no interfaces have a carrier [ 38.518181][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.529152][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. 2026/06/09 01:02:09 parsed 1 programs syzkaller login: [ 76.202771][ T5787] cgroup: Unknown subsys name 'net' [ 76.347685][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.859303][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.209670][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 80.278426][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.287946][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.295280][ T5817] bridge_slave_0: entered allmulticast mode [ 80.302713][ T5817] bridge_slave_0: entered promiscuous mode [ 80.324108][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.331308][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.338539][ T5817] bridge_slave_1: entered allmulticast mode [ 80.346201][ T5817] bridge_slave_1: entered promiscuous mode [ 80.374075][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.384952][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.409019][ T5817] team0: Port device team_slave_0 added [ 80.416457][ T5817] team0: Port device team_slave_1 added [ 80.435360][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.442337][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.468299][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.480931][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.487917][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.514311][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.560248][ T5817] hsr_slave_0: entered promiscuous mode [ 80.566515][ T5817] hsr_slave_1: entered promiscuous mode [ 80.694681][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.705359][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.715727][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.725939][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.756705][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764151][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.772081][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.779160][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.836442][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.863411][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.872409][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.889449][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.907864][ T241] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.915067][ T241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.928192][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.935332][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.105647][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.151997][ T5817] veth0_vlan: entered promiscuous mode [ 81.163160][ T5817] veth1_vlan: entered promiscuous mode [ 81.194126][ T5817] veth0_macvtap: entered promiscuous mode [ 81.213726][ T5817] veth1_macvtap: entered promiscuous mode [ 81.237158][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.250661][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.265140][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.274169][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.283537][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.292688][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.439215][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.591173][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.601168][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.614153][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.623609][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.632010][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.639267][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.694214][ T28] cfg80211: failed to load regulatory.db [ 83.041824][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.049803][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.076396][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.084482][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.884027][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/09 01:02:18 executed programs: 0 [ 84.005360][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.013716][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.021203][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.030291][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.038338][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.045715][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.156508][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 84.207115][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.214312][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.221478][ T5886] bridge_slave_0: entered allmulticast mode [ 84.228135][ T5886] bridge_slave_0: entered promiscuous mode [ 84.235665][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.242969][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.250085][ T5886] bridge_slave_1: entered allmulticast mode [ 84.257194][ T5886] bridge_slave_1: entered promiscuous mode [ 84.278837][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.289888][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.314539][ T5886] team0: Port device team_slave_0 added [ 84.323739][ T5886] team0: Port device team_slave_1 added [ 84.344082][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.351060][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.377370][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.389311][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.396355][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.426969][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.460295][ T5886] hsr_slave_0: entered promiscuous mode [ 84.466517][ T5886] hsr_slave_1: entered promiscuous mode [ 84.472875][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.480702][ T5886] Cannot create hsr debugfs directory [ 86.092014][ T5839] Bluetooth: hci0: command tx timeout [ 86.421990][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.494577][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.328494][ T59] hsr_slave_0: left promiscuous mode [ 87.334718][ T59] hsr_slave_1: left promiscuous mode [ 87.340569][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.348077][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.356796][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.364330][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.372494][ T59] bridge_slave_1: left allmulticast mode [ 87.378149][ T59] bridge_slave_1: left promiscuous mode [ 87.385254][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.396237][ T59] bridge_slave_0: left allmulticast mode [ 87.401976][ T59] bridge_slave_0: left promiscuous mode [ 87.407614][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.428568][ T59] veth1_macvtap: left promiscuous mode [ 87.434256][ T59] veth0_macvtap: left promiscuous mode [ 87.440140][ T59] veth1_vlan: left promiscuous mode [ 87.445737][ T59] veth0_vlan: left promiscuous mode [ 87.797776][ T59] team0 (unregistering): Port device team_slave_1 removed [ 87.828383][ T59] team0 (unregistering): Port device team_slave_0 removed [ 87.854601][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.885483][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.072325][ T59] bond0 (unregistering): Released all slaves [ 88.152326][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.163150][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.172522][ T5839] Bluetooth: hci0: command tx timeout [ 88.174346][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.188206][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.267586][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.286810][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.300989][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.308152][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.330256][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.337412][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.523175][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.569255][ T5886] veth0_vlan: entered promiscuous mode [ 88.589600][ T5886] veth1_vlan: entered promiscuous mode [ 88.646152][ T5886] veth0_macvtap: entered promiscuous mode [ 88.656731][ T5886] veth1_macvtap: entered promiscuous mode [ 88.691292][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.722502][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.740521][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.749933][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.758690][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.767872][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.844708][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.853710][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.881249][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.890108][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.938047][ T5926] [ 88.940795][ T5926] ============================= [ 88.945747][ T5926] WARNING: suspicious RCU usage [ 88.950599][ T5926] syzkaller #0 Not tainted [ 88.955101][ T5926] ----------------------------- [ 88.959952][ T5926] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 88.968500][ T5926] [ 88.968500][ T5926] other info that might help us debug this: [ 88.968500][ T5926] [ 88.978792][ T5926] [ 88.978792][ T5926] rcu_scheduler_active = 2, debug_locks = 1 [ 88.987267][ T5926] 1 lock held by syz.0.17/5926: [ 88.992477][ T5926] #0: ffffffff8d132340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 89.002956][ T5926] [ 89.002956][ T5926] stack backtrace: [ 89.008880][ T5926] CPU: 1 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0 [ 89.016060][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.026110][ T5926] Call Trace: [ 89.029380][ T5926] [ 89.032301][ T5926] dump_stack_lvl+0x18c/0x250 [ 89.036969][ T5926] ? show_regs_print_info+0x20/0x20 [ 89.042169][ T5926] ? load_image+0x420/0x420 [ 89.046688][ T5926] lockdep_rcu_suspicious+0x1e1/0x300 [ 89.052065][ T5926] get_callchain_entry+0x2a9/0x3c0 [ 89.057169][ T5926] get_perf_callchain+0xc6/0x510 [ 89.062103][ T5926] ? put_callchain_entry+0xb0/0xb0 [ 89.067223][ T5926] ? __lock_acquire+0x7d40/0x7d40 [ 89.072243][ T5926] ? rcu_read_lock_sched_held+0x8a/0x110 [ 89.077864][ T5926] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 89.084012][ T5926] __bpf_get_stack+0x2e4/0x540 [ 89.088776][ T5926] ? stack_map_get_build_id_offset+0x720/0x720 [ 89.094927][ T5926] ? __cant_sleep+0x220/0x220 [ 89.099596][ T5926] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 89.105248][ T5926] bpf_get_stack_raw_tp+0x1a9/0x210 [ 89.110442][ T5926] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 89.115897][ T5926] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 89.121270][ T5926] bpf_prog_test_run_syscall+0x317/0x4a0 [ 89.126900][ T5926] ? sock_gen_cookie+0x60/0x60 [ 89.131665][ T5926] ? __fdget+0x14a/0x210 [ 89.135900][ T5926] ? sock_gen_cookie+0x60/0x60 [ 89.140661][ T5926] bpf_prog_test_run+0x321/0x390 [ 89.145595][ T5926] __sys_bpf+0x49d/0x890 [ 89.149833][ T5926] ? bpf_link_show_fdinfo+0x390/0x390 [ 89.155208][ T5926] ? lock_chain_count+0x20/0x20 [ 89.160060][ T5926] __x64_sys_bpf+0x7c/0x90 [ 89.164472][ T5926] do_syscall_64+0x55/0xb0 [ 89.168880][ T5926] ? clear_bhb_loop+0x40/0x90 [ 89.173545][ T5926] ? clear_bhb_loop+0x40/0x90 [ 89.178211][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.184098][ T5926] RIP: 0033:0x7f506039ce59 [ 89.188504][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.208097][ T5926] RSP: 002b:00007fff0317bba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.216500][ T5926] RAX: ffffffffffffffda RBX: 00007f5060615fa0 RCX: 00007f506039ce59 [ 89.224462][ T5926] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 89.232422][ T5926] RBP: 00007f5060432d6f R08: 0000000000000000 R09: 0000000000000000 [ 89.240380][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.248342][ T5926] R13: 00007f5060615fac R14: 00007f5060615fa0 R15: 00007f5060615fa0 [ 89.256318][ T5926]