Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts.
2026/03/12 07:59:40 parsed 1 programs
[ 72.079794][ T4188] cgroup: Unknown subsys name 'net'
[ 72.200151][ T4188] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.796222][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 76.479305][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.493140][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.505646][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.533620][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.541575][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.550175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 76.802316][ T4239] chnl_net:caif_netlink_parms(): no params data found
[ 76.877446][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.886753][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.895574][ T4239] device bridge_slave_0 entered promiscuous mode
[ 76.905878][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.914366][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.922630][ T4239] device bridge_slave_1 entered promiscuous mode
[ 76.953042][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.967334][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.999723][ T4239] team0: Port device team_slave_0 added
[ 77.008242][ T4239] team0: Port device team_slave_1 added
[ 77.035642][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.042650][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.070869][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.085136][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.092143][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.119775][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.161748][ T4239] device hsr_slave_0 entered promiscuous mode
[ 77.170769][ T4239] device hsr_slave_1 entered promiscuous mode
[ 77.308073][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.320640][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.337104][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.347612][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.377961][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.385313][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.393840][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.400948][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.435349][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.447244][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.500591][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.521761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.538294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.550121][ T4239] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.567127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.581807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.592900][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.600074][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.619945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.629256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.638360][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.648624][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.673179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.689633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.700619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.712589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.731611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.741996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.751071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.760125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.770091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.782399][ T4239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.794339][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.802430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 77.812135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.904554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.912141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.933838][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.951506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.961228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.980613][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.990161][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.999072][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 78.007745][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 78.036817][ T4239] device veth0_vlan entered promiscuous mode
[ 78.048647][ T4239] device veth1_vlan entered promiscuous mode
[ 78.069567][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 78.078612][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 78.088269][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 78.097077][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 78.108990][ T4239] device veth0_macvtap entered promiscuous mode
[ 78.119686][ T4239] device veth1_macvtap entered promiscuous mode
[ 78.152350][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.160165][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 78.171638][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 78.181600][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 78.190716][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 78.217183][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.226583][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 78.236069][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.246374][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.255635][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.264927][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.273869][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/03/12 07:59:50 executed programs: 0
[ 79.939251][ T4290] chnl_net:caif_netlink_parms(): no params data found
[ 80.019836][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.028377][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.037828][ T4290] device bridge_slave_0 entered promiscuous mode
[ 80.048712][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.057286][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.066872][ T4290] device bridge_slave_1 entered promiscuous mode
[ 80.094561][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.106566][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.136569][ T4290] team0: Port device team_slave_0 added
[ 80.145530][ T4290] team0: Port device team_slave_1 added
[ 80.167777][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.174933][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.201255][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.214516][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.221508][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.248617][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.289047][ T4290] device hsr_slave_0 entered promiscuous mode
[ 80.296150][ T4290] device hsr_slave_1 entered promiscuous mode
[ 80.303260][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 80.311222][ T4290] Cannot create hsr debugfs directory
[ 80.404450][ T4290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.834131][ T4255] Bluetooth: hci0: command 0x0409 tx timeout
[ 82.962112][ T4290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.010163][ T4290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.099896][ T4290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.216592][ T4290] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.227308][ T4290] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.237260][ T4290] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.247330][ T4290] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.311942][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.340004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 83.348003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 83.359528][ T4290] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.369871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 83.379207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 83.388125][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.395356][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.427089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 83.435785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 83.445799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 83.456610][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.463779][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.484915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 83.494585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 83.504057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 83.513734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 83.527862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 83.536651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 83.545884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 83.557515][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 83.566598][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 83.596038][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 83.605331][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 83.616472][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 83.737305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 83.745212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 83.758291][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.774432][ T9] device hsr_slave_0 left promiscuous mode
[ 83.781053][ T9] device hsr_slave_1 left promiscuous mode
[ 83.787946][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.796216][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.804616][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.812040][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.820568][ T9] device bridge_slave_1 left promiscuous mode
[ 83.827807][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.847086][ T9] device bridge_slave_0 left promiscuous mode
[ 83.853625][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.871297][ T9] device veth1_macvtap left promiscuous mode
[ 83.877735][ T9] device veth0_macvtap left promiscuous mode
[ 83.884103][ T9] device veth1_vlan left promiscuous mode
[ 83.890128][ T9] device veth0_vlan left promiscuous mode
[ 83.924137][ T4255] Bluetooth: hci0: command 0x041b tx timeout
[ 84.081433][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 84.096852][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 84.111323][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 84.130035][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 84.193405][ T9] bond0 (unregistering): Released all slaves
[ 84.269963][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 84.279449][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 84.300142][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 84.308845][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 84.320275][ T4290] device veth0_vlan entered promiscuous mode
[ 84.329045][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 84.337458][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 84.350237][ T4290] device veth1_vlan entered promiscuous mode
[ 84.387758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 84.397017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 84.409459][ T4290] device veth0_macvtap entered promiscuous mode
[ 84.421361][ T4290] device veth1_macvtap entered promiscuous mode
[ 84.445655][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.455596][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 84.464717][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 84.473266][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 84.482220][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 84.494433][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.501799][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 84.510979][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 84.523700][ T4290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.532466][ T4290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.543256][ T4290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.552014][ T4290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.621607][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.630149][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.645100][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 84.663806][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.671813][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.686288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 84.738263][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 84.791891][ T4312] ==================================================================
[ 84.800381][ T4312] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 84.807645][ T4312] Read of size 4 at addr ffff88807582a838 by task syz.0.19/4312
[ 84.815324][ T4312]
[ 84.817699][ T4312] CPU: 1 PID: 4312 Comm: syz.0.19 Not tainted syzkaller #0
[ 84.824948][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 84.835151][ T4312] Call Trace:
[ 84.838483][ T4312]
2026/03/12 07:59:55 executed programs: 3
[ 84.841462][ T4312] dump_stack_lvl+0x188/0x250
[ 84.846188][ T4312] ? show_regs_print_info+0x20/0x20
[ 84.851436][ T4312] ? _printk+0xda/0x130
[ 84.855651][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 84.860600][ T4312] ? load_image+0x400/0x400
[ 84.865154][ T4312] print_address_description+0x60/0x2d0
[ 84.870751][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 84.875649][ T4312] kasan_report+0xdf/0x130
[ 84.880112][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 84.885173][ T4312] ax25_fillin_cb+0x459/0x640
[ 84.889892][ T4312] ax25_setsockopt+0x8c9/0xa60
[ 84.894732][ T4312] ? ax25_shutdown+0x10/0x10
[ 84.899370][ T4312] ? aa_sock_opt_perm+0x74/0x100
[ 84.904340][ T4312] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 84.909935][ T4312] ? security_socket_setsockopt+0x7a/0xa0
[ 84.915696][ T4312] ? ax25_shutdown+0x10/0x10
[ 84.920322][ T4312] __sys_setsockopt+0x2bf/0x3d0
[ 84.925230][ T4312] __x64_sys_setsockopt+0xb1/0xc0
[ 84.930319][ T4312] do_syscall_64+0x4c/0xa0
[ 84.934763][ T4312] ? clear_bhb_loop+0x30/0x80
[ 84.939485][ T4312] ? clear_bhb_loop+0x30/0x80
[ 84.944192][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.950128][ T4312] RIP: 0033:0x7ffbe9b8a799
[ 84.954609][ T4312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.974243][ T4312] RSP: 002b:00007ffe36b2e878 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 84.982689][ T4312] RAX: ffffffffffffffda RBX: 00007ffbe9e03fa0 RCX: 00007ffbe9b8a799
[ 84.990688][ T4312] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 84.998696][ T4312] RBP: 00007ffbe9c20c99 R08: 0000000000000010 R09: 0000000000000000
[ 85.006954][ T4312] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 85.014985][ T4312] R13: 00007ffbe9e03fac R14: 00007ffbe9e03fa0 R15: 00007ffbe9e03fa0
[ 85.023020][ T4312]
[ 85.026075][ T4312]
[ 85.028423][ T4312] Allocated by task 4310:
[ 85.032789][ T4312] __kasan_kmalloc+0xb5/0xf0
[ 85.037500][ T4312] ax25_dev_device_up+0x50/0x580
[ 85.042471][ T4312] ax25_device_event+0x483/0x4f0
[ 85.047446][ T4312] raw_notifier_call_chain+0xcb/0x160
[ 85.052861][ T4312] __dev_notify_flags+0x194/0x300
[ 85.057926][ T4312] dev_change_flags+0xe3/0x1a0
[ 85.062712][ T4312] dev_ifsioc+0x130/0xd50
[ 85.067086][ T4312] dev_ioctl+0x545/0xe30
[ 85.071354][ T4312] sock_do_ioctl+0x245/0x320
[ 85.075971][ T4312] sock_ioctl+0x4d2/0x710
[ 85.080528][ T4312] __se_sys_ioctl+0xfa/0x170
[ 85.085254][ T4312] do_syscall_64+0x4c/0xa0
[ 85.089744][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 85.095790][ T4312]
[ 85.098145][ T4312] Freed by task 4311:
[ 85.102145][ T4312] kasan_set_track+0x4b/0x70
[ 85.106813][ T4312] kasan_set_free_info+0x1f/0x40
[ 85.111796][ T4312] ____kasan_slab_free+0xd5/0x110
[ 85.116850][ T4312] slab_free_freelist_hook+0xea/0x170
[ 85.122253][ T4312] kfree+0xef/0x2a0
[ 85.126103][ T4312] ax25_release+0x661/0x870
[ 85.130630][ T4312] sock_close+0xd5/0x240
[ 85.134896][ T4312] __fput+0x234/0x930
[ 85.138907][ T4312] task_work_run+0x125/0x1a0
[ 85.143529][ T4312] exit_to_user_mode_loop+0x10f/0x130
[ 85.148930][ T4312] exit_to_user_mode_prepare+0xee/0x180
[ 85.154498][ T4312] syscall_exit_to_user_mode+0x16/0x40
[ 85.160082][ T4312] do_syscall_64+0x58/0xa0
[ 85.164519][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 85.170490][ T4312]
[ 85.172842][ T4312] The buggy address belongs to the object at ffff88807582a800
[ 85.172842][ T4312] which belongs to the cache kmalloc-192 of size 192
[ 85.187111][ T4312] The buggy address is located 56 bytes inside of
[ 85.187111][ T4312] 192-byte region [ffff88807582a800, ffff88807582a8c0)
[ 85.200532][ T4312] The buggy address belongs to the page:
[ 85.206202][ T4312] page:ffffea0001d60a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7582a
[ 85.216487][ T4312] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 85.224077][ T4312] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41a00
[ 85.232696][ T4312] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 85.241304][ T4312] page dumped because: kasan: bad access detected
[ 85.247757][ T4312] page_owner tracks the page as allocated
[ 85.253497][ T4312] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1444, ts 84723623564, free_ts 84707436572
[ 85.269777][ T4312] get_page_from_freelist+0x1bbd/0x1ca0
[ 85.275464][ T4312] __alloc_pages+0x1ee/0x480
[ 85.280091][ T4312] new_slab+0xb6/0x4b0
[ 85.284190][ T4312] ___slab_alloc+0x80a/0xdd0
[ 85.288846][ T4312] __kmalloc_node+0x200/0x3b0
[ 85.293638][ T4312] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 85.299512][ T4312] new_slab+0x100/0x4b0
[ 85.303702][ T4312] ___slab_alloc+0x80a/0xdd0
[ 85.308317][ T4312] kmem_cache_alloc+0x195/0x290
[ 85.313200][ T4312] __d_alloc+0x2a/0x6f0
[ 85.317394][ T4312] d_alloc_parallel+0x7b/0x1330
[ 85.322274][ T4312] __lookup_slow+0x134/0x410
[ 85.326894][ T4312] lookup_one_len+0x19d/0x2d0
[ 85.331602][ T4312] start_creating+0x184/0x310
[ 85.336303][ T4312] __debugfs_create_file+0x6f/0x510
[ 85.341733][ T4312] ieee80211_sta_debugfs_add+0x1e2/0x780
[ 85.347573][ T4312] page last free stack trace:
[ 85.352279][ T4312] free_unref_page_prepare+0x637/0x6c0
[ 85.357770][ T4312] free_unref_page+0x8f/0x2a0
[ 85.362604][ T4312] __unfreeze_partials+0x1a5/0x200
[ 85.367765][ T4312] put_cpu_partial+0x12d/0x190
[ 85.372591][ T4312] qlist_free_all+0x35/0x90
[ 85.377236][ T4312] kasan_quarantine_reduce+0x150/0x160
[ 85.382739][ T4312] __kasan_slab_alloc+0x2f/0xd0
[ 85.387637][ T4312] slab_post_alloc_hook+0x4c/0x380
[ 85.393226][ T4312] kmem_cache_alloc+0x100/0x290
[ 85.398110][ T4312] getname_kernel+0x56/0x2e0
[ 85.402742][ T4312] kern_path+0x1f/0x190
[ 85.406936][ T4312] tomoyo_mount_permission+0x799/0x9b0
[ 85.412430][ T4312] security_sb_mount+0x83/0xb0
[ 85.417229][ T4312] path_mount+0xb8/0x1030
[ 85.421596][ T4312] __se_sys_mount+0x2e3/0x3d0
[ 85.426318][ T4312] do_syscall_64+0x4c/0xa0
[ 85.430772][ T4312]
[ 85.433114][ T4312] Memory state around the buggy address:
[ 85.438771][ T4312] ffff88807582a700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.446949][ T4312] ffff88807582a780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 85.455036][ T4312] >ffff88807582a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.463117][ T4312] ^
[ 85.469033][ T4312] ffff88807582a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 85.477126][ T4312] ffff88807582a900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.485207][ T4312] ==================================================================
[ 85.493379][ T4312] Disabling lock debugging due to kernel taint
[ 85.504675][ T4312] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.512016][ T4312] CPU: 1 PID: 4312 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 85.520637][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 85.530991][ T4312] Call Trace:
[ 85.534300][ T4312]
[ 85.537262][ T4312] dump_stack_lvl+0x188/0x250
[ 85.541978][ T4312] ? show_regs_print_info+0x20/0x20
[ 85.547217][ T4312] ? load_image+0x400/0x400
[ 85.551779][ T4312] panic+0x2e5/0x810
[ 85.555714][ T4312] ? bpf_jit_dump+0xd0/0xd0
[ 85.560244][ T4312] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 85.566265][ T4312] ? _raw_spin_unlock+0x40/0x40
[ 85.571146][ T4312] ? print_memory_metadata+0x314/0x400
[ 85.576634][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 85.581518][ T4312] check_panic_on_warn+0x80/0xa0
[ 85.586487][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 85.591369][ T4312] end_report+0x6d/0xf0
[ 85.595572][ T4312] kasan_report+0x102/0x130
[ 85.600139][ T4312] ? ax25_fillin_cb+0x459/0x640
[ 85.605015][ T4312] ax25_fillin_cb+0x459/0x640
[ 85.609728][ T4312] ax25_setsockopt+0x8c9/0xa60
[ 85.614531][ T4312] ? ax25_shutdown+0x10/0x10
[ 85.619167][ T4312] ? aa_sock_opt_perm+0x74/0x100
[ 85.624146][ T4312] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 85.629737][ T4312] ? security_socket_setsockopt+0x7a/0xa0
[ 85.635571][ T4312] ? ax25_shutdown+0x10/0x10
[ 85.640195][ T4312] __sys_setsockopt+0x2bf/0x3d0
[ 85.645176][ T4312] __x64_sys_setsockopt+0xb1/0xc0
[ 85.650537][ T4312] do_syscall_64+0x4c/0xa0
[ 85.655080][ T4312] ? clear_bhb_loop+0x30/0x80
[ 85.659782][ T4312] ? clear_bhb_loop+0x30/0x80
[ 85.664484][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 85.670407][ T4312] RIP: 0033:0x7ffbe9b8a799
[ 85.674853][ T4312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.694497][ T4312] RSP: 002b:00007ffe36b2e878 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 85.702945][ T4312] RAX: ffffffffffffffda RBX: 00007ffbe9e03fa0 RCX: 00007ffbe9b8a799
[ 85.710943][ T4312] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 85.719029][ T4312] RBP: 00007ffbe9c20c99 R08: 0000000000000010 R09: 0000000000000000
[ 85.727050][ T4312] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 85.735057][ T4312] R13: 00007ffbe9e03fac R14: 00007ffbe9e03fa0 R15: 00007ffbe9e03fa0
[ 85.743088][ T4312]
[ 85.746402][ T4312] Kernel Offset: disabled
[ 85.750745][ T4312] Rebooting in 86400 seconds..