Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. 2026/06/16 18:29:52 parsed 1 programs [ 89.134037][ T5788] cgroup: Unknown subsys name 'net' [ 89.264940][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.031791][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.218356][ T9] cfg80211: failed to load regulatory.db [ 92.951744][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.970116][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.035986][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.045084][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.534772][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.634775][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.643096][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.650592][ T5831] bridge_slave_0: entered allmulticast mode [ 94.660110][ T5831] bridge_slave_0: entered promiscuous mode [ 94.680123][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.687382][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.694564][ T5831] bridge_slave_1: entered allmulticast mode [ 94.702425][ T5831] bridge_slave_1: entered promiscuous mode [ 94.741706][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.753522][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.787229][ T5831] team0: Port device team_slave_0 added [ 94.795359][ T5831] team0: Port device team_slave_1 added [ 94.822034][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.829091][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.855186][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.869352][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.876412][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.902768][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.960217][ T5831] hsr_slave_0: entered promiscuous mode [ 94.966977][ T5831] hsr_slave_1: entered promiscuous mode [ 95.161581][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.184665][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.195313][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.207059][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.328924][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.358091][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.378448][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.385813][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.398218][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.405733][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.655119][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.717460][ T5831] veth0_vlan: entered promiscuous mode [ 95.730737][ T5831] veth1_vlan: entered promiscuous mode [ 95.765498][ T5831] veth0_macvtap: entered promiscuous mode [ 95.775922][ T5831] veth1_macvtap: entered promiscuous mode [ 95.801198][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.817632][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.836797][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.845795][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.855544][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864485][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.087386][ T131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.812710][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.823518][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.833755][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.842271][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.850264][ T5879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.858134][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/06/16 18:30:04 executed programs: 0 [ 98.442572][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.450982][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.461213][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.470571][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.479067][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.487572][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.644859][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 98.719052][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.726461][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.733881][ T5889] bridge_slave_0: entered allmulticast mode [ 98.742974][ T5889] bridge_slave_0: entered promiscuous mode [ 98.751963][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.759946][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.767390][ T5889] bridge_slave_1: entered allmulticast mode [ 98.775154][ T5889] bridge_slave_1: entered promiscuous mode [ 98.808780][ T131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.835505][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.848802][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.883324][ T5889] team0: Port device team_slave_0 added [ 98.892280][ T5889] team0: Port device team_slave_1 added [ 98.917864][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.925158][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.952851][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.965438][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.972952][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.999398][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.046681][ T5889] hsr_slave_0: entered promiscuous mode [ 99.054370][ T5889] hsr_slave_1: entered promiscuous mode [ 99.061048][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.069095][ T5889] Cannot create hsr debugfs directory [ 100.537615][ T5086] Bluetooth: hci0: command tx timeout [ 101.038820][ T131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.122594][ T131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.052516][ T131] hsr_slave_0: left promiscuous mode [ 102.062817][ T131] hsr_slave_1: left promiscuous mode [ 102.072460][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.081175][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.092909][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.100973][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.111556][ T131] bridge_slave_1: left allmulticast mode [ 102.117498][ T131] bridge_slave_1: left promiscuous mode [ 102.124614][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.141930][ T131] bridge_slave_0: left allmulticast mode [ 102.152500][ T131] bridge_slave_0: left promiscuous mode [ 102.158410][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.188567][ T131] veth1_macvtap: left promiscuous mode [ 102.194761][ T131] veth0_macvtap: left promiscuous mode [ 102.200746][ T131] veth1_vlan: left promiscuous mode [ 102.208326][ T131] veth0_vlan: left promiscuous mode [ 102.627750][ T5086] Bluetooth: hci0: command tx timeout [ 102.753084][ T131] team0 (unregistering): Port device team_slave_1 removed [ 102.787287][ T131] team0 (unregistering): Port device team_slave_0 removed [ 102.821681][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.860560][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.129324][ T131] bond0 (unregistering): Released all slaves [ 103.209660][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.220893][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.232519][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.243877][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.360794][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.381916][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.404162][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.411379][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.438112][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.445294][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.746624][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.850366][ T5889] veth0_vlan: entered promiscuous mode [ 103.863083][ T5889] veth1_vlan: entered promiscuous mode [ 103.893861][ T5889] veth0_macvtap: entered promiscuous mode [ 103.903667][ T5889] veth1_macvtap: entered promiscuous mode [ 103.923324][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.940414][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.953552][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.962750][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.971556][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.981138][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.050859][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.068900][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.126137][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.134621][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.233388][ T5929] [ 104.235943][ T5929] ============================= [ 104.241283][ T5929] WARNING: suspicious RCU usage [ 104.248253][ T5929] syzkaller #0 Not tainted [ 104.252810][ T5929] ----------------------------- [ 104.258046][ T5929] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 104.266625][ T5929] [ 104.266625][ T5929] other info that might help us debug this: [ 104.266625][ T5929] [ 104.276994][ T5929] [ 104.276994][ T5929] rcu_scheduler_active = 2, debug_locks = 1 [ 104.285111][ T5929] 1 lock held by syz.0.17/5929: [ 104.290123][ T5929] #0: ffffffff8d132340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 104.301288][ T5929] [ 104.301288][ T5929] stack backtrace: [ 104.307344][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.314677][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.324766][ T5929] Call Trace: [ 104.328079][ T5929] [ 104.331082][ T5929] dump_stack_lvl+0x18c/0x250 [ 104.335797][ T5929] ? show_regs_print_info+0x20/0x20 [ 104.341028][ T5929] ? load_image+0x420/0x420 [ 104.345605][ T5929] ? __lock_acquire+0x1273/0x7d40 [ 104.350667][ T5929] lockdep_rcu_suspicious+0x1e1/0x300 [ 104.356072][ T5929] get_callchain_entry+0x2a9/0x3c0 [ 104.361404][ T5929] get_perf_callchain+0xc6/0x510 [ 104.366396][ T5929] ? put_callchain_entry+0xb0/0xb0 [ 104.371590][ T5929] ? mark_lock+0x94/0x320 [ 104.375984][ T5929] __bpf_get_stack+0x2e4/0x540 [ 104.380794][ T5929] ? count_memcg_event_mm+0x8e/0x3c0 [ 104.386126][ T5929] ? stack_map_get_build_id_offset+0x720/0x720 [ 104.392372][ T5929] ? bpf_prog_d10bea4b955c5232_F+0x31/0x33 [ 104.398256][ T5929] bpf_get_stack_raw_tp+0x1a9/0x210 [ 104.403559][ T5929] bpf_prog_d10bea4b955c5232_F+0x31/0x33 [ 104.409238][ T5929] bpf_prog_19484586d131c401+0x20/0x29 [ 104.414738][ T5929] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 104.420166][ T5929] bpf_prog_test_run_syscall+0x317/0x4a0 [ 104.425842][ T5929] ? sock_gen_cookie+0x60/0x60 [ 104.430668][ T5929] ? __fdget+0x14a/0x210 [ 104.434990][ T5929] ? sock_gen_cookie+0x60/0x60 [ 104.439804][ T5929] bpf_prog_test_run+0x321/0x390 [ 104.444794][ T5929] __sys_bpf+0x49d/0x890 [ 104.449163][ T5929] ? bpf_link_show_fdinfo+0x390/0x390 [ 104.454604][ T5929] ? lock_chain_count+0x20/0x20 [ 104.459501][ T5929] __x64_sys_bpf+0x7c/0x90 [ 104.463968][ T5929] do_syscall_64+0x55/0xb0 [ 104.468452][ T5929] ? clear_bhb_loop+0x40/0x90 [ 104.473329][ T5929] ? clear_bhb_loop+0x40/0x90 [ 104.478038][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.484059][ T5929] RIP: 0033:0x7f7435d9ce59 [ 104.488514][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.508336][ T5929] RSP: 002b:00007fff902078e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.516899][ T5929] RAX: ffffffffffffffda RBX: 00007f7436015fa0 RCX: 00007f7435d9ce59 [ 104.525070][ T5929] RDX: 0000000000000010 RSI: 0000200000001ac0 RDI: 000000000000000a [ 104.533065][ T5929] RBP: 00007f7435e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 104.541067][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.549065][ T5929] R13: 00007f7436015fac R14: 00007f7436015fa0 R15: 00007f7436015fa0 [ 104.557082][ T5929] [ 104.629986][ T5788] syz-executor (5788) used greatest stack depth: 20752 bytes left [ 104.701189][ T5086] Bluetooth: hci0: command tx timeout