Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts.
2025/07/19 22:10:00 ignoring optional flag "sandboxArg"="0"
2025/07/19 22:10:01 parsed 1 programs
[ 73.821904][ T4188] cgroup: Unknown subsys name 'net'
[ 73.944765][ T4188] cgroup: Unknown subsys name 'rlimit'
[ 75.449440][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 77.150584][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.159133][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.174298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.201906][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.210805][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.219804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.563127][ T4216] syz-executor (4216) used greatest stack depth: 20960 bytes left
[ 77.605355][ T4220] chnl_net:caif_netlink_parms(): no params data found
[ 77.676792][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.684831][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.693144][ T4220] device bridge_slave_0 entered promiscuous mode
[ 77.705322][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.712828][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.722856][ T4220] device bridge_slave_1 entered promiscuous mode
[ 77.758009][ T4220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.769959][ T4220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.806029][ T4220] team0: Port device team_slave_0 added
[ 77.816470][ T4220] team0: Port device team_slave_1 added
[ 77.844277][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.851278][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.879204][ T4220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.892832][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.901515][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.933109][ T4220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.978594][ T4220] device hsr_slave_0 entered promiscuous mode
[ 77.986502][ T4220] device hsr_slave_1 entered promiscuous mode
[ 78.135880][ T4220] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.147497][ T4220] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.158467][ T4220] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.168833][ T4220] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.207372][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.214861][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.223367][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.231350][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.244503][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.253859][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.313094][ T4220] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.329226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 78.338431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.350120][ T4220] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.362421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 78.373010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 78.382662][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.390216][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.402921][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 78.412832][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 78.422510][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.429654][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.447548][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 78.457009][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 78.477358][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 78.487495][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 78.497310][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 78.507746][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 78.526027][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 78.535926][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 78.547499][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 78.557103][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 78.567137][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 78.578173][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 78.716926][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 78.724873][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 78.736346][ T4220] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.760454][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 78.772001][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 78.793581][ T4220] device veth0_vlan entered promiscuous mode
[ 78.802478][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 78.812300][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 78.828035][ T4220] device veth1_vlan entered promiscuous mode
[ 78.835996][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 78.845155][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 78.855173][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 78.880908][ T4220] device veth0_macvtap entered promiscuous mode
[ 78.889569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 78.898453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 78.911844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 78.925756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 78.949754][ T4220] device veth1_macvtap entered promiscuous mode
[ 78.982966][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.997588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.006187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.016060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.029022][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.038684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.048258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 79.062020][ T4220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.071111][ T4220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.080329][ T4220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.089666][ T4220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.195764][ T4220] syz-executor (4220) used greatest stack depth: 20320 bytes left
2025/07/19 22:10:11 executed programs: 0
[ 81.409914][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.591267][ T4283] chnl_net:caif_netlink_parms(): no params data found
[ 81.637107][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.644300][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.652254][ T4283] device bridge_slave_0 entered promiscuous mode
[ 81.661397][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.668910][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.677037][ T4283] device bridge_slave_1 entered promiscuous mode
[ 81.700701][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.712201][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.737439][ T4283] team0: Port device team_slave_0 added
[ 81.746098][ T4283] team0: Port device team_slave_1 added
[ 81.766889][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.773971][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.799992][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.812016][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.819541][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.847118][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.879106][ T4283] device hsr_slave_0 entered promiscuous mode
[ 81.888408][ T4283] device hsr_slave_1 entered promiscuous mode
[ 81.895149][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.902955][ T4283] Cannot create hsr debugfs directory
[ 83.574398][ T4233] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.981017][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.049723][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.092447][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.963289][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.974514][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.984689][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.996218][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.079841][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.092948][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 85.102008][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.115220][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.147659][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 85.156482][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.165241][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.172327][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.180594][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 85.194576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 85.203426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.212135][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.219286][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.257472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.266482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.277690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.287204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.297343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.327561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.336853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.349285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.358084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.388407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.397505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.407884][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.442391][ T154] device hsr_slave_0 left promiscuous mode
[ 85.450913][ T154] device hsr_slave_1 left promiscuous mode
[ 85.459324][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 85.469320][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 85.478341][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 85.487143][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 85.495777][ T154] device bridge_slave_1 left promiscuous mode
[ 85.502631][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.518461][ T154] device bridge_slave_0 left promiscuous mode
[ 85.524810][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.543326][ T154] device veth1_macvtap left promiscuous mode
[ 85.549803][ T154] device veth0_macvtap left promiscuous mode
[ 85.556689][ T154] device veth1_vlan left promiscuous mode
[ 85.562636][ T154] device veth0_vlan left promiscuous mode
[ 85.654128][ T4242] Bluetooth: hci0: command 0x041b tx timeout
[ 85.737705][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 85.752250][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 85.767544][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 85.783435][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 85.846614][ T154] bond0 (unregistering): Released all slaves
[ 85.985572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.995596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 86.009711][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.029665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 86.039179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 86.059242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 86.068807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 86.080162][ T4283] device veth0_vlan entered promiscuous mode
[ 86.087618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 86.097142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 86.110377][ T4283] device veth1_vlan entered promiscuous mode
[ 86.132438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 86.142516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 86.154649][ T4283] device veth0_macvtap entered promiscuous mode
[ 86.164973][ T4283] device veth1_macvtap entered promiscuous mode
[ 86.193123][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.201224][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 86.210007][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 86.219559][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 86.229490][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 86.241285][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.252774][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 86.262416][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 86.275054][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.284811][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.294591][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.303412][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.384753][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.392830][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/19 22:10:16 executed programs: 2
[ 86.428426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 86.438201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.447819][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.458455][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.538164][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 86.624027][ T4341] ==================================================================
[ 86.632372][ T4341] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 86.639693][ T4341] Read of size 4 at addr ffff888022dca238 by task syz.0.18/4341
[ 86.647393][ T4341]
[ 86.649745][ T4341] CPU: 0 PID: 4341 Comm: syz.0.18 Not tainted 5.15.189-syzkaller #0
[ 86.657743][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 86.667934][ T4341] Call Trace:
[ 86.671278][ T4341]
[ 86.674264][ T4341] dump_stack_lvl+0x168/0x230
[ 86.679045][ T4341] ? show_regs_print_info+0x20/0x20
[ 86.684276][ T4341] ? _printk+0xcc/0x110
[ 86.688454][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 86.693327][ T4341] ? load_image+0x3b0/0x3b0
[ 86.697875][ T4341] print_address_description+0x60/0x2d0
[ 86.703464][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 86.708350][ T4341] kasan_report+0xdf/0x130
[ 86.712812][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 86.717867][ T4341] ax25_fillin_cb+0x459/0x640
[ 86.722885][ T4341] ax25_setsockopt+0x8a2/0xa40
[ 86.727706][ T4341] ? ax25_shutdown+0x10/0x10
[ 86.732426][ T4341] ? aa_sock_opt_perm+0x74/0x100
[ 86.737384][ T4341] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 86.742948][ T4341] ? security_socket_setsockopt+0x7a/0xa0
[ 86.748694][ T4341] ? ax25_shutdown+0x10/0x10
[ 86.753317][ T4341] __sys_setsockopt+0x2bf/0x3d0
[ 86.758211][ T4341] __x64_sys_setsockopt+0xb1/0xc0
[ 86.763289][ T4341] do_syscall_64+0x4c/0xa0
[ 86.767759][ T4341] ? clear_bhb_loop+0x30/0x80
[ 86.772528][ T4341] ? clear_bhb_loop+0x30/0x80
[ 86.777246][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.783172][ T4341] RIP: 0033:0x7fa7c39e89a9
[ 86.787668][ T4341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.807464][ T4341] RSP: 002b:00007ffe5588c268 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 86.816004][ T4341] RAX: ffffffffffffffda RBX: 00007fa7c3c0ffa0 RCX: 00007fa7c39e89a9
[ 86.824017][ T4341] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 86.832149][ T4341] RBP: 00007fa7c3a6ad69 R08: 0000000000000010 R09: 0000000000000000
[ 86.840184][ T4341] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 86.848194][ T4341] R13: 00007fa7c3c0ffa0 R14: 00007fa7c3c0ffa0 R15: 0000000000000005
[ 86.856443][ T4341]
[ 86.859832][ T4341]
[ 86.862168][ T4341] Allocated by task 4339:
[ 86.866551][ T4341] __kasan_kmalloc+0xb5/0xf0
[ 86.871162][ T4341] ax25_dev_device_up+0x50/0x580
[ 86.876131][ T4341] ax25_device_event+0x483/0x4f0
[ 86.881086][ T4341] raw_notifier_call_chain+0xcb/0x160
[ 86.886479][ T4341] __dev_notify_flags+0x178/0x2d0
[ 86.891520][ T4341] dev_change_flags+0xe3/0x1a0
[ 86.896315][ T4341] dev_ifsioc+0x147/0xe70
[ 86.900896][ T4341] dev_ioctl+0x55f/0xe50
[ 86.905171][ T4341] sock_do_ioctl+0x222/0x2f0
[ 86.909796][ T4341] sock_ioctl+0x4ed/0x6e0
[ 86.914155][ T4341] __se_sys_ioctl+0xfa/0x170
[ 86.918896][ T4341] do_syscall_64+0x4c/0xa0
[ 86.923404][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.929469][ T4341]
[ 86.931816][ T4341] Freed by task 4340:
[ 86.935815][ T4341] kasan_set_track+0x4b/0x70
[ 86.940503][ T4341] kasan_set_free_info+0x1f/0x40
[ 86.945478][ T4341] ____kasan_slab_free+0xd5/0x110
[ 86.950532][ T4341] slab_free_freelist_hook+0xea/0x170
[ 86.955928][ T4341] kfree+0xef/0x2a0
[ 86.959760][ T4341] ax25_release+0x661/0x870
[ 86.964287][ T4341] sock_close+0xd5/0x240
[ 86.968555][ T4341] __fput+0x234/0x930
[ 86.972553][ T4341] task_work_run+0x125/0x1a0
[ 86.977163][ T4341] exit_to_user_mode_loop+0x10f/0x130
[ 86.982570][ T4341] exit_to_user_mode_prepare+0xb1/0x140
[ 86.988146][ T4341] syscall_exit_to_user_mode+0x16/0x40
[ 86.993628][ T4341] do_syscall_64+0x58/0xa0
[ 86.998064][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.004001][ T4341]
[ 87.006341][ T4341] The buggy address belongs to the object at ffff888022dca200
[ 87.006341][ T4341] which belongs to the cache kmalloc-192 of size 192
[ 87.020476][ T4341] The buggy address is located 56 bytes inside of
[ 87.020476][ T4341] 192-byte region [ffff888022dca200, ffff888022dca2c0)
[ 87.033700][ T4341] The buggy address belongs to the page:
[ 87.039366][ T4341] page:ffffea00008b7280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22dca
[ 87.050457][ T4341] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 87.058036][ T4341] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00
[ 87.066637][ T4341] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 87.075377][ T4341] page dumped because: kasan: bad access detected
[ 87.081904][ T4341] page_owner tracks the page as allocated
[ 87.087634][ T4341] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1477, ts 86506753038, free_ts 86023393620
[ 87.103725][ T4341] get_page_from_freelist+0x1b77/0x1c60
[ 87.109333][ T4341] __alloc_pages+0x1e1/0x470
[ 87.113968][ T4341] new_slab+0xb6/0x4b0
[ 87.118076][ T4341] ___slab_alloc+0x81e/0xdf0
[ 87.122696][ T4341] __kmalloc_node+0x200/0x3b0
[ 87.127403][ T4341] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 87.133246][ T4341] new_slab+0x100/0x4b0
[ 87.137437][ T4341] ___slab_alloc+0x81e/0xdf0
[ 87.142178][ T4341] kmem_cache_alloc+0x195/0x290
[ 87.147063][ T4341] __d_alloc+0x2a/0x6f0
[ 87.151242][ T4341] d_alloc_parallel+0x7e/0x12d0
[ 87.156124][ T4341] __lookup_slow+0x113/0x3d0
[ 87.160748][ T4341] lookup_one_len+0x18e/0x2c0
[ 87.165457][ T4341] start_creating+0x184/0x310
[ 87.170180][ T4341] __debugfs_create_file+0x6f/0x510
[ 87.175432][ T4341] ieee80211_sta_debugfs_add+0x205/0x770
[ 87.181093][ T4341] page last free stack trace:
[ 87.185784][ T4341] free_unref_page_prepare+0x637/0x6c0
[ 87.191358][ T4341] free_unref_page+0x94/0x280
[ 87.196052][ T4341] qlist_free_all+0x35/0x90
[ 87.200580][ T4341] kasan_quarantine_reduce+0x150/0x160
[ 87.206051][ T4341] __kasan_slab_alloc+0x2f/0xd0
[ 87.210914][ T4341] slab_post_alloc_hook+0x4c/0x380
[ 87.216039][ T4341] kmem_cache_alloc+0x100/0x290
[ 87.220908][ T4341] sock_alloc_inode+0x17/0xb0
[ 87.225600][ T4341] new_inode_pseudo+0x5f/0x210
[ 87.230473][ T4341] __sock_create+0x129/0x900
[ 87.235080][ T4341] __sys_socket+0xe2/0x170
[ 87.239519][ T4341] __x64_sys_socket+0x76/0x80
[ 87.244229][ T4341] do_syscall_64+0x4c/0xa0
[ 87.248674][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.254594][ T4341]
[ 87.256929][ T4341] Memory state around the buggy address:
[ 87.262579][ T4341] ffff888022dca100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.270654][ T4341] ffff888022dca180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 87.278739][ T4341] >ffff888022dca200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.286808][ T4341] ^
[ 87.292716][ T4341] ffff888022dca280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 87.300793][ T4341] ffff888022dca300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.308865][ T4341] ==================================================================
[ 87.317068][ T4341] Disabling lock debugging due to kernel taint
[ 87.338396][ T4341] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.345647][ T4341] CPU: 0 PID: 4341 Comm: syz.0.18 Tainted: G B 5.15.189-syzkaller #0
[ 87.355035][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 87.365199][ T4341] Call Trace:
[ 87.368489][ T4341]
[ 87.371433][ T4341] dump_stack_lvl+0x168/0x230
[ 87.376135][ T4341] ? show_regs_print_info+0x20/0x20
[ 87.381344][ T4341] ? load_image+0x3b0/0x3b0
[ 87.385865][ T4341] panic+0x2c9/0x7f0
[ 87.389759][ T4341] ? bpf_jit_dump+0xd0/0xd0
[ 87.394256][ T4341] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 87.400145][ T4341] ? _raw_spin_unlock+0x40/0x40
[ 87.404992][ T4341] ? print_memory_metadata+0x314/0x400
[ 87.410449][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 87.415297][ T4341] check_panic_on_warn+0x80/0xa0
[ 87.420246][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 87.425090][ T4341] end_report+0x6d/0xf0
[ 87.429244][ T4341] kasan_report+0x102/0x130
[ 87.433748][ T4341] ? ax25_fillin_cb+0x459/0x640
[ 87.438604][ T4341] ax25_fillin_cb+0x459/0x640
[ 87.443273][ T4341] ax25_setsockopt+0x8a2/0xa40
[ 87.448036][ T4341] ? ax25_shutdown+0x10/0x10
[ 87.452630][ T4341] ? aa_sock_opt_perm+0x74/0x100
[ 87.457659][ T4341] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 87.463206][ T4341] ? security_socket_setsockopt+0x7a/0xa0
[ 87.468920][ T4341] ? ax25_shutdown+0x10/0x10
[ 87.473520][ T4341] __sys_setsockopt+0x2bf/0x3d0
[ 87.478390][ T4341] __x64_sys_setsockopt+0xb1/0xc0
[ 87.483686][ T4341] do_syscall_64+0x4c/0xa0
[ 87.488128][ T4341] ? clear_bhb_loop+0x30/0x80
[ 87.492812][ T4341] ? clear_bhb_loop+0x30/0x80
[ 87.497487][ T4341] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.503558][ T4341] RIP: 0033:0x7fa7c39e89a9
[ 87.507985][ T4341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 87.527590][ T4341] RSP: 002b:00007ffe5588c268 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 87.536004][ T4341] RAX: ffffffffffffffda RBX: 00007fa7c3c0ffa0 RCX: 00007fa7c39e89a9
[ 87.543982][ T4341] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 87.551961][ T4341] RBP: 00007fa7c3a6ad69 R08: 0000000000000010 R09: 0000000000000000
[ 87.560021][ T4341] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 87.567994][ T4341] R13: 00007fa7c3c0ffa0 R14: 00007fa7c3c0ffa0 R15: 0000000000000005
[ 87.575973][ T4341]
[ 87.579283][ T4341] Kernel Offset: disabled
[ 87.583622][ T4341] Rebooting in 86400 seconds..