Warning: Permanently added '10.128.1.231' (ED25519) to the list of known hosts.
2026/05/12 07:24:20 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 90.873417][ T4620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 92.962117][ T4654] chnl_net:caif_netlink_parms(): no params data found
[ 93.019427][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.026574][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.035196][ T4654] device bridge_slave_0 entered promiscuous mode
[ 93.044872][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.052881][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.062601][ T4654] device bridge_slave_1 entered promiscuous mode
[ 93.087363][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.100663][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.127609][ T4654] team0: Port device team_slave_0 added
[ 93.136896][ T4654] team0: Port device team_slave_1 added
[ 93.158967][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.166025][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.193603][ T4654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.206649][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.215722][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.243146][ T4654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.278882][ T4654] device hsr_slave_0 entered promiscuous mode
[ 93.285838][ T4654] device hsr_slave_1 entered promiscuous mode
[ 93.950924][ T4654] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.001281][ T4654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.020931][ T4654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.040773][ T4654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.111991][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.125800][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 94.135871][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 94.148424][ T4654] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.160115][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 94.169396][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 94.180610][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.187741][ T3103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.209826][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 94.218633][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 94.227423][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 94.239810][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.246893][ T3103] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.257925][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 94.266776][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 94.278974][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 94.289359][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 94.307355][ T4654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 94.318456][ T4654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 94.346671][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 94.355700][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 94.364922][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 94.373985][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 94.382990][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 94.392701][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 94.401657][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 94.414625][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 94.540034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 94.547658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 94.560928][ T4654] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.592534][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 94.602576][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 94.631053][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 94.639852][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 94.650619][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 94.659242][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 94.681870][ T4654] device veth0_vlan entered promiscuous mode
[ 94.694168][ T4654] device veth1_vlan entered promiscuous mode
[ 94.715415][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 94.724491][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 94.734141][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 94.743404][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 94.754826][ T4654] device veth0_macvtap entered promiscuous mode
[ 94.779835][ T4654] device veth1_macvtap entered promiscuous mode
[ 94.799001][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.806601][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 94.819873][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 94.829880][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 94.838873][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.851763][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.860807][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.870403][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.883464][ T4654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.893073][ T4654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.903766][ T4654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.913630][ T4654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.787379][ T3103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.804673][ T3103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.823107][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 96.844014][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.853602][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.862242][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 96.993501][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/12 07:24:30 executed programs: 0
[ 97.486196][ T4850] chnl_net:caif_netlink_parms(): no params data found
[ 97.542204][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.551704][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.560395][ T4850] device bridge_slave_0 entered promiscuous mode
[ 97.571367][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.578866][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.587547][ T4850] device bridge_slave_1 entered promiscuous mode
[ 97.618145][ T4850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.631374][ T4850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.660892][ T4850] team0: Port device team_slave_0 added
[ 97.671115][ T4850] team0: Port device team_slave_1 added
[ 97.692901][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.700189][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.728091][ T4850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.741033][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.748652][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.775446][ T4850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.812963][ T4850] device hsr_slave_0 entered promiscuous mode
[ 97.820178][ T4850] device hsr_slave_1 entered promiscuous mode
[ 97.827207][ T4850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 97.835640][ T4850] Cannot create hsr debugfs directory
[ 99.388068][ T4308] Bluetooth: hci0: command 0x0409 tx timeout
[ 100.382746][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.424181][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.492731][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.244863][ T4850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.254927][ T4850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.264798][ T4850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.289793][ T4850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.352831][ T4850] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.365823][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 101.374201][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 101.383969][ T4850] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.401687][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 101.410412][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 101.419283][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.426520][ T3103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.434476][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 101.459935][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 101.468241][ T4311] Bluetooth: hci0: command 0x041b tx timeout
[ 101.468876][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 101.484157][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.491387][ T3103] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.519226][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 101.540381][ T4850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 101.552886][ T4850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 101.564462][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 101.574430][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 101.583273][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 101.591793][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 101.600756][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 101.609852][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 101.619031][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 101.627409][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 101.636321][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 101.663990][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 101.673607][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 101.765931][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 101.773583][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 101.785424][ T4850] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.809810][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 101.818915][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 101.835604][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 101.844298][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 101.854194][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 101.862248][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 101.874011][ T4850] device veth0_vlan entered promiscuous mode
[ 101.892488][ T4850] device veth1_vlan entered promiscuous mode
[ 101.917510][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 101.925857][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 101.934688][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 101.943659][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 101.954151][ T4850] device veth0_macvtap entered promiscuous mode
[ 101.968343][ T4850] device veth1_macvtap entered promiscuous mode
[ 101.982309][ T144] device hsr_slave_0 left promiscuous mode
[ 101.988715][ T144] device hsr_slave_1 left promiscuous mode
[ 101.994955][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.003748][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.012689][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.020494][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.028241][ T144] device bridge_slave_1 left promiscuous mode
[ 102.034818][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.043144][ T144] device bridge_slave_0 left promiscuous mode
[ 102.050247][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.060789][ T144] device veth1_macvtap left promiscuous mode
[ 102.066800][ T144] device veth0_macvtap left promiscuous mode
[ 102.073100][ T144] device veth1_vlan left promiscuous mode
[ 102.079096][ T144] device veth0_vlan left promiscuous mode
[ 102.210073][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 102.223043][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 102.234703][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.252091][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.300687][ T144] bond0 (unregistering): Released all slaves
[ 102.364000][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.373012][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.381625][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 102.390125][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.400951][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.412923][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.420874][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.430240][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.441712][ T4850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.450735][ T4850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.459580][ T4850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.468962][ T4850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.534809][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.545967][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.554104][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 102.586403][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.595467][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.603033][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/05/12 07:24:35 executed programs: 2
[ 102.636262][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 102.704201][ T5092] ==================================================================
[ 102.712462][ T5092] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 102.719673][ T5092] Read of size 4 at addr ffff888024e5d438 by task syz.0.19/5092
[ 102.727348][ T5092]
[ 102.729772][ T5092] CPU: 0 PID: 5092 Comm: syz.0.19 Not tainted syzkaller #0
[ 102.737034][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 102.747204][ T5092] Call Trace:
[ 102.750481][ T5092]
[ 102.753410][ T5092] dump_stack_lvl+0x188/0x250
[ 102.758087][ T5092] ? show_regs_print_info+0x20/0x20
[ 102.763580][ T5092] ? _printk+0xda/0x130
[ 102.767824][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 102.772660][ T5092] ? load_image+0x400/0x400
[ 102.777150][ T5092] print_address_description+0x60/0x2d0
[ 102.782713][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 102.787547][ T5092] kasan_report+0xdf/0x130
[ 102.791979][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 102.796957][ T5092] ax25_fillin_cb+0x459/0x640
[ 102.801625][ T5092] ax25_setsockopt+0x8c9/0xa60
[ 102.806390][ T5092] ? ax25_shutdown+0x10/0x10
[ 102.811060][ T5092] ? aa_sock_opt_perm+0x74/0x100
[ 102.815990][ T5092] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 102.821541][ T5092] ? security_socket_setsockopt+0x7a/0xa0
[ 102.827283][ T5092] ? ax25_shutdown+0x10/0x10
[ 102.831876][ T5092] __sys_setsockopt+0x2bf/0x3d0
[ 102.836811][ T5092] __x64_sys_setsockopt+0xb1/0xc0
[ 102.841830][ T5092] do_syscall_64+0x4c/0xa0
[ 102.846235][ T5092] ? clear_bhb_loop+0x30/0x80
[ 102.850893][ T5092] ? clear_bhb_loop+0x30/0x80
[ 102.855556][ T5092] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.861476][ T5092] RIP: 0033:0x7f03b5a03819
[ 102.865876][ T5092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.885582][ T5092] RSP: 002b:00007f03b5065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 102.894073][ T5092] RAX: ffffffffffffffda RBX: 00007f03b5c7cfa0 RCX: 00007f03b5a03819
[ 102.902036][ T5092] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 102.910107][ T5092] RBP: 00007f03b5a99c91 R08: 0000000000000010 R09: 0000000000000000
[ 102.918254][ T5092] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 102.926471][ T5092] R13: 00007f03b5c7d038 R14: 00007f03b5c7cfa0 R15: 00007ffd260677f8
[ 102.934667][ T5092]
[ 102.937691][ T5092]
[ 102.940037][ T5092] Allocated by task 5088:
[ 102.944381][ T5092] __kasan_kmalloc+0xb5/0xf0
[ 102.949025][ T5092] ax25_dev_device_up+0x50/0x580
[ 102.953968][ T5092] ax25_device_event+0x483/0x4f0
[ 102.958896][ T5092] raw_notifier_call_chain+0xcb/0x160
[ 102.964262][ T5092] __dev_notify_flags+0x194/0x300
[ 102.969332][ T5092] dev_change_flags+0xe3/0x1a0
[ 102.974078][ T5092] dev_ifsioc+0x130/0xd50
[ 102.978399][ T5092] dev_ioctl+0x545/0xe30
[ 102.982638][ T5092] sock_do_ioctl+0x245/0x320
[ 102.987222][ T5092] sock_ioctl+0x4d2/0x710
[ 102.991532][ T5092] __se_sys_ioctl+0xfa/0x170
[ 102.996120][ T5092] do_syscall_64+0x4c/0xa0
[ 103.000524][ T5092] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.006403][ T5092]
[ 103.008713][ T5092] Freed by task 5089:
[ 103.012674][ T5092] kasan_set_track+0x4b/0x70
[ 103.017247][ T5092] kasan_set_free_info+0x1f/0x40
[ 103.022182][ T5092] ____kasan_slab_free+0xd5/0x110
[ 103.027273][ T5092] slab_free_freelist_hook+0xea/0x170
[ 103.032728][ T5092] kfree+0xef/0x2a0
[ 103.036757][ T5092] ax25_release+0x661/0x870
[ 103.041484][ T5092] sock_close+0xd5/0x240
[ 103.045807][ T5092] __fput+0x234/0x930
[ 103.049778][ T5092] task_work_run+0x125/0x1a0
[ 103.054475][ T5092] exit_to_user_mode_loop+0x10f/0x130
[ 103.059844][ T5092] exit_to_user_mode_prepare+0xee/0x180
[ 103.065421][ T5092] syscall_exit_to_user_mode+0x16/0x40
[ 103.071215][ T5092] do_syscall_64+0x58/0xa0
[ 103.075613][ T5092] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.081484][ T5092]
[ 103.083795][ T5092] Last potentially related work creation:
[ 103.089594][ T5092] kasan_save_stack+0x35/0x60
[ 103.094256][ T5092] kasan_record_aux_stack+0xb8/0x100
[ 103.099528][ T5092] call_rcu+0x189/0x950
[ 103.103757][ T5092] inetdev_event+0x757/0x1370
[ 103.108420][ T5092] raw_notifier_call_chain+0xcb/0x160
[ 103.113864][ T5092] unregister_netdevice_many+0x1049/0x19f0
[ 103.119863][ T5092] ip6gre_exit_batch_net+0x44d/0x4a0
[ 103.125143][ T5092] cleanup_net+0x791/0xba0
[ 103.129548][ T5092] process_one_work+0x85f/0x1010
[ 103.134492][ T5092] worker_thread+0xaa6/0x1290
[ 103.139153][ T5092] kthread+0x436/0x520
[ 103.143207][ T5092] ret_from_fork+0x1f/0x30
[ 103.147619][ T5092]
[ 103.149946][ T5092] The buggy address belongs to the object at ffff888024e5d400
[ 103.149946][ T5092] which belongs to the cache kmalloc-192 of size 192
[ 103.164157][ T5092] The buggy address is located 56 bytes inside of
[ 103.164157][ T5092] 192-byte region [ffff888024e5d400, ffff888024e5d4c0)
[ 103.177421][ T5092] The buggy address belongs to the page:
[ 103.183041][ T5092] page:ffffea0000939740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24e5d
[ 103.193174][ T5092] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 103.200714][ T5092] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c41a00
[ 103.209582][ T5092] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 103.218266][ T5092] page dumped because: kasan: bad access detected
[ 103.224674][ T5092] page_owner tracks the page as allocated
[ 103.230370][ T5092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8998026007, free_ts 8647282956
[ 103.246186][ T5092] get_page_from_freelist+0x1bbd/0x1ca0
[ 103.251728][ T5092] __alloc_pages+0x1ee/0x480
[ 103.256311][ T5092] alloc_page_interleave+0x24/0x1e0
[ 103.261490][ T5092] new_slab+0xc0/0x4b0
[ 103.265626][ T5092] ___slab_alloc+0x80a/0xdd0
[ 103.270192][ T5092] __kmalloc+0x1cd/0x330
[ 103.274442][ T5092] usb_alloc_urb+0x3f/0x140
[ 103.278928][ T5092] usb_control_msg+0x115/0x3e0
[ 103.283688][ T5092] usb_get_string+0xa1/0x3c0
[ 103.288261][ T5092] usb_string_sub+0x76/0x420
[ 103.292921][ T5092] usb_string+0x38b/0x760
[ 103.297227][ T5092] usb_cache_string+0x7b/0xf0
[ 103.301884][ T5092] usb_new_device+0x352/0x1660
[ 103.306636][ T5092] register_root_hub+0x278/0x580
[ 103.311658][ T5092] usb_add_hcd+0xa88/0xef0
[ 103.316063][ T5092] vhci_hcd_probe+0x140/0x370
[ 103.320735][ T5092] page last free stack trace:
[ 103.325387][ T5092] free_unref_page_prepare+0x637/0x6c0
[ 103.330845][ T5092] free_unref_page_list+0x119/0x820
[ 103.336025][ T5092] release_pages+0x186c/0x1be0
[ 103.341027][ T5092] tlb_finish_mmu+0x1b4/0x370
[ 103.345685][ T5092] exit_mmap+0x3d0/0x640
[ 103.349907][ T5092] __mmput+0x115/0x3b0
[ 103.353956][ T5092] free_bprm+0x141/0x300
[ 103.358172][ T5092] kernel_execve+0x380/0x900
[ 103.362753][ T5092] call_usermodehelper_exec_async+0x207/0x350
[ 103.368800][ T5092] ret_from_fork+0x1f/0x30
[ 103.373196][ T5092]
[ 103.375500][ T5092] Memory state around the buggy address:
[ 103.381106][ T5092] ffff888024e5d300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.389232][ T5092] ffff888024e5d380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 103.397388][ T5092] >ffff888024e5d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.405440][ T5092] ^
[ 103.411408][ T5092] ffff888024e5d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 103.419527][ T5092] ffff888024e5d500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.427748][ T5092] ==================================================================
[ 103.435814][ T5092] Disabling lock debugging due to kernel taint
[ 103.447020][ T5092] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 103.454272][ T5092] CPU: 0 PID: 5092 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 103.462954][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 103.472994][ T5092] Call Trace:
[ 103.476303][ T5092]
[ 103.479249][ T5092] dump_stack_lvl+0x188/0x250
[ 103.483941][ T5092] ? show_regs_print_info+0x20/0x20
[ 103.489127][ T5092] ? load_image+0x400/0x400
[ 103.493614][ T5092] panic+0x2e5/0x810
[ 103.497495][ T5092] ? bpf_jit_dump+0xd0/0xd0
[ 103.501992][ T5092] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 103.508041][ T5092] ? _raw_spin_unlock+0x40/0x40
[ 103.512867][ T5092] ? print_memory_metadata+0x314/0x400
[ 103.518334][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 103.523182][ T5092] check_panic_on_warn+0x80/0xa0
[ 103.528107][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 103.532943][ T5092] end_report+0x6d/0xf0
[ 103.537093][ T5092] kasan_report+0x102/0x130
[ 103.541579][ T5092] ? ax25_fillin_cb+0x459/0x640
[ 103.546475][ T5092] ax25_fillin_cb+0x459/0x640
[ 103.548949][ T23] Bluetooth: hci0: command 0x040f tx timeout
[ 103.551144][ T5092] ax25_setsockopt+0x8c9/0xa60
[ 103.561849][ T5092] ? ax25_shutdown+0x10/0x10
[ 103.566426][ T5092] ? aa_sock_opt_perm+0x74/0x100
[ 103.571343][ T5092] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 103.576873][ T5092] ? security_socket_setsockopt+0x7a/0xa0
[ 103.582598][ T5092] ? ax25_shutdown+0x10/0x10
[ 103.587175][ T5092] __sys_setsockopt+0x2bf/0x3d0
[ 103.592009][ T5092] __x64_sys_setsockopt+0xb1/0xc0
[ 103.597033][ T5092] do_syscall_64+0x4c/0xa0
[ 103.601449][ T5092] ? clear_bhb_loop+0x30/0x80
[ 103.606206][ T5092] ? clear_bhb_loop+0x30/0x80
[ 103.610880][ T5092] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.616850][ T5092] RIP: 0033:0x7f03b5a03819
[ 103.621437][ T5092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.641414][ T5092] RSP: 002b:00007f03b5065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 103.649909][ T5092] RAX: ffffffffffffffda RBX: 00007f03b5c7cfa0 RCX: 00007f03b5a03819
[ 103.658015][ T5092] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 103.666166][ T5092] RBP: 00007f03b5a99c91 R08: 0000000000000010 R09: 0000000000000000
[ 103.674128][ T5092] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 103.682181][ T5092] R13: 00007f03b5c7d038 R14: 00007f03b5c7cfa0 R15: 00007ffd260677f8
[ 103.690143][ T5092]
[ 103.693694][ T5092] Kernel Offset: disabled
[ 103.698074][ T5092] Rebooting in 86400 seconds..