Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. 2025/08/26 03:52:13 parsed 1 programs [ 92.234274][ T6188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.970509][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 95.018698][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.025843][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.033363][ T6228] bridge_slave_0: entered allmulticast mode [ 95.041041][ T6228] bridge_slave_0: entered promiscuous mode [ 95.048713][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.055882][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.063271][ T6228] bridge_slave_1: entered allmulticast mode [ 95.069921][ T6228] bridge_slave_1: entered promiscuous mode [ 95.088020][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.098633][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.118180][ T6228] team0: Port device team_slave_0 added [ 95.124955][ T6228] team0: Port device team_slave_1 added [ 95.158819][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.165801][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.192237][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.207988][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.214973][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.240900][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.268180][ T6228] hsr_slave_0: entered promiscuous mode [ 95.274439][ T6228] hsr_slave_1: entered promiscuous mode [ 95.572937][ T6228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.582687][ T6228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.594207][ T6228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.604462][ T6228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.672248][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.689855][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.702021][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.709251][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.732767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.739933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.893697][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.927941][ T6228] veth0_vlan: entered promiscuous mode [ 95.942318][ T6228] veth1_vlan: entered promiscuous mode [ 95.968286][ T6228] veth0_macvtap: entered promiscuous mode [ 95.977014][ T6228] veth1_macvtap: entered promiscuous mode [ 95.996325][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.010435][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.023137][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043170][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.058595][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.078171][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.155197][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.223194][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.282590][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.332770][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.740525][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.752354][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.774322][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.784825][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.366381][ T5179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.373974][ T5179] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.385678][ T5179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.393368][ T5179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.401406][ T5179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/26 03:52:22 executed programs: 0 [ 98.343296][ T5179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.356199][ T5179] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.366018][ T5179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.374258][ T5179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.382965][ T5179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.519132][ T6415] chnl_net:caif_netlink_parms(): no params data found [ 98.581902][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.591673][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.599211][ T6415] bridge_slave_0: entered allmulticast mode [ 98.606062][ T6415] bridge_slave_0: entered promiscuous mode [ 98.614524][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.622164][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.629690][ T6415] bridge_slave_1: entered allmulticast mode [ 98.636611][ T6415] bridge_slave_1: entered promiscuous mode [ 98.663294][ T6415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.675170][ T6415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.704831][ T6415] team0: Port device team_slave_0 added [ 98.713002][ T6415] team0: Port device team_slave_1 added [ 98.742138][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.749169][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.778065][ T6415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.790336][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.797541][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.823683][ T6415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.860414][ T6415] hsr_slave_0: entered promiscuous mode [ 98.866679][ T6415] hsr_slave_1: entered promiscuous mode [ 98.873864][ T6415] debugfs: 'hsr0' already exists in 'hsr' [ 98.880430][ T6415] Cannot create hsr debugfs directory [ 99.174323][ T13] bridge_slave_1: left allmulticast mode [ 99.182761][ T13] bridge_slave_1: left promiscuous mode [ 99.190574][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.201007][ T13] bridge_slave_0: left allmulticast mode [ 99.206664][ T13] bridge_slave_0: left promiscuous mode [ 99.212822][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.324909][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.339357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.351705][ T13] bond0 (unregistering): Released all slaves [ 99.491248][ T13] hsr_slave_0: left promiscuous mode [ 99.497026][ T13] hsr_slave_1: left promiscuous mode [ 99.503322][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.511323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.519229][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.526620][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.543229][ T13] veth1_macvtap: left promiscuous mode [ 99.548852][ T13] veth0_macvtap: left promiscuous mode [ 99.554513][ T13] veth1_vlan: left promiscuous mode [ 99.561104][ T13] veth0_vlan: left promiscuous mode [ 99.683243][ T13] team0 (unregistering): Port device team_slave_1 removed [ 99.696507][ T13] team0 (unregistering): Port device team_slave_0 removed [ 99.859309][ T6415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.869451][ T6415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.879874][ T6415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.890320][ T6415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.956405][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.987081][ T6415] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.004554][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.011695][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.034453][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.041601][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.274270][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.309647][ T6415] veth0_vlan: entered promiscuous mode [ 100.318221][ T6415] veth1_vlan: entered promiscuous mode [ 100.340634][ T6415] veth0_macvtap: entered promiscuous mode [ 100.363334][ T6415] veth1_macvtap: entered promiscuous mode [ 100.379790][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.391871][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.403460][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.412514][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.421930][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.430817][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.457480][ T5179] Bluetooth: hci0: command tx timeout [ 100.481863][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.494224][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.519446][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.527852][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.550615][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 100.571391][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18'. [ 100.592909][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.623303][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 100.641691][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.663580][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22'. [ 100.684729][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 100.709854][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 100.736797][ T6526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'. [ 100.755288][ T6528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 102.537278][ T5179] Bluetooth: hci0: command tx timeout 2025/08/26 03:52:27 executed programs: 158 [ 104.617419][ T5179] Bluetooth: hci0: command tx timeout [ 105.564303][ T7086] __nla_validate_parse: 278 callbacks suppressed [ 105.564320][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'. [ 105.600717][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 105.621928][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.307'. [ 105.645633][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.672107][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'. [ 105.692101][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 105.711342][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.311'. [ 105.734145][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 105.755686][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 105.774484][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.697514][ T5179] Bluetooth: hci0: command tx timeout 2025/08/26 03:52:32 executed programs: 445 [ 110.577063][ T7648] __nla_validate_parse: 271 callbacks suppressed [ 110.577080][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.586'. [ 110.612576][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.587'. [ 110.633246][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 110.655197][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.589'. [ 110.678214][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 110.701239][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.591'. [ 110.733042][ T7660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.592'. [ 110.754241][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 110.774210][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.594'. [ 110.798449][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 111.210151][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.218064][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.225341][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.234572][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.242179][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.314185][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 111.349161][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.356224][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.363573][ T7710] bridge_slave_0: entered allmulticast mode [ 111.370085][ T7710] bridge_slave_0: entered promiscuous mode [ 111.377020][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.384765][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.391965][ T7710] bridge_slave_1: entered allmulticast mode [ 111.398764][ T7710] bridge_slave_1: entered promiscuous mode [ 111.419360][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.432245][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.442856][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.463007][ T7710] team0: Port device team_slave_0 added [ 111.470439][ T7710] team0: Port device team_slave_1 added [ 111.478823][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.500864][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.508379][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.534382][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.546129][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.553891][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.579807][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.592899][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.618793][ T7710] hsr_slave_0: entered promiscuous mode [ 111.624774][ T7710] hsr_slave_1: entered promiscuous mode [ 111.655173][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.732831][ T1107] bridge_slave_1: left allmulticast mode [ 111.740242][ T1107] bridge_slave_1: left promiscuous mode [ 111.746346][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.756801][ T1107] bridge_slave_0: left allmulticast mode [ 111.762628][ T1107] bridge_slave_0: left promiscuous mode [ 111.769217][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.860178][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.870501][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.879910][ T1107] bond0 (unregistering): Released all slaves [ 112.088925][ T1107] hsr_slave_0: left promiscuous mode [ 112.094722][ T1107] hsr_slave_1: left promiscuous mode [ 112.103087][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.113285][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.121319][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.130131][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.140727][ T1107] veth1_macvtap: left promiscuous mode [ 112.146254][ T1107] veth0_macvtap: left promiscuous mode [ 112.152653][ T1107] veth1_vlan: left promiscuous mode [ 112.158179][ T1107] veth0_vlan: left promiscuous mode [ 112.237007][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 112.251747][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 112.347489][ T7710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.357520][ T7710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.366857][ T7710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.381664][ T7710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.452828][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.473448][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.490338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.497490][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.519529][ T1107] ------------[ cut here ]------------ [ 112.525109][ T1107] WARNING: CPU: 1 PID: 1107 at net/xfrm/xfrm_state.c:801 __xfrm_state_destroy+0x15f/0x190 [ 112.528365][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.535158][ T1107] Modules linked in: [ 112.542091][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.545963][ T1107] CPU: 1 UID: 0 PID: 1107 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 112.562751][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.572852][ T1107] Workqueue: netns cleanup_net [ 112.577656][ T1107] RIP: 0010:__xfrm_state_destroy+0x15f/0x190 [ 112.583641][ T1107] Code: 48 c7 c2 00 34 63 8f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 25 89 69 f7 e8 70 33 9f f7 90 0f 0b 90 e9 00 ff ff ff e8 62 33 9f f7 90 <0f> 0b 90 e9 20 ff ff ff 44 89 f1 80 e1 07 38 c1 0f 8c c6 fe ff ff [ 112.603334][ T1107] RSP: 0018:ffffc90003aaf7f0 EFLAGS: 00010293 [ 112.609455][ T1107] RAX: ffffffff8a2077ce RBX: ffff88806bb13308 RCX: ffff888026b2bc00 [ 112.617554][ T1107] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 112.625540][ T1107] RBP: 0000000000000005 R08: ffff88806bb1336b R09: 1ffff1100d76266d [ 112.633568][ T1107] R10: dffffc0000000000 R11: ffffed100d76266e R12: dffffc0000000000 [ 112.641603][ T1107] R13: 1ffff1100d762662 R14: ffff88806bb13310 R15: dffffc0000000000 [ 112.649621][ T1107] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 112.658591][ T1107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.665186][ T1107] CR2: 00007f3a61070008 CR3: 00000000777e6000 CR4: 00000000003526f0 [ 112.673231][ T1107] Call Trace: [ 112.676516][ T1107] [ 112.679517][ T1107] xfrm_state_flush+0x4ab/0x630 [ 112.684385][ T1107] xfrm6_tunnel_net_exit+0x3c/0x100 [ 112.689641][ T1107] ops_undo_list+0x49a/0x990 [ 112.694243][ T1107] ? __pfx_ops_undo_list+0x10/0x10 [ 112.699433][ T1107] ? do_raw_spin_unlock+0x122/0x240 [ 112.704644][ T1107] cleanup_net+0x4c5/0x800 [ 112.709113][ T1107] ? __pfx_cleanup_net+0x10/0x10 [ 112.714052][ T1107] ? rcu_is_watching+0x15/0xb0 [ 112.718888][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 112.724614][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 112.730392][ T1107] process_scheduled_works+0xae1/0x17b0 [ 112.735493][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.736051][ T1107] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.748864][ T1107] worker_thread+0x8a0/0xda0 [ 112.753472][ T1107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.759889][ T1107] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 112.765800][ T1107] ? __kthread_parkme+0x7b/0x200 [ 112.769579][ T7710] veth0_vlan: entered promiscuous mode [ 112.770799][ T1107] kthread+0x70e/0x8a0 [ 112.780284][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 112.780552][ T7710] veth1_vlan: entered promiscuous mode [ 112.785399][ T1107] ? __pfx_kthread+0x10/0x10 [ 112.795448][ T1107] ? rcu_is_watching+0x15/0xb0 [ 112.800268][ T1107] ? __pfx_kthread+0x10/0x10 [ 112.804872][ T1107] ret_from_fork+0x3f9/0x770 [ 112.809522][ T1107] ? __pfx_ret_from_fork+0x10/0x10 [ 112.813073][ T7710] veth0_macvtap: entered promiscuous mode [ 112.814635][ T1107] ? __switch_to_asm+0x39/0x70 [ 112.825256][ T1107] ? __switch_to_asm+0x33/0x70 [ 112.830067][ T1107] ? __pfx_kthread+0x10/0x10 [ 112.833412][ T7710] veth1_macvtap: entered promiscuous mode [ 112.834662][ T1107] ret_from_fork_asm+0x1a/0x30 [ 112.845493][ T1107] [ 112.848565][ T1107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.855847][ T1107] CPU: 1 UID: 0 PID: 1107 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 112.865317][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.875378][ T1107] Workqueue: netns cleanup_net [ 112.880145][ T1107] Call Trace: [ 112.883408][ T1107] [ 112.886321][ T1107] dump_stack_lvl+0x99/0x250 [ 112.890903][ T1107] ? __asan_memcpy+0x40/0x70 [ 112.895493][ T1107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.900704][ T1107] ? __pfx__printk+0x10/0x10 [ 112.905305][ T1107] vpanic+0x281/0x750 [ 112.909277][ T1107] ? __pfx__printk+0x10/0x10 [ 112.913865][ T1107] ? __pfx_vpanic+0x10/0x10 [ 112.918382][ T1107] ? is_bpf_text_address+0x292/0x2b0 [ 112.923655][ T1107] panic+0xb9/0xc0 [ 112.927388][ T1107] ? __pfx_panic+0x10/0x10 [ 112.931799][ T1107] __warn+0x31b/0x4b0 [ 112.935762][ T1107] ? __xfrm_state_destroy+0x15f/0x190 [ 112.941201][ T1107] ? __xfrm_state_destroy+0x15f/0x190 [ 112.946637][ T1107] report_bug+0x2be/0x4f0 [ 112.951049][ T1107] ? __xfrm_state_destroy+0x15f/0x190 [ 112.956402][ T1107] ? __xfrm_state_destroy+0x15f/0x190 [ 112.961766][ T1107] ? __xfrm_state_destroy+0x161/0x190 [ 112.967134][ T1107] handle_bug+0x84/0x160 [ 112.971370][ T1107] exc_invalid_op+0x1a/0x50 [ 112.975868][ T1107] asm_exc_invalid_op+0x1a/0x20 [ 112.980708][ T1107] RIP: 0010:__xfrm_state_destroy+0x15f/0x190 [ 112.986674][ T1107] Code: 48 c7 c2 00 34 63 8f 5b 41 5c 41 5d 41 5e 41 5f 5d e9 25 89 69 f7 e8 70 33 9f f7 90 0f 0b 90 e9 00 ff ff ff e8 62 33 9f f7 90 <0f> 0b 90 e9 20 ff ff ff 44 89 f1 80 e1 07 38 c1 0f 8c c6 fe ff ff [ 113.006260][ T1107] RSP: 0018:ffffc90003aaf7f0 EFLAGS: 00010293 [ 113.012313][ T1107] RAX: ffffffff8a2077ce RBX: ffff88806bb13308 RCX: ffff888026b2bc00 [ 113.020278][ T1107] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 113.028230][ T1107] RBP: 0000000000000005 R08: ffff88806bb1336b R09: 1ffff1100d76266d [ 113.036181][ T1107] R10: dffffc0000000000 R11: ffffed100d76266e R12: dffffc0000000000 [ 113.044132][ T1107] R13: 1ffff1100d762662 R14: ffff88806bb13310 R15: dffffc0000000000 [ 113.052091][ T1107] ? __xfrm_state_destroy+0x15e/0x190 [ 113.057455][ T1107] xfrm_state_flush+0x4ab/0x630 [ 113.062293][ T1107] xfrm6_tunnel_net_exit+0x3c/0x100 [ 113.067479][ T1107] ops_undo_list+0x49a/0x990 [ 113.072052][ T1107] ? __pfx_ops_undo_list+0x10/0x10 [ 113.077148][ T1107] ? do_raw_spin_unlock+0x122/0x240 [ 113.082336][ T1107] cleanup_net+0x4c5/0x800 [ 113.086753][ T1107] ? __pfx_cleanup_net+0x10/0x10 [ 113.091694][ T1107] ? rcu_is_watching+0x15/0xb0 [ 113.096530][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 113.102238][ T1107] ? process_scheduled_works+0x9ef/0x17b0 [ 113.107995][ T1107] process_scheduled_works+0xae1/0x17b0 [ 113.113534][ T1107] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.119503][ T1107] worker_thread+0x8a0/0xda0 [ 113.124074][ T1107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 113.130389][ T1107] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 113.136266][ T1107] ? __kthread_parkme+0x7b/0x200 [ 113.141187][ T1107] kthread+0x70e/0x8a0 [ 113.145242][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 113.150338][ T1107] ? __pfx_kthread+0x10/0x10 [ 113.154913][ T1107] ? rcu_is_watching+0x15/0xb0 [ 113.159658][ T1107] ? __pfx_kthread+0x10/0x10 [ 113.164232][ T1107] ret_from_fork+0x3f9/0x770 [ 113.168805][ T1107] ? __pfx_ret_from_fork+0x10/0x10 [ 113.173900][ T1107] ? __switch_to_asm+0x39/0x70 [ 113.178655][ T1107] ? __switch_to_asm+0x33/0x70 [ 113.183409][ T1107] ? __pfx_kthread+0x10/0x10 [ 113.187991][ T1107] ret_from_fork_asm+0x1a/0x30 [ 113.192746][ T1107] [ 113.195877][ T1107] Kernel Offset: disabled [ 113.200180][ T1107] Rebooting in 86400 seconds..