no interfaces have a carrier [ 51.926051][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.944606][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2026/02/15 13:51:55 parsed 1 programs syzkaller login: [ 87.203379][ T42] cfg80211: failed to load regulatory.db [ 88.090354][ T5780] cgroup: Unknown subsys name 'net' [ 88.228780][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.977026][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.919440][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 93.980282][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.988654][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.996443][ T5830] bridge_slave_0: entered allmulticast mode [ 94.004131][ T5830] bridge_slave_0: entered promiscuous mode [ 94.025428][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.033020][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.040436][ T5830] bridge_slave_1: entered allmulticast mode [ 94.047627][ T5830] bridge_slave_1: entered promiscuous mode [ 94.074303][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.100273][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.132030][ T5830] team0: Port device team_slave_0 added [ 94.141907][ T5830] team0: Port device team_slave_1 added [ 94.177558][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.184799][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.211578][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.225211][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.232357][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.259013][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.310784][ T5830] hsr_slave_0: entered promiscuous mode [ 94.318591][ T5830] hsr_slave_1: entered promiscuous mode [ 94.490340][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.502795][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.527696][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.537309][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.649474][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.674038][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.695786][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.703390][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.719350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.726758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.958563][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.004638][ T5830] veth0_vlan: entered promiscuous mode [ 95.016964][ T5830] veth1_vlan: entered promiscuous mode [ 95.048949][ T5830] veth0_macvtap: entered promiscuous mode [ 95.060352][ T5830] veth1_macvtap: entered promiscuous mode [ 95.080582][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.094988][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.108022][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118233][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.127097][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.136029][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.297926][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.307312][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.322740][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.325886][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.341773][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.350484][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.358660][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.762179][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.771300][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.804162][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.812574][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/15 13:52:06 executed programs: 0 [ 97.310079][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.320687][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.329499][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.339894][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.347963][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.359066][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.490872][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 97.552667][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.559983][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.568566][ T5882] bridge_slave_0: entered allmulticast mode [ 97.575902][ T5882] bridge_slave_0: entered promiscuous mode [ 97.585151][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.592602][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.599999][ T5882] bridge_slave_1: entered allmulticast mode [ 97.607221][ T5882] bridge_slave_1: entered promiscuous mode [ 97.633203][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.645355][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.674894][ T5882] team0: Port device team_slave_0 added [ 97.686176][ T5882] team0: Port device team_slave_1 added [ 97.709859][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.717294][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.743926][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.756709][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.764258][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.791085][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.816620][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.859053][ T5882] hsr_slave_0: entered promiscuous mode [ 97.866313][ T5882] hsr_slave_1: entered promiscuous mode [ 97.873183][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.881049][ T5882] Cannot create hsr debugfs directory [ 99.431805][ T5852] Bluetooth: hci0: command tx timeout [ 100.102263][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.176231][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.017522][ T11] hsr_slave_0: left promiscuous mode [ 101.024067][ T11] hsr_slave_1: left promiscuous mode [ 101.030992][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.041793][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.054099][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.062001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.070863][ T11] bridge_slave_1: left allmulticast mode [ 101.077212][ T11] bridge_slave_1: left promiscuous mode [ 101.084502][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.098050][ T11] bridge_slave_0: left allmulticast mode [ 101.105449][ T11] bridge_slave_0: left promiscuous mode [ 101.112461][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.142011][ T11] veth1_macvtap: left promiscuous mode [ 101.148342][ T11] veth0_macvtap: left promiscuous mode [ 101.154624][ T11] veth1_vlan: left promiscuous mode [ 101.160222][ T11] veth0_vlan: left promiscuous mode [ 101.513960][ T5852] Bluetooth: hci0: command tx timeout [ 101.642230][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.678318][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.715877][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.748990][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.998103][ T11] bond0 (unregistering): Released all slaves [ 102.125408][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.136348][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.148276][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.159651][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.287143][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.323683][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.343461][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.350848][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.362806][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.369938][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.416778][ T5882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.428314][ T5882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.646064][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.729843][ T5882] veth0_vlan: entered promiscuous mode [ 102.750660][ T5882] veth1_vlan: entered promiscuous mode [ 102.776645][ T5882] veth0_macvtap: entered promiscuous mode [ 102.786521][ T5882] veth1_macvtap: entered promiscuous mode [ 102.806114][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.821266][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.833849][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.843463][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.852701][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.862042][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.926997][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.940816][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.987196][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.996058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/15 13:52:12 executed programs: 2 [ 103.080885][ T5928] [ 103.083853][ T5928] ============================= [ 103.088734][ T5928] WARNING: suspicious RCU usage [ 103.094396][ T5928] syzkaller #0 Not tainted [ 103.098843][ T5928] ----------------------------- [ 103.103993][ T5928] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 103.112957][ T5928] [ 103.112957][ T5928] other info that might help us debug this: [ 103.112957][ T5928] [ 103.123571][ T5928] [ 103.123571][ T5928] rcu_scheduler_active = 2, debug_locks = 1 [ 103.132072][ T5928] 1 lock held by syz.0.17/5928: [ 103.136966][ T5928] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 103.146257][ T5928] [ 103.146257][ T5928] stack backtrace: [ 103.154022][ T5928] CPU: 0 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.161329][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.171752][ T5928] Call Trace: [ 103.175052][ T5928] [ 103.178102][ T5928] dump_stack_lvl+0x18c/0x250 [ 103.182945][ T5928] ? show_regs_print_info+0x20/0x20 [ 103.188188][ T5928] ? load_image+0x400/0x400 [ 103.192733][ T5928] lockdep_rcu_suspicious+0x1e1/0x300 [ 103.198230][ T5928] ieee80211_check_concurrent_iface+0x475/0x950 [ 103.204586][ T5928] ieee80211_open+0xc1/0x200 [ 103.209400][ T5928] __dev_open+0x2cb/0x430 [ 103.213736][ T5928] ? dev_open+0x190/0x190 [ 103.218084][ T5928] __dev_change_flags+0x211/0x6a0 [ 103.223224][ T5928] ? dev_get_flags+0x1c0/0x1c0 [ 103.228101][ T5928] ? mutex_lock_nested+0x20/0x20 [ 103.233073][ T5928] dev_change_flags+0x88/0x1a0 [ 103.237953][ T5928] dev_ioctl+0x7b4/0x1140 [ 103.242294][ T5928] sock_do_ioctl+0x239/0x310 [ 103.246888][ T5928] ? sock_show_fdinfo+0xb0/0xb0 [ 103.251787][ T5928] sock_ioctl+0x5ba/0x7e0 [ 103.256226][ T5928] ? sock_poll+0x3e0/0x3e0 [ 103.260687][ T5928] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 103.267121][ T5928] ? bpf_lsm_file_ioctl+0x9/0x10 [ 103.272342][ T5928] ? security_file_ioctl+0x80/0xa0 [ 103.277559][ T5928] ? sock_poll+0x3e0/0x3e0 [ 103.282168][ T5928] __se_sys_ioctl+0xfd/0x170 [ 103.286799][ T5928] do_syscall_64+0x55/0xa0 [ 103.291259][ T5928] ? clear_bhb_loop+0x40/0x90 [ 103.295969][ T5928] ? clear_bhb_loop+0x40/0x90 [ 103.300697][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.307174][ T5928] RIP: 0033:0x7f511c99bf79 [ 103.311726][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.331895][ T5928] RSP: 002b:00007fffef2f8be8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.341090][ T5928] RAX: ffffffffffffffda RBX: 00007f511cc15fa0 RCX: 00007f511c99bf79 [ 103.349263][ T5928] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 103.357695][ T5928] RBP: 00007f511ca327e0 R08: 0000000000000000 R09: 0000000000000000 [ 103.365678][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.373666][ T5928] R13: 00007f511cc15fac R14: 00007f511cc15fa0 R15: 00007f511cc15fa0 [ 103.381661][ T5928] [ 103.395465][ T5928] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 103.405307][ T5928] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 103.592088][ T5852] Bluetooth: hci0: command tx timeout [ 105.672452][ T5852] Bluetooth: hci0: command tx timeout 2026/02/15 13:52:17 executed programs: 154 2026/02/15 13:52:22 executed programs: 338