Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts.
2025/12/15 15:43:02 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 92.077888][ T4614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 93.834094][ T4643] chnl_net:caif_netlink_parms(): no params data found
[ 93.866902][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.874189][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.882129][ T4643] device bridge_slave_0 entered promiscuous mode
[ 93.892797][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.899991][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.907922][ T4643] device bridge_slave_1 entered promiscuous mode
[ 93.925524][ T4643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.936878][ T4643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.963598][ T4643] team0: Port device team_slave_0 added
[ 93.971600][ T4643] team0: Port device team_slave_1 added
[ 93.992964][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.000667][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.027254][ T4643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.040038][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.047386][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.074610][ T4643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.108385][ T4643] device hsr_slave_0 entered promiscuous mode
[ 94.115202][ T4643] device hsr_slave_1 entered promiscuous mode
[ 94.641592][ T4643] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.667315][ T4643] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.677806][ T4643] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.688156][ T4643] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.774620][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.781898][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.789583][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.796922][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.823786][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.834884][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.895303][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.917992][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 94.935272][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 94.957448][ T4643] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.977465][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 94.987628][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 95.010497][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.018381][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.044553][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 95.063965][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 95.074270][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.081717][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.113859][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 95.124307][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 95.143041][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 95.154928][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 95.164683][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 95.174779][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 95.185830][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 95.199791][ T4643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 95.210574][ T4643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 95.227551][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 95.236741][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 95.247481][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 95.256685][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 95.265644][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 95.425314][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 95.432843][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 95.446970][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.489223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 95.520910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 95.587514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 95.597872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 95.608304][ T4643] device veth0_vlan entered promiscuous mode
[ 95.616803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 95.624722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 95.636127][ T4643] device veth1_vlan entered promiscuous mode
[ 95.658628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 95.667652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 95.677123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 95.688343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 95.700324][ T4643] device veth0_macvtap entered promiscuous mode
[ 95.714060][ T4643] device veth1_macvtap entered promiscuous mode
[ 95.741911][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.751744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 95.762071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 95.772190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 95.782596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 95.797753][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.805477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 95.814936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 95.828867][ T4643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.838548][ T4643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.847996][ T4643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.857582][ T4643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.051015][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.072665][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.098067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 97.110636][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.119783][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.132066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 98.348538][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/12/15 15:43:11 executed programs: 0
[ 98.827568][ T4860] chnl_net:caif_netlink_parms(): no params data found
[ 98.889480][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.898049][ T4860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.907814][ T4860] device bridge_slave_0 entered promiscuous mode
[ 98.918151][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.925866][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.934230][ T4860] device bridge_slave_1 entered promiscuous mode
[ 98.958311][ T4860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.973260][ T4860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.005354][ T4860] team0: Port device team_slave_0 added
[ 99.016246][ T4860] team0: Port device team_slave_1 added
[ 99.040256][ T4860] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.048607][ T4860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.082887][ T4860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.095193][ T4860] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.102158][ T4860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.129109][ T4860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.164874][ T4860] device hsr_slave_0 entered promiscuous mode
[ 99.172131][ T4860] device hsr_slave_1 entered promiscuous mode
[ 99.179243][ T4860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 99.188054][ T4860] Cannot create hsr debugfs directory
[ 100.733697][ T13] Bluetooth: hci0: command 0x0409 tx timeout
[ 101.257756][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.336674][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.377955][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.150459][ T4860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.159126][ T4860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.169054][ T4860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.177847][ T4860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.252449][ T4860] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.265975][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 102.274851][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 102.285400][ T4860] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.309024][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 102.317899][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 102.326506][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.333605][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.341461][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 102.363020][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 102.371724][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 102.381341][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.388483][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.397478][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 102.406359][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 102.418227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 102.427535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 102.436531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 102.459418][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 102.468426][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 102.479088][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 102.489632][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 102.501336][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 102.509926][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 102.536977][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 102.627068][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 102.635028][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 102.659599][ T4860] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.676865][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 102.686034][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 102.702773][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 102.712294][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 102.722437][ T4860] device veth0_vlan entered promiscuous mode
[ 102.730259][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 102.738889][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 102.762340][ T4860] device veth1_vlan entered promiscuous mode
[ 102.778123][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 102.786975][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 102.795986][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 102.805263][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 102.817448][ T4860] device veth0_macvtap entered promiscuous mode
[ 102.824849][ T4255] Bluetooth: hci0: command 0x041b tx timeout
[ 102.843085][ T4860] device veth1_macvtap entered promiscuous mode
[ 102.858228][ T4860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 102.869220][ T4860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 102.880869][ T4860] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.889718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.899486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 102.908553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.917926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.928567][ T4860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 102.939957][ T4860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 102.951302][ T4860] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.963075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.972789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.983921][ T4860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.994925][ T4860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.004530][ T4860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.014342][ T4860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.067809][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.077326][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.096346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 103.108615][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.117655][ T9] device hsr_slave_0 left promiscuous mode
[ 103.117906][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.131099][ T9] device hsr_slave_1 left promiscuous mode
[ 103.139787][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.148181][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.156636][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.164327][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.172232][ T9] device bridge_slave_1 left promiscuous mode
[ 103.178827][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.187389][ T9] device bridge_slave_0 left promiscuous mode
[ 103.193662][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.204624][ T9] device veth1_macvtap left promiscuous mode
[ 103.211061][ T9] device veth0_macvtap left promiscuous mode
[ 103.218050][ T9] device veth1_vlan left promiscuous mode
[ 103.224149][ T9] device veth0_vlan left promiscuous mode
[ 103.348394][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 103.359926][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 103.370720][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 103.385007][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 103.428188][ T9] bond0 (unregistering): Released all slaves
[ 103.472957][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 103.508237][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 103.573365][ T5112] ==================================================================
[ 103.581669][ T5112] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 103.589461][ T5112] Read of size 4 at addr ffff88802506fb38 by task syz.0.19/5112
[ 103.597168][ T5112]
[ 103.599477][ T5112] CPU: 1 PID: 5112 Comm: syz.0.19 Not tainted syzkaller #0
[ 103.606739][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 103.616882][ T5112] Call Trace:
[ 103.620302][ T5112]
[ 103.623345][ T5112] dump_stack_lvl+0x168/0x230
[ 103.628150][ T5112] ? show_regs_print_info+0x20/0x20
[ 103.633548][ T5112] ? _printk+0xcc/0x110
[ 103.637714][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 103.642563][ T5112] ? load_image+0x3b0/0x3b0
[ 103.647057][ T5112] print_address_description+0x60/0x2d0
[ 103.652685][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 103.657611][ T5112] kasan_report+0xdf/0x130
[ 103.662232][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 103.667195][ T5112] ax25_fillin_cb+0x459/0x640
[ 103.672087][ T5112] ax25_setsockopt+0x8a2/0xa40
[ 103.677229][ T5112] ? ax25_shutdown+0x10/0x10
[ 103.681976][ T5112] ? aa_sock_opt_perm+0x74/0x100
[ 103.686923][ T5112] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 103.692474][ T5112] ? security_socket_setsockopt+0x7a/0xa0
[ 103.698290][ T5112] ? ax25_shutdown+0x10/0x10
[ 103.702875][ T5112] __sys_setsockopt+0x2bf/0x3d0
[ 103.707817][ T5112] __x64_sys_setsockopt+0xb1/0xc0
[ 103.712836][ T5112] do_syscall_64+0x4c/0xa0
[ 103.717242][ T5112] ? clear_bhb_loop+0x30/0x80
[ 103.721970][ T5112] ? clear_bhb_loop+0x30/0x80
[ 103.726732][ T5112] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.732839][ T5112] RIP: 0033:0x7f17ced43749
[ 103.737270][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 103.757033][ T5112] RSP: 002b:00007f17ce3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 103.765531][ T5112] RAX: ffffffffffffffda RBX: 00007f17cef99fa0 RCX: 00007f17ced43749
[ 103.773935][ T5112] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 103.781973][ T5112] RBP: 00007f17cedc7f91 R08: 0000000000000010 R09: 0000000000000000
[ 103.790153][ T5112] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 103.798418][ T5112] R13: 00007f17cef9a038 R14: 00007f17cef99fa0 R15: 00007ffdbb3c0cf8
[ 103.806596][ T5112]
[ 103.809619][ T5112]
[ 103.812017][ T5112] Allocated by task 5108:
[ 103.816346][ T5112] __kasan_kmalloc+0xb5/0xf0
[ 103.821036][ T5112] ax25_dev_device_up+0x50/0x580
[ 103.825969][ T5112] ax25_device_event+0x483/0x4f0
[ 103.831075][ T5112] raw_notifier_call_chain+0xcb/0x160
[ 103.836617][ T5112] __dev_notify_flags+0x178/0x2d0
[ 103.841638][ T5112] dev_change_flags+0xe3/0x1a0
[ 103.846762][ T5112] dev_ifsioc+0x147/0xe70
[ 103.851329][ T5112] dev_ioctl+0x55f/0xe50
[ 103.855677][ T5112] sock_do_ioctl+0x222/0x2f0
[ 103.860321][ T5112] sock_ioctl+0x4ed/0x6e0
[ 103.864830][ T5112] __se_sys_ioctl+0xfa/0x170
[ 103.869608][ T5112] do_syscall_64+0x4c/0xa0
[ 103.874026][ T5112] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.880464][ T5112]
[ 103.882776][ T5112] Freed by task 5109:
[ 103.886736][ T5112] kasan_set_track+0x4b/0x70
[ 103.891309][ T5112] kasan_set_free_info+0x1f/0x40
[ 103.896238][ T5112] ____kasan_slab_free+0xd5/0x110
[ 103.901268][ T5112] slab_free_freelist_hook+0xea/0x170
[ 103.906824][ T5112] kfree+0xef/0x2a0
[ 103.910656][ T5112] ax25_release+0x661/0x870
[ 103.915157][ T5112] sock_close+0xd5/0x240
[ 103.919617][ T5112] __fput+0x234/0x930
[ 103.923592][ T5112] task_work_run+0x125/0x1a0
[ 103.928188][ T5112] exit_to_user_mode_loop+0x10f/0x130
[ 103.933564][ T5112] exit_to_user_mode_prepare+0xee/0x180
[ 103.939314][ T5112] syscall_exit_to_user_mode+0x16/0x40
[ 103.944778][ T5112] do_syscall_64+0x58/0xa0
[ 103.949214][ T5112] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.955095][ T5112]
[ 103.957427][ T5112] Last potentially related work creation:
[ 103.963692][ T5112] kasan_save_stack+0x35/0x60
[ 103.968387][ T5112] kasan_record_aux_stack+0xb8/0x100
[ 103.973668][ T5112] kvfree_call_rcu+0x10a/0x7c0
[ 103.978408][ T5112] fib6_rules_net_exit+0x3c/0x50
[ 103.983326][ T5112] cleanup_net+0x6f0/0xb80
[ 103.987753][ T5112] process_one_work+0x863/0x1000
[ 103.992777][ T5112] worker_thread+0xaa8/0x12a0
[ 103.997436][ T5112] kthread+0x436/0x520
[ 104.001597][ T5112] ret_from_fork+0x1f/0x30
[ 104.006623][ T5112]
[ 104.009133][ T5112] The buggy address belongs to the object at ffff88802506fb00
[ 104.009133][ T5112] which belongs to the cache kmalloc-192 of size 192
[ 104.025297][ T5112] The buggy address is located 56 bytes inside of
[ 104.025297][ T5112] 192-byte region [ffff88802506fb00, ffff88802506fbc0)
[ 104.038761][ T5112] The buggy address belongs to the page:
[ 104.044475][ T5112] page:ffffea0000941bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2506f
[ 104.055004][ T5112] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 104.062924][ T5112] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00
[ 104.071914][ T5112] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 104.080605][ T5112] page dumped because: kasan: bad access detected
[ 104.087033][ T5112] page_owner tracks the page as allocated
[ 104.092769][ T5112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8496648070, free_ts 0
[ 104.107637][ T5112] get_page_from_freelist+0x1b77/0x1c60
[ 104.113304][ T5112] __alloc_pages+0x1e1/0x470
[ 104.117946][ T5112] alloc_page_interleave+0x24/0x1e0
[ 104.123248][ T5112] new_slab+0xc0/0x4b0
[ 104.127317][ T5112] ___slab_alloc+0x81e/0xdf0
[ 104.131928][ T5112] __kmalloc+0x1cd/0x330
[ 104.136443][ T5112] usb_alloc_urb+0x3f/0x140
[ 104.140942][ T5112] usb_control_msg+0x115/0x3e0
[ 104.145787][ T5112] hub_suspend+0x769/0x970
[ 104.150632][ T5112] usb_suspend_both+0x28a/0x1050
[ 104.155653][ T5112] usb_runtime_suspend+0x54/0x100
[ 104.160911][ T5112] __rpm_callback+0x2eb/0x7e0
[ 104.165810][ T5112] rpm_suspend+0x87a/0x1a50
[ 104.170596][ T5112] __pm_runtime_suspend+0x10f/0x150
[ 104.175835][ T5112] usb_new_device+0xeab/0x1640
[ 104.180608][ T5112] register_root_hub+0x278/0x580
[ 104.185987][ T5112] page_owner free stack trace missing
[ 104.191935][ T5112]
[ 104.194254][ T5112] Memory state around the buggy address:
[ 104.199937][ T5112] ffff88802506fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.208524][ T5112] ffff88802506fa80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 104.216926][ T5112] >ffff88802506fb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
2025/12/15 15:43:17 executed programs: 3
[ 104.225168][ T5112] ^
[ 104.231050][ T5112] ffff88802506fb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 104.239112][ T5112] ffff88802506fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.247446][ T5112] ==================================================================
[ 104.255595][ T5112] Disabling lock debugging due to kernel taint
[ 104.267448][ T5112] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.274677][ T5112] CPU: 1 PID: 5112 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 104.284139][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 104.296422][ T5112] Call Trace:
[ 104.299881][ T5112]
[ 104.302843][ T5112] dump_stack_lvl+0x168/0x230
[ 104.308363][ T5112] ? show_regs_print_info+0x20/0x20
[ 104.315146][ T5112] ? load_image+0x3b0/0x3b0
[ 104.320043][ T5112] panic+0x2c9/0x7f0
[ 104.324034][ T5112] ? bpf_jit_dump+0xd0/0xd0
[ 104.328644][ T5112] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 104.334876][ T5112] ? _raw_spin_unlock+0x40/0x40
[ 104.339722][ T5112] ? print_memory_metadata+0x314/0x400
[ 104.345730][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 104.350601][ T5112] check_panic_on_warn+0x80/0xa0
[ 104.355727][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 104.360828][ T5112] end_report+0x6d/0xf0
[ 104.365473][ T5112] kasan_report+0x102/0x130
[ 104.370331][ T5112] ? ax25_fillin_cb+0x459/0x640
[ 104.375576][ T5112] ax25_fillin_cb+0x459/0x640
[ 104.380296][ T5112] ax25_setsockopt+0x8a2/0xa40
[ 104.385073][ T5112] ? ax25_shutdown+0x10/0x10
[ 104.389927][ T5112] ? aa_sock_opt_perm+0x74/0x100
[ 104.394863][ T5112] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 104.401046][ T5112] ? security_socket_setsockopt+0x7a/0xa0
[ 104.407126][ T5112] ? ax25_shutdown+0x10/0x10
[ 104.412095][ T5112] __sys_setsockopt+0x2bf/0x3d0
[ 104.417139][ T5112] __x64_sys_setsockopt+0xb1/0xc0
[ 104.422168][ T5112] do_syscall_64+0x4c/0xa0
[ 104.426576][ T5112] ? clear_bhb_loop+0x30/0x80
[ 104.431667][ T5112] ? clear_bhb_loop+0x30/0x80
[ 104.436890][ T5112] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.443214][ T5112] RIP: 0033:0x7f17ced43749
[ 104.447641][ T5112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.467943][ T5112] RSP: 002b:00007f17ce3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 104.476515][ T5112] RAX: ffffffffffffffda RBX: 00007f17cef99fa0 RCX: 00007f17ced43749
[ 104.485560][ T5112] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000006
[ 104.494448][ T5112] RBP: 00007f17cedc7f91 R08: 0000000000000010 R09: 0000000000000000
[ 104.503463][ T5112] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 104.511638][ T5112] R13: 00007f17cef9a038 R14: 00007f17cef99fa0 R15: 00007ffdbb3c0cf8
[ 104.519612][ T5112]
[ 104.523249][ T5112] Kernel Offset: disabled
[ 104.527771][ T5112] Rebooting in 86400 seconds..