Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. 2026/05/27 10:01:19 parsed 1 programs [ 86.830947][ T5782] cgroup: Unknown subsys name 'net' [ 86.949639][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.829873][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.962222][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 91.041231][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.048972][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.056583][ T5803] bridge_slave_0: entered allmulticast mode [ 91.064067][ T5803] bridge_slave_0: entered promiscuous mode [ 91.074081][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.081331][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.088487][ T5803] bridge_slave_1: entered allmulticast mode [ 91.095835][ T5803] bridge_slave_1: entered promiscuous mode [ 91.128507][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.140761][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.176930][ T5803] team0: Port device team_slave_0 added [ 91.185715][ T5803] team0: Port device team_slave_1 added [ 91.211275][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.218329][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.245915][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.263583][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.270910][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.296873][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.340645][ T5803] hsr_slave_0: entered promiscuous mode [ 91.347275][ T5803] hsr_slave_1: entered promiscuous mode [ 91.520178][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.533745][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.544595][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.554557][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.597594][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604943][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.612970][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.620207][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.693554][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.714724][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.723700][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.742719][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.756452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.763692][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.777480][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.784663][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.985962][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.031350][ T5803] veth0_vlan: entered promiscuous mode [ 92.044917][ T5803] veth1_vlan: entered promiscuous mode [ 92.076402][ T5803] veth0_macvtap: entered promiscuous mode [ 92.087978][ T5803] veth1_macvtap: entered promiscuous mode [ 92.109153][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.126673][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.139469][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.148488][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.161871][ T8] cfg80211: failed to load regulatory.db [ 92.168020][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176888][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.341197][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.523641][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.532895][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.542226][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.555139][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.563713][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.572268][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.873957][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.882343][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.917616][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.926795][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.797257][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/27 10:01:31 executed programs: 0 [ 96.432452][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.442458][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.452209][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.462812][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.472513][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.480298][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.635001][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 96.708298][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.715568][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.723091][ T5889] bridge_slave_0: entered allmulticast mode [ 96.730938][ T5889] bridge_slave_0: entered promiscuous mode [ 96.739326][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.746915][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.754225][ T5889] bridge_slave_1: entered allmulticast mode [ 96.761935][ T5889] bridge_slave_1: entered promiscuous mode [ 96.792209][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.805262][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.837894][ T5889] team0: Port device team_slave_0 added [ 96.846175][ T5889] team0: Port device team_slave_1 added [ 96.872872][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.880390][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.906881][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.919311][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.926358][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.952490][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.996798][ T5889] hsr_slave_0: entered promiscuous mode [ 97.003463][ T5889] hsr_slave_1: entered promiscuous mode [ 97.010661][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.018555][ T5889] Cannot create hsr debugfs directory [ 97.286943][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.356254][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.225423][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.255197][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.266772][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.282179][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.321648][ T71] hsr_slave_0: left promiscuous mode [ 98.328517][ T71] hsr_slave_1: left promiscuous mode [ 98.339513][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.350134][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.358820][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.369127][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.377510][ T71] bridge_slave_1: left allmulticast mode [ 98.385676][ T71] bridge_slave_1: left promiscuous mode [ 98.393074][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.408856][ T71] bridge_slave_0: left allmulticast mode [ 98.416432][ T71] bridge_slave_0: left promiscuous mode [ 98.425064][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.459932][ T71] veth1_macvtap: left promiscuous mode [ 98.465883][ T71] veth0_macvtap: left promiscuous mode [ 98.474607][ T71] veth1_vlan: left promiscuous mode [ 98.480359][ T71] veth0_vlan: left promiscuous mode [ 98.552545][ T5081] Bluetooth: hci0: command tx timeout [ 98.995818][ T71] team0 (unregistering): Port device team_slave_1 removed [ 99.039044][ T71] team0 (unregistering): Port device team_slave_0 removed [ 99.070104][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.106040][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.399644][ T71] bond0 (unregistering): Released all slaves [ 99.568744][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.595015][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.621753][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.628990][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.654358][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.661641][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.012065][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.109239][ T5889] veth0_vlan: entered promiscuous mode [ 100.126497][ T5889] veth1_vlan: entered promiscuous mode [ 100.186628][ T5889] veth0_macvtap: entered promiscuous mode [ 100.198652][ T5889] veth1_macvtap: entered promiscuous mode [ 100.241971][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.276456][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.294928][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.305215][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.315084][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.324161][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.441438][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.454173][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.485205][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.494360][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.562691][ T5930] [ 100.565073][ T5930] ============================= [ 100.570077][ T5930] WARNING: suspicious RCU usage [ 100.574964][ T5930] syzkaller #0 Not tainted [ 100.580014][ T5930] ----------------------------- [ 100.585074][ T5930] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 100.593592][ T5930] [ 100.593592][ T5930] other info that might help us debug this: [ 100.593592][ T5930] [ 100.603892][ T5930] [ 100.603892][ T5930] rcu_scheduler_active = 2, debug_locks = 1 [ 100.612096][ T5930] 1 lock held by syz.0.17/5930: [ 100.616984][ T5930] #0: ffffffff8e3c4308 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 100.626232][ T5930] [ 100.626232][ T5930] stack backtrace: [ 100.632487][ T5930] CPU: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.639786][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.640318][ T5081] Bluetooth: hci0: command tx timeout [ 100.649879][ T5930] Call Trace: [ 100.649927][ T5930] [ 100.649937][ T5930] dump_stack_lvl+0x18c/0x250 [ 100.666268][ T5930] ? show_regs_print_info+0x20/0x20 [ 100.671489][ T5930] ? load_image+0x420/0x420 [ 100.676032][ T5930] lockdep_rcu_suspicious+0x1e1/0x300 [ 100.681447][ T5930] ieee80211_check_concurrent_iface+0x475/0x950 [ 100.687783][ T5930] ieee80211_open+0xc1/0x200 [ 100.692438][ T5930] __dev_open+0x2cb/0x430 [ 100.696832][ T5930] ? dev_open+0x190/0x190 [ 100.701197][ T5930] __dev_change_flags+0x211/0x6a0 [ 100.706251][ T5930] ? dev_get_flags+0x1c0/0x1c0 [ 100.711039][ T5930] ? mutex_lock_nested+0x20/0x20 [ 100.716001][ T5930] ? apparmor_capable+0x137/0x1a0 [ 100.721074][ T5930] dev_change_flags+0x88/0x1a0 [ 100.725868][ T5930] devinet_ioctl+0x95c/0x1c40 [ 100.730572][ T5930] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 100.735708][ T5930] ? _copy_from_user+0xa5/0xe0 [ 100.740513][ T5930] ? get_user_ifreq+0x12b/0x180 [ 100.745416][ T5930] inet_ioctl+0x42b/0x560 [ 100.749816][ T5930] ? tomoyo_path_number_perm+0x217/0x620 [ 100.755476][ T5930] ? inet_shutdown+0x370/0x370 [ 100.760278][ T5930] ? slab_free_freelist_hook+0x130/0x1a0 [ 100.765940][ T5930] ? tomoyo_path_number_perm+0x500/0x620 [ 100.771597][ T5930] ? __kmem_cache_free+0xba/0x1e0 [ 100.776667][ T5930] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.782156][ T5930] sock_do_ioctl+0xfc/0x310 [ 100.786696][ T5930] ? sock_show_fdinfo+0xb0/0xb0 [ 100.791594][ T5930] sock_ioctl+0x5ba/0x7e0 [ 100.795954][ T5930] ? sock_poll+0x3e0/0x3e0 [ 100.800406][ T5930] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 100.806418][ T5930] ? bpf_lsm_file_ioctl+0x9/0x10 [ 100.811379][ T5930] ? security_file_ioctl+0x80/0xa0 [ 100.816529][ T5930] ? sock_poll+0x3e0/0x3e0 [ 100.820976][ T5930] __se_sys_ioctl+0xfd/0x170 [ 100.825602][ T5930] do_syscall_64+0x55/0xb0 [ 100.830057][ T5930] ? clear_bhb_loop+0x40/0x90 [ 100.834776][ T5930] ? clear_bhb_loop+0x40/0x90 [ 100.839491][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.845426][ T5930] RIP: 0033:0x7f9ddfb9ce59 [ 100.849886][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.869547][ T5930] RSP: 002b:00007ffd1c6e43b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.877992][ T5930] RAX: ffffffffffffffda RBX: 00007f9ddfe15fa0 RCX: 00007f9ddfb9ce59 [ 100.885998][ T5930] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 100.894007][ T5930] RBP: 00007f9ddfc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 100.902006][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.910001][ T5930] R13: 00007f9ddfe15fac R14: 00007f9ddfe15fa0 R15: 00007f9ddfe15fa0 [ 100.918013][ T5930]