Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. 2026/03/09 04:16:55 parsed 1 programs [ 111.158108][ T4595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 113.066071][ T4614] chnl_net:caif_netlink_parms(): no params data found [ 113.112520][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.120048][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.128037][ T4614] device bridge_slave_0 entered promiscuous mode [ 113.139773][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.146985][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.154757][ T4614] device bridge_slave_1 entered promiscuous mode [ 113.176641][ T4614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.189370][ T4614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.219672][ T4614] team0: Port device team_slave_0 added [ 113.227828][ T4614] team0: Port device team_slave_1 added [ 113.251986][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.259158][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.285136][ T4614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.297711][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.304687][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.331420][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.370072][ T4614] device hsr_slave_0 entered promiscuous mode [ 113.378098][ T4614] device hsr_slave_1 entered promiscuous mode [ 114.052461][ T4614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.063418][ T4614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.078756][ T4614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.097934][ T4614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.223082][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.254040][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.277034][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.287920][ T4614] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.307853][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.329374][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.348017][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.355107][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.371583][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.397438][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.416432][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.436475][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.443678][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.470548][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.493869][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.521491][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.537981][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.556989][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.582117][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.609152][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.621259][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.636983][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.659957][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.676921][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.699538][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.918260][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.925833][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.952521][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.994288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.004476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.026914][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.035964][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.048883][ T4614] device veth0_vlan entered promiscuous mode [ 115.061709][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.071609][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.082310][ T4614] device veth1_vlan entered promiscuous mode [ 115.149903][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.168788][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.190597][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.201768][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.213018][ T4614] device veth0_macvtap entered promiscuous mode [ 115.224966][ T4614] device veth1_macvtap entered promiscuous mode [ 115.255802][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.263318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.274248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.284073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.294984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.314678][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.322650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.334434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.345969][ T4614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.355116][ T4614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.364917][ T4614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.374595][ T4614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.746106][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.760532][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.778975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.813567][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.822887][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.831345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.914165][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/09 04:17:07 executed programs: 0 [ 118.980383][ T4814] chnl_net:caif_netlink_parms(): no params data found [ 119.045367][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.054306][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.062908][ T4814] device bridge_slave_0 entered promiscuous mode [ 119.072056][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.079481][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.088055][ T4814] device bridge_slave_1 entered promiscuous mode [ 119.117522][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.129466][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.162346][ T4814] team0: Port device team_slave_0 added [ 119.170471][ T4814] team0: Port device team_slave_1 added [ 119.197346][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.204471][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.231238][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.244410][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.251786][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.278297][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.325704][ T4814] device hsr_slave_0 entered promiscuous mode [ 119.332835][ T4814] device hsr_slave_1 entered promiscuous mode [ 119.339958][ T4814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.348053][ T4814] Cannot create hsr debugfs directory [ 119.853429][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.903650][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.976977][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.886608][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 120.963733][ T4814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.978179][ T4814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.992396][ T4814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.038189][ T4814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.163490][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.179049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.190634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.233914][ T4814] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.248062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.260664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.270791][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.277914][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.332152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.341842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.354901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.365708][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.372854][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.383846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.433170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.445810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.464690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.475597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.493244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.505405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.523542][ T4814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.538092][ T4814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.551118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.569039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.580923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.589822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.601257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.683049][ T154] device hsr_slave_0 left promiscuous mode [ 121.696830][ T154] device hsr_slave_1 left promiscuous mode [ 121.709413][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.720221][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.728529][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.735982][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.746739][ T154] device bridge_slave_1 left promiscuous mode [ 121.752983][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.764533][ T154] device bridge_slave_0 left promiscuous mode [ 121.772489][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.789793][ T154] device veth1_macvtap left promiscuous mode [ 121.799875][ T154] device veth0_macvtap left promiscuous mode [ 121.806488][ T154] device veth1_vlan left promiscuous mode [ 121.812372][ T154] device veth0_vlan left promiscuous mode [ 122.068055][ T154] team0 (unregistering): Port device team_slave_1 removed [ 122.085289][ T154] team0 (unregistering): Port device team_slave_0 removed [ 122.103727][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.123307][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.211758][ T154] bond0 (unregistering): Released all slaves [ 122.364744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.381396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.394449][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.416556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.425356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.462340][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.494123][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.503881][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.515173][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.532950][ T4814] device veth0_vlan entered promiscuous mode [ 122.549249][ T4814] device veth1_vlan entered promiscuous mode [ 122.577353][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.586113][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.598420][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.610113][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.621501][ T4814] device veth0_macvtap entered promiscuous mode [ 122.634628][ T4814] device veth1_macvtap entered promiscuous mode [ 122.659081][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.668803][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.678663][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.687736][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.696875][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.708993][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.720641][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.731620][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.747276][ T4814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.757030][ T4814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.765780][ T4814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.775888][ T4814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.844997][ T4948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.859563][ T4948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.879903][ T1547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.918469][ T4948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.936254][ T4948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.944454][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.971239][ T4896] Bluetooth: hci0: command 0x041b tx timeout 2026/03/09 04:17:12 executed programs: 3 [ 123.953232][ T5041] ------------[ cut here ]------------ [ 123.977480][ T5041] ODEBUG: free active (active state 0) object type: work_struct hint: kcm_tx_work+0x0/0x180 [ 124.008642][ T5041] WARNING: CPU: 0 PID: 5041 at lib/debugobjects.c:521 debug_check_no_obj_freed+0x43c/0x530 [ 124.040572][ T5041] Modules linked in: [ 124.049345][ T5041] CPU: 0 PID: 5041 Comm: syz.0.17 Not tainted syzkaller #0 [ 124.058958][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.070009][ T5041] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 124.077345][ T5041] Code: ef e8 48 dd d5 fd 4c 8b 45 00 48 c7 c7 a0 02 7a 8a 48 c7 c6 60 ff 79 8a 48 c7 c2 00 04 7a 8a 8b 0c 24 4d 89 e9 e8 14 2a c9 05 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 c5 c7 a1 [ 124.098598][ T5041] RSP: 0018:ffffc9000324fbc0 EFLAGS: 00010246 [ 124.105529][ T5041] RAX: 40e5638fd7136b00 RBX: ffffffff96536c20 RCX: ffff88807a8cbb80 [ 124.114315][ T5041] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 124.122859][ T5041] RBP: ffffffff8a2a5780 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 124.131463][ T5041] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88802b7195c8 [ 124.141443][ T5041] R13: ffffffff8904bc80 R14: ffff88802b719000 R15: ffff88802b7194b0 [ 124.151449][ T5041] FS: 00007fb9a87676c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 124.161076][ T5041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.175157][ T5041] CR2: 0000560e93183000 CR3: 000000002ae5e000 CR4: 00000000003506f0 [ 124.183635][ T5041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.192167][ T5041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.200514][ T5041] Call Trace: [ 124.203815][ T5041] [ 124.207128][ T5041] slab_free_freelist_hook+0x8b/0x170 [ 124.212580][ T5041] ? __sk_destruct+0x569/0x840 [ 124.218706][ T5041] kmem_cache_free+0x8f/0x210 [ 124.223438][ T5041] __sk_destruct+0x569/0x840 [ 124.229046][ T5041] kcm_release+0x51a/0x5b0 [ 124.233522][ T5041] sock_close+0xd5/0x240 [ 124.238267][ T5041] ? sock_mmap+0x90/0x90 [ 124.242547][ T5041] __fput+0x234/0x930 [ 124.248327][ T5041] task_work_run+0x125/0x1a0 [ 124.252983][ T5041] exit_to_user_mode_loop+0x10f/0x130 [ 124.258846][ T5041] exit_to_user_mode_prepare+0xee/0x180 [ 124.264518][ T5041] syscall_exit_to_user_mode+0x16/0x40 [ 124.271071][ T5041] do_syscall_64+0x58/0xa0 [ 124.275639][ T5041] ? clear_bhb_loop+0x30/0x80 [ 124.281996][ T5041] ? clear_bhb_loop+0x30/0x80 [ 124.287072][ T5041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.293055][ T5041] RIP: 0033:0x7fb9a95450f9 [ 124.299162][ T5041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.320651][ T5041] RSP: 002b:00007fb9a8767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.330942][ T5041] RAX: 0000000000000000 RBX: 00007fb9a9781160 RCX: 00007fb9a95450f9 [ 124.340594][ T5041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 124.349090][ T5041] RBP: 00007fb9a95d7c7c R08: 0000000000000000 R09: 0000000000000000 [ 124.358657][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.367007][ T5041] R13: 0000000000000001 R14: 00007fb9a9781160 R15: 00007ffcc4359718 [ 124.375884][ T5041] [ 124.380544][ T5041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.387855][ T5041] CPU: 0 PID: 5041 Comm: syz.0.17 Not tainted syzkaller #0 [ 124.395079][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.405260][ T5041] Call Trace: [ 124.408563][ T5041] [ 124.411520][ T5041] dump_stack_lvl+0x188/0x250 [ 124.416233][ T5041] ? show_regs_print_info+0x20/0x20 [ 124.421470][ T5041] ? load_image+0x400/0x400 [ 124.426019][ T5041] panic+0x2e5/0x810 [ 124.429950][ T5041] ? bpf_jit_dump+0xd0/0xd0 [ 124.434498][ T5041] ? debug_check_no_obj_freed+0x43c/0x530 [ 124.440247][ T5041] __warn+0x248/0x2b0 [ 124.444268][ T5041] ? debug_check_no_obj_freed+0x43c/0x530 [ 124.450026][ T5041] report_bug+0x1b7/0x2e0 [ 124.454388][ T5041] handle_bug+0x3a/0x70 [ 124.458571][ T5041] exc_invalid_op+0x16/0x40 [ 124.463108][ T5041] asm_exc_invalid_op+0x16/0x20 [ 124.467997][ T5041] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 124.474359][ T5041] Code: ef e8 48 dd d5 fd 4c 8b 45 00 48 c7 c7 a0 02 7a 8a 48 c7 c6 60 ff 79 8a 48 c7 c2 00 04 7a 8a 8b 0c 24 4d 89 e9 e8 14 2a c9 05 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 c5 c7 a1 [ 124.493995][ T5041] RSP: 0018:ffffc9000324fbc0 EFLAGS: 00010246 [ 124.500102][ T5041] RAX: 40e5638fd7136b00 RBX: ffffffff96536c20 RCX: ffff88807a8cbb80 [ 124.508098][ T5041] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 124.516182][ T5041] RBP: ffffffff8a2a5780 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 124.524193][ T5041] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88802b7195c8 [ 124.532195][ T5041] R13: ffffffff8904bc80 R14: ffff88802b719000 R15: ffff88802b7194b0 [ 124.540211][ T5041] ? kcm_splice_read+0x2f0/0x2f0 [ 124.545257][ T5041] slab_free_freelist_hook+0x8b/0x170 [ 124.550776][ T5041] ? __sk_destruct+0x569/0x840 [ 124.555578][ T5041] kmem_cache_free+0x8f/0x210 [ 124.560290][ T5041] __sk_destruct+0x569/0x840 [ 124.565018][ T5041] kcm_release+0x51a/0x5b0 [ 124.569470][ T5041] sock_close+0xd5/0x240 [ 124.573738][ T5041] ? sock_mmap+0x90/0x90 [ 124.578010][ T5041] __fput+0x234/0x930 [ 124.582039][ T5041] task_work_run+0x125/0x1a0 [ 124.586656][ T5041] exit_to_user_mode_loop+0x10f/0x130 [ 124.592148][ T5041] exit_to_user_mode_prepare+0xee/0x180 [ 124.597729][ T5041] syscall_exit_to_user_mode+0x16/0x40 [ 124.603228][ T5041] do_syscall_64+0x58/0xa0 [ 124.607670][ T5041] ? clear_bhb_loop+0x30/0x80 [ 124.612370][ T5041] ? clear_bhb_loop+0x30/0x80 [ 124.617078][ T5041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.623001][ T5041] RIP: 0033:0x7fb9a95450f9 [ 124.627447][ T5041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.647077][ T5041] RSP: 002b:00007fb9a8767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 124.655496][ T5041] RAX: 0000000000000000 RBX: 00007fb9a9781160 RCX: 00007fb9a95450f9 [ 124.663466][ T5041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 124.671436][ T5041] RBP: 00007fb9a95d7c7c R08: 0000000000000000 R09: 0000000000000000 [ 124.679420][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.687420][ T5041] R13: 0000000000000001 R14: 00007fb9a9781160 R15: 00007ffcc4359718 [ 124.695689][ T5041] [ 124.699095][ T5041] Kernel Offset: disabled [ 124.703602][ T5041] Rebooting in 86400 seconds..