Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. 2026/07/27 10:28:59 parsed 1 programs 2026/07/27 10:28:59 serving rpc on tcp://32823 [ 88.290733][ T5642] cgroup: Unknown subsys name 'net' [ 88.431822][ T5642] cgroup: Unknown subsys name 'cpuset' [ 88.441290][ T5642] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.106481][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.220359][ T194] cfg80211: failed to load regulatory.db [ 93.371843][ T5658] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.249943][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.258294][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.265546][ T5690] bridge_slave_0: entered allmulticast mode [ 95.273473][ T5690] bridge_slave_0: entered promiscuous mode [ 95.283752][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.291136][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.298579][ T5690] bridge_slave_1: entered allmulticast mode [ 95.306253][ T5690] bridge_slave_1: entered promiscuous mode [ 95.336010][ T5690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.347743][ T5690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.376843][ T5690] team0: Port device team_slave_0 added [ 95.384739][ T5690] team0: Port device team_slave_1 added [ 95.409147][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.416375][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.443218][ T5690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.459209][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.466477][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.492560][ T5690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.536161][ T5690] hsr_slave_0: entered promiscuous mode [ 95.542915][ T5690] hsr_slave_1: entered promiscuous mode [ 95.686654][ T5690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.700868][ T5690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.709578][ T5690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.720508][ T5690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.730180][ T5690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.739961][ T5690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.748598][ T5690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.762159][ T5690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.791972][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.799672][ T5690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.807586][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.814788][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.875643][ T5690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.897674][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.908294][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.924669][ T5690] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.940825][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.947970][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.962410][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.969767][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.299345][ T5690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.353365][ T5690] veth0_vlan: entered promiscuous mode [ 96.366635][ T5690] veth1_vlan: entered promiscuous mode [ 96.400734][ T5690] veth0_macvtap: entered promiscuous mode [ 96.411096][ T5690] veth1_macvtap: entered promiscuous mode [ 96.431847][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.449331][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.466313][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.480876][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.497274][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.507049][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.658916][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.670416][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.681394][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.692305][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.703064][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.722194][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.804127][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.897311][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.991985][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.095557][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.105197][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.140198][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.149085][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 10:29:13 executed programs: 0 [ 99.027296][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.036717][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.045484][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.055389][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.063791][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.256736][ T36] bridge_slave_1: left allmulticast mode [ 99.276720][ T36] bridge_slave_1: left promiscuous mode [ 99.285248][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.301706][ T36] bridge_slave_0: left allmulticast mode [ 99.307527][ T36] bridge_slave_0: left promiscuous mode [ 99.317605][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.550115][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.563265][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.574321][ T36] bond0 (unregistering): Released all slaves [ 99.696130][ T36] hsr_slave_0: left promiscuous mode [ 99.702712][ T36] hsr_slave_1: left promiscuous mode [ 99.718554][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.727014][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.736439][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.744283][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.762401][ T36] veth1_macvtap: left promiscuous mode [ 99.768941][ T36] veth0_macvtap: left promiscuous mode [ 99.774711][ T36] veth1_vlan: left promiscuous mode [ 99.780677][ T36] veth0_vlan: left promiscuous mode [ 100.040417][ T36] team0 (unregistering): Port device team_slave_1 removed [ 100.063212][ T36] team0 (unregistering): Port device team_slave_0 removed [ 100.178525][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 100.809570][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.848159][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.855840][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.863407][ T5768] bridge_slave_0: entered allmulticast mode [ 100.872264][ T5768] bridge_slave_0: entered promiscuous mode [ 100.881792][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.889722][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.897019][ T5768] bridge_slave_1: entered allmulticast mode [ 100.904608][ T5768] bridge_slave_1: entered promiscuous mode [ 101.099248][ T5728] Bluetooth: hci0: command tx timeout [ 101.214717][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.232501][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.328570][ T5768] team0: Port device team_slave_0 added [ 101.437375][ T5768] team0: Port device team_slave_1 added [ 101.546369][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.578171][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.604703][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.620797][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.628216][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.655369][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.890520][ T5768] hsr_slave_0: entered promiscuous mode [ 101.897842][ T5768] hsr_slave_1: entered promiscuous mode [ 102.005963][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.816022][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.841096][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.849266][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.861693][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.870385][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.883819][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.894483][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.907388][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.033628][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.064172][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.083583][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.091181][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.121904][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.129155][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.181484][ T5728] Bluetooth: hci0: command tx timeout [ 103.714927][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.794116][ T5768] veth0_vlan: entered promiscuous mode [ 103.812137][ T5768] veth1_vlan: entered promiscuous mode [ 103.859653][ T5768] veth0_macvtap: entered promiscuous mode [ 103.872965][ T5768] veth1_macvtap: entered promiscuous mode [ 103.905672][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.924213][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.945296][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.965972][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.989517][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.017341][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.089246][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.100023][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.143993][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.153653][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.337127][ T5896] [ 104.340620][ T5896] ============================= [ 104.345943][ T5896] WARNING: suspicious RCU usage [ 104.351044][ T5896] syzkaller #0 Not tainted [ 104.356215][ T5896] ----------------------------- [ 104.361184][ T5896] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 104.369676][ T5896] [ 104.369676][ T5896] other info that might help us debug this: [ 104.369676][ T5896] [ 104.380445][ T5896] [ 104.380445][ T5896] rcu_scheduler_active = 2, debug_locks = 1 [ 104.388745][ T5896] 1 lock held by syz.0.17/5896: [ 104.393630][ T5896] #0: ffff88807e2f4390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 104.404357][ T5896] [ 104.404357][ T5896] stack backtrace: [ 104.410344][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.410371][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.410382][ T5896] Call Trace: [ 104.410390][ T5896] [ 104.410398][ T5896] dump_stack_lvl+0xe8/0x150 [ 104.410434][ T5896] lockdep_rcu_suspicious+0x13f/0x1d0 [ 104.410470][ T5896] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 104.410505][ T5896] xfrm_send_migrate_state+0x870/0xae0 [ 104.410550][ T5896] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 104.410586][ T5896] ? xfrm_state_migrate_install+0x192/0x630 [ 104.410622][ T5896] xfrm_do_migrate_state+0x1703/0x1e50 [ 104.410657][ T5896] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 104.410696][ T5896] ? apparmor_capable+0x126/0x170 [ 104.410729][ T5896] ? __nla_parse+0x40/0x60 [ 104.410763][ T5896] xfrm_user_rcv_msg+0x7a8/0xf30 [ 104.410790][ T5896] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 104.410842][ T5896] ? __mutex_trylock_common+0x15f/0x270 [ 104.410867][ T5896] ? __pfx___mutex_trylock_common+0x10/0x10 [ 104.410892][ T5896] ? rcu_is_watching+0x15/0xb0 [ 104.410912][ T5896] ? trace_contention_end+0x3d/0x140 [ 104.410942][ T5896] netlink_rcv_skb+0x226/0x4a0 [ 104.410967][ T5896] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 104.410990][ T5896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.411030][ T5896] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.411053][ T5896] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.411078][ T5896] xfrm_netlink_rcv+0x79/0x90 [ 104.411099][ T5896] netlink_unicast+0x7bb/0x940 [ 104.411131][ T5896] netlink_sendmsg+0x813/0xb40 [ 104.411165][ T5896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.411186][ T5896] ? filemap_map_pages+0x1ccc/0x2090 [ 104.411215][ T5896] ? aa_sock_msg_perm+0xf1/0x1b0 [ 104.411243][ T5896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.411265][ T5896] sock_sendmsg_nosec+0x13a/0x180 [ 104.411297][ T5896] ____sys_sendmsg+0x54e/0x850 [ 104.411334][ T5896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.411366][ T5896] ? import_iovec+0x73/0xa0 [ 104.411389][ T5896] ___sys_sendmsg+0x2a5/0x360 [ 104.411418][ T5896] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.411445][ T5896] ? futex_wake+0x522/0x5f0 [ 104.411503][ T5896] ? __pfx_do_futex+0x10/0x10 [ 104.411530][ T5896] __x64_sys_sendmsg+0x1b1/0x290 [ 104.411556][ T5896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.411598][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.411620][ T5896] do_syscall_64+0x174/0x580 [ 104.411641][ T5896] ? trace_irq_disable+0x3b/0x140 [ 104.411667][ T5896] ? clear_bhb_loop+0x40/0x90 [ 104.411692][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.411712][ T5896] RIP: 0033:0x7f75d0d9de99 [ 104.411732][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.411748][ T5896] RSP: 002b:00007ffc103d8fa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.411769][ T5896] RAX: ffffffffffffffda RBX: 00007f75d1025fa0 RCX: 00007f75d0d9de99 [ 104.411783][ T5896] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 104.411795][ T5896] RBP: 00007f75d0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 104.411806][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.411817][ T5896] R13: 00007f75d1025fac R14: 00007f75d1025fa0 R15: 00007f75d1025fa0 [ 104.411848][ T5896]