Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts.
2025/09/19 01:02:55 parsed 1 programs
[ 66.199234][ T4188] cgroup: Unknown subsys name 'net'
[ 66.333973][ T4188] cgroup: Unknown subsys name 'rlimit'
[ 67.772959][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 69.266102][ T4201] chnl_net:caif_netlink_parms(): no params data found
[ 69.318452][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.326095][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.334877][ T4201] device bridge_slave_0 entered promiscuous mode
[ 69.346877][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.354285][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.362215][ T4201] device bridge_slave_1 entered promiscuous mode
[ 69.384186][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.398075][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.423149][ T4201] team0: Port device team_slave_0 added
[ 69.433380][ T4201] team0: Port device team_slave_1 added
[ 69.452811][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.459851][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.485790][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.502278][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.509290][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.535627][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.568171][ T4201] device hsr_slave_0 entered promiscuous mode
[ 69.575477][ T4201] device hsr_slave_1 entered promiscuous mode
[ 69.676415][ T4201] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.690626][ T4201] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.700610][ T4201] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.710764][ T4201] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.736710][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.744057][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.752049][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.759145][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.805009][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.824446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 69.835873][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.846427][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.856023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 69.873479][ T4201] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.886956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 69.896577][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.903735][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.933174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 69.943140][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.950288][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.964253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 69.981547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 69.989832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 69.998838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 70.014476][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 70.026241][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 70.035683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 70.171216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 70.179626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 70.193003][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.217019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 70.242130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 70.251621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 70.264306][ T4201] device veth0_vlan entered promiscuous mode
[ 70.272257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 70.281021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 70.294214][ T4201] device veth1_vlan entered promiscuous mode
[ 70.332436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 70.342216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 70.350749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 70.359532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 70.370400][ T4201] device veth0_macvtap entered promiscuous mode
[ 70.381872][ T4201] device veth1_macvtap entered promiscuous mode
[ 70.400489][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.409899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 70.418616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 70.426758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 70.435842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 70.451012][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.459722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 70.469254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 70.482788][ T4201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.492279][ T4201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.502197][ T4201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.511473][ T4201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.709260][ T4201] syz-executor (4201) used greatest stack depth: 21088 bytes left
[ 71.250154][ T486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.360404][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.366964][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.646625][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.656326][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.673590][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 72.686546][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.694810][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.704155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/09/19 01:03:04 executed programs: 0
[ 73.234979][ T4285] chnl_net:caif_netlink_parms(): no params data found
[ 73.280512][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.287844][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.295662][ T4285] device bridge_slave_0 entered promiscuous mode
[ 73.304128][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.311380][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.320385][ T4285] device bridge_slave_1 entered promiscuous mode
[ 73.343073][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.354293][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.379234][ T4285] team0: Port device team_slave_0 added
[ 73.386900][ T4285] team0: Port device team_slave_1 added
[ 73.406534][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.413687][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.440356][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.452438][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.459672][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.485786][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.516871][ T4285] device hsr_slave_0 entered promiscuous mode
[ 73.523800][ T4285] device hsr_slave_1 entered promiscuous mode
[ 73.530690][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 73.538671][ T4285] Cannot create hsr debugfs directory
[ 73.804678][ T486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.187916][ T13] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.333513][ T486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.375878][ T486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.184038][ T4285] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.195931][ T4285] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.216767][ T4285] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.226071][ T4285] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.270103][ T21] Bluetooth: hci0: command 0x041b tx timeout
[ 77.294398][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.318987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.326856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.338201][ T4285] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.349382][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.358661][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.367031][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.374135][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.387165][ T486] device hsr_slave_0 left promiscuous mode
[ 77.394003][ T486] device hsr_slave_1 left promiscuous mode
[ 77.400879][ T486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 77.408482][ T486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 77.416568][ T486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 77.424076][ T486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 77.432146][ T486] device bridge_slave_1 left promiscuous mode
[ 77.438803][ T486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.452809][ T486] device bridge_slave_0 left promiscuous mode
[ 77.459223][ T486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.478977][ T486] device veth1_macvtap left promiscuous mode
[ 77.485349][ T486] device veth0_macvtap left promiscuous mode
[ 77.491641][ T486] device veth1_vlan left promiscuous mode
[ 77.497665][ T486] device veth0_vlan left promiscuous mode
[ 77.663642][ T486] team0 (unregistering): Port device team_slave_1 removed
[ 77.679422][ T486] team0 (unregistering): Port device team_slave_0 removed
[ 77.693071][ T486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 77.712208][ T486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 77.774278][ T486] bond0 (unregistering): Released all slaves
[ 77.858503][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 77.866526][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.875386][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.883909][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.891061][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.900144][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.921670][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.931221][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.942390][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.957189][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.966679][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.976403][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.987000][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.995818][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 78.008338][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 78.016825][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 78.031694][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 78.137024][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 78.144931][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 78.160922][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.179167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 78.188424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 78.209035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 78.217691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 78.226130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 78.234966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 78.246612][ T4285] device veth0_vlan entered promiscuous mode
[ 78.261357][ T4285] device veth1_vlan entered promiscuous mode
[ 78.283098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 78.292524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 78.301106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 78.311292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 78.325623][ T4285] device veth0_macvtap entered promiscuous mode
[ 78.333853][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 78.344442][ T4285] device veth1_macvtap entered promiscuous mode
[ 78.364746][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.373673][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 78.383678][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 78.396540][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.406448][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 78.416175][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.428035][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.436759][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.446760][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.457625][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.535882][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.555509][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.574911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2025/09/19 01:03:10 executed programs: 2
[ 78.591478][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.602701][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.612229][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.679197][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 78.732594][ T4339] ==================================================================
[ 78.740973][ T4339] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 78.748228][ T4339] Read of size 4 at addr ffff88801e2e4238 by task syz.0.19/4339
[ 78.755879][ T4339]
[ 78.758242][ T4339] CPU: 0 PID: 4339 Comm: syz.0.19 Not tainted syzkaller #0
[ 78.765504][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 78.775599][ T4339] Call Trace:
[ 78.778892][ T4339]
[ 78.781837][ T4339] dump_stack_lvl+0x168/0x230
[ 78.786980][ T4339] ? show_regs_print_info+0x20/0x20
[ 78.792215][ T4339] ? _printk+0xcc/0x110
[ 78.796393][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 78.801277][ T4339] ? load_image+0x3b0/0x3b0
[ 78.805908][ T4339] print_address_description+0x60/0x2d0
[ 78.811484][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 78.816350][ T4339] kasan_report+0xdf/0x130
[ 78.820788][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 78.825660][ T4339] ax25_fillin_cb+0x459/0x640
[ 78.830355][ T4339] ax25_setsockopt+0x8a2/0xa40
[ 78.835141][ T4339] ? ax25_shutdown+0x10/0x10
[ 78.839752][ T4339] ? aa_sock_opt_perm+0x74/0x100
[ 78.844708][ T4339] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 78.850271][ T4339] ? security_socket_setsockopt+0x7a/0xa0
[ 78.856015][ T4339] ? ax25_shutdown+0x10/0x10
[ 78.860633][ T4339] __sys_setsockopt+0x2bf/0x3d0
[ 78.865519][ T4339] __x64_sys_setsockopt+0xb1/0xc0
[ 78.870569][ T4339] do_syscall_64+0x4c/0xa0
[ 78.875007][ T4339] ? clear_bhb_loop+0x30/0x80
[ 78.879698][ T4339] ? clear_bhb_loop+0x30/0x80
[ 78.884394][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.890317][ T4339] RIP: 0033:0x7fb970879ba9
[ 78.894752][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.914376][ T4339] RSP: 002b:00007ffc07b985b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 78.922812][ T4339] RAX: ffffffffffffffda RBX: 00007fb970ac0fa0 RCX: 00007fb970879ba9
[ 78.930807][ T4339] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 78.938797][ T4339] RBP: 00007fb9708fce19 R08: 0000000000000010 R09: 0000000000000000
[ 78.946789][ T4339] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 78.954780][ T4339] R13: 00007fb970ac0fa0 R14: 00007fb970ac0fa0 R15: 0000000000000005
[ 78.962793][ T4339]
[ 78.965835][ T4339]
[ 78.968169][ T4339] Allocated by task 4337:
[ 78.972524][ T4339] __kasan_kmalloc+0xb5/0xf0
[ 78.977137][ T4339] ax25_dev_device_up+0x50/0x580
[ 78.982100][ T4339] ax25_device_event+0x483/0x4f0
[ 78.987146][ T4339] raw_notifier_call_chain+0xcb/0x160
[ 78.992543][ T4339] __dev_notify_flags+0x178/0x2d0
[ 78.997587][ T4339] dev_change_flags+0xe3/0x1a0
[ 79.002380][ T4339] dev_ifsioc+0x147/0xe70
[ 79.006736][ T4339] dev_ioctl+0x55f/0xe50
[ 79.010995][ T4339] sock_do_ioctl+0x222/0x2f0
[ 79.015600][ T4339] sock_ioctl+0x4ed/0x6e0
[ 79.019943][ T4339] __se_sys_ioctl+0xfa/0x170
[ 79.024555][ T4339] do_syscall_64+0x4c/0xa0
[ 79.028987][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.034897][ T4339]
[ 79.037233][ T4339] Freed by task 4338:
[ 79.041214][ T4339] kasan_set_track+0x4b/0x70
[ 79.045821][ T4339] kasan_set_free_info+0x1f/0x40
[ 79.050860][ T4339] ____kasan_slab_free+0xd5/0x110
[ 79.055901][ T4339] slab_free_freelist_hook+0xea/0x170
[ 79.061290][ T4339] kfree+0xef/0x2a0
[ 79.065113][ T4339] ax25_release+0x661/0x870
[ 79.069634][ T4339] sock_close+0xd5/0x240
[ 79.073911][ T4339] __fput+0x234/0x930
[ 79.078079][ T4339] task_work_run+0x125/0x1a0
[ 79.082687][ T4339] exit_to_user_mode_loop+0x10f/0x130
[ 79.088074][ T4339] exit_to_user_mode_prepare+0xee/0x180
[ 79.093633][ T4339] syscall_exit_to_user_mode+0x16/0x40
[ 79.099104][ T4339] do_syscall_64+0x58/0xa0
[ 79.103530][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.109436][ T4339]
[ 79.111774][ T4339] The buggy address belongs to the object at ffff88801e2e4200
[ 79.111774][ T4339] which belongs to the cache kmalloc-192 of size 192
[ 79.125840][ T4339] The buggy address is located 56 bytes inside of
[ 79.125840][ T4339] 192-byte region [ffff88801e2e4200, ffff88801e2e42c0)
[ 79.139047][ T4339] The buggy address belongs to the page:
[ 79.144712][ T4339] page:ffffea000078b900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e2e4
[ 79.154881][ T4339] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 79.162454][ T4339] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00
[ 79.171059][ T4339] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 79.179916][ T4339] page dumped because: kasan: bad access detected
[ 79.186346][ T4339] page_owner tracks the page as allocated
[ 79.192197][ T4339] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4337, ts 78665770281, free_ts 78602004063
[ 79.208276][ T4339] get_page_from_freelist+0x1b77/0x1c60
[ 79.213853][ T4339] __alloc_pages+0x1e1/0x470
[ 79.218455][ T4339] new_slab+0xb6/0x4b0
[ 79.222537][ T4339] ___slab_alloc+0x81e/0xdf0
[ 79.227139][ T4339] __kmalloc_node+0x200/0x3b0
[ 79.231836][ T4339] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 79.237664][ T4339] new_slab+0x100/0x4b0
[ 79.241833][ T4339] ___slab_alloc+0x81e/0xdf0
[ 79.246438][ T4339] kmem_cache_alloc+0x195/0x290
[ 79.251300][ T4339] __d_alloc+0x2a/0x6f0
[ 79.255480][ T4339] d_alloc+0x47/0x1a0
[ 79.259475][ T4339] lookup_one_qstr_excl+0xc6/0x240
[ 79.264600][ T4339] filename_create+0x21e/0x450
[ 79.269377][ T4339] do_symlinkat+0xb3/0x6c0
[ 79.273810][ T4339] __x64_sys_symlinkat+0x95/0xa0
[ 79.278767][ T4339] do_syscall_64+0x4c/0xa0
[ 79.283202][ T4339] page last free stack trace:
[ 79.287879][ T4339] free_unref_page_prepare+0x637/0x6c0
[ 79.293356][ T4339] free_unref_page+0x94/0x280
[ 79.298062][ T4339] __unfreeze_partials+0x1a5/0x200
[ 79.303190][ T4339] put_cpu_partial+0x12d/0x190
[ 79.307971][ T4339] qlist_free_all+0x35/0x90
[ 79.312492][ T4339] kasan_quarantine_reduce+0x150/0x160
[ 79.317969][ T4339] __kasan_slab_alloc+0x2f/0xd0
[ 79.322838][ T4339] slab_post_alloc_hook+0x4c/0x380
[ 79.328053][ T4339] kmem_cache_alloc_node+0x12d/0x2d0
[ 79.333348][ T4339] __alloc_skb+0xf4/0x750
[ 79.337693][ T4339] mld_newpack+0x12a/0xb90
[ 79.342120][ T4339] add_grhead+0x5a/0x240
[ 79.346377][ T4339] add_grec+0x1341/0x15d0
[ 79.347466][ T1107] Bluetooth: hci0: command 0x040f tx timeout
[ 79.350711][ T4339] mld_ifc_work+0x6e7/0xb40
[ 79.361229][ T4339] process_one_work+0x863/0x1000
[ 79.366194][ T4339] worker_thread+0xaa8/0x12a0
[ 79.370898][ T4339]
[ 79.373235][ T4339] Memory state around the buggy address:
[ 79.378880][ T4339] ffff88801e2e4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 79.386957][ T4339] ffff88801e2e4180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 79.395031][ T4339] >ffff88801e2e4200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.403103][ T4339] ^
[ 79.409010][ T4339] ffff88801e2e4280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 79.417083][ T4339] ffff88801e2e4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 79.425159][ T4339] ==================================================================
[ 79.433226][ T4339] Disabling lock debugging due to kernel taint
[ 79.442240][ T4339] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.449563][ T4339] CPU: 0 PID: 4339 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 79.458164][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 79.468226][ T4339] Call Trace:
[ 79.471503][ T4339]
[ 79.474426][ T4339] dump_stack_lvl+0x168/0x230
[ 79.479107][ T4339] ? show_regs_print_info+0x20/0x20
[ 79.484394][ T4339] ? load_image+0x3b0/0x3b0
[ 79.488898][ T4339] panic+0x2c9/0x7f0
[ 79.492818][ T4339] ? bpf_jit_dump+0xd0/0xd0
[ 79.497322][ T4339] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 79.503225][ T4339] ? _raw_spin_unlock+0x40/0x40
[ 79.508071][ T4339] ? print_memory_metadata+0x314/0x400
[ 79.513526][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 79.518386][ T4339] check_panic_on_warn+0x80/0xa0
[ 79.523332][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 79.528197][ T4339] end_report+0x6d/0xf0
[ 79.532385][ T4339] kasan_report+0x102/0x130
[ 79.536899][ T4339] ? ax25_fillin_cb+0x459/0x640
[ 79.541749][ T4339] ax25_fillin_cb+0x459/0x640
[ 79.546428][ T4339] ax25_setsockopt+0x8a2/0xa40
[ 79.551192][ T4339] ? ax25_shutdown+0x10/0x10
[ 79.555778][ T4339] ? aa_sock_opt_perm+0x74/0x100
[ 79.560711][ T4339] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 79.566253][ T4339] ? security_socket_setsockopt+0x7a/0xa0
[ 79.572060][ T4339] ? ax25_shutdown+0x10/0x10
[ 79.576643][ T4339] __sys_setsockopt+0x2bf/0x3d0
[ 79.581493][ T4339] __x64_sys_setsockopt+0xb1/0xc0
[ 79.586517][ T4339] do_syscall_64+0x4c/0xa0
[ 79.590927][ T4339] ? clear_bhb_loop+0x30/0x80
[ 79.595692][ T4339] ? clear_bhb_loop+0x30/0x80
[ 79.600371][ T4339] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.606264][ T4339] RIP: 0033:0x7fb970879ba9
[ 79.610675][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 79.630280][ T4339] RSP: 002b:00007ffc07b985b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 79.638692][ T4339] RAX: ffffffffffffffda RBX: 00007fb970ac0fa0 RCX: 00007fb970879ba9
[ 79.646660][ T4339] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 79.654626][ T4339] RBP: 00007fb9708fce19 R08: 0000000000000010 R09: 0000000000000000
[ 79.662710][ T4339] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 79.670697][ T4339] R13: 00007fb970ac0fa0 R14: 00007fb970ac0fa0 R15: 0000000000000005
[ 79.678799][ T4339]
[ 79.682452][ T4339] Kernel Offset: disabled
[ 79.686793][ T4339] Rebooting in 86400 seconds..