[ 74.594067][ T9] device veth1_macvtap left promiscuous mode
[ 74.600648][ T9] device veth0_macvtap left promiscuous mode
[ 74.606928][ T9] device veth1_vlan left promiscuous mode
[ 74.614105][ T9] device veth0_vlan left promiscuous mode
[ 74.817118][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 74.835568][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 74.848417][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 74.860986][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 74.903073][ T9] bond0 (unregistering): Released all slaves
[ 76.231747][ T23] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
2026/01/19 15:22:41 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 92.673699][ T4848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 94.019381][ T4867] chnl_net:caif_netlink_parms(): no params data found
[ 94.055917][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.063248][ T4867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.071083][ T4867] device bridge_slave_0 entered promiscuous mode
[ 94.079459][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.086566][ T4867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.094585][ T4867] device bridge_slave_1 entered promiscuous mode
[ 94.112351][ T4867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.122912][ T4867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.142925][ T4867] team0: Port device team_slave_0 added
[ 94.152949][ T4867] team0: Port device team_slave_1 added
[ 94.167914][ T4867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.175072][ T4867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.201033][ T4867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.212778][ T4867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.220039][ T4867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.246225][ T4867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.273834][ T4867] device hsr_slave_0 entered promiscuous mode
[ 94.280966][ T4867] device hsr_slave_1 entered promiscuous mode
[ 94.875982][ T4867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.901954][ T4867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.921822][ T4867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.932678][ T4867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.007240][ T4867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.014498][ T4867] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.022054][ T4867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.029178][ T4867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.041272][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.059313][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.133558][ T4867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.148284][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 95.162149][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 95.174838][ T4867] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.186090][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 95.196490][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 95.205762][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.212982][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.229788][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 95.239246][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 95.247775][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.254896][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.266278][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 95.283512][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 95.293817][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 95.305147][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 95.323998][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 95.332881][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 95.342573][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 95.354455][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 95.364262][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 95.373514][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 95.382766][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 95.393271][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 95.581671][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 95.599649][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 95.613629][ T4867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.656216][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 95.666039][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 95.702120][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 95.719626][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 95.739457][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 95.747282][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 95.770682][ T4867] device veth0_vlan entered promiscuous mode
[ 95.791944][ T4867] device veth1_vlan entered promiscuous mode
[ 95.850743][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 95.869205][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 95.877556][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 95.894152][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 95.907286][ T4867] device veth0_macvtap entered promiscuous mode
[ 95.918603][ T4867] device veth1_macvtap entered promiscuous mode
[ 95.957895][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.976595][ T4867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.985782][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 95.994504][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 96.010284][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 96.019965][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 96.032802][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 96.041876][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 96.056157][ T4867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.072191][ T4867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.081627][ T4867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.090780][ T4867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.695704][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.759712][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.767916][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.803576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 96.818471][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.827886][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.842805][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 99.215503][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.292389][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.343684][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.437979][ T9] device hsr_slave_0 left promiscuous mode
[ 102.446444][ T9] device hsr_slave_1 left promiscuous mode
[ 102.454646][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.462182][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.472119][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.487813][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.497417][ T9] device bridge_slave_1 left promiscuous mode
[ 102.504377][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.514799][ T9] device bridge_slave_0 left promiscuous mode
[ 102.521872][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.561058][ T9] device veth1_macvtap left promiscuous mode
[ 102.569558][ T9] device veth0_macvtap left promiscuous mode
[ 102.575866][ T9] device veth1_vlan left promiscuous mode
[ 102.583781][ T9] device veth0_vlan left promiscuous mode
[ 102.708626][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 102.720195][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 102.731764][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.743674][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.784882][ T9] bond0 (unregistering): Released all slaves
2026/01/19 15:22:55 executed programs: 0
[ 104.108906][ T5337] chnl_net:caif_netlink_parms(): no params data found
[ 104.220584][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.238977][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.247358][ T5337] device bridge_slave_0 entered promiscuous mode
[ 104.271260][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.288900][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.297058][ T5337] device bridge_slave_1 entered promiscuous mode
[ 104.363829][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.391398][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.458912][ T5337] team0: Port device team_slave_0 added
[ 104.467001][ T5337] team0: Port device team_slave_1 added
[ 104.495721][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.502866][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.532483][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.554859][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.563495][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.592838][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.658244][ T5337] device hsr_slave_0 entered promiscuous mode
[ 104.666808][ T5337] device hsr_slave_1 entered promiscuous mode
[ 105.319521][ T5337] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.389738][ T5337] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.410507][ T5337] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.428038][ T5337] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.550718][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.568554][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 105.578680][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 105.591687][ T5337] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.603501][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 105.612983][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 105.622662][ T302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.629782][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.648112][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 105.657710][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 105.667024][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 105.680655][ T302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.687842][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.697557][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 105.708140][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 105.731365][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 105.741445][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 105.753256][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 105.763590][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 105.774483][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 105.785371][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 105.798635][ T5337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 105.812113][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 105.821444][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 105.831783][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 105.841039][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 105.909118][ T4434] Bluetooth: hci0: command 0x0409 tx timeout
[ 106.032065][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 106.041465][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 106.054505][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.111876][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 106.121367][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 106.176725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 106.185694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 106.197410][ T5337] device veth0_vlan entered promiscuous mode
[ 106.205897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 106.216166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 106.233022][ T5337] device veth1_vlan entered promiscuous mode
[ 106.287278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 106.300504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 106.311085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 106.321233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 106.335020][ T5337] device veth0_macvtap entered promiscuous mode
[ 106.365715][ T5337] device veth1_macvtap entered promiscuous mode
[ 106.387189][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.398701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 106.408608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 106.417115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 106.426913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 106.438645][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.450590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 106.462066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 106.474326][ T5337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.486636][ T5337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.495790][ T5337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.506631][ T5337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.658154][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.678874][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.688375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 106.734636][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.743679][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.757966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 106.821605][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 106.900298][ T5465] ==================================================================
[ 106.908731][ T5465] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 106.915949][ T5465] Read of size 4 at addr ffff88801939c238 by task syz.0.19/5465
[ 106.923581][ T5465]
[ 106.925932][ T5465] CPU: 0 PID: 5465 Comm: syz.0.19 Not tainted syzkaller #0
[ 106.933260][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 106.943427][ T5465] Call Trace:
[ 106.946877][ T5465]
[ 106.949831][ T5465] dump_stack_lvl+0x188/0x250
[ 106.954555][ T5465] ? show_regs_print_info+0x20/0x20
[ 106.959782][ T5465] ? _printk+0xda/0x130
[ 106.963955][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 106.968910][ T5465] ? load_image+0x400/0x400
[ 106.973444][ T5465] print_address_description+0x60/0x2d0
[ 106.979116][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 106.984096][ T5465] kasan_report+0xdf/0x130
[ 106.988557][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 106.993702][ T5465] ax25_fillin_cb+0x459/0x640
[ 106.998416][ T5465] ax25_setsockopt+0x8c9/0xa60
[ 107.003221][ T5465] ? ax25_shutdown+0x10/0x10
[ 107.007843][ T5465] ? aa_sock_opt_perm+0x74/0x100
[ 107.012792][ T5465] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 107.018341][ T5465] ? security_socket_setsockopt+0x7a/0xa0
[ 107.024233][ T5465] ? ax25_shutdown+0x10/0x10
[ 107.028833][ T5465] __sys_setsockopt+0x2bf/0x3d0
[ 107.033772][ T5465] __x64_sys_setsockopt+0xb1/0xc0
[ 107.038795][ T5465] do_syscall_64+0x4c/0xa0
[ 107.043385][ T5465] ? clear_bhb_loop+0x30/0x80
[ 107.048062][ T5465] ? clear_bhb_loop+0x30/0x80
[ 107.052739][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.058722][ T5465] RIP: 0033:0x7fe0574e1ef9
[ 107.063137][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.082918][ T5465] RSP: 002b:00007fe056b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 107.091424][ T5465] RAX: ffffffffffffffda RBX: 00007fe05774cfa0 RCX: 00007fe0574e1ef9
[ 107.099402][ T5465] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 107.107631][ T5465] RBP: 00007fe057576ee0 R08: 0000000000000010 R09: 0000000000000000
[ 107.115710][ T5465] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.123717][ T5465] R13: 00007fe05774d038 R14: 00007fe05774cfa0 R15: 00007fffbf0e8508
[ 107.131790][ T5465]
[ 107.134814][ T5465]
[ 107.137145][ T5465] Allocated by task 5459:
[ 107.141560][ T5465] __kasan_kmalloc+0xb5/0xf0
[ 107.146414][ T5465] ax25_dev_device_up+0x50/0x580
[ 107.151346][ T5465] ax25_device_event+0x483/0x4f0
[ 107.156365][ T5465] raw_notifier_call_chain+0xcb/0x160
[ 107.161750][ T5465] __dev_notify_flags+0x194/0x300
[ 107.166772][ T5465] dev_change_flags+0xe3/0x1a0
[ 107.171543][ T5465] dev_ifsioc+0x130/0xd50
[ 107.175873][ T5465] dev_ioctl+0x545/0xe30
[ 107.180114][ T5465] sock_do_ioctl+0x245/0x320
[ 107.184702][ T5465] sock_ioctl+0x4d2/0x710
[ 107.189028][ T5465] __se_sys_ioctl+0xfa/0x170
[ 107.193615][ T5465] do_syscall_64+0x4c/0xa0
[ 107.198035][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.203926][ T5465]
[ 107.206421][ T5465] Freed by task 5461:
[ 107.210390][ T5465] kasan_set_track+0x4b/0x70
[ 107.215505][ T5465] kasan_set_free_info+0x1f/0x40
[ 107.220454][ T5465] ____kasan_slab_free+0xd5/0x110
[ 107.225476][ T5465] slab_free_freelist_hook+0xea/0x170
[ 107.231016][ T5465] kfree+0xef/0x2a0
[ 107.234819][ T5465] ax25_release+0x661/0x870
[ 107.239323][ T5465] sock_close+0xd5/0x240
[ 107.243746][ T5465] __fput+0x234/0x930
[ 107.247724][ T5465] task_work_run+0x125/0x1a0
[ 107.252452][ T5465] exit_to_user_mode_loop+0x10f/0x130
[ 107.257824][ T5465] exit_to_user_mode_prepare+0xee/0x180
[ 107.263523][ T5465] syscall_exit_to_user_mode+0x16/0x40
[ 107.268982][ T5465] do_syscall_64+0x58/0xa0
[ 107.273480][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.279369][ T5465]
[ 107.281693][ T5465] Last potentially related work creation:
[ 107.287581][ T5465] kasan_save_stack+0x35/0x60
[ 107.292373][ T5465] kasan_record_aux_stack+0xb8/0x100
[ 107.298002][ T5465] call_rcu+0x189/0x950
[ 107.302155][ T5465] addrconf_ifdown+0x16ee/0x19c0
[ 107.307089][ T5465] addrconf_notify+0x445/0xf00
[ 107.311847][ T5465] raw_notifier_call_chain+0xcb/0x160
[ 107.317216][ T5465] unregister_netdevice_many+0x1049/0x19f0
[ 107.323109][ T5465] ip6_tnl_exit_batch_net+0x5d7/0x620
[ 107.328660][ T5465] cleanup_net+0x791/0xba0
[ 107.333072][ T5465] process_one_work+0x85f/0x1010
[ 107.338009][ T5465] worker_thread+0xaa6/0x1290
[ 107.342692][ T5465] kthread+0x436/0x520
[ 107.346754][ T5465] ret_from_fork+0x1f/0x30
[ 107.351329][ T5465]
[ 107.353653][ T5465] Second to last potentially related work creation:
[ 107.360228][ T5465] kasan_save_stack+0x35/0x60
[ 107.364913][ T5465] kasan_record_aux_stack+0xb8/0x100
[ 107.370313][ T5465] insert_work+0x54/0x3d0
[ 107.374654][ T5465] __queue_work+0x9c5/0xd50
[ 107.379344][ T5465] queue_work_on+0x124/0x1f0
[ 107.384215][ T5465] inetaddr_event+0xec/0x150
[ 107.388817][ T5465] blocking_notifier_call_chain+0x103/0x1b0
[ 107.394719][ T5465] __inet_insert_ifa+0x9f7/0xbe0
[ 107.399747][ T5465] inet_rtm_newaddr+0x99a/0x1890
[ 107.404684][ T5465] rtnetlink_rcv_msg+0x844/0xf30
[ 107.409622][ T5465] netlink_rcv_skb+0x1f5/0x440
[ 107.414385][ T5465] netlink_unicast+0x774/0x920
[ 107.419151][ T5465] netlink_sendmsg+0x8ba/0xbe0
[ 107.423913][ T5465] __sys_sendto+0x46d/0x620
[ 107.428421][ T5465] __x64_sys_sendto+0xda/0xf0
[ 107.433093][ T5465] do_syscall_64+0x4c/0xa0
[ 107.437522][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.443504][ T5465]
[ 107.445824][ T5465] The buggy address belongs to the object at ffff88801939c200
[ 107.445824][ T5465] which belongs to the cache kmalloc-192 of size 192
[ 107.459971][ T5465] The buggy address is located 56 bytes inside of
[ 107.459971][ T5465] 192-byte region [ffff88801939c200, ffff88801939c2c0)
[ 107.473428][ T5465] The buggy address belongs to the page:
[ 107.479053][ T5465] page:ffffea000064e700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1939c
[ 107.489206][ T5465] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 107.496792][ T5465] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00
[ 107.505514][ T5465] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 107.514194][ T5465] page dumped because: kasan: bad access detected
[ 107.520701][ T5465] page_owner tracks the page as allocated
[ 107.526413][ T5465] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2151754609, free_ts 0
[ 107.541519][ T5465] get_page_from_freelist+0x1bbd/0x1ca0
[ 107.547167][ T5465] __alloc_pages+0x1ee/0x480
[ 107.551752][ T5465] alloc_page_interleave+0x24/0x1e0
[ 107.556951][ T5465] new_slab+0xc0/0x4b0
[ 107.561017][ T5465] ___slab_alloc+0x80a/0xdd0
[ 107.565697][ T5465] __kmalloc_track_caller+0x1cb/0x330
[ 107.571166][ T5465] krealloc+0x5a/0xf0
[ 107.575232][ T5465] add_sysfs_param+0xe8/0x930
[ 107.579918][ T5465] kernel_add_sysfs_param+0xaf/0x120
[ 107.585209][ T5465] param_sysfs_builtin+0x183/0x200
[ 107.590321][ T5465] param_sysfs_init+0x66/0x70
[ 107.595011][ T5465] do_one_initcall+0x272/0x730
[ 107.599779][ T5465] do_initcall_level+0x137/0x1f0
[ 107.604813][ T5465] do_initcalls+0x4b/0x90
[ 107.609154][ T5465] kernel_init_freeable+0x3e9/0x570
[ 107.614350][ T5465] kernel_init+0x19/0x1b0
[ 107.618806][ T5465] page_owner free stack trace missing
[ 107.624323][ T5465]
[ 107.626655][ T5465] Memory state around the buggy address:
[ 107.632300][ T5465] ffff88801939c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.640447][ T5465] ffff88801939c180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 107.648514][ T5465] >ffff88801939c200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.656570][ T5465] ^
[ 107.662460][ T5465] ffff88801939c280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 107.670525][ T5465] ffff88801939c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.678750][ T5465] ==================================================================
[ 107.686810][ T5465] Disabling lock debugging due to kernel taint
[ 107.698431][ T5465] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.705660][ T5465] CPU: 1 PID: 5465 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 107.714258][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.724500][ T5465] Call Trace:
[ 107.727790][ T5465]
[ 107.730848][ T5465] dump_stack_lvl+0x188/0x250
[ 107.735709][ T5465] ? show_regs_print_info+0x20/0x20
[ 107.741013][ T5465] ? load_image+0x400/0x400
[ 107.745616][ T5465] panic+0x2e5/0x810
[ 107.749645][ T5465] ? bpf_jit_dump+0xd0/0xd0
[ 107.754180][ T5465] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 107.760239][ T5465] ? _raw_spin_unlock+0x40/0x40
[ 107.765460][ T5465] ? print_memory_metadata+0x314/0x400
[ 107.770996][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 107.775826][ T5465] check_panic_on_warn+0x80/0xa0
[ 107.780740][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 107.785655][ T5465] end_report+0x6d/0xf0
[ 107.789790][ T5465] kasan_report+0x102/0x130
[ 107.794312][ T5465] ? ax25_fillin_cb+0x459/0x640
[ 107.799350][ T5465] ax25_fillin_cb+0x459/0x640
[ 107.804031][ T5465] ax25_setsockopt+0x8c9/0xa60
[ 107.808790][ T5465] ? ax25_shutdown+0x10/0x10
[ 107.813399][ T5465] ? aa_sock_opt_perm+0x74/0x100
[ 107.818332][ T5465] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 107.824074][ T5465] ? security_socket_setsockopt+0x7a/0xa0
[ 107.830055][ T5465] ? ax25_shutdown+0x10/0x10
[ 107.834783][ T5465] __sys_setsockopt+0x2bf/0x3d0
[ 107.839751][ T5465] __x64_sys_setsockopt+0xb1/0xc0
[ 107.844872][ T5465] do_syscall_64+0x4c/0xa0
[ 107.849278][ T5465] ? clear_bhb_loop+0x30/0x80
[ 107.853936][ T5465] ? clear_bhb_loop+0x30/0x80
[ 107.858684][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.864659][ T5465] RIP: 0033:0x7fe0574e1ef9
[ 107.869199][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.888816][ T5465] RSP: 002b:00007fe056b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 107.897340][ T5465] RAX: ffffffffffffffda RBX: 00007fe05774cfa0 RCX: 00007fe0574e1ef9
[ 107.905307][ T5465] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 107.913291][ T5465] RBP: 00007fe057576ee0 R08: 0000000000000010 R09: 0000000000000000
[ 107.921279][ T5465] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.929417][ T5465] R13: 00007fe05774d038 R14: 00007fe05774cfa0 R15: 00007fffbf0e8508
[ 107.937565][ T5465]
[ 107.941339][ T5465] Kernel Offset: disabled
[ 107.945837][ T5465] Rebooting in 86400 seconds..