[ 72.610455][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 72.618149][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 72.625939][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 72.635238][ T154] veth1_macvtap: left promiscuous mode
[ 72.640783][ T154] veth0_macvtap: left promiscuous mode
[ 72.646330][ T154] veth1_vlan: left promiscuous mode
[ 72.651737][ T154] veth0_vlan: left promiscuous mode
[ 72.741212][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 72.751632][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 76.580677][ T24] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts.
2025/08/27 08:20:37 parsed 1 programs
[ 93.721080][ T6188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.825495][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.837354][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.877572][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.891593][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.372669][ T6257] chnl_net:caif_netlink_parms(): no params data found
[ 97.420074][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.427222][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.434864][ T6257] bridge_slave_0: entered allmulticast mode
[ 97.442447][ T6257] bridge_slave_0: entered promiscuous mode
[ 97.449319][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.456706][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.464171][ T6257] bridge_slave_1: entered allmulticast mode
[ 97.470974][ T6257] bridge_slave_1: entered promiscuous mode
[ 97.488037][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.499108][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.520271][ T6257] team0: Port device team_slave_0 added
[ 97.527052][ T6257] team0: Port device team_slave_1 added
[ 97.542789][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.550193][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.576561][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.588611][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.595605][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.621531][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.651956][ T6257] hsr_slave_0: entered promiscuous mode
[ 97.657953][ T6257] hsr_slave_1: entered promiscuous mode
[ 97.898232][ T6257] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.908726][ T6257] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.918660][ T6257] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.932994][ T6257] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.997839][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.017946][ T6257] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.028827][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.036011][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.047656][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.054776][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.224073][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.265940][ T6257] veth0_vlan: entered promiscuous mode
[ 98.277119][ T6257] veth1_vlan: entered promiscuous mode
[ 98.304507][ T6257] veth0_macvtap: entered promiscuous mode
[ 98.314819][ T6257] veth1_macvtap: entered promiscuous mode
[ 98.332689][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.346705][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.359352][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.377127][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.401471][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.426928][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.476568][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.538808][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.642903][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.716106][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.932306][ T5914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.950596][ T5914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.957949][ T5914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.965674][ T5914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.973806][ T5914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/08/27 08:20:46 executed programs: 0
[ 99.511337][ T5914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.518583][ T5914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.526737][ T5914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.535358][ T5914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.546939][ T5914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.697151][ T6366] chnl_net:caif_netlink_parms(): no params data found
[ 99.767509][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.775817][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.783964][ T6366] bridge_slave_0: entered allmulticast mode
[ 99.791043][ T6366] bridge_slave_0: entered promiscuous mode
[ 99.799621][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.808101][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.815822][ T6366] bridge_slave_1: entered allmulticast mode
[ 99.823767][ T6366] bridge_slave_1: entered promiscuous mode
[ 99.850419][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.867507][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.898087][ T6366] team0: Port device team_slave_0 added
[ 99.907048][ T6366] team0: Port device team_slave_1 added
[ 99.934450][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.942316][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.970736][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.985676][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.994020][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.020524][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.056366][ T6366] hsr_slave_0: entered promiscuous mode
[ 100.062768][ T6366] hsr_slave_1: entered promiscuous mode
[ 100.068662][ T6366] debugfs: 'hsr0' already exists in 'hsr'
[ 100.074447][ T6366] Cannot create hsr debugfs directory
[ 101.583613][ T12] bridge_slave_1: left allmulticast mode
[ 101.589371][ T12] bridge_slave_1: left promiscuous mode
[ 101.595383][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.603903][ T12] bridge_slave_0: left allmulticast mode
[ 101.609547][ T12] bridge_slave_0: left promiscuous mode
[ 101.615623][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.629918][ T5914] Bluetooth: hci0: command tx timeout
[ 101.722887][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.732919][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.742590][ T12] bond0 (unregistering): Released all slaves
[ 101.847184][ T12] hsr_slave_0: left promiscuous mode
[ 101.856172][ T12] hsr_slave_1: left promiscuous mode
[ 101.862448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.870206][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.877996][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.886497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.897470][ T12] veth1_macvtap: left promiscuous mode
[ 101.904289][ T12] veth0_macvtap: left promiscuous mode
[ 101.910002][ T12] veth1_vlan: left promiscuous mode
[ 101.915279][ T12] veth0_vlan: left promiscuous mode
[ 102.067058][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 102.082439][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 102.261040][ T6366] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.272133][ T6366] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.282345][ T6366] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.292089][ T6366] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.354356][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.372739][ T6366] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.383971][ T64] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.391228][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.425246][ T64] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.432417][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.594807][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.626041][ T6366] veth0_vlan: entered promiscuous mode
[ 102.637942][ T6366] veth1_vlan: entered promiscuous mode
[ 102.657833][ T6366] veth0_macvtap: entered promiscuous mode
[ 102.666591][ T6366] veth1_macvtap: entered promiscuous mode
[ 102.682597][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.698105][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.711005][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.720733][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.731514][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.747745][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.772503][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.782641][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.798906][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.806884][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.830841][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'.
[ 102.850478][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'.
[ 102.870413][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'.
[ 102.897318][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'.
[ 102.915960][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'.
[ 102.936673][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'.
[ 102.957407][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'.
[ 102.977576][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'.
[ 103.001351][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'.
[ 103.025477][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'.
[ 103.702284][ T5914] Bluetooth: hci0: command tx timeout
2025/08/27 08:20:51 executed programs: 96
[ 105.779801][ T5914] Bluetooth: hci0: command tx timeout
[ 107.845476][ T7094] __nla_validate_parse: 282 callbacks suppressed
[ 107.845492][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'.
[ 107.861104][ T5914] Bluetooth: hci0: command tx timeout
[ 107.878399][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[ 107.899074][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'.
[ 107.919097][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[ 107.946931][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'.
[ 107.967025][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'.
[ 107.989579][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'.
[ 108.017648][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'.
[ 108.037892][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'.
[ 108.061164][ T7112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'.
2025/08/27 08:20:56 executed programs: 386
[ 112.874733][ T7678] __nla_validate_parse: 282 callbacks suppressed
[ 112.874746][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'.
[ 112.901466][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'.
[ 112.918684][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'.
[ 112.945391][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'.
[ 112.964308][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'.
[ 112.983209][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'.
[ 113.004867][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'.
[ 113.024415][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'.
[ 113.042437][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'.
[ 113.064546][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'.
[ 113.202756][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.211004][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.220122][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.230381][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.239772][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.317564][ T7710] chnl_net:caif_netlink_parms(): no params data found
[ 113.346568][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.376124][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.383877][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.391255][ T7710] bridge_slave_0: entered allmulticast mode
[ 113.398879][ T7710] bridge_slave_0: entered promiscuous mode
[ 113.406509][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.416202][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.424406][ T7710] bridge_slave_1: entered allmulticast mode
[ 113.431168][ T7710] bridge_slave_1: entered promiscuous mode
[ 113.440723][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.464389][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.476468][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.499103][ T7710] team0: Port device team_slave_0 added
[ 113.506118][ T7710] team0: Port device team_slave_1 added
[ 113.534088][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.553387][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.561171][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.588021][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.601393][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.608435][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.635311][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.653548][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.683638][ T7710] hsr_slave_0: entered promiscuous mode
[ 113.690351][ T7710] hsr_slave_1: entered promiscuous mode
[ 113.785871][ T64] bridge_slave_1: left allmulticast mode
[ 113.791817][ T64] bridge_slave_1: left promiscuous mode
[ 113.797610][ T64] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.806255][ T64] bridge_slave_0: left allmulticast mode
[ 113.812362][ T64] bridge_slave_0: left promiscuous mode
[ 113.818008][ T64] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.903313][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 113.913478][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 113.922967][ T64] bond0 (unregistering): Released all slaves
[ 114.156871][ T64] hsr_slave_0: left promiscuous mode
[ 114.162757][ T64] hsr_slave_1: left promiscuous mode
[ 114.168535][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.176827][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.186883][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.197273][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.208158][ T64] veth1_macvtap: left promiscuous mode
[ 114.214341][ T64] veth0_macvtap: left promiscuous mode
[ 114.220246][ T64] veth1_vlan: left promiscuous mode
[ 114.225513][ T64] veth0_vlan: left promiscuous mode
[ 114.299346][ T64] team0 (unregistering): Port device team_slave_1 removed
[ 114.318887][ T64] team0 (unregistering): Port device team_slave_0 removed
[ 114.405071][ T7710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 114.419343][ T7710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 114.436227][ T7710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.446784][ T7710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.511438][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.528330][ T7710] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.540483][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.547696][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.571090][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.578186][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.599323][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 114.618258][ T24] ------------[ cut here ]------------
[ 114.623789][ T24] refcount_t: underflow; use-after-free.
[ 114.629930][ T24] WARNING: CPU: 1 PID: 24 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[ 114.639160][ T24] Modules linked in:
[ 114.643216][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full)
[ 114.652470][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 114.662728][ T24] Workqueue: events xfrm_state_gc_task
[ 114.668207][ T24] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[ 114.674438][ T24] Code: 80 b1 e2 8b e8 77 4e bb fc 90 0f 0b 90 90 eb d7 e8 6b af f7 fc c6 05 81 7b c5 0a 01 90 48 c7 c7 e0 b1 e2 8b e8 57 4e bb fc 90 <0f> 0b 90 90 eb b7 e8 4b af f7 fc c6 05 5e 7b c5 0a 01 90 48 c7 c7
[ 114.694100][ T24] RSP: 0018:ffffc900001e7888 EFLAGS: 00010246
[ 114.700232][ T24] RAX: 516864998ccbad00 RBX: 0000000000000003 RCX: ffff88801d680000
[ 114.708314][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 114.716400][ T24] RBP: 0000000000000000 R08: ffffc900001e75a7 R09: 1ffff9200003ceb4
[ 114.724508][ T24] R10: dffffc0000000000 R11: fffff5200003ceb5 R12: dffffc0000000000
[ 114.732558][ T24] R13: ffff88802f119aa0 R14: ffff88802f1199e8 R15: ffff88802f119b90
[ 114.740579][ T24] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000
[ 114.749528][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.756216][ T24] CR2: 000055809cc3f950 CR3: 000000007eb98000 CR4: 00000000003526f0
[ 114.764284][ T24] Call Trace:
[ 114.767575][ T24]
[ 114.770588][ T24] __xfrm_state_delete+0xc73/0xde0
[ 114.775721][ T24] xfrm_state_gc_task+0x532/0x6d0
[ 114.780811][ T24] ? __pfx_xfrm_state_gc_task+0x10/0x10
[ 114.786376][ T24] ? rcu_is_watching+0x15/0xb0
[ 114.791207][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 114.796934][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 114.802723][ T24] process_scheduled_works+0xae1/0x17b0
[ 114.808299][ T24] ? __pfx_process_scheduled_works+0x10/0x10
[ 114.814445][ T24] worker_thread+0x8a0/0xda0
[ 114.819058][ T24] kthread+0x70e/0x8a0
[ 114.823204][ T24] ? __pfx_worker_thread+0x10/0x10
[ 114.828334][ T24] ? __pfx_kthread+0x10/0x10
[ 114.832987][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 114.833347][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.838191][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.850205][ T24] ? __pfx_kthread+0x10/0x10
[ 114.854813][ T24] ret_from_fork+0x3f9/0x770
[ 114.859417][ T24] ? __pfx_ret_from_fork+0x10/0x10
[ 114.864615][ T24] ? __switch_to_asm+0x39/0x70
[ 114.869390][ T24] ? __switch_to_asm+0x33/0x70
[ 114.871489][ T7710] veth0_vlan: entered promiscuous mode
[ 114.874306][ T24] ? __pfx_kthread+0x10/0x10
[ 114.884415][ T24] ret_from_fork_asm+0x1a/0x30
[ 114.886112][ T7710] veth1_vlan: entered promiscuous mode
[ 114.889195][ T24]
[ 114.897691][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 114.904980][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full)
[ 114.914308][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 114.924371][ T24] Workqueue: events xfrm_state_gc_task
[ 114.929854][ T24] Call Trace:
[ 114.933147][ T24]
[ 114.936084][ T24] dump_stack_lvl+0x99/0x250
[ 114.940688][ T24] ? __asan_memcpy+0x40/0x70
[ 114.945353][ T24] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.950539][ T24] ? __pfx__printk+0x10/0x10
[ 114.955124][ T24] vpanic+0x281/0x750
[ 114.959093][ T24] ? __pfx__printk+0x10/0x10
[ 114.963679][ T24] ? __pfx_vpanic+0x10/0x10
[ 114.968186][ T24] ? is_bpf_text_address+0x26/0x2b0
[ 114.973390][ T24] panic+0xb9/0xc0
[ 114.977108][ T24] ? __pfx_panic+0x10/0x10
[ 114.981611][ T24] __warn+0x31b/0x4b0
[ 114.985579][ T24] ? refcount_warn_saturate+0x11a/0x1d0
[ 114.991147][ T24] ? refcount_warn_saturate+0x11a/0x1d0
[ 114.996674][ T24] report_bug+0x2be/0x4f0
[ 115.001079][ T24] ? refcount_warn_saturate+0x11a/0x1d0
[ 115.006742][ T24] ? refcount_warn_saturate+0x11a/0x1d0
[ 115.012293][ T24] ? refcount_warn_saturate+0x11c/0x1d0
[ 115.017838][ T24] handle_bug+0x84/0x160
[ 115.022070][ T24] exc_invalid_op+0x1a/0x50
[ 115.026554][ T24] asm_exc_invalid_op+0x1a/0x20
[ 115.031390][ T24] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[ 115.037526][ T24] Code: 80 b1 e2 8b e8 77 4e bb fc 90 0f 0b 90 90 eb d7 e8 6b af f7 fc c6 05 81 7b c5 0a 01 90 48 c7 c7 e0 b1 e2 8b e8 57 4e bb fc 90 <0f> 0b 90 90 eb b7 e8 4b af f7 fc c6 05 5e 7b c5 0a 01 90 48 c7 c7
[ 115.057119][ T24] RSP: 0018:ffffc900001e7888 EFLAGS: 00010246
[ 115.063175][ T24] RAX: 516864998ccbad00 RBX: 0000000000000003 RCX: ffff88801d680000
[ 115.071142][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 115.079096][ T24] RBP: 0000000000000000 R08: ffffc900001e75a7 R09: 1ffff9200003ceb4
[ 115.087048][ T24] R10: dffffc0000000000 R11: fffff5200003ceb5 R12: dffffc0000000000
[ 115.094999][ T24] R13: ffff88802f119aa0 R14: ffff88802f1199e8 R15: ffff88802f119b90
[ 115.102959][ T24] ? refcount_warn_saturate+0x119/0x1d0
[ 115.108499][ T24] __xfrm_state_delete+0xc73/0xde0
[ 115.113614][ T24] xfrm_state_gc_task+0x532/0x6d0
[ 115.118720][ T24] ? __pfx_xfrm_state_gc_task+0x10/0x10
[ 115.124249][ T24] ? rcu_is_watching+0x15/0xb0
[ 115.129104][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 115.134817][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 115.140531][ T24] process_scheduled_works+0xae1/0x17b0
[ 115.146068][ T24] ? __pfx_process_scheduled_works+0x10/0x10
[ 115.152035][ T24] worker_thread+0x8a0/0xda0
[ 115.156618][ T24] kthread+0x70e/0x8a0
[ 115.160672][ T24] ? __pfx_worker_thread+0x10/0x10
[ 115.165770][ T24] ? __pfx_kthread+0x10/0x10
[ 115.170362][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 115.175546][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 115.180728][ T24] ? __pfx_kthread+0x10/0x10
[ 115.185303][ T24] ret_from_fork+0x3f9/0x770
[ 115.189876][ T24] ? __pfx_ret_from_fork+0x10/0x10
[ 115.194974][ T24] ? __switch_to_asm+0x39/0x70
[ 115.199725][ T24] ? __switch_to_asm+0x33/0x70
[ 115.204472][ T24] ? __pfx_kthread+0x10/0x10
[ 115.209046][ T24] ret_from_fork_asm+0x1a/0x30
[ 115.213804][ T24]
[ 115.217033][ T24] Kernel Offset: disabled
[ 115.221337][ T24] Rebooting in 86400 seconds..