Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. 2025/08/27 06:25:55 parsed 1 programs [ 91.194061][ T6204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.421353][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.430802][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.438166][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.445803][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.453224][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.607650][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.615506][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.634961][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.642903][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.079031][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 94.136942][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.144271][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.151727][ T6248] bridge_slave_0: entered allmulticast mode [ 94.158887][ T6248] bridge_slave_0: entered promiscuous mode [ 94.167586][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.174722][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.182224][ T6248] bridge_slave_1: entered allmulticast mode [ 94.188964][ T6248] bridge_slave_1: entered promiscuous mode [ 94.205566][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.219539][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.238856][ T6248] team0: Port device team_slave_0 added [ 94.245500][ T6248] team0: Port device team_slave_1 added [ 94.260297][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.267628][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.293669][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.305343][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.312621][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.338537][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.371236][ T6248] hsr_slave_0: entered promiscuous mode [ 94.377288][ T6248] hsr_slave_1: entered promiscuous mode [ 94.659587][ T6248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.669171][ T6248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.679151][ T6248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.693120][ T6248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.758605][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.772609][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.784760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.791899][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.810251][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.817358][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.972416][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.006641][ T6248] veth0_vlan: entered promiscuous mode [ 95.017981][ T6248] veth1_vlan: entered promiscuous mode [ 95.040914][ T6248] veth0_macvtap: entered promiscuous mode [ 95.050722][ T6248] veth1_macvtap: entered promiscuous mode [ 95.066802][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.081593][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.095767][ T2902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.104837][ T2902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120788][ T2902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.140090][ T2902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.206127][ T2902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.285312][ T2902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.373144][ T2902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.486108][ T2902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/27 06:26:03 executed programs: 0 [ 97.059694][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.066918][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.076702][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.093427][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.101357][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.242468][ T6414] chnl_net:caif_netlink_parms(): no params data found [ 97.311796][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.319340][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.326593][ T6414] bridge_slave_0: entered allmulticast mode [ 97.334164][ T6414] bridge_slave_0: entered promiscuous mode [ 97.344028][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.353470][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.361233][ T6414] bridge_slave_1: entered allmulticast mode [ 97.368812][ T6414] bridge_slave_1: entered promiscuous mode [ 97.396139][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.409686][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.438699][ T6414] team0: Port device team_slave_0 added [ 97.446289][ T6414] team0: Port device team_slave_1 added [ 97.471657][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.479027][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.506341][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.519799][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.526749][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.553714][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.592084][ T6414] hsr_slave_0: entered promiscuous mode [ 97.598556][ T6414] hsr_slave_1: entered promiscuous mode [ 97.604350][ T6414] debugfs: 'hsr0' already exists in 'hsr' [ 97.610908][ T6414] Cannot create hsr debugfs directory [ 98.430424][ T2902] bridge_slave_1: left allmulticast mode [ 98.436103][ T2902] bridge_slave_1: left promiscuous mode [ 98.442131][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.452240][ T2902] bridge_slave_0: left allmulticast mode [ 98.458442][ T2902] bridge_slave_0: left promiscuous mode [ 98.464140][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.594708][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.605343][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.624749][ T2902] bond0 (unregistering): Released all slaves [ 98.708355][ T2902] hsr_slave_0: left promiscuous mode [ 98.713983][ T2902] hsr_slave_1: left promiscuous mode [ 98.720271][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.727972][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.735935][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.744398][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.754175][ T2902] veth1_macvtap: left promiscuous mode [ 98.759796][ T2902] veth0_macvtap: left promiscuous mode [ 98.765323][ T2902] veth1_vlan: left promiscuous mode [ 98.770702][ T2902] veth0_vlan: left promiscuous mode [ 98.854069][ T2902] team0 (unregistering): Port device team_slave_1 removed [ 98.867616][ T2902] team0 (unregistering): Port device team_slave_0 removed [ 99.036079][ T6414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.046404][ T6414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.059262][ T6414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.068784][ T6414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.141134][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.167661][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.167870][ T5184] Bluetooth: hci0: command tx timeout [ 99.180403][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.187541][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.199393][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.206500][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.357761][ T6414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.369033][ T6414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.487003][ T6414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.521613][ T6414] veth0_vlan: entered promiscuous mode [ 99.531981][ T6414] veth1_vlan: entered promiscuous mode [ 99.564596][ T6414] veth0_macvtap: entered promiscuous mode [ 99.575467][ T6414] veth1_macvtap: entered promiscuous mode [ 99.589758][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.600847][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.611884][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.620863][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.630790][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.639749][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.672241][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.682520][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.697764][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.705801][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.734225][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.752471][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 99.780765][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 99.805174][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.824970][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 99.861397][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 99.882493][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 99.907051][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 99.928116][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 99.945548][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 101.247336][ T5184] Bluetooth: hci0: command tx timeout 2025/08/27 06:26:09 executed programs: 130 [ 103.327432][ T5184] Bluetooth: hci0: command tx timeout [ 104.742027][ T7098] __nla_validate_parse: 277 callbacks suppressed [ 104.742044][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.304'. [ 104.770990][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'. [ 104.791127][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 104.810250][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.307'. [ 104.836215][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'. [ 104.860368][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'. [ 104.879735][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 104.911681][ T7112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'. [ 104.931330][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 104.950367][ T7116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 105.407473][ T5184] Bluetooth: hci0: command tx timeout 2025/08/27 06:26:14 executed programs: 417 [ 109.761930][ T7664] __nla_validate_parse: 273 callbacks suppressed [ 109.761944][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.587'. [ 109.785643][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 109.803298][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.589'. [ 109.833174][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 109.850999][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.591'. [ 109.867917][ T7674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.592'. [ 109.891634][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 109.910098][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.594'. [ 109.927573][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 109.951996][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.596'. [ 110.329986][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.337497][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.344720][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.352635][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.360854][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.432304][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 110.468817][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.475875][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.483103][ T7724] bridge_slave_0: entered allmulticast mode [ 110.489972][ T7724] bridge_slave_0: entered promiscuous mode [ 110.497620][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.504721][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.511946][ T7724] bridge_slave_1: entered allmulticast mode [ 110.518589][ T7724] bridge_slave_1: entered promiscuous mode [ 110.528154][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.550799][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.561625][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.584477][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.596992][ T7724] team0: Port device team_slave_0 added [ 110.603901][ T7724] team0: Port device team_slave_1 added [ 110.619804][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.626742][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.653032][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.666816][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.678929][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.685863][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.712052][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.739098][ T7724] hsr_slave_0: entered promiscuous mode [ 110.745272][ T7724] hsr_slave_1: entered promiscuous mode [ 110.754338][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.853601][ T13] bridge_slave_1: left allmulticast mode [ 110.859579][ T13] bridge_slave_1: left promiscuous mode [ 110.865383][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.884378][ T13] bridge_slave_0: left allmulticast mode [ 110.891077][ T13] bridge_slave_0: left promiscuous mode [ 110.897106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.970268][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.980421][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.989755][ T13] bond0 (unregistering): Released all slaves [ 111.193854][ T13] hsr_slave_0: left promiscuous mode [ 111.199740][ T13] hsr_slave_1: left promiscuous mode [ 111.205465][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.213223][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.221668][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.229466][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.240746][ T13] veth1_macvtap: left promiscuous mode [ 111.246267][ T13] veth0_macvtap: left promiscuous mode [ 111.252192][ T13] veth1_vlan: left promiscuous mode [ 111.257664][ T13] veth0_vlan: left promiscuous mode [ 111.341629][ T13] team0 (unregistering): Port device team_slave_1 removed [ 111.351842][ T13] team0 (unregistering): Port device team_slave_0 removed [ 111.439065][ T7724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.450219][ T7724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.459931][ T7724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.468662][ T7724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.529071][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.546247][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.559713][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.566819][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.590017][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.597166][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.619671][ T7724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.631143][ T7724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.702740][ T13] ------------[ cut here ]------------ [ 111.708457][ T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:801 xfrm_state_flush+0x7d9/0x910 [ 111.719361][ T13] Modules linked in: [ 111.723710][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 111.733263][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.743627][ T13] Workqueue: netns cleanup_net [ 111.749901][ T13] RIP: 0010:xfrm_state_flush+0x7d9/0x910 [ 111.755559][ T13] Code: bd 1d 9f f7 90 0f 0b 90 e9 33 fd ff ff e8 af 1d 9f f7 4c 89 e7 be 03 00 00 00 e8 32 6d a7 fa e9 01 fe ff ff e8 98 1d 9f f7 90 <0f> 0b 90 e9 50 fe ff ff e8 8a 1d 9f f7 4c 89 e7 be 03 00 00 00 e8 [ 111.775541][ T13] RSP: 0018:ffffc90000127820 EFLAGS: 00010293 [ 111.781890][ T13] RAX: ffffffff8a208d98 RBX: ffff88807a6fddc0 RCX: ffff88801cec8000 [ 111.790238][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 111.799316][ T13] RBP: 0000000000000001 R08: ffff88807a6fde2b R09: 1ffff1100f4dfbc5 [ 111.807911][ T13] R10: dffffc0000000000 R11: ffffed100f4dfbc6 R12: ffff88807a6fde28 [ 111.819830][ T13] R13: ffff88807a6fdef0 R14: dffffc0000000000 R15: 0000000000000001 [ 111.828210][ T13] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 111.837491][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.845136][ T13] CR2: 00007f1ca06d5e9c CR3: 0000000074866000 CR4: 00000000003526f0 [ 111.853448][ T13] Call Trace: [ 111.856733][ T13] [ 111.860009][ T13] xfrm6_tunnel_net_exit+0x3c/0x100 [ 111.865516][ T13] ops_undo_list+0x49a/0x990 [ 111.870259][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 111.875372][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 111.881153][ T13] cleanup_net+0x4c5/0x800 [ 111.885589][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 111.890872][ T13] ? rcu_is_watching+0x15/0xb0 [ 111.895655][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 111.902344][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 111.908690][ T13] process_scheduled_works+0xae1/0x17b0 [ 111.909498][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.917004][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.927311][ T13] worker_thread+0x8a0/0xda0 [ 111.933129][ T13] kthread+0x70e/0x8a0 [ 111.937334][ T13] ? __pfx_worker_thread+0x10/0x10 [ 111.942457][ T13] ? __pfx_kthread+0x10/0x10 [ 111.947057][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.952636][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.957931][ T13] ? __pfx_kthread+0x10/0x10 [ 111.970161][ T7724] veth0_vlan: entered promiscuous mode [ 111.974660][ T7724] veth1_vlan: entered promiscuous mode [ 111.978426][ T13] ret_from_fork+0x3f9/0x770 [ 111.988420][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 111.993539][ T13] ? __switch_to_asm+0x39/0x70 [ 111.998433][ T13] ? __switch_to_asm+0x33/0x70 [ 112.003203][ T13] ? __pfx_kthread+0x10/0x10 [ 112.007843][ T13] ret_from_fork_asm+0x1a/0x30 [ 112.012627][ T13] [ 112.015646][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.022953][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 112.032248][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.042396][ T13] Workqueue: netns cleanup_net [ 112.047171][ T13] Call Trace: [ 112.050454][ T13] [ 112.053388][ T13] dump_stack_lvl+0x99/0x250 [ 112.057982][ T13] ? __asan_memcpy+0x40/0x70 [ 112.062564][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.067748][ T13] ? __pfx__printk+0x10/0x10 [ 112.072333][ T13] vpanic+0x281/0x750 [ 112.076301][ T13] ? __pfx__printk+0x10/0x10 [ 112.080882][ T13] ? __pfx_vpanic+0x10/0x10 [ 112.085369][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 112.090561][ T13] panic+0xb9/0xc0 [ 112.094266][ T13] ? __pfx_panic+0x10/0x10 [ 112.098770][ T13] __warn+0x31b/0x4b0 [ 112.102736][ T13] ? xfrm_state_flush+0x7d9/0x910 [ 112.107745][ T13] ? xfrm_state_flush+0x7d9/0x910 [ 112.112749][ T13] report_bug+0x2be/0x4f0 [ 112.117064][ T13] ? xfrm_state_flush+0x7d9/0x910 [ 112.122080][ T13] ? xfrm_state_flush+0x7d9/0x910 [ 112.127091][ T13] ? xfrm_state_flush+0x7db/0x910 [ 112.132144][ T13] handle_bug+0x84/0x160 [ 112.136370][ T13] exc_invalid_op+0x1a/0x50 [ 112.140853][ T13] asm_exc_invalid_op+0x1a/0x20 [ 112.145690][ T13] RIP: 0010:xfrm_state_flush+0x7d9/0x910 [ 112.151303][ T13] Code: bd 1d 9f f7 90 0f 0b 90 e9 33 fd ff ff e8 af 1d 9f f7 4c 89 e7 be 03 00 00 00 e8 32 6d a7 fa e9 01 fe ff ff e8 98 1d 9f f7 90 <0f> 0b 90 e9 50 fe ff ff e8 8a 1d 9f f7 4c 89 e7 be 03 00 00 00 e8 [ 112.170894][ T13] RSP: 0018:ffffc90000127820 EFLAGS: 00010293 [ 112.176947][ T13] RAX: ffffffff8a208d98 RBX: ffff88807a6fddc0 RCX: ffff88801cec8000 [ 112.184907][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 112.192859][ T13] RBP: 0000000000000001 R08: ffff88807a6fde2b R09: 1ffff1100f4dfbc5 [ 112.200814][ T13] R10: dffffc0000000000 R11: ffffed100f4dfbc6 R12: ffff88807a6fde28 [ 112.208770][ T13] R13: ffff88807a6fdef0 R14: dffffc0000000000 R15: 0000000000000001 [ 112.216814][ T13] ? xfrm_state_flush+0x7d8/0x910 [ 112.221919][ T13] xfrm6_tunnel_net_exit+0x3c/0x100 [ 112.227106][ T13] ops_undo_list+0x49a/0x990 [ 112.231679][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 112.236769][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 112.241954][ T13] cleanup_net+0x4c5/0x800 [ 112.246350][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 112.251269][ T13] ? rcu_is_watching+0x15/0xb0 [ 112.256040][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 112.261748][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 112.267447][ T13] process_scheduled_works+0xae1/0x17b0 [ 112.272982][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.279054][ T13] worker_thread+0x8a0/0xda0 [ 112.283638][ T13] kthread+0x70e/0x8a0 [ 112.287706][ T13] ? __pfx_worker_thread+0x10/0x10 [ 112.292818][ T13] ? __pfx_kthread+0x10/0x10 [ 112.297404][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.302601][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.307800][ T13] ? __pfx_kthread+0x10/0x10 [ 112.312390][ T13] ret_from_fork+0x3f9/0x770 [ 112.316982][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 112.322095][ T13] ? __switch_to_asm+0x39/0x70 [ 112.326857][ T13] ? __switch_to_asm+0x33/0x70 [ 112.331627][ T13] ? __pfx_kthread+0x10/0x10 [ 112.336214][ T13] ret_from_fork_asm+0x1a/0x30 [ 112.340970][ T13] [ 112.344246][ T13] Kernel Offset: disabled [ 112.348570][ T13] Rebooting in 86400 seconds..