[ 75.311907][ T150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.322658][ T150] device veth1_macvtap left promiscuous mode
[ 75.329135][ T150] device veth0_macvtap left promiscuous mode
[ 75.336095][ T150] device veth1_vlan left promiscuous mode
[ 75.342099][ T150] device veth0_vlan left promiscuous mode
[ 75.496415][ T150] team0 (unregistering): Port device team_slave_1 removed
[ 75.524243][ T150] team0 (unregistering): Port device team_slave_0 removed
[ 75.538355][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 75.550772][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 75.597218][ T150] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts.
[ 81.624684][ T1323] cfg80211: failed to load regulatory.db
2026/10/06 18:18:28 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 85.833085][ T4537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 87.084424][ T4556] chnl_net:caif_netlink_parms(): no params data found
[ 87.121108][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.128440][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.136309][ T4556] device bridge_slave_0 entered promiscuous mode
[ 87.147741][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.155084][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.163006][ T4556] device bridge_slave_1 entered promiscuous mode
[ 87.180166][ T4556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.193800][ T4556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.213313][ T4556] team0: Port device team_slave_0 added
[ 87.220509][ T4556] team0: Port device team_slave_1 added
[ 87.236721][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.243967][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.270139][ T4556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.284694][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.291740][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.318159][ T4556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.343403][ T4556] device hsr_slave_0 entered promiscuous mode
[ 87.350193][ T4556] device hsr_slave_1 entered promiscuous mode
[ 87.859414][ T4556] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.880549][ T4556] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.905211][ T4556] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.924952][ T4556] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.983732][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.990926][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.998341][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.005463][ T4556] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.105312][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.114370][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.133278][ T4556] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.148509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 88.157537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 88.169997][ T4556] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.181408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 88.200242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 88.211843][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.218992][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.238895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 88.250255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 88.259797][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.267181][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.278570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 88.287542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 88.307623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 88.318484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 88.327629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 88.339063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 88.349929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 88.360532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 88.374348][ T4556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 88.388268][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 88.403799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 88.414121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 88.435052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 88.637283][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 88.652495][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 88.669996][ T4556] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.693994][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 88.706226][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.727918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.738218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.749088][ T4556] device veth0_vlan entered promiscuous mode
[ 88.757311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.766387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.784978][ T4556] device veth1_vlan entered promiscuous mode
[ 88.805488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 88.824173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 88.837905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 88.847205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 88.864828][ T4556] device veth0_macvtap entered promiscuous mode
[ 88.892680][ T4556] device veth1_macvtap entered promiscuous mode
[ 88.921994][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.933132][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.948305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 88.957655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 88.966694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 88.977341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 88.986826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 88.997517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 89.012266][ T4556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.021068][ T4556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.033982][ T4556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.043647][ T4556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.359824][ T150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.876680][ T150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.166812][ T150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.247631][ T150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.880712][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.894059][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.901992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.928142][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.936084][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.944903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 94.958270][ T150] device hsr_slave_0 left promiscuous mode
[ 94.967032][ T150] device hsr_slave_1 left promiscuous mode
[ 95.000857][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 95.008553][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 95.025391][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 95.034438][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 95.043647][ T150] device bridge_slave_1 left promiscuous mode
[ 95.049882][ T150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.074570][ T150] device bridge_slave_0 left promiscuous mode
[ 95.081594][ T150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.097961][ T150] device veth1_macvtap left promiscuous mode
[ 95.104525][ T150] device veth0_macvtap left promiscuous mode
[ 95.110701][ T150] device veth1_vlan left promiscuous mode
[ 95.118008][ T150] device veth0_vlan left promiscuous mode
[ 95.286762][ T150] team0 (unregistering): Port device team_slave_1 removed
[ 95.300095][ T150] team0 (unregistering): Port device team_slave_0 removed
[ 95.313648][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.326706][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 95.372056][ T150] bond0 (unregistering): Released all slaves
2026/10/06 18:18:41 executed programs: 0
[ 97.064662][ T4939] chnl_net:caif_netlink_parms(): no params data found
[ 97.153329][ T4939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.166535][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.175818][ T4939] device bridge_slave_0 entered promiscuous mode
[ 97.184520][ T4939] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.191785][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.203344][ T4939] device bridge_slave_1 entered promiscuous mode
[ 97.244800][ T4939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.261513][ T4939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.296087][ T4939] team0: Port device team_slave_0 added
[ 97.315510][ T4939] team0: Port device team_slave_1 added
[ 97.347986][ T4939] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.355309][ T4939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.383329][ T4939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.405230][ T4939] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.412198][ T4939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.440435][ T4939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.474602][ T4939] device hsr_slave_0 entered promiscuous mode
[ 97.481222][ T4939] device hsr_slave_1 entered promiscuous mode
[ 98.067465][ T4939] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.076918][ T4939] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.087373][ T4939] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.097637][ T4939] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.158982][ T4939] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.173933][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 98.181921][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 98.200427][ T4939] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.211381][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 98.220789][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 98.230493][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.237727][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.257430][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 98.266629][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 98.276044][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 98.286343][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.293489][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.302991][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 98.311753][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 98.331028][ T4939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 98.344537][ T4939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 98.357146][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 98.368422][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 98.378025][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 98.388093][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 98.397276][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 98.406446][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 98.416608][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 98.426428][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 98.479355][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 98.488110][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 98.657213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 98.666087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 98.680264][ T4939] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.707803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 98.717789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 98.772500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 98.780803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 98.790810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 98.799265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 98.809372][ T4939] device veth0_vlan entered promiscuous mode
[ 98.821980][ T4939] device veth1_vlan entered promiscuous mode
[ 98.879655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 98.889912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 98.898262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 98.907075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 98.913367][ T4375] Bluetooth: hci0: command 0x0409 tx timeout
[ 98.918474][ T4939] device veth0_macvtap entered promiscuous mode
[ 98.934356][ T4939] device veth1_macvtap entered promiscuous mode
[ 98.990216][ T4939] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.999429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 99.009833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 99.018741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 99.029337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 99.040753][ T4939] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.053504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 99.064317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 99.075736][ T4939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.085526][ T4939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.094399][ T4939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.103902][ T4939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.201021][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.214584][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.244386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 99.286027][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.296342][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.308041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 99.391405][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 99.506143][ T5069] ==================================================================
[ 99.514441][ T5069] BUG: KASAN: use-after-free in ax25_fillin_cb+0x458/0x640
[ 99.521821][ T5069] Read of size 4 at addr ffff88801be3ff38 by task syz.0.19/5069
[ 99.529843][ T5069]
[ 99.532476][ T5069] CPU: 1 PID: 5069 Comm: syz.0.19 Not tainted syzkaller #0
[ 99.539763][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 99.549863][ T5069] Call Trace:
[ 99.553168][ T5069]
[ 99.556109][ T5069] dump_stack_lvl+0x188/0x250
[ 99.560805][ T5069] ? show_regs_print_info+0x20/0x20
[ 99.566127][ T5069] ? _printk+0xda/0x130
[ 99.570296][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 99.575169][ T5069] ? load_image+0x410/0x410
[ 99.579709][ T5069] print_address_description+0x60/0x2d0
[ 99.585277][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 99.590300][ T5069] kasan_report+0xdf/0x130
[ 99.594825][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 99.599788][ T5069] ax25_fillin_cb+0x458/0x640
[ 99.604493][ T5069] ax25_setsockopt+0x8c9/0xa60
[ 99.609280][ T5069] ? ax25_shutdown+0x10/0x10
[ 99.613888][ T5069] ? aa_sock_opt_perm+0x74/0x100
[ 99.618855][ T5069] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 99.624513][ T5069] ? security_socket_setsockopt+0x7a/0xa0
[ 99.630475][ T5069] ? ax25_shutdown+0x10/0x10
[ 99.635091][ T5069] __sys_setsockopt+0x2bf/0x3d0
[ 99.640064][ T5069] __x64_sys_setsockopt+0xb1/0xc0
[ 99.645227][ T5069] do_syscall_64+0x4c/0xa0
[ 99.649896][ T5069] ? clear_bhb_loop+0x30/0x80
[ 99.654621][ T5069] ? clear_bhb_loop+0x30/0x80
[ 99.659331][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 99.665266][ T5069] RIP: 0033:0x7f1669e30819
[ 99.669715][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 99.689678][ T5069] RSP: 002b:00007f1669492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 99.698127][ T5069] RAX: ffffffffffffffda RBX: 00007f166a0a9fa0 RCX: 00007f1669e30819
[ 99.706369][ T5069] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 99.714446][ T5069] RBP: 00007f1669ec6c91 R08: 0000000000000010 R09: 0000000000000000
[ 99.723046][ T5069] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 99.731032][ T5069] R13: 00007f166a0aa038 R14: 00007f166a0a9fa0 R15: 00007ffe9d92ba68
[ 99.739031][ T5069]
[ 99.742060][ T5069]
[ 99.744397][ T5069] Allocated by task 5062:
[ 99.748753][ T5069] __kasan_kmalloc+0xaf/0xe0
[ 99.753448][ T5069] ax25_dev_device_up+0x50/0x580
[ 99.758403][ T5069] ax25_device_event+0x487/0x4f0
[ 99.763352][ T5069] raw_notifier_call_chain+0xcb/0x160
[ 99.768890][ T5069] __dev_notify_flags+0x194/0x300
[ 99.773934][ T5069] dev_change_flags+0xda/0x1a0
[ 99.778718][ T5069] dev_ifsioc+0x130/0xd50
[ 99.783061][ T5069] dev_ioctl+0x545/0xe30
[ 99.787314][ T5069] sock_do_ioctl+0x245/0x320
[ 99.791997][ T5069] sock_ioctl+0x48a/0x700
[ 99.796347][ T5069] __se_sys_ioctl+0xfa/0x170
[ 99.800948][ T5069] do_syscall_64+0x4c/0xa0
[ 99.805382][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 99.811299][ T5069]
[ 99.813632][ T5069] Freed by task 5065:
[ 99.817805][ T5069] kasan_set_track+0x4b/0x70
[ 99.822408][ T5069] kasan_set_free_info+0x1f/0x40
[ 99.827376][ T5069] ____kasan_slab_free+0xd5/0x110
[ 99.832462][ T5069] slab_free_freelist_hook+0xec/0x170
[ 99.838040][ T5069] kfree+0xef/0x2a0
[ 99.842049][ T5069] ax25_release+0x60f/0x810
[ 99.846783][ T5069] sock_close+0xbf/0x210
[ 99.851050][ T5069] __fput+0x212/0x8c0
[ 99.855049][ T5069] task_work_run+0x125/0x1a0
[ 99.859656][ T5069] exit_to_user_mode_loop+0x10f/0x130
[ 99.865060][ T5069] exit_to_user_mode_prepare+0xee/0x180
[ 99.870821][ T5069] syscall_exit_to_user_mode+0x16/0x40
[ 99.876365][ T5069] do_syscall_64+0x58/0xa0
[ 99.880801][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 99.886726][ T5069]
[ 99.889057][ T5069] Last potentially related work creation:
[ 99.894863][ T5069] kasan_save_stack+0x35/0x60
[ 99.899553][ T5069] kasan_record_aux_stack+0xb8/0x100
[ 99.905002][ T5069] insert_work+0x54/0x3d0
[ 99.909363][ T5069] __queue_work+0x90b/0xc80
[ 99.913890][ T5069] queue_work_on+0x124/0x1f0
[ 99.918592][ T5069] inetaddr_event+0xec/0x150
[ 99.923286][ T5069] blocking_notifier_call_chain+0x103/0x1b0
[ 99.929196][ T5069] __inet_insert_ifa+0x9ea/0xbd0
[ 99.934333][ T5069] inet_rtm_newaddr+0x9cc/0x18c0
[ 99.939293][ T5069] rtnetlink_rcv_msg+0x7f1/0xf10
[ 99.944342][ T5069] netlink_rcv_skb+0x1e9/0x430
[ 99.949540][ T5069] netlink_unicast+0x78f/0x940
[ 99.954331][ T5069] netlink_sendmsg+0x8ba/0xbe0
[ 99.959120][ T5069] __sys_sendto+0x46d/0x620
[ 99.963643][ T5069] __x64_sys_sendto+0xda/0xf0
[ 99.968429][ T5069] do_syscall_64+0x4c/0xa0
[ 99.973056][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 99.979019][ T5069]
[ 99.981354][ T5069] Second to last potentially related work creation:
[ 99.987940][ T5069] kasan_save_stack+0x35/0x60
[ 99.992690][ T5069] kasan_record_aux_stack+0xb8/0x100
[ 99.997994][ T5069] insert_work+0x54/0x3d0
[ 100.002893][ T5069] __queue_work+0x90b/0xc80
[ 100.007424][ T5069] queue_work_on+0x124/0x1f0
[ 100.012123][ T5069] netdevice_event+0x898/0x930
[ 100.016976][ T5069] raw_notifier_call_chain+0xcb/0x160
[ 100.022519][ T5069] dev_set_mac_address+0x2ed/0x400
[ 100.027640][ T5069] dev_set_mac_address_user+0x2d/0x50
[ 100.033020][ T5069] do_setlink+0x842/0x29d0
[ 100.037530][ T5069] rtnl_newlink+0x15bb/0x1920
[ 100.042216][ T5069] rtnetlink_rcv_msg+0x7f1/0xf10
[ 100.047313][ T5069] netlink_rcv_skb+0x1e9/0x430
[ 100.052079][ T5069] netlink_unicast+0x78f/0x940
[ 100.057061][ T5069] netlink_sendmsg+0x8ba/0xbe0
[ 100.061815][ T5069] __sys_sendto+0x46d/0x620
[ 100.066309][ T5069] __x64_sys_sendto+0xda/0xf0
[ 100.070990][ T5069] do_syscall_64+0x4c/0xa0
[ 100.075407][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 100.081292][ T5069]
[ 100.083600][ T5069] The buggy address belongs to the object at ffff88801be3ff00
[ 100.083600][ T5069] which belongs to the cache kmalloc-192 of size 192
[ 100.097725][ T5069] The buggy address is located 56 bytes inside of
[ 100.097725][ T5069] 192-byte region [ffff88801be3ff00, ffff88801be3ffc0)
[ 100.111614][ T5069] The buggy address belongs to the page:
[ 100.117368][ T5069] page:ffffea00006f8fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1be3f
[ 100.127505][ T5069] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 100.135237][ T5069] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00
[ 100.143817][ T5069] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 100.152618][ T5069] page dumped because: kasan: bad access detected
[ 100.159164][ T5069] page_owner tracks the page as allocated
[ 100.164867][ T5069] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 3134380075, free_ts 0
[ 100.179818][ T5069] get_page_from_freelist+0x24f6/0x2670
[ 100.185378][ T5069] __alloc_pages+0x1ee/0x480
[ 100.189985][ T5069] alloc_page_interleave+0x24/0x1e0
[ 100.195174][ T5069] new_slab+0xc0/0x4b0
[ 100.199243][ T5069] ___slab_alloc+0x807/0xdd0
[ 100.203817][ T5069] kmem_cache_alloc_trace+0xf9/0x290
[ 100.209086][ T5069] kset_create_and_add+0x56/0x160
[ 100.214115][ T5069] bus_register+0x323/0x670
[ 100.218611][ T5069] mdio_bus_init+0x3c/0x70
[ 100.223018][ T5069] phy_init+0x18/0x780
[ 100.227072][ T5069] do_one_initcall+0x272/0x730
[ 100.231823][ T5069] do_initcall_level+0x13d/0x1f0
[ 100.236745][ T5069] do_initcalls+0x4b/0x90
[ 100.241066][ T5069] kernel_init_freeable+0x3d5/0x560
[ 100.246428][ T5069] kernel_init+0x19/0x1b0
[ 100.251432][ T5069] ret_from_fork+0x1f/0x30
[ 100.255849][ T5069] page_owner free stack trace missing
[ 100.261220][ T5069]
[ 100.263539][ T5069] Memory state around the buggy address:
[ 100.269384][ T5069] ffff88801be3fe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 100.277871][ T5069] ffff88801be3fe80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 100.286047][ T5069] >ffff88801be3ff00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 100.294112][ T5069] ^
[ 100.299998][ T5069] ffff88801be3ff80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 100.308051][ T5069] ffff88801be40000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 100.316202][ T5069] ==================================================================
[ 100.324252][ T5069] Disabling lock debugging due to kernel taint
[ 100.336611][ T5069] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.344016][ T5069] CPU: 1 PID: 5069 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 100.352589][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 100.362880][ T5069] Call Trace:
[ 100.366168][ T5069]
[ 100.369102][ T5069] dump_stack_lvl+0x188/0x250
[ 100.373878][ T5069] ? show_regs_print_info+0x20/0x20
[ 100.379077][ T5069] ? load_image+0x410/0x410
[ 100.383680][ T5069] panic+0x2f8/0x850
[ 100.387745][ T5069] ? bpf_jit_dump+0xd0/0xd0
[ 100.392704][ T5069] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 100.398901][ T5069] ? _raw_spin_unlock+0x40/0x40
[ 100.403743][ T5069] ? print_memory_metadata+0x314/0x400
[ 100.409284][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 100.414217][ T5069] check_panic_on_warn+0x80/0xa0
[ 100.419327][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 100.424161][ T5069] end_report+0x6d/0xf0
[ 100.428423][ T5069] kasan_report+0x102/0x130
[ 100.432994][ T5069] ? ax25_fillin_cb+0x458/0x640
[ 100.437946][ T5069] ax25_fillin_cb+0x458/0x640
[ 100.442612][ T5069] ax25_setsockopt+0x8c9/0xa60
[ 100.447408][ T5069] ? ax25_shutdown+0x10/0x10
[ 100.452013][ T5069] ? aa_sock_opt_perm+0x74/0x100
[ 100.456938][ T5069] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 100.462486][ T5069] ? security_socket_setsockopt+0x7a/0xa0
[ 100.468190][ T5069] ? ax25_shutdown+0x10/0x10
[ 100.472784][ T5069] __sys_setsockopt+0x2bf/0x3d0
[ 100.477910][ T5069] __x64_sys_setsockopt+0xb1/0xc0
[ 100.482943][ T5069] do_syscall_64+0x4c/0xa0
[ 100.487518][ T5069] ? clear_bhb_loop+0x30/0x80
[ 100.492520][ T5069] ? clear_bhb_loop+0x30/0x80
[ 100.497301][ T5069] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 100.503397][ T5069] RIP: 0033:0x7f1669e30819
[ 100.508166][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 100.529436][ T5069] RSP: 002b:00007f1669492028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 100.538038][ T5069] RAX: ffffffffffffffda RBX: 00007f166a0a9fa0 RCX: 00007f1669e30819
[ 100.546031][ T5069] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 100.554388][ T5069] RBP: 00007f1669ec6c91 R08: 0000000000000010 R09: 0000000000000000
[ 100.563042][ T5069] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 100.571269][ T5069] R13: 00007f166a0aa038 R14: 00007f166a0a9fa0 R15: 00007ffe9d92ba68
[ 100.579459][ T5069]
[ 100.582795][ T5069] Kernel Offset: disabled
[ 100.587243][ T5069] Rebooting in 86400 seconds..