Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. 2025/08/26 05:10:28 parsed 1 programs [ 93.994944][ T6192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.583801][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.591157][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.599929][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.607777][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.615189][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.774737][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.788519][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.806678][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.814526][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.937302][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 97.974848][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.982002][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.989192][ T6273] bridge_slave_0: entered allmulticast mode [ 97.995643][ T6273] bridge_slave_0: entered promiscuous mode [ 98.003462][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.010720][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.018868][ T6273] bridge_slave_1: entered allmulticast mode [ 98.025301][ T6273] bridge_slave_1: entered promiscuous mode [ 98.045729][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.057196][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.079190][ T6273] team0: Port device team_slave_0 added [ 98.085927][ T6273] team0: Port device team_slave_1 added [ 98.101563][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.108667][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.135071][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.147108][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.154062][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.180031][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.215018][ T6273] hsr_slave_0: entered promiscuous mode [ 98.221448][ T6273] hsr_slave_1: entered promiscuous mode [ 98.569710][ T6273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.579755][ T6273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.593952][ T6273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.606120][ T6273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.680726][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.699186][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.709517][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.716741][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.732241][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.739391][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.775182][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.914285][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.954560][ T6273] veth0_vlan: entered promiscuous mode [ 98.966179][ T6273] veth1_vlan: entered promiscuous mode [ 98.993266][ T6273] veth0_macvtap: entered promiscuous mode [ 99.003157][ T6273] veth1_macvtap: entered promiscuous mode [ 99.020466][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.034103][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.048309][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.075555][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.096260][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.105074][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.181848][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.243021][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321483][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.391903][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/26 05:10:37 executed programs: 0 [ 99.715062][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.723602][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.731105][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.744032][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.753378][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.904556][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 99.972153][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.979587][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.988445][ T6362] bridge_slave_0: entered allmulticast mode [ 99.995330][ T6362] bridge_slave_0: entered promiscuous mode [ 100.003533][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.010808][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.018094][ T6362] bridge_slave_1: entered allmulticast mode [ 100.024992][ T6362] bridge_slave_1: entered promiscuous mode [ 100.063837][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.075222][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.108855][ T6362] team0: Port device team_slave_0 added [ 100.117061][ T6362] team0: Port device team_slave_1 added [ 100.142254][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.151396][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.178247][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.195920][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.211602][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.238185][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.277007][ T6362] hsr_slave_0: entered promiscuous mode [ 100.283447][ T6362] hsr_slave_1: entered promiscuous mode [ 100.291021][ T6362] debugfs: 'hsr0' already exists in 'hsr' [ 100.296938][ T6362] Cannot create hsr debugfs directory [ 101.786380][ T51] Bluetooth: hci0: command tx timeout [ 101.864109][ T36] bridge_slave_1: left allmulticast mode [ 101.870427][ T36] bridge_slave_1: left promiscuous mode [ 101.877672][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.885787][ T36] bridge_slave_0: left allmulticast mode [ 101.892270][ T36] bridge_slave_0: left promiscuous mode [ 101.898249][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.967266][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.977178][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.986665][ T36] bond0 (unregistering): Released all slaves [ 102.091233][ T36] hsr_slave_0: left promiscuous mode [ 102.098650][ T36] hsr_slave_1: left promiscuous mode [ 102.105437][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.115295][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.124475][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.132148][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.143502][ T36] veth1_macvtap: left promiscuous mode [ 102.150704][ T36] veth0_macvtap: left promiscuous mode [ 102.158631][ T36] veth1_vlan: left promiscuous mode [ 102.163946][ T36] veth0_vlan: left promiscuous mode [ 102.309974][ T36] team0 (unregistering): Port device team_slave_1 removed [ 102.321530][ T36] team0 (unregistering): Port device team_slave_0 removed [ 102.499448][ T6362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.509665][ T6362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.519270][ T6362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.529518][ T6362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.602080][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.635501][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.646144][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.653309][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.667464][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.674596][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.794291][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.824298][ T6362] veth0_vlan: entered promiscuous mode [ 102.834978][ T6362] veth1_vlan: entered promiscuous mode [ 102.851708][ T6362] veth0_macvtap: entered promiscuous mode [ 102.864032][ T6362] veth1_macvtap: entered promiscuous mode [ 102.878911][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.889504][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.901306][ T3007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911551][ T3007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.921735][ T3007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.930960][ T3007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.962051][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.972725][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.988450][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.999077][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.020742][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 103.041326][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 103.059065][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 103.082501][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 103.101756][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 103.122887][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 103.143894][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 103.162015][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 103.183009][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 103.204390][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 103.868221][ T51] Bluetooth: hci0: command tx timeout 2025/08/26 05:10:42 executed programs: 96 [ 105.946663][ T51] Bluetooth: hci0: command tx timeout [ 108.027186][ T51] Bluetooth: hci0: command tx timeout [ 108.063264][ T7102] __nla_validate_parse: 284 callbacks suppressed [ 108.063277][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'. [ 108.090719][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 108.110715][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 108.133324][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 108.152817][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'. [ 108.172442][ T7112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 108.202068][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 108.221541][ T7116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 108.241249][ T7118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 108.264093][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. 2025/08/26 05:10:47 executed programs: 384 [ 113.090907][ T7678] __nla_validate_parse: 278 callbacks suppressed [ 113.090921][ T7678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'. [ 113.117335][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'. [ 113.134742][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 113.160711][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'. [ 113.178751][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 113.197918][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'. [ 113.220543][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'. [ 113.238772][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'. [ 113.256583][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'. [ 113.280936][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'. [ 113.469679][ T5889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.479058][ T5889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.486824][ T5889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.494458][ T5889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.502224][ T5889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.577553][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 113.612986][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.620440][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.627948][ T7714] bridge_slave_0: entered allmulticast mode [ 113.634431][ T7714] bridge_slave_0: entered promiscuous mode [ 113.642247][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.649409][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.656612][ T7714] bridge_slave_1: entered allmulticast mode [ 113.663146][ T7714] bridge_slave_1: entered promiscuous mode [ 113.671804][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.695401][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.706015][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.725175][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.742676][ T7714] team0: Port device team_slave_0 added [ 113.750124][ T7714] team0: Port device team_slave_1 added [ 113.766234][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.773189][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.799446][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.812617][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.825083][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.832276][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.858680][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.878386][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.902717][ T7714] hsr_slave_0: entered promiscuous mode [ 113.909434][ T7714] hsr_slave_1: entered promiscuous mode [ 113.997467][ T36] bridge_slave_1: left allmulticast mode [ 114.003152][ T36] bridge_slave_1: left promiscuous mode [ 114.009156][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.018316][ T36] bridge_slave_0: left allmulticast mode [ 114.023962][ T36] bridge_slave_0: left promiscuous mode [ 114.029801][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.140376][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.150220][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.159757][ T36] bond0 (unregistering): Released all slaves [ 114.349219][ T36] hsr_slave_0: left promiscuous mode [ 114.355060][ T36] hsr_slave_1: left promiscuous mode [ 114.364674][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.372128][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.380073][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.387965][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.399650][ T36] veth1_macvtap: left promiscuous mode [ 114.405189][ T36] veth0_macvtap: left promiscuous mode [ 114.411322][ T36] veth1_vlan: left promiscuous mode [ 114.416915][ T36] veth0_vlan: left promiscuous mode [ 114.518040][ T36] team0 (unregistering): Port device team_slave_1 removed [ 114.529224][ T36] team0 (unregistering): Port device team_slave_0 removed [ 114.620964][ T7714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.631324][ T7714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.645178][ T7714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.655603][ T7714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.742558][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.760271][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.773340][ T36] ------------[ cut here ]------------ [ 114.778951][ T36] WARNING: CPU: 1 PID: 36 at net/xfrm/xfrm_state.c:801 __xfrm_state_destroy+0x15f/0x190 [ 114.788775][ T36] Modules linked in: [ 114.792685][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 114.802058][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.812259][ T36] Workqueue: netns cleanup_net [ 114.817092][ T36] RIP: 0010:__xfrm_state_destroy+0x15f/0x190 [ 114.823085][ T36] Code: 48 c7 c2 00 34 63 8f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 25 89 69 f7 e8 70 33 9f f7 90 0f 0b 90 e9 00 ff ff ff e8 62 33 9f f7 90 <0f> 0b 90 e9 20 ff ff ff 44 89 f1 80 e1 07 38 c1 0f 8c c6 fe ff ff [ 114.843293][ T36] RSP: 0018:ffffc90000ac77f0 EFLAGS: 00010293 [ 114.849479][ T36] RAX: ffffffff8a2077ce RBX: ffff88807cc9c008 RCX: ffff8881404e1e00 [ 114.857603][ T36] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 114.865590][ T36] RBP: 0000000000000005 R08: ffff88807cc9c06b R09: 1ffff1100f99380d [ 114.873700][ T36] R10: dffffc0000000000 R11: ffffed100f99380e R12: dffffc0000000000 [ 114.881781][ T36] R13: 1ffff1100f993802 R14: ffff88807cc9c010 R15: dffffc0000000000 [ 114.889919][ T36] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 114.899153][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.905952][ T36] CR2: 000055eb8c9a1008 CR3: 0000000027f28000 CR4: 00000000003526f0 [ 114.909430][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.914199][ T36] Call Trace: [ 114.921020][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.932662][ T36] [ 114.935616][ T36] xfrm_state_flush+0x4fd/0x6c0 [ 114.940777][ T36] xfrm6_tunnel_net_exit+0x3c/0x100 [ 114.942815][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.946013][ T36] ops_undo_list+0x49a/0x990 [ 114.953121][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.964974][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 114.970156][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 114.975459][ T36] cleanup_net+0x4c5/0x800 [ 114.979948][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 114.984982][ T36] ? rcu_is_watching+0x15/0xb0 [ 114.989810][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 114.995546][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 115.001330][ T36] process_scheduled_works+0xae1/0x17b0 [ 115.006931][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.012930][ T36] worker_thread+0x8a0/0xda0 [ 115.017578][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.023917][ T36] ? __kthread_parkme+0x7b/0x200 [ 115.028976][ T36] kthread+0x70e/0x8a0 [ 115.033063][ T36] ? __pfx_worker_thread+0x10/0x10 [ 115.038241][ T36] ? __pfx_kthread+0x10/0x10 [ 115.042846][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.048114][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.053324][ T36] ? __pfx_kthread+0x10/0x10 [ 115.057968][ T36] ret_from_fork+0x3f9/0x770 [ 115.062567][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 115.067732][ T36] ? __switch_to_asm+0x39/0x70 [ 115.072521][ T36] ? __switch_to_asm+0x33/0x70 [ 115.077333][ T36] ? __pfx_kthread+0x10/0x10 [ 115.081941][ T36] ret_from_fork_asm+0x1a/0x30 [ 115.086758][ T36] [ 115.089493][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.089778][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.089791][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 115.089809][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.089828][ T36] Workqueue: netns cleanup_net [ 115.089849][ T36] Call Trace: [ 115.089857][ T36] [ 115.089864][ T36] dump_stack_lvl+0x99/0x250 [ 115.089887][ T36] ? __asan_memcpy+0x40/0x70 [ 115.089906][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.089926][ T36] ? __pfx__printk+0x10/0x10 [ 115.089952][ T36] vpanic+0x281/0x750 [ 115.089971][ T36] ? __pfx__printk+0x10/0x10 [ 115.089992][ T36] ? __pfx_vpanic+0x10/0x10 [ 115.090009][ T36] ? is_bpf_text_address+0x292/0x2b0 [ 115.090038][ T36] panic+0xb9/0xc0 [ 115.090055][ T36] ? __pfx_panic+0x10/0x10 [ 115.090080][ T36] __warn+0x31b/0x4b0 [ 115.090097][ T36] ? __xfrm_state_destroy+0x15f/0x190 [ 115.090115][ T36] ? __xfrm_state_destroy+0x15f/0x190 [ 115.090130][ T36] report_bug+0x2be/0x4f0 [ 115.090152][ T36] ? __xfrm_state_destroy+0x15f/0x190 [ 115.090168][ T36] ? __xfrm_state_destroy+0x15f/0x190 [ 115.090183][ T36] ? __xfrm_state_destroy+0x161/0x190 [ 115.090198][ T36] handle_bug+0x84/0x160 [ 115.090216][ T36] exc_invalid_op+0x1a/0x50 [ 115.090233][ T36] asm_exc_invalid_op+0x1a/0x20 [ 115.090249][ T36] RIP: 0010:__xfrm_state_destroy+0x15f/0x190 [ 115.090266][ T36] Code: 48 c7 c2 00 34 63 8f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 25 89 69 f7 e8 70 33 9f f7 90 0f 0b 90 e9 00 ff ff ff e8 62 33 9f f7 90 <0f> 0b 90 e9 20 ff ff ff 44 89 f1 80 e1 07 38 c1 0f 8c c6 fe ff ff [ 115.090280][ T36] RSP: 0018:ffffc90000ac77f0 EFLAGS: 00010293 [ 115.090295][ T36] RAX: ffffffff8a2077ce RBX: ffff88807cc9c008 RCX: ffff8881404e1e00 [ 115.090309][ T36] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 115.090320][ T36] RBP: 0000000000000005 R08: ffff88807cc9c06b R09: 1ffff1100f99380d [ 115.090332][ T36] R10: dffffc0000000000 R11: ffffed100f99380e R12: dffffc0000000000 [ 115.090344][ T36] R13: 1ffff1100f993802 R14: ffff88807cc9c010 R15: dffffc0000000000 [ 115.090361][ T36] ? __xfrm_state_destroy+0x15e/0x190 [ 115.090381][ T36] xfrm_state_flush+0x4fd/0x6c0 [ 115.090401][ T36] xfrm6_tunnel_net_exit+0x3c/0x100 [ 115.090421][ T36] ops_undo_list+0x49a/0x990 [ 115.090438][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 115.090455][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 115.090477][ T36] cleanup_net+0x4c5/0x800 [ 115.090493][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 115.090509][ T36] ? rcu_is_watching+0x15/0xb0 [ 115.090525][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 115.090541][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 115.090558][ T36] process_scheduled_works+0xae1/0x17b0 [ 115.090584][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.090607][ T36] worker_thread+0x8a0/0xda0 [ 115.090625][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.090650][ T36] ? __kthread_parkme+0x7b/0x200 [ 115.090672][ T36] kthread+0x70e/0x8a0 [ 115.090692][ T36] ? __pfx_worker_thread+0x10/0x10 [ 115.090708][ T36] ? __pfx_kthread+0x10/0x10 [ 115.090728][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.090748][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.090770][ T36] ? __pfx_kthread+0x10/0x10 [ 115.090789][ T36] ret_from_fork+0x3f9/0x770 [ 115.090807][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 115.090832][ T36] ? __switch_to_asm+0x39/0x70 [ 115.090852][ T36] ? __switch_to_asm+0x33/0x70 [ 115.090872][ T36] ? __pfx_kthread+0x10/0x10 [ 115.090891][ T36] ret_from_fork_asm+0x1a/0x30 [ 115.090918][ T36] [ 115.096770][ T36] Kernel Offset: disabled