Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://37813 [ 31.835538][ T4728] cgroup: Unknown subsys name 'net' [ 31.955618][ T4728] cgroup: Unknown subsys name 'cpuset' [ 31.957810][ T4728] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.111622][ T4728] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.627009][ T4736] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.694557][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.694588][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.702891][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.702926][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.790758][ T4751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.791268][ T4751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.791435][ T4751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.791732][ T4751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.791950][ T4751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.265163][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.265442][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.265509][ T4760] bridge_slave_0: entered allmulticast mode [ 35.265960][ T4760] bridge_slave_0: entered promiscuous mode [ 35.267323][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.267375][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.267423][ T4760] bridge_slave_1: entered allmulticast mode [ 35.267818][ T4760] bridge_slave_1: entered promiscuous mode [ 35.274741][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.275597][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.282077][ T4760] team0: Port device team_slave_0 added [ 35.282790][ T4760] team0: Port device team_slave_1 added [ 35.290623][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.290650][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.290664][ T4760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.291691][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.291698][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.291712][ T4760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.301084][ T4760] hsr_slave_0: entered promiscuous mode [ 35.301396][ T4760] hsr_slave_1: entered promiscuous mode [ 35.346959][ T4760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.350449][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.352565][ T4760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.356019][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.356625][ T4760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.358315][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.358630][ T4760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.362012][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.402538][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.402591][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.402770][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.402798][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.419422][ T4760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.423653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.425704][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.430894][ T4760] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.437517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.437580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.441253][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.441304][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.548732][ T4760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.561298][ T4760] veth0_vlan: entered promiscuous mode [ 35.563303][ T4760] veth1_vlan: entered promiscuous mode [ 35.570704][ T4760] veth0_macvtap: entered promiscuous mode [ 35.572249][ T4760] veth1_macvtap: entered promiscuous mode [ 35.577471][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.578625][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.580749][ T3604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.582605][ T3604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.591718][ T3604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.593464][ T3604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.689849][ T15] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.737690][ T15] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.788059][ T15] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.879719][ T15] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.509156][ T4741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.509512][ T4741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.509675][ T4741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.509993][ T4741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.510188][ T4741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.644503][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.644548][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.644609][ T4833] bridge_slave_0: entered allmulticast mode [ 36.645040][ T4833] bridge_slave_0: entered promiscuous mode [ 36.646796][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.646854][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.646921][ T4833] bridge_slave_1: entered allmulticast mode [ 36.647350][ T4833] bridge_slave_1: entered promiscuous mode [ 36.654606][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.655636][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.663555][ T4833] team0: Port device team_slave_0 added [ 36.665010][ T4833] team0: Port device team_slave_1 added [ 36.671266][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.671296][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.671309][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.671821][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.671827][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.671841][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.682825][ T4833] hsr_slave_0: entered promiscuous mode [ 36.683156][ T4833] hsr_slave_1: entered promiscuous mode [ 36.683376][ T4833] debugfs: 'hsr0' already exists in 'hsr' [ 36.683428][ T4833] Cannot create hsr debugfs directory [ 38.584522][ T4751] Bluetooth: hci0: command tx timeout [ 39.362869][ T15] bridge_slave_1: left allmulticast mode [ 39.364316][ T15] bridge_slave_1: left promiscuous mode [ 39.365928][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.370918][ T15] bridge_slave_0: left allmulticast mode [ 39.370946][ T15] bridge_slave_0: left promiscuous mode [ 39.371021][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.427776][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.436270][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.440102][ T15] bond0 (unregistering): Released all slaves [ 39.497465][ T15] hsr_slave_0: left promiscuous mode [ 39.497786][ T15] hsr_slave_1: left promiscuous mode [ 39.498299][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.498314][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.499495][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.499505][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.504823][ T15] veth1_macvtap: left promiscuous mode [ 39.504859][ T15] veth0_macvtap: left promiscuous mode [ 39.504933][ T15] veth1_vlan: left promiscuous mode [ 39.504974][ T15] veth0_vlan: left promiscuous mode [ 39.608067][ T15] team0 (unregistering): Port device team_slave_1 removed [ 39.611824][ T15] team0 (unregistering): Port device team_slave_0 removed [ 39.656372][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.898421][ T4833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.901296][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.901690][ T4833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.903341][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.905186][ T4833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.907809][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.908154][ T4833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.912445][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.942812][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.947313][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.961980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.962027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.963007][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.963030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.222857][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.237943][ T4833] veth0_vlan: entered promiscuous mode [ 40.240168][ T4833] veth1_vlan: entered promiscuous mode [ 40.247141][ T4833] veth0_macvtap: entered promiscuous mode [ 40.249077][ T4833] veth1_macvtap: entered promiscuous mode [ 40.252714][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.253671][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.263178][ T3517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.263361][ T3517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.263471][ T3517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.263542][ T3517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.288388][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.288414][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.298701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.298729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.372510][ T4925] [ 40.372964][ T4925] ============================= [ 40.373862][ T4925] WARNING: suspicious RCU usage [ 40.374775][ T4925] syzkaller #0 Not tainted [ 40.375550][ T4925] ----------------------------- [ 40.376272][ T4925] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 40.377470][ T4925] [ 40.377470][ T4925] other info that might help us debug this: [ 40.377470][ T4925] [ 40.379037][ T4925] [ 40.379037][ T4925] rcu_scheduler_active = 2, debug_locks = 1 [ 40.380249][ T4925] 1 lock held by syz.0.17/4925: [ 40.381016][ T4925] #0: ffff0000d5c74390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x70/0x9c [ 40.382698][ T4925] [ 40.382698][ T4925] stack backtrace: [ 40.383677][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 40.385165][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 40.386922][ T4925] Call trace: [ 40.387466][ T4925] show_stack+0x2c/0x3c (C) [ 40.388229][ T4925] __dump_stack+0x30/0x40 [ 40.388976][ T4925] dump_stack_lvl+0xd8/0x12c [ 40.389754][ T4925] dump_stack+0x1c/0x28 [ 40.390471][ T4925] lockdep_rcu_suspicious+0x168/0x26c [ 40.391408][ T4925] xfrm_send_migrate_state+0x6b0/0x958 [ 40.392318][ T4925] xfrm_do_migrate_state+0x1114/0x1728 [ 40.393233][ T4925] xfrm_user_rcv_msg+0x4e0/0x950 [ 40.394064][ T4925] netlink_rcv_skb+0x238/0x414 [ 40.394838][ T4925] xfrm_netlink_rcv+0x80/0x9c [ 40.395657][ T4925] netlink_unicast+0x600/0x7f8 [ 40.396498][ T4925] netlink_sendmsg+0x648/0x948 [ 40.397305][ T4925] __sock_sendmsg+0xc8/0x17c [ 40.398108][ T4925] ____sys_sendmsg+0x3d0/0x6c8 [ 40.398972][ T4925] ___sys_sendmsg+0x198/0x224 [ 40.399804][ T4925] __sys_sendmsg+0x158/0x204 [ 40.400635][ T4925] __arm64_sys_sendmsg+0x80/0x94 [ 40.401504][ T4925] invoke_syscall+0x98/0x244 [ 40.402320][ T4925] el0_svc_common+0xec/0x23c [ 40.403144][ T4925] do_el0_svc+0x4c/0x5c [ 40.403945][ T4925] el0_svc+0x64/0x260 [ 40.404693][ T4925] el0t_64_sync_handler+0x48/0x148 [ 40.405573][ T4925] el0t_64_sync+0x198/0x19c