Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2026/07/27 09:07:39 parsed 1 programs 2026/07/27 09:07:39 serving rpc on tcp://35985 [ 97.461694][ T9] cfg80211: failed to load regulatory.db [ 98.329453][ T5637] cgroup: Unknown subsys name 'net' [ 98.422499][ T5637] cgroup: Unknown subsys name 'cpuset' [ 98.431813][ T5637] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.248379][ T5637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.066970][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.083740][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.093400][ T5652] bridge_slave_0: entered allmulticast mode [ 104.102767][ T5652] bridge_slave_0: entered promiscuous mode [ 104.113987][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.122028][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.129885][ T5652] bridge_slave_1: entered allmulticast mode [ 104.139052][ T5652] bridge_slave_1: entered promiscuous mode [ 104.176037][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.191727][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.231577][ T5652] team0: Port device team_slave_0 added [ 104.242327][ T5652] team0: Port device team_slave_1 added [ 104.278774][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.288527][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.314916][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.328848][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.336019][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.362508][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.412433][ T5652] hsr_slave_0: entered promiscuous mode [ 104.419461][ T5652] hsr_slave_1: entered promiscuous mode [ 104.598148][ T5652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.612919][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.621758][ T5652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.632449][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.640477][ T5652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.652213][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.662358][ T5652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.672428][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.712258][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.720041][ T5652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.728809][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.736190][ T5652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.803033][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.826243][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.836315][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.852745][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.868075][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.875454][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.897280][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.904714][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.312840][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.362341][ T5652] veth0_vlan: entered promiscuous mode [ 105.377031][ T5652] veth1_vlan: entered promiscuous mode [ 105.416676][ T5652] veth0_macvtap: entered promiscuous mode [ 105.430279][ T5652] veth1_macvtap: entered promiscuous mode [ 105.453795][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.469997][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.487720][ T411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.497102][ T411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.509940][ T411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.519828][ T411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.601646][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.840789][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.926768][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.047022][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.201681][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.508236][ T3295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.516654][ T3295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.554840][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.563090][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.250956][ T5719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.259321][ T5719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.267292][ T5719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.277009][ T5719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.286008][ T5719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.612506][ T1158] bridge_slave_1: left allmulticast mode [ 108.619087][ T1158] bridge_slave_1: left promiscuous mode [ 108.626954][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.643009][ T1158] bridge_slave_0: left allmulticast mode [ 108.649549][ T1158] bridge_slave_0: left promiscuous mode [ 108.655500][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.938561][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.952735][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.962914][ T1158] bond0 (unregistering): Released all slaves [ 109.124446][ T1158] hsr_slave_0: left promiscuous mode [ 109.133397][ T1158] hsr_slave_1: left promiscuous mode [ 109.140148][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.148088][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.156627][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.165419][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.185518][ T1158] veth1_macvtap: left promiscuous mode [ 109.192239][ T1158] veth0_macvtap: left promiscuous mode [ 109.198945][ T1158] veth1_vlan: left promiscuous mode [ 109.204441][ T1158] veth0_vlan: left promiscuous mode [ 109.550552][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 109.585549][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 109.752638][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 110.537435][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.358425][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 2026/07/27 09:07:58 executed programs: 0 [ 113.241276][ T5719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.263357][ T5719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.274247][ T5719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.284912][ T5719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.294868][ T5719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.318178][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 114.055067][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.063179][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.071387][ T5820] bridge_slave_0: entered allmulticast mode [ 114.079677][ T5820] bridge_slave_0: entered promiscuous mode [ 114.091628][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.099865][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.111324][ T5820] bridge_slave_1: entered allmulticast mode [ 114.121079][ T5820] bridge_slave_1: entered promiscuous mode [ 114.163054][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.180715][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.219794][ T5820] team0: Port device team_slave_0 added [ 114.234267][ T5820] team0: Port device team_slave_1 added [ 114.273593][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.282983][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.319668][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.337255][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.347904][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.394270][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.458758][ T5820] hsr_slave_0: entered promiscuous mode [ 114.469094][ T5820] hsr_slave_1: entered promiscuous mode [ 115.165561][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.189747][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.213902][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.230917][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.245791][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.263388][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.282100][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.299820][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.382355][ T50] Bluetooth: hci0: command tx timeout [ 115.451477][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.491238][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.511881][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.519306][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.541109][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.553417][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.270562][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.362274][ T5820] veth0_vlan: entered promiscuous mode [ 116.385480][ T5820] veth1_vlan: entered promiscuous mode [ 116.451305][ T5820] veth0_macvtap: entered promiscuous mode [ 116.467362][ T5820] veth1_macvtap: entered promiscuous mode [ 116.504996][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.542082][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.578618][ T411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.602942][ T411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.632669][ T411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.664054][ T411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.821810][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.850553][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.914467][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.928506][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.210102][ T5905] [ 117.213656][ T5905] ============================= [ 117.222718][ T5905] WARNING: suspicious RCU usage [ 117.230610][ T5905] syzkaller #0 Not tainted [ 117.235678][ T5905] ----------------------------- [ 117.241826][ T5905] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 117.251258][ T5905] [ 117.251258][ T5905] other info that might help us debug this: [ 117.251258][ T5905] [ 117.265607][ T5905] [ 117.265607][ T5905] rcu_scheduler_active = 2, debug_locks = 1 [ 117.274774][ T5905] 1 lock held by syz.0.17/5905: [ 117.280750][ T5905] #0: ffff88801b1e9c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 117.292752][ T5905] [ 117.292752][ T5905] stack backtrace: [ 117.300885][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 117.300915][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.300937][ T5905] Call Trace: [ 117.300946][ T5905] [ 117.300954][ T5905] dump_stack_lvl+0xe8/0x150 [ 117.300993][ T5905] lockdep_rcu_suspicious+0x13f/0x1d0 [ 117.301031][ T5905] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 117.301070][ T5905] xfrm_send_migrate_state+0x870/0xae0 [ 117.301117][ T5905] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 117.301156][ T5905] ? xfrm_state_migrate_install+0x192/0x630 [ 117.301194][ T5905] xfrm_do_migrate_state+0x1703/0x1e50 [ 117.301233][ T5905] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 117.301276][ T5905] ? apparmor_capable+0x126/0x170 [ 117.301311][ T5905] ? __nla_parse+0x40/0x60 [ 117.301347][ T5905] xfrm_user_rcv_msg+0x7a8/0xf30 [ 117.301375][ T5905] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 117.301437][ T5905] ? __mutex_trylock_common+0x15f/0x270 [ 117.301471][ T5905] ? __pfx___mutex_trylock_common+0x10/0x10 [ 117.301499][ T5905] ? rcu_is_watching+0x15/0xb0 [ 117.301520][ T5905] ? trace_contention_end+0x3d/0x140 [ 117.301549][ T5905] netlink_rcv_skb+0x226/0x4a0 [ 117.301576][ T5905] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 117.301600][ T5905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.301639][ T5905] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.301663][ T5905] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.301690][ T5905] xfrm_netlink_rcv+0x79/0x90 [ 117.301711][ T5905] netlink_unicast+0x7bb/0x940 [ 117.301745][ T5905] netlink_sendmsg+0x813/0xb40 [ 117.301778][ T5905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.301800][ T5905] ? filemap_map_pages+0x1ccc/0x2090 [ 117.301829][ T5905] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.301860][ T5905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.301884][ T5905] sock_sendmsg_nosec+0x13a/0x180 [ 117.301918][ T5905] ____sys_sendmsg+0x54e/0x850 [ 117.301948][ T5905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.301983][ T5905] ? import_iovec+0x73/0xa0 [ 117.302008][ T5905] ___sys_sendmsg+0x2a5/0x360 [ 117.302036][ T5905] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.302064][ T5905] ? futex_wake+0x522/0x5f0 [ 117.302124][ T5905] ? __pfx_do_futex+0x10/0x10 [ 117.302151][ T5905] __x64_sys_sendmsg+0x1b1/0x290 [ 117.302179][ T5905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.302220][ T5905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.302244][ T5905] do_syscall_64+0x174/0x580 [ 117.302267][ T5905] ? trace_irq_disable+0x3b/0x140 [ 117.302295][ T5905] ? clear_bhb_loop+0x40/0x90 [ 117.302322][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.302345][ T5905] RIP: 0033:0x7f28f719de99 [ 117.302384][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.302402][ T5905] RSP: 002b:00007ffec512ffd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.302424][ T5905] RAX: ffffffffffffffda RBX: 00007f28f7425fa0 RCX: 00007f28f719de99 [ 117.302439][ T5905] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 117.302452][ T5905] RBP: 00007f28f7233eaf R08: 0000000000000000 R09: 0000000000000000 [ 117.302472][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.302484][ T5905] R13: 00007f28f7425fac R14: 00007f28f7425fa0 R15: 00007f28f7425fa0 [ 117.302517][ T5905] [ 117.730178][ T50] Bluetooth: hci0: command tx timeout 2026/07/27 09:08:03 executed programs: 14 [ 119.778219][ T50] Bluetooth: hci0: command tx timeout [ 121.857937][ T50] Bluetooth: hci0: command tx timeout 2026/07/27 09:08:08 executed programs: 215