Warning: Permanently added '[localhost]:20466' (ED25519) to the list of known hosts.
2026/09/11 20:07:57 parsed 1 programs
2026/09/11 20:07:57 serving rpc on tcp://38301
syzkaller login: [ 47.348297][ T5597] cgroup: Unknown subsys name 'net'
[ 47.417551][ T5597] cgroup: Unknown subsys name 'cpuset'
[ 47.422689][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 48.628702][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 50.951377][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 51.586665][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 51.591359][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 51.595255][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 51.600902][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 51.604884][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 52.272546][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 52.272597][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 52.514157][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 52.520153][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 52.917924][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.921154][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.925778][ T5667] bridge_slave_0: entered allmulticast mode
[ 52.928712][ T5667] bridge_slave_0: entered promiscuous mode
[ 52.963511][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.966679][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.969323][ T5667] bridge_slave_1: entered allmulticast mode
[ 52.972533][ T5667] bridge_slave_1: entered promiscuous mode
[ 52.991715][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 52.996172][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 53.017013][ T5667] team0: Port device team_slave_0 added
[ 53.042831][ T5667] team0: Port device team_slave_1 added
[ 53.080651][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 53.080702][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 53.083744][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 53.090067][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 53.090078][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 53.090092][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 53.148572][ T5667] hsr_slave_0: entered promiscuous mode
[ 53.150074][ T5667] hsr_slave_1: entered promiscuous mode
[ 53.256086][ T5667] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 53.263386][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 53.265967][ T5667] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 53.270005][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 53.270810][ T5667] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 53.278506][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 53.279132][ T5667] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 53.283122][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 53.300847][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.300988][ T5667] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.301302][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.301345][ T5667] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.338855][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 53.347420][ T27] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.351174][ T27] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.361621][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[ 53.368582][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.368690][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.375815][ T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.375898][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.623680][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 53.665073][ T5667] veth0_vlan: entered promiscuous mode
[ 53.670386][ T5667] veth1_vlan: entered promiscuous mode
[ 53.692897][ T5667] veth0_macvtap: entered promiscuous mode
[ 53.699280][ T5667] veth1_macvtap: entered promiscuous mode
[ 53.712138][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 53.717190][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 53.767902][ T5428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.775777][ T5428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.775861][ T5428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 53.775906][ T5428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/09/11 20:08:05 executed programs: 0
[ 53.881902][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 53.887112][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 53.889725][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 53.894316][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 53.899176][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 53.922881][ T5428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 53.931436][ T5721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 53.935469][ T5720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 53.937644][ T5721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 53.942138][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 53.945292][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 53.949847][ T5721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 53.950488][ T5721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 53.953495][ T5721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 53.960012][ T4992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 53.963575][ T5721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 54.013719][ T5428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 54.089241][ T5428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 54.179905][ T5428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 54.564777][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.567533][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.570222][ T5716] bridge_slave_0: entered allmulticast mode
[ 54.573247][ T5716] bridge_slave_0: entered promiscuous mode
[ 54.587847][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.587997][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.588116][ T5716] bridge_slave_1: entered allmulticast mode
[ 54.589239][ T5716] bridge_slave_1: entered promiscuous mode
[ 54.628832][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.632063][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.635165][ T5719] bridge_slave_0: entered allmulticast mode
[ 54.636104][ T5719] bridge_slave_0: entered promiscuous mode
[ 54.647863][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 54.663671][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.663799][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.664146][ T5719] bridge_slave_1: entered allmulticast mode
[ 54.666118][ T5719] bridge_slave_1: entered promiscuous mode
[ 54.694587][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 54.711880][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 54.733307][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 54.744831][ T5716] team0: Port device team_slave_0 added
[ 54.764384][ T5716] team0: Port device team_slave_1 added
[ 54.774029][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.774208][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.774335][ T5717] bridge_slave_0: entered allmulticast mode
[ 54.775994][ T5717] bridge_slave_0: entered promiscuous mode
[ 54.777896][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.777935][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.778117][ T5717] bridge_slave_1: entered allmulticast mode
[ 54.779558][ T5717] bridge_slave_1: entered promiscuous mode
[ 54.799208][ T5719] team0: Port device team_slave_0 added
[ 54.806294][ T5719] team0: Port device team_slave_1 added
[ 54.815242][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 54.815297][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 54.815342][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 54.838304][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 54.838367][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 54.838426][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 54.853022][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 54.871575][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 54.889576][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 54.891944][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 54.900387][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 54.920821][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 54.923199][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 54.931722][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 54.942430][ T5717] team0: Port device team_slave_0 added
[ 54.944031][ T5717] team0: Port device team_slave_1 added
[ 54.947499][ T5716] hsr_slave_0: entered promiscuous mode
[ 54.947959][ T5716] hsr_slave_1: entered promiscuous mode
[ 54.948294][ T5716] debugfs: 'hsr0' already exists in 'hsr'
[ 54.948352][ T5716] Cannot create hsr debugfs directory
[ 54.981567][ T5719] hsr_slave_0: entered promiscuous mode
[ 54.985149][ T5719] hsr_slave_1: entered promiscuous mode
[ 54.987468][ T5719] debugfs: 'hsr0' already exists in 'hsr'
[ 54.989699][ T5719] Cannot create hsr debugfs directory
[ 54.999083][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 54.999138][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 54.999191][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 55.000138][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 55.000144][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 55.000153][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 55.068648][ T5717] hsr_slave_0: entered promiscuous mode
[ 55.069227][ T5717] hsr_slave_1: entered promiscuous mode
[ 55.069652][ T5717] debugfs: 'hsr0' already exists in 'hsr'
[ 55.069662][ T5717] Cannot create hsr debugfs directory
[ 55.281672][ T5716] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 55.288039][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 55.292028][ T5716] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 55.298398][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 55.302605][ T5716] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 55.311714][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 55.315826][ T5716] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 55.320640][ T5716] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 55.375178][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0
[ 55.393383][ T5716] 8021q: adding VLAN 0 to HW filter on device team0
[ 55.400638][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.400732][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.412430][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.412547][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.613486][ T5716] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 55.639559][ T5716] veth0_vlan: entered promiscuous mode
[ 55.644120][ T5716] veth1_vlan: entered promiscuous mode
[ 55.661822][ T5716] veth0_macvtap: entered promiscuous mode
[ 55.667408][ T5716] veth1_macvtap: entered promiscuous mode
[ 55.679390][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 55.687126][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 55.729267][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.729320][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.729360][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.729391][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 55.769757][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.769818][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.800177][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.800224][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.838383][ T5790]
[ 55.839705][ T5790] =============================
[ 55.841551][ T5790] WARNING: suspicious RCU usage
[ 55.843310][ T5790] syzkaller #0 Not tainted
[ 55.845030][ T5790] -----------------------------
[ 55.846749][ T5790] ./include/linux/xarray.h:1211 suspicious rcu_dereference_check() usage!
[ 55.849536][ T5790]
[ 55.849536][ T5790] other info that might help us debug this:
[ 55.849536][ T5790]
[ 55.852766][ T5790]
[ 55.852766][ T5790] rcu_scheduler_active = 2, debug_locks = 1
[ 55.855557][ T5790] locks held by syz.2.19/5790: 1, last CPU#0:
[ 55.857688][ T5790] #0: ffff88810b9900a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_mem_attributes+0x365/0x1af0
[ 55.861328][ T5790]
[ 55.861328][ T5790] stack backtrace:
[ 55.863221][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full)
[ 55.866156][ T5790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 55.869427][ T5790] Call Trace:
[ 55.870687][ T5790]
[ 55.871706][ T5790] dump_stack_lvl+0xe8/0x150
[ 55.873255][ T5790] lockdep_rcu_suspicious+0x140/0x1d0
[ 55.875003][ T5790] xas_start+0x618/0x770
[ 55.876511][ T5790] xas_load+0x2c/0x5a0
[ 55.877858][ T5790] xas_find+0x157/0x980
[ 55.879225][ T5790] kvm_vm_ioctl_set_mem_attributes+0x1578/0x1af0
[ 55.881312][ T5790] ? __pfx_kvm_vm_ioctl_set_mem_attributes+0x10/0x10
[ 55.883558][ T5790] ? lock_acquire+0x115/0x350
[ 55.885118][ T5790] kvm_vm_ioctl+0xb33/0xd30
[ 55.886626][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 55.888277][ T5790] ? kasan_quarantine_put+0xbb/0x1f0
[ 55.890074][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 55.891899][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 55.894177][ T5790] ? do_vfs_ioctl+0x116f/0x1530
[ 55.896144][ T5790] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 55.898182][ T5790] ? hook_file_ioctl+0x1f2/0x600
[ 55.900175][ T5790] ? __fget_files+0x2a/0x420
[ 55.902045][ T5790] ? __fget_files+0x2a/0x420
[ 55.903933][ T5790] ? __fget_files+0x3a2/0x420
[ 55.905826][ T5790] ? __fget_files+0x2a/0x420
[ 55.907680][ T5790] ? bpf_lsm_file_ioctl+0x9/0x20
[ 55.909740][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 55.911758][ T5790] __se_sys_ioctl+0xfc/0x170
[ 55.913633][ T5790] do_syscall_64+0x166/0x520
[ 55.915457][ T5790] ? trace_irq_disable+0x3b/0x140
[ 55.917129][ T5790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 55.919420][ T5790] ? clear_bhb_loop+0x70/0xc0
[ 55.921337][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 55.923716][ T5790] RIP: 0033:0x7f4321f9e159
[ 55.925534][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 55.933139][ T5790] RSP: 002b:00007f4322e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.936428][ T5790] RAX: ffffffffffffffda RBX: 00007f4322225fa0 RCX: 00007f4321f9e159
[ 55.939109][ T5790] RDX: 0000200000002200 RSI: 000000004020aed2 RDI: 0000000000000004
[ 55.941642][ T5790] RBP: 00007f432203503b R08: 0000000000000000 R09: 0000000000000000
[ 55.944167][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 55.946885][ T5790] R13: 00007f4322226038 R14: 00007f4322225fa0 R15: 00007ffea2b6d9c8
[ 55.949480][ T5790]
[ 55.955769][ T5790]
[ 55.956700][ T5790] =============================
[ 55.958820][ T5790] WARNING: suspicious RCU usage
[ 55.960861][ T5790] syzkaller #0 Not tainted
[ 55.962747][ T5790] -----------------------------
[ 55.965025][ T5790] ./include/linux/xarray.h:1227 suspicious rcu_dereference_check() usage!
[ 55.968575][ T5790]
[ 55.968575][ T5790] other info that might help us debug this:
[ 55.968575][ T5790]
[ 55.972799][ T5790]
[ 55.972799][ T5790] rcu_scheduler_active = 2, debug_locks = 1
[ 55.976349][ T5790] locks held by syz.2.19/5790: 1, last CPU#0:
[ 55.978879][ T5790] #0: ffff88810b9900a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_mem_attributes+0x365/0x1af0
[ 55.983309][ T5790]
[ 55.983309][ T5790] stack backtrace:
[ 55.985636][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full)
[ 55.989395][ T5790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 55.992796][ T5790] Call Trace:
[ 55.993900][ T5790]
[ 55.994901][ T5790] dump_stack_lvl+0xe8/0x150
[ 55.996470][ T5790] lockdep_rcu_suspicious+0x140/0x1d0
[ 55.998275][ T5790] xas_load+0x4dc/0x5a0
[ 55.999686][ T5790] xas_find+0x157/0x980
[ 56.001041][ T5790] kvm_vm_ioctl_set_mem_attributes+0x1578/0x1af0
[ 56.003073][ T5790] ? __pfx_kvm_vm_ioctl_set_mem_attributes+0x10/0x10
[ 56.005371][ T5790] ? lock_acquire+0x115/0x350
[ 56.007329][ T5790] kvm_vm_ioctl+0xb33/0xd30
[ 56.009275][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.011388][ T5790] ? kasan_quarantine_put+0xbb/0x1f0
[ 56.013652][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.016019][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.018411][ T5790] ? do_vfs_ioctl+0x116f/0x1530
[ 56.020474][ T5790] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 56.022473][ T5790] ? hook_file_ioctl+0x1f2/0x600
[ 56.024106][ T5790] ? __fget_files+0x2a/0x420
[ 56.025641][ T5790] ? __fget_files+0x2a/0x420
[ 56.027162][ T5790] ? __fget_files+0x3a2/0x420
[ 56.028693][ T5790] ? __fget_files+0x2a/0x420
[ 56.030227][ T5790] ? bpf_lsm_file_ioctl+0x9/0x20
[ 56.031875][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.033546][ T5790] __se_sys_ioctl+0xfc/0x170
[ 56.034999][ T5790] do_syscall_64+0x166/0x520
[ 56.036497][ T5790] ? trace_irq_disable+0x3b/0x140
[ 56.038111][ T5790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.040047][ T5790] ? clear_bhb_loop+0x70/0xc0
[ 56.041550][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.043418][ T5790] RIP: 0033:0x7f4321f9e159
[ 56.044868][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.050826][ T5790] RSP: 002b:00007f4322e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.053500][ T5790] RAX: ffffffffffffffda RBX: 00007f4322225fa0 RCX: 00007f4321f9e159
[ 56.055992][ T5790] RDX: 0000200000002200 RSI: 000000004020aed2 RDI: 0000000000000004
[ 56.058495][ T5790] RBP: 00007f432203503b R08: 0000000000000000 R09: 0000000000000000
[ 56.060985][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 56.063504][ T5790] R13: 00007f4322226038 R14: 00007f4322225fa0 R15: 00007ffea2b6d9c8
[ 56.066021][ T5790]
[ 56.068081][ T5721] Bluetooth: hci1: command tx timeout
[ 56.068499][ T5721] Bluetooth: hci2: command tx timeout
[ 56.068632][ T5721] Bluetooth: hci0: command tx timeout
[ 56.069138][ T5790]
[ 56.075279][ T5790] =============================
[ 56.076854][ T5790] WARNING: suspicious RCU usage
[ 56.078470][ T5790] syzkaller #0 Not tainted
[ 56.079937][ T5790] -----------------------------
[ 56.081490][ T5790] ./include/linux/xarray.h:1227 suspicious rcu_dereference_check() usage!
[ 56.084210][ T5790]
[ 56.084210][ T5790] other info that might help us debug this:
[ 56.084210][ T5790]
[ 56.087682][ T5790]
[ 56.087682][ T5790] rcu_scheduler_active = 2, debug_locks = 1
[ 56.090184][ T5790] locks held by syz.2.19/5790: 1, last CPU#0:
[ 56.092490][ T5790] #0: ffff88810b9900a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_mem_attributes+0x365/0x1af0
[ 56.096809][ T5790]
[ 56.096809][ T5790] stack backtrace:
[ 56.099027][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full)
[ 56.102531][ T5790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 56.106133][ T5790] Call Trace:
[ 56.107341][ T5790]
[ 56.108515][ T5790] dump_stack_lvl+0xe8/0x150
[ 56.110275][ T5790] lockdep_rcu_suspicious+0x140/0x1d0
[ 56.112062][ T5790] kvm_vm_ioctl_set_mem_attributes+0x1834/0x1af0
[ 56.114277][ T5790] ? __pfx_kvm_vm_ioctl_set_mem_attributes+0x10/0x10
[ 56.116568][ T5790] ? lock_acquire+0x115/0x350
[ 56.118134][ T5790] kvm_vm_ioctl+0xb33/0xd30
[ 56.119656][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.121570][ T5790] ? kasan_quarantine_put+0xbb/0x1f0
[ 56.123586][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.125548][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.127590][ T5790] ? do_vfs_ioctl+0x116f/0x1530
[ 56.129496][ T5790] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 56.131501][ T5790] ? hook_file_ioctl+0x1f2/0x600
[ 56.133298][ T5790] ? __fget_files+0x2a/0x420
[ 56.135054][ T5790] ? __fget_files+0x2a/0x420
[ 56.136771][ T5790] ? __fget_files+0x3a2/0x420
[ 56.138656][ T5790] ? __fget_files+0x2a/0x420
[ 56.140383][ T5790] ? bpf_lsm_file_ioctl+0x9/0x20
[ 56.142068][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.143775][ T5790] __se_sys_ioctl+0xfc/0x170
[ 56.145356][ T5790] do_syscall_64+0x166/0x520
[ 56.146909][ T5790] ? trace_irq_disable+0x3b/0x140
[ 56.148573][ T5790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.150553][ T5790] ? clear_bhb_loop+0x70/0xc0
[ 56.152131][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.154056][ T5790] RIP: 0033:0x7f4321f9e159
[ 56.155568][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.161805][ T5790] RSP: 002b:00007f4322e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.164524][ T5790] RAX: ffffffffffffffda RBX: 00007f4322225fa0 RCX: 00007f4321f9e159
[ 56.167100][ T5790] RDX: 0000200000002200 RSI: 000000004020aed2 RDI: 0000000000000004
[ 56.169693][ T5790] RBP: 00007f432203503b R08: 0000000000000000 R09: 0000000000000000
[ 56.172305][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 56.174923][ T5790] R13: 00007f4322226038 R14: 00007f4322225fa0 R15: 00007ffea2b6d9c8
[ 56.177534][ T5790]
[ 56.180475][ T5790]
[ 56.181291][ T5790] =============================
[ 56.182935][ T5790] WARNING: suspicious RCU usage
[ 56.184730][ T5790] syzkaller #0 Not tainted
[ 56.186157][ T5790] -----------------------------
[ 56.187769][ T5790] ./include/linux/xarray.h:1244 suspicious rcu_dereference_check() usage!
[ 56.190573][ T5790]
[ 56.190573][ T5790] other info that might help us debug this:
[ 56.190573][ T5790]
[ 56.193807][ T5790]
[ 56.193807][ T5790] rcu_scheduler_active = 2, debug_locks = 1
[ 56.196702][ T5790] locks held by syz.2.19/5790: 1, last CPU#0:
[ 56.198712][ T5790] #0: ffff88810b9900a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_mem_attributes+0x365/0x1af0
[ 56.202352][ T5790]
[ 56.202352][ T5790] stack backtrace:
[ 56.204298][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full)
[ 56.207238][ T5790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 56.210941][ T5790] Call Trace:
[ 56.212209][ T5790]
[ 56.213342][ T5790] dump_stack_lvl+0xe8/0x150
[ 56.215262][ T5790] lockdep_rcu_suspicious+0x140/0x1d0
[ 56.217362][ T5790] xa_parent+0xec/0xf0
[ 56.218927][ T5790] xas_find+0x6f2/0x980
[ 56.220384][ T5790] kvm_vm_ioctl_set_mem_attributes+0x1578/0x1af0
[ 56.222916][ T5790] ? __pfx_kvm_vm_ioctl_set_mem_attributes+0x10/0x10
[ 56.225632][ T5790] ? lock_acquire+0x115/0x350
[ 56.227456][ T5790] kvm_vm_ioctl+0xb33/0xd30
[ 56.229259][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.231269][ T5790] ? kasan_quarantine_put+0xbb/0x1f0
[ 56.233376][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.235717][ T5790] ? tomoyo_path_number_perm+0x219/0x5f0
[ 56.238080][ T5790] ? do_vfs_ioctl+0x116f/0x1530
[ 56.239713][ T5790] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 56.241347][ T5790] ? hook_file_ioctl+0x1f2/0x600
[ 56.242967][ T5790] ? __fget_files+0x2a/0x420
[ 56.244484][ T5790] ? __fget_files+0x2a/0x420
[ 56.245982][ T5790] ? __fget_files+0x3a2/0x420
[ 56.247550][ T5790] ? __fget_files+0x2a/0x420
[ 56.249385][ T5790] ? bpf_lsm_file_ioctl+0x9/0x20
[ 56.251112][ T5790] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 56.253090][ T5790] __se_sys_ioctl+0xfc/0x170
[ 56.254941][ T5790] do_syscall_64+0x166/0x520
[ 56.256774][ T5790] ? trace_irq_disable+0x3b/0x140
[ 56.258809][ T5790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.261239][ T5790] ? clear_bhb_loop+0x70/0xc0
[ 56.263159][ T5790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.265580][ T5790] RIP: 0033:0x7f4321f9e159
[ 56.267403][ T5790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 56.273951][ T5790] RSP: 002b:00007f4322e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.276404][ T5790] RAX: ffffffffffffffda RBX: 00007f4322225fa0 RCX: 00007f4321f9e159
[ 56.278841][ T5790] RDX: 0000200000002200 RSI: 000000004020aed2 RDI: 0000000000000004
[ 56.281375][ T5790] RBP: 00007f432203503b R08: 0000000000000000 R09: 0000000000000000
[ 56.283940][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 56.286504][ T5790] R13: 00007f4322226038 R14: 00007f4322225fa0 R15: 00007ffea2b6d9c8
[ 56.289075][ T5790]
[ 56.978721][ T5428] bridge_slave_1: left allmulticast mode
[ 56.981688][ T5428] bridge_slave_1: left promiscuous mode
[ 56.986091][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.990630][ T5428] bridge_slave_0: left allmulticast mode
[ 56.990684][ T5428] bridge_slave_0: left promiscuous mode
[ 56.990824][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.168760][ T5428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 57.180218][ T5428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 57.186987][ T5428] bond0 (unregistering): Released all slaves
[ 57.212327][ T5338] 8021q: adding VLAN 0 to HW filter on device eth1
[ 57.278968][ T5428] hsr_slave_0: left promiscuous mode
[ 57.280971][ T5428] hsr_slave_1: left promiscuous mode
[ 57.281480][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 57.281499][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 57.284216][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 57.284227][ T5428] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 57.298756][ T5428] veth1_macvtap: left promiscuous mode
[ 57.298831][ T5428] veth0_macvtap: left promiscuous mode
[ 57.299231][ T5428] veth1_vlan: left promiscuous mode
[ 57.299273][ T5428] veth0_vlan: left promiscuous mode
[ 57.489387][ T5428] team0 (unregistering): Port device team_slave_1 removed
[ 57.494207][ T5428] team0 (unregistering): Port device team_slave_0 removed
[ 57.896913][ T5717] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.913385][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 57.916590][ T5717] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.921105][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 57.928353][ T5717] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.942558][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 57.947209][ T5717] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.961184][ T5717] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 58.085386][ T5721] Bluetooth: hci2: command tx timeout
[ 58.086129][ T4992] Bluetooth: hci1: command tx timeout
[ 58.095018][ T5721] Bluetooth: hci0: command tx timeout
[ 58.171166][ T5719] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 58.180269][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 58.188839][ T5719] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 58.195963][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 58.199581][ T5719] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 58.213879][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 58.221951][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0
[ 58.227296][ T5719] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 58.240017][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 58.274759][ T5717] 8021q: adding VLAN 0 to HW filter on device team0
[ 58.288331][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.288415][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 58.312811][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.312895][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.411531][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0
[ 58.421678][ T5719] 8021q: adding VLAN 0 to HW filter on device team0
[ 58.426220][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.426300][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 58.429884][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.429924][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.673686][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 58.708276][ T5717] veth0_vlan: entered promiscuous mode
[ 58.719576][ T5717] veth1_vlan: entered promiscuous mode
[ 58.740668][ T5717] veth0_macvtap: entered promiscuous mode
[ 58.747299][ T5717] veth1_macvtap: entered promiscuous mode
[ 58.757725][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.764268][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 58.782259][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 58.805195][ T5428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.805704][ T5428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.806281][ T5428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.806298][ T5428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.855158][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.855200][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.884654][ T5719] veth0_vlan: entered promiscuous mode
2026/09/11 20:08:10 executed programs: 42
[ 58.889329][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.889386][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.896838][ T5719] veth1_vlan: entered promiscuous mode
[ 58.935343][ T5719] veth0_macvtap: entered promiscuous mode
[ 58.941708][ T5719] veth1_macvtap: entered promiscuous mode
[ 58.974221][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.984339][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 59.015412][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.015492][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.034814][ T5629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.046157][ T5629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.120792][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 59.120842][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 59.144194][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 59.144253][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 60.165602][ T4992] Bluetooth: hci2: command tx timeout
[ 60.165662][ T4992] Bluetooth: hci1: command tx timeout
[ 60.166071][ T5721] Bluetooth: hci0: command tx timeout
[ 62.244778][ T54] Bluetooth: hci1: command tx timeout
[ 62.244852][ T54] Bluetooth: hci2: command tx timeout
[ 62.245385][ T5721] Bluetooth: hci0: command tx timeout
2026/09/11 20:08:15 executed programs: 222