Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. 2026/03/11 16:22:05 parsed 1 programs [ 90.280860][ T4629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.365340][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.373179][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.395515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.418105][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.426548][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.437356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.027131][ T4679] chnl_net:caif_netlink_parms(): no params data found [ 93.082469][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.089821][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.097870][ T4679] device bridge_slave_0 entered promiscuous mode [ 93.106263][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.113371][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.121540][ T4679] device bridge_slave_1 entered promiscuous mode [ 93.143389][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.155974][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.184555][ T4679] team0: Port device team_slave_0 added [ 93.192197][ T4679] team0: Port device team_slave_1 added [ 93.212611][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.219649][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.245541][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.258561][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.266114][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.292237][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.324082][ T4679] device hsr_slave_0 entered promiscuous mode [ 93.330856][ T4679] device hsr_slave_1 entered promiscuous mode [ 94.008342][ T4679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.019834][ T4679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.051669][ T4679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.061148][ T4679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.148602][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.161416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.170566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.182123][ T4679] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.224200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.232934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.245930][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.253022][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.265079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.273977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.284418][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.291931][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.299959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.309061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.318166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.327188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.344887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.353427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.361762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.373022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.383718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.392792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.402386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.411230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.421444][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.602002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.610248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.624008][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.646540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.658362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.700791][ T4679] device veth0_vlan entered promiscuous mode [ 94.709904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.718854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.728516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.737126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.750858][ T4679] device veth1_vlan entered promiscuous mode [ 94.789424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.798558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.807217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.817442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.828325][ T4679] device veth0_macvtap entered promiscuous mode [ 94.853226][ T4679] device veth1_macvtap entered promiscuous mode [ 94.873481][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.880968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.890185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.898885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.910972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.923392][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.934305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.943603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.959169][ T4679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.970140][ T4679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.979623][ T4679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.990393][ T4679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/11 16:22:14 executed programs: 0 [ 96.869155][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 96.996802][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.003983][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.015036][ T4836] device bridge_slave_0 entered promiscuous mode [ 97.023414][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.033291][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.041758][ T4836] device bridge_slave_1 entered promiscuous mode [ 97.071590][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.097829][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.156352][ T4836] team0: Port device team_slave_0 added [ 97.170173][ T4836] team0: Port device team_slave_1 added [ 97.200039][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.214261][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.245130][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.259045][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.267535][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.295291][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.331791][ T4836] device hsr_slave_0 entered promiscuous mode [ 97.341855][ T4836] device hsr_slave_1 entered promiscuous mode [ 97.349350][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.358380][ T4836] Cannot create hsr debugfs directory [ 97.416582][ T3032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.714450][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 99.613023][ T3032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.680813][ T3032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.741056][ T3032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.520295][ T4836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.529180][ T4836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.537824][ T4836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.547640][ T4836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.593213][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.617094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.625252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.636608][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.645866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.655229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.663555][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.670652][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.679359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.702336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.711011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.720284][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.727370][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.751091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.761549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.773319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.783700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.792802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.800507][ T4200] Bluetooth: hci0: command 0x041b tx timeout [ 100.821149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.830375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.841720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.850559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.862074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.871261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.891881][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.949851][ T3032] device hsr_slave_0 left promiscuous mode [ 100.956807][ T3032] device hsr_slave_1 left promiscuous mode [ 100.963235][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.973173][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.981063][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.988652][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.996497][ T3032] device bridge_slave_1 left promiscuous mode [ 101.002826][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.011165][ T3032] device bridge_slave_0 left promiscuous mode [ 101.018040][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.028627][ T3032] device veth1_macvtap left promiscuous mode [ 101.035538][ T3032] device veth0_macvtap left promiscuous mode [ 101.041566][ T3032] device veth1_vlan left promiscuous mode [ 101.047705][ T3032] device veth0_vlan left promiscuous mode [ 101.170039][ T3032] team0 (unregistering): Port device team_slave_1 removed [ 101.185129][ T3032] team0 (unregistering): Port device team_slave_0 removed [ 101.197100][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.209572][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.260665][ T3032] bond0 (unregistering): Released all slaves [ 101.313249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.320976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.331905][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.349036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.358206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.379490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.388346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.405610][ T4836] device veth0_vlan entered promiscuous mode [ 101.415874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.423616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.433223][ T4836] device veth1_vlan entered promiscuous mode [ 101.459125][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.467465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.476699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.485955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.497581][ T4836] device veth0_macvtap entered promiscuous mode [ 101.507580][ T4836] device veth1_macvtap entered promiscuous mode [ 101.523720][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.535945][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.543315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.551886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.560588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.569409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.578345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.587674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.599831][ T4836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.608896][ T4836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.618017][ T4836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.628220][ T4836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.679961][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.693024][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.704353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/03/11 16:22:19 executed programs: 2 [ 101.728745][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.737142][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.747711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.864827][ T4312] Bluetooth: hci0: command 0x040f tx timeout [ 104.944242][ T4200] Bluetooth: hci0: command 0x0419 tx timeout [ 106.123874][ T5113] ------------[ cut here ]------------ [ 106.129811][ T5113] ODEBUG: free active (active state 0) object type: work_struct hint: kcm_tx_work+0x0/0x180 [ 106.140952][ T5113] WARNING: CPU: 0 PID: 5113 at lib/debugobjects.c:521 debug_check_no_obj_freed+0x43c/0x530 [ 106.151599][ T5113] Modules linked in: [ 106.156318][ T5113] CPU: 0 PID: 5113 Comm: syz.0.21 Not tainted syzkaller #0 [ 106.163508][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.173630][ T5113] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 106.180229][ T5113] Code: ef e8 48 dd d5 fd 4c 8b 45 00 48 c7 c7 a0 02 7a 8a 48 c7 c6 60 ff 79 8a 48 c7 c2 00 04 7a 8a 8b 0c 24 4d 89 e9 e8 14 2a c9 05 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 c5 c7 a1 [ 106.199917][ T5113] RSP: 0018:ffffc90002e0fbc0 EFLAGS: 00010246 [ 106.206183][ T5113] RAX: 52f9580818f37200 RBX: ffffffff96503bf0 RCX: ffff888028619dc0 [ 106.214286][ T5113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.222461][ T5113] RBP: ffffffff8a2a5780 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 106.231251][ T5113] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88807ab933c8 [ 106.239574][ T5113] R13: ffffffff8904bc80 R14: ffff88807ab93000 R15: ffff88807ab932b0 [ 106.247980][ T5113] FS: 00007f6e9cc4b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.257000][ T5113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.263672][ T5113] CR2: 00007f6e9cc4aff8 CR3: 000000007d3ef000 CR4: 00000000003506f0 [ 106.271731][ T5113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.279800][ T5113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.287812][ T5113] Call Trace: [ 106.291101][ T5113] [ 106.294025][ T5113] slab_free_freelist_hook+0x8b/0x170 [ 106.299469][ T5113] ? __sk_destruct+0x569/0x840 [ 106.304630][ T5113] kmem_cache_free+0x8f/0x210 [ 106.309308][ T5113] __sk_destruct+0x569/0x840 [ 106.313892][ T5113] kcm_release+0x51a/0x5b0 [ 106.318371][ T5113] sock_close+0xd5/0x240 [ 106.322620][ T5113] ? sock_mmap+0x90/0x90 [ 106.326920][ T5113] __fput+0x234/0x930 [ 106.331115][ T5113] task_work_run+0x125/0x1a0 [ 106.335916][ T5113] exit_to_user_mode_loop+0x10f/0x130 [ 106.341400][ T5113] exit_to_user_mode_prepare+0xee/0x180 [ 106.347001][ T5113] syscall_exit_to_user_mode+0x16/0x40 [ 106.352466][ T5113] do_syscall_64+0x58/0xa0 [ 106.356937][ T5113] ? clear_bhb_loop+0x30/0x80 [ 106.361608][ T5113] ? clear_bhb_loop+0x30/0x80 [ 106.366318][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.372224][ T5113] RIP: 0033:0x7f6e9da290f9 [ 106.376701][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.397403][ T5113] RSP: 002b:00007f6e9cc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.405913][ T5113] RAX: 0000000000000000 RBX: 00007f6e9dc65160 RCX: 00007f6e9da290f9 [ 106.414139][ T5113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 106.422121][ T5113] RBP: 00007f6e9dabbc7c R08: 0000000000000000 R09: 0000000000000000 [ 106.430227][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.438355][ T5113] R13: 0000000000000001 R14: 00007f6e9dc65160 R15: 00007fffe8ce8f88 [ 106.446382][ T5113] [ 106.449426][ T5113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.456773][ T5113] CPU: 0 PID: 5113 Comm: syz.0.21 Not tainted syzkaller #0 [ 106.464078][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.474127][ T5113] Call Trace: [ 106.477396][ T5113] [ 106.480309][ T5113] dump_stack_lvl+0x188/0x250 [ 106.484980][ T5113] ? show_regs_print_info+0x20/0x20 [ 106.490290][ T5113] ? load_image+0x400/0x400 [ 106.494791][ T5113] panic+0x2e5/0x810 [ 106.498785][ T5113] ? bpf_jit_dump+0xd0/0xd0 [ 106.503315][ T5113] ? debug_check_no_obj_freed+0x43c/0x530 [ 106.509044][ T5113] __warn+0x248/0x2b0 [ 106.513115][ T5113] ? debug_check_no_obj_freed+0x43c/0x530 [ 106.518823][ T5113] report_bug+0x1b7/0x2e0 [ 106.523143][ T5113] handle_bug+0x3a/0x70 [ 106.527297][ T5113] exc_invalid_op+0x16/0x40 [ 106.531871][ T5113] asm_exc_invalid_op+0x16/0x20 [ 106.536713][ T5113] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 106.543139][ T5113] Code: ef e8 48 dd d5 fd 4c 8b 45 00 48 c7 c7 a0 02 7a 8a 48 c7 c6 60 ff 79 8a 48 c7 c2 00 04 7a 8a 8b 0c 24 4d 89 e9 e8 14 2a c9 05 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 c5 c7 a1 [ 106.562903][ T5113] RSP: 0018:ffffc90002e0fbc0 EFLAGS: 00010246 [ 106.569051][ T5113] RAX: 52f9580818f37200 RBX: ffffffff96503bf0 RCX: ffff888028619dc0 [ 106.577038][ T5113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.584999][ T5113] RBP: ffffffff8a2a5780 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 106.592969][ T5113] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88807ab933c8 [ 106.601138][ T5113] R13: ffffffff8904bc80 R14: ffff88807ab93000 R15: ffff88807ab932b0 [ 106.609225][ T5113] ? kcm_splice_read+0x2f0/0x2f0 [ 106.614179][ T5113] slab_free_freelist_hook+0x8b/0x170 [ 106.619537][ T5113] ? __sk_destruct+0x569/0x840 [ 106.624282][ T5113] kmem_cache_free+0x8f/0x210 [ 106.628941][ T5113] __sk_destruct+0x569/0x840 [ 106.633512][ T5113] kcm_release+0x51a/0x5b0 [ 106.637998][ T5113] sock_close+0xd5/0x240 [ 106.642224][ T5113] ? sock_mmap+0x90/0x90 [ 106.646442][ T5113] __fput+0x234/0x930 [ 106.650420][ T5113] task_work_run+0x125/0x1a0 [ 106.655022][ T5113] exit_to_user_mode_loop+0x10f/0x130 [ 106.660406][ T5113] exit_to_user_mode_prepare+0xee/0x180 [ 106.665953][ T5113] syscall_exit_to_user_mode+0x16/0x40 [ 106.671599][ T5113] do_syscall_64+0x58/0xa0 [ 106.676063][ T5113] ? clear_bhb_loop+0x30/0x80 [ 106.680729][ T5113] ? clear_bhb_loop+0x30/0x80 [ 106.685393][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.691429][ T5113] RIP: 0033:0x7f6e9da290f9 [ 106.695985][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.715584][ T5113] RSP: 002b:00007f6e9cc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 106.724514][ T5113] RAX: 0000000000000000 RBX: 00007f6e9dc65160 RCX: 00007f6e9da290f9 [ 106.732613][ T5113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 106.740589][ T5113] RBP: 00007f6e9dabbc7c R08: 0000000000000000 R09: 0000000000000000 [ 106.748544][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.756497][ T5113] R13: 0000000000000001 R14: 00007f6e9dc65160 R15: 00007fffe8ce8f88 [ 106.764551][ T5113] [ 106.767953][ T5113] Kernel Offset: disabled [ 106.772393][ T5113] Rebooting in 86400 seconds..