Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. 2026/02/15 04:32:43 parsed 1 programs [ 71.098539][ T5770] cgroup: Unknown subsys name 'net' [ 71.235507][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.616054][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.622846][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.675493][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.642875][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.653288][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.662933][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.671818][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.681118][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.689714][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.472253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486977][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.522098][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.530868][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.570485][ T5846] syz-executor (5846) used greatest stack depth: 20720 bytes left [ 77.616158][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 77.679352][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.687172][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.694601][ T5851] bridge_slave_0: entered allmulticast mode [ 77.705192][ T5851] bridge_slave_0: entered promiscuous mode [ 77.713998][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.721178][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.728408][ T5851] bridge_slave_1: entered allmulticast mode [ 77.735314][ T5851] bridge_slave_1: entered promiscuous mode [ 77.766309][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.779574][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.821077][ T5851] team0: Port device team_slave_0 added [ 77.828324][ T5851] team0: Port device team_slave_1 added [ 77.848272][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.855448][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.881577][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.894806][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.902081][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.928339][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.971947][ T5851] hsr_slave_0: entered promiscuous mode [ 77.978602][ T5851] hsr_slave_1: entered promiscuous mode [ 78.124245][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.134676][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.144224][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.154677][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.205455][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.213101][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.221337][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.228427][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.314352][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.332380][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.343018][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.365889][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.386984][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.394121][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.412828][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.419982][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.642920][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.677064][ T5851] veth0_vlan: entered promiscuous mode [ 78.687391][ T5851] veth1_vlan: entered promiscuous mode [ 78.724095][ T5851] veth0_macvtap: entered promiscuous mode [ 78.732891][ T5851] veth1_macvtap: entered promiscuous mode [ 78.753668][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.775034][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.786463][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.798042][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.808032][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.818017][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.362520][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/15 04:32:53 executed programs: 0 [ 79.543087][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.553090][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.562313][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.570735][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.578488][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.586117][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.697371][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 79.748293][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.755829][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.763196][ T5879] bridge_slave_0: entered allmulticast mode [ 79.770485][ T5879] bridge_slave_0: entered promiscuous mode [ 79.779730][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.786928][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.795057][ T5879] bridge_slave_1: entered allmulticast mode [ 79.801958][ T5879] bridge_slave_1: entered promiscuous mode [ 79.832886][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.844976][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.876805][ T5879] team0: Port device team_slave_0 added [ 79.885669][ T5879] team0: Port device team_slave_1 added [ 79.911703][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.918674][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.945394][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.958503][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.966211][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.992604][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.037568][ T5879] hsr_slave_0: entered promiscuous mode [ 80.043943][ T5879] hsr_slave_1: entered promiscuous mode [ 80.050415][ T5879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.058272][ T5879] Cannot create hsr debugfs directory [ 81.609630][ T51] Bluetooth: hci0: command tx timeout [ 81.692314][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.853937][ T42] cfg80211: failed to load regulatory.db [ 83.690468][ T51] Bluetooth: hci0: command tx timeout [ 83.878685][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.951136][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.865933][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.876382][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.885891][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.895544][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.909994][ T12] hsr_slave_0: left promiscuous mode [ 84.915998][ T12] hsr_slave_1: left promiscuous mode [ 84.922250][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.930331][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.938304][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.945875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.953627][ T12] bridge_slave_1: left allmulticast mode [ 84.959367][ T12] bridge_slave_1: left promiscuous mode [ 84.965711][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.976388][ T12] bridge_slave_0: left allmulticast mode [ 84.984808][ T12] bridge_slave_0: left promiscuous mode [ 84.990793][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.008302][ T12] veth1_macvtap: left promiscuous mode [ 85.014735][ T12] veth0_macvtap: left promiscuous mode [ 85.020680][ T12] veth1_vlan: left promiscuous mode [ 85.026214][ T12] veth0_vlan: left promiscuous mode [ 85.416216][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.448495][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.481767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.513765][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.737943][ T12] bond0 (unregistering): Released all slaves [ 85.779077][ T51] Bluetooth: hci0: command tx timeout [ 85.884299][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.926522][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.937432][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.944576][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.958318][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.965490][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.180041][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.233434][ T5879] veth0_vlan: entered promiscuous mode [ 86.247558][ T5879] veth1_vlan: entered promiscuous mode [ 86.272156][ T5879] veth0_macvtap: entered promiscuous mode [ 86.285872][ T5879] veth1_macvtap: entered promiscuous mode [ 86.303664][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.317772][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.332254][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.345611][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.354380][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.363628][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/15 04:33:00 executed programs: 2 [ 86.422953][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.432546][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.457610][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.465759][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.524008][ T5925] [ 86.526367][ T5925] ============================= [ 86.532560][ T5925] WARNING: suspicious RCU usage [ 86.537432][ T5925] syzkaller #0 Not tainted [ 86.541901][ T5925] ----------------------------- [ 86.546729][ T5925] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 86.555208][ T5925] [ 86.555208][ T5925] other info that might help us debug this: [ 86.555208][ T5925] [ 86.565480][ T5925] [ 86.565480][ T5925] rcu_scheduler_active = 2, debug_locks = 1 [ 86.573989][ T5925] 1 lock held by syz.0.17/5925: [ 86.579121][ T5925] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 86.587993][ T5925] [ 86.587993][ T5925] stack backtrace: [ 86.593974][ T5925] CPU: 1 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 [ 86.601162][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.611228][ T5925] Call Trace: [ 86.614500][ T5925] [ 86.617417][ T5925] dump_stack_lvl+0x18c/0x250 [ 86.622093][ T5925] ? show_regs_print_info+0x20/0x20 [ 86.627282][ T5925] ? load_image+0x400/0x400 [ 86.631786][ T5925] lockdep_rcu_suspicious+0x1e1/0x300 [ 86.637162][ T5925] ieee80211_check_concurrent_iface+0x475/0x950 [ 86.643517][ T5925] ieee80211_open+0xc1/0x200 [ 86.648108][ T5925] __dev_open+0x2cb/0x430 [ 86.652438][ T5925] ? dev_open+0x190/0x190 [ 86.656771][ T5925] __dev_change_flags+0x211/0x6a0 [ 86.661815][ T5925] ? dev_get_flags+0x1c0/0x1c0 [ 86.666573][ T5925] ? mutex_lock_nested+0x20/0x20 [ 86.671513][ T5925] dev_change_flags+0x88/0x1a0 [ 86.676277][ T5925] dev_ioctl+0x7b4/0x1140 [ 86.680610][ T5925] sock_do_ioctl+0x239/0x310 [ 86.685284][ T5925] ? sock_show_fdinfo+0xb0/0xb0 [ 86.690141][ T5925] sock_ioctl+0x5ba/0x7e0 [ 86.694477][ T5925] ? sock_poll+0x3e0/0x3e0 [ 86.698908][ T5925] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 86.705326][ T5925] ? bpf_lsm_file_ioctl+0x9/0x10 [ 86.710272][ T5925] ? security_file_ioctl+0x80/0xa0 [ 86.715411][ T5925] ? sock_poll+0x3e0/0x3e0 [ 86.719925][ T5925] __se_sys_ioctl+0xfd/0x170 [ 86.724523][ T5925] do_syscall_64+0x55/0xa0 [ 86.729208][ T5925] ? clear_bhb_loop+0x40/0x90 [ 86.733884][ T5925] ? clear_bhb_loop+0x40/0x90 [ 86.738559][ T5925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.744456][ T5925] RIP: 0033:0x7feb2759bf79 [ 86.748892][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.768512][ T5925] RSP: 002b:00007fff92d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.776948][ T5925] RAX: ffffffffffffffda RBX: 00007feb27815fa0 RCX: 00007feb2759bf79 [ 86.785100][ T5925] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 86.793068][ T5925] RBP: 00007feb276327e0 R08: 0000000000000000 R09: 0000000000000000 [ 86.801035][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.809094][ T5925] R13: 00007feb27815fac R14: 00007feb27815fa0 R15: 00007feb27815fa0 [ 86.817075][ T5925] [ 86.826841][ T5925] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 86.834608][ T5925] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 87.853332][ T51] Bluetooth: hci0: command tx timeout 2026/02/15 04:33:05 executed programs: 187