no interfaces have a carrier [ 61.651401][ T5270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.674729][ T5270] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 91.932051][ T201] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. 2026/06/30 20:06:04 parsed 1 programs 2026/06/30 20:06:04 serving rpc on tcp://36921 [ 100.538385][ T5632] cgroup: Unknown subsys name 'net' [ 100.780262][ T5632] cgroup: Unknown subsys name 'cpuset' [ 100.834101][ T5632] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.826540][ T5632] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.465063][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.465084][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.844687][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.844709][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.378163][ T5702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.411193][ T5702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.414940][ T5702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.467896][ T5702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.471793][ T5702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.814830][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.816490][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.816731][ T5652] bridge_slave_0: entered allmulticast mode [ 110.819464][ T5652] bridge_slave_0: entered promiscuous mode [ 110.899632][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.899965][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.900262][ T5652] bridge_slave_1: entered allmulticast mode [ 110.911479][ T5652] bridge_slave_1: entered promiscuous mode [ 111.181733][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.274188][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.444644][ T5652] team0: Port device team_slave_0 added [ 111.578493][ T5652] team0: Port device team_slave_1 added [ 111.739981][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.739996][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.740017][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.802853][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.802871][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.802898][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.219762][ T5652] hsr_slave_0: entered promiscuous mode [ 112.229591][ T5652] hsr_slave_1: entered promiscuous mode [ 113.326279][ T5652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.425345][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.426721][ T5652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.532917][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.545117][ T5652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.591675][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.603318][ T5652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.648091][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.098294][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.199067][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.226735][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.226930][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.285382][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.285538][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.242694][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.342707][ T5652] veth0_vlan: entered promiscuous mode [ 115.370733][ T5652] veth1_vlan: entered promiscuous mode [ 115.468624][ T5652] veth0_macvtap: entered promiscuous mode [ 115.509589][ T5652] veth1_macvtap: entered promiscuous mode [ 115.626066][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.656035][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.705423][ T3334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.711941][ T3334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.739442][ T3334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.740034][ T3334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/30 20:06:24 executed programs: 0 [ 116.720183][ T5702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.796370][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.807748][ T5762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.880182][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.911191][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.913364][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.916613][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.925993][ T5765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.926830][ T5765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.962705][ T5766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.995223][ T5762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.015011][ T5702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.050819][ T5702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.052881][ T5762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.053001][ T5702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.096367][ T5702] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.104092][ T5762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.104484][ T5762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.105360][ T5762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.142433][ T5764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.609142][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.957447][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.124108][ T5762] Bluetooth: hci1: command tx timeout [ 119.205472][ T5764] Bluetooth: hci0: command tx timeout [ 119.248864][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.375721][ T5762] Bluetooth: hci3: command tx timeout [ 119.376082][ T5764] Bluetooth: hci2: command tx timeout [ 119.666362][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.473670][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.473985][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.474201][ T5756] bridge_slave_0: entered allmulticast mode [ 120.476840][ T5756] bridge_slave_0: entered promiscuous mode [ 120.545313][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.545625][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.545832][ T5756] bridge_slave_1: entered allmulticast mode [ 120.548295][ T5756] bridge_slave_1: entered promiscuous mode [ 120.765413][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.765726][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.765923][ T5754] bridge_slave_0: entered allmulticast mode [ 120.768405][ T5754] bridge_slave_0: entered promiscuous mode [ 120.818850][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.847492][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.847952][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.848183][ T5754] bridge_slave_1: entered allmulticast mode [ 120.857241][ T5754] bridge_slave_1: entered promiscuous mode [ 120.918393][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.014588][ T44] bridge_slave_1: left allmulticast mode [ 121.014788][ T44] bridge_slave_1: left promiscuous mode [ 121.015304][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.145197][ T44] bridge_slave_0: left allmulticast mode [ 121.145225][ T44] bridge_slave_0: left promiscuous mode [ 121.145426][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.203687][ T5764] Bluetooth: hci1: command tx timeout [ 121.284463][ T5764] Bluetooth: hci0: command tx timeout [ 121.446329][ T5762] Bluetooth: hci3: command tx timeout [ 121.446412][ T5764] Bluetooth: hci2: command tx timeout [ 121.974337][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.034227][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.055969][ T44] bond0 (unregistering): Released all slaves [ 122.144719][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.145070][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.145304][ T5755] bridge_slave_0: entered allmulticast mode [ 122.147910][ T5755] bridge_slave_0: entered promiscuous mode [ 122.253654][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.254137][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.254426][ T5755] bridge_slave_1: entered allmulticast mode [ 122.258323][ T5755] bridge_slave_1: entered promiscuous mode [ 122.316383][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.316711][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.316945][ T5753] bridge_slave_0: entered allmulticast mode [ 122.320900][ T5753] bridge_slave_0: entered promiscuous mode [ 122.407661][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.408122][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.408486][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.408757][ T5753] bridge_slave_1: entered allmulticast mode [ 122.411232][ T5753] bridge_slave_1: entered promiscuous mode [ 122.456343][ T5756] team0: Port device team_slave_0 added [ 122.482499][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.527336][ T5756] team0: Port device team_slave_1 added [ 122.535361][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.624269][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.659338][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.718255][ T5754] team0: Port device team_slave_0 added [ 122.723274][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.739203][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.739217][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.739240][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.796776][ T5754] team0: Port device team_slave_1 added [ 122.838295][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.838309][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.838334][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.858758][ T5755] team0: Port device team_slave_0 added [ 122.943810][ T5755] team0: Port device team_slave_1 added [ 122.969750][ T5753] team0: Port device team_slave_0 added [ 122.995866][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.995884][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.995914][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.999978][ T5753] team0: Port device team_slave_1 added [ 123.068520][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.068538][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.068567][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.193801][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.193819][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.193848][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.284967][ T5764] Bluetooth: hci1: command tx timeout [ 123.288345][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.288361][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.288390][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.291149][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.291163][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.291191][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.336346][ T5756] hsr_slave_0: entered promiscuous mode [ 123.342757][ T5756] hsr_slave_1: entered promiscuous mode [ 123.350694][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 123.351048][ T5756] Cannot create hsr debugfs directory [ 123.364809][ T5764] Bluetooth: hci0: command tx timeout [ 123.523814][ T5764] Bluetooth: hci2: command tx timeout [ 123.523846][ T5764] Bluetooth: hci3: command tx timeout [ 123.880851][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.880864][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.880884][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.904432][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.033619][ T44] hsr_slave_0: left promiscuous mode [ 124.053591][ T44] hsr_slave_1: left promiscuous mode [ 124.054805][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.054861][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.095306][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.095337][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.158994][ T44] veth1_macvtap: left promiscuous mode [ 124.159170][ T44] veth0_macvtap: left promiscuous mode [ 124.159394][ T44] veth1_vlan: left promiscuous mode [ 124.159620][ T44] veth0_vlan: left promiscuous mode [ 124.895394][ T44] team0 (unregistering): Port device team_slave_1 removed [ 124.954309][ T44] team0 (unregistering): Port device team_slave_0 removed [ 125.289627][ T5754] hsr_slave_0: entered promiscuous mode [ 125.291920][ T5754] hsr_slave_1: entered promiscuous mode [ 125.373682][ T5764] Bluetooth: hci1: command tx timeout [ 125.449709][ T5755] hsr_slave_0: entered promiscuous mode [ 125.451271][ T5755] hsr_slave_1: entered promiscuous mode [ 125.452553][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 125.452583][ T5755] Cannot create hsr debugfs directory [ 125.453587][ T5764] Bluetooth: hci0: command tx timeout [ 125.554378][ T5753] hsr_slave_0: entered promiscuous mode [ 125.559571][ T5753] hsr_slave_1: entered promiscuous mode [ 125.561287][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 125.561317][ T5753] Cannot create hsr debugfs directory [ 125.604113][ T5764] Bluetooth: hci3: command tx timeout [ 125.604125][ T5762] Bluetooth: hci2: command tx timeout [ 126.572779][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 127.981155][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.051383][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.065780][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.112694][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.146851][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.195956][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.227510][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.272745][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.377267][ T5755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.421055][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.438504][ T5755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.478531][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.481666][ T5755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.517961][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.550846][ T5755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.582065][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.748418][ T5753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.779089][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.794240][ T5753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.838295][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.871036][ T5753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.911933][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.942849][ T5753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.968124][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.143046][ T5756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.187880][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.206740][ T5756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.239175][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.257858][ T5756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.297843][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.314593][ T5756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.349371][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.458468][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.598325][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.617687][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.679887][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.680075][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.732065][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.732488][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.776203][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.829585][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.829777][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.871149][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.871321][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.898189][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.052133][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.076011][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.107556][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.107774][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.197134][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.197248][ T3315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.276951][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.336320][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.343020][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.481996][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.505089][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.538970][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.746760][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.047922][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.071011][ T5754] veth0_vlan: entered promiscuous mode [ 132.150553][ T5755] veth0_vlan: entered promiscuous mode [ 132.177834][ T5754] veth1_vlan: entered promiscuous mode [ 132.269892][ T5755] veth1_vlan: entered promiscuous mode [ 132.319325][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.406992][ T5753] veth0_vlan: entered promiscuous mode [ 132.418710][ T5754] veth0_macvtap: entered promiscuous mode [ 132.457601][ T5754] veth1_macvtap: entered promiscuous mode [ 132.489692][ T5753] veth1_vlan: entered promiscuous mode [ 132.507472][ T5755] veth0_macvtap: entered promiscuous mode [ 132.537542][ T5755] veth1_macvtap: entered promiscuous mode [ 132.591251][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.644540][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.644751][ T5756] veth0_vlan: entered promiscuous mode [ 132.670556][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.705399][ T3315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.710798][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.712212][ T3315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.764748][ T3315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.777280][ T3315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.799264][ T5756] veth1_vlan: entered promiscuous mode [ 132.816863][ T5753] veth0_macvtap: entered promiscuous mode [ 132.821205][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.840938][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.893116][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897875][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.927747][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.948356][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.952096][ T5753] veth1_macvtap: entered promiscuous mode [ 133.485616][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.670266][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.700747][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.700768][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.770821][ T5756] veth0_macvtap: entered promiscuous mode [ 133.799712][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.819656][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.832330][ T5756] veth1_macvtap: entered promiscuous mode [ 133.839934][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.839987][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.889537][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.926196][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.020013][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.020057][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/30 20:06:42 executed programs: 8 [ 134.151789][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.151811][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.242382][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.328257][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 134.410557][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.563017][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.600970][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.613188][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.629071][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.978785][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.978808][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.548544][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.548565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.773024][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.773042][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.005254][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.005276][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/30 20:06:47 executed programs: 43 2026/06/30 20:06:52 executed programs: 108 [ 149.108219][ T6591] ================================================================== [ 149.108232][ T6591] BUG: KASAN: use-after-free in kvm_setup_guest_pvclock+0x439/0x620 [ 149.108263][ T6591] Read of size 4 at addr ffff88804d02c320 by task syz.1.180/6591 [ 149.108276][ T6591] [ 149.108295][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.108317][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.108332][ T6591] Call Trace: [ 149.108342][ T6591] [ 149.108349][ T6591] dump_stack_lvl+0xe8/0x150 [ 149.108368][ T6591] print_address_description+0x55/0x1e0 [ 149.108390][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.108411][ T6591] print_report+0x58/0x70 [ 149.108430][ T6591] kasan_report+0x117/0x150 [ 149.108450][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.108476][ T6591] kvm_setup_guest_pvclock+0x439/0x620 [ 149.108499][ T6591] ? __pfx_kvm_setup_guest_pvclock+0x10/0x10 [ 149.108524][ T6591] ? kvm_get_time_scale+0x75/0x140 [ 149.108546][ T6591] kvm_guest_time_update+0xa32/0xe60 [ 149.108568][ T6591] ? xa_find_after+0xae/0x430 [ 149.108596][ T6591] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 149.108617][ T6591] ? xa_find_after+0xae/0x430 [ 149.108653][ T6591] vcpu_run+0x150d/0x73e0 [ 149.108689][ T6591] ? __lock_acquire+0x683/0x2ce0 [ 149.108719][ T6591] ? __pfx_vcpu_run+0x10/0x10 [ 149.108737][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.108757][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.108781][ T6591] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 149.108802][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.108825][ T6591] kvm_vcpu_ioctl+0xa64/0xfe0 [ 149.108849][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.108869][ T6591] ? hook_file_ioctl+0x1f3/0x600 [ 149.108894][ T6591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 149.108921][ T6591] ? __fget_files+0x2a/0x420 [ 149.108939][ T6591] ? __fget_files+0x2a/0x420 [ 149.108955][ T6591] ? __fget_files+0x3a8/0x420 [ 149.108970][ T6591] ? __fget_files+0x2a/0x420 [ 149.108999][ T6591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.109017][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.109038][ T6591] __se_sys_ioctl+0xff/0x170 [ 149.109058][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.109074][ T6591] do_syscall_64+0x174/0x580 [ 149.109093][ T6591] ? trace_irq_disable+0x3b/0x140 [ 149.109112][ T6591] ? clear_bhb_loop+0x40/0x90 [ 149.109129][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.109145][ T6591] RIP: 0033:0x7fbebb04ce59 [ 149.109163][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.109176][ T6591] RSP: 002b:00007fbeba68d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.109197][ T6591] RAX: ffffffffffffffda RBX: 00007fbebb2c6090 RCX: 00007fbebb04ce59 [ 149.109226][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 149.109236][ T6591] RBP: 00007fbebb0e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 149.109245][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.109255][ T6591] R13: 00007fbebb2c6128 R14: 00007fbebb2c6090 R15: 00007ffefb5754e8 [ 149.109273][ T6591] [ 149.109278][ T6591] [ 149.109282][ T6591] The buggy address belongs to the physical page: [ 149.109297][ T6591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x4d02c [ 149.109315][ T6591] flags: 0x80000000000000(node=0|zone=1) [ 149.109338][ T6591] raw: 0080000000000000 ffffea000159c008 ffff8880b8642f70 0000000000000000 [ 149.109351][ T6591] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 149.109359][ T6591] page dumped because: kasan: bad access detected [ 149.109370][ T6591] page_owner tracks the page as freed [ 149.109375][ T6591] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 6589, tgid 6589 (syz.1.180), ts 149074813359 [ 149.109398][ T6591] post_alloc_hook+0x1f9/0x250 [ 149.109412][ T6591] get_page_from_freelist+0x264c/0x26c0 [ 149.109430][ T6591] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 149.109447][ T6591] alloc_pages_mpol+0xce/0x280 [ 149.109465][ T6591] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 149.109482][ T6591] vma_alloc_folio_noprof+0xe1/0x1e0 [ 149.109499][ T6591] do_pte_missing+0x835/0x28f0 [ 149.109516][ T6591] handle_mm_fault+0xe0b/0x1520 [ 149.109529][ T6591] do_user_addr_fault+0xa4d/0x1340 [ 149.109546][ T6591] exc_page_fault+0x6a/0xc0 [ 149.109563][ T6591] asm_exc_page_fault+0x26/0x30 [ 149.109576][ T6591] page last free pid 6590 tgid 6589 ts 149102566230 stack trace: [ 149.109586][ T6591] __free_frozen_pages+0x10de/0x11c0 [ 149.109600][ T6591] __folio_put+0x30f/0x3c0 [ 149.109616][ T6591] __kvm_gpc_refresh+0x1277/0x1710 [ 149.109632][ T6591] __kvm_gpc_activate+0x289/0x3b0 [ 149.109653][ T6591] kvm_xen_vcpu_set_attr+0x1d3/0x1190 [ 149.109668][ T6591] kvm_arch_vcpu_ioctl+0x1467/0x23f0 [ 149.109689][ T6591] kvm_vcpu_ioctl+0x7e6/0xfe0 [ 149.109708][ T6591] __se_sys_ioctl+0xff/0x170 [ 149.109727][ T6591] do_syscall_64+0x174/0x580 [ 149.109751][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.109765][ T6591] [ 149.109769][ T6591] Memory state around the buggy address: [ 149.109776][ T6591] ffff88804d02c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.109786][ T6591] ffff88804d02c280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.109796][ T6591] >ffff88804d02c300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.109804][ T6591] ^ [ 149.109812][ T6591] ffff88804d02c380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.109822][ T6591] ffff88804d02c400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.109830][ T6591] ================================================================== [ 149.109907][ T6591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.109918][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.109935][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.109944][ T6591] Call Trace: [ 149.109950][ T6591] [ 149.109955][ T6591] vpanic+0x56c/0xa60 [ 149.109980][ T6591] ? __pfx_vpanic+0x10/0x10 [ 149.110007][ T6591] panic+0xc5/0xd0 [ 149.110028][ T6591] ? __pfx_panic+0x10/0x10 [ 149.110051][ T6591] ? preempt_schedule_thunk+0x16/0x40 [ 149.110075][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.110097][ T6591] ? preempt_schedule_thunk+0x16/0x40 [ 149.110120][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.110141][ T6591] check_panic_on_warn+0x89/0xb0 [ 149.110164][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.110185][ T6591] end_report+0x73/0x170 [ 149.110207][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.110228][ T6591] kasan_report+0x128/0x150 [ 149.110247][ T6591] ? kvm_setup_guest_pvclock+0x439/0x620 [ 149.110272][ T6591] kvm_setup_guest_pvclock+0x439/0x620 [ 149.110295][ T6591] ? __pfx_kvm_setup_guest_pvclock+0x10/0x10 [ 149.110320][ T6591] ? kvm_get_time_scale+0x75/0x140 [ 149.110343][ T6591] kvm_guest_time_update+0xa32/0xe60 [ 149.110364][ T6591] ? xa_find_after+0xae/0x430 [ 149.110391][ T6591] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 149.110412][ T6591] ? xa_find_after+0xae/0x430 [ 149.110442][ T6591] vcpu_run+0x150d/0x73e0 [ 149.110477][ T6591] ? __lock_acquire+0x683/0x2ce0 [ 149.110506][ T6591] ? __pfx_vcpu_run+0x10/0x10 [ 149.110524][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.110544][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.110568][ T6591] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 149.110589][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 149.110612][ T6591] kvm_vcpu_ioctl+0xa64/0xfe0 [ 149.110635][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.110663][ T6591] ? hook_file_ioctl+0x1f3/0x600 [ 149.110682][ T6591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 149.110709][ T6591] ? __fget_files+0x2a/0x420 [ 149.110727][ T6591] ? __fget_files+0x2a/0x420 [ 149.110742][ T6591] ? __fget_files+0x3a8/0x420 [ 149.110758][ T6591] ? __fget_files+0x2a/0x420 [ 149.110775][ T6591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 149.110794][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.110815][ T6591] __se_sys_ioctl+0xff/0x170 [ 149.110836][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.110851][ T6591] do_syscall_64+0x174/0x580 [ 149.110871][ T6591] ? trace_irq_disable+0x3b/0x140 [ 149.110890][ T6591] ? clear_bhb_loop+0x40/0x90 [ 149.110908][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.110923][ T6591] RIP: 0033:0x7fbebb04ce59 [ 149.110935][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.110948][ T6591] RSP: 002b:00007fbeba68d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.110963][ T6591] RAX: ffffffffffffffda RBX: 00007fbebb2c6090 RCX: 00007fbebb04ce59 [ 149.110988][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 149.110997][ T6591] RBP: 00007fbebb0e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 149.111006][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.111015][ T6591] R13: 00007fbebb2c6128 R14: 00007fbebb2c6090 R15: 00007ffefb5754e8 [ 149.111032][ T6591] [ 149.111650][ T6591] Kernel Offset: disabled