Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2026/07/27 16:04:58 parsed 1 programs 2026/07/27 16:04:58 serving rpc on tcp://46737 [ 89.381999][ T5639] cgroup: Unknown subsys name 'net' [ 89.535794][ T5639] cgroup: Unknown subsys name 'cpuset' [ 89.544980][ T5639] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.307344][ T5639] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.986075][ T808] cfg80211: failed to load regulatory.db [ 94.490394][ T5653] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.401166][ T5674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.411089][ T5674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.420084][ T5674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.428910][ T5674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.437091][ T5674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.891358][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.900903][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.941301][ T393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.950827][ T393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.292177][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.300105][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.307540][ T5719] bridge_slave_0: entered allmulticast mode [ 98.315052][ T5719] bridge_slave_0: entered promiscuous mode [ 98.325070][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.332890][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.340095][ T5719] bridge_slave_1: entered allmulticast mode [ 98.347633][ T5719] bridge_slave_1: entered promiscuous mode [ 98.378647][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.393041][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.425594][ T5719] team0: Port device team_slave_0 added [ 98.433805][ T5719] team0: Port device team_slave_1 added [ 98.461543][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.468708][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.494742][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.507697][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.514750][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.541284][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.587649][ T5719] hsr_slave_0: entered promiscuous mode [ 98.594795][ T5719] hsr_slave_1: entered promiscuous mode [ 98.764810][ T5719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.779114][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.787763][ T5719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.798606][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.806771][ T5719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.817482][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.827423][ T5719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.837745][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.870363][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.877971][ T5719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.885944][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.893196][ T5719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.945673][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.954391][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.985327][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.009150][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.023159][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.030413][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.046913][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.054129][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.432102][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.485695][ T5719] veth0_vlan: entered promiscuous mode [ 99.499220][ T5719] veth1_vlan: entered promiscuous mode [ 99.535871][ T5719] veth0_macvtap: entered promiscuous mode [ 99.547437][ T5719] veth1_macvtap: entered promiscuous mode [ 99.569259][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.589298][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.607578][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.617385][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.627913][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.641449][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.797756][ T393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.861920][ T393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.956692][ T393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.063524][ T393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 16:05:13 executed programs: 0 [ 100.307950][ T5674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.318373][ T5674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.327023][ T5674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.336185][ T5674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.344178][ T5674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.849750][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.857020][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.864875][ T5759] bridge_slave_0: entered allmulticast mode [ 100.872467][ T5759] bridge_slave_0: entered promiscuous mode [ 100.882560][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.889774][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.897256][ T5759] bridge_slave_1: entered allmulticast mode [ 100.904849][ T5759] bridge_slave_1: entered promiscuous mode [ 100.939846][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.954290][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.994296][ T5759] team0: Port device team_slave_0 added [ 101.003910][ T5759] team0: Port device team_slave_1 added [ 101.035765][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.043022][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.069697][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.083821][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.090807][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.116810][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.172898][ T5759] hsr_slave_0: entered promiscuous mode [ 101.179350][ T5759] hsr_slave_1: entered promiscuous mode [ 101.185898][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 101.192513][ T5759] Cannot create hsr debugfs directory [ 101.922918][ T393] bridge_slave_1: left allmulticast mode [ 101.934965][ T393] bridge_slave_1: left promiscuous mode [ 101.942765][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.957929][ T393] bridge_slave_0: left allmulticast mode [ 101.964476][ T393] bridge_slave_0: left promiscuous mode [ 101.970309][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.188967][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.207773][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.219804][ T393] bond0 (unregistering): Released all slaves [ 102.348585][ T393] hsr_slave_0: left promiscuous mode [ 102.355771][ T393] hsr_slave_1: left promiscuous mode [ 102.365866][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.374050][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.385178][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.393893][ T4942] Bluetooth: hci0: command tx timeout [ 102.401840][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.421583][ T393] veth1_macvtap: left promiscuous mode [ 102.427744][ T393] veth0_macvtap: left promiscuous mode [ 102.434047][ T393] veth1_vlan: left promiscuous mode [ 102.439431][ T393] veth0_vlan: left promiscuous mode [ 102.755904][ T393] team0 (unregistering): Port device team_slave_1 removed [ 102.772414][ T393] team0 (unregistering): Port device team_slave_0 removed [ 102.931023][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.293460][ T5759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.316376][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.326576][ T5759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.340573][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.349249][ T5759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.365434][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.374239][ T5759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.388406][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.607639][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.633836][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.650987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.658367][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.681024][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.688281][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.224564][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.290962][ T5759] veth0_vlan: entered promiscuous mode [ 104.309410][ T5759] veth1_vlan: entered promiscuous mode [ 104.350969][ T5759] veth0_macvtap: entered promiscuous mode [ 104.366601][ T5759] veth1_macvtap: entered promiscuous mode [ 104.395471][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.416491][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.436589][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.463193][ T4942] Bluetooth: hci0: command tx timeout [ 104.474865][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.497011][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.523946][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.579300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.603792][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.654491][ T393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.665171][ T393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.853258][ T5844] [ 104.856049][ T5844] ============================= [ 104.860977][ T5844] WARNING: suspicious RCU usage [ 104.866097][ T5844] syzkaller #0 Not tainted [ 104.870585][ T5844] ----------------------------- [ 104.875625][ T5844] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 104.883870][ T5844] [ 104.883870][ T5844] other info that might help us debug this: [ 104.883870][ T5844] [ 104.894375][ T5844] [ 104.894375][ T5844] rcu_scheduler_active = 2, debug_locks = 1 [ 104.902547][ T5844] 1 lock held by syz.0.17/5844: [ 104.907439][ T5844] #0: ffff88807ad74390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 104.918117][ T5844] [ 104.918117][ T5844] stack backtrace: [ 104.925294][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.925323][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.925344][ T5844] Call Trace: [ 104.925353][ T5844] [ 104.925362][ T5844] dump_stack_lvl+0xe8/0x150 [ 104.925400][ T5844] lockdep_rcu_suspicious+0x13f/0x1d0 [ 104.925441][ T5844] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 104.925479][ T5844] xfrm_send_migrate_state+0x870/0xae0 [ 104.925526][ T5844] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 104.925607][ T5844] ? xfrm_state_migrate_install+0x192/0x630 [ 104.925648][ T5844] xfrm_do_migrate_state+0x1703/0x1e50 [ 104.925687][ T5844] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 104.925727][ T5844] ? apparmor_capable+0x126/0x170 [ 104.925762][ T5844] ? __nla_parse+0x40/0x60 [ 104.925799][ T5844] xfrm_user_rcv_msg+0x7a8/0xf30 [ 104.925828][ T5844] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 104.925885][ T5844] ? __mutex_trylock_common+0x15f/0x270 [ 104.925921][ T5844] ? __pfx___mutex_trylock_common+0x10/0x10 [ 104.925948][ T5844] ? rcu_is_watching+0x15/0xb0 [ 104.925971][ T5844] ? trace_contention_end+0x3d/0x140 [ 104.926004][ T5844] netlink_rcv_skb+0x226/0x4a0 [ 104.926031][ T5844] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 104.926055][ T5844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.926096][ T5844] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.926120][ T5844] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.926147][ T5844] xfrm_netlink_rcv+0x79/0x90 [ 104.926171][ T5844] netlink_unicast+0x7bb/0x940 [ 104.926205][ T5844] netlink_sendmsg+0x813/0xb40 [ 104.926240][ T5844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.926262][ T5844] ? filemap_map_pages+0x1ccc/0x2090 [ 104.926294][ T5844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 104.926324][ T5844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.926349][ T5844] sock_sendmsg_nosec+0x13a/0x180 [ 104.926382][ T5844] ____sys_sendmsg+0x54e/0x850 [ 104.926413][ T5844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.926447][ T5844] ? import_iovec+0x73/0xa0 [ 104.926486][ T5844] ___sys_sendmsg+0x2a5/0x360 [ 104.926515][ T5844] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.926544][ T5844] ? futex_wake+0x522/0x5f0 [ 104.926606][ T5844] ? __pfx_do_futex+0x10/0x10 [ 104.926635][ T5844] __x64_sys_sendmsg+0x1b1/0x290 [ 104.926663][ T5844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.926702][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.926731][ T5844] do_syscall_64+0x174/0x580 [ 104.926754][ T5844] ? trace_irq_disable+0x3b/0x140 [ 104.926782][ T5844] ? clear_bhb_loop+0x40/0x90 [ 104.926810][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.926832][ T5844] RIP: 0033:0x7f32ba39de99 [ 104.926866][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.926885][ T5844] RSP: 002b:00007ffc2ec885b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.926915][ T5844] RAX: ffffffffffffffda RBX: 00007f32ba625fa0 RCX: 00007f32ba39de99 [ 104.926932][ T5844] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 104.926945][ T5844] RBP: 00007f32ba433eaf R08: 0000000000000000 R09: 0000000000000000 [ 104.926958][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.926971][ T5844] R13: 00007f32ba625fac R14: 00007f32ba625fa0 R15: 00007f32ba625fa0 [ 104.927003][ T5844]