no interfaces have a carrier [ 55.340472][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.365726][ T5288] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. 2026/05/15 02:35:31 parsed 1 programs syzkaller login: [ 87.293515][ T5637] cgroup: Unknown subsys name 'net' [ 87.387856][ T5637] cgroup: Unknown subsys name 'cpuset' [ 87.398266][ T5637] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.139933][ T5637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.038710][ T29] cfg80211: failed to load regulatory.db [ 92.376992][ T5653] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.679048][ T4944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.689978][ T4944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.699260][ T4944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.708190][ T4944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.716428][ T4944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.068395][ T3358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.087416][ T3358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.157496][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.165715][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.559591][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.567014][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.575132][ T5723] bridge_slave_0: entered allmulticast mode [ 96.582875][ T5723] bridge_slave_0: entered promiscuous mode [ 96.592762][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.600210][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.607495][ T5723] bridge_slave_1: entered allmulticast mode [ 96.615034][ T5723] bridge_slave_1: entered promiscuous mode [ 96.643435][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.656111][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.684166][ T5723] team0: Port device team_slave_0 added [ 96.691813][ T5723] team0: Port device team_slave_1 added [ 96.716258][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.723228][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.749423][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.765517][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.772527][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.798861][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.839941][ T5723] hsr_slave_0: entered promiscuous mode [ 96.846955][ T5723] hsr_slave_1: entered promiscuous mode [ 96.992170][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.006586][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.014921][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.025183][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.033255][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.043433][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.051517][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.060742][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.142619][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.170126][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.184376][ T201] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.191949][ T201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.211042][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.218420][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.549666][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.603282][ T5723] veth0_vlan: entered promiscuous mode [ 97.618963][ T5723] veth1_vlan: entered promiscuous mode [ 97.650823][ T5723] veth0_macvtap: entered promiscuous mode [ 97.660280][ T5723] veth1_macvtap: entered promiscuous mode [ 97.682091][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.698909][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.716652][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.726621][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.740652][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.751895][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.920877][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.999934][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.085923][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.154360][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/15 02:35:45 executed programs: 0 [ 98.468672][ T4944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.478606][ T4944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.486609][ T4944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.495798][ T4944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.503674][ T4944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.958703][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.966402][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.973690][ T5764] bridge_slave_0: entered allmulticast mode [ 98.981349][ T5764] bridge_slave_0: entered promiscuous mode [ 98.989455][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.996908][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.004217][ T5764] bridge_slave_1: entered allmulticast mode [ 99.011874][ T5764] bridge_slave_1: entered promiscuous mode [ 99.043617][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.058061][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.094300][ T5764] team0: Port device team_slave_0 added [ 99.102839][ T5764] team0: Port device team_slave_1 added [ 99.131387][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.138596][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.165124][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.178646][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.185686][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.212322][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.257145][ T5764] hsr_slave_0: entered promiscuous mode [ 99.263420][ T5764] hsr_slave_1: entered promiscuous mode [ 99.269868][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 99.275700][ T5764] Cannot create hsr debugfs directory [ 100.156484][ T12] bridge_slave_1: left allmulticast mode [ 100.164241][ T12] bridge_slave_1: left promiscuous mode [ 100.171869][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.187854][ T12] bridge_slave_0: left allmulticast mode [ 100.193597][ T12] bridge_slave_0: left promiscuous mode [ 100.201029][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.437687][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.450393][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.462156][ T12] bond0 (unregistering): Released all slaves [ 100.572933][ T12] hsr_slave_0: left promiscuous mode [ 100.580462][ T12] hsr_slave_1: left promiscuous mode [ 100.587428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.595720][ T4944] Bluetooth: hci0: command tx timeout [ 100.598885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.610519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.618925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.638107][ T12] veth1_macvtap: left promiscuous mode [ 100.644492][ T12] veth0_macvtap: left promiscuous mode [ 100.650305][ T12] veth1_vlan: left promiscuous mode [ 100.655765][ T12] veth0_vlan: left promiscuous mode [ 100.898908][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.913675][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.008087][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.432893][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.449557][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.458217][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.471188][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.482584][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.496894][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.567111][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.578565][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.751708][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.776189][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.791368][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.798621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.819247][ T3358] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.826559][ T3358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.401878][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.476779][ T5764] veth0_vlan: entered promiscuous mode [ 102.493533][ T5764] veth1_vlan: entered promiscuous mode [ 102.538312][ T5764] veth0_macvtap: entered promiscuous mode [ 102.552347][ T5764] veth1_macvtap: entered promiscuous mode [ 102.579963][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.596781][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.618293][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.630069][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.647169][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.666295][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.675148][ T4944] Bluetooth: hci0: command tx timeout [ 102.758548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.773398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.820173][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.831248][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.944760][ T5851] [ 102.947657][ T5851] ============================= [ 102.952589][ T5851] WARNING: suspicious RCU usage [ 102.958016][ T5851] syzkaller #0 Not tainted [ 102.962608][ T5851] ----------------------------- [ 102.967657][ T5851] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 102.976314][ T5851] [ 102.976314][ T5851] other info that might help us debug this: [ 102.976314][ T5851] [ 102.986816][ T5851] [ 102.986816][ T5851] rcu_scheduler_active = 2, debug_locks = 1 [ 102.995067][ T5851] 1 lock held by syz.0.17/5851: [ 102.999953][ T5851] #0: ffffffff8e95cf58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 103.011627][ T5851] [ 103.011627][ T5851] stack backtrace: [ 103.018287][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 103.018313][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.018323][ T5851] Call Trace: [ 103.018330][ T5851] [ 103.018337][ T5851] dump_stack_lvl+0xe8/0x150 [ 103.018364][ T5851] lockdep_rcu_suspicious+0x13f/0x1d0 [ 103.018390][ T5851] get_callchain_entry+0x2b6/0x3c0 [ 103.018415][ T5851] get_perf_callchain+0xd5/0x880 [ 103.018444][ T5851] ? __pfx_get_perf_callchain+0x10/0x10 [ 103.018483][ T5851] __bpf_get_stack+0x445/0xab0 [ 103.018517][ T5851] ? __pfx___bpf_get_stack+0x10/0x10 [ 103.018546][ T5851] ? 0xffffffffa0202f1c [ 103.018564][ T5851] ? rcu_read_lock_trace+0x25/0x110 [ 103.018594][ T5851] bpf_get_stack+0x33/0x50 [ 103.018612][ T5851] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 103.018629][ T5851] bpf_get_stack_raw_tp+0x1a9/0x220 [ 103.018659][ T5851] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 103.018677][ T5851] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 103.018709][ T5851] bpf_prog_test_run_syscall+0x318/0x4c0 [ 103.018745][ T5851] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 103.018776][ T5851] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 103.018802][ T5851] bpf_prog_test_run+0x2c7/0x340 [ 103.018823][ T5851] __sys_bpf+0x643/0x950 [ 103.018852][ T5851] ? __pfx___sys_bpf+0x10/0x10 [ 103.018900][ T5851] ? __pfx___se_sys_futex+0x10/0x10 [ 103.018923][ T5851] ? rcu_is_watching+0x15/0xb0 [ 103.018951][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.018984][ T5851] __x64_sys_bpf+0x7c/0x90 [ 103.019011][ T5851] do_syscall_64+0x15f/0xf80 [ 103.019038][ T5851] ? trace_irq_disable+0x3b/0x140 [ 103.019065][ T5851] ? clear_bhb_loop+0x40/0x90 [ 103.019088][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.019109][ T5851] RIP: 0033:0x7f904c79ce59 [ 103.019128][ T5851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.019145][ T5851] RSP: 002b:00007ffcf2870428 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.019167][ T5851] RAX: ffffffffffffffda RBX: 00007f904ca15fa0 RCX: 00007f904c79ce59 [ 103.019181][ T5851] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 103.019194][ T5851] RBP: 00007f904c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 103.019207][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.019217][ T5851] R13: 00007f904ca15fac R14: 00007f904ca15fa0 R15: 00007f904ca15fa0 [ 103.019250][ T5851]