Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. 2026/02/14 14:09:33 parsed 1 programs [ 78.379626][ T5771] cgroup: Unknown subsys name 'net' [ 78.548479][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.306260][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.730610][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.740916][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.748962][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.762460][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.770378][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.778321][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.770484][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.873351][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.881257][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.888411][ T5826] bridge_slave_0: entered allmulticast mode [ 84.896030][ T5826] bridge_slave_0: entered promiscuous mode [ 84.904566][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.911799][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.918914][ T5826] bridge_slave_1: entered allmulticast mode [ 84.926368][ T5826] bridge_slave_1: entered promiscuous mode [ 84.955981][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.967086][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.992513][ T5826] team0: Port device team_slave_0 added [ 85.008704][ T5826] team0: Port device team_slave_1 added [ 85.029781][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.036845][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.062920][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.085543][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.092559][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.118584][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.167540][ T5826] hsr_slave_0: entered promiscuous mode [ 85.174654][ T5826] hsr_slave_1: entered promiscuous mode [ 85.318467][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.329653][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.349435][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.359470][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.393596][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.401190][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.409044][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.416318][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.484366][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.502821][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.511506][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.526504][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.552228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.559382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.585385][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.592572][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.794068][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.831794][ T5826] veth0_vlan: entered promiscuous mode [ 85.844400][ T5826] veth1_vlan: entered promiscuous mode [ 85.875960][ T5826] veth0_macvtap: entered promiscuous mode [ 85.885613][ T5826] veth1_macvtap: entered promiscuous mode [ 85.903711][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.918886][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.932241][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.942182][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.952612][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961454][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.106197][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.921659][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.930730][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.959506][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.967569][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.979936][ T28] cfg80211: failed to load regulatory.db 2026/02/14 14:09:45 executed programs: 0 [ 87.877583][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.886465][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.895452][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.903775][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.912537][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.920029][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.063206][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 88.120311][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.127577][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.136138][ T5885] bridge_slave_0: entered allmulticast mode [ 88.143673][ T5885] bridge_slave_0: entered promiscuous mode [ 88.152634][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.159826][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.167399][ T5885] bridge_slave_1: entered allmulticast mode [ 88.175739][ T5885] bridge_slave_1: entered promiscuous mode [ 88.202938][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.214457][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.243935][ T5885] team0: Port device team_slave_0 added [ 88.254695][ T5885] team0: Port device team_slave_1 added [ 88.276814][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.284020][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.310379][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.323406][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.330355][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.357573][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.396366][ T5885] hsr_slave_0: entered promiscuous mode [ 88.402683][ T5885] hsr_slave_1: entered promiscuous mode [ 88.408772][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.417973][ T5885] Cannot create hsr debugfs directory [ 88.824945][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.011447][ T51] Bluetooth: hci0: command tx timeout [ 91.082913][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.154510][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.094010][ T51] Bluetooth: hci0: command tx timeout [ 92.104423][ T62] hsr_slave_0: left promiscuous mode [ 92.113608][ T62] hsr_slave_1: left promiscuous mode [ 92.120451][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.128030][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.141036][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.148475][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.161681][ T62] bridge_slave_1: left allmulticast mode [ 92.167375][ T62] bridge_slave_1: left promiscuous mode [ 92.178101][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.193913][ T62] bridge_slave_0: left allmulticast mode [ 92.199593][ T62] bridge_slave_0: left promiscuous mode [ 92.205645][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.225465][ T62] veth1_macvtap: left promiscuous mode [ 92.231396][ T62] veth0_macvtap: left promiscuous mode [ 92.237447][ T62] veth1_vlan: left promiscuous mode [ 92.243015][ T62] veth0_vlan: left promiscuous mode [ 92.672060][ T62] team0 (unregistering): Port device team_slave_1 removed [ 92.706008][ T62] team0 (unregistering): Port device team_slave_0 removed [ 92.737857][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.775322][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.014484][ T62] bond0 (unregistering): Released all slaves [ 93.081565][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.093470][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.103531][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.113959][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.213300][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.244962][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.256356][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.263530][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.279048][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.286218][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.559791][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.656422][ T5885] veth0_vlan: entered promiscuous mode [ 93.667832][ T5885] veth1_vlan: entered promiscuous mode [ 93.693824][ T5885] veth0_macvtap: entered promiscuous mode [ 93.703942][ T5885] veth1_macvtap: entered promiscuous mode [ 93.719602][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.734419][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.745586][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.756184][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.765788][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.774579][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.834093][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.846164][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.870501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.879069][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/14 14:09:51 executed programs: 2 [ 93.980556][ T5931] [ 93.983062][ T5931] ============================= [ 93.988012][ T5931] WARNING: suspicious RCU usage [ 93.993072][ T5931] syzkaller #0 Not tainted [ 93.997499][ T5931] ----------------------------- [ 94.002442][ T5931] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 94.011127][ T5931] [ 94.011127][ T5931] other info that might help us debug this: [ 94.011127][ T5931] [ 94.021506][ T5931] [ 94.021506][ T5931] rcu_scheduler_active = 2, debug_locks = 1 [ 94.029588][ T5931] 1 lock held by syz.0.17/5931: [ 94.034573][ T5931] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 94.043475][ T5931] [ 94.043475][ T5931] stack backtrace: [ 94.049366][ T5931] CPU: 1 PID: 5931 Comm: syz.0.17 Not tainted syzkaller #0 [ 94.056582][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 94.066651][ T5931] Call Trace: [ 94.069932][ T5931] [ 94.072864][ T5931] dump_stack_lvl+0x18c/0x250 [ 94.077557][ T5931] ? show_regs_print_info+0x20/0x20 [ 94.082777][ T5931] ? load_image+0x400/0x400 [ 94.087316][ T5931] lockdep_rcu_suspicious+0x1e1/0x300 [ 94.092713][ T5931] ieee80211_check_concurrent_iface+0x475/0x950 [ 94.099021][ T5931] ieee80211_open+0xc1/0x200 [ 94.103650][ T5931] __dev_open+0x2cb/0x430 [ 94.108014][ T5931] ? dev_open+0x190/0x190 [ 94.112361][ T5931] __dev_change_flags+0x211/0x6a0 [ 94.117405][ T5931] ? dev_get_flags+0x1c0/0x1c0 [ 94.122196][ T5931] ? mutex_lock_nested+0x20/0x20 [ 94.127154][ T5931] dev_change_flags+0x88/0x1a0 [ 94.131936][ T5931] dev_ioctl+0x7b4/0x1140 [ 94.136286][ T5931] sock_do_ioctl+0x239/0x310 [ 94.140895][ T5931] ? sock_show_fdinfo+0xb0/0xb0 [ 94.145765][ T5931] sock_ioctl+0x5ba/0x7e0 [ 94.150107][ T5931] ? sock_poll+0x3e0/0x3e0 [ 94.154534][ T5931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 94.160529][ T5931] ? bpf_lsm_file_ioctl+0x9/0x10 [ 94.165476][ T5931] ? security_file_ioctl+0x80/0xa0 [ 94.170605][ T5931] ? sock_poll+0x3e0/0x3e0 [ 94.175033][ T5931] __se_sys_ioctl+0xfd/0x170 [ 94.179640][ T5931] do_syscall_64+0x55/0xa0 [ 94.184072][ T5931] ? clear_bhb_loop+0x40/0x90 [ 94.188759][ T5931] ? clear_bhb_loop+0x40/0x90 [ 94.193449][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.199350][ T5931] RIP: 0033:0x7f41b3f9bf79 [ 94.203779][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.223394][ T5931] RSP: 002b:00007ffe373ec238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.231853][ T5931] RAX: ffffffffffffffda RBX: 00007f41b4215fa0 RCX: 00007f41b3f9bf79 [ 94.239833][ T5931] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 94.247814][ T5931] RBP: 00007f41b40327e0 R08: 0000000000000000 R09: 0000000000000000 [ 94.255793][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.263771][ T5931] R13: 00007f41b4215fac R14: 00007f41b4215fa0 R15: 00007f41b4215fa0 [ 94.271766][ T5931] [ 94.282942][ T51] Bluetooth: hci0: command tx timeout [ 94.293344][ T5931] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 94.301496][ T5931] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 96.331825][ T51] Bluetooth: hci0: command tx timeout 2026/02/14 14:09:56 executed programs: 203 2026/02/14 14:10:01 executed programs: 445