Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. 2025/12/17 05:09:27 parsed 1 programs syzkaller login: [ 89.067320][ T5780] cgroup: Unknown subsys name 'net' [ 89.214034][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.911159][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.157590][ T23] cfg80211: failed to load regulatory.db [ 93.932058][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.950775][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.000838][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.008870][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.819543][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 95.905974][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.913809][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.923128][ T5841] bridge_slave_0: entered allmulticast mode [ 95.930647][ T5841] bridge_slave_0: entered promiscuous mode [ 95.940679][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.947984][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.955290][ T5841] bridge_slave_1: entered allmulticast mode [ 95.962306][ T5841] bridge_slave_1: entered promiscuous mode [ 96.009113][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.020825][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.070176][ T5841] team0: Port device team_slave_0 added [ 96.080177][ T5841] team0: Port device team_slave_1 added [ 96.118982][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.126136][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.152847][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.167154][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.174128][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.200147][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.284462][ T5841] hsr_slave_0: entered promiscuous mode [ 96.293461][ T5841] hsr_slave_1: entered promiscuous mode [ 96.527577][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.541091][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.556384][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.571046][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.619413][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626797][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.634857][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.642781][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.708213][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.726779][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.737420][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.770346][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.791137][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.798412][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.828075][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.835358][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.067534][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.119071][ T5841] veth0_vlan: entered promiscuous mode [ 97.132103][ T5841] veth1_vlan: entered promiscuous mode [ 97.170836][ T5841] veth0_macvtap: entered promiscuous mode [ 97.181332][ T5841] veth1_macvtap: entered promiscuous mode [ 97.201046][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.222518][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.236093][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.244993][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.259244][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.268233][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.428234][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.437585][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.448790][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.457536][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.466478][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.473987][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.575301][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/17 05:09:39 executed programs: 0 [ 98.881977][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.893566][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.902462][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.911883][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.919968][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.928009][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.106083][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 99.180213][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.187609][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.194798][ T5883] bridge_slave_0: entered allmulticast mode [ 99.202695][ T5883] bridge_slave_0: entered promiscuous mode [ 99.212259][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.219635][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.227815][ T5883] bridge_slave_1: entered allmulticast mode [ 99.234780][ T5883] bridge_slave_1: entered promiscuous mode [ 99.267338][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.280374][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.315002][ T5883] team0: Port device team_slave_0 added [ 99.324344][ T5883] team0: Port device team_slave_1 added [ 99.353115][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.362904][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.388883][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.401946][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.409713][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.436746][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.480319][ T5883] hsr_slave_0: entered promiscuous mode [ 99.488348][ T5883] hsr_slave_1: entered promiscuous mode [ 99.494839][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.503444][ T5883] Cannot create hsr debugfs directory [ 99.739695][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.025958][ T5086] Bluetooth: hci0: command tx timeout [ 102.177096][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.231701][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.120097][ T5086] Bluetooth: hci0: command tx timeout [ 103.149486][ T59] hsr_slave_0: left promiscuous mode [ 103.158937][ T59] hsr_slave_1: left promiscuous mode [ 103.165669][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.173169][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.185769][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.193226][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.205835][ T59] bridge_slave_1: left allmulticast mode [ 103.211554][ T59] bridge_slave_1: left promiscuous mode [ 103.220988][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.234709][ T59] bridge_slave_0: left allmulticast mode [ 103.244602][ T59] bridge_slave_0: left promiscuous mode [ 103.250895][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.288503][ T59] veth1_macvtap: left promiscuous mode [ 103.294491][ T59] veth0_macvtap: left promiscuous mode [ 103.303175][ T59] veth1_vlan: left promiscuous mode [ 103.309332][ T59] veth0_vlan: left promiscuous mode [ 103.749896][ T59] team0 (unregistering): Port device team_slave_1 removed [ 103.782688][ T59] team0 (unregistering): Port device team_slave_0 removed [ 103.814775][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.856729][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.208830][ T59] bond0 (unregistering): Released all slaves [ 104.293431][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.306013][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.318945][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.330748][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.441125][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.463044][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.481831][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.489085][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.511264][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.518489][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.766057][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.823654][ T5883] veth0_vlan: entered promiscuous mode [ 104.837093][ T5883] veth1_vlan: entered promiscuous mode [ 104.879374][ T5883] veth0_macvtap: entered promiscuous mode [ 104.890483][ T5883] veth1_macvtap: entered promiscuous mode [ 104.926832][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.941444][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.953749][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.963097][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.972206][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.981638][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.090203][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.099210][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.143300][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.151950][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.186578][ T5086] Bluetooth: hci0: command tx timeout [ 105.223911][ T5928] [ 105.226814][ T5928] ============================= [ 105.231990][ T5928] WARNING: suspicious RCU usage [ 105.237699][ T5928] syzkaller #0 Not tainted [ 105.242143][ T5928] ----------------------------- [ 105.247296][ T5928] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 105.256443][ T5928] [ 105.256443][ T5928] other info that might help us debug this: [ 105.256443][ T5928] [ 105.267438][ T5928] [ 105.267438][ T5928] rcu_scheduler_active = 2, debug_locks = 1 [ 105.275869][ T5928] 1 lock held by syz.0.17/5928: [ 105.280743][ T5928] #0: ffffffff8cd30100 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 105.291281][ T5928] [ 105.291281][ T5928] stack backtrace: [ 105.297435][ T5928] CPU: 1 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.304642][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.314721][ T5928] Call Trace: [ 105.318010][ T5928] [ 105.320967][ T5928] dump_stack_lvl+0x16c/0x230 [ 105.325673][ T5928] ? show_regs_print_info+0x20/0x20 [ 105.330986][ T5928] ? load_image+0x3b0/0x3b0 [ 105.335507][ T5928] ? __lock_acquire+0x1260/0x7c80 [ 105.340591][ T5928] lockdep_rcu_suspicious+0x1e1/0x300 [ 105.345989][ T5928] get_callchain_entry+0x2a9/0x3c0 [ 105.351121][ T5928] get_perf_callchain+0xbc/0x4d0 [ 105.356069][ T5928] ? verify_lock_unused+0x140/0x140 [ 105.361285][ T5928] ? put_callchain_entry+0xb0/0xb0 [ 105.366417][ T5928] ? rcu_read_lock_sched_held+0x8a/0x100 [ 105.372090][ T5928] ? __bpf_trace_rcu_stall_warning+0x140/0x140 [ 105.378264][ T5928] __bpf_get_stack+0x2d7/0x510 [ 105.383053][ T5928] ? stack_map_get_build_id_offset+0x720/0x720 [ 105.389226][ T5928] ? __cant_sleep+0x210/0x210 [ 105.393919][ T5928] ? bpf_prog_d43750871481577d+0x45/0x49 [ 105.399600][ T5928] bpf_get_stack_raw_tp+0x1a9/0x210 [ 105.404813][ T5928] bpf_prog_d43750871481577d+0x45/0x49 [ 105.410283][ T5928] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 105.415676][ T5928] bpf_prog_test_run_syscall+0x311/0x490 [ 105.421327][ T5928] ? sock_gen_cookie+0x60/0x60 [ 105.426118][ T5928] ? __fdget+0x14a/0x210 [ 105.430385][ T5928] ? sock_gen_cookie+0x60/0x60 [ 105.435166][ T5928] bpf_prog_test_run+0x321/0x390 [ 105.440129][ T5928] __sys_bpf+0x440/0x800 [ 105.444386][ T5928] ? bpf_link_show_fdinfo+0x350/0x350 [ 105.449781][ T5928] ? lock_chain_count+0x20/0x20 [ 105.454653][ T5928] __x64_sys_bpf+0x7c/0x90 [ 105.459083][ T5928] do_syscall_64+0x55/0xb0 [ 105.463511][ T5928] ? clear_bhb_loop+0x40/0x90 [ 105.468207][ T5928] ? clear_bhb_loop+0x40/0x90 [ 105.472910][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.478828][ T5928] RIP: 0033:0x7fadfb58f749 [ 105.483268][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.502887][ T5928] RSP: 002b:00007ffd4f470ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.511398][ T5928] RAX: ffffffffffffffda RBX: 00007fadfb7e5fa0 RCX: 00007fadfb58f749 [ 105.519378][ T5928] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 105.527374][ T5928] RBP: 00007fadfb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.535358][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.543337][ T5928] R13: 00007fadfb7e5fa0 R14: 00007fadfb7e5fa0 R15: 0000000000000003 [ 105.551329][ T5928]