Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. 2026/07/27 07:55:58 parsed 1 programs 2026/07/27 07:55:58 serving rpc on tcp://43635 [ 63.278634][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 63.278649][ T29] audit: type=1400 audit(1785138958.643:129): avc: denied { node_bind } for pid=5614 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.522759][ T29] audit: type=1400 audit(1785138960.883:130): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.546341][ T29] audit: type=1400 audit(1785138960.913:131): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.548905][ T5620] cgroup: Unknown subsys name 'net' [ 65.576734][ T29] audit: type=1400 audit(1785138960.943:132): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.697004][ T5620] cgroup: Unknown subsys name 'cpuset' [ 65.705293][ T5620] cgroup: Unknown subsys name 'rlimit' [ 65.877176][ T29] audit: type=1400 audit(1785138961.243:133): avc: denied { setattr } for pid=5620 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.910462][ T29] audit: type=1400 audit(1785138961.243:134): avc: denied { create } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.942831][ T29] audit: type=1400 audit(1785138961.243:135): avc: denied { write } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.968081][ T29] audit: type=1400 audit(1785138961.243:136): avc: denied { read } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.976832][ T5624] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.989032][ T29] audit: type=1400 audit(1785138961.243:137): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.022553][ T29] audit: type=1400 audit(1785138961.243:138): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.949988][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.651033][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 68.651049][ T29] audit: type=1400 audit(1785138964.013:143): avc: denied { execmem } for pid=5636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.677097][ T29] audit: type=1400 audit(1785138964.013:144): avc: denied { read } for pid=5637 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.698756][ T29] audit: type=1400 audit(1785138964.013:145): avc: denied { open } for pid=5637 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.722470][ T29] audit: type=1400 audit(1785138964.023:146): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.743947][ T29] audit: type=1400 audit(1785138964.083:147): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/root/syzkaller.KgdIan/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.768299][ T29] audit: type=1400 audit(1785138964.083:148): avc: denied { mount } for pid=5637 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.791173][ T29] audit: type=1400 audit(1785138964.083:149): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/root/syzkaller.KgdIan/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.795883][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.816755][ T29] audit: type=1400 audit(1785138964.083:150): avc: denied { mount } for pid=5637 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.853086][ T29] audit: type=1400 audit(1785138964.083:151): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/root/syzkaller.KgdIan/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.879927][ T29] audit: type=1400 audit(1785138964.083:152): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/root/syzkaller.KgdIan/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.989642][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.998878][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.006616][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.015196][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.024265][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.959447][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.971282][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.998932][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.007685][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.622593][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.630268][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.637483][ T5686] bridge_slave_0: entered allmulticast mode [ 70.644850][ T5686] bridge_slave_0: entered promiscuous mode [ 70.658944][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.666899][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.674180][ T5686] bridge_slave_1: entered allmulticast mode [ 70.680854][ T5686] bridge_slave_1: entered promiscuous mode [ 70.710620][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.721316][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.742274][ T5686] team0: Port device team_slave_0 added [ 70.750256][ T5686] team0: Port device team_slave_1 added [ 70.775533][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.782634][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.808878][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.828391][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.835486][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.861377][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.894940][ T5686] hsr_slave_0: entered promiscuous mode [ 70.901093][ T5686] hsr_slave_1: entered promiscuous mode [ 71.008665][ T5686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.019750][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.027886][ T5686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.036528][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.044280][ T5686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.053273][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.062250][ T5686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.070691][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.095935][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.103300][ T5686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.111066][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.118162][ T5686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.157769][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.175240][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.183599][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.197165][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.209818][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.217035][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.228288][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.235402][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.459876][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.492817][ T5686] veth0_vlan: entered promiscuous mode [ 71.504788][ T5686] veth1_vlan: entered promiscuous mode [ 71.529630][ T5686] veth0_macvtap: entered promiscuous mode [ 71.539112][ T5686] veth1_macvtap: entered promiscuous mode [ 71.554511][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.566577][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.580032][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.590170][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.602292][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.612259][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.722245][ T3379] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.789201][ T3379] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.834276][ T3379] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.887380][ T3379] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 07:56:07 executed programs: 0 [ 72.577120][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.585873][ T4930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.593288][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.602051][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.609627][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.909780][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.916983][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.924166][ T5743] bridge_slave_0: entered allmulticast mode [ 72.930903][ T5743] bridge_slave_0: entered promiscuous mode [ 72.938340][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.945487][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.952587][ T5743] bridge_slave_1: entered allmulticast mode [ 72.959525][ T5743] bridge_slave_1: entered promiscuous mode [ 72.981241][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.992800][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.018965][ T5743] team0: Port device team_slave_0 added [ 73.026345][ T5743] team0: Port device team_slave_1 added [ 73.046987][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.054114][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.080171][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.092242][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.099335][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.125543][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.160403][ T5743] hsr_slave_0: entered promiscuous mode [ 73.166511][ T5743] hsr_slave_1: entered promiscuous mode [ 73.172349][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 73.178252][ T5743] Cannot create hsr debugfs directory [ 74.131296][ T3379] bridge_slave_1: left allmulticast mode [ 74.137718][ T3379] bridge_slave_1: left promiscuous mode [ 74.144588][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.158794][ T3379] bridge_slave_0: left allmulticast mode [ 74.164993][ T3379] bridge_slave_0: left promiscuous mode [ 74.171581][ T3379] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.312981][ T3379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.331096][ T3379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.345665][ T3379] bond0 (unregistering): Released all slaves [ 74.377425][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 74.377440][ T29] audit: type=1400 audit(1785138969.743:174): avc: denied { write } for pid=5762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.468498][ T29] audit: type=1400 audit(1785138969.833:175): avc: denied { write } for pid=5774 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.498779][ T3379] hsr_slave_0: left promiscuous mode [ 74.504931][ T3379] hsr_slave_1: left promiscuous mode [ 74.510910][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.519555][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.528259][ T3379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.535738][ T3379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.548181][ T3379] veth1_macvtap: left promiscuous mode [ 74.554336][ T3379] veth0_macvtap: left promiscuous mode [ 74.559840][ T3379] veth1_vlan: left promiscuous mode [ 74.565321][ T3379] veth0_vlan: left promiscuous mode [ 74.645354][ T4930] Bluetooth: hci0: command tx timeout [ 74.685761][ T3379] team0 (unregistering): Port device team_slave_1 removed [ 74.698459][ T3379] team0 (unregistering): Port device team_slave_0 removed [ 74.771505][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.027577][ T29] audit: type=1400 audit(1785138970.393:176): avc: denied { write } for pid=5777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.069164][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.080815][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.090346][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.100207][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.108948][ T29] audit: type=1400 audit(1785138970.473:177): avc: denied { write } for pid=5788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.131359][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.146219][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.161210][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.171388][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.254365][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.461148][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.461239][ T29] audit: type=1400 audit(1785138970.823:178): avc: denied { write } for pid=5797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.516939][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.524106][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.557012][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.564187][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.585681][ T29] audit: type=1400 audit(1785138970.953:179): avc: denied { write } for pid=5808 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.921191][ T29] audit: type=1400 audit(1785138971.283:180): avc: denied { write } for pid=5810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.988805][ T29] audit: type=1400 audit(1785138971.353:181): avc: denied { write } for pid=5827 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.112208][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.161340][ T5743] veth0_vlan: entered promiscuous mode [ 76.176083][ T5743] veth1_vlan: entered promiscuous mode [ 76.212279][ T5743] veth0_macvtap: entered promiscuous mode [ 76.223905][ T5743] veth1_macvtap: entered promiscuous mode [ 76.244749][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.262414][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.278882][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289676][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.298980][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.307761][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.354300][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.365290][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.387653][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.396975][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.427585][ T29] audit: type=1400 audit(1785138971.793:182): avc: denied { create } for pid=5833 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.448317][ T29] audit: type=1400 audit(1785138971.793:183): avc: denied { write } for pid=5833 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.477677][ T5833] [ 76.480446][ T5833] ============================= [ 76.485482][ T5833] WARNING: suspicious RCU usage [ 76.490334][ T5833] syzkaller #0 Not tainted [ 76.494763][ T5833] ----------------------------- [ 76.499602][ T5833] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 76.507781][ T5833] [ 76.507781][ T5833] other info that might help us debug this: [ 76.507781][ T5833] [ 76.518016][ T5833] [ 76.518016][ T5833] rcu_scheduler_active = 2, debug_locks = 1 [ 76.526087][ T5833] 1 lock held by syz.0.17/5833: [ 76.531074][ T5833] #0: ffff888032dcc390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 76.541664][ T5833] [ 76.541664][ T5833] stack backtrace: [ 76.547577][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 76.547598][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.547607][ T5833] Call Trace: [ 76.547613][ T5833] [ 76.547618][ T5833] dump_stack_lvl+0x100/0x190 [ 76.547636][ T5833] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 76.547656][ T5833] xfrm_do_migrate_state+0x2463/0x2f10 [ 76.547673][ T5833] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 76.547686][ T5833] ? __asan_memset+0x23/0x50 [ 76.547698][ T5833] ? __nla_validate_parse+0x1e7/0x28b0 [ 76.547718][ T5833] ? __nla_parse+0x40/0x60 [ 76.547728][ T5833] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 76.547742][ T5833] ? xfrm_user_rcv_msg+0x483/0xd80 [ 76.547751][ T5833] xfrm_user_rcv_msg+0x483/0xd80 [ 76.547764][ T5833] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 76.547775][ T5833] ? kfree_skbmem+0x19f/0x210 [ 76.547794][ T5833] ? consume_skb+0xd6/0x110 [ 76.547820][ T5833] ? rcu_is_watching+0x12/0xc0 [ 76.547837][ T5833] ? trace_contention_end+0x126/0x160 [ 76.547853][ T5833] ? __mutex_lock+0x26d/0x1bd0 [ 76.547868][ T5833] netlink_rcv_skb+0x159/0x420 [ 76.547879][ T5833] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 76.547891][ T5833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.547909][ T5833] xfrm_netlink_rcv+0x71/0x90 [ 76.547926][ T5833] netlink_unicast+0x585/0x850 [ 76.547939][ T5833] ? __pfx_netlink_unicast+0x10/0x10 [ 76.547950][ T5833] ? __pfx_sock_has_perm+0x10/0x10 [ 76.547968][ T5833] netlink_sendmsg+0x8b0/0xda0 [ 76.547980][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.547992][ T5833] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.548011][ T5833] ____sys_sendmsg+0xa4d/0xbe0 [ 76.548027][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.548039][ T5833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.548055][ T5833] ? futex_hash+0x311/0x400 [ 76.548071][ T5833] ? futex_hash+0x31b/0x400 [ 76.548085][ T5833] ? futex_hash+0x79/0x400 [ 76.548098][ T5833] ? __pfx_get_futex_key+0x10/0x10 [ 76.548113][ T5833] ___sys_sendmsg+0x190/0x1e0 [ 76.548132][ T5833] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.548150][ T5833] ? futex_wake+0x220/0x5e0 [ 76.548165][ T5833] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.548188][ T5833] ? __pfx_do_futex+0x10/0x10 [ 76.548203][ T5833] ? find_held_lock+0x2b/0x80 [ 76.548220][ T5833] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 76.548235][ T5833] __sys_sendmsg+0x160/0x210 [ 76.548250][ T5833] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.548270][ T5833] do_syscall_64+0x115/0x870 [ 76.548282][ T5833] ? clear_bhb_loop+0x40/0x90 [ 76.548296][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.548307][ T5833] RIP: 0033:0x7f9a1659de99 [ 76.548317][ T5833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.548328][ T5833] RSP: 002b:00007ffe88741d08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.548339][ T5833] RAX: ffffffffffffffda RBX: 00007f9a16825fa0 RCX: 00007f9a1659de99 [ 76.548345][ T5833] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 76.548352][ T5833] RBP: 00007f9a16633eaf R08: 0000000000000000 R09: 0000000000000000 [ 76.548358][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.548364][ T5833] R13: 00007f9a16825fac R14: 00007f9a16825fa0 R15: 00007f9a16825fa0 [ 76.548377][ T5833] [ 76.883318][ T4930] Bluetooth: hci0: command tx timeout