Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. 2026/07/27 07:41:52 parsed 1 programs 2026/07/27 07:41:52 serving rpc on tcp://44781 [ 105.433308][ T5646] cgroup: Unknown subsys name 'net' [ 105.550727][ T5646] cgroup: Unknown subsys name 'cpuset' [ 105.559915][ T5646] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.987870][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.858739][ T5657] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.806099][ T5703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.815090][ T5703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.823271][ T5703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.832862][ T5703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.841268][ T5703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.475413][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.482996][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.490321][ T5709] bridge_slave_0: entered allmulticast mode [ 112.497268][ T5709] bridge_slave_0: entered promiscuous mode [ 112.507070][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.514384][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.521611][ T5709] bridge_slave_1: entered allmulticast mode [ 112.528816][ T5709] bridge_slave_1: entered promiscuous mode [ 112.553959][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.565134][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.592168][ T5709] team0: Port device team_slave_0 added [ 112.599651][ T5709] team0: Port device team_slave_1 added [ 112.622401][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.629641][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.655606][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.669065][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.676045][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.701950][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.740170][ T5709] hsr_slave_0: entered promiscuous mode [ 112.747953][ T5709] hsr_slave_1: entered promiscuous mode [ 112.887862][ T5709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.901348][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.909904][ T5709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.919213][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.928127][ T5709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.939590][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.948107][ T5709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.958925][ T5709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.985279][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.992793][ T5709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.000608][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.007723][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.063143][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.082192][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.091091][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.108724][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.121989][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.129159][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.143329][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.150487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.440183][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.491286][ T5709] veth0_vlan: entered promiscuous mode [ 113.504366][ T5709] veth1_vlan: entered promiscuous mode [ 113.533741][ T5709] veth0_macvtap: entered promiscuous mode [ 113.543890][ T5709] veth1_macvtap: entered promiscuous mode [ 113.564173][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.580185][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.600411][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.610756][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.621444][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.632360][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.770317][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.851438][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.954385][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.064411][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.190164][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.202342][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.242228][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.251194][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 07:42:04 executed programs: 0 [ 114.954026][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.963206][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.972870][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.981609][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.989807][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.379615][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.386793][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.394774][ T5773] bridge_slave_0: entered allmulticast mode [ 115.401740][ T5773] bridge_slave_0: entered promiscuous mode [ 115.412199][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.419410][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.426569][ T5773] bridge_slave_1: entered allmulticast mode [ 115.435218][ T5773] bridge_slave_1: entered promiscuous mode [ 115.461726][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.472920][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.509294][ T5773] team0: Port device team_slave_0 added [ 115.516602][ T5773] team0: Port device team_slave_1 added [ 115.539604][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.546564][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.573007][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.586117][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.593488][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.619548][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.659988][ T5773] hsr_slave_0: entered promiscuous mode [ 115.666184][ T5773] hsr_slave_1: entered promiscuous mode [ 115.672453][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 115.678575][ T5773] Cannot create hsr debugfs directory [ 116.719675][ T35] bridge_slave_1: left allmulticast mode [ 116.726021][ T35] bridge_slave_1: left promiscuous mode [ 116.734406][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.745423][ T35] bridge_slave_0: left allmulticast mode [ 116.751504][ T35] bridge_slave_0: left promiscuous mode [ 116.757684][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.880336][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.892031][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.902138][ T35] bond0 (unregistering): Released all slaves [ 116.988116][ T35] hsr_slave_0: left promiscuous mode [ 116.994242][ T35] hsr_slave_1: left promiscuous mode [ 117.000888][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.010352][ T5703] Bluetooth: hci0: command tx timeout [ 117.020661][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.031264][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.038994][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.055978][ T35] veth1_macvtap: left promiscuous mode [ 117.062159][ T35] veth0_macvtap: left promiscuous mode [ 117.068695][ T35] veth1_vlan: left promiscuous mode [ 117.074358][ T35] veth0_vlan: left promiscuous mode [ 117.372184][ T35] team0 (unregistering): Port device team_slave_1 removed [ 117.391164][ T35] team0 (unregistering): Port device team_slave_0 removed [ 117.531822][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.862270][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.874910][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.885603][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.900390][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.918097][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.933106][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.943499][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.956651][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.371925][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.472774][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.497006][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.504228][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.543727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.550939][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.089093][ T5703] Bluetooth: hci0: command tx timeout [ 119.192672][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.253100][ T5773] veth0_vlan: entered promiscuous mode [ 119.268207][ T5773] veth1_vlan: entered promiscuous mode [ 119.309716][ T5773] veth0_macvtap: entered promiscuous mode [ 119.319706][ T5773] veth1_macvtap: entered promiscuous mode [ 119.338624][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.352177][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.365535][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.374588][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.384627][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.393774][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.453578][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.464123][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.491307][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.499676][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.600102][ T5864] [ 119.602936][ T5864] ============================= [ 119.607840][ T5864] WARNING: suspicious RCU usage [ 119.612697][ T5864] syzkaller #0 Not tainted [ 119.617098][ T5864] ----------------------------- [ 119.622405][ T5864] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 119.631325][ T5864] [ 119.631325][ T5864] other info that might help us debug this: [ 119.631325][ T5864] [ 119.641858][ T5864] [ 119.641858][ T5864] rcu_scheduler_active = 2, debug_locks = 1 [ 119.650580][ T5864] 1 lock held by syz.0.17/5864: [ 119.655721][ T5864] #0: ffff88807921c390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 119.666658][ T5864] [ 119.666658][ T5864] stack backtrace: [ 119.672974][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 119.672990][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.673010][ T5864] Call Trace: [ 119.673015][ T5864] [ 119.673020][ T5864] dump_stack_lvl+0xe8/0x150 [ 119.673042][ T5864] lockdep_rcu_suspicious+0x13f/0x1d0 [ 119.673063][ T5864] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 119.673077][ T5864] xfrm_send_migrate_state+0x870/0xae0 [ 119.673100][ T5864] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 119.673120][ T5864] ? xfrm_state_migrate_install+0x192/0x630 [ 119.673133][ T5864] xfrm_do_migrate_state+0x1703/0x1e50 [ 119.673152][ T5864] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 119.673173][ T5864] ? apparmor_capable+0x126/0x170 [ 119.673192][ T5864] ? __nla_parse+0x40/0x60 [ 119.673211][ T5864] xfrm_user_rcv_msg+0x7a8/0xf30 [ 119.673226][ T5864] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 119.673252][ T5864] ? __mutex_trylock_common+0x15f/0x270 [ 119.673266][ T5864] ? __pfx___mutex_trylock_common+0x10/0x10 [ 119.673279][ T5864] ? rcu_is_watching+0x15/0xb0 [ 119.673291][ T5864] ? trace_contention_end+0x3d/0x140 [ 119.673306][ T5864] netlink_rcv_skb+0x226/0x4a0 [ 119.673322][ T5864] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 119.673335][ T5864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.673355][ T5864] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.673368][ T5864] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.673382][ T5864] xfrm_netlink_rcv+0x79/0x90 [ 119.673394][ T5864] netlink_unicast+0x7bb/0x940 [ 119.673411][ T5864] netlink_sendmsg+0x813/0xb40 [ 119.673428][ T5864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.673441][ T5864] ? filemap_map_pages+0x1ccc/0x2090 [ 119.673457][ T5864] ? aa_sock_msg_perm+0xf1/0x1b0 [ 119.673472][ T5864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.673485][ T5864] sock_sendmsg_nosec+0x13a/0x180 [ 119.673507][ T5864] ____sys_sendmsg+0x54e/0x850 [ 119.673524][ T5864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.673541][ T5864] ? import_iovec+0x73/0xa0 [ 119.673554][ T5864] ___sys_sendmsg+0x2a5/0x360 [ 119.673569][ T5864] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.673584][ T5864] ? futex_wake+0x522/0x5f0 [ 119.673613][ T5864] ? __pfx_do_futex+0x10/0x10 [ 119.673627][ T5864] __x64_sys_sendmsg+0x1b1/0x290 [ 119.673641][ T5864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.673662][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.673675][ T5864] do_syscall_64+0x174/0x580 [ 119.673688][ T5864] ? trace_irq_disable+0x3b/0x140 [ 119.673704][ T5864] ? clear_bhb_loop+0x40/0x90 [ 119.673718][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.673729][ T5864] RIP: 0033:0x7f29c839de99 [ 119.673745][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.673754][ T5864] RSP: 002b:00007ffeae80ca48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.673767][ T5864] RAX: ffffffffffffffda RBX: 00007f29c8625fa0 RCX: 00007f29c839de99 [ 119.673776][ T5864] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 119.673784][ T5864] RBP: 00007f29c8433eaf R08: 0000000000000000 R09: 0000000000000000 [ 119.673791][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.673798][ T5864] R13: 00007f29c8625fac R14: 00007f29c8625fa0 R15: 00007f29c8625fa0 [ 119.673814][ T5864] 2026/07/27 07:42:10 executed programs: 3 [ 121.167854][ T5703] Bluetooth: hci0: command tx timeout [ 123.247628][ T5703] Bluetooth: hci0: command tx timeout 2026/07/27 07:42:15 executed programs: 242