no interfaces have a carrier [ 65.774474][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.799276][ T5438] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. 2026/08/09 07:25:42 parsed 1 programs 2026/08/09 07:25:42 serving rpc on tcp://39841 syzkaller login: [ 97.867768][ T8] cfg80211: failed to load regulatory.db [ 99.093490][ T5788] cgroup: Unknown subsys name 'net' [ 99.240038][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.112305][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.625077][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.642808][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.653076][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.663783][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.673668][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.686830][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.201992][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 104.304267][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.313010][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.321763][ T5825] bridge_slave_0: entered allmulticast mode [ 104.329734][ T5825] bridge_slave_0: entered promiscuous mode [ 104.341070][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.349051][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.356695][ T5825] bridge_slave_1: entered allmulticast mode [ 104.367903][ T5825] bridge_slave_1: entered promiscuous mode [ 104.409623][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.424218][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.467219][ T5825] team0: Port device team_slave_0 added [ 104.477050][ T5825] team0: Port device team_slave_1 added [ 104.510017][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.517139][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.555156][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.571392][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.580536][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.612781][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.676790][ T5825] hsr_slave_0: entered promiscuous mode [ 104.686198][ T5825] hsr_slave_1: entered promiscuous mode [ 104.902201][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.916039][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.939347][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.952623][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.005454][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.013060][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.021635][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.029139][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.120771][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.165608][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.180399][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.212986][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.241962][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.250659][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.271819][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.279926][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.650557][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.723553][ T5825] veth0_vlan: entered promiscuous mode [ 105.745137][ T5825] veth1_vlan: entered promiscuous mode [ 105.788988][ T5825] veth0_macvtap: entered promiscuous mode [ 105.800678][ T5825] veth1_macvtap: entered promiscuous mode [ 105.825325][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.841495][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.855152][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.865806][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.875885][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.886386][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.072726][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.573903][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.587008][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.630712][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.641723][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.516201][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/09 07:25:55 executed programs: 0 [ 109.473691][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.482725][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.494885][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.504474][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.515262][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.526192][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.689766][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 109.770227][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.777798][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.785141][ T5893] bridge_slave_0: entered allmulticast mode [ 109.792611][ T5893] bridge_slave_0: entered promiscuous mode [ 109.801747][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.809717][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.818421][ T5893] bridge_slave_1: entered allmulticast mode [ 109.826068][ T5893] bridge_slave_1: entered promiscuous mode [ 109.858760][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.872465][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.909711][ T5893] team0: Port device team_slave_0 added [ 109.921360][ T5893] team0: Port device team_slave_1 added [ 109.950289][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.957788][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.984238][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.996901][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.004273][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.031548][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.077137][ T5893] hsr_slave_0: entered promiscuous mode [ 110.086229][ T5893] hsr_slave_1: entered promiscuous mode [ 110.093548][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.103934][ T5893] Cannot create hsr debugfs directory [ 110.891950][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.956499][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.618639][ T51] Bluetooth: hci0: command tx timeout [ 111.903952][ T11] hsr_slave_0: left promiscuous mode [ 111.911241][ T11] hsr_slave_1: left promiscuous mode [ 111.920658][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.929299][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.943566][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.951810][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.962711][ T11] bridge_slave_1: left allmulticast mode [ 111.968944][ T11] bridge_slave_1: left promiscuous mode [ 111.976366][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.993941][ T11] bridge_slave_0: left allmulticast mode [ 112.001795][ T11] bridge_slave_0: left promiscuous mode [ 112.011314][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.047869][ T11] veth1_macvtap: left promiscuous mode [ 112.054560][ T11] veth0_macvtap: left promiscuous mode [ 112.065165][ T11] veth1_vlan: left promiscuous mode [ 112.071364][ T11] veth0_vlan: left promiscuous mode [ 112.721224][ T11] team0 (unregistering): Port device team_slave_1 removed [ 112.767029][ T11] team0 (unregistering): Port device team_slave_0 removed [ 112.805653][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.852084][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.153651][ T11] bond0 (unregistering): Released all slaves [ 113.261214][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.272400][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.284747][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.296309][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.444471][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.464783][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.478560][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.485770][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.507912][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.516254][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.698992][ T51] Bluetooth: hci0: command tx timeout [ 113.904324][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.010153][ T5893] veth0_vlan: entered promiscuous mode [ 114.039408][ T5893] veth1_vlan: entered promiscuous mode [ 114.088708][ T5893] veth0_macvtap: entered promiscuous mode [ 114.102006][ T5893] veth1_macvtap: entered promiscuous mode [ 114.128523][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.145859][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.162151][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.174348][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.184641][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.194987][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.394191][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.404683][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.502419][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.512528][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.868134][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.057623][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 115.080850][ T8] usb 1-1: config 0 has no interfaces? [ 115.092414][ T8] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 115.102952][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.112540][ T8] usb 1-1: Product: syz [ 115.116793][ T8] usb 1-1: Manufacturer: syz [ 115.124725][ T8] usb 1-1: SerialNumber: syz [ 115.148212][ T8] usb 1-1: config 0 descriptor?? [ 115.375618][ T5932] dummy_hcd dummy_hcd.0: remove, state 1 [ 115.397998][ T5932] usb usb1: USB disconnect, device number 1 [ 115.412182][ T5932] usb 1-1: USB disconnect, device number 2 [ 115.461842][ T5932] dummy_hcd dummy_hcd.0: stopped [ 115.472507][ T5932] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 115.503514][ T5932] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 115.516024][ T5932] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 115.524592][ T5932] CPU: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0 [ 115.532013][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.542735][ T5932] RIP: 0010:set_link_state+0x27/0x1000 [ 115.548605][ T5932] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 80 04 cd fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 db 86 25 fb 49 8b 0e 4d 8d a6 93 00 [ 115.568794][ T5932] RSP: 0018:ffffc900031cfb18 EFLAGS: 00010046 [ 115.575194][ T5932] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880245a1e00 [ 115.583563][ T5932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.591613][ T5932] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 115.599724][ T5932] R10: dffffc0000000000 R11: fffff52000639f4c R12: 0000000000000a06 [ 115.607902][ T5932] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.616017][ T5932] FS: 0000555568892500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 115.625038][ T5932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.631890][ T5932] CR2: 0000562357004150 CR3: 0000000075bca000 CR4: 00000000003506f0 [ 115.639907][ T5932] Call Trace: [ 115.643276][ T5932] [ 115.646251][ T5932] ? mutex_lock_nested+0x20/0x20 [ 115.651525][ T5932] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 115.657502][ T5932] dummy_pullup+0xc1/0x120 [ 115.662203][ T5932] ? dummy_set_selfpowered+0x150/0x150 [ 115.667778][ T5932] usb_gadget_disconnect_locked+0x120/0x440 [ 115.673726][ T5932] gadget_unbind_driver+0xc2/0x3e0 [ 115.678892][ T5932] ? gadget_bind_driver+0x770/0x770 [ 115.684144][ T5932] device_release_driver_internal+0x408/0x6f0 [ 115.690406][ T5932] driver_detach+0x1f3/0x2d0 [ 115.695068][ T5932] bus_remove_driver+0x221/0x2f0 [ 115.700065][ T5932] usb_gadget_unregister_driver+0x4e/0x70 [ 115.705851][ T5932] raw_release+0xda/0x260 [ 115.710233][ T5932] ? raw_open+0x520/0x520 [ 115.714700][ T5932] __fput+0x221/0x940 [ 115.718809][ T5932] task_work_run+0x1d4/0x260 [ 115.723570][ T5932] ? task_work_cancel+0x220/0x220 [ 115.728719][ T5932] ? exit_to_user_mode_loop+0x3b/0x110 [ 115.734329][ T5932] exit_to_user_mode_loop+0xe6/0x110 [ 115.739679][ T5932] exit_to_user_mode_prepare+0xee/0x180 [ 115.745272][ T5932] syscall_exit_to_user_mode+0x1a/0x50 [ 115.750885][ T5932] do_syscall_64+0x61/0xb0 [ 115.755353][ T5932] ? clear_bhb_loop+0x40/0x90 [ 115.760112][ T5932] ? clear_bhb_loop+0x40/0x90 [ 115.764834][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.770870][ T5932] RIP: 0033:0x7ff9b719e0d9 [ 115.775342][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.795004][ T5932] RSP: 002b:00007ffedeb75628 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.803472][ T5932] RAX: 0000000000000000 RBX: 00007ffedeb75710 RCX: 00007ff9b719e0d9 [ 115.811502][ T5932] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 115.819510][ T5932] RBP: 000000000001bf49 R08: 0000000000000001 R09: 0000000000000000 [ 115.827594][ T5932] R10: 0000001b2c420000 R11: 0000000000000246 R12: 0000000000000000 [ 115.835603][ T5932] R13: 00007ff9b7425fac R14: 00007ff9b7425fa8 R15: 00007ff9b7425fa0 [ 115.843650][ T5932] [ 115.846878][ T5932] Modules linked in: [ 115.850822][ T5932] ---[ end trace 0000000000000000 ]--- [ 115.856297][ T5932] RIP: 0010:set_link_state+0x27/0x1000 [ 115.861932][ T5932] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 80 04 cd fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 db 86 25 fb 49 8b 0e 4d 8d a6 93 00 [ 115.881979][ T5932] RSP: 0018:ffffc900031cfb18 EFLAGS: 00010046 [ 115.888081][ T5932] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff8880245a1e00 [ 115.896089][ T5932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.904180][ T5932] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 115.912187][ T5932] R10: dffffc0000000000 R11: fffff52000639f4c R12: 0000000000000a06 [ 115.920372][ T5932] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.928395][ T5932] FS: 0000555568892500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 115.937371][ T5932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.943984][ T5932] CR2: 0000562357004150 CR3: 0000000075bca000 CR4: 00000000003506f0 [ 115.952091][ T5932] Kernel panic - not syncing: Fatal exception [ 115.958832][ T5932] Kernel Offset: disabled [ 115.963173][ T5932] Rebooting in 86400 seconds..