Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
2025/08/27 02:35:41 parsed 1 programs
[ 92.801197][ T6188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.823373][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.837240][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.858256][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.866703][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.013635][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.020913][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.029673][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.038316][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.046367][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.219196][ T6257] chnl_net:caif_netlink_parms(): no params data found
[ 96.263097][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.270534][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.277671][ T6257] bridge_slave_0: entered allmulticast mode
[ 96.284830][ T6257] bridge_slave_0: entered promiscuous mode
[ 96.292252][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.299941][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.307263][ T6257] bridge_slave_1: entered allmulticast mode
[ 96.314374][ T6257] bridge_slave_1: entered promiscuous mode
[ 96.334975][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.346486][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.367200][ T6257] team0: Port device team_slave_0 added
[ 96.374364][ T6257] team0: Port device team_slave_1 added
[ 96.389718][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.396842][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.423015][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.434290][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.441433][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.467680][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.512825][ T6257] hsr_slave_0: entered promiscuous mode
[ 96.518935][ T6257] hsr_slave_1: entered promiscuous mode
[ 96.874584][ T6257] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.883907][ T6257] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.894294][ T6257] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.907536][ T6257] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.934655][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.941832][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.949295][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.956430][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.000411][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.016657][ T6257] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.025835][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.034345][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.057346][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.064490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.074525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.081687][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.243960][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.278906][ T6257] veth0_vlan: entered promiscuous mode
[ 97.297198][ T6257] veth1_vlan: entered promiscuous mode
[ 97.322947][ T6257] veth0_macvtap: entered promiscuous mode
[ 97.331949][ T6257] veth1_macvtap: entered promiscuous mode
[ 97.347367][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.361480][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.373448][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.386487][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.405412][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.422917][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.525943][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.628748][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.666628][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.747962][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/08/27 02:35:50 executed programs: 0
[ 98.666589][ T5180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.674864][ T5180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.685025][ T5180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.693896][ T5180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.701564][ T5180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.834944][ T6379] chnl_net:caif_netlink_parms(): no params data found
[ 98.897481][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.906271][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.913861][ T6379] bridge_slave_0: entered allmulticast mode
[ 98.922754][ T6379] bridge_slave_0: entered promiscuous mode
[ 98.931661][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.938843][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.947054][ T6379] bridge_slave_1: entered allmulticast mode
[ 98.954609][ T6379] bridge_slave_1: entered promiscuous mode
[ 98.986647][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.998008][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.028640][ T6379] team0: Port device team_slave_0 added
[ 99.040854][ T6379] team0: Port device team_slave_1 added
[ 99.065616][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.073018][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.100005][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.114934][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.123097][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.150622][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.189985][ T6379] hsr_slave_0: entered promiscuous mode
[ 99.196285][ T6379] hsr_slave_1: entered promiscuous mode
[ 99.205543][ T6379] debugfs: 'hsr0' already exists in 'hsr'
[ 99.211774][ T6379] Cannot create hsr debugfs directory
[ 100.235883][ T12] bridge_slave_1: left allmulticast mode
[ 100.241886][ T12] bridge_slave_1: left promiscuous mode
[ 100.247668][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.257166][ T12] bridge_slave_0: left allmulticast mode
[ 100.263045][ T12] bridge_slave_0: left promiscuous mode
[ 100.268801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.357649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.367672][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.376994][ T12] bond0 (unregistering): Released all slaves
[ 100.490331][ T12] hsr_slave_0: left promiscuous mode
[ 100.496261][ T12] hsr_slave_1: left promiscuous mode
[ 100.502276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.511580][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.519651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.527044][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.542778][ T12] veth1_macvtap: left promiscuous mode
[ 100.548384][ T12] veth0_macvtap: left promiscuous mode
[ 100.555985][ T12] veth1_vlan: left promiscuous mode
[ 100.561441][ T12] veth0_vlan: left promiscuous mode
[ 100.706200][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 100.716484][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 100.789109][ T5180] Bluetooth: hci0: command tx timeout
[ 100.951671][ T6379] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.962778][ T6379] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.973840][ T6379] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.989501][ T6379] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.055545][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.076687][ T6379] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.089188][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.096305][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.170342][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.177463][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.348258][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.388454][ T6379] veth0_vlan: entered promiscuous mode
[ 101.401804][ T6379] veth1_vlan: entered promiscuous mode
[ 101.426448][ T6379] veth0_macvtap: entered promiscuous mode
[ 101.443530][ T6379] veth1_macvtap: entered promiscuous mode
[ 101.458761][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.474602][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.488457][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.505941][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.517579][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.529378][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.562611][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.572931][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.588495][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.597258][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.621209][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'.
[ 101.640474][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'.
[ 101.658345][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'.
[ 101.694492][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'.
[ 101.714818][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'.
[ 101.742046][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'.
[ 101.762186][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'.
[ 101.783354][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'.
[ 101.807195][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'.
[ 101.826486][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'.
[ 102.870728][ T5180] Bluetooth: hci0: command tx timeout
2025/08/27 02:35:55 executed programs: 116
[ 104.949148][ T5180] Bluetooth: hci0: command tx timeout
[ 106.630521][ T7109] __nla_validate_parse: 282 callbacks suppressed
[ 106.630538][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'.
[ 106.663440][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[ 106.681653][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'.
[ 106.698533][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[ 106.723864][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'.
[ 106.742457][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'.
[ 106.759656][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'.
[ 106.783467][ T7123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'.
[ 106.801673][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'.
[ 106.821342][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'.
[ 107.029624][ T5180] Bluetooth: hci0: command tx timeout
2025/08/27 02:36:00 executed programs: 410
[ 111.654039][ T7688] __nla_validate_parse: 279 callbacks suppressed
[ 111.654053][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[ 111.679060][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'.
[ 111.696597][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'.
[ 111.723677][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'.
[ 111.742460][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'.
[ 111.761145][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'.
[ 111.784200][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'.
[ 111.802680][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'.
[ 111.821678][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'.
[ 111.843826][ T7706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'.
[ 112.037609][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 112.045049][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 112.052527][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 112.061545][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 112.070086][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.143625][ T7727] chnl_net:caif_netlink_parms(): no params data found
[ 112.178649][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.185944][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.193167][ T7727] bridge_slave_0: entered allmulticast mode
[ 112.199922][ T7727] bridge_slave_0: entered promiscuous mode
[ 112.206881][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.214205][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.221938][ T7727] bridge_slave_1: entered allmulticast mode
[ 112.229268][ T7727] bridge_slave_1: entered promiscuous mode
[ 112.244760][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.263281][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.274613][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.297229][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.310532][ T7727] team0: Port device team_slave_0 added
[ 112.317389][ T7727] team0: Port device team_slave_1 added
[ 112.338445][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.351102][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.358053][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.384474][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.396281][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.404028][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.430251][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.444017][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.470990][ T7727] hsr_slave_0: entered promiscuous mode
[ 112.477299][ T7727] hsr_slave_1: entered promiscuous mode
[ 112.557194][ T59] bridge_slave_1: left allmulticast mode
[ 112.563931][ T59] bridge_slave_1: left promiscuous mode
[ 112.570487][ T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.578554][ T59] bridge_slave_0: left allmulticast mode
[ 112.584553][ T59] bridge_slave_0: left promiscuous mode
[ 112.590689][ T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.686084][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 112.696708][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 112.706220][ T59] bond0 (unregistering): Released all slaves
[ 112.904337][ T59] hsr_slave_0: left promiscuous mode
[ 112.910352][ T59] hsr_slave_1: left promiscuous mode
[ 112.916260][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 112.925717][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 112.934079][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 112.942681][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 112.953678][ T59] veth1_macvtap: left promiscuous mode
[ 112.960166][ T59] veth0_macvtap: left promiscuous mode
[ 112.965997][ T59] veth1_vlan: left promiscuous mode
[ 112.971677][ T59] veth0_vlan: left promiscuous mode
[ 113.073241][ T59] team0 (unregistering): Port device team_slave_1 removed
[ 113.083767][ T59] team0 (unregistering): Port device team_slave_0 removed
[ 113.244197][ T7727] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.260199][ T7727] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.271971][ T7727] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.282496][ T7727] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.368174][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.405402][ T7727] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.417641][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.424795][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.437386][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.444525][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.543660][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.572474][ T7727] veth0_vlan: entered promiscuous mode
[ 113.581555][ T7727] veth1_vlan: entered promiscuous mode
[ 113.600327][ T7727] veth0_macvtap: entered promiscuous mode
[ 113.607964][ T7727] veth1_macvtap: entered promiscuous mode
[ 113.620888][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.632932][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.645439][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.654826][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.668889][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.678470][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/08/27 02:36:05 executed programs: 602
[ 113.705390][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.714715][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.730836][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.738689][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.159671][ T5180] Bluetooth: hci0: command tx timeout
[ 116.229092][ T5180] Bluetooth: hci0: command tx timeout
[ 116.664838][ T8118] __nla_validate_parse: 180 callbacks suppressed
[ 116.664851][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'.
[ 116.686817][ T8120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'.
[ 116.702184][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.790'.
[ 116.745254][ T8124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.791'.
[ 116.762856][ T8126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'.
[ 116.780109][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.793'.
[ 116.803733][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.794'.
[ 116.819425][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'.
[ 116.835600][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'.
[ 116.863803][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.797'.
[ 118.309232][ T5180] Bluetooth: hci0: command tx timeout
2025/08/27 02:36:10 executed programs: 894
[ 120.389125][ T5180] Bluetooth: hci0: command tx timeout
[ 121.675137][ T8706] __nla_validate_parse: 284 callbacks suppressed
[ 121.675158][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'.
[ 121.698347][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'.
[ 121.715487][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1084'.
[ 121.744204][ T8712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1085'.
[ 121.763091][ T8714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1086'.
[ 121.780854][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'.
[ 121.803562][ T8718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1088'.
[ 121.821112][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1089'.
[ 121.838564][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1090'.
[ 121.864169][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1091'.
2025/08/27 02:36:15 executed programs: 1188
[ 124.000366][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 124.007902][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 124.017332][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 124.032045][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 124.039525][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 124.115079][ T8976] chnl_net:caif_netlink_parms(): no params data found
[ 124.151845][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.160730][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.167871][ T8976] bridge_slave_0: entered allmulticast mode
[ 124.174746][ T8976] bridge_slave_0: entered promiscuous mode
[ 124.181809][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.189643][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.196810][ T8976] bridge_slave_1: entered allmulticast mode
[ 124.203459][ T8976] bridge_slave_1: entered promiscuous mode
[ 124.222157][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 124.234944][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.247890][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 124.268093][ T8976] team0: Port device team_slave_0 added
[ 124.276289][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.288742][ T8976] team0: Port device team_slave_1 added
[ 124.304707][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.312087][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 124.338580][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.351899][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.364023][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.371287][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 124.397997][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.412123][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.439422][ T8976] hsr_slave_0: entered promiscuous mode
[ 124.445544][ T8976] hsr_slave_1: entered promiscuous mode
[ 124.451626][ T8976] debugfs: 'hsr0' already exists in 'hsr'
[ 124.457437][ T8976] Cannot create hsr debugfs directory
[ 124.534844][ T49] bridge_slave_1: left allmulticast mode
[ 124.541490][ T49] bridge_slave_1: left promiscuous mode
[ 124.547264][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.557188][ T49] bridge_slave_0: left allmulticast mode
[ 124.563073][ T49] bridge_slave_0: left promiscuous mode
[ 124.568772][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.653865][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 124.663887][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 124.673422][ T49] bond0 (unregistering): Released all slaves
[ 124.937141][ T49] hsr_slave_0: left promiscuous mode
[ 124.946583][ T49] hsr_slave_1: left promiscuous mode
[ 124.954836][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 124.964598][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 124.972484][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 124.980627][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 124.991247][ T49] veth1_macvtap: left promiscuous mode
[ 124.996864][ T49] veth0_macvtap: left promiscuous mode
[ 125.002779][ T49] veth1_vlan: left promiscuous mode
[ 125.008099][ T49] veth0_vlan: left promiscuous mode
[ 125.163526][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 125.177499][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 125.281268][ T8976] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.294493][ T8976] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.303045][ T8976] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.312167][ T8976] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.353956][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.368480][ T8976] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.378606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.385839][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.397309][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.404491][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.509517][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.540876][ T8976] veth0_vlan: entered promiscuous mode
[ 125.549881][ T8976] veth1_vlan: entered promiscuous mode
[ 125.567453][ T8976] veth0_macvtap: entered promiscuous mode
[ 125.576459][ T8976] veth1_macvtap: entered promiscuous mode
[ 125.588396][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.600161][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.611855][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.620780][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.630414][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.639949][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.671467][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.682523][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.698664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.706837][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.069134][ T5180] Bluetooth: hci1: command tx timeout
[ 126.684966][ T9140] __nla_validate_parse: 182 callbacks suppressed
[ 126.684979][ T9140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1274'.
[ 126.707526][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'.
[ 126.724959][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'.
[ 126.754192][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1277'.
[ 126.771164][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1278'.
[ 126.787811][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'.
[ 126.813727][ T9152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'.
[ 126.830178][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1281'.
[ 126.846225][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'.
[ 126.874559][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1283'.
[ 128.149041][ T5180] Bluetooth: hci1: command tx timeout
2025/08/27 02:36:20 executed programs: 1377
[ 130.229151][ T5180] Bluetooth: hci1: command tx timeout
[ 131.693380][ T9724] __nla_validate_parse: 282 callbacks suppressed
[ 131.693393][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1566'.
[ 131.718009][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1567'.
[ 131.735676][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1568'.
[ 131.753746][ T9730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'.
[ 131.784561][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1570'.
[ 131.802618][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1571'.
[ 131.820032][ T9736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1572'.
[ 131.843871][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1573'.
[ 131.861788][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1574'.
[ 131.878303][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1575'.
[ 132.309217][ T5180] Bluetooth: hci1: command tx timeout
[ 132.870415][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.876918][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
2025/08/27 02:36:25 executed programs: 1670
[ 136.055827][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 136.066886][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 136.076850][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 136.084792][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 136.092514][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 136.167588][T10226] chnl_net:caif_netlink_parms(): no params data found
[ 136.192868][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.222232][T10226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.229604][T10226] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.236812][T10226] bridge_slave_0: entered allmulticast mode
[ 136.243495][T10226] bridge_slave_0: entered promiscuous mode
[ 136.251687][T10226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.259241][T10226] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.266484][T10226] bridge_slave_1: entered allmulticast mode
[ 136.273258][T10226] bridge_slave_1: entered promiscuous mode
[ 136.281792][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.304471][T10226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 136.315479][T10226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 136.335864][T10226] team0: Port device team_slave_0 added
[ 136.343735][T10226] team0: Port device team_slave_1 added
[ 136.351901][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.374306][T10226] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 136.381870][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 136.408375][T10226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 136.419949][T10226] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 136.426904][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 136.453287][T10226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 136.479596][T10226] hsr_slave_0: entered promiscuous mode
[ 136.485770][T10226] hsr_slave_1: entered promiscuous mode
[ 136.494944][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.584173][ T49] bridge_slave_1: left allmulticast mode
[ 136.592438][ T49] bridge_slave_1: left promiscuous mode
[ 136.598216][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.607396][ T49] bridge_slave_0: left allmulticast mode
[ 136.613510][ T49] bridge_slave_0: left promiscuous mode
[ 136.619894][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.694697][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.704834][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 136.715403][ T49] bond0 (unregistering): Released all slaves
[ 136.984476][ T49] hsr_slave_0: left promiscuous mode
[ 136.991574][ T49] hsr_slave_1: left promiscuous mode
[ 136.997309][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 137.004796][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 137.016177][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 137.024529][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 137.035685][ T49] veth1_macvtap: left promiscuous mode
[ 137.042134][ T49] veth0_macvtap: left promiscuous mode
[ 137.047734][ T49] veth1_vlan: left promiscuous mode
[ 137.055526][ T49] veth0_vlan: left promiscuous mode
[ 137.201331][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 137.218739][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 137.307748][T10226] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.321472][T10226] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.332041][T10226] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 137.341329][T10226] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 137.382982][T10226] 8021q: adding VLAN 0 to HW filter on device bond0
[ 137.396448][T10226] 8021q: adding VLAN 0 to HW filter on device team0
[ 137.406846][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.414044][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 137.425792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.433030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.519045][ T49] ==================================================================
[ 137.527248][ T49] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x76e/0xde0
[ 137.535433][ T49] Write of size 8 at addr ffff8880627eb768 by task kworker/u8:3/49
[ 137.543335][ T49]
[ 137.545682][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full)
[ 137.545702][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 137.545713][ T49] Workqueue: netns cleanup_net
[ 137.545737][ T49] Call Trace:
[ 137.545744][ T49]
[ 137.545751][ T49] dump_stack_lvl+0x189/0x250
[ 137.545771][ T49] ? __virt_addr_valid+0x1c8/0x5c0
[ 137.545792][ T49] ? rcu_is_watching+0x15/0xb0
[ 137.545809][ T49] ? __pfx_dump_stack_lvl+0x10/0x10
[ 137.545827][ T49] ? rcu_is_watching+0x15/0xb0
[ 137.545842][ T49] ? lock_release+0x4b/0x3e0
[ 137.545866][ T49] ? __virt_addr_valid+0x1c8/0x5c0
[ 137.545885][ T49] ? __virt_addr_valid+0x4a5/0x5c0
[ 137.545905][ T49] print_report+0xca/0x240
[ 137.545921][ T49] ? __xfrm_state_delete+0x76e/0xde0
[ 137.545936][ T49] kasan_report+0x118/0x150
[ 137.545967][ T49] ? __xfrm_state_delete+0x76e/0xde0
[ 137.545985][ T49] __xfrm_state_delete+0x76e/0xde0
[ 137.546010][ T49] xfrm_state_flush+0x44a/0x750
[ 137.546029][ T49] xfrm6_tunnel_net_exit+0x3c/0x100
[ 137.546047][ T49] ops_undo_list+0x49a/0x990
[ 137.546065][ T49] ? __pfx_ops_undo_list+0x10/0x10
[ 137.546082][ T49] ? do_raw_spin_unlock+0x122/0x240
[ 137.546103][ T49] cleanup_net+0x4c5/0x800
[ 137.546118][ T49] ? __pfx_cleanup_net+0x10/0x10
[ 137.546134][ T49] ? rcu_is_watching+0x15/0xb0
[ 137.546149][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 137.546165][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 137.546182][ T49] process_scheduled_works+0xae1/0x17b0
[ 137.546206][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 137.546226][ T49] worker_thread+0x8a0/0xda0
[ 137.546247][ T49] ? __kthread_parkme+0x7b/0x200
[ 137.546266][ T49] kthread+0x70e/0x8a0
[ 137.546286][ T49] ? __pfx_worker_thread+0x10/0x10
[ 137.546301][ T49] ? __pfx_kthread+0x10/0x10
[ 137.546319][ T49] ? _raw_spin_unlock_irq+0x23/0x50
[ 137.546341][ T49] ? lockdep_hardirqs_on+0x9c/0x150
[ 137.546362][ T49] ? __pfx_kthread+0x10/0x10
[ 137.546381][ T49] ret_from_fork+0x3f9/0x770
[ 137.546398][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 137.546417][ T49] ? __switch_to_asm+0x39/0x70
[ 137.546436][ T49] ? __switch_to_asm+0x33/0x70
[ 137.546455][ T49] ? __pfx_kthread+0x10/0x10
[ 137.546474][ T49] ret_from_fork_asm+0x1a/0x30
[ 137.546500][ T49]
[ 137.546506][ T49]
[ 137.551302][T10226] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 137.555873][ T49] Allocated by task 10050:
[ 137.592579][T10226] veth0_vlan: entered promiscuous mode
[ 137.596796][ T49] kasan_save_track+0x3e/0x80
[ 137.606440][T10226] veth1_vlan: entered promiscuous mode
[ 137.611219][ T49] __kasan_slab_alloc+0x6c/0x80
[ 137.611243][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 137.811781][ T49] xfrm_state_alloc+0x24/0x2f0
[ 137.816804][ T49] __find_acq_core+0x8a7/0x1c00
[ 137.821777][ T49] xfrm_find_acq+0x78/0xa0
[ 137.826224][ T49] xfrm_alloc_userspi+0x6b3/0xc90
[ 137.831245][ T49] xfrm_user_rcv_msg+0x7a3/0xab0
[ 137.836293][ T49] netlink_rcv_skb+0x208/0x470
[ 137.841218][ T49] xfrm_netlink_rcv+0x79/0x90
[ 137.846057][ T49] netlink_unicast+0x82f/0x9e0
[ 137.850894][ T49] netlink_sendmsg+0x805/0xb30
[ 137.855638][ T49] __sock_sendmsg+0x219/0x270
[ 137.860303][ T49] ____sys_sendmsg+0x505/0x830
[ 137.865139][ T49] ___sys_sendmsg+0x21f/0x2a0
[ 137.869898][ T49] __x64_sys_sendmsg+0x19b/0x260
[ 137.874822][ T49] do_syscall_64+0xfa/0x3b0
[ 137.879739][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.885701][ T49]
[ 137.888035][ T49] Freed by task 6028:
[ 137.891996][ T49] kasan_save_track+0x3e/0x80
[ 137.896661][ T49] kasan_save_free_info+0x46/0x50
[ 137.901667][ T49] __kasan_slab_free+0x5b/0x80
[ 137.906427][ T49] kmem_cache_free+0x18f/0x400
[ 137.911175][ T49] xfrm_state_gc_task+0x549/0x6d0
[ 137.916187][ T49] process_scheduled_works+0xae1/0x17b0
[ 137.921714][ T49] worker_thread+0x8a0/0xda0
[ 137.926293][ T49] kthread+0x70e/0x8a0
[ 137.930353][ T49] ret_from_fork+0x3f9/0x770
[ 137.934941][ T49] ret_from_fork_asm+0x1a/0x30
[ 137.939704][ T49]
[ 137.942023][ T49] The buggy address belongs to the object at ffff8880627eb740
[ 137.942023][ T49] which belongs to the cache xfrm_state of size 936
[ 137.955999][ T49] The buggy address is located 40 bytes inside of
[ 137.955999][ T49] freed 936-byte region [ffff8880627eb740, ffff8880627ebae8)
[ 137.969708][ T49]
[ 137.972022][ T49] The buggy address belongs to the physical page:
[ 137.978538][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x627e8
[ 137.987304][ T49] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 137.995889][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 138.003434][ T49] page_type: f5(slab)
[ 138.007402][ T49] raw: 00fff00000000040 ffff88801b3c9280 dead000000000100 dead000000000122
[ 138.015966][ T49] raw: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[ 138.024623][ T49] head: 00fff00000000040 ffff88801b3c9280 dead000000000100 dead000000000122
[ 138.033369][ T49] head: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[ 138.042028][ T49] head: 00fff00000000002 ffffea000189fa01 00000000ffffffff 00000000ffffffff
[ 138.050722][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 138.059464][ T49] page dumped because: kasan: bad access detected
[ 138.065868][ T49] page_owner tracks the page as allocated
[ 138.071656][ T49] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8688, tgid 8687 (syz.0.1073), ts 121523868095, free_ts 121487674016
[ 138.091174][ T49] post_alloc_hook+0x240/0x2a0
[ 138.095935][ T49] get_page_from_freelist+0x21e4/0x22c0
[ 138.101467][ T49] __alloc_frozen_pages_noprof+0x181/0x370
[ 138.107260][ T49] alloc_pages_mpol+0x232/0x4a0
[ 138.112100][ T49] allocate_slab+0x8a/0x370
[ 138.116587][ T49] ___slab_alloc+0xbeb/0x1410
[ 138.121258][ T49] kmem_cache_alloc_noprof+0x283/0x3c0
[ 138.126701][ T49] xfrm_state_alloc+0x24/0x2f0
[ 138.131490][ T49] __find_acq_core+0x8a7/0x1c00
[ 138.136419][ T49] xfrm_find_acq+0x78/0xa0
[ 138.140825][ T49] xfrm_alloc_userspi+0x6b3/0xc90
[ 138.145833][ T49] xfrm_user_rcv_msg+0x7a3/0xab0
[ 138.150756][ T49] netlink_rcv_skb+0x208/0x470
[ 138.155509][ T49] xfrm_netlink_rcv+0x79/0x90
[ 138.160174][ T49] netlink_unicast+0x82f/0x9e0
[ 138.164932][ T49] netlink_sendmsg+0x805/0xb30
[ 138.169678][ T49] page last free pid 8685 tgid 8685 stack trace:
[ 138.176001][ T49] __free_frozen_pages+0xbc4/0xd30
[ 138.181103][ T49] __slab_free+0x303/0x3c0
[ 138.185590][ T49] qlist_free_all+0x97/0x140
[ 138.190170][ T49] kasan_quarantine_reduce+0x148/0x160
[ 138.195618][ T49] __kasan_slab_alloc+0x22/0x80
[ 138.200455][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 138.205916][ T49] getname_flags+0xb8/0x540
[ 138.210446][ T49] __x64_sys_symlinkat+0x7a/0xb0
[ 138.215377][ T49] do_syscall_64+0xfa/0x3b0
[ 138.219862][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.225743][ T49]
[ 138.228067][ T49] Memory state around the buggy address:
[ 138.233677][ T49] ffff8880627eb600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 138.241806][ T49] ffff8880627eb680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 138.249859][ T49] >ffff8880627eb700: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 138.258076][ T49] ^
[ 138.265511][ T49] ffff8880627eb780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.273555][ T49] ffff8880627eb800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.281682][ T49] ==================================================================
[ 138.289969][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 138.297162][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full)
[ 138.306518][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 138.316759][ T49] Workqueue: netns cleanup_net
[ 138.321717][ T49] Call Trace:
[ 138.325062][ T49]
[ 138.327990][ T49] dump_stack_lvl+0x99/0x250
[ 138.332585][ T49] ? __asan_memcpy+0x40/0x70
[ 138.337355][ T49] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.342650][ T49] ? __pfx__printk+0x10/0x10
[ 138.347507][ T49] vpanic+0x281/0x750
[ 138.351585][ T49] ? __pfx_print_hex_dump+0x10/0x10
[ 138.356809][ T49] ? __pfx_vpanic+0x10/0x10
[ 138.361400][ T49] ? rcu_is_watching+0x15/0xb0
[ 138.366164][ T49] panic+0xb9/0xc0
[ 138.369902][ T49] ? __pfx_panic+0x10/0x10
[ 138.374320][ T49] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 138.380223][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 138.387177][ T49] ? __xfrm_state_delete+0x76e/0xde0
[ 138.392483][ T49] check_panic_on_warn+0x89/0xb0
[ 138.397624][ T49] ? __xfrm_state_delete+0x76e/0xde0
[ 138.403104][ T49] end_report+0x78/0x160
[ 138.407378][ T49] kasan_report+0x129/0x150
[ 138.412007][ T49] ? __xfrm_state_delete+0x76e/0xde0
[ 138.417410][ T49] __xfrm_state_delete+0x76e/0xde0
[ 138.422544][ T49] xfrm_state_flush+0x44a/0x750
[ 138.427544][ T49] xfrm6_tunnel_net_exit+0x3c/0x100
[ 138.432750][ T49] ops_undo_list+0x49a/0x990
[ 138.437336][ T49] ? __pfx_ops_undo_list+0x10/0x10
[ 138.442436][ T49] ? do_raw_spin_unlock+0x122/0x240
[ 138.447632][ T49] cleanup_net+0x4c5/0x800
[ 138.452045][ T49] ? __pfx_cleanup_net+0x10/0x10
[ 138.456978][ T49] ? rcu_is_watching+0x15/0xb0
[ 138.461728][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 138.467483][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 138.473280][ T49] process_scheduled_works+0xae1/0x17b0
[ 138.478822][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 138.484822][ T49] worker_thread+0x8a0/0xda0
[ 138.489408][ T49] ? __kthread_parkme+0x7b/0x200
[ 138.494424][ T49] kthread+0x70e/0x8a0
[ 138.498486][ T49] ? __pfx_worker_thread+0x10/0x10
[ 138.503588][ T49] ? __pfx_kthread+0x10/0x10
[ 138.508172][ T49] ? _raw_spin_unlock_irq+0x23/0x50
[ 138.513363][ T49] ? lockdep_hardirqs_on+0x9c/0x150
[ 138.518557][ T49] ? __pfx_kthread+0x10/0x10
[ 138.523136][ T49] ret_from_fork+0x3f9/0x770
[ 138.527714][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 138.532900][ T49] ? __switch_to_asm+0x39/0x70
[ 138.537655][ T49] ? __switch_to_asm+0x33/0x70
[ 138.542407][ T49] ? __pfx_kthread+0x10/0x10
[ 138.546985][ T49] ret_from_fork_asm+0x1a/0x30
[ 138.551743][ T49]
[ 138.555135][ T49] Kernel Offset: disabled
[ 138.559456][ T49] Rebooting in 86400 seconds..