Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts.
2026/05/12 09:42:35 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 111.851286][ T4627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 114.460963][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.469460][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.479382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 114.504797][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.513522][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.522565][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 115.656371][ T4691] chnl_net:caif_netlink_parms(): no params data found
[ 115.704679][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.712523][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.720691][ T4691] device bridge_slave_0 entered promiscuous mode
[ 115.729064][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.737416][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.745985][ T4691] device bridge_slave_1 entered promiscuous mode
[ 115.766312][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.778343][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.803019][ T4691] team0: Port device team_slave_0 added
[ 115.811894][ T4691] team0: Port device team_slave_1 added
[ 115.829287][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.836706][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 115.863564][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.875861][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.883277][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 115.909661][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.941964][ T4691] device hsr_slave_0 entered promiscuous mode
[ 115.949315][ T4691] device hsr_slave_1 entered promiscuous mode
[ 116.562879][ T4691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.572791][ T4691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.582813][ T4691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.599846][ T4691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.660773][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.667941][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.676096][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.683626][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.718962][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.728812][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.811552][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.827794][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 116.837865][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 116.865421][ T4691] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.876213][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 116.886437][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 116.895538][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.902821][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.939930][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 116.948857][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 116.961242][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.968640][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.978861][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 117.013273][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 117.023020][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 117.034607][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 117.045466][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 117.055617][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 117.065102][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 117.074953][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 117.085493][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 117.099897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 117.110807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 117.126039][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 117.345047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 117.353610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 117.367518][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.394856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 117.405608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 117.438263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 117.460330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 117.472659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 117.491368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 117.514453][ T4691] device veth0_vlan entered promiscuous mode
[ 117.532658][ T4691] device veth1_vlan entered promiscuous mode
[ 117.557206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 117.571371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 117.590608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 117.604918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 117.619845][ T4691] device veth0_macvtap entered promiscuous mode
[ 117.639718][ T4691] device veth1_macvtap entered promiscuous mode
[ 117.672474][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.701139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 117.720882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 117.737071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 117.746129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 117.759767][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.768070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 117.780423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 117.792678][ T4691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.809571][ T4691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.818379][ T4691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.839625][ T4691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/05/12 09:42:46 executed programs: 0
[ 119.365494][ T4801] chnl_net:caif_netlink_parms(): no params data found
[ 119.498140][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.508064][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.516791][ T4801] device bridge_slave_0 entered promiscuous mode
[ 119.525489][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.532937][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.542588][ T4801] device bridge_slave_1 entered promiscuous mode
[ 119.566649][ T4801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.578900][ T4801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.623293][ T4801] team0: Port device team_slave_0 added
[ 119.643676][ T3071] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.658507][ T4801] team0: Port device team_slave_1 added
[ 119.685359][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.693208][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 119.720749][ T4801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.735224][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.744278][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 119.775774][ T4801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.818560][ T4801] device hsr_slave_0 entered promiscuous mode
[ 119.829064][ T4801] device hsr_slave_1 entered promiscuous mode
[ 119.836772][ T4801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 119.847298][ T4801] Cannot create hsr debugfs directory
[ 121.259766][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[ 122.896100][ T3071] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 122.957747][ T3071] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 123.035706][ T3071] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 123.345243][ T4263] Bluetooth: hci0: command 0x041b tx timeout
[ 123.913511][ T4801] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.924313][ T4801] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.934884][ T4801] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.958696][ T4801] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 124.043846][ T4801] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.057434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 124.066090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 124.077893][ T4801] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.089094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 124.098256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 124.107027][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.114491][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.122701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 124.149382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 124.158764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 124.167740][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.175001][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.186216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 124.215841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 124.228710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 124.238373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 124.248167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 124.276177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 124.286086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 124.301192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 124.310291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 124.322507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 124.331762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 124.343563][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 124.405537][ T3071] device hsr_slave_0 left promiscuous mode
[ 124.413271][ T3071] device hsr_slave_1 left promiscuous mode
[ 124.420398][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 124.428011][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 124.436932][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 124.444769][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 124.452706][ T3071] device bridge_slave_1 left promiscuous mode
[ 124.459256][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.468267][ T3071] device bridge_slave_0 left promiscuous mode
[ 124.475519][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.488250][ T3071] device veth1_macvtap left promiscuous mode
[ 124.494531][ T3071] device veth0_macvtap left promiscuous mode
[ 124.502247][ T3071] device veth1_vlan left promiscuous mode
[ 124.508085][ T3071] device veth0_vlan left promiscuous mode
[ 124.675056][ T3071] team0 (unregistering): Port device team_slave_1 removed
[ 124.689204][ T3071] team0 (unregistering): Port device team_slave_0 removed
[ 124.706529][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 124.721029][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 124.781557][ T3071] bond0 (unregistering): Released all slaves
[ 124.861353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 124.868986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 124.894917][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 124.913308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 124.923979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 124.956282][ T4801] device veth0_vlan entered promiscuous mode
[ 124.973903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 124.982357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 124.992206][ T4801] device veth1_vlan entered promiscuous mode
[ 124.999380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 125.007634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 125.016128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 125.055085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 125.065421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 125.074863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 125.087633][ T4801] device veth0_macvtap entered promiscuous mode
[ 125.098813][ T4801] device veth1_macvtap entered promiscuous mode
[ 125.118373][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.127343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 125.135925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 125.145406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 125.158044][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.169164][ T4801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.178983][ T4801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.188644][ T4801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.197826][ T4801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.211984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 125.221015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 125.289390][ T4736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.297910][ T4736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.315020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/05/12 09:42:53 executed programs: 2
[ 125.347331][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.356155][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.367332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 125.421105][ T4273] Bluetooth: hci0: command 0x040f tx timeout
[ 125.448173][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 125.516709][ T5079] ==================================================================
[ 125.525106][ T5079] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 125.532373][ T5079] Read of size 4 at addr ffff8880203d2138 by task syz.0.19/5079
[ 125.540051][ T5079]
[ 125.542417][ T5079] CPU: 0 PID: 5079 Comm: syz.0.19 Not tainted syzkaller #0
[ 125.549990][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 125.560353][ T5079] Call Trace:
[ 125.563677][ T5079]
[ 125.566896][ T5079] dump_stack_lvl+0x188/0x250
[ 125.571645][ T5079] ? show_regs_print_info+0x20/0x20
[ 125.577068][ T5079] ? _printk+0xda/0x130
[ 125.581388][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 125.586385][ T5079] ? load_image+0x400/0x400
[ 125.590938][ T5079] print_address_description+0x60/0x2d0
[ 125.596642][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 125.601615][ T5079] kasan_report+0xdf/0x130
[ 125.606182][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 125.611088][ T5079] ax25_fillin_cb+0x459/0x640
[ 125.615797][ T5079] ax25_setsockopt+0x8c9/0xa60
[ 125.620600][ T5079] ? ax25_shutdown+0x10/0x10
[ 125.625232][ T5079] ? aa_sock_opt_perm+0x74/0x100
[ 125.630305][ T5079] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 125.636043][ T5079] ? security_socket_setsockopt+0x7a/0xa0
[ 125.642143][ T5079] ? ax25_shutdown+0x10/0x10
[ 125.646892][ T5079] __sys_setsockopt+0x2bf/0x3d0
[ 125.651870][ T5079] __x64_sys_setsockopt+0xb1/0xc0
[ 125.656937][ T5079] do_syscall_64+0x4c/0xa0
[ 125.661386][ T5079] ? clear_bhb_loop+0x30/0x80
[ 125.666091][ T5079] ? clear_bhb_loop+0x30/0x80
[ 125.670794][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 125.676729][ T5079] RIP: 0033:0x7f8e2370a819
[ 125.681183][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.701007][ T5079] RSP: 002b:00007f8e22d6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 125.710115][ T5079] RAX: ffffffffffffffda RBX: 00007f8e23983fa0 RCX: 00007f8e2370a819
[ 125.718132][ T5079] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 125.726229][ T5079] RBP: 00007f8e237a0c91 R08: 0000000000000010 R09: 0000000000000000
[ 125.734336][ T5079] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 125.742510][ T5079] R13: 00007f8e23984038 R14: 00007f8e23983fa0 R15: 00007fff21eb75a8
[ 125.750715][ T5079]
[ 125.753763][ T5079]
[ 125.756116][ T5079] Allocated by task 5075:
[ 125.760555][ T5079] __kasan_kmalloc+0xb5/0xf0
[ 125.765182][ T5079] ax25_dev_device_up+0x50/0x580
[ 125.770179][ T5079] ax25_device_event+0x483/0x4f0
[ 125.775252][ T5079] raw_notifier_call_chain+0xcb/0x160
[ 125.780680][ T5079] __dev_notify_flags+0x194/0x300
[ 125.785744][ T5079] dev_change_flags+0xe3/0x1a0
[ 125.790623][ T5079] dev_ifsioc+0x130/0xd50
[ 125.795239][ T5079] dev_ioctl+0x545/0xe30
[ 125.799512][ T5079] sock_do_ioctl+0x245/0x320
[ 125.804303][ T5079] sock_ioctl+0x4d2/0x710
[ 125.808665][ T5079] __se_sys_ioctl+0xfa/0x170
[ 125.813279][ T5079] do_syscall_64+0x4c/0xa0
[ 125.817742][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 125.823698][ T5079]
[ 125.826326][ T5079] Freed by task 5076:
[ 125.830461][ T5079] kasan_set_track+0x4b/0x70
[ 125.835273][ T5079] kasan_set_free_info+0x1f/0x40
[ 125.840251][ T5079] ____kasan_slab_free+0xd5/0x110
[ 125.845317][ T5079] slab_free_freelist_hook+0xea/0x170
[ 125.850813][ T5079] kfree+0xef/0x2a0
[ 125.854689][ T5079] ax25_release+0x661/0x870
[ 125.859241][ T5079] sock_close+0xd5/0x240
[ 125.863523][ T5079] __fput+0x234/0x930
[ 125.867632][ T5079] task_work_run+0x125/0x1a0
[ 125.872351][ T5079] exit_to_user_mode_loop+0x10f/0x130
[ 125.877854][ T5079] exit_to_user_mode_prepare+0xee/0x180
[ 125.883437][ T5079] syscall_exit_to_user_mode+0x16/0x40
[ 125.888922][ T5079] do_syscall_64+0x58/0xa0
[ 125.893364][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 125.899284][ T5079]
[ 125.901635][ T5079] Last potentially related work creation:
[ 125.907507][ T5079] kasan_save_stack+0x35/0x60
[ 125.912241][ T5079] kasan_record_aux_stack+0xb8/0x100
[ 125.917576][ T5079] call_rcu+0x189/0x950
[ 125.921774][ T5079] rht_deferred_worker+0x1781/0x1f30
[ 125.927185][ T5079] process_one_work+0x85f/0x1010
[ 125.932169][ T5079] worker_thread+0xaa6/0x1290
[ 125.937011][ T5079] kthread+0x436/0x520
[ 125.941238][ T5079] ret_from_fork+0x1f/0x30
[ 125.945692][ T5079]
[ 125.948040][ T5079] The buggy address belongs to the object at ffff8880203d2100
[ 125.948040][ T5079] which belongs to the cache kmalloc-192 of size 192
[ 125.962607][ T5079] The buggy address is located 56 bytes inside of
[ 125.962607][ T5079] 192-byte region [ffff8880203d2100, ffff8880203d21c0)
[ 125.976283][ T5079] The buggy address belongs to the page:
[ 125.981950][ T5079] page:ffffea000080f480 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880203d2500 pfn:0x203d2
[ 125.993524][ T5079] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 126.001251][ T5079] raw: 00fff00000000200 ffffea00009105c0 0000000800000004 ffff888016c41a00
[ 126.010133][ T5079] raw: ffff8880203d2500 000000008010000e 00000001ffffffff 0000000000000000
[ 126.018748][ T5079] page dumped because: kasan: bad access detected
[ 126.025305][ T5079] page_owner tracks the page as allocated
[ 126.031044][ T5079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1134, ts 88626891914, free_ts 87570931010
[ 126.047186][ T5079] get_page_from_freelist+0x1bbd/0x1ca0
[ 126.052774][ T5079] __alloc_pages+0x1ee/0x480
[ 126.057428][ T5079] new_slab+0xb6/0x4b0
[ 126.061534][ T5079] ___slab_alloc+0x80a/0xdd0
[ 126.066155][ T5079] __kmalloc_node+0x200/0x3b0
[ 126.070954][ T5079] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 126.076804][ T5079] new_slab+0x100/0x4b0
[ 126.081005][ T5079] ___slab_alloc+0x80a/0xdd0
[ 126.085714][ T5079] kmem_cache_alloc+0x195/0x290
[ 126.090598][ T5079] __d_alloc+0x2a/0x6f0
[ 126.094786][ T5079] d_alloc_parallel+0x7b/0x1330
[ 126.099673][ T5079] __lookup_slow+0x134/0x410
[ 126.104399][ T5079] lookup_one_len+0x19d/0x2d0
[ 126.109126][ T5079] start_creating+0x184/0x310
[ 126.113834][ T5079] __debugfs_create_file+0x6f/0x510
[ 126.119069][ T5079] nsim_ethtool_init+0x244/0x350
[ 126.124046][ T5079] page last free stack trace:
[ 126.129096][ T5079] free_unref_page_prepare+0x637/0x6c0
[ 126.134588][ T5079] free_unref_page+0x8f/0x2a0
[ 126.139297][ T5079] __unfreeze_partials+0x1a5/0x200
[ 126.144440][ T5079] put_cpu_partial+0x12d/0x190
[ 126.149429][ T5079] qlist_free_all+0x35/0x90
[ 126.153958][ T5079] kasan_quarantine_reduce+0x150/0x160
[ 126.159457][ T5079] __kasan_slab_alloc+0x2f/0xd0
[ 126.164341][ T5079] slab_post_alloc_hook+0x4c/0x380
[ 126.169480][ T5079] kmem_cache_alloc_trace+0x103/0x2a0
[ 126.175054][ T5079] nsim_fib_event_work+0x11d2/0x33e0
[ 126.180378][ T5079] process_one_work+0x85f/0x1010
[ 126.185442][ T5079] worker_thread+0xd60/0x1290
[ 126.190159][ T5079] kthread+0x436/0x520
[ 126.194353][ T5079] ret_from_fork+0x1f/0x30
[ 126.198800][ T5079]
[ 126.201148][ T5079] Memory state around the buggy address:
[ 126.206796][ T5079] ffff8880203d2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 126.214900][ T5079] ffff8880203d2080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 126.223010][ T5079] >ffff8880203d2100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 126.231191][ T5079] ^
[ 126.237118][ T5079] ffff8880203d2180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 126.245318][ T5079] ffff8880203d2200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 126.253686][ T5079] ==================================================================
[ 126.261939][ T5079] Disabling lock debugging due to kernel taint
[ 126.279520][ T5079] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 126.286769][ T5079] CPU: 0 PID: 5079 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 126.295735][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 126.305926][ T5079] Call Trace:
[ 126.309322][ T5079]
[ 126.312461][ T5079] dump_stack_lvl+0x188/0x250
[ 126.317263][ T5079] ? show_regs_print_info+0x20/0x20
[ 126.322488][ T5079] ? load_image+0x400/0x400
[ 126.327322][ T5079] panic+0x2e5/0x810
[ 126.331289][ T5079] ? bpf_jit_dump+0xd0/0xd0
[ 126.336009][ T5079] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 126.342027][ T5079] ? _raw_spin_unlock+0x40/0x40
[ 126.346913][ T5079] ? print_memory_metadata+0x314/0x400
[ 126.352415][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 126.357313][ T5079] check_panic_on_warn+0x80/0xa0
[ 126.362487][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 126.367477][ T5079] end_report+0x6d/0xf0
[ 126.371676][ T5079] kasan_report+0x102/0x130
[ 126.376225][ T5079] ? ax25_fillin_cb+0x459/0x640
[ 126.381586][ T5079] ax25_fillin_cb+0x459/0x640
[ 126.386930][ T5079] ax25_setsockopt+0x8c9/0xa60
[ 126.391917][ T5079] ? ax25_shutdown+0x10/0x10
[ 126.396550][ T5079] ? aa_sock_opt_perm+0x74/0x100
[ 126.401923][ T5079] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 126.407640][ T5079] ? security_socket_setsockopt+0x7a/0xa0
[ 126.413589][ T5079] ? ax25_shutdown+0x10/0x10
[ 126.418409][ T5079] __sys_setsockopt+0x2bf/0x3d0
[ 126.423306][ T5079] __x64_sys_setsockopt+0xb1/0xc0
[ 126.428498][ T5079] do_syscall_64+0x4c/0xa0
[ 126.433068][ T5079] ? clear_bhb_loop+0x30/0x80
[ 126.438135][ T5079] ? clear_bhb_loop+0x30/0x80
[ 126.442949][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 126.449017][ T5079] RIP: 0033:0x7f8e2370a819
[ 126.453467][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 126.473186][ T5079] RSP: 002b:00007f8e22d6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 126.481824][ T5079] RAX: ffffffffffffffda RBX: 00007f8e23983fa0 RCX: 00007f8e2370a819
[ 126.490015][ T5079] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 126.498283][ T5079] RBP: 00007f8e237a0c91 R08: 0000000000000010 R09: 0000000000000000
[ 126.506714][ T5079] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 126.514798][ T5079] R13: 00007f8e23984038 R14: 00007f8e23983fa0 R15: 00007fff21eb75a8
[ 126.522911][ T5079]
[ 126.526316][ T5079] Kernel Offset: disabled
[ 126.530665][ T5079] Rebooting in 86400 seconds..