Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts.
2025/11/16 06:10:08 parsed 1 programs
[ 73.390541][ T5829] cgroup: Unknown subsys name 'net'
[ 73.539987][ T5829] cgroup: Unknown subsys name 'cpuset'
[ 73.548699][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 74.998060][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 77.811512][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 78.868439][ T5867] chnl_net:caif_netlink_parms(): no params data found
[ 78.972850][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.980794][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.988265][ T5867] bridge_slave_0: entered allmulticast mode
[ 78.995488][ T5867] bridge_slave_0: entered promiscuous mode
[ 79.009277][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.016593][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.023966][ T5867] bridge_slave_1: entered allmulticast mode
[ 79.031929][ T5867] bridge_slave_1: entered promiscuous mode
[ 79.065437][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.078053][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.110060][ T5867] team0: Port device team_slave_0 added
[ 79.120039][ T5867] team0: Port device team_slave_1 added
[ 79.151922][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.158937][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.185390][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.199673][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.206928][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.233509][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.275548][ T5867] hsr_slave_0: entered promiscuous mode
[ 79.282017][ T5867] hsr_slave_1: entered promiscuous mode
[ 79.412834][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.425062][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.435987][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.446388][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.474884][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.482358][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.490395][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.497560][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.554315][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.573391][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.582452][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.598694][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.612938][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.620139][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.635430][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.642629][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.804143][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.850983][ T5867] veth0_vlan: entered promiscuous mode
[ 79.862466][ T5867] veth1_vlan: entered promiscuous mode
[ 79.892130][ T5867] veth0_macvtap: entered promiscuous mode
[ 79.901894][ T5867] veth1_macvtap: entered promiscuous mode
[ 79.920764][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.938542][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.953912][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.964394][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.976542][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.985575][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.103496][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.163516][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.242840][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.305350][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.184406][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.192708][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.201428][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.210575][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.218737][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.440519][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.448832][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.480379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.489533][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/16 06:10:19 executed programs: 0
[ 81.987819][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.995624][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.003405][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.013908][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.022444][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.161950][ T5934] chnl_net:caif_netlink_parms(): no params data found
[ 82.230536][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.238171][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.245575][ T5934] bridge_slave_0: entered allmulticast mode
[ 82.252933][ T5934] bridge_slave_0: entered promiscuous mode
[ 82.260818][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.268497][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.275811][ T5934] bridge_slave_1: entered allmulticast mode
[ 82.283574][ T5934] bridge_slave_1: entered promiscuous mode
[ 82.312590][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.325604][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.359783][ T5934] team0: Port device team_slave_0 added
[ 82.368724][ T5934] team0: Port device team_slave_1 added
[ 82.395211][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.402377][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.429065][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.441524][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.448537][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.474524][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.515341][ T5934] hsr_slave_0: entered promiscuous mode
[ 82.522092][ T5934] hsr_slave_1: entered promiscuous mode
[ 82.528935][ T5934] debugfs: 'hsr0' already exists in 'hsr'
[ 82.534725][ T5934] Cannot create hsr debugfs directory
[ 83.097939][ T78] bridge_slave_1: left allmulticast mode
[ 83.104205][ T78] bridge_slave_1: left promiscuous mode
[ 83.111153][ T78] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.125242][ T78] bridge_slave_0: left allmulticast mode
[ 83.132504][ T78] bridge_slave_0: left promiscuous mode
[ 83.140260][ T78] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.500322][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.513521][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.525110][ T78] bond0 (unregistering): Released all slaves
[ 83.632877][ T78] hsr_slave_0: left promiscuous mode
[ 83.639205][ T78] hsr_slave_1: left promiscuous mode
[ 83.645570][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.653590][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.665299][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.673071][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.693847][ T78] veth1_macvtap: left promiscuous mode
[ 83.700000][ T78] veth0_macvtap: left promiscuous mode
[ 83.706966][ T78] veth1_vlan: left promiscuous mode
[ 83.712475][ T78] veth0_vlan: left promiscuous mode
[ 84.088078][ T53] Bluetooth: hci0: command tx timeout
[ 84.181164][ T78] team0 (unregistering): Port device team_slave_1 removed
[ 84.209847][ T78] team0 (unregistering): Port device team_slave_0 removed
[ 84.711969][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.728212][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.740077][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.759226][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.269637][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.291383][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.318495][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.325681][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.376182][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.383421][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.876837][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.939182][ T5934] veth0_vlan: entered promiscuous mode
[ 85.958421][ T5934] veth1_vlan: entered promiscuous mode
[ 86.019937][ T5934] veth0_macvtap: entered promiscuous mode
[ 86.035037][ T5934] veth1_macvtap: entered promiscuous mode
[ 86.060765][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.075245][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.091759][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.101890][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.119694][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.128915][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.167105][ T53] Bluetooth: hci0: command tx timeout
[ 86.188184][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.196026][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.224611][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.233079][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.307083][ C1] ==================================================================
[ 86.315190][ C1] BUG: KASAN: double-free in inet_sock_destruct+0x538/0x740
[ 86.322513][ C1] Free of addr ffff88807837b440 by task kworker/1:1/43
[ 86.329373][ C1]
[ 86.331726][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 86.331747][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 86.331758][ C1] Workqueue: rcu_gp process_srcu
[ 86.331787][ C1] Call Trace:
[ 86.331797][ C1]
[ 86.331803][ C1] dump_stack_lvl+0x189/0x250
[ 86.331819][ C1] ? rcu_is_watching+0x15/0xb0
[ 86.331834][ C1] ? __kasan_check_byte+0x12/0x40
[ 86.331849][ C1] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.331868][ C1] ? rcu_is_watching+0x15/0xb0
[ 86.331890][ C1] ? lock_release+0x4b/0x3d0
[ 86.331918][ C1] ? __virt_addr_valid+0x1c8/0x5c0
[ 86.331944][ C1] ? __virt_addr_valid+0x4a5/0x5c0
[ 86.331969][ C1] print_report+0xca/0x240
[ 86.331994][ C1] ? inet_sock_destruct+0x538/0x740
[ 86.332020][ C1] kasan_report_invalid_free+0xea/0x110
[ 86.332040][ C1] ? inet_sock_destruct+0x538/0x740
[ 86.332068][ C1] ? inet_sock_destruct+0x538/0x740
[ 86.332095][ C1] check_slab_allocation+0xe1/0x130
[ 86.332124][ C1] ? inet_sock_destruct+0x538/0x740
[ 86.332150][ C1] kfree+0x13f/0x6e0
[ 86.332175][ C1] inet_sock_destruct+0x538/0x740
[ 86.332202][ C1] ? inet6_cleanup_sock+0x18b/0x220
[ 86.332221][ C1] ? __pfx_sctp_v6_destruct_sock+0x10/0x10
[ 86.332241][ C1] __sk_destruct+0x85/0x880
[ 86.332254][ C1] ? __sk_free+0x2da/0x3f0
[ 86.332267][ C1] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10
[ 86.332284][ C1] ? rcu_core+0xc37/0x1770
[ 86.332303][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0
[ 86.332323][ C1] rcu_core+0xcab/0x1770
[ 86.332349][ C1] ? __pfx_rcu_core+0x10/0x10
[ 86.332368][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10
[ 86.332392][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0
[ 86.332429][ C1] handle_softirqs+0x27d/0x880
[ 86.332451][ C1] ? __irq_exit_rcu+0xca/0x1f0
[ 86.332474][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 86.332506][ C1] __irq_exit_rcu+0xca/0x1f0
[ 86.332526][ C1] ? __pfx___irq_exit_rcu+0x10/0x10
[ 86.332549][ C1] irq_exit_rcu+0x9/0x30
[ 86.332564][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 86.332585][ C1]
[ 86.332591][ C1]
[ 86.332597][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 86.332615][ C1] RIP: 0010:delay_tsc+0x55/0xc0
[ 86.332640][ C1] Code: 09 c6 0f 01 f9 66 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 32 ab 2e f6 65 8b 05 fb f5 57 07 <85> c0 74 1c f3 90 bf 01 00 00 00 e8 6b a9 2e f6 e8 a6 73 01 00 39
[ 86.332652][ C1] RSP: 0018:ffffc90000b378b0 EFLAGS: 00000297
[ 86.332666][ C1] RAX: 0000000080000000 RBX: 0000000000002afa RCX: 0000000000000000
[ 86.332679][ C1] RDX: 000000000000002e RSI: ffffffff8be14140 RDI: 00000000ffffffff
[ 86.332691][ C1] RBP: 0000000000000001 R08: ffffe8ffffdb0807 R09: 1ffffd1ffffb6100
[ 86.332702][ C1] R10: dffffc0000000000 R11: ffffffff8b6289e0 R12: 0000000000000000
[ 86.332715][ C1] R13: 0000000000000001 R14: 0000002ea9cd2cb2 R15: 0000000000002910
[ 86.332728][ C1] ? __pfx_delay_tsc+0x10/0x10
[ 86.332756][ C1] try_check_zero+0x5a9/0x680
[ 86.332779][ C1] process_srcu+0x2c6/0x1410
[ 86.332802][ C1] ? process_one_work+0x868/0x15e0
[ 86.332821][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.332840][ C1] ? process_one_work+0x868/0x15e0
[ 86.332857][ C1] process_one_work+0x93a/0x15e0
[ 86.332875][ C1] ? __lock_acquire+0xab9/0xd20
[ 86.332901][ C1] ? __pfx_process_one_work+0x10/0x10
[ 86.332923][ C1] ? assign_work+0x3a1/0x410
[ 86.332942][ C1] worker_thread+0x9b0/0xee0
[ 86.332972][ C1] kthread+0x711/0x8a0
[ 86.332995][ C1] ? __pfx_worker_thread+0x10/0x10
[ 86.333013][ C1] ? __pfx_kthread+0x10/0x10
[ 86.333038][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.333054][ C1] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.333073][ C1] ? __pfx_kthread+0x10/0x10
[ 86.333097][ C1] ret_from_fork+0x599/0xb30
[ 86.333117][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 86.333139][ C1] ? __switch_to_asm+0x39/0x70
[ 86.333162][ C1] ? __switch_to_asm+0x33/0x70
[ 86.333186][ C1] ? __pfx_kthread+0x10/0x10
[ 86.333210][ C1] ret_from_fork_asm+0x1a/0x30
[ 86.333241][ C1]
[ 86.333247][ C1]
[ 86.736375][ C1] Allocated by task 6008:
[ 86.740691][ C1] kasan_save_track+0x3e/0x80
[ 86.745417][ C1] __kasan_kmalloc+0x93/0xb0
[ 86.750009][ C1] __kmalloc_noprof+0x41d/0x800
[ 86.754864][ C1] ip_options_get+0x51/0x4c0
[ 86.759455][ C1] do_ip_setsockopt+0x1d9b/0x2d00
[ 86.764564][ C1] ip_setsockopt+0x66/0x110
[ 86.769048][ C1] do_sock_setsockopt+0x17c/0x1b0
[ 86.774067][ C1] __x64_sys_setsockopt+0x13f/0x1b0
[ 86.779253][ C1] do_syscall_64+0xfa/0xfa0
[ 86.783742][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.789614][ C1]
[ 86.791920][ C1] Freed by task 43:
[ 86.795704][ C1] kasan_save_track+0x3e/0x80
[ 86.800369][ C1] kasan_save_free_info+0x46/0x50
[ 86.805376][ C1] __kasan_slab_free+0x5c/0x80
[ 86.810126][ C1] kfree+0x191/0x6e0
[ 86.814010][ C1] inet_sock_destruct+0x538/0x740
[ 86.819022][ C1] __sk_destruct+0x85/0x880
[ 86.823505][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0
[ 86.828948][ C1] rcu_core+0xcab/0x1770
[ 86.833174][ C1] handle_softirqs+0x27d/0x880
[ 86.837920][ C1] __irq_exit_rcu+0xca/0x1f0
[ 86.842495][ C1] irq_exit_rcu+0x9/0x30
[ 86.846722][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 86.852338][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 86.858390][ C1]
[ 86.860704][ C1] The buggy address belongs to the object at ffff88807837b440
[ 86.860704][ C1] which belongs to the cache kmalloc-32 of size 32
[ 86.874590][ C1] The buggy address is located 0 bytes inside of
[ 86.874590][ C1] 32-byte region [ffff88807837b440, ffff88807837b460)
[ 86.887593][ C1]
[ 86.889910][ C1] The buggy address belongs to the physical page:
[ 86.896315][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7837b
[ 86.905059][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 86.912160][ C1] page_type: f5(slab)
[ 86.916128][ C1] raw: 00fff00000000000 ffff88813fe26780 dead000000000100 dead000000000122
[ 86.924695][ C1] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000
[ 86.933256][ C1] page dumped because: kasan: bad access detected
[ 86.939660][ C1] page_owner tracks the page as allocated
[ 86.945357][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5722, tgid 5722 (dhcpcd-run-hook), ts 59547169378, free_ts 59544815229
[ 86.963750][ C1] post_alloc_hook+0x240/0x2a0
[ 86.968509][ C1] get_page_from_freelist+0x2365/0x2440
[ 86.974040][ C1] __alloc_frozen_pages_noprof+0x181/0x370
[ 86.979831][ C1] alloc_pages_mpol+0x232/0x4a0
[ 86.984666][ C1] allocate_slab+0x96/0x350
[ 86.989160][ C1] ___slab_alloc+0xf56/0x1990
[ 86.993834][ C1] __slab_alloc+0x65/0x100
[ 86.998325][ C1] __kmalloc_cache_noprof+0x41e/0x700
[ 87.003694][ C1] kmem_cache_free+0x166/0x6a0
[ 87.008534][ C1] exit_mmap+0x52c/0xb40
[ 87.012763][ C1] __mmput+0x118/0x430
[ 87.016815][ C1] exec_mmap+0x6ac/0x7d0
[ 87.021045][ C1] begin_new_exec+0x12c6/0x2160
[ 87.025930][ C1] load_elf_binary+0x998/0x2740
[ 87.030890][ C1] bprm_execve+0x92f/0x1440
[ 87.035408][ C1] do_execveat_common+0x510/0x6a0
[ 87.040436][ C1] page last free pid 5722 tgid 5722 stack trace:
[ 87.046766][ C1] __free_frozen_pages+0xbc8/0xd30
[ 87.051867][ C1] tlb_finish_mmu+0x112/0x1d0
[ 87.056528][ C1] exit_mmap+0x439/0xb40
[ 87.060758][ C1] __mmput+0x118/0x430
[ 87.064812][ C1] exec_mmap+0x6ac/0x7d0
[ 87.069041][ C1] begin_new_exec+0x12c6/0x2160
[ 87.073883][ C1] load_elf_binary+0x998/0x2740
[ 87.078720][ C1] bprm_execve+0x92f/0x1440
[ 87.083207][ C1] do_execveat_common+0x510/0x6a0
[ 87.088219][ C1] __x64_sys_execve+0x94/0xb0
[ 87.092883][ C1] do_syscall_64+0xfa/0xfa0
[ 87.097376][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.103255][ C1]
[ 87.105573][ C1] Memory state around the buggy address:
[ 87.111188][ C1] ffff88807837b300: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 87.119229][ C1] ffff88807837b380: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 87.127276][ C1] >ffff88807837b400: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 87.135318][ C1] ^
[ 87.141457][ C1] ffff88807837b480: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 87.149601][ C1] ffff88807837b500: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 87.157645][ C1] ==================================================================
[ 87.165759][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.172961][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 87.182323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 87.192388][ C1] Workqueue: rcu_gp process_srcu
[ 87.197422][ C1] Call Trace:
[ 87.200702][ C1]
[ 87.203546][ C1] dump_stack_lvl+0x99/0x250
[ 87.208167][ C1] ? __asan_memcpy+0x40/0x70
[ 87.212760][ C1] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.217956][ C1] ? __pfx__printk+0x10/0x10
[ 87.222566][ C1] vpanic+0x237/0x6d0
[ 87.226565][ C1] ? __pfx_vpanic+0x10/0x10
[ 87.231068][ C1] panic+0xb9/0xc0
[ 87.235217][ C1] ? __pfx_panic+0x10/0x10
[ 87.239641][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 87.245731][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 87.251629][ C1] check_panic_on_warn+0x89/0xb0
[ 87.256564][ C1] end_report+0x6f/0x160
[ 87.260799][ C1] ? inet_sock_destruct+0x538/0x740
[ 87.265988][ C1] kasan_report_invalid_free+0xfa/0x110
[ 87.271517][ C1] ? inet_sock_destruct+0x538/0x740
[ 87.276707][ C1] ? inet_sock_destruct+0x538/0x740
[ 87.281898][ C1] check_slab_allocation+0xe1/0x130
[ 87.287086][ C1] ? inet_sock_destruct+0x538/0x740
[ 87.292358][ C1] kfree+0x13f/0x6e0
[ 87.296241][ C1] inet_sock_destruct+0x538/0x740
[ 87.301254][ C1] ? inet6_cleanup_sock+0x18b/0x220
[ 87.306452][ C1] ? __pfx_sctp_v6_destruct_sock+0x10/0x10
[ 87.312244][ C1] __sk_destruct+0x85/0x880
[ 87.316729][ C1] ? __sk_free+0x2da/0x3f0
[ 87.321143][ C1] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10
[ 87.327297][ C1] ? rcu_core+0xc37/0x1770
[ 87.331703][ C1] sctp_endpoint_destroy_rcu+0xa1/0xf0
[ 87.337147][ C1] rcu_core+0xcab/0x1770
[ 87.341380][ C1] ? __pfx_rcu_core+0x10/0x10
[ 87.346044][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10
[ 87.351668][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0
[ 87.357908][ C1] handle_softirqs+0x27d/0x880
[ 87.362664][ C1] ? __irq_exit_rcu+0xca/0x1f0
[ 87.367415][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 87.372688][ C1] __irq_exit_rcu+0xca/0x1f0
[ 87.377280][ C1] ? __pfx___irq_exit_rcu+0x10/0x10
[ 87.382467][ C1] irq_exit_rcu+0x9/0x30
[ 87.386696][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 87.392402][ C1]
[ 87.395326][ C1]
[ 87.398245][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 87.404211][ C1] RIP: 0010:delay_tsc+0x55/0xc0
[ 87.409141][ C1] Code: 09 c6 0f 01 f9 66 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 32 ab 2e f6 65 8b 05 fb f5 57 07 <85> c0 74 1c f3 90 bf 01 00 00 00 e8 6b a9 2e f6 e8 a6 73 01 00 39
[ 87.431425][ C1] RSP: 0018:ffffc90000b378b0 EFLAGS: 00000297
[ 87.437571][ C1] RAX: 0000000080000000 RBX: 0000000000002afa RCX: 0000000000000000
[ 87.445629][ C1] RDX: 000000000000002e RSI: ffffffff8be14140 RDI: 00000000ffffffff
[ 87.453586][ C1] RBP: 0000000000000001 R08: ffffe8ffffdb0807 R09: 1ffffd1ffffb6100
[ 87.461628][ C1] R10: dffffc0000000000 R11: ffffffff8b6289e0 R12: 0000000000000000
[ 87.469585][ C1] R13: 0000000000000001 R14: 0000002ea9cd2cb2 R15: 0000000000002910
[ 87.477636][ C1] ? __pfx_delay_tsc+0x10/0x10
[ 87.482452][ C1] try_check_zero+0x5a9/0x680
[ 87.487119][ C1] process_srcu+0x2c6/0x1410
[ 87.491702][ C1] ? process_one_work+0x868/0x15e0
[ 87.496801][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.501982][ C1] ? process_one_work+0x868/0x15e0
[ 87.507075][ C1] process_one_work+0x93a/0x15e0
[ 87.511997][ C1] ? __lock_acquire+0xab9/0xd20
[ 87.516840][ C1] ? __pfx_process_one_work+0x10/0x10
[ 87.522198][ C1] ? assign_work+0x3a1/0x410
[ 87.526772][ C1] worker_thread+0x9b0/0xee0
[ 87.531356][ C1] kthread+0x711/0x8a0
[ 87.535414][ C1] ? __pfx_worker_thread+0x10/0x10
[ 87.540518][ C1] ? __pfx_kthread+0x10/0x10
[ 87.545111][ C1] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.550310][ C1] ? lockdep_hardirqs_on+0x9c/0x150
[ 87.555495][ C1] ? __pfx_kthread+0x10/0x10
[ 87.560078][ C1] ret_from_fork+0x599/0xb30
[ 87.564658][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 87.569754][ C1] ? __switch_to_asm+0x39/0x70
[ 87.574507][ C1] ? __switch_to_asm+0x33/0x70
[ 87.579271][ C1] ? __pfx_kthread+0x10/0x10
[ 87.583849][ C1] ret_from_fork_asm+0x1a/0x30
[ 87.588604][ C1]
[ 87.591872][ C1] Kernel Offset: disabled
[ 87.596180][ C1] Rebooting in 86400 seconds..