no interfaces have a carrier [ 114.729515][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.777154][ T5226] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2026/05/14 16:53:22 parsed 1 programs syzkaller login: [ 172.366091][ T5589] cgroup: Unknown subsys name 'net' [ 172.493840][ T5589] cgroup: Unknown subsys name 'cpuset' [ 172.507962][ T5589] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 178.131324][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.300177][ T5598] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 189.289857][ T5660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.299352][ T5660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.308888][ T5660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.320353][ T5660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.330175][ T5660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.011069][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.020125][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.087628][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.102026][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.965847][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.973527][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.981335][ T5675] bridge_slave_0: entered allmulticast mode [ 191.989752][ T5675] bridge_slave_0: entered promiscuous mode [ 192.002710][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.010581][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.018689][ T5675] bridge_slave_1: entered allmulticast mode [ 192.027731][ T5675] bridge_slave_1: entered promiscuous mode [ 192.086492][ T5675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.104010][ T5675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.161654][ T5675] team0: Port device team_slave_0 added [ 192.174573][ T5675] team0: Port device team_slave_1 added [ 192.223888][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.231104][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.257575][ T5675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.271876][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.279082][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.305558][ T5675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.387744][ T5675] hsr_slave_0: entered promiscuous mode [ 192.396618][ T5675] hsr_slave_1: entered promiscuous mode [ 192.678166][ T5675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.695564][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.706783][ T5675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.722717][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.733761][ T5675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.751098][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.760741][ T5675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.776794][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.990276][ T5675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.041416][ T5675] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.068490][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.075904][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.103810][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.111274][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.871270][ T5675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.981893][ T5675] veth0_vlan: entered promiscuous mode [ 194.008581][ T5675] veth1_vlan: entered promiscuous mode [ 194.085191][ T5675] veth0_macvtap: entered promiscuous mode [ 194.105233][ T5675] veth1_macvtap: entered promiscuous mode [ 194.148677][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.182360][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.210725][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.221290][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.233579][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.242673][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.563215][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.863721][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.993718][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.093190][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.493185][ T13] bridge_slave_1: left allmulticast mode [ 196.519417][ T13] bridge_slave_1: left promiscuous mode [ 196.537710][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.552125][ T13] bridge_slave_0: left allmulticast mode [ 196.559086][ T13] bridge_slave_0: left promiscuous mode [ 196.566192][ T13] bridge0: port 1(bridge_slave_0) entered disabled state 2026/05/14 16:54:01 executed programs: 0 [ 197.067333][ T4870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.085254][ T4870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.094672][ T4870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.097882][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.108829][ T4870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.125992][ T4870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.137531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.151753][ T13] bond0 (unregistering): Released all slaves [ 197.372927][ T13] hsr_slave_0: left promiscuous mode [ 197.407475][ T13] hsr_slave_1: left promiscuous mode [ 197.418410][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.432903][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.444676][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.452630][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.473988][ T13] veth1_macvtap: left promiscuous mode [ 197.481218][ T13] veth0_macvtap: left promiscuous mode [ 197.488165][ T13] veth1_vlan: left promiscuous mode [ 197.493664][ T13] veth0_vlan: left promiscuous mode [ 198.192142][ T13] team0 (unregistering): Port device team_slave_1 removed [ 198.260838][ T13] team0 (unregistering): Port device team_slave_0 removed [ 198.448029][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 199.205689][ T5660] Bluetooth: hci0: command tx timeout [ 199.775503][ T5226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 200.095365][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.103116][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.112271][ T5731] bridge_slave_0: entered allmulticast mode [ 200.122563][ T5731] bridge_slave_0: entered promiscuous mode [ 200.139487][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.149600][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.158767][ T5731] bridge_slave_1: entered allmulticast mode [ 200.169444][ T5731] bridge_slave_1: entered promiscuous mode [ 200.253790][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.278607][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.360723][ T5731] team0: Port device team_slave_0 added [ 200.379212][ T5731] team0: Port device team_slave_1 added [ 200.453896][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.461500][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.489698][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.516432][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.524235][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.552507][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.672374][ T5731] hsr_slave_0: entered promiscuous mode [ 200.682367][ T5731] hsr_slave_1: entered promiscuous mode [ 200.886088][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.290133][ T5660] Bluetooth: hci0: command tx timeout [ 201.492346][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.517644][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.532157][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.552511][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.563924][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.586489][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.600856][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.624117][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.972577][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.036958][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.072871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.080537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.122305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.130150][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.365192][ T5660] Bluetooth: hci0: command tx timeout [ 203.420651][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.639413][ T5731] veth0_vlan: entered promiscuous mode [ 203.678263][ T5731] veth1_vlan: entered promiscuous mode [ 203.810297][ T5731] veth0_macvtap: entered promiscuous mode [ 203.838927][ T5731] veth1_macvtap: entered promiscuous mode [ 203.916252][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.961218][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.013967][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.021208][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.041638][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.067489][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.118988][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.143084][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.446883][ T5660] Bluetooth: hci0: command tx timeout [ 205.680182][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.694295][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.751273][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.759859][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/14 16:54:10 executed programs: 2 [ 205.880138][ T5875] ===================================================== [ 205.887761][ T5875] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 205.896447][ T5875] mptcp_established_options+0x112f/0x3530 [ 205.902432][ T5875] tcp_established_options+0x312/0xcc0 [ 205.908322][ T5875] __tcp_transmit_skb+0x5dc/0x5fe0 [ 205.913684][ T5875] __tcp_send_ack+0x967/0xad0 [ 205.919120][ T5875] tcp_send_ack+0x3d/0x60 [ 205.923864][ T5875] mptcp_subflow_shutdown+0x164/0x690 [ 205.929497][ T5875] mptcp_check_send_data_fin+0x31b/0x3d0 [ 205.935435][ T5875] __mptcp_close+0x860/0x1360 [ 205.940263][ T5875] mptcp_close+0x42/0x260 [ 205.944679][ T5875] inet_release+0x1ee/0x2a0 [ 205.949595][ T5875] sock_close+0xd6/0x2f0 [ 205.954030][ T5875] __fput+0x60e/0x1010 [ 205.958345][ T5875] ____fput+0x25/0x30 [ 205.962479][ T5875] task_work_run+0x208/0x2b0 [ 205.968240][ T5875] exit_to_user_mode_loop+0x306/0x1ea0 [ 205.974083][ T5875] do_syscall_64+0x236/0xf80 [ 205.978997][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.985216][ T5875] [ 205.987571][ T5875] Local variable opts created at: [ 205.992713][ T5875] __tcp_transmit_skb+0x4d/0x5fe0 [ 205.998136][ T5875] __tcp_send_ack+0x967/0xad0 [ 206.003077][ T5875] [ 206.005717][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 206.015142][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.025448][ T5875] ===================================================== [ 206.032470][ T5875] Disabling lock debugging due to kernel taint [ 206.039967][ T5875] Kernel panic - not syncing: kmsan.panic set ... [ 206.046610][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 206.057545][ T5875] Tainted: [B]=BAD_PAGE [ 206.061765][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.071916][ T5875] Call Trace: [ 206.075245][ T5875] [ 206.078317][ T5875] __dump_stack+0x26/0x30 [ 206.082730][ T5875] dump_stack_lvl+0x50/0x1c0 [ 206.087521][ T5875] ? dump_stack+0x12/0x25 [ 206.091943][ T5875] dump_stack+0x1e/0x25 [ 206.096278][ T5875] vpanic+0x7b4/0x1430 [ 206.100471][ T5875] panic+0x15d/0x160 [ 206.104498][ T5875] kmsan_report+0x31a/0x320 [ 206.109104][ T5875] ? __msan_warning+0x1b/0x30 [ 206.113882][ T5875] ? mptcp_established_options+0x112f/0x3530 [ 206.120003][ T5875] ? tcp_established_options+0x312/0xcc0 [ 206.125761][ T5875] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 206.131162][ T5875] ? __tcp_send_ack+0x967/0xad0 [ 206.136142][ T5875] ? tcp_send_ack+0x3d/0x60 [ 206.140731][ T5875] ? mptcp_subflow_shutdown+0x164/0x690 [ 206.146365][ T5875] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 206.152259][ T5875] ? __mptcp_close+0x860/0x1360 [ 206.157207][ T5875] ? mptcp_close+0x42/0x260 [ 206.161800][ T5875] ? inet_release+0x1ee/0x2a0 [ 206.166789][ T5875] ? sock_close+0xd6/0x2f0 [ 206.171323][ T5875] ? __fput+0x60e/0x1010 [ 206.175750][ T5875] ? ____fput+0x25/0x30 [ 206.179989][ T5875] ? task_work_run+0x208/0x2b0 [ 206.184835][ T5875] ? exit_to_user_mode_loop+0x306/0x1ea0 [ 206.190606][ T5875] ? do_syscall_64+0x236/0xf80 [ 206.195465][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.201627][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.208065][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.213374][ T5875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 206.219349][ T5875] ? mptcp_established_options+0x71/0x3530 [ 206.225269][ T5875] ? filter_irq_stacks+0x49/0x190 [ 206.230394][ T5875] ? stack_depot_save_flags+0x35/0x790 [ 206.235979][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.241215][ T5875] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 206.247651][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.253022][ T5875] __msan_warning+0x1b/0x30 [ 206.257981][ T5875] mptcp_established_options+0x112f/0x3530 [ 206.263928][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.269185][ T5875] tcp_established_options+0x312/0xcc0 [ 206.274898][ T5875] __tcp_transmit_skb+0x5dc/0x5fe0 [ 206.280174][ T5875] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 206.286475][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.291728][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.296957][ T5875] ? kmsan_get_metadata+0xf1/0x160 [ 206.302280][ T5875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 206.308567][ T5875] ? __alloc_skb+0xb7d/0x1190 [ 206.313364][ T5875] __tcp_send_ack+0x967/0xad0 [ 206.318593][ T5875] tcp_send_ack+0x3d/0x60 [ 206.323104][ T5875] mptcp_subflow_shutdown+0x164/0x690 [ 206.328586][ T5875] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 206.334548][ T5875] mptcp_check_send_data_fin+0x31b/0x3d0 [ 206.340474][ T5875] __mptcp_close+0x860/0x1360 [ 206.345531][ T5875] ? __pfx_mptcp_close+0x10/0x10 [ 206.350631][ T5875] mptcp_close+0x42/0x260 [ 206.355076][ T5875] ? __pfx_mptcp_close+0x10/0x10 [ 206.360379][ T5875] inet_release+0x1ee/0x2a0 [ 206.364992][ T5875] ? __pfx_inet_release+0x10/0x10 [ 206.370175][ T5875] sock_close+0xd6/0x2f0 [ 206.374549][ T5875] ? __pfx_sock_close+0x10/0x10 [ 206.379617][ T5875] __fput+0x60e/0x1010 [ 206.383815][ T5875] ? __pfx_____fput+0x10/0x10 [ 206.388757][ T5875] ____fput+0x25/0x30 [ 206.392826][ T5875] task_work_run+0x208/0x2b0 [ 206.397503][ T5875] exit_to_user_mode_loop+0x306/0x1ea0 [ 206.403081][ T5875] ? __x64_sys_close_range+0x97/0xe0 [ 206.408462][ T5875] do_syscall_64+0x236/0xf80 [ 206.413330][ T5875] ? clear_bhb_loop+0x50/0xa0 [ 206.418123][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.424136][ T5875] RIP: 0033:0x7ff06e99ce59 [ 206.428633][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.448612][ T5875] RSP: 002b:00007ffd5c2c3358 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 206.457235][ T5875] RAX: 0000000000000000 RBX: 00007ffd5c2c3440 RCX: 00007ff06e99ce59 [ 206.465377][ T5875] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 206.473424][ T5875] RBP: 0000000000032415 R08: 0000000000000001 R09: 0000000000000000 [ 206.481494][ T5875] R10: 0000001b32220000 R11: 0000000000000246 R12: 0000000000000000 [ 206.489544][ T5875] R13: 00007ff06ec15fac R14: 00007ff06ec15fa8 R15: 00007ff06ec15fa0 [ 206.497623][ T5875] [ 206.501191][ T5875] Kernel Offset: disabled [ 206.505601][ T5875] Rebooting in 86400 seconds..