Warning: Permanently added '[localhost]:4478' (ED25519) to the list of known hosts. [ 43.124926][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 43.124941][ T42] audit: type=1400 audit(1785712423.273:138): avc: denied { execute } for pid=5736 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.135461][ T42] audit: type=1400 audit(1785712423.273:139): avc: denied { execute_no_trans } for pid=5736 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/02 23:13:44 parsed 1 programs 2026/08/02 23:13:44 serving rpc on tcp://33895 [ 44.170719][ T42] audit: type=1400 audit(1785712424.323:140): avc: denied { node_bind } for pid=5736 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.179279][ T42] audit: type=1400 audit(1785712424.323:141): avc: denied { node_bind } for pid=5736 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.402752][ T42] audit: type=1400 audit(1785712426.553:142): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.411005][ T42] audit: type=1400 audit(1785712426.563:143): avc: denied { mount } for pid=5746 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.412920][ T5746] cgroup: Unknown subsys name 'net' [ 46.422245][ T42] audit: type=1400 audit(1785712426.573:144): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.611143][ T5746] cgroup: Unknown subsys name 'cpuset' [ 46.617577][ T5746] cgroup: Unknown subsys name 'rlimit' [ 46.796101][ T42] audit: type=1400 audit(1785712426.943:145): avc: denied { setattr } for pid=5746 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.803527][ T42] audit: type=1400 audit(1785712426.953:146): avc: denied { create } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.809944][ T42] audit: type=1400 audit(1785712426.953:147): avc: denied { write } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.852500][ T5749] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.568207][ T5746] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.123691][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 49.123704][ T42] audit: type=1400 audit(1785712429.273:159): avc: denied { execmem } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.173166][ T42] audit: type=1400 audit(1785712429.323:160): avc: denied { read } for pid=5755 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.180026][ T42] audit: type=1400 audit(1785712429.323:161): avc: denied { open } for pid=5755 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.187468][ T42] audit: type=1400 audit(1785712429.323:162): avc: denied { mounton } for pid=5755 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.221626][ T42] audit: type=1400 audit(1785712429.373:163): avc: denied { mount } for pid=5755 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.228475][ T42] audit: type=1400 audit(1785712429.373:164): avc: denied { mounton } for pid=5755 comm="syz-executor" path="/syzkaller.rjfvdM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.235977][ T42] audit: type=1400 audit(1785712429.373:165): avc: denied { mount } for pid=5755 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.242645][ T42] audit: type=1400 audit(1785712429.373:166): avc: denied { mounton } for pid=5755 comm="syz-executor" path="/syzkaller.rjfvdM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.250522][ T42] audit: type=1400 audit(1785712429.373:167): avc: denied { mounton } for pid=5755 comm="syz-executor" path="/syzkaller.rjfvdM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.258538][ T42] audit: type=1400 audit(1785712429.383:168): avc: denied { unmount } for pid=5755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.267997][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.477369][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.480034][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.499266][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.502638][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.710725][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.714549][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.718170][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.721013][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.723846][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.284626][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.287940][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.290741][ T5826] bridge_slave_0: entered allmulticast mode [ 51.294758][ T5826] bridge_slave_0: entered promiscuous mode [ 51.301258][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.306933][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.309180][ T5826] bridge_slave_1: entered allmulticast mode [ 51.312865][ T5826] bridge_slave_1: entered promiscuous mode [ 51.330725][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.335096][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.350620][ T5826] team0: Port device team_slave_0 added [ 51.353680][ T5826] team0: Port device team_slave_1 added [ 51.368404][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.370614][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.379148][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.384263][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.386400][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.394219][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.418515][ T5826] hsr_slave_0: entered promiscuous mode [ 51.420839][ T5826] hsr_slave_1: entered promiscuous mode [ 51.516552][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.522788][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.525727][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.530279][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.532970][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.536669][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.539473][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.543287][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.588602][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.601377][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.607012][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.609576][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.615690][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.617937][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.810739][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.834747][ T5826] veth0_vlan: entered promiscuous mode [ 51.840986][ T5826] veth1_vlan: entered promiscuous mode [ 51.859168][ T5826] veth0_macvtap: entered promiscuous mode [ 51.862981][ T5826] veth1_macvtap: entered promiscuous mode [ 51.872158][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.879297][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.908353][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.912237][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.926919][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.929603][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.959021][ T5762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.021099][ T5762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.095288][ T5762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.191742][ T5762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/02 23:13:52 executed programs: 0 [ 52.272107][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.275717][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.278890][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.282120][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.285233][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.583907][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.586298][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.588903][ T5868] bridge_slave_0: entered allmulticast mode [ 52.591843][ T5868] bridge_slave_0: entered promiscuous mode [ 52.595252][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.597977][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.600242][ T5868] bridge_slave_1: entered allmulticast mode [ 52.602705][ T5868] bridge_slave_1: entered promiscuous mode [ 52.630141][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.635156][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.650526][ T5868] team0: Port device team_slave_0 added [ 52.653502][ T5868] team0: Port device team_slave_1 added [ 52.667366][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.670101][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.679422][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.683619][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.685792][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.693520][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.720696][ T5868] hsr_slave_0: entered promiscuous mode [ 52.723654][ T5868] hsr_slave_1: entered promiscuous mode [ 52.726112][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 52.728041][ T5868] Cannot create hsr debugfs directory [ 54.307562][ T5099] Bluetooth: hci0: command tx timeout [ 54.971250][ T5762] bridge_slave_1: left allmulticast mode [ 54.973020][ T5762] bridge_slave_1: left promiscuous mode [ 54.975397][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.980503][ T5762] bridge_slave_0: left allmulticast mode [ 54.982464][ T5762] bridge_slave_0: left promiscuous mode [ 54.984468][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.056268][ T5762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.068088][ T5762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.071578][ T5762] bond0 (unregistering): Released all slaves [ 55.140534][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 55.140546][ T42] audit: type=1400 audit(1785712435.293:189): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.153445][ T42] audit: type=1400 audit(1785712435.293:190): avc: denied { create } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.160939][ T42] audit: type=1400 audit(1785712435.293:191): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.168897][ T42] audit: type=1400 audit(1785712435.293:192): avc: denied { append } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.176100][ T42] audit: type=1400 audit(1785712435.323:193): avc: denied { write } for pid=5891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.182863][ T42] audit: type=1400 audit(1785712435.323:194): avc: denied { unlink } for pid=5891 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.206898][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.221445][ T5762] hsr_slave_0: left promiscuous mode [ 55.223700][ T5762] hsr_slave_1: left promiscuous mode [ 55.225743][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.230592][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.233714][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.236036][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.243862][ T5762] veth1_macvtap: left promiscuous mode [ 55.246265][ T5762] veth0_macvtap: left promiscuous mode [ 55.248145][ T5762] veth1_vlan: left promiscuous mode [ 55.249813][ T5762] veth0_vlan: left promiscuous mode [ 55.260015][ T42] audit: type=1400 audit(1785712435.413:195): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.295074][ T42] audit: type=1400 audit(1785712435.443:196): avc: denied { write } for pid=5897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.358727][ T5762] team0 (unregistering): Port device team_slave_1 removed [ 55.365222][ T5762] team0 (unregistering): Port device team_slave_0 removed [ 55.428711][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.504936][ T42] audit: type=1400 audit(1785712435.653:197): avc: denied { write } for pid=5901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.543104][ T42] audit: type=1400 audit(1785712435.693:198): avc: denied { write } for pid=5904 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.710818][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.715207][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.722636][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.727567][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.730804][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.734982][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.738310][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.749941][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.784067][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.794497][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.799560][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.801868][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.808686][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.810962][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.011821][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.038528][ T5868] veth0_vlan: entered promiscuous mode [ 56.045180][ T5868] veth1_vlan: entered promiscuous mode [ 56.061010][ T5868] veth0_macvtap: entered promiscuous mode [ 56.065756][ T5868] veth1_macvtap: entered promiscuous mode [ 56.076320][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.083311][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.117466][ T5608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.121703][ T5608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.125168][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.127879][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.144032][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.146494][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.176955][ T5608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.180445][ T5608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.206731][ T5928] [ 56.207680][ T5928] ============================= [ 56.209389][ T5928] WARNING: suspicious RCU usage [ 56.210876][ T5928] syzkaller #0 Not tainted [ 56.212251][ T5928] ----------------------------- [ 56.213730][ T5928] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 56.216169][ T5928] [ 56.216169][ T5928] other info that might help us debug this: [ 56.216169][ T5928] [ 56.219372][ T5928] [ 56.219372][ T5928] rcu_scheduler_active = 2, debug_locks = 1 [ 56.221842][ T5928] 1 lock held by syz.0.17/5928: [ 56.223461][ T5928] #0: ffff88802d13ead0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 56.226707][ T5928] [ 56.226707][ T5928] stack backtrace: [ 56.228606][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 56.228631][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.228639][ T5928] Call Trace: [ 56.228653][ T5928] [ 56.228657][ T5928] dump_stack_lvl+0x100/0x190 [ 56.228674][ T5928] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 56.228694][ T5928] xfrm_do_migrate_state+0x2463/0x2f10 [ 56.228711][ T5928] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 56.228724][ T5928] ? __asan_memset+0x23/0x50 [ 56.228736][ T5928] ? __nla_validate_parse+0x1e7/0x28b0 [ 56.228758][ T5928] ? __nla_parse+0x40/0x60 [ 56.228767][ T5928] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 56.228781][ T5928] ? xfrm_user_rcv_msg+0x483/0xd80 [ 56.228792][ T5928] xfrm_user_rcv_msg+0x483/0xd80 [ 56.228804][ T5928] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 56.228816][ T5928] ? kfree_skbmem+0x19f/0x210 [ 56.228830][ T5928] ? consume_skb+0xd6/0x110 [ 56.228857][ T5928] ? rcu_is_watching+0x12/0xc0 [ 56.228874][ T5928] ? trace_contention_end+0x126/0x160 [ 56.228889][ T5928] ? __mutex_lock+0x26d/0x1bd0 [ 56.228905][ T5928] netlink_rcv_skb+0x159/0x420 [ 56.228917][ T5928] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 56.228929][ T5928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.228947][ T5928] xfrm_netlink_rcv+0x71/0x90 [ 56.228957][ T5928] netlink_unicast+0x585/0x850 [ 56.228970][ T5928] ? __pfx_netlink_unicast+0x10/0x10 [ 56.228981][ T5928] ? __pfx_sock_has_perm+0x10/0x10 [ 56.228998][ T5928] netlink_sendmsg+0x8b0/0xda0 [ 56.229011][ T5928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.229023][ T5928] ? selinux_socket_sendmsg+0x198/0x2f0 [ 56.229041][ T5928] ____sys_sendmsg+0xa4d/0xbe0 [ 56.229056][ T5928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.229068][ T5928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.229084][ T5928] ? futex_hash+0x311/0x400 [ 56.229101][ T5928] ? futex_hash+0x31b/0x400 [ 56.229113][ T5928] ? futex_hash+0x79/0x400 [ 56.229125][ T5928] ? __pfx_get_futex_key+0x10/0x10 [ 56.229140][ T5928] ___sys_sendmsg+0x190/0x1e0 [ 56.229151][ T5928] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.229162][ T5928] ? futex_wake+0x220/0x5e0 [ 56.229176][ T5928] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.229199][ T5928] ? __pfx_do_futex+0x10/0x10 [ 56.229213][ T5928] ? find_held_lock+0x2b/0x80 [ 56.229222][ T5928] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 56.229237][ T5928] __sys_sendmsg+0x160/0x210 [ 56.229251][ T5928] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.229271][ T5928] do_syscall_64+0x115/0x870 [ 56.229283][ T5928] ? clear_bhb_loop+0x40/0x90 [ 56.229297][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.229307][ T5928] RIP: 0033:0x7f39a259e019 [ 56.229318][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.229328][ T5928] RSP: 002b:00007fff1af32c28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.229345][ T5928] RAX: ffffffffffffffda RBX: 00007f39a2825fa0 RCX: 00007f39a259e019 [ 56.229352][ T5928] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 56.229358][ T5928] RBP: 00007f39a263500c R08: 0000000000000000 R09: 0000000000000000 [ 56.229364][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.229371][ T5928] R13: 00007f39a2825fac R14: 00007f39a2825fa0 R15: 00007f39a2825fa0 [ 56.229383][ T5928] [ 56.397226][ T5099] Bluetooth: hci0: command tx timeout 2026/08/02 23:13:57 executed programs: 55 [ 58.467710][ T5099] Bluetooth: hci0: command tx timeout [ 60.556925][ T5099] Bluetooth: hci0: command tx timeout 2026/08/02 23:14:02 executed programs: 331