no interfaces have a carrier [ 57.025265][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.045007][ T5494] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. 2026/04/28 18:46:11 parsed 1 programs syzkaller login: [ 86.375157][ T5833] cgroup: Unknown subsys name 'net' [ 86.484147][ T5833] cgroup: Unknown subsys name 'cpuset' [ 86.493339][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.245046][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.540783][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.665488][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.673377][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.681292][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.689729][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.698571][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.955844][ T802] cfg80211: failed to load regulatory.db [ 92.045060][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.054813][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.096952][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.106796][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.366015][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 93.504638][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.512367][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.520059][ T5891] bridge_slave_0: entered allmulticast mode [ 93.527462][ T5891] bridge_slave_0: entered promiscuous mode [ 93.537911][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.545285][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.552758][ T5891] bridge_slave_1: entered allmulticast mode [ 93.560146][ T5891] bridge_slave_1: entered promiscuous mode [ 93.593988][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.606397][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.638751][ T5891] team0: Port device team_slave_0 added [ 93.646450][ T5891] team0: Port device team_slave_1 added [ 93.671787][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.678754][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.705626][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.718333][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.725538][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.751548][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.804793][ T5891] hsr_slave_0: entered promiscuous mode [ 93.811368][ T5891] hsr_slave_1: entered promiscuous mode [ 93.966258][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.978243][ T5891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.986476][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.996043][ T5891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.003981][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.014739][ T5891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.022665][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.034676][ T5891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.063643][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.071257][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.079048][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.086281][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.101467][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109607][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.165384][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.189285][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.202912][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.210131][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.225561][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.232717][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.411115][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.451951][ T5891] veth0_vlan: entered promiscuous mode [ 94.466159][ T5891] veth1_vlan: entered promiscuous mode [ 94.501152][ T5891] veth0_macvtap: entered promiscuous mode [ 94.511871][ T5891] veth1_macvtap: entered promiscuous mode [ 94.532049][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.547334][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.563457][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574023][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.585233][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595408][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751025][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.828188][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.933410][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.018098][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/28 18:46:25 executed programs: 0 [ 96.404003][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.415325][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.426474][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.435446][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.443228][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.604025][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 96.681062][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.688391][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.695826][ T5944] bridge_slave_0: entered allmulticast mode [ 96.703403][ T5944] bridge_slave_0: entered promiscuous mode [ 96.712707][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.720146][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.727550][ T5944] bridge_slave_1: entered allmulticast mode [ 96.735508][ T5944] bridge_slave_1: entered promiscuous mode [ 96.766957][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.778994][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.811771][ T5944] team0: Port device team_slave_0 added [ 96.819544][ T5944] team0: Port device team_slave_1 added [ 96.847962][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.855102][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.881043][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.893714][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.900794][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.926809][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.973446][ T5944] hsr_slave_0: entered promiscuous mode [ 96.980416][ T5944] hsr_slave_1: entered promiscuous mode [ 96.986577][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 96.993091][ T5944] Cannot create hsr debugfs directory [ 97.211148][ T65] bridge_slave_1: left allmulticast mode [ 97.220639][ T65] bridge_slave_1: left promiscuous mode [ 97.227550][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.243865][ T65] bridge_slave_0: left allmulticast mode [ 97.249601][ T65] bridge_slave_0: left promiscuous mode [ 97.255817][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.471505][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.484126][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.497594][ T65] bond0 (unregistering): Released all slaves [ 97.618373][ T65] hsr_slave_0: left promiscuous mode [ 97.632402][ T65] hsr_slave_1: left promiscuous mode [ 97.644492][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.652349][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.660936][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.668401][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.685657][ T65] veth1_macvtap: left promiscuous mode [ 97.692458][ T65] veth0_macvtap: left promiscuous mode [ 97.698173][ T65] veth1_vlan: left promiscuous mode [ 97.704142][ T65] veth0_vlan: left promiscuous mode [ 98.038239][ T65] team0 (unregistering): Port device team_slave_1 removed [ 98.064587][ T65] team0 (unregistering): Port device team_slave_0 removed [ 98.229591][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.491801][ T50] Bluetooth: hci0: command tx timeout [ 98.539694][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.552986][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.564238][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.577140][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.587824][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.601870][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.610417][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.622857][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.045387][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.096907][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.116494][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.123722][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.162587][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.169878][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.600507][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.675998][ T5944] veth0_vlan: entered promiscuous mode [ 99.698449][ T5944] veth1_vlan: entered promiscuous mode [ 99.742260][ T5944] veth0_macvtap: entered promiscuous mode [ 99.753213][ T5944] veth1_macvtap: entered promiscuous mode [ 99.782466][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.798248][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.830605][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.857533][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.877979][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.899732][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.958538][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.977503][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.028135][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.037196][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.109086][ T6012] [ 100.113455][ T6012] ============================= [ 100.119062][ T6012] WARNING: suspicious RCU usage [ 100.124041][ T6012] syzkaller #0 Not tainted [ 100.128519][ T6012] ----------------------------- [ 100.133435][ T6012] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 100.142130][ T6012] [ 100.142130][ T6012] other info that might help us debug this: [ 100.142130][ T6012] [ 100.152958][ T6012] [ 100.152958][ T6012] rcu_scheduler_active = 2, debug_locks = 1 [ 100.161509][ T6012] 1 lock held by syz.0.17/6012: [ 100.166427][ T6012] #0: ffffffff8e95ced8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 100.178156][ T6012] [ 100.178156][ T6012] stack backtrace: [ 100.184524][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 100.184551][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.184571][ T6012] Call Trace: [ 100.184583][ T6012] [ 100.184592][ T6012] dump_stack_lvl+0xe8/0x150 [ 100.184629][ T6012] lockdep_rcu_suspicious+0x13f/0x1d0 [ 100.184656][ T6012] get_callchain_entry+0x2b6/0x3c0 [ 100.184685][ T6012] get_perf_callchain+0xd5/0x880 [ 100.184715][ T6012] ? __pfx_get_perf_callchain+0x10/0x10 [ 100.184744][ T6012] ? __lock_acquire+0x6b5/0x2cf0 [ 100.184782][ T6012] __bpf_get_stack+0x445/0xab0 [ 100.184816][ T6012] ? __pfx___bpf_get_stack+0x10/0x10 [ 100.184844][ T6012] ? __lock_acquire+0x6b5/0x2cf0 [ 100.184880][ T6012] bpf_get_stack+0x33/0x50 [ 100.184901][ T6012] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 100.184942][ T6012] bpf_get_stack_raw_tp+0x1a9/0x220 [ 100.184975][ T6012] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 100.184995][ T6012] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 100.185029][ T6012] bpf_prog_test_run_syscall+0x318/0x4c0 [ 100.185059][ T6012] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 100.185093][ T6012] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 100.185121][ T6012] bpf_prog_test_run+0x2c7/0x340 [ 100.185154][ T6012] __sys_bpf+0x643/0x950 [ 100.185182][ T6012] ? __pfx___sys_bpf+0x10/0x10 [ 100.185229][ T6012] ? __pfx___se_sys_futex+0x10/0x10 [ 100.185251][ T6012] ? rcu_is_watching+0x15/0xb0 [ 100.185278][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.185300][ T6012] __x64_sys_bpf+0x7c/0x90 [ 100.185323][ T6012] do_syscall_64+0x15f/0xf80 [ 100.185353][ T6012] ? trace_irq_disable+0x3b/0x140 [ 100.185379][ T6012] ? clear_bhb_loop+0x40/0x90 [ 100.185414][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.185439][ T6012] RIP: 0033:0x7f579979cdd9 [ 100.185458][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.185474][ T6012] RSP: 002b:00007ffceb34cd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.185495][ T6012] RAX: ffffffffffffffda RBX: 00007f5799a15fa0 RCX: 00007f579979cdd9 [ 100.185509][ T6012] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 100.185521][ T6012] RBP: 00007f5799832d69 R08: 0000000000000000 R09: 0000000000000000 [ 100.185532][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.185543][ T6012] R13: 00007f5799a15fac R14: 00007f5799a15fa0 R15: 00007f5799a15fa0 [ 100.185575][ T6012] [ 100.571270][ T50] Bluetooth: hci0: command tx timeout