Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2025/11/10 20:09:33 parsed 1 programs [ 82.602501][ T5833] cgroup: Unknown subsys name 'net' [ 82.710917][ T5833] cgroup: Unknown subsys name 'cpuset' [ 82.720210][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.168536][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.747482][ T986] cfg80211: failed to load regulatory.db [ 86.905572][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.186118][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 90.275280][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.282943][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.292054][ T5899] bridge_slave_0: entered allmulticast mode [ 90.299421][ T5899] bridge_slave_0: entered promiscuous mode [ 90.308149][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.315396][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.323028][ T5899] bridge_slave_1: entered allmulticast mode [ 90.330474][ T5899] bridge_slave_1: entered promiscuous mode [ 90.366841][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.380391][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.416582][ T5899] team0: Port device team_slave_0 added [ 90.424441][ T5899] team0: Port device team_slave_1 added [ 90.448380][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.455358][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.482484][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.494995][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.502033][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.528499][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.565155][ T5899] hsr_slave_0: entered promiscuous mode [ 90.572147][ T5899] hsr_slave_1: entered promiscuous mode [ 90.689942][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.701708][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.711829][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.721363][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.748212][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755500][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.763705][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.770819][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.820592][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.837274][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.846277][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.863833][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.878016][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.885140][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.900254][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.907417][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.053478][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.101400][ T5899] veth0_vlan: entered promiscuous mode [ 91.113761][ T5899] veth1_vlan: entered promiscuous mode [ 91.142741][ T5899] veth0_macvtap: entered promiscuous mode [ 91.152091][ T5899] veth1_macvtap: entered promiscuous mode [ 91.172143][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.186048][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.201769][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.211716][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221748][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.232048][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.394824][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.453167][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.540914][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.640026][ T5927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.642182][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.649344][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.666363][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.676759][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.686010][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.944730][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.953456][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.980903][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989178][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/10 20:09:45 executed programs: 0 [ 92.501889][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.510399][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.519962][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.528899][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.537383][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.675578][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 92.746080][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.753739][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.761583][ T5942] bridge_slave_0: entered allmulticast mode [ 92.769421][ T5942] bridge_slave_0: entered promiscuous mode [ 92.779287][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.787934][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.795543][ T5942] bridge_slave_1: entered allmulticast mode [ 92.803559][ T5942] bridge_slave_1: entered promiscuous mode [ 92.840216][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.852794][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.886508][ T5942] team0: Port device team_slave_0 added [ 92.895608][ T5942] team0: Port device team_slave_1 added [ 92.930238][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.937431][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964434][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.978519][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.985511][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.011960][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.056722][ T5942] hsr_slave_0: entered promiscuous mode [ 93.063823][ T5942] hsr_slave_1: entered promiscuous mode [ 93.070482][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 93.076273][ T5942] Cannot create hsr debugfs directory [ 94.505496][ T1151] bridge_slave_1: left allmulticast mode [ 94.515410][ T1151] bridge_slave_1: left promiscuous mode [ 94.526029][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.544924][ T1151] bridge_slave_0: left allmulticast mode [ 94.553884][ T1151] bridge_slave_0: left promiscuous mode [ 94.563496][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.572778][ T5927] Bluetooth: hci0: command tx timeout [ 94.998591][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.015179][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.025171][ T1151] bond0 (unregistering): Released all slaves [ 95.154412][ T1151] hsr_slave_0: left promiscuous mode [ 95.163564][ T1151] hsr_slave_1: left promiscuous mode [ 95.170329][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.178949][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.187580][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.195576][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.217175][ T1151] veth1_macvtap: left promiscuous mode [ 95.223206][ T1151] veth0_macvtap: left promiscuous mode [ 95.229851][ T1151] veth1_vlan: left promiscuous mode [ 95.235533][ T1151] veth0_vlan: left promiscuous mode [ 95.742004][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 95.767015][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 96.296218][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.322965][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.347092][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.367726][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.648326][ T5927] Bluetooth: hci0: command tx timeout [ 96.775945][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.869436][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.892663][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.900174][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.923158][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.930671][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.325679][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.393573][ T5942] veth0_vlan: entered promiscuous mode [ 97.415191][ T5942] veth1_vlan: entered promiscuous mode [ 97.444302][ T5942] veth0_macvtap: entered promiscuous mode [ 97.452964][ T5942] veth1_macvtap: entered promiscuous mode [ 97.473315][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.487102][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.503594][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513657][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.523471][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.535310][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.590028][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.601532][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.632300][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.641183][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.708819][ C1] ================================================================== [ 97.717215][ C1] BUG: KASAN: double-free in inet_sock_destruct+0x538/0x740 [ 97.724515][ C1] Free of addr ffff88801f3430c0 by task ksoftirqd/1/23 [ 97.731361][ C1] [ 97.733688][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 97.733705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.733714][ C1] Call Trace: [ 97.733721][ C1] [ 97.733728][ C1] dump_stack_lvl+0x189/0x250 [ 97.733750][ C1] ? rcu_is_watching+0x15/0xb0 [ 97.733766][ C1] ? __kasan_check_byte+0x12/0x40 [ 97.733780][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.733798][ C1] ? rcu_is_watching+0x15/0xb0 [ 97.733813][ C1] ? lock_release+0x4b/0x3e0 [ 97.733828][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 97.733847][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 97.733865][ C1] print_report+0xca/0x240 [ 97.733888][ C1] ? inet_sock_destruct+0x538/0x740 [ 97.733901][ C1] kasan_report_invalid_free+0xea/0x110 [ 97.733915][ C1] ? inet_sock_destruct+0x538/0x740 [ 97.733929][ C1] ? inet_sock_destruct+0x538/0x740 [ 97.733943][ C1] check_slab_allocation+0xe1/0x130 [ 97.733963][ C1] ? inet_sock_destruct+0x538/0x740 [ 97.733976][ C1] kfree+0x148/0x6d0 [ 97.733995][ C1] inet_sock_destruct+0x538/0x740 [ 97.734009][ C1] ? inet6_cleanup_sock+0x18b/0x220 [ 97.734024][ C1] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 97.734040][ C1] __sk_destruct+0x89/0x660 [ 97.734056][ C1] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 97.734071][ C1] ? rcu_core+0xc37/0x1770 [ 97.734085][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 97.734101][ C1] rcu_core+0xcab/0x1770 [ 97.734114][ C1] ? __lock_acquire+0xab9/0xd20 [ 97.734132][ C1] ? __pfx_rcu_core+0x10/0x10 [ 97.734147][ C1] ? rcu_qs+0xc4/0x170 [ 97.734160][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 97.734174][ C1] ? sched_clock_cpu+0x74/0x430 [ 97.734191][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 97.734205][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 97.734223][ C1] handle_softirqs+0x286/0x870 [ 97.734239][ C1] ? run_ksoftirqd+0x9b/0x100 [ 97.734257][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.734272][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 97.734288][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 97.734302][ C1] run_ksoftirqd+0x9b/0x100 [ 97.734318][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 97.734337][ C1] smpboot_thread_fn+0x542/0xa60 [ 97.734352][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 97.734369][ C1] kthread+0x711/0x8a0 [ 97.734388][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 97.734403][ C1] ? __pfx_kthread+0x10/0x10 [ 97.734421][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.734440][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.734458][ C1] ? __pfx_kthread+0x10/0x10 [ 97.734476][ C1] ret_from_fork+0x4bc/0x870 [ 97.734491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 97.734507][ C1] ? __switch_to_asm+0x39/0x70 [ 97.734519][ C1] ? __switch_to_asm+0x33/0x70 [ 97.734530][ C1] ? __pfx_kthread+0x10/0x10 [ 97.734547][ C1] ret_from_fork_asm+0x1a/0x30 [ 97.734565][ C1] [ 97.734570][ C1] [ 98.023066][ C1] Allocated by task 6015: [ 98.027392][ C1] kasan_save_track+0x3e/0x80 [ 98.032077][ C1] __kasan_kmalloc+0x93/0xb0 [ 98.036671][ C1] __kmalloc_noprof+0x411/0x7f0 [ 98.041524][ C1] ip_options_get+0x51/0x4c0 [ 98.046125][ C1] do_ip_setsockopt+0x1d9b/0x2d00 [ 98.051148][ C1] ip_setsockopt+0x66/0x110 [ 98.055648][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 98.060670][ C1] __x64_sys_setsockopt+0x13f/0x1b0 [ 98.065868][ C1] do_syscall_64+0xfa/0xfa0 [ 98.070376][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.076273][ C1] [ 98.078769][ C1] Freed by task 23: [ 98.082575][ C1] kasan_save_track+0x3e/0x80 [ 98.087341][ C1] __kasan_save_free_info+0x46/0x50 [ 98.092539][ C1] __kasan_slab_free+0x5c/0x80 [ 98.097678][ C1] kfree+0x19a/0x6d0 [ 98.101576][ C1] inet_sock_destruct+0x538/0x740 [ 98.106729][ C1] __sk_destruct+0x89/0x660 [ 98.111239][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 98.116814][ C1] rcu_core+0xcab/0x1770 [ 98.121059][ C1] handle_softirqs+0x286/0x870 [ 98.125945][ C1] run_ksoftirqd+0x9b/0x100 [ 98.130448][ C1] smpboot_thread_fn+0x542/0xa60 [ 98.135475][ C1] kthread+0x711/0x8a0 [ 98.139552][ C1] ret_from_fork+0x4bc/0x870 [ 98.144141][ C1] ret_from_fork_asm+0x1a/0x30 [ 98.148904][ C1] [ 98.151222][ C1] The buggy address belongs to the object at ffff88801f3430c0 [ 98.151222][ C1] which belongs to the cache kmalloc-32 of size 32 [ 98.165279][ C1] The buggy address is located 0 bytes inside of [ 98.165279][ C1] 32-byte region [ffff88801f3430c0, ffff88801f3430e0) [ 98.178348][ C1] [ 98.180767][ C1] The buggy address belongs to the physical page: [ 98.187179][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f343 [ 98.196119][ C1] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 98.203759][ C1] page_type: f5(slab) [ 98.207753][ C1] raw: 00fff00000000000 ffff88801a026780 0000000000000000 dead000000000001 [ 98.216599][ C1] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 98.225355][ C1] page dumped because: kasan: bad access detected [ 98.231847][ C1] page_owner tracks the page as allocated [ 98.237553][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 184, tgid 184 (kworker/u8:6), ts 6625749703, free_ts 6600992626 [ 98.255436][ C1] post_alloc_hook+0x240/0x2a0 [ 98.260209][ C1] get_page_from_freelist+0x2365/0x2440 [ 98.265928][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 98.271732][ C1] alloc_pages_mpol+0x232/0x4a0 [ 98.276577][ C1] allocate_slab+0x96/0x350 [ 98.281166][ C1] ___slab_alloc+0xe94/0x18a0 [ 98.286017][ C1] __slab_alloc+0x65/0x100 [ 98.290432][ C1] __kmalloc_cache_noprof+0x411/0x6f0 [ 98.296069][ C1] kmem_cache_free+0x16f/0x690 [ 98.300838][ C1] __fput_deferred+0x227/0x390 [ 98.305600][ C1] fput_close+0x119/0x200 [ 98.309929][ C1] path_openat+0x313c/0x3830 [ 98.314521][ C1] do_filp_open+0x1fa/0x410 [ 98.319024][ C1] do_open_execat+0x135/0x560 [ 98.323803][ C1] alloc_bprm+0x28/0x5c0 [ 98.328053][ C1] kernel_execve+0x9b/0x9f0 [ 98.332561][ C1] page last free pid 10 tgid 10 stack trace: [ 98.338532][ C1] __free_frozen_pages+0xbc4/0xd30 [ 98.343760][ C1] vfree+0x25a/0x400 [ 98.347741][ C1] delayed_vfree_work+0x55/0x80 [ 98.352610][ C1] process_scheduled_works+0xae1/0x17b0 [ 98.358340][ C1] worker_thread+0x8a0/0xda0 [ 98.362940][ C1] kthread+0x711/0x8a0 [ 98.367018][ C1] ret_from_fork+0x4bc/0x870 [ 98.371721][ C1] ret_from_fork_asm+0x1a/0x30 [ 98.376490][ C1] [ 98.378829][ C1] Memory state around the buggy address: [ 98.384552][ C1] ffff88801f342f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 98.392655][ C1] ffff88801f343000: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 98.400714][ C1] >ffff88801f343080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 98.408945][ C1] ^ [ 98.415095][ C1] ffff88801f343100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 98.423238][ C1] ffff88801f343180: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 98.431290][ C1] ================================================================== [ 98.439439][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.446743][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 98.455961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.466197][ C1] Call Trace: [ 98.469494][ C1] [ 98.472449][ C1] dump_stack_lvl+0x99/0x250 [ 98.477169][ C1] ? __asan_memcpy+0x40/0x70 [ 98.481952][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.487159][ C1] ? __pfx__printk+0x10/0x10 [ 98.491751][ C1] vpanic+0x237/0x6d0 [ 98.495758][ C1] ? __pfx_vpanic+0x10/0x10 [ 98.500291][ C1] panic+0xb9/0xc0 [ 98.504028][ C1] ? __pfx_panic+0x10/0x10 [ 98.508545][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 98.514792][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 98.520695][ C1] check_panic_on_warn+0x89/0xb0 [ 98.525640][ C1] end_report+0x78/0x160 [ 98.529882][ C1] ? inet_sock_destruct+0x538/0x740 [ 98.535086][ C1] kasan_report_invalid_free+0xfa/0x110 [ 98.540721][ C1] ? inet_sock_destruct+0x538/0x740 [ 98.545925][ C1] ? inet_sock_destruct+0x538/0x740 [ 98.551136][ C1] check_slab_allocation+0xe1/0x130 [ 98.556383][ C1] ? inet_sock_destruct+0x538/0x740 [ 98.561610][ C1] kfree+0x148/0x6d0 [ 98.565517][ C1] inet_sock_destruct+0x538/0x740 [ 98.570538][ C1] ? inet6_cleanup_sock+0x18b/0x220 [ 98.575738][ C1] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 98.581635][ C1] __sk_destruct+0x89/0x660 [ 98.586155][ C1] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 98.592406][ C1] ? rcu_core+0xc37/0x1770 [ 98.596914][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 98.602464][ C1] rcu_core+0xcab/0x1770 [ 98.606890][ C1] ? __lock_acquire+0xab9/0xd20 [ 98.611840][ C1] ? __pfx_rcu_core+0x10/0x10 [ 98.616524][ C1] ? rcu_qs+0xc4/0x170 [ 98.620626][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 98.625155][ C1] ? sched_clock_cpu+0x74/0x430 [ 98.630031][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 98.634885][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 98.640088][ C1] handle_softirqs+0x286/0x870 [ 98.645117][ C1] ? run_ksoftirqd+0x9b/0x100 [ 98.649897][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 98.655541][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 98.660579][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 98.665698][ C1] run_ksoftirqd+0x9b/0x100 [ 98.670315][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 98.675462][ C1] smpboot_thread_fn+0x542/0xa60 [ 98.680723][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 98.685798][ C1] kthread+0x711/0x8a0 [ 98.689889][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 98.695420][ C1] ? __pfx_kthread+0x10/0x10 [ 98.700050][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.705349][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.710562][ C1] ? __pfx_kthread+0x10/0x10 [ 98.715418][ C1] ret_from_fork+0x4bc/0x870 [ 98.720099][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 98.725304][ C1] ? __switch_to_asm+0x39/0x70 [ 98.730071][ C1] ? __switch_to_asm+0x33/0x70 [ 98.734918][ C1] ? __pfx_kthread+0x10/0x10 [ 98.739508][ C1] ret_from_fork_asm+0x1a/0x30 [ 98.744278][ C1] [ 98.747454][ C1] Kernel Offset: disabled [ 98.751853][ C1] Rebooting in 86400 seconds..