e0 [ 104.487213][ T5920] Call Trace: [ 104.490562][ T5920] [ 104.493638][ T5920] ? __mod_node_page_state+0xf4/0x160 [ 104.499169][ T5920] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.504612][ T5920] ? rcu_is_watching+0x15/0xb0 [ 104.509494][ T5920] ? folio_add_lru+0x320/0xd30 [ 104.514342][ T5920] ? ntfs_writepage+0x1630/0x1630 [ 104.519797][ T5920] ? lock_release+0xb5/0x8c0 [ 104.524474][ T5920] ? __lock_acquire+0x7d40/0x7d40 [ 104.529571][ T5920] filemap_read_folio+0x172/0x760 [ 104.534651][ T5920] ? folio_batch_add_and_move+0x168/0x2b0 [ 104.540775][ T5920] ? ntfs_writepage+0x1630/0x1630 [ 104.545985][ T5920] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 104.552226][ T5920] ? folio_add_lru+0x54f/0xd30 [ 104.557048][ T5920] ? filemap_add_folio+0x192/0x3c0 [ 104.562309][ T5920] do_read_cache_folio+0x468/0x7d0 [ 104.567898][ T5920] ? ntfs_writepage+0x1630/0x1630 [ 104.572990][ T5920] do_read_cache_page+0x32/0x250 [ 104.578008][ T5920] map_mft_record+0x1e3/0x650 [ 104.583774][ T5920] ntfs_read_locked_inode+0x1ae/0x4e40 [ 104.589583][ T5920] ? __asan_memset+0x22/0x40 [ 104.594323][ T5920] ? ntfs_attr_reinit_search_ctx+0x4f/0x2f0 [ 104.600540][ T5920] ntfs_read_inode_mount+0xf6f/0x28f0 [ 104.606023][ T5920] ntfs_fill_super+0x16dd/0x2a50 [ 104.611045][ T5920] mount_bdev+0x221/0x2d0 [ 104.615521][ T5920] ? ntfs_mount+0x40/0x40 [ 104.620012][ T5920] ? get_tree_bdev+0x520/0x520 [ 104.624832][ T5920] ? vfs_parse_fs_param+0x420/0x420 [ 104.630206][ T5920] legacy_get_tree+0xea/0x180 [ 104.634946][ T5920] ? ntfs_rl_punch_nolock+0xf30/0xf30 [ 104.640469][ T5920] vfs_get_tree+0x8c/0x280 [ 104.645041][ T5920] do_new_mount+0x24b/0xa40 [ 104.649619][ T5920] __se_sys_mount+0x2e7/0x3d0 [ 104.654562][ T5920] ? __x64_sys_mount+0xc0/0xc0 [ 104.659479][ T5920] ? lockdep_hardirqs_on+0x98/0x150 [ 104.664744][ T5920] ? __x64_sys_mount+0x20/0xc0 [ 104.669610][ T5920] do_syscall_64+0x55/0xa0 [ 104.674086][ T5920] ? clear_bhb_loop+0x40/0x90 [ 104.678857][ T5920] ? clear_bhb_loop+0x40/0x90 [ 104.683686][ T5920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.689721][ T5920] RIP: 0033:0x7fcc07f9da8a [ 104.694194][ T5920] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.713853][ T5920] RSP: 002b:00007ffe9bf54078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.722506][ T5920] RAX: ffffffffffffffda RBX: 00007ffe9bf54100 RCX: 00007fcc07f9da8a [ 104.730619][ T5920] RDX: 000020000001ec80 RSI: 000020000001ecc0 RDI: 00007ffe9bf540c0 [ 104.738655][ T5920] RBP: 000020000001ec80 R08: 00007ffe9bf54100 R09: 0000000000000000 [ 104.746671][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000001ecc0 [ 104.754679][ T5920] R13: 00007ffe9bf540c0 R14: 000000000001ec5f R15: 000020000001ed00 [ 104.762710][ T5920] [ 104.765771][ T5920] Modules linked in: [ 104.771745][ T5920] ---[ end trace 0000000000000000 ]--- [ 104.777544][ T5920] RIP: 0010:ntfs_read_folio+0x26f8/0x2990 [ 104.783475][ T5920] Code: bc 24 80 00 00 00 00 0f 84 cf 00 00 00 e8 e0 79 c6 fe e9 43 02 00 00 e8 d6 79 c6 fe 0f 0b e8 cf 79 c6 fe 0f 0b e8 c8 79 c6 fe <0f> 0b 48 8b 7c 24 18 be 08 00 00 00 e8 17 b3 1e ff 48 b8 00 00 00 [ 104.805173][ T5920] RSP: 0018:ffffc900033175c0 EFLAGS: 00010293 [ 104.811600][ T5920] RAX: ffffffff82c0a838 RBX: 0000000000000000 RCX: ffff88802bfa0000 [ 104.819795][ T5920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.830208][ T5920] RBP: ffffc900033177b0 R08: ffff88805ed68057 R09: 1ffff1100bdad00a [ 104.839417][ T5920] R10: dffffc0000000000 R11: ffffed100bdad00b R12: dffffc0000000000 [ 104.850067][ T5920] R13: 1ffffd40002f0c70 R14: ffff888076cd1000 R15: ffffea0001786380 [ 104.858511][ T5920] FS: 000055556b1c8500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 104.868216][ T5920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.876583][ T5920] CR2: 00007fcc0804b53c CR3: 000000007352d000 CR4: 00000000003506e0 [ 104.884787][ T5920] Kernel panic - not syncing: Fatal exception [ 104.891475][ T5920] Kernel Offset: disabled [ 104.895915][ T5920] Rebooting in 86400 seconds..