Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. 2026/06/20 03:20:37 parsed 1 programs 2026/06/20 03:20:37 serving rpc on tcp://45083 syzkaller login: [ 79.467907][ T5787] cgroup: Unknown subsys name 'net' [ 79.585217][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.983492][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.585432][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 84.655241][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.663400][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.671609][ T5845] bridge_slave_0: entered allmulticast mode [ 84.681288][ T5845] bridge_slave_0: entered promiscuous mode [ 84.694308][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.701516][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.710596][ T5845] bridge_slave_1: entered allmulticast mode [ 84.717848][ T5845] bridge_slave_1: entered promiscuous mode [ 84.775368][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.786506][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.811380][ T5845] team0: Port device team_slave_0 added [ 84.819481][ T5845] team0: Port device team_slave_1 added [ 84.838647][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.845597][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.871513][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.883957][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.890977][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.917254][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.952394][ T5845] hsr_slave_0: entered promiscuous mode [ 84.958764][ T5845] hsr_slave_1: entered promiscuous mode [ 85.101776][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.116060][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.125382][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.149111][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.235652][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.270059][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.286685][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.293977][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.307051][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.314212][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.504496][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.556465][ T5845] veth0_vlan: entered promiscuous mode [ 85.572206][ T5845] veth1_vlan: entered promiscuous mode [ 85.613834][ T5845] veth0_macvtap: entered promiscuous mode [ 85.624614][ T5845] veth1_macvtap: entered promiscuous mode [ 85.648939][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.673683][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.687987][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703773][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713334][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722633][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.861646][ T5845] syz-executor (5845) used greatest stack depth: 20528 bytes left [ 85.907010][ T4329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.219977][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.228975][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.236852][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.245416][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.258386][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.266066][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.980272][ T28] cfg80211: failed to load regulatory.db [ 87.054307][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.062907][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.094376][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.102387][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/20 03:20:47 executed programs: 0 [ 87.518057][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.526734][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.536189][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.545056][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.553394][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.561041][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.677226][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 87.732691][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.740248][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.747464][ T5893] bridge_slave_0: entered allmulticast mode [ 87.754525][ T5893] bridge_slave_0: entered promiscuous mode [ 87.762598][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.774907][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.782436][ T5893] bridge_slave_1: entered allmulticast mode [ 87.789383][ T5893] bridge_slave_1: entered promiscuous mode [ 87.813707][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.826284][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.852831][ T5893] team0: Port device team_slave_0 added [ 87.861534][ T5893] team0: Port device team_slave_1 added [ 87.884772][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.891880][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.917997][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.930425][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.937384][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.963577][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.996803][ T5893] hsr_slave_0: entered promiscuous mode [ 88.003090][ T5893] hsr_slave_1: entered promiscuous mode [ 88.010840][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.018788][ T5893] Cannot create hsr debugfs directory [ 88.420617][ T4329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.609163][ T5086] Bluetooth: hci0: command tx timeout [ 90.646749][ T4329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.711230][ T4329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.594452][ T4329] hsr_slave_0: left promiscuous mode [ 91.600410][ T4329] hsr_slave_1: left promiscuous mode [ 91.606257][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.613906][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.623654][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.631823][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.640643][ T4329] bridge_slave_1: left allmulticast mode [ 91.646304][ T4329] bridge_slave_1: left promiscuous mode [ 91.652825][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.664255][ T4329] bridge_slave_0: left allmulticast mode [ 91.670971][ T4329] bridge_slave_0: left promiscuous mode [ 91.676643][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.688608][ T5086] Bluetooth: hci0: command tx timeout [ 91.701712][ T4329] veth1_macvtap: left promiscuous mode [ 91.707378][ T4329] veth0_macvtap: left promiscuous mode [ 91.713797][ T4329] veth1_vlan: left promiscuous mode [ 91.719363][ T4329] veth0_vlan: left promiscuous mode [ 92.094841][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 92.125752][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 92.156562][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.187681][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.385612][ T4329] bond0 (unregistering): Released all slaves [ 92.477098][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.487644][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.497818][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.507866][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.584117][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.617168][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.629518][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.636654][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.652529][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.659703][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.851687][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.934568][ T5893] veth0_vlan: entered promiscuous mode [ 92.968271][ T5893] veth1_vlan: entered promiscuous mode [ 93.002051][ T5893] veth0_macvtap: entered promiscuous mode [ 93.011559][ T5893] veth1_macvtap: entered promiscuous mode [ 93.027179][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.042391][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.054805][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063981][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.072816][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.081634][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136541][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.145400][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.170805][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.179540][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.243799][ T5932] [ 93.246205][ T5932] ============================= [ 93.251411][ T5932] WARNING: suspicious RCU usage [ 93.256277][ T5932] syzkaller #0 Not tainted [ 93.261018][ T5932] ----------------------------- [ 93.265871][ T5932] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 93.274602][ T5932] [ 93.274602][ T5932] other info that might help us debug this: [ 93.274602][ T5932] [ 93.285133][ T5932] [ 93.285133][ T5932] rcu_scheduler_active = 2, debug_locks = 1 [ 93.293664][ T5932] 1 lock held by syz.0.17/5932: [ 93.299000][ T5932] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 93.309653][ T5932] [ 93.309653][ T5932] stack backtrace: [ 93.315559][ T5932] CPU: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0 [ 93.322743][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.332792][ T5932] Call Trace: [ 93.336057][ T5932] [ 93.338974][ T5932] dump_stack_lvl+0x18c/0x250 [ 93.343649][ T5932] ? show_regs_print_info+0x20/0x20 [ 93.348840][ T5932] ? load_image+0x420/0x420 [ 93.353332][ T5932] lockdep_rcu_suspicious+0x1e1/0x300 [ 93.358693][ T5932] get_callchain_entry+0x2a9/0x3c0 [ 93.363803][ T5932] get_perf_callchain+0xc6/0x510 [ 93.368738][ T5932] ? put_callchain_entry+0xb0/0xb0 [ 93.373881][ T5932] ? __lock_acquire+0x7d80/0x7d80 [ 93.378925][ T5932] ? rcu_read_lock_sched_held+0x8a/0x110 [ 93.384548][ T5932] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 93.390693][ T5932] __bpf_get_stack+0x2e4/0x540 [ 93.395449][ T5932] ? stack_map_get_build_id_offset+0x720/0x720 [ 93.401595][ T5932] ? __cant_sleep+0x220/0x220 [ 93.406266][ T5932] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 93.411887][ T5932] bpf_get_stack_raw_tp+0x1a4/0x210 [ 93.417077][ T5932] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 93.422531][ T5932] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 93.427908][ T5932] bpf_prog_test_run_syscall+0x320/0x4b0 [ 93.433545][ T5932] ? sock_gen_cookie+0x60/0x60 [ 93.438313][ T5932] ? __fdget+0x14a/0x210 [ 93.442554][ T5932] ? sock_gen_cookie+0x60/0x60 [ 93.447311][ T5932] bpf_prog_test_run+0x31f/0x390 [ 93.452244][ T5932] __sys_bpf+0x49d/0x890 [ 93.456482][ T5932] ? bpf_link_show_fdinfo+0x390/0x390 [ 93.461858][ T5932] ? lock_chain_count+0x20/0x20 [ 93.466710][ T5932] __x64_sys_bpf+0x7c/0x90 [ 93.471139][ T5932] do_syscall_64+0x55/0xb0 [ 93.475565][ T5932] ? clear_bhb_loop+0x40/0x90 [ 93.480243][ T5932] ? clear_bhb_loop+0x40/0x90 [ 93.484922][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.490838][ T5932] RIP: 0033:0x7f5c8c19ce59 [ 93.495259][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.514871][ T5932] RSP: 002b:00007fff69cecb08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.523288][ T5932] RAX: ffffffffffffffda RBX: 00007f5c8c415fa0 RCX: 00007f5c8c19ce59 [ 93.531256][ T5932] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 93.539225][ T5932] RBP: 00007f5c8c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 93.547198][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.555164][ T5932] R13: 00007f5c8c415fac R14: 00007f5c8c415fa0 R15: 00007f5c8c415fa0 [ 93.563247][ T5932]