Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. 2025/08/27 07:24:41 parsed 1 programs [ 91.346099][ T6174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.037098][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.044338][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.051840][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.062249][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.070217][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.856317][ T6246] chnl_net:caif_netlink_parms(): no params data found [ 94.898207][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.906705][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.913905][ T6246] bridge_slave_0: entered allmulticast mode [ 94.920695][ T6246] bridge_slave_0: entered promiscuous mode [ 94.927814][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.935205][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.942326][ T6246] bridge_slave_1: entered allmulticast mode [ 94.949017][ T6246] bridge_slave_1: entered promiscuous mode [ 94.969136][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.980053][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.010407][ T6246] team0: Port device team_slave_0 added [ 95.017531][ T6246] team0: Port device team_slave_1 added [ 95.032889][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.039948][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.065894][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.077614][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.084554][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.110572][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.148480][ T6246] hsr_slave_0: entered promiscuous mode [ 95.154669][ T6246] hsr_slave_1: entered promiscuous mode [ 95.514269][ T6246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.525253][ T6246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.534583][ T6246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.545207][ T6246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.603880][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.622093][ T6246] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.633768][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.640905][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.671152][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.678287][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.698799][ T6246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.838429][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.874367][ T6246] veth0_vlan: entered promiscuous mode [ 95.887526][ T6246] veth1_vlan: entered promiscuous mode [ 95.912026][ T6246] veth0_macvtap: entered promiscuous mode [ 95.921735][ T6246] veth1_macvtap: entered promiscuous mode [ 95.939644][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.952486][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.969116][ T1010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.992614][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.016108][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.027662][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.088544][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.140525][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.190725][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.209909][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.222065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.241075][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.262115][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.272135][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/27 07:24:49 executed programs: 0 [ 97.071973][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.082066][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.090023][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.099634][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.107364][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.259041][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 97.322268][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.329749][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.337741][ T6364] bridge_slave_0: entered allmulticast mode [ 97.346372][ T6364] bridge_slave_0: entered promiscuous mode [ 97.353938][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.361443][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.368856][ T6364] bridge_slave_1: entered allmulticast mode [ 97.376254][ T6364] bridge_slave_1: entered promiscuous mode [ 97.403938][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.417048][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.446289][ T6364] team0: Port device team_slave_0 added [ 97.453876][ T6364] team0: Port device team_slave_1 added [ 97.481417][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.488840][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.516334][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.528848][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.536734][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.563866][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.607631][ T6364] hsr_slave_0: entered promiscuous mode [ 97.613907][ T6364] hsr_slave_1: entered promiscuous mode [ 97.620282][ T6364] debugfs: 'hsr0' already exists in 'hsr' [ 97.626217][ T6364] Cannot create hsr debugfs directory [ 99.154947][ T5182] Bluetooth: hci0: command tx timeout [ 99.369016][ T59] bridge_slave_1: left allmulticast mode [ 99.374699][ T59] bridge_slave_1: left promiscuous mode [ 99.382788][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.391653][ T59] bridge_slave_0: left allmulticast mode [ 99.400172][ T59] bridge_slave_0: left promiscuous mode [ 99.406482][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.489754][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.500205][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.510214][ T59] bond0 (unregistering): Released all slaves [ 99.605659][ T59] hsr_slave_0: left promiscuous mode [ 99.611429][ T59] hsr_slave_1: left promiscuous mode [ 99.619102][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.629848][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.638233][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.646280][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.657568][ T59] veth1_macvtap: left promiscuous mode [ 99.663089][ T59] veth0_macvtap: left promiscuous mode [ 99.668890][ T59] veth1_vlan: left promiscuous mode [ 99.674125][ T59] veth0_vlan: left promiscuous mode [ 99.758684][ T59] team0 (unregistering): Port device team_slave_1 removed [ 99.774364][ T59] team0 (unregistering): Port device team_slave_0 removed [ 99.926761][ T6364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.938972][ T6364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.952625][ T6364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.965386][ T6364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.043480][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.065921][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.078262][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.085393][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.154631][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.161759][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.286838][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.311955][ T6364] veth0_vlan: entered promiscuous mode [ 100.325800][ T6364] veth1_vlan: entered promiscuous mode [ 100.348515][ T6364] veth0_macvtap: entered promiscuous mode [ 100.357720][ T6364] veth1_macvtap: entered promiscuous mode [ 100.371597][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.382363][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.398072][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.412830][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.423177][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.433165][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.459873][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.469356][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.484039][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.492287][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.515426][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 100.533138][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 100.553951][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.580898][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 100.600365][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.625704][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 100.644622][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 100.663694][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 100.690468][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 100.710344][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 101.235222][ T5182] Bluetooth: hci0: command tx timeout 2025/08/27 07:24:54 executed programs: 91 [ 103.315018][ T5182] Bluetooth: hci0: command tx timeout [ 105.395074][ T5182] Bluetooth: hci0: command tx timeout [ 105.530200][ T7088] __nla_validate_parse: 286 callbacks suppressed [ 105.530213][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 105.557897][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 105.578148][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'. [ 105.602695][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 105.622807][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 105.643896][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 105.679480][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 105.699604][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 105.729425][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 105.754489][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.322'. 2025/08/27 07:24:59 executed programs: 382 [ 110.537804][ T7654] __nla_validate_parse: 273 callbacks suppressed [ 110.537817][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 110.578843][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.597'. [ 110.596363][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'. [ 110.615622][ T7660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'. [ 110.639319][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'. [ 110.657558][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 110.674376][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 110.698852][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 110.717280][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'. [ 110.734414][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'. [ 110.960747][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.968305][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.975970][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.983543][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.991665][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.063297][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 111.101135][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.108354][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.115512][ T7696] bridge_slave_0: entered allmulticast mode [ 111.122285][ T7696] bridge_slave_0: entered promiscuous mode [ 111.131871][ T2132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.143806][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.150946][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.158281][ T7696] bridge_slave_1: entered allmulticast mode [ 111.164678][ T7696] bridge_slave_1: entered promiscuous mode [ 111.181300][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.192705][ T2132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.206200][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.226412][ T7696] team0: Port device team_slave_0 added [ 111.234446][ T2132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.247274][ T7696] team0: Port device team_slave_1 added [ 111.262731][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.269837][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.295812][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.309828][ T2132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.322633][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.329709][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.355918][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.389277][ T7696] hsr_slave_0: entered promiscuous mode [ 111.395462][ T7696] hsr_slave_1: entered promiscuous mode [ 111.445595][ T2132] bridge_slave_1: left allmulticast mode [ 111.451262][ T2132] bridge_slave_1: left promiscuous mode [ 111.457221][ T2132] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.465809][ T2132] bridge_slave_0: left allmulticast mode [ 111.471441][ T2132] bridge_slave_0: left promiscuous mode [ 111.477380][ T2132] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.573368][ T2132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.583260][ T2132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.592707][ T2132] bond0 (unregistering): Released all slaves [ 111.817867][ T2132] hsr_slave_0: left promiscuous mode [ 111.823854][ T2132] hsr_slave_1: left promiscuous mode [ 111.830069][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.838439][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.846352][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.853735][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.870730][ T2132] veth1_macvtap: left promiscuous mode [ 111.877132][ T2132] veth0_macvtap: left promiscuous mode [ 111.882698][ T2132] veth1_vlan: left promiscuous mode [ 111.888099][ T2132] veth0_vlan: left promiscuous mode [ 111.974022][ T2132] team0 (unregistering): Port device team_slave_1 removed [ 111.989749][ T2132] team0 (unregistering): Port device team_slave_0 removed [ 112.147768][ T7696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.159300][ T7696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.171039][ T7696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.180385][ T7696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.266789][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.281444][ T2132] ------------[ cut here ]------------ [ 112.284350][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.287185][ T2132] WARNING: CPU: 0 PID: 2132 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0 [ 112.303576][ T2132] Modules linked in: [ 112.305929][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.307763][ T2132] CPU: 0 UID: 0 PID: 2132 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 112.314535][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.324201][ T2132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.333940][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.341757][ T2132] Workqueue: netns cleanup_net [ 112.348556][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.361220][ T2132] [ 112.363543][ T2132] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 112.369410][ T2132] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb b1 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 72 e1 f7 e8 14 46 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 46 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 112.373611][ T7696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.389336][ T2132] RSP: 0000:ffffc90004827898 EFLAGS: 00010293 [ 112.402913][ T7696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.405940][ T2132] RAX: ffffffff8a22651c RBX: ffff888023d54880 RCX: ffff888029618000 [ 112.424186][ T2132] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888029618000 [ 112.432233][ T2132] RBP: ffffc900048279b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 112.440254][ T2132] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f631480 [ 112.448266][ T2132] R13: 1ffff92000904f40 R14: ffff888023d55d00 R15: dffffc0000000000 [ 112.456279][ T2132] FS: 0000000000000000(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 112.465245][ T2132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.471827][ T2132] CR2: 000055be456ece28 CR3: 000000007da92000 CR4: 00000000003526f0 [ 112.479845][ T2132] Call Trace: [ 112.483124][ T2132] [ 112.486089][ T2132] xfrm_net_exit+0x2d/0x70 [ 112.490512][ T2132] ops_undo_list+0x49a/0x990 [ 112.495120][ T2132] ? __pfx_ops_undo_list+0x10/0x10 [ 112.500228][ T2132] ? do_raw_spin_unlock+0x122/0x240 [ 112.505486][ T2132] cleanup_net+0x4c5/0x800 [ 112.509902][ T2132] ? __pfx_cleanup_net+0x10/0x10 [ 112.514890][ T2132] ? rcu_is_watching+0x15/0xb0 [ 112.519743][ T2132] ? process_scheduled_works+0x9ef/0x17b0 [ 112.525539][ T2132] ? process_scheduled_works+0x9ef/0x17b0 [ 112.531270][ T2132] process_scheduled_works+0xae1/0x17b0 [ 112.536856][ T2132] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.542843][ T2132] worker_thread+0x8a0/0xda0 [ 112.547477][ T2132] kthread+0x70e/0x8a0 [ 112.551552][ T2132] ? __pfx_worker_thread+0x10/0x10 [ 112.556730][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.561334][ T2132] ? rcu_is_watching+0x15/0xb0 [ 112.566147][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.570739][ T2132] ret_from_fork+0x3f9/0x770 [ 112.575377][ T2132] ? __pfx_ret_from_fork+0x10/0x10 [ 112.580493][ T2132] ? __switch_to_asm+0x39/0x70 [ 112.585293][ T2132] ? __switch_to_asm+0x33/0x70 [ 112.590063][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.594664][ T2132] ret_from_fork_asm+0x1a/0x30 [ 112.599717][ T2132] [ 112.600399][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.602734][ T2132] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.602748][ T2132] CPU: 0 UID: 0 PID: 2132 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 112.602766][ T2132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.602777][ T2132] Workqueue: netns cleanup_net [ 112.602795][ T2132] Call Trace: [ 112.602803][ T2132] [ 112.602810][ T2132] dump_stack_lvl+0x99/0x250 [ 112.602831][ T2132] ? __asan_memcpy+0x40/0x70 [ 112.602851][ T2132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.602869][ T2132] ? __pfx__printk+0x10/0x10 [ 112.602895][ T2132] vpanic+0x281/0x750 [ 112.602914][ T2132] ? __pfx__printk+0x10/0x10 [ 112.602935][ T2132] ? __pfx_vpanic+0x10/0x10 [ 112.602953][ T2132] ? is_bpf_text_address+0x292/0x2b0 [ 112.602981][ T2132] panic+0xb9/0xc0 [ 112.602998][ T2132] ? __pfx_panic+0x10/0x10 [ 112.603022][ T2132] __warn+0x31b/0x4b0 [ 112.603040][ T2132] ? xfrm_state_fini+0x26d/0x2f0 [ 112.603061][ T2132] ? xfrm_state_fini+0x26d/0x2f0 [ 112.603081][ T2132] report_bug+0x2be/0x4f0 [ 112.603103][ T2132] ? xfrm_state_fini+0x26d/0x2f0 [ 112.603123][ T2132] ? xfrm_state_fini+0x26d/0x2f0 [ 112.603151][ T2132] ? xfrm_state_fini+0x26f/0x2f0 [ 112.603170][ T2132] handle_bug+0x84/0x160 [ 112.603186][ T2132] exc_invalid_op+0x1a/0x50 [ 112.603203][ T2132] asm_exc_invalid_op+0x1a/0x20 [ 112.603219][ T2132] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 112.603245][ T2132] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb b1 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 72 e1 f7 e8 14 46 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 46 9d f7 90 0f 0b 90 e9 60 fe ff ff [ 112.603259][ T2132] RSP: 0000:ffffc90004827898 EFLAGS: 00010293 [ 112.603274][ T2132] RAX: ffffffff8a22651c RBX: ffff888023d54880 RCX: ffff888029618000 [ 112.603288][ T2132] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888029618000 [ 112.603300][ T2132] RBP: ffffc900048279b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 112.603313][ T2132] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f631480 [ 112.603326][ T2132] R13: 1ffff92000904f40 R14: ffff888023d55d00 R15: dffffc0000000000 [ 112.603342][ T2132] ? xfrm_state_fini+0x26c/0x2f0 [ 112.603364][ T2132] ? xfrm_state_fini+0x26c/0x2f0 [ 112.603385][ T2132] xfrm_net_exit+0x2d/0x70 [ 112.603407][ T2132] ops_undo_list+0x49a/0x990 [ 112.603425][ T2132] ? __pfx_ops_undo_list+0x10/0x10 [ 112.603442][ T2132] ? do_raw_spin_unlock+0x122/0x240 [ 112.603463][ T2132] cleanup_net+0x4c5/0x800 [ 112.603479][ T2132] ? __pfx_cleanup_net+0x10/0x10 [ 112.603495][ T2132] ? rcu_is_watching+0x15/0xb0 [ 112.603511][ T2132] ? process_scheduled_works+0x9ef/0x17b0 [ 112.603528][ T2132] ? process_scheduled_works+0x9ef/0x17b0 [ 112.603545][ T2132] process_scheduled_works+0xae1/0x17b0 [ 112.603571][ T2132] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.603594][ T2132] worker_thread+0x8a0/0xda0 [ 112.603625][ T2132] kthread+0x70e/0x8a0 [ 112.603651][ T2132] ? __pfx_worker_thread+0x10/0x10 [ 112.603667][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.603687][ T2132] ? rcu_is_watching+0x15/0xb0 [ 112.603703][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.603723][ T2132] ret_from_fork+0x3f9/0x770 [ 112.603741][ T2132] ? __pfx_ret_from_fork+0x10/0x10 [ 112.603760][ T2132] ? __switch_to_asm+0x39/0x70 [ 112.603780][ T2132] ? __switch_to_asm+0x33/0x70 [ 112.603800][ T2132] ? __pfx_kthread+0x10/0x10 [ 112.603819][ T2132] ret_from_fork_asm+0x1a/0x30 [ 112.603846][ T2132] [ 112.609701][ T2132] Kernel Offset: disabled