[ 74.939275][ T9] device hsr_slave_0 left promiscuous mode
[ 74.945746][ T9] device hsr_slave_1 left promiscuous mode
[ 74.954180][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.963011][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.972178][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.979888][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.987499][ T9] device bridge_slave_1 left promiscuous mode
[ 74.994155][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.003454][ T9] device bridge_slave_0 left promiscuous mode
[ 75.009748][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.020892][ T9] device veth1_macvtap left promiscuous mode
[ 75.026935][ T9] device veth0_macvtap left promiscuous mode
[ 75.033042][ T9] device veth1_vlan left promiscuous mode
[ 75.038870][ T9] device veth0_vlan left promiscuous mode
[ 75.154308][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 75.165973][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 75.180024][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 75.192375][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 75.234856][ T9] bond0 (unregistering): Released all slaves
[ 76.350574][ T1108] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts.
2026/07/27 07:19:25 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 84.262122][ T4531] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 86.939282][ T4605] chnl_net:caif_netlink_parms(): no params data found
[ 87.035289][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.043768][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.052038][ T4605] device bridge_slave_0 entered promiscuous mode
[ 87.061956][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.069185][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.077426][ T4605] device bridge_slave_1 entered promiscuous mode
[ 87.106302][ T4605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.141579][ T4605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.175549][ T4605] team0: Port device team_slave_0 added
[ 87.183667][ T4605] team0: Port device team_slave_1 added
[ 87.203670][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.217844][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.262331][ T4605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.281314][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.288863][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.315329][ T4605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.350144][ T4605] device hsr_slave_0 entered promiscuous mode
[ 87.357068][ T4605] device hsr_slave_1 entered promiscuous mode
[ 88.014333][ T4605] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.024763][ T4605] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.042946][ T4605] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.053550][ T4605] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.117643][ T4605] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.133330][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 88.142242][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 88.154299][ T4605] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.187905][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 88.196607][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 88.208662][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.216008][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.224182][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 88.233774][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 88.242547][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.249650][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.257473][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 88.266477][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 88.278524][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 88.299235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 88.315770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 88.326918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 88.336485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 88.347435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 88.357927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 88.366456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 88.376756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 88.387872][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 88.401861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 88.538987][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 88.546487][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 88.587325][ T4605] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.606767][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 88.618708][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.650377][ T4605] device veth0_vlan entered promiscuous mode
[ 88.659479][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.670728][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.683587][ T4605] device veth1_vlan entered promiscuous mode
[ 88.713801][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.722157][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.731573][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 88.755229][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 88.765303][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 88.774479][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 88.788694][ T4605] device veth0_macvtap entered promiscuous mode
[ 88.802007][ T4605] device veth1_macvtap entered promiscuous mode
[ 88.837376][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.848197][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 88.856899][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 88.866959][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 88.876201][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 88.889458][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.901318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 88.910239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 88.921491][ T4605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.931962][ T4605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.941284][ T4605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.951648][ T4605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.480829][ T3086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.497195][ T3086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.532593][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 90.547547][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.558898][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.566509][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 91.100768][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/27 07:19:35 executed programs: 0
[ 91.463795][ T4805] chnl_net:caif_netlink_parms(): no params data found
[ 91.523372][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.530982][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.539330][ T4805] device bridge_slave_0 entered promiscuous mode
[ 91.548342][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.555483][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.563817][ T4805] device bridge_slave_1 entered promiscuous mode
[ 91.586278][ T4805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.599061][ T4805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.624588][ T4805] team0: Port device team_slave_0 added
[ 91.632877][ T4805] team0: Port device team_slave_1 added
[ 91.653190][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.661031][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.688000][ T4805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.701272][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.708817][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.735533][ T4805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.775511][ T4805] device hsr_slave_0 entered promiscuous mode
[ 91.782643][ T4805] device hsr_slave_1 entered promiscuous mode
[ 91.789795][ T4805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 91.797381][ T4805] Cannot create hsr debugfs directory
[ 93.389026][ T4258] Bluetooth: hci0: command 0x0409 tx timeout
[ 94.142363][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.211201][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.253185][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.125583][ T4805] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.135772][ T4805] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.161178][ T4805] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.171144][ T4805] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.232062][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.257043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 95.264946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 95.275919][ T4805] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.285682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 95.294834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 95.303668][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.310783][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.320786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 95.344446][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 95.354012][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 95.363980][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.371463][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.383134][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 95.406032][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 95.417083][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 95.426451][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 95.435473][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 95.461573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 95.468036][ T4311] Bluetooth: hci0: command 0x041b tx timeout
[ 95.473089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 95.484241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 95.493235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 95.502163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 95.511144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 95.520643][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 95.599864][ T9] device hsr_slave_0 left promiscuous mode
[ 95.606411][ T9] device hsr_slave_1 left promiscuous mode
[ 95.613564][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 95.621490][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 95.629875][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 95.637470][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 95.646085][ T9] device bridge_slave_1 left promiscuous mode
[ 95.653442][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.661836][ T9] device bridge_slave_0 left promiscuous mode
[ 95.668421][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.679004][ T9] device veth1_macvtap left promiscuous mode
[ 95.685073][ T9] device veth0_macvtap left promiscuous mode
[ 95.692312][ T9] device veth1_vlan left promiscuous mode
[ 95.698196][ T9] device veth0_vlan left promiscuous mode
[ 95.827259][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 95.840405][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 95.851702][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.864497][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 95.915670][ T9] bond0 (unregistering): Released all slaves
[ 95.976883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 95.985111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 95.997118][ T4805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.012653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 96.022210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 96.044908][ T4805] device veth0_vlan entered promiscuous mode
[ 96.056144][ T4805] device veth1_vlan entered promiscuous mode
[ 96.068686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 96.076831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 96.085225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 96.093291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 96.101306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 96.128675][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 96.136682][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 96.145899][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 96.156305][ T4805] device veth0_macvtap entered promiscuous mode
[ 96.165042][ T4805] device veth1_macvtap entered promiscuous mode
[ 96.186294][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.195583][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 96.203703][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 96.211788][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 96.220377][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 96.230798][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.238930][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 96.247731][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 96.259312][ T4805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.268282][ T4805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.276964][ T4805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.286101][ T4805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.340044][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.356243][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.366209][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/07/27 07:19:40 executed programs: 2
[ 96.387809][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.395647][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.403694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 96.471419][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 96.530697][ T4984] ==================================================================
[ 96.538982][ T4984] BUG: KASAN: use-after-free in ax25_fillin_cb+0x458/0x640
[ 96.546209][ T4984] Read of size 4 at addr ffff8880223ddd38 by task syz.0.19/4984
[ 96.553961][ T4984]
[ 96.556298][ T4984] CPU: 0 PID: 4984 Comm: syz.0.19 Not tainted syzkaller #0
[ 96.563492][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 96.573551][ T4984] Call Trace:
[ 96.576824][ T4984]
[ 96.579748][ T4984] dump_stack_lvl+0x188/0x250
[ 96.584432][ T4984] ? show_regs_print_info+0x20/0x20
[ 96.589710][ T4984] ? _printk+0xda/0x130
[ 96.593857][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 96.598709][ T4984] ? load_image+0x410/0x410
[ 96.603390][ T4984] print_address_description+0x60/0x2d0
[ 96.608993][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 96.613841][ T4984] kasan_report+0xdf/0x130
[ 96.618342][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 96.623192][ T4984] ax25_fillin_cb+0x458/0x640
[ 96.627898][ T4984] ax25_setsockopt+0x8c9/0xa60
[ 96.632666][ T4984] ? ax25_shutdown+0x10/0x10
[ 96.637261][ T4984] ? aa_sock_opt_perm+0x74/0x100
[ 96.642196][ T4984] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 96.647752][ T4984] ? security_socket_setsockopt+0x7a/0xa0
[ 96.653466][ T4984] ? ax25_shutdown+0x10/0x10
[ 96.658062][ T4984] __sys_setsockopt+0x2bf/0x3d0
[ 96.662918][ T4984] __x64_sys_setsockopt+0xb1/0xc0
[ 96.667941][ T4984] do_syscall_64+0x4c/0xa0
[ 96.672389][ T4984] ? clear_bhb_loop+0x30/0x80
[ 96.677065][ T4984] ? clear_bhb_loop+0x30/0x80
[ 96.681738][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 96.687641][ T4984] RIP: 0033:0x7f70bd293819
[ 96.692063][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.711761][ T4984] RSP: 002b:00007f70bc8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 96.720190][ T4984] RAX: ffffffffffffffda RBX: 00007f70bd50cfa0 RCX: 00007f70bd293819
[ 96.728170][ T4984] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 96.736141][ T4984] RBP: 00007f70bd329c91 R08: 0000000000000010 R09: 0000000000000000
[ 96.744110][ T4984] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 96.752085][ T4984] R13: 00007f70bd50d038 R14: 00007f70bd50cfa0 R15: 00007ffca0ac14a8
[ 96.760077][ T4984]
[ 96.763188][ T4984]
[ 96.765504][ T4984] Allocated by task 4980:
[ 96.769821][ T4984] __kasan_kmalloc+0xaf/0xe0
[ 96.774527][ T4984] ax25_dev_device_up+0x50/0x580
[ 96.779489][ T4984] ax25_device_event+0x487/0x4f0
[ 96.784449][ T4984] raw_notifier_call_chain+0xcb/0x160
[ 96.789822][ T4984] __dev_notify_flags+0x194/0x300
[ 96.794856][ T4984] dev_change_flags+0xda/0x1a0
[ 96.799618][ T4984] dev_ifsioc+0x130/0xd50
[ 96.803948][ T4984] dev_ioctl+0x545/0xe30
[ 96.808188][ T4984] sock_do_ioctl+0x245/0x320
[ 96.812782][ T4984] sock_ioctl+0x48a/0x700
[ 96.817106][ T4984] __se_sys_ioctl+0xfa/0x170
[ 96.821709][ T4984] do_syscall_64+0x4c/0xa0
[ 96.826130][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 96.832021][ T4984]
[ 96.834339][ T4984] Freed by task 4981:
[ 96.838310][ T4984] kasan_set_track+0x4b/0x70
[ 96.842916][ T4984] kasan_set_free_info+0x1f/0x40
[ 96.847868][ T4984] ____kasan_slab_free+0xd5/0x110
[ 96.853416][ T4984] slab_free_freelist_hook+0xec/0x170
[ 96.858803][ T4984] kfree+0xef/0x2a0
[ 96.862624][ T4984] ax25_release+0x60f/0x810
[ 96.867123][ T4984] sock_close+0xbf/0x210
[ 96.871372][ T4984] __fput+0x212/0x8c0
[ 96.875358][ T4984] task_work_run+0x125/0x1a0
[ 96.879947][ T4984] exit_to_user_mode_loop+0x10f/0x130
[ 96.885321][ T4984] exit_to_user_mode_prepare+0xee/0x180
[ 96.890859][ T4984] syscall_exit_to_user_mode+0x16/0x40
[ 96.896322][ T4984] do_syscall_64+0x58/0xa0
[ 96.900730][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 96.906623][ T4984]
[ 96.908939][ T4984] Last potentially related work creation:
[ 96.914644][ T4984] kasan_save_stack+0x35/0x60
[ 96.919410][ T4984] kasan_record_aux_stack+0xb8/0x100
[ 96.924691][ T4984] call_rcu+0x189/0x900
[ 96.928853][ T4984] nf_unregister_net_hooks+0xc7/0x130
[ 96.934220][ T4984] nf_nat_unregister_fn+0x226/0x360
[ 96.939421][ T4984] ip6table_nat_net_pre_exit+0x74/0x90
[ 96.944879][ T4984] cleanup_net+0x58e/0xba0
[ 96.949309][ T4984] process_one_work+0x867/0xff0
[ 96.954161][ T4984] worker_thread+0xad7/0x12a0
[ 96.959025][ T4984] kthread+0x42e/0x520
[ 96.963105][ T4984] ret_from_fork+0x1f/0x30
[ 96.967627][ T4984]
[ 96.969960][ T4984] Second to last potentially related work creation:
[ 96.976635][ T4984] kasan_save_stack+0x35/0x60
[ 96.981328][ T4984] kasan_record_aux_stack+0xb8/0x100
[ 96.986629][ T4984] insert_work+0x54/0x3d0
[ 96.990966][ T4984] __queue_work+0x90b/0xc80
[ 96.995473][ T4984] queue_work_on+0x124/0x1f0
[ 97.000057][ T4984] netdevice_event+0x898/0x930
[ 97.004820][ T4984] raw_notifier_call_chain+0xcb/0x160
[ 97.010189][ T4984] dev_set_mac_address+0x2ed/0x400
[ 97.015307][ T4984] dev_set_mac_address_user+0x2d/0x50
[ 97.020690][ T4984] do_setlink+0x842/0x29d0
[ 97.025130][ T4984] rtnl_newlink+0x15bb/0x1920
[ 97.029802][ T4984] rtnetlink_rcv_msg+0x7f1/0xf10
[ 97.034737][ T4984] netlink_rcv_skb+0x1e9/0x430
[ 97.039501][ T4984] netlink_unicast+0x78f/0x940
[ 97.044266][ T4984] netlink_sendmsg+0x8ba/0xbe0
[ 97.049029][ T4984] __sys_sendto+0x46d/0x620
[ 97.053527][ T4984] __x64_sys_sendto+0xda/0xf0
[ 97.058198][ T4984] do_syscall_64+0x4c/0xa0
[ 97.062611][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 97.068497][ T4984]
[ 97.070811][ T4984] The buggy address belongs to the object at ffff8880223ddd00
[ 97.070811][ T4984] which belongs to the cache kmalloc-192 of size 192
[ 97.084860][ T4984] The buggy address is located 56 bytes inside of
[ 97.084860][ T4984] 192-byte region [ffff8880223ddd00, ffff8880223dddc0)
[ 97.098146][ T4984] The buggy address belongs to the page:
[ 97.103791][ T4984] page:ffffea000088f740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x223dd
[ 97.113946][ T4984] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 97.121548][ T4984] raw: 00fff00000000200 0000000000000000 0000000500000001 ffff888016c41a00
[ 97.130154][ T4984] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 97.138728][ T4984] page dumped because: kasan: bad access detected
[ 97.145139][ T4984] page_owner tracks the page as allocated
[ 97.150872][ T4984] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 6542630004, free_ts 6540565506
[ 97.166510][ T4984] get_page_from_freelist+0x24f6/0x2670
[ 97.172079][ T4984] __alloc_pages+0x1ee/0x480
[ 97.176669][ T4984] alloc_page_interleave+0x24/0x1e0
[ 97.181952][ T4984] new_slab+0xc0/0x4b0
[ 97.186016][ T4984] ___slab_alloc+0x807/0xdd0
[ 97.190637][ T4984] kmem_cache_alloc_node_trace+0x120/0x2f0
[ 97.196438][ T4984] init_rescuer+0x91/0x290
[ 97.200857][ T4984] alloc_workqueue+0xfb8/0x1450
[ 97.205708][ T4984] nvmet_tcp_init+0x1a/0x70
[ 97.210207][ T4984] do_one_initcall+0x272/0x730
[ 97.214967][ T4984] do_initcall_level+0x13d/0x1f0
[ 97.219897][ T4984] do_initcalls+0x4b/0x90
[ 97.224227][ T4984] kernel_init_freeable+0x3d5/0x560
[ 97.229506][ T4984] kernel_init+0x19/0x1b0
[ 97.233838][ T4984] ret_from_fork+0x1f/0x30
[ 97.238261][ T4984] page last free stack trace:
[ 97.243025][ T4984] free_unref_page_prepare+0x637/0x6c0
[ 97.248493][ T4984] free_unref_page+0x8f/0x2a0
[ 97.253176][ T4984] __vunmap+0x8e0/0xa80
[ 97.257322][ T4984] free_work+0x56/0x80
[ 97.261387][ T4984] process_one_work+0x867/0xff0
[ 97.266324][ T4984] worker_thread+0xad7/0x12a0
[ 97.271004][ T4984] kthread+0x42e/0x520
[ 97.275055][ T4984] ret_from_fork+0x1f/0x30
[ 97.279464][ T4984]
[ 97.281787][ T4984] Memory state around the buggy address:
[ 97.287414][ T4984] ffff8880223ddc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 97.295452][ T4984] ffff8880223ddc80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 97.303499][ T4984] >ffff8880223ddd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.311544][ T4984] ^
[ 97.317444][ T4984] ffff8880223ddd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 97.325597][ T4984] ffff8880223dde00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.333656][ T4984] ==================================================================
[ 97.341914][ T4984] Disabling lock debugging due to kernel taint
[ 97.351429][ T4984] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.358638][ T4984] CPU: 0 PID: 4984 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 97.367209][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 97.377253][ T4984] Call Trace:
[ 97.380523][ T4984]
[ 97.383436][ T4984] dump_stack_lvl+0x188/0x250
[ 97.388103][ T4984] ? show_regs_print_info+0x20/0x20
[ 97.393350][ T4984] ? load_image+0x410/0x410
[ 97.397927][ T4984] panic+0x2f8/0x850
[ 97.401837][ T4984] ? bpf_jit_dump+0xd0/0xd0
[ 97.406317][ T4984] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 97.412276][ T4984] ? _raw_spin_unlock+0x40/0x40
[ 97.417115][ T4984] ? print_memory_metadata+0x314/0x400
[ 97.422645][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 97.427485][ T4984] check_panic_on_warn+0x80/0xa0
[ 97.432416][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 97.437248][ T4984] end_report+0x6d/0xf0
[ 97.441386][ T4984] kasan_report+0x102/0x130
[ 97.445891][ T4984] ? ax25_fillin_cb+0x458/0x640
[ 97.450722][ T4984] ax25_fillin_cb+0x458/0x640
[ 97.455394][ T4984] ax25_setsockopt+0x8c9/0xa60
[ 97.460231][ T4984] ? ax25_shutdown+0x10/0x10
[ 97.464818][ T4984] ? aa_sock_opt_perm+0x74/0x100
[ 97.469758][ T4984] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 97.475286][ T4984] ? security_socket_setsockopt+0x7a/0xa0
[ 97.480985][ T4984] ? ax25_shutdown+0x10/0x10
[ 97.485557][ T4984] __sys_setsockopt+0x2bf/0x3d0
[ 97.490390][ T4984] __x64_sys_setsockopt+0xb1/0xc0
[ 97.495392][ T4984] do_syscall_64+0x4c/0xa0
[ 97.499792][ T4984] ? clear_bhb_loop+0x30/0x80
[ 97.504451][ T4984] ? clear_bhb_loop+0x30/0x80
[ 97.509107][ T4984] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 97.514993][ T4984] RIP: 0033:0x7f70bd293819
[ 97.519388][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.539148][ T4984] RSP: 002b:00007f70bc8f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 97.547549][ T4984] RAX: ffffffffffffffda RBX: 00007f70bd50cfa0 RCX: 00007f70bd293819
[ 97.548183][ T4333] Bluetooth: hci0: command 0x040f tx timeout
[ 97.555532][ T4984] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 97.555549][ T4984] RBP: 00007f70bd329c91 R08: 0000000000000010 R09: 0000000000000000
[ 97.555558][ T4984] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 97.555568][ T4984] R13: 00007f70bd50d038 R14: 00007f70bd50cfa0 R15: 00007ffca0ac14a8
[ 97.593688][ T4984]
[ 97.596906][ T4984] Kernel Offset: disabled
[ 97.601314][ T4984] Rebooting in 86400 seconds..