Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://35745 [ 30.181391][ T4720] cgroup: Unknown subsys name 'net' [ 30.311632][ T4720] cgroup: Unknown subsys name 'cpuset' [ 30.313742][ T4720] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.487576][ T4720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.877525][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.877552][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.885949][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.885976][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.923119][ T4728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.649529][ T4767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.649965][ T4767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.651534][ T4767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.654136][ T4767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.655879][ T4767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.160669][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.160960][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.161039][ T4784] bridge_slave_0: entered allmulticast mode [ 34.161495][ T4784] bridge_slave_0: entered promiscuous mode [ 34.163129][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.163181][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.163230][ T4784] bridge_slave_1: entered allmulticast mode [ 34.163633][ T4784] bridge_slave_1: entered promiscuous mode [ 34.171370][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.174167][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.195962][ T4784] team0: Port device team_slave_0 added [ 34.197321][ T4784] team0: Port device team_slave_1 added [ 34.202785][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.202804][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.202815][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.203528][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.203536][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.203550][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.213254][ T4784] hsr_slave_0: entered promiscuous mode [ 34.213575][ T4784] hsr_slave_1: entered promiscuous mode [ 34.259292][ T4784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.262481][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.262887][ T4784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.264835][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.265493][ T4784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.267288][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.267809][ T4784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.269284][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.278406][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.278455][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.278601][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.278629][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.297493][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.304038][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.305490][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.309509][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.312744][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.312786][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.316119][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.316154][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.409197][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.423451][ T4784] veth0_vlan: entered promiscuous mode [ 34.426604][ T4784] veth1_vlan: entered promiscuous mode [ 34.434626][ T4784] veth0_macvtap: entered promiscuous mode [ 34.435830][ T4784] veth1_macvtap: entered promiscuous mode [ 34.441389][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.442586][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.445882][ T174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.451438][ T174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.453261][ T174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.455005][ T174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.557415][ T3040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.592910][ T3040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.673522][ T3040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:34 executed programs: 0 [ 34.734292][ T3040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.739807][ T4767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.741149][ T4767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.741334][ T4767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.741639][ T4767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.741869][ T4767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.872207][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.872286][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.872339][ T4822] bridge_slave_0: entered allmulticast mode [ 34.872752][ T4822] bridge_slave_0: entered promiscuous mode [ 34.874000][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.874050][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.874106][ T4822] bridge_slave_1: entered allmulticast mode [ 34.874536][ T4822] bridge_slave_1: entered promiscuous mode [ 34.883260][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.884237][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.890288][ T4822] team0: Port device team_slave_0 added [ 34.891048][ T4822] team0: Port device team_slave_1 added [ 34.897511][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.897530][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.897544][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.898083][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.898090][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.898105][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.909402][ T4822] hsr_slave_0: entered promiscuous mode [ 34.909702][ T4822] hsr_slave_1: entered promiscuous mode [ 34.909909][ T4822] debugfs: 'hsr0' already exists in 'hsr' [ 34.909955][ T4822] Cannot create hsr debugfs directory [ 36.810524][ T4767] Bluetooth: hci0: command tx timeout [ 37.822898][ T3040] bridge_slave_1: left allmulticast mode [ 37.822945][ T3040] bridge_slave_1: left promiscuous mode [ 37.823228][ T3040] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.827604][ T3040] bridge_slave_0: left allmulticast mode [ 37.827628][ T3040] bridge_slave_0: left promiscuous mode [ 37.827696][ T3040] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.879363][ T3040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.932022][ T3040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.970900][ T3040] bond0 (unregistering): Released all slaves [ 38.009945][ T3040] hsr_slave_0: left promiscuous mode [ 38.011194][ T3040] hsr_slave_1: left promiscuous mode [ 38.011479][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.011496][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.012850][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.012862][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.017974][ T3040] veth1_macvtap: left promiscuous mode [ 38.019149][ T3040] veth0_macvtap: left promiscuous mode [ 38.020809][ T3040] veth1_vlan: left promiscuous mode [ 38.021770][ T3040] veth0_vlan: left promiscuous mode [ 38.125781][ T3040] team0 (unregistering): Port device team_slave_1 removed [ 38.129549][ T3040] team0 (unregistering): Port device team_slave_0 removed [ 38.176527][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.437319][ T4822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.440222][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.440571][ T4822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.442445][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.442737][ T4822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.445189][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.445713][ T4822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.447471][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.489768][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.496818][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.499809][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.499857][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.504026][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.504063][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.524623][ T4822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.524654][ T4822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.619176][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.631069][ T4822] veth0_vlan: entered promiscuous mode [ 38.633806][ T4822] veth1_vlan: entered promiscuous mode [ 38.642525][ T4822] veth0_macvtap: entered promiscuous mode [ 38.643563][ T4822] veth1_macvtap: entered promiscuous mode [ 38.646919][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.647872][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.650034][ T833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.650071][ T833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.657018][ T833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.657179][ T833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.676584][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.676609][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.683762][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.683787][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.735071][ T4911] [ 38.735563][ T4911] ============================= [ 38.736390][ T4911] WARNING: suspicious RCU usage [ 38.737277][ T4911] syzkaller #0 Not tainted [ 38.738027][ T4911] ----------------------------- [ 38.738862][ T4911] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 38.740408][ T4911] [ 38.740408][ T4911] other info that might help us debug this: [ 38.740408][ T4911] [ 38.742089][ T4911] [ 38.742089][ T4911] rcu_scheduler_active = 2, debug_locks = 1 [ 38.743479][ T4911] 1 lock held by syz.0.17/4911: [ 38.744254][ T4911] #0: ffff0000d71e4390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x70/0x9c [ 38.746079][ T4911] [ 38.746079][ T4911] stack backtrace: [ 38.746989][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 38.748366][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.750006][ T4911] Call trace: [ 38.750558][ T4911] show_stack+0x2c/0x3c (C) [ 38.751377][ T4911] __dump_stack+0x30/0x40 [ 38.752179][ T4911] dump_stack_lvl+0xd8/0x12c [ 38.752987][ T4911] dump_stack+0x1c/0x28 [ 38.753739][ T4911] lockdep_rcu_suspicious+0x168/0x26c [ 38.754712][ T4911] xfrm_send_migrate_state+0x6b0/0x958 [ 38.755689][ T4911] xfrm_do_migrate_state+0x1114/0x1728 [ 38.756711][ T4911] xfrm_user_rcv_msg+0x4e0/0x950 [ 38.757565][ T4911] netlink_rcv_skb+0x238/0x414 [ 38.758346][ T4911] xfrm_netlink_rcv+0x80/0x9c [ 38.759092][ T4911] netlink_unicast+0x600/0x7f8 [ 38.759845][ T4911] netlink_sendmsg+0x648/0x948 [ 38.760664][ T4911] __sock_sendmsg+0xc8/0x17c [ 38.761449][ T4911] ____sys_sendmsg+0x3d0/0x6c8 [ 38.762278][ T4911] ___sys_sendmsg+0x198/0x224 [ 38.763088][ T4911] __sys_sendmsg+0x158/0x204 [ 38.763879][ T4911] __arm64_sys_sendmsg+0x80/0x94 [ 38.764729][ T4911] invoke_syscall+0x98/0x244 [ 38.765534][ T4911] el0_svc_common+0xec/0x23c [ 38.766321][ T4911] do_el0_svc+0x4c/0x5c [ 38.767065][ T4911] el0_svc+0x64/0x260 [ 38.767711][ T4911] el0t_64_sync_handler+0x48/0x148 [ 38.768583][ T4911] el0t_64_sync+0x198/0x19c