Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts.
2026/03/12 06:24:25 parsed 1 programs
[ 54.223231][ T4188] cgroup: Unknown subsys name 'net'
[ 54.328375][ T4188] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 55.676443][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 57.284249][ T4212] chnl_net:caif_netlink_parms(): no params data found
[ 57.324629][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.332075][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.339752][ T4212] device bridge_slave_0 entered promiscuous mode
[ 57.348346][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.355488][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.363475][ T4212] device bridge_slave_1 entered promiscuous mode
[ 57.383798][ T4212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 57.394234][ T4212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 57.414655][ T4212] team0: Port device team_slave_0 added
[ 57.424515][ T4212] team0: Port device team_slave_1 added
[ 57.441250][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 57.448209][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.474843][ T4212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 57.487804][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 57.494937][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.520899][ T4212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 57.558415][ T4212] device hsr_slave_0 entered promiscuous mode
[ 57.565657][ T4212] device hsr_slave_1 entered promiscuous mode
[ 57.692127][ T4212] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.703942][ T4212] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.714961][ T4212] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.724228][ T4212] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.754204][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.761415][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.769135][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.776238][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.834708][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.849231][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 57.861845][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.869933][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.880549][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 57.896935][ T4212] 8021q: adding VLAN 0 to HW filter on device team0
[ 57.908682][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 57.918756][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.925839][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.946177][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 57.955252][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.962410][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.983709][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 57.992906][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 58.002371][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 58.015033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 58.027909][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 58.039199][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 58.154656][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 58.162677][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 58.176553][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 58.198554][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 58.220198][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 58.231381][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 58.239089][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 58.249263][ T4212] device veth0_vlan entered promiscuous mode
[ 58.262908][ T4212] device veth1_vlan entered promiscuous mode
[ 58.286050][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 58.295009][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 58.306842][ T4212] device veth0_macvtap entered promiscuous mode
[ 58.324043][ T4212] device veth1_macvtap entered promiscuous mode
[ 58.344659][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.353466][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 58.361921][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 58.369905][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 58.379896][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 58.391710][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 58.399991][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 58.410213][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 58.420469][ T4212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.430102][ T4212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.439147][ T4212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.448614][ T4212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.791087][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 58.836339][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.846585][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.863004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 58.876305][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.884210][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.892004][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/03/12 06:24:33 executed programs: 0
[ 60.406240][ T4278] chnl_net:caif_netlink_parms(): no params data found
[ 60.444956][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.452772][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.460395][ T4278] device bridge_slave_0 entered promiscuous mode
[ 60.468213][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.475334][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.483242][ T4278] device bridge_slave_1 entered promiscuous mode
[ 60.500924][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.512251][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.530463][ T4278] team0: Port device team_slave_0 added
[ 60.538254][ T4278] team0: Port device team_slave_1 added
[ 60.554464][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.561434][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.588560][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.601349][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.608290][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.634343][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.660096][ T4278] device hsr_slave_0 entered promiscuous mode
[ 60.667293][ T4278] device hsr_slave_1 entered promiscuous mode
[ 60.674199][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 60.682206][ T4278] Cannot create hsr debugfs directory
[ 61.236839][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.342310][ T1108] Bluetooth: hci0: command 0x0409 tx timeout
[ 63.566633][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.628402][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.400398][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 64.409653][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 64.419025][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 64.421097][ T4239] Bluetooth: hci0: command 0x041b tx timeout
[ 64.435478][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 64.499126][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.509990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 64.517919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 64.527393][ T4278] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.546346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 64.556014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 64.564500][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.571542][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.579220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 64.594325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 64.603240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 64.612084][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.619116][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.635081][ T144] device hsr_slave_0 left promiscuous mode
[ 64.641380][ T144] device hsr_slave_1 left promiscuous mode
[ 64.647637][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 64.655774][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 64.663892][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 64.671347][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 64.678798][ T144] device bridge_slave_1 left promiscuous mode
[ 64.685618][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.697736][ T144] device bridge_slave_0 left promiscuous mode
[ 64.704830][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.720065][ T144] device veth1_macvtap left promiscuous mode
[ 64.726950][ T144] device veth0_macvtap left promiscuous mode
[ 64.733086][ T144] device veth1_vlan left promiscuous mode
[ 64.738943][ T144] device veth0_vlan left promiscuous mode
[ 64.873178][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 64.885197][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 64.898764][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 64.912363][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 64.959360][ T144] bond0 (unregistering): Released all slaves
[ 65.011305][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 65.019954][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 65.029799][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 65.038604][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 65.047752][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 65.058489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 65.068163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 65.088150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 65.097131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 65.113197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 65.121798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 65.131691][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 65.222677][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 65.230106][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 65.241626][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.260949][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 65.269597][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 65.285796][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 65.294423][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 65.303215][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 65.310993][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 65.328608][ T4278] device veth0_vlan entered promiscuous mode
[ 65.340072][ T4278] device veth1_vlan entered promiscuous mode
[ 65.363185][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 65.371845][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 65.379853][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 65.391989][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 65.402235][ T4278] device veth0_macvtap entered promiscuous mode
[ 65.412967][ T4278] device veth1_macvtap entered promiscuous mode
[ 65.429572][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.438006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 65.446410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 65.454640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 65.465432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 65.479387][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 65.503104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 65.512012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 65.521473][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.530169][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.541614][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.550304][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.613134][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.628082][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.637189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/03/12 06:24:38 executed programs: 2
[ 65.663294][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.672195][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.680397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 65.743173][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 65.798077][ T4327] ==================================================================
[ 65.806307][ T4327] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 65.813521][ T4327] Read of size 4 at addr ffff88805dde0738 by task syz.0.19/4327
[ 65.821143][ T4327]
[ 65.823468][ T4327] CPU: 0 PID: 4327 Comm: syz.0.19 Not tainted syzkaller #0
[ 65.830651][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 65.840703][ T4327] Call Trace:
[ 65.843977][ T4327]
[ 65.846905][ T4327] dump_stack_lvl+0x188/0x250
[ 65.851586][ T4327] ? show_regs_print_info+0x20/0x20
[ 65.856780][ T4327] ? _printk+0xda/0x130
[ 65.860921][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 65.865774][ T4327] ? load_image+0x400/0x400
[ 65.870283][ T4327] print_address_description+0x60/0x2d0
[ 65.875827][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 65.880677][ T4327] kasan_report+0xdf/0x130
[ 65.885091][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 65.889941][ T4327] ax25_fillin_cb+0x459/0x640
[ 65.894631][ T4327] ax25_setsockopt+0x8c9/0xa60
[ 65.899395][ T4327] ? ax25_shutdown+0x10/0x10
[ 65.903985][ T4327] ? aa_sock_opt_perm+0x74/0x100
[ 65.908930][ T4327] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 65.914468][ T4327] ? security_socket_setsockopt+0x7a/0xa0
[ 65.920179][ T4327] ? ax25_shutdown+0x10/0x10
[ 65.924766][ T4327] __sys_setsockopt+0x2bf/0x3d0
[ 65.929632][ T4327] __x64_sys_setsockopt+0xb1/0xc0
[ 65.934656][ T4327] do_syscall_64+0x4c/0xa0
[ 65.939065][ T4327] ? clear_bhb_loop+0x30/0x80
[ 65.943736][ T4327] ? clear_bhb_loop+0x30/0x80
[ 65.948405][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.954307][ T4327] RIP: 0033:0x7f652f2f6799
[ 65.958720][ T4327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 65.978316][ T4327] RSP: 002b:00007fff87761d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 65.986731][ T4327] RAX: ffffffffffffffda RBX: 00007f652f56ffa0 RCX: 00007f652f2f6799
[ 65.994701][ T4327] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 66.002662][ T4327] RBP: 00007f652f38cc99 R08: 0000000000000010 R09: 0000000000000000
[ 66.010628][ T4327] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 66.018606][ T4327] R13: 00007f652f56ffac R14: 00007f652f56ffa0 R15: 00007f652f56ffa0
[ 66.026595][ T4327]
[ 66.029606][ T4327]
[ 66.031916][ T4327] Allocated by task 4325:
[ 66.036229][ T4327] __kasan_kmalloc+0xb5/0xf0
[ 66.040814][ T4327] ax25_dev_device_up+0x50/0x580
[ 66.045749][ T4327] ax25_device_event+0x483/0x4f0
[ 66.050678][ T4327] raw_notifier_call_chain+0xcb/0x160
[ 66.056045][ T4327] __dev_notify_flags+0x194/0x300
[ 66.061067][ T4327] dev_change_flags+0xe3/0x1a0
[ 66.065831][ T4327] dev_ifsioc+0x130/0xd50
[ 66.070149][ T4327] dev_ioctl+0x545/0xe30
[ 66.074378][ T4327] sock_do_ioctl+0x245/0x320
[ 66.078961][ T4327] sock_ioctl+0x4d2/0x710
[ 66.083278][ T4327] __se_sys_ioctl+0xfa/0x170
[ 66.087857][ T4327] do_syscall_64+0x4c/0xa0
[ 66.092272][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.098155][ T4327]
[ 66.100468][ T4327] Freed by task 4326:
[ 66.104433][ T4327] kasan_set_track+0x4b/0x70
[ 66.109020][ T4327] kasan_set_free_info+0x1f/0x40
[ 66.113954][ T4327] ____kasan_slab_free+0xd5/0x110
[ 66.118969][ T4327] slab_free_freelist_hook+0xea/0x170
[ 66.124328][ T4327] kfree+0xef/0x2a0
[ 66.128127][ T4327] ax25_release+0x661/0x870
[ 66.132619][ T4327] sock_close+0xd5/0x240
[ 66.137110][ T4327] __fput+0x234/0x930
[ 66.141082][ T4327] task_work_run+0x125/0x1a0
[ 66.145669][ T4327] exit_to_user_mode_loop+0x10f/0x130
[ 66.151037][ T4327] exit_to_user_mode_prepare+0xee/0x180
[ 66.156572][ T4327] syscall_exit_to_user_mode+0x16/0x40
[ 66.162039][ T4327] do_syscall_64+0x58/0xa0
[ 66.166447][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.172330][ T4327]
[ 66.174643][ T4327] The buggy address belongs to the object at ffff88805dde0700
[ 66.174643][ T4327] which belongs to the cache kmalloc-192 of size 192
[ 66.188684][ T4327] The buggy address is located 56 bytes inside of
[ 66.188684][ T4327] 192-byte region [ffff88805dde0700, ffff88805dde07c0)
[ 66.201863][ T4327] The buggy address belongs to the page:
[ 66.207497][ T4327] page:ffffea0001777800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5dde0
[ 66.217636][ T4327] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 66.225190][ T4327] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41a00
[ 66.233768][ T4327] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 66.242491][ T4327] page dumped because: kasan: bad access detected
[ 66.248916][ T4327] page_owner tracks the page as allocated
[ 66.254630][ T4327] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4278, ts 65730697256, free_ts 59943310906
[ 66.270601][ T4327] get_page_from_freelist+0x1bbd/0x1ca0
[ 66.276148][ T4327] __alloc_pages+0x1ee/0x480
[ 66.280730][ T4327] new_slab+0xb6/0x4b0
[ 66.284791][ T4327] ___slab_alloc+0x80a/0xdd0
[ 66.289372][ T4327] __kmalloc_node+0x200/0x3b0
[ 66.294037][ T4327] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 66.299836][ T4327] slab_post_alloc_hook+0xba/0x380
[ 66.304957][ T4327] kmem_cache_alloc+0x100/0x290
[ 66.309790][ T4327] __d_alloc+0x2a/0x6f0
[ 66.313921][ T4327] d_alloc_pseudo+0x19/0x70
[ 66.318395][ T4327] alloc_file_pseudo+0xe0/0x200
[ 66.323218][ T4327] sock_alloc_file+0xb3/0x240
[ 66.327870][ T4327] __sys_socket+0x11d/0x170
[ 66.332348][ T4327] __x64_sys_socket+0x76/0x80
[ 66.336998][ T4327] do_syscall_64+0x4c/0xa0
[ 66.341386][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.347255][ T4327] page last free stack trace:
[ 66.351902][ T4327] free_unref_page_prepare+0x637/0x6c0
[ 66.357338][ T4327] free_unref_page+0x8f/0x2a0
[ 66.361986][ T4327] __vunmap+0x8b9/0xa50
[ 66.366113][ T4327] kcov_close+0x27/0x50
[ 66.370242][ T4327] __fput+0x234/0x930
[ 66.374199][ T4327] task_work_run+0x125/0x1a0
[ 66.378763][ T4327] do_exit+0x626/0x20c0
[ 66.382889][ T4327] do_group_exit+0x12e/0x300
[ 66.387449][ T4327] get_signal+0x6ca/0x12c0
[ 66.391839][ T4327] arch_do_signal_or_restart+0xe7/0x12c0
[ 66.397446][ T4327] exit_to_user_mode_loop+0x9e/0x130
[ 66.402703][ T4327] exit_to_user_mode_prepare+0xee/0x180
[ 66.408219][ T4327] syscall_exit_to_user_mode+0x16/0x40
[ 66.413662][ T4327] do_syscall_64+0x58/0xa0
[ 66.418051][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.423941][ T4327]
[ 66.426241][ T4327] Memory state around the buggy address:
[ 66.431841][ T4327] ffff88805dde0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 66.440315][ T4327] ffff88805dde0680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 66.448345][ T4327] >ffff88805dde0700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 66.456375][ T4327] ^
[ 66.462241][ T4327] ffff88805dde0780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 66.470274][ T4327] ffff88805dde0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 66.478305][ T4327] ==================================================================
[ 66.486335][ T4327] Disabling lock debugging due to kernel taint
[ 66.496359][ T4327] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 66.503554][ T4327] CPU: 0 PID: 4327 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 66.512113][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 66.522140][ T4327] Call Trace:
[ 66.525394][ T4327]
[ 66.528303][ T4327] dump_stack_lvl+0x188/0x250
[ 66.532959][ T4327] ? show_regs_print_info+0x20/0x20
[ 66.538131][ T4327] ? load_image+0x400/0x400
[ 66.542606][ T4327] panic+0x2e5/0x810
[ 66.546476][ T4327] ? bpf_jit_dump+0xd0/0xd0
[ 66.550960][ T4327] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 66.556930][ T4327] ? _raw_spin_unlock+0x40/0x40
[ 66.561757][ T4327] ? print_memory_metadata+0x314/0x400
[ 66.567191][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 66.572015][ T4327] check_panic_on_warn+0x80/0xa0
[ 66.576928][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 66.581753][ T4327] end_report+0x6d/0xf0
[ 66.585886][ T4327] kasan_report+0x102/0x130
[ 66.590362][ T4327] ? ax25_fillin_cb+0x459/0x640
[ 66.595183][ T4327] ax25_fillin_cb+0x459/0x640
[ 66.599838][ T4327] ax25_setsockopt+0x8c9/0xa60
[ 66.604643][ T4327] ? ax25_shutdown+0x10/0x10
[ 66.609211][ T4327] ? aa_sock_opt_perm+0x74/0x100
[ 66.614123][ T4327] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 66.619644][ T4327] ? security_socket_setsockopt+0x7a/0xa0
[ 66.625334][ T4327] ? ax25_shutdown+0x10/0x10
[ 66.629899][ T4327] __sys_setsockopt+0x2bf/0x3d0
[ 66.634725][ T4327] __x64_sys_setsockopt+0xb1/0xc0
[ 66.639721][ T4327] do_syscall_64+0x4c/0xa0
[ 66.644111][ T4327] ? clear_bhb_loop+0x30/0x80
[ 66.648761][ T4327] ? clear_bhb_loop+0x30/0x80
[ 66.653411][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.659278][ T4327] RIP: 0033:0x7f652f2f6799
[ 66.663672][ T4327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 66.683254][ T4327] RSP: 002b:00007fff87761d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 66.691641][ T4327] RAX: ffffffffffffffda RBX: 00007f652f56ffa0 RCX: 00007f652f2f6799
[ 66.699588][ T4327] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 66.707534][ T4327] RBP: 00007f652f38cc99 R08: 0000000000000010 R09: 0000000000000000
[ 66.715484][ T4327] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 66.723433][ T4327] R13: 00007f652f56ffac R14: 00007f652f56ffa0 R15: 00007f652f56ffa0
[ 66.731384][ T4327]
[ 66.734728][ T4327] Kernel Offset: disabled
[ 66.739037][ T4327] Rebooting in 86400 seconds..