[ 38.437925][ T1043] Bluetooth: hci0: command 0x0409 tx timeout [ 38.438204][ T1511] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.450955][ T1511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.508962][ T1047] bond0 (unregistering): Released all slaves [ 38.586180][ T1509] chnl_net:caif_netlink_parms(): no params data found [ 39.146720][ T1509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.520544][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.527870][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.535658][ T1509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.527635][ T1035] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.241' (ED25519) to the list of known hosts. 2025/09/13 14:03:35 parsed 1 programs [ 58.470529][ T1939] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.034277][ T1041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.042227][ T1041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.050678][ T1041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.058453][ T1041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.066825][ T1041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.073850][ T1041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.092427][ T1953] chnl_net:caif_netlink_parms(): no params data found [ 59.808010][ T1953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.176255][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.183562][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.191772][ T1953] 8021q: adding VLAN 0 to HW filter on device batadv0 2025/09/13 14:03:38 executed programs: 0 [ 60.888187][ T1511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.895246][ T1511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.908330][ T2437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.914669][ T2441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.916449][ T2437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.923423][ T2441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.929620][ T2445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.936226][ T2441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.943070][ T2445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.956964][ T2441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.957513][ T2445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.963919][ T2441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.977793][ T2445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.977811][ T2441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.984785][ T2445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.992594][ T2441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.998893][ T2445] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.005740][ T2441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.012605][ T2445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.019723][ T2441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.026448][ T2445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.033210][ T2441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.040309][ T2445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.047388][ T2441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.054216][ T1041] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.060920][ T2441] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.068060][ T1041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.075168][ T2441] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.089035][ T2445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.089367][ T2441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.287251][ T2500] modprobe (2500) used greatest stack depth: 11536 bytes left [ 61.292100][ T2430] chnl_net:caif_netlink_parms(): no params data found [ 61.323873][ T1047] bond0 (unregistering): Released all slaves [ 61.374940][ T2442] chnl_net:caif_netlink_parms(): no params data found [ 61.406855][ T2433] chnl_net:caif_netlink_parms(): no params data found [ 61.421642][ T2436] chnl_net:caif_netlink_parms(): no params data found [ 61.429596][ T2434] chnl_net:caif_netlink_parms(): no params data found [ 63.155676][ T2441] Bluetooth: hci2: command 0x0409 tx timeout [ 63.161673][ T2441] Bluetooth: hci3: command 0x0409 tx timeout [ 63.167695][ T1511] Bluetooth: hci4: command 0x0409 tx timeout [ 63.173928][ T1511] Bluetooth: hci0: command 0x0409 tx timeout [ 63.180583][ T1043] Bluetooth: hci1: command 0x0409 tx timeout [ 63.595004][ T2433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.603549][ T2442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.681489][ T2434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.708379][ T2430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.752729][ T2436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.044803][ T2442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.051680][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.059047][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.095913][ T2433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.104795][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.112261][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.133152][ T2430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.152627][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.160139][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.223587][ T2434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.230642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.235656][ T2446] Bluetooth: hci4: command 0x041b tx timeout [ 65.238027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.243985][ T2446] Bluetooth: hci2: command 0x041b tx timeout [ 65.251308][ T1511] Bluetooth: hci0: command 0x041b tx timeout [ 65.258918][ T2446] Bluetooth: hci3: command 0x041b tx timeout [ 65.263908][ T2441] Bluetooth: hci1: command 0x041b tx timeout [ 65.428249][ T2436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.435086][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.442724][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.315627][ T1511] Bluetooth: hci3: command 0x040f tx timeout [ 67.321732][ T1511] Bluetooth: hci2: command 0x040f tx timeout [ 67.327848][ T2441] Bluetooth: hci4: command 0x040f tx timeout [ 67.327894][ T2446] Bluetooth: hci0: command 0x040f tx timeout [ 67.333798][ T2441] Bluetooth: hci1: command 0x040f tx timeout 2025/09/13 14:03:45 executed programs: 10 [ 68.795209][ T4460] ------------[ cut here ]------------ [ 68.800722][ T4460] ODEBUG: free active (active state 0) object type: work_struct hint: kcm_tx_work+0x0/0x80 [ 68.810828][ T4460] WARNING: CPU: 1 PID: 4460 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x1eb/0x270 [ 68.820897][ T4460] Modules linked in: [ 68.824777][ T4460] CPU: 1 PID: 4460 Comm: syz.4.22 Not tainted syzkaller #0 [ 68.831979][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.842046][ T4460] RIP: 0010:debug_check_no_obj_freed+0x1eb/0x270 [ 68.848403][ T4460] Code: c9 ff c0 89 05 1e 67 85 06 4c 8b 45 00 48 c7 c7 66 d1 fd 82 48 c7 c6 eb 66 ff 82 48 c7 c2 ac 3a 00 83 44 89 e1 e8 55 49 c0 00 <0f> 0b ff 05 75 e0 ec 01 48 8b 45 30 48 85 c0 74 14 4c 89 ef be 03 [ 68.868017][ T4460] RSP: 0018:ffffc90003153d08 EFLAGS: 00010246 [ 68.874057][ T4460] RAX: 7c3cc1462c773900 RBX: ffff888107e5b600 RCX: 7c3cc1462c773900 [ 68.882035][ T4460] RDX: 0000000000000000 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 68.890083][ T4460] RBP: ffffffff82a1cda0 R08: 0000000000001fff R09: ffffffff83498b20 [ 68.898488][ T4460] R10: 0000000000005ffd R11: 00000000ffffdfff R12: 0000000000000000 [ 68.906492][ T4460] R13: ffff888107e5b4e0 R14: ffff888107e5af40 R15: dead000000000100 [ 68.914470][ T4460] FS: 00007fd5f700c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 68.923435][ T4460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.930197][ T4460] CR2: 00007fd5f700cd58 CR3: 000000010bfa7000 CR4: 00000000003506e0 [ 68.938393][ T4460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.946375][ T4460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.954322][ T4460] Call Trace: [ 68.957608][ T4460] [ 68.960525][ T4460] slab_free_freelist_hook+0xe5/0x160 [ 68.965903][ T4460] ? __sk_destruct+0x174/0x220 [ 68.970649][ T4460] kmem_cache_free+0xea/0x280 [ 68.975363][ T4460] __sk_destruct+0x174/0x220 [ 68.979952][ T4460] kcm_release+0x19b/0x1c0 [ 68.984393][ T4460] sock_close+0x42/0xd0 [ 68.988553][ T4460] __fput+0x7a/0x230 [ 68.992435][ T4460] task_work_run+0x7a/0xa0 [ 68.996867][ T4460] exit_to_user_mode_loop+0xb9/0xd0 [ 69.002056][ T4460] exit_to_user_mode_prepare+0x94/0xf0 [ 69.007513][ T4460] syscall_exit_to_user_mode+0x16/0x30 [ 69.013009][ T4460] do_syscall_64+0x58/0xa0 [ 69.017435][ T4460] ? clear_bhb_loop+0x60/0xb0 [ 69.022096][ T4460] ? clear_bhb_loop+0x60/0xb0 [ 69.026862][ T4460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.032739][ T4460] RIP: 0033:0x7fd5f7ddeb69 [ 69.037157][ T4460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.056847][ T4460] RSP: 002b:00007fd5f700c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.065230][ T4460] RAX: 0000000000000000 RBX: 00007fd5f8006160 RCX: 00007fd5f7ddeb69 [ 69.073292][ T4460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 69.081264][ T4460] RBP: 00007fd5f7e61df1 R08: 0000000000000000 R09: 0000000000000000 [ 69.089238][ T4460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.097210][ T4460] R13: 0000000000000000 R14: 00007fd5f8006160 R15: 00007ffe39427eb8 [ 69.105237][ T4460] [ 69.108305][ T4460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.115643][ T4460] CPU: 1 PID: 4460 Comm: syz.4.22 Not tainted syzkaller #0 [ 69.122801][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.132821][ T4460] Call Trace: [ 69.136079][ T4460] [ 69.138983][ T4460] dump_stack_lvl+0x74/0xbb [ 69.143488][ T4460] panic+0x118/0x2c0 [ 69.147348][ T4460] ? debug_check_no_obj_freed+0x1eb/0x270 [ 69.153032][ T4460] __warn+0x160/0x1f0 [ 69.157063][ T4460] ? debug_check_no_obj_freed+0x1eb/0x270 [ 69.162763][ T4460] report_bug+0xc9/0x160 [ 69.166985][ T4460] handle_bug+0x3a/0x70 [ 69.171103][ T4460] exc_invalid_op+0x16/0x40 [ 69.175574][ T4460] asm_exc_invalid_op+0x16/0x20 [ 69.180422][ T4460] RIP: 0010:debug_check_no_obj_freed+0x1eb/0x270 [ 69.186712][ T4460] Code: c9 ff c0 89 05 1e 67 85 06 4c 8b 45 00 48 c7 c7 66 d1 fd 82 48 c7 c6 eb 66 ff 82 48 c7 c2 ac 3a 00 83 44 89 e1 e8 55 49 c0 00 <0f> 0b ff 05 75 e0 ec 01 48 8b 45 30 48 85 c0 74 14 4c 89 ef be 03 [ 69.206298][ T4460] RSP: 0018:ffffc90003153d08 EFLAGS: 00010246 [ 69.212339][ T4460] RAX: 7c3cc1462c773900 RBX: ffff888107e5b600 RCX: 7c3cc1462c773900 [ 69.220282][ T4460] RDX: 0000000000000000 RSI: 00000000ffffdfff RDI: 00000000ffffffff [ 69.228230][ T4460] RBP: ffffffff82a1cda0 R08: 0000000000001fff R09: ffffffff83498b20 [ 69.236258][ T4460] R10: 0000000000005ffd R11: 00000000ffffdfff R12: 0000000000000000 [ 69.244222][ T4460] R13: ffff888107e5b4e0 R14: ffff888107e5af40 R15: dead000000000100 [ 69.252175][ T4460] ? debug_check_no_obj_freed+0x1eb/0x270 [ 69.258034][ T4460] slab_free_freelist_hook+0xe5/0x160 [ 69.263371][ T4460] ? __sk_destruct+0x174/0x220 [ 69.268097][ T4460] kmem_cache_free+0xea/0x280 [ 69.272738][ T4460] __sk_destruct+0x174/0x220 [ 69.277380][ T4460] kcm_release+0x19b/0x1c0 [ 69.281761][ T4460] sock_close+0x42/0xd0 [ 69.285899][ T4460] __fput+0x7a/0x230 [ 69.289759][ T4460] task_work_run+0x7a/0xa0 [ 69.294141][ T4460] exit_to_user_mode_loop+0xb9/0xd0 [ 69.299321][ T4460] exit_to_user_mode_prepare+0x94/0xf0 [ 69.304745][ T4460] syscall_exit_to_user_mode+0x16/0x30 [ 69.310259][ T4460] do_syscall_64+0x58/0xa0 [ 69.314648][ T4460] ? clear_bhb_loop+0x60/0xb0 [ 69.319290][ T4460] ? clear_bhb_loop+0x60/0xb0 [ 69.323932][ T4460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.329801][ T4460] RIP: 0033:0x7fd5f7ddeb69 [ 69.334183][ T4460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.353896][ T4460] RSP: 002b:00007fd5f700c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.362275][ T4460] RAX: 0000000000000000 RBX: 00007fd5f8006160 RCX: 00007fd5f7ddeb69 [ 69.370220][ T4460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 69.378172][ T4460] RBP: 00007fd5f7e61df1 R08: 0000000000000000 R09: 0000000000000000 [ 69.386120][ T4460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.394053][ T4460] R13: 0000000000000000 R14: 00007fd5f8006160 R15: 00007ffe39427eb8 [ 69.402002][ T4460] [ 69.405291][ T4460] Kernel Offset: disabled [ 69.409615][ T4460] Rebooting in 86400 seconds..