Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts.
2025/10/05 14:37:45 parsed 1 programs
[ 65.184563][ T4189] cgroup: Unknown subsys name 'net'
[ 65.344532][ T4189] cgroup: Unknown subsys name 'rlimit'
[ 66.789731][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 68.329744][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.337915][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.351771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 68.364353][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.372656][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.385260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 70.106971][ T4239] chnl_net:caif_netlink_parms(): no params data found
[ 70.172412][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.179921][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.188163][ T4239] device bridge_slave_0 entered promiscuous mode
[ 70.197270][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.204884][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.213218][ T4239] device bridge_slave_1 entered promiscuous mode
[ 70.242329][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.254737][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.369061][ T4239] team0: Port device team_slave_0 added
[ 70.376912][ T4239] team0: Port device team_slave_1 added
[ 70.399714][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.406692][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.432818][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.445580][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.452740][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.479026][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.511323][ T4239] device hsr_slave_0 entered promiscuous mode
[ 70.518260][ T4239] device hsr_slave_1 entered promiscuous mode
[ 70.608600][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 70.619499][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 70.628509][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 70.637365][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 70.663137][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.670384][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.678362][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.685512][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.745747][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.758900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 70.769732][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.778601][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.786547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 70.800276][ T4239] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.826087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 70.835911][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.843034][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.856864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 70.866757][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.873873][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.908226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 70.919196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 70.930115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 70.956591][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 70.968934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 70.979877][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 71.091447][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 71.100226][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 71.112193][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.146555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 71.155375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 71.176836][ T4239] device veth0_vlan entered promiscuous mode
[ 71.185936][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 71.195070][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 71.205331][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 71.213332][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 71.237090][ T4239] device veth1_vlan entered promiscuous mode
[ 71.256713][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 71.265097][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 71.273638][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 71.282778][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 71.293544][ T4239] device veth0_macvtap entered promiscuous mode
[ 71.303997][ T4239] device veth1_macvtap entered promiscuous mode
[ 71.331774][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.331795][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.344381][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.345631][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.356894][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.370203][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.379221][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.388220][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.400797][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 71.409236][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 71.417136][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 71.426283][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 71.436535][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 71.445515][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 71.570994][ T4239] syz-executor (4239) used greatest stack depth: 20512 bytes left
2025/10/05 14:37:55 executed programs: 0
[ 73.059854][ T4297] chnl_net:caif_netlink_parms(): no params data found
[ 73.107624][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.114754][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.122792][ T4297] device bridge_slave_0 entered promiscuous mode
[ 73.132267][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.139491][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.147309][ T4297] device bridge_slave_1 entered promiscuous mode
[ 73.173882][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.188008][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.221539][ T4297] team0: Port device team_slave_0 added
[ 73.230292][ T4297] team0: Port device team_slave_1 added
[ 73.254647][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.261851][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.288071][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.301571][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.308750][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.335095][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.370554][ T4297] device hsr_slave_0 entered promiscuous mode
[ 73.377270][ T4297] device hsr_slave_1 entered promiscuous mode
[ 73.384748][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 73.393307][ T4297] Cannot create hsr debugfs directory
[ 73.469640][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.928451][ T4256] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.274716][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.353581][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.396087][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.491750][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.500789][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.511801][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.521764][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.612519][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.625674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 76.634051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 76.646997][ T4297] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.663609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 76.672945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.682450][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.689555][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.713787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 76.723497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 76.732422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 76.741100][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.748230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.770944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 76.780337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 76.790230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 76.800404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 76.809179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 76.818310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 76.826805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 76.835629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.844311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 76.873820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 76.882573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.892301][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 76.999187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.006680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.015886][ T4254] Bluetooth: hci0: command 0x041b tx timeout
[ 77.023168][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.057055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.066187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.085721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.094694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.106333][ T4297] device veth0_vlan entered promiscuous mode
[ 77.115137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.123509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.135254][ T1254] device hsr_slave_0 left promiscuous mode
[ 77.141832][ T1254] device hsr_slave_1 left promiscuous mode
[ 77.148850][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 77.156274][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 77.164572][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 77.172386][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 77.180273][ T1254] device bridge_slave_1 left promiscuous mode
[ 77.187085][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.203523][ T1254] device bridge_slave_0 left promiscuous mode
[ 77.209893][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.227720][ T1254] device veth1_macvtap left promiscuous mode
[ 77.233968][ T1254] device veth0_macvtap left promiscuous mode
[ 77.241446][ T1254] device veth1_vlan left promiscuous mode
[ 77.247360][ T1254] device veth0_vlan left promiscuous mode
[ 77.412843][ T1254] team0 (unregistering): Port device team_slave_1 removed
[ 77.429629][ T1254] team0 (unregistering): Port device team_slave_0 removed
[ 77.442872][ T1254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 77.456502][ T1254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 77.516004][ T1254] bond0 (unregistering): Released all slaves
[ 77.575816][ T4297] device veth1_vlan entered promiscuous mode
[ 77.601790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.610118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.618481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.626908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.638051][ T4297] device veth0_macvtap entered promiscuous mode
[ 77.654518][ T4297] device veth1_macvtap entered promiscuous mode
[ 77.674809][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.682593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.691506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.703317][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.710803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.720284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.735511][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.745189][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.755158][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.764160][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.826578][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.842230][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/05 14:38:00 executed programs: 2
[ 77.869785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.881365][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.891437][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.907764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.967204][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 78.022594][ T4328] ==================================================================
[ 78.030919][ T4328] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 78.038171][ T4328] Read of size 4 at addr ffff8880721ea738 by task syz.0.19/4328
[ 78.045828][ T4328]
[ 78.048183][ T4328] CPU: 0 PID: 4328 Comm: syz.0.19 Not tainted syzkaller #0
[ 78.055389][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 78.065455][ T4328] Call Trace:
[ 78.068745][ T4328]
[ 78.071681][ T4328] dump_stack_lvl+0x168/0x230
[ 78.076374][ T4328] ? show_regs_print_info+0x20/0x20
[ 78.081686][ T4328] ? _printk+0xcc/0x110
[ 78.085864][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.090735][ T4328] ? load_image+0x3b0/0x3b0
[ 78.095267][ T4328] print_address_description+0x60/0x2d0
[ 78.100923][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.105799][ T4328] kasan_report+0xdf/0x130
[ 78.110237][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.115109][ T4328] ax25_fillin_cb+0x459/0x640
[ 78.119805][ T4328] ax25_setsockopt+0x8a2/0xa40
[ 78.124607][ T4328] ? ax25_shutdown+0x10/0x10
[ 78.129215][ T4328] ? aa_sock_opt_perm+0x74/0x100
[ 78.134169][ T4328] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 78.139733][ T4328] ? security_socket_setsockopt+0x7a/0xa0
[ 78.145463][ T4328] ? ax25_shutdown+0x10/0x10
[ 78.150073][ T4328] __sys_setsockopt+0x2bf/0x3d0
[ 78.154949][ T4328] __x64_sys_setsockopt+0xb1/0xc0
[ 78.160005][ T4328] do_syscall_64+0x4c/0xa0
[ 78.164433][ T4328] ? clear_bhb_loop+0x30/0x80
[ 78.169123][ T4328] ? clear_bhb_loop+0x30/0x80
[ 78.173824][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.179749][ T4328] RIP: 0033:0x7f78b3fd1ec9
[ 78.184183][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.203805][ T4328] RSP: 002b:00007ffc3d1b5258 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 78.212359][ T4328] RAX: ffffffffffffffda RBX: 00007f78b4228fa0 RCX: 00007f78b3fd1ec9
[ 78.220361][ T4328] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 78.228357][ T4328] RBP: 00007f78b4054f91 R08: 0000000000000010 R09: 0000000000000000
[ 78.236352][ T4328] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 78.244348][ T4328] R13: 00007f78b4228fa0 R14: 00007f78b4228fa0 R15: 0000000000000005
[ 78.252532][ T4328]
[ 78.255560][ T4328]
[ 78.257889][ T4328] Allocated by task 4326:
[ 78.262335][ T4328] __kasan_kmalloc+0xb5/0xf0
[ 78.266959][ T4328] ax25_dev_device_up+0x50/0x580
[ 78.271919][ T4328] ax25_device_event+0x483/0x4f0
[ 78.276878][ T4328] raw_notifier_call_chain+0xcb/0x160
[ 78.282265][ T4328] __dev_notify_flags+0x178/0x2d0
[ 78.287307][ T4328] dev_change_flags+0xe3/0x1a0
[ 78.292084][ T4328] dev_ifsioc+0x147/0xe70
[ 78.296431][ T4328] dev_ioctl+0x55f/0xe50
[ 78.300775][ T4328] sock_do_ioctl+0x222/0x2f0
[ 78.305387][ T4328] sock_ioctl+0x4ed/0x6e0
[ 78.309753][ T4328] __se_sys_ioctl+0xfa/0x170
[ 78.314357][ T4328] do_syscall_64+0x4c/0xa0
[ 78.318808][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.324725][ T4328]
[ 78.327055][ T4328] Freed by task 4327:
[ 78.331042][ T4328] kasan_set_track+0x4b/0x70
[ 78.335653][ T4328] kasan_set_free_info+0x1f/0x40
[ 78.340697][ T4328] ____kasan_slab_free+0xd5/0x110
[ 78.345732][ T4328] slab_free_freelist_hook+0xea/0x170
[ 78.351215][ T4328] kfree+0xef/0x2a0
[ 78.355032][ T4328] ax25_release+0x661/0x870
[ 78.359548][ T4328] sock_close+0xd5/0x240
[ 78.363806][ T4328] __fput+0x234/0x930
[ 78.367805][ T4328] task_work_run+0x125/0x1a0
[ 78.372410][ T4328] exit_to_user_mode_loop+0x10f/0x130
[ 78.377805][ T4328] exit_to_user_mode_prepare+0xee/0x180
[ 78.383364][ T4328] syscall_exit_to_user_mode+0x16/0x40
[ 78.388860][ T4328] do_syscall_64+0x58/0xa0
[ 78.393304][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.399210][ T4328]
[ 78.401629][ T4328] The buggy address belongs to the object at ffff8880721ea700
[ 78.401629][ T4328] which belongs to the cache kmalloc-192 of size 192
[ 78.415688][ T4328] The buggy address is located 56 bytes inside of
[ 78.415688][ T4328] 192-byte region [ffff8880721ea700, ffff8880721ea7c0)
[ 78.428891][ T4328] The buggy address belongs to the page:
[ 78.434547][ T4328] page:ffffea0001c87a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x721ea
[ 78.444709][ T4328] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 78.452275][ T4328] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00
[ 78.461030][ T4328] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 78.469747][ T4328] page dumped because: kasan: bad access detected
[ 78.476181][ T4328] page_owner tracks the page as allocated
[ 78.481989][ T4328] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4297, ts 77883278289, free_ts 77863028958
[ 78.497979][ T4328] get_page_from_freelist+0x1b77/0x1c60
[ 78.503559][ T4328] __alloc_pages+0x1e1/0x470
[ 78.508168][ T4328] new_slab+0xb6/0x4b0
[ 78.512245][ T4328] ___slab_alloc+0x81e/0xdf0
[ 78.516846][ T4328] __kmalloc_node+0x200/0x3b0
[ 78.521561][ T4328] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 78.527524][ T4328] new_slab+0x100/0x4b0
[ 78.531704][ T4328] ___slab_alloc+0x81e/0xdf0
[ 78.536316][ T4328] kmem_cache_alloc+0x195/0x290
[ 78.541199][ T4328] sock_alloc_inode+0x17/0xb0
[ 78.545900][ T4328] new_inode_pseudo+0x5f/0x210
[ 78.550693][ T4328] __sock_create+0x129/0x900
[ 78.555301][ T4328] __sys_socket+0xe2/0x170
[ 78.559732][ T4328] __x64_sys_socket+0x76/0x80
[ 78.564429][ T4328] do_syscall_64+0x4c/0xa0
[ 78.568858][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.574763][ T4328] page last free stack trace:
[ 78.579445][ T4328] free_unref_page_prepare+0x637/0x6c0
[ 78.585619][ T4328] free_unref_page+0x94/0x280
[ 78.590307][ T4328] __vunmap+0x8ab/0xa40
[ 78.594473][ T4328] free_work+0x56/0x80
[ 78.598638][ T4328] process_one_work+0x863/0x1000
[ 78.603609][ T4328] worker_thread+0xaa8/0x12a0
[ 78.608311][ T4328] kthread+0x436/0x520
[ 78.612389][ T4328] ret_from_fork+0x1f/0x30
[ 78.616819][ T4328]
[ 78.619155][ T4328] Memory state around the buggy address:
[ 78.624797][ T4328] ffff8880721ea600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.632965][ T4328] ffff8880721ea680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 78.641035][ T4328] >ffff8880721ea700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.649101][ T4328] ^
[ 78.655002][ T4328] ffff8880721ea780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 78.663066][ T4328] ffff8880721ea800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.671136][ T4328] ==================================================================
[ 78.679210][ T4328] Disabling lock debugging due to kernel taint
[ 78.696515][ T4328] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.703774][ T4328] CPU: 0 PID: 4328 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 78.712376][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 78.722441][ T4328] Call Trace:
[ 78.725771][ T4328]
[ 78.728716][ T4328] dump_stack_lvl+0x168/0x230
[ 78.733519][ T4328] ? show_regs_print_info+0x20/0x20
[ 78.738800][ T4328] ? load_image+0x3b0/0x3b0
[ 78.743334][ T4328] panic+0x2c9/0x7f0
[ 78.747253][ T4328] ? bpf_jit_dump+0xd0/0xd0
[ 78.751779][ T4328] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 78.757687][ T4328] ? _raw_spin_unlock+0x40/0x40
[ 78.762545][ T4328] ? print_memory_metadata+0x314/0x400
[ 78.768015][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.772872][ T4328] check_panic_on_warn+0x80/0xa0
[ 78.777823][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.782691][ T4328] end_report+0x6d/0xf0
[ 78.786856][ T4328] kasan_report+0x102/0x130
[ 78.791363][ T4328] ? ax25_fillin_cb+0x459/0x640
[ 78.796225][ T4328] ax25_fillin_cb+0x459/0x640
[ 78.800922][ T4328] ax25_setsockopt+0x8a2/0xa40
[ 78.805732][ T4328] ? ax25_shutdown+0x10/0x10
[ 78.810328][ T4328] ? aa_sock_opt_perm+0x74/0x100
[ 78.815269][ T4328] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 78.820834][ T4328] ? security_socket_setsockopt+0x7a/0xa0
[ 78.826560][ T4328] ? ax25_shutdown+0x10/0x10
[ 78.831157][ T4328] __sys_setsockopt+0x2bf/0x3d0
[ 78.836015][ T4328] __x64_sys_setsockopt+0xb1/0xc0
[ 78.841059][ T4328] do_syscall_64+0x4c/0xa0
[ 78.845475][ T4328] ? clear_bhb_loop+0x30/0x80
[ 78.850144][ T4328] ? clear_bhb_loop+0x30/0x80
[ 78.854831][ T4328] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.860718][ T4328] RIP: 0033:0x7f78b3fd1ec9
[ 78.865126][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.884726][ T4328] RSP: 002b:00007ffc3d1b5258 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 78.893129][ T4328] RAX: ffffffffffffffda RBX: 00007f78b4228fa0 RCX: 00007f78b3fd1ec9
[ 78.901132][ T4328] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 78.909102][ T4328] RBP: 00007f78b4054f91 R08: 0000000000000010 R09: 0000000000000000
[ 78.917090][ T4328] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 78.925750][ T4328] R13: 00007f78b4228fa0 R14: 00007f78b4228fa0 R15: 0000000000000005
[ 78.933722][ T4328]
[ 78.937094][ T4328] Kernel Offset: disabled
[ 78.941446][ T4328] Rebooting in 86400 seconds..