Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 2025/08/25 01:46:32 parsed 1 programs [ 92.314968][ T6183] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.789017][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.796404][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.804410][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.812831][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.821004][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.738601][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.746788][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.761433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.769279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.912323][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 95.958619][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.965932][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.973114][ T6251] bridge_slave_0: entered allmulticast mode [ 95.979704][ T6251] bridge_slave_0: entered promiscuous mode [ 95.986689][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.994660][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.001851][ T6251] bridge_slave_1: entered allmulticast mode [ 96.008412][ T6251] bridge_slave_1: entered promiscuous mode [ 96.037879][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.048943][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.068503][ T6251] team0: Port device team_slave_0 added [ 96.076325][ T6251] team0: Port device team_slave_1 added [ 96.092109][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.099252][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.125295][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.136919][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.144688][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.171180][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.202783][ T6251] hsr_slave_0: entered promiscuous mode [ 96.208776][ T6251] hsr_slave_1: entered promiscuous mode [ 96.581973][ T6251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.592664][ T6251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.602463][ T6251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.612209][ T6251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.635133][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.642307][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.649826][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.656932][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.704001][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.719413][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.727033][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.743474][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.760942][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.768097][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.777401][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.784634][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.937865][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.973451][ T6251] veth0_vlan: entered promiscuous mode [ 96.987325][ T6251] veth1_vlan: entered promiscuous mode [ 97.014752][ T6251] veth0_macvtap: entered promiscuous mode [ 97.024123][ T6251] veth1_macvtap: entered promiscuous mode [ 97.041470][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.061892][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.077660][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.093489][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.102736][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.123335][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.198111][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.246768][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.311784][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.378472][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/25 01:46:41 executed programs: 0 [ 98.286708][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.298481][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.305989][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.314149][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.322468][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.473591][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 98.544409][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.551983][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.559173][ T6376] bridge_slave_0: entered allmulticast mode [ 98.567476][ T6376] bridge_slave_0: entered promiscuous mode [ 98.575954][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.584525][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.592850][ T6376] bridge_slave_1: entered allmulticast mode [ 98.600426][ T6376] bridge_slave_1: entered promiscuous mode [ 98.630347][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.642182][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.676140][ T6376] team0: Port device team_slave_0 added [ 98.685204][ T6376] team0: Port device team_slave_1 added [ 98.711784][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.718779][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.746341][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.760750][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.767721][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.794978][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.841395][ T6376] hsr_slave_0: entered promiscuous mode [ 98.847807][ T6376] hsr_slave_1: entered promiscuous mode [ 98.857460][ T6376] debugfs: 'hsr0' already exists in 'hsr' [ 98.863250][ T6376] Cannot create hsr debugfs directory [ 99.838965][ T49] bridge_slave_1: left allmulticast mode [ 99.845708][ T49] bridge_slave_1: left promiscuous mode [ 99.852302][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.861381][ T49] bridge_slave_0: left allmulticast mode [ 99.867039][ T49] bridge_slave_0: left promiscuous mode [ 99.873784][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.988650][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.998853][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.009011][ T49] bond0 (unregistering): Released all slaves [ 100.113193][ T49] hsr_slave_0: left promiscuous mode [ 100.118796][ T49] hsr_slave_1: left promiscuous mode [ 100.124851][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.132478][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.141104][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.148474][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.157815][ T49] veth1_macvtap: left promiscuous mode [ 100.163349][ T49] veth0_macvtap: left promiscuous mode [ 100.168930][ T49] veth1_vlan: left promiscuous mode [ 100.174272][ T49] veth0_vlan: left promiscuous mode [ 100.252418][ T49] team0 (unregistering): Port device team_slave_1 removed [ 100.265772][ T49] team0 (unregistering): Port device team_slave_0 removed [ 100.340408][ T51] Bluetooth: hci0: command tx timeout [ 100.412652][ T6376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.422989][ T6376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.434453][ T6376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.445245][ T6376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.524938][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.556213][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.567541][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.574801][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.673893][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.681018][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.788267][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.818369][ T6376] veth0_vlan: entered promiscuous mode [ 100.829286][ T6376] veth1_vlan: entered promiscuous mode [ 100.856304][ T6376] veth0_macvtap: entered promiscuous mode [ 100.864721][ T6376] veth1_macvtap: entered promiscuous mode [ 100.876448][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.888842][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.900573][ T2911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.911780][ T2911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.921530][ T2911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.932783][ T2911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.964299][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.973959][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.989923][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.997774][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.020752][ T6506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 101.041501][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 101.059741][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 101.087886][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 101.108694][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 101.127827][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 101.161770][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 101.177603][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 101.193560][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.225398][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 102.419684][ T51] Bluetooth: hci0: command tx timeout 2025/08/25 01:46:46 executed programs: 132 [ 104.499499][ T51] Bluetooth: hci0: command tx timeout [ 106.055176][ T7101] __nla_validate_parse: 287 callbacks suppressed [ 106.055194][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.079175][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'. [ 106.095790][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.316'. [ 106.123584][ T7107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 106.142572][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 106.161237][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 106.185340][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 106.203573][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 106.220643][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.322'. [ 106.244004][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 106.581074][ T51] Bluetooth: hci0: command tx timeout 2025/08/25 01:46:51 executed programs: 426 [ 111.063812][ T7684] __nla_validate_parse: 281 callbacks suppressed [ 111.063825][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'. [ 111.089980][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.606'. [ 111.107213][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'. [ 111.144324][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'. [ 111.163754][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 111.182257][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'. [ 111.203994][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.611'. [ 111.222378][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.612'. [ 111.240662][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.613'. [ 111.264124][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 111.340736][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.348246][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.355927][ T5181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.364376][ T5181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.372239][ T5181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.447086][ T7708] chnl_net:caif_netlink_parms(): no params data found [ 111.482437][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.489904][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.497016][ T7708] bridge_slave_0: entered allmulticast mode [ 111.504150][ T7708] bridge_slave_0: entered promiscuous mode [ 111.512472][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.519655][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.526785][ T7708] bridge_slave_1: entered allmulticast mode [ 111.533534][ T7708] bridge_slave_1: entered promiscuous mode [ 111.548394][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.566979][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.577848][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.598167][ T7708] team0: Port device team_slave_0 added [ 111.605120][ T7708] team0: Port device team_slave_1 added [ 111.619158][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.636649][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.643740][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.670351][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.683000][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.690008][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.716338][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.730223][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.755847][ T7708] hsr_slave_0: entered promiscuous mode [ 111.761865][ T7708] hsr_slave_1: entered promiscuous mode [ 111.798786][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.873259][ T12] bridge_slave_1: left allmulticast mode [ 111.878926][ T12] bridge_slave_1: left promiscuous mode [ 111.885433][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.893807][ T12] bridge_slave_0: left allmulticast mode [ 111.899588][ T12] bridge_slave_0: left promiscuous mode [ 111.905251][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.982382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.992294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.001739][ T12] bond0 (unregistering): Released all slaves [ 112.195833][ T12] hsr_slave_0: left promiscuous mode [ 112.201740][ T12] hsr_slave_1: left promiscuous mode [ 112.207489][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.215573][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.223567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.232760][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.243545][ T12] veth1_macvtap: left promiscuous mode [ 112.249078][ T12] veth0_macvtap: left promiscuous mode [ 112.255023][ T12] veth1_vlan: left promiscuous mode [ 112.260480][ T12] veth0_vlan: left promiscuous mode [ 112.356681][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.367271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.444495][ T7708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.454138][ T7708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.467178][ T7708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.478585][ T7708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.540350][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.558513][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.570637][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.577831][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.593079][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.600356][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.775659][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.812496][ T7708] veth0_vlan: entered promiscuous mode [ 112.822821][ T7708] veth1_vlan: entered promiscuous mode [ 112.839092][ T7708] veth0_macvtap: entered promiscuous mode [ 112.846928][ T7708] veth1_macvtap: entered promiscuous mode [ 112.858742][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.872348][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.883259][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.892270][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.902364][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.911343][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.942551][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.950837][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.966798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.975548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/25 01:46:56 executed programs: 618 [ 113.459631][ T5181] Bluetooth: hci1: command tx timeout [ 115.539572][ T5181] Bluetooth: hci1: command tx timeout [ 116.104207][ T8123] __nla_validate_parse: 185 callbacks suppressed [ 116.104221][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 116.126420][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'. [ 116.142005][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 116.184700][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.803'. [ 116.200784][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.804'. [ 116.216694][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.805'. [ 116.244572][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.806'. [ 116.261867][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.807'. [ 116.277329][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.808'. [ 116.303979][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.809'. [ 117.620289][ T5181] Bluetooth: hci1: command tx timeout 2025/08/25 01:47:01 executed programs: 912 [ 119.699452][ T5181] Bluetooth: hci1: command tx timeout [ 121.135037][ T8705] __nla_validate_parse: 281 callbacks suppressed [ 121.135050][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1091'. [ 121.159249][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1092'. [ 121.176872][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1093'. [ 121.204363][ T8711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 121.222099][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'. [ 121.240250][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'. [ 121.264643][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1097'. [ 121.282203][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1098'. [ 121.301072][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1099'. [ 121.323871][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1100'. [ 123.349537][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.359574][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.366891][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.377037][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.388102][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.462590][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 123.498996][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.506212][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.513922][ T8957] bridge_slave_0: entered allmulticast mode [ 123.520846][ T8957] bridge_slave_0: entered promiscuous mode [ 123.528120][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.535500][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.542930][ T8957] bridge_slave_1: entered allmulticast mode [ 123.549920][ T8957] bridge_slave_1: entered promiscuous mode [ 123.558355][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.581743][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.592534][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.612581][ T8957] team0: Port device team_slave_0 added [ 123.619855][ T8957] team0: Port device team_slave_1 added [ 123.627905][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.650301][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.657248][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.683372][ T8957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.694748][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.702302][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.728662][ T8957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.745181][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.769649][ T8957] hsr_slave_0: entered promiscuous mode [ 123.775733][ T8957] hsr_slave_1: entered promiscuous mode [ 123.781770][ T8957] debugfs: 'hsr0' already exists in 'hsr' [ 123.787691][ T8957] Cannot create hsr debugfs directory [ 123.807033][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.886118][ T49] bridge_slave_1: left allmulticast mode [ 123.893536][ T49] bridge_slave_1: left promiscuous mode [ 123.899208][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.907999][ T49] bridge_slave_0: left allmulticast mode [ 123.914268][ T49] bridge_slave_0: left promiscuous mode [ 123.920680][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.989733][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.000789][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.010528][ T49] bond0 (unregistering): Released all slaves [ 124.228629][ T49] hsr_slave_0: left promiscuous mode [ 124.234512][ T49] hsr_slave_1: left promiscuous mode [ 124.240407][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.247800][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.257296][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.266374][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.277904][ T49] veth1_macvtap: left promiscuous mode [ 124.283556][ T49] veth0_macvtap: left promiscuous mode [ 124.289257][ T49] veth1_vlan: left promiscuous mode [ 124.294646][ T49] veth0_vlan: left promiscuous mode [ 124.380662][ T49] team0 (unregistering): Port device team_slave_1 removed [ 124.391769][ T49] team0 (unregistering): Port device team_slave_0 removed [ 124.475247][ T8957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.488453][ T8957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.498915][ T8957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.510348][ T8957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.584567][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.606608][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.616836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.623977][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.640767][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.648136][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.669049][ T49] ================================================================== [ 124.677150][ T49] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 124.685249][ T49] Write of size 8 at addr ffff88805adca228 by task kworker/u8:3/49 [ 124.693234][ T49] [ 124.695578][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 124.695662][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.695672][ T49] Workqueue: netns cleanup_net [ 124.695706][ T49] Call Trace: [ 124.695713][ T49] [ 124.695720][ T49] dump_stack_lvl+0x189/0x250 [ 124.695742][ T49] ? __virt_addr_valid+0x1c8/0x5c0 [ 124.695766][ T49] ? rcu_is_watching+0x15/0xb0 [ 124.695783][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.695801][ T49] ? rcu_is_watching+0x15/0xb0 [ 124.695817][ T49] ? lock_release+0x4b/0x3e0 [ 124.695840][ T49] ? __virt_addr_valid+0x1c8/0x5c0 [ 124.695860][ T49] ? __virt_addr_valid+0x4a5/0x5c0 [ 124.695881][ T49] print_report+0xca/0x240 [ 124.695898][ T49] ? __xfrm_state_delete+0x666/0xca0 [ 124.695914][ T49] kasan_report+0x118/0x150 [ 124.695938][ T49] ? __xfrm_state_delete+0x666/0xca0 [ 124.695957][ T49] __xfrm_state_delete+0x666/0xca0 [ 124.695977][ T49] xfrm_state_flush+0x45f/0x770 [ 124.695998][ T49] xfrm6_tunnel_net_exit+0x3c/0x100 [ 124.696016][ T49] ops_undo_list+0x497/0x990 [ 124.696034][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 124.696051][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 124.696072][ T49] cleanup_net+0x4c5/0x800 [ 124.696088][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 124.696103][ T49] ? rcu_is_watching+0x15/0xb0 [ 124.696119][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 124.696135][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 124.696150][ T49] process_scheduled_works+0xae1/0x17b0 [ 124.696181][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 124.696204][ T49] worker_thread+0x8a0/0xda0 [ 124.696230][ T49] kthread+0x70e/0x8a0 [ 124.696250][ T49] ? __pfx_worker_thread+0x10/0x10 [ 124.696266][ T49] ? __pfx_kthread+0x10/0x10 [ 124.696283][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.696319][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.696340][ T49] ? __pfx_kthread+0x10/0x10 [ 124.696358][ T49] ret_from_fork+0x3f9/0x770 [ 124.696376][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 124.696395][ T49] ? __switch_to_asm+0x39/0x70 [ 124.696414][ T49] ? __switch_to_asm+0x33/0x70 [ 124.696433][ T49] ? __pfx_kthread+0x10/0x10 [ 124.696450][ T49] ret_from_fork_asm+0x1a/0x30 [ 124.696476][ T49] [ 124.696482][ T49] [ 124.700391][ T8957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.705758][ T49] Allocated by task 8781: [ 124.934028][ T49] kasan_save_track+0x3e/0x80 [ 124.938716][ T49] __kasan_slab_alloc+0x6c/0x80 [ 124.943561][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 124.949091][ T49] xfrm_state_alloc+0x24/0x2f0 [ 124.953846][ T49] __find_acq_core+0x8a7/0x1c00 [ 124.958679][ T49] xfrm_find_acq+0x78/0xa0 [ 124.963079][ T49] xfrm_alloc_userspi+0x6b3/0xc90 [ 124.968090][ T49] xfrm_user_rcv_msg+0x7a3/0xab0 [ 124.973023][ T49] netlink_rcv_skb+0x205/0x470 [ 124.977794][ T49] xfrm_netlink_rcv+0x79/0x90 [ 124.982454][ T49] netlink_unicast+0x82c/0x9e0 [ 124.987198][ T49] netlink_sendmsg+0x805/0xb30 [ 124.991941][ T49] __sock_sendmsg+0x21c/0x270 [ 124.996602][ T49] ____sys_sendmsg+0x505/0x830 [ 125.001369][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 125.006111][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 125.011026][ T49] do_syscall_64+0xfa/0x3b0 [ 125.015506][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.021386][ T49] [ 125.023696][ T49] Freed by task 5886: [ 125.027653][ T49] kasan_save_track+0x3e/0x80 [ 125.032337][ T49] kasan_save_free_info+0x46/0x50 [ 125.037367][ T49] __kasan_slab_free+0x5b/0x80 [ 125.042397][ T49] kmem_cache_free+0x18f/0x400 [ 125.047144][ T49] xfrm_state_gc_task+0x549/0x6d0 [ 125.052151][ T49] process_scheduled_works+0xae1/0x17b0 [ 125.057675][ T49] worker_thread+0x8a0/0xda0 [ 125.062337][ T49] kthread+0x70e/0x8a0 [ 125.066396][ T49] ret_from_fork+0x3f9/0x770 [ 125.070964][ T49] ret_from_fork_asm+0x1a/0x30 [ 125.075715][ T49] [ 125.078019][ T49] The buggy address belongs to the object at ffff88805adca200 [ 125.078019][ T49] which belongs to the cache xfrm_state of size 928 [ 125.091965][ T49] The buggy address is located 40 bytes inside of [ 125.091965][ T49] freed 928-byte region [ffff88805adca200, ffff88805adca5a0) [ 125.105654][ T49] [ 125.107964][ T49] The buggy address belongs to the physical page: [ 125.114370][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5adc8 [ 125.123379][ T49] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.131859][ T49] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 125.139738][ T49] page_type: f5(slab) [ 125.143704][ T49] raw: 00fff00000000040 ffff8880206d5b40 ffffea0000a56400 dead000000000003 [ 125.152273][ T49] raw: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000 [ 125.160837][ T49] head: 00fff00000000040 ffff8880206d5b40 ffffea0000a56400 dead000000000003 [ 125.169498][ T49] head: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000 [ 125.178150][ T49] head: 00fff00000000002 ffffea00016b7201 00000000ffffffff 00000000ffffffff [ 125.186975][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 125.195633][ T49] page dumped because: kasan: bad access detected [ 125.202033][ T49] page_owner tracks the page as allocated [ 125.207748][ T49] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7652, tgid 7651 (syz.0.589), ts 110782357540, free_ts 110737724351 [ 125.226923][ T49] post_alloc_hook+0x240/0x2a0 [ 125.231703][ T49] get_page_from_freelist+0x21e4/0x22c0 [ 125.237245][ T49] __alloc_frozen_pages_noprof+0x181/0x370 [ 125.243033][ T49] alloc_pages_mpol+0x232/0x4a0 [ 125.247874][ T49] allocate_slab+0x8a/0x370 [ 125.252358][ T49] ___slab_alloc+0xbeb/0x1410 [ 125.257020][ T49] kmem_cache_alloc_noprof+0x283/0x3c0 [ 125.262461][ T49] xfrm_state_alloc+0x24/0x2f0 [ 125.267212][ T49] __find_acq_core+0x8a7/0x1c00 [ 125.272042][ T49] xfrm_find_acq+0x78/0xa0 [ 125.276443][ T49] xfrm_alloc_userspi+0x6b3/0xc90 [ 125.281469][ T49] xfrm_user_rcv_msg+0x7a3/0xab0 [ 125.286388][ T49] netlink_rcv_skb+0x205/0x470 [ 125.291142][ T49] xfrm_netlink_rcv+0x79/0x90 [ 125.295895][ T49] netlink_unicast+0x82c/0x9e0 [ 125.300641][ T49] netlink_sendmsg+0x805/0xb30 [ 125.305393][ T49] page last free pid 6376 tgid 6376 stack trace: [ 125.311696][ T49] __free_frozen_pages+0xbc4/0xd30 [ 125.316792][ T49] __put_partials+0x156/0x1a0 [ 125.321446][ T49] put_cpu_partial+0x17c/0x250 [ 125.326188][ T49] __slab_free+0x2d5/0x3c0 [ 125.330583][ T49] qlist_free_all+0x97/0x140 [ 125.335162][ T49] kasan_quarantine_reduce+0x148/0x160 [ 125.340607][ T49] __kasan_slab_alloc+0x22/0x80 [ 125.345439][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 125.350898][ T49] getname_flags+0xb8/0x540 [ 125.355380][ T49] __x64_sys_unlink+0x3a/0x50 [ 125.360041][ T49] do_syscall_64+0xfa/0x3b0 [ 125.364522][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.370403][ T49] [ 125.372703][ T49] Memory state around the buggy address: [ 125.378309][ T49] ffff88805adca100: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 125.386374][ T49] ffff88805adca180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.394414][ T49] >ffff88805adca200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.402460][ T49] ^ [ 125.407945][ T49] ffff88805adca280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.416018][ T49] ffff88805adca300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.424058][ T49] ================================================================== [ 125.432472][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.439671][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 125.448956][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.459017][ T49] Workqueue: netns cleanup_net [ 125.463923][ T49] Call Trace: [ 125.467206][ T49] [ 125.470144][ T49] dump_stack_lvl+0x99/0x250 [ 125.474744][ T49] ? __asan_memcpy+0x40/0x70 [ 125.479346][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.484552][ T49] ? __pfx__printk+0x10/0x10 [ 125.489147][ T49] vpanic+0x281/0x750 [ 125.493133][ T49] ? __pfx_print_hex_dump+0x10/0x10 [ 125.498353][ T49] ? __pfx_vpanic+0x10/0x10 [ 125.502850][ T49] ? rcu_is_watching+0x15/0xb0 [ 125.507603][ T49] panic+0xb9/0xc0 [ 125.511313][ T49] ? __pfx_panic+0x10/0x10 [ 125.515719][ T49] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 125.521605][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.527926][ T49] ? __xfrm_state_delete+0x666/0xca0 [ 125.533206][ T49] check_panic_on_warn+0x89/0xb0 [ 125.538149][ T49] ? __xfrm_state_delete+0x666/0xca0 [ 125.543422][ T49] end_report+0x78/0x160 [ 125.547657][ T49] kasan_report+0x129/0x150 [ 125.552148][ T49] ? __xfrm_state_delete+0x666/0xca0 [ 125.557427][ T49] __xfrm_state_delete+0x666/0xca0 [ 125.562527][ T49] xfrm_state_flush+0x45f/0x770 [ 125.567362][ T49] xfrm6_tunnel_net_exit+0x3c/0x100 [ 125.572543][ T49] ops_undo_list+0x497/0x990 [ 125.577113][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 125.582214][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 125.587457][ T49] cleanup_net+0x4c5/0x800 [ 125.591857][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 125.596823][ T49] ? rcu_is_watching+0x15/0xb0 [ 125.601590][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 125.607301][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 125.613099][ T49] process_scheduled_works+0xae1/0x17b0 [ 125.618820][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.624810][ T49] worker_thread+0x8a0/0xda0 [ 125.629396][ T49] kthread+0x70e/0x8a0 [ 125.633457][ T49] ? __pfx_worker_thread+0x10/0x10 [ 125.638559][ T49] ? __pfx_kthread+0x10/0x10 [ 125.643132][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.648329][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.653523][ T49] ? __pfx_kthread+0x10/0x10 [ 125.658097][ T49] ret_from_fork+0x3f9/0x770 [ 125.662670][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 125.667765][ T49] ? __switch_to_asm+0x39/0x70 [ 125.672512][ T49] ? __switch_to_asm+0x33/0x70 [ 125.677309][ T49] ? __pfx_kthread+0x10/0x10 [ 125.681909][ T49] ret_from_fork_asm+0x1a/0x30 [ 125.686685][ T49] [ 125.689958][ T49] Kernel Offset: disabled [ 125.694269][ T49] Rebooting in 86400 seconds..