Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts.
2026/03/11 00:54:19 parsed 1 programs
[ 57.292795][ T4189] cgroup: Unknown subsys name 'net'
[ 57.428492][ T4189] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 58.732495][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 60.961614][ T4223] chnl_net:caif_netlink_parms(): no params data found
[ 61.032477][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.041492][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 61.049727][ T4223] device bridge_slave_0 entered promiscuous mode
[ 61.060941][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.068462][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.078390][ T4223] device bridge_slave_1 entered promiscuous mode
[ 61.106218][ T4223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 61.119129][ T4223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 61.148583][ T4223] team0: Port device team_slave_0 added
[ 61.157948][ T4223] team0: Port device team_slave_1 added
[ 61.182211][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 61.191023][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.218370][ T4223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 61.232987][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 61.241252][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.269966][ T4223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 61.308870][ T4223] device hsr_slave_0 entered promiscuous mode
[ 61.316014][ T4223] device hsr_slave_1 entered promiscuous mode
[ 61.450131][ T4223] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 61.463823][ T4223] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 61.475401][ T4223] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 61.487822][ T4223] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 61.517900][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.525245][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 61.533731][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.541286][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 61.612270][ T4223] 8021q: adding VLAN 0 to HW filter on device bond0
[ 61.631649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 61.645044][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 61.654134][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.669535][ T4223] 8021q: adding VLAN 0 to HW filter on device team0
[ 61.682329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 61.691912][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.700035][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 61.720081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 61.736735][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.744369][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 61.763194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 61.772485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 61.784000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 61.792978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 61.804625][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 61.814050][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 61.827592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 61.837755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 61.853978][ T4223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 61.867831][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 61.877756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 61.888135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 62.007918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 62.016274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 62.041751][ T4223] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 62.075005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 62.091329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 62.117865][ T4223] device veth0_vlan entered promiscuous mode
[ 62.124680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 62.133968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 62.143224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 62.151194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 62.163448][ T4223] device veth1_vlan entered promiscuous mode
[ 62.182847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 62.192574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 62.201605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 62.212178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 62.224588][ T4223] device veth0_macvtap entered promiscuous mode
[ 62.236542][ T4223] device veth1_macvtap entered promiscuous mode
[ 62.251841][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 62.260355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 62.269943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 62.278843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 62.289054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 62.303989][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 62.312450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 62.322571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 62.336323][ T4223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.346289][ T4223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.356431][ T4223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 62.365822][ T4223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.085177][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.105145][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.129484][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 63.147417][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.158016][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.171013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/03/11 00:54:27 executed programs: 0
[ 64.504971][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.604648][ T4287] chnl_net:caif_netlink_parms(): no params data found
[ 64.641950][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.649774][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.658049][ T4287] device bridge_slave_0 entered promiscuous mode
[ 64.667560][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.675066][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.683395][ T4287] device bridge_slave_1 entered promiscuous mode
[ 64.701512][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 64.714565][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 64.735911][ T4287] team0: Port device team_slave_0 added
[ 64.744580][ T4287] team0: Port device team_slave_1 added
[ 64.761597][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 64.768904][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 64.795343][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 64.807120][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 64.814482][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 64.841112][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 64.871215][ T4287] device hsr_slave_0 entered promiscuous mode
[ 64.878449][ T4287] device hsr_slave_1 entered promiscuous mode
[ 64.885677][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 64.894653][ T4287] Cannot create hsr debugfs directory
[ 66.583987][ T4201] Bluetooth: hci0: command 0x0409 tx timeout
[ 67.100611][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.158258][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.210875][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.090754][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 68.101206][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 68.110363][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 68.120649][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 68.169972][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0
[ 68.195662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 68.204098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 68.216315][ T4287] 8021q: adding VLAN 0 to HW filter on device team0
[ 68.245861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 68.254888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 68.268083][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.275504][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 68.286651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 68.317910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 68.327064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 68.336274][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.344147][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.356789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 68.382835][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 68.395748][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 68.405215][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 68.422515][ T4287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 68.434579][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 68.449280][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 68.458166][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 68.467311][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 68.476182][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 68.485518][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 68.495008][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 68.504370][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 68.512594][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 68.616858][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 68.624998][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 68.637335][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.663551][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[ 68.685484][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 68.694501][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 68.714182][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 68.725437][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 68.735083][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 68.742845][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 68.751921][ T4287] device veth0_vlan entered promiscuous mode
[ 68.770420][ T4287] device veth1_vlan entered promiscuous mode
[ 68.785643][ T9] device hsr_slave_0 left promiscuous mode
[ 68.792750][ T9] device hsr_slave_1 left promiscuous mode
[ 68.800396][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 68.808848][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 68.817304][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 68.825185][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 68.832869][ T9] device bridge_slave_1 left promiscuous mode
[ 68.840701][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.856531][ T9] device bridge_slave_0 left promiscuous mode
[ 68.863338][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.881551][ T9] device veth1_macvtap left promiscuous mode
[ 68.888110][ T9] device veth0_macvtap left promiscuous mode
[ 68.894397][ T9] device veth1_vlan left promiscuous mode
[ 68.901069][ T9] device veth0_vlan left promiscuous mode
[ 69.055513][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 69.068811][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 69.082470][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 69.098061][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 69.154217][ T9] bond0 (unregistering): Released all slaves
[ 69.203578][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 69.212975][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 69.229597][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 69.239245][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 69.250967][ T4287] device veth0_macvtap entered promiscuous mode
[ 69.263287][ T4287] device veth1_macvtap entered promiscuous mode
[ 69.290548][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.298725][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 69.309011][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 69.318488][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 69.328468][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 69.342008][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.350078][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 69.358973][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 69.370951][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.381513][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.390904][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.401884][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.461207][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.472844][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.482938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/03/11 00:54:32 executed programs: 2
[ 69.513645][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.524539][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.536553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 69.591464][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 69.658244][ T4338] ==================================================================
[ 69.666637][ T4338] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 69.673873][ T4338] Read of size 4 at addr ffff888025f1d738 by task syz.0.19/4338
[ 69.681988][ T4338]
[ 69.684343][ T4338] CPU: 0 PID: 4338 Comm: syz.0.19 Not tainted syzkaller #0
[ 69.691639][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 69.702114][ T4338] Call Trace:
[ 69.705702][ T4338]
[ 69.708966][ T4338] dump_stack_lvl+0x188/0x250
[ 69.713765][ T4338] ? show_regs_print_info+0x20/0x20
[ 69.720105][ T4338] ? _printk+0xda/0x130
[ 69.724903][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 69.730154][ T4338] ? load_image+0x400/0x400
[ 69.734777][ T4338] print_address_description+0x60/0x2d0
[ 69.740774][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 69.745630][ T4338] kasan_report+0xdf/0x130
[ 69.750798][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 69.755886][ T4338] ax25_fillin_cb+0x459/0x640
[ 69.760595][ T4338] ax25_setsockopt+0x8c9/0xa60
[ 69.765548][ T4338] ? ax25_shutdown+0x10/0x10
[ 69.770308][ T4338] ? aa_sock_opt_perm+0x74/0x100
[ 69.775250][ T4338] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 69.780883][ T4338] ? security_socket_setsockopt+0x7a/0xa0
[ 69.786695][ T4338] ? ax25_shutdown+0x10/0x10
[ 69.791484][ T4338] __sys_setsockopt+0x2bf/0x3d0
[ 69.796448][ T4338] __x64_sys_setsockopt+0xb1/0xc0
[ 69.801503][ T4338] do_syscall_64+0x4c/0xa0
[ 69.805938][ T4338] ? clear_bhb_loop+0x30/0x80
[ 69.810808][ T4338] ? clear_bhb_loop+0x30/0x80
[ 69.815550][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.821646][ T4338] RIP: 0033:0x7fa5949e0799
[ 69.826064][ T4338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 69.846674][ T4338] RSP: 002b:00007fff38880918 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 69.855184][ T4338] RAX: ffffffffffffffda RBX: 00007fa594c59fa0 RCX: 00007fa5949e0799
[ 69.863333][ T4338] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 69.872195][ T4338] RBP: 00007fa594a76c99 R08: 0000000000000010 R09: 0000000000000000
[ 69.880365][ T4338] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 69.888629][ T4338] R13: 00007fa594c59fac R14: 00007fa594c59fa0 R15: 00007fa594c59fa0
[ 69.896812][ T4338]
[ 69.899849][ T4338]
[ 69.902261][ T4338] Allocated by task 4336:
[ 69.906615][ T4338] __kasan_kmalloc+0xb5/0xf0
[ 69.911750][ T4338] ax25_dev_device_up+0x50/0x580
[ 69.916959][ T4338] ax25_device_event+0x483/0x4f0
[ 69.921980][ T4338] raw_notifier_call_chain+0xcb/0x160
[ 69.927652][ T4338] __dev_notify_flags+0x194/0x300
[ 69.933222][ T4338] dev_change_flags+0xe3/0x1a0
[ 69.938260][ T4338] dev_ifsioc+0x130/0xd50
[ 69.942688][ T4338] dev_ioctl+0x545/0xe30
[ 69.947303][ T4338] sock_do_ioctl+0x245/0x320
[ 69.952254][ T4338] sock_ioctl+0x4d2/0x710
[ 69.956950][ T4338] __se_sys_ioctl+0xfa/0x170
[ 69.961805][ T4338] do_syscall_64+0x4c/0xa0
[ 69.966517][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.973136][ T4338]
[ 69.976096][ T4338] Freed by task 4337:
[ 69.980448][ T4338] kasan_set_track+0x4b/0x70
[ 69.985467][ T4338] kasan_set_free_info+0x1f/0x40
[ 69.990772][ T4338] ____kasan_slab_free+0xd5/0x110
[ 69.996142][ T4338] slab_free_freelist_hook+0xea/0x170
[ 70.001951][ T4338] kfree+0xef/0x2a0
[ 70.006470][ T4338] ax25_release+0x661/0x870
[ 70.011282][ T4338] sock_close+0xd5/0x240
[ 70.015633][ T4338] __fput+0x234/0x930
[ 70.020203][ T4338] task_work_run+0x125/0x1a0
[ 70.024810][ T4338] exit_to_user_mode_loop+0x10f/0x130
[ 70.031036][ T4338] exit_to_user_mode_prepare+0xee/0x180
[ 70.037294][ T4338] syscall_exit_to_user_mode+0x16/0x40
[ 70.043375][ T4338] do_syscall_64+0x58/0xa0
[ 70.048604][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.055057][ T4338]
[ 70.057745][ T4338] The buggy address belongs to the object at ffff888025f1d700
[ 70.057745][ T4338] which belongs to the cache kmalloc-192 of size 192
[ 70.074399][ T4338] The buggy address is located 56 bytes inside of
[ 70.074399][ T4338] 192-byte region [ffff888025f1d700, ffff888025f1d7c0)
[ 70.088830][ T4338] The buggy address belongs to the page:
[ 70.094739][ T4338] page:ffffea000097c740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25f1d
[ 70.105178][ T4338] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 70.112930][ T4338] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41a00
[ 70.121696][ T4338] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 70.131054][ T4338] page dumped because: kasan: bad access detected
[ 70.137619][ T4338] page_owner tracks the page as allocated
[ 70.143594][ T4338] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4287, ts 69567881746, free_ts 69489178223
[ 70.160257][ T4338] get_page_from_freelist+0x1bbd/0x1ca0
[ 70.166102][ T4338] __alloc_pages+0x1ee/0x480
[ 70.170706][ T4338] new_slab+0xb6/0x4b0
[ 70.174949][ T4338] ___slab_alloc+0x80a/0xdd0
[ 70.179643][ T4338] __kmalloc_node+0x200/0x3b0
[ 70.184424][ T4338] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 70.191018][ T4338] new_slab+0x100/0x4b0
[ 70.195279][ T4338] ___slab_alloc+0x80a/0xdd0
[ 70.200064][ T4338] kmem_cache_alloc+0x195/0x290
[ 70.205105][ T4338] shmem_alloc_inode+0x16/0x30
[ 70.209897][ T4338] new_inode_pseudo+0x5f/0x210
[ 70.215467][ T4338] new_inode+0x25/0x1c0
[ 70.220212][ T4338] shmem_get_inode+0x334/0xa90
[ 70.225094][ T4338] shmem_mknod+0x55/0x1b0
[ 70.229623][ T4338] shmem_mkdir+0x27/0x60
[ 70.233866][ T4338] vfs_mkdir+0x387/0x570
[ 70.238708][ T4338] page last free stack trace:
[ 70.243536][ T4338] free_unref_page_prepare+0x637/0x6c0
[ 70.250243][ T4338] free_unref_page+0x8f/0x2a0
[ 70.255747][ T4338] __unfreeze_partials+0x1a5/0x200
[ 70.261645][ T4338] put_cpu_partial+0x12d/0x190
[ 70.266662][ T4338] qlist_free_all+0x35/0x90
[ 70.271824][ T4338] kasan_quarantine_reduce+0x150/0x160
[ 70.277488][ T4338] __kasan_slab_alloc+0x2f/0xd0
[ 70.282528][ T4338] slab_post_alloc_hook+0x4c/0x380
[ 70.288550][ T4338] kmem_cache_alloc+0x100/0x290
[ 70.293528][ T4338] getname_flags+0xb5/0x500
[ 70.298241][ T4338] do_sys_openat2+0xdd/0x4b0
[ 70.303190][ T4338] __x64_sys_openat+0x135/0x160
[ 70.308334][ T4338] do_syscall_64+0x4c/0xa0
[ 70.312994][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.318976][ T4338]
[ 70.321298][ T4338] Memory state around the buggy address:
[ 70.327202][ T4338] ffff888025f1d600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.335531][ T4338] ffff888025f1d680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 70.344044][ T4338] >ffff888025f1d700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 70.353080][ T4338] ^
[ 70.359694][ T4338] ffff888025f1d780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 70.368569][ T4338] ffff888025f1d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.377113][ T4338] ==================================================================
[ 70.385607][ T4338] Disabling lock debugging due to kernel taint
[ 70.396274][ T4338] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 70.404111][ T4338] CPU: 0 PID: 4338 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 70.412982][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 70.423311][ T4338] Call Trace:
[ 70.426944][ T4338]
[ 70.430309][ T4338] dump_stack_lvl+0x188/0x250
[ 70.435394][ T4338] ? show_regs_print_info+0x20/0x20
[ 70.441069][ T4338] ? load_image+0x400/0x400
[ 70.445759][ T4338] panic+0x2e5/0x810
[ 70.450747][ T4338] ? bpf_jit_dump+0xd0/0xd0
[ 70.455721][ T4338] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 70.463034][ T4338] ? _raw_spin_unlock+0x40/0x40
[ 70.467996][ T4338] ? print_memory_metadata+0x314/0x400
[ 70.474091][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 70.479523][ T4338] check_panic_on_warn+0x80/0xa0
[ 70.484815][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 70.489859][ T4338] end_report+0x6d/0xf0
[ 70.494178][ T4338] kasan_report+0x102/0x130
[ 70.499128][ T4338] ? ax25_fillin_cb+0x459/0x640
[ 70.504242][ T4338] ax25_fillin_cb+0x459/0x640
[ 70.509477][ T4338] ax25_setsockopt+0x8c9/0xa60
[ 70.514600][ T4338] ? ax25_shutdown+0x10/0x10
[ 70.519181][ T4338] ? aa_sock_opt_perm+0x74/0x100
[ 70.524466][ T4338] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 70.530102][ T4338] ? security_socket_setsockopt+0x7a/0xa0
[ 70.536209][ T4338] ? ax25_shutdown+0x10/0x10
[ 70.541602][ T4338] __sys_setsockopt+0x2bf/0x3d0
[ 70.546714][ T4338] __x64_sys_setsockopt+0xb1/0xc0
[ 70.552009][ T4338] do_syscall_64+0x4c/0xa0
[ 70.556494][ T4338] ? clear_bhb_loop+0x30/0x80
[ 70.561189][ T4338] ? clear_bhb_loop+0x30/0x80
[ 70.566040][ T4338] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.572594][ T4338] RIP: 0033:0x7fa5949e0799
[ 70.577019][ T4338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 70.597896][ T4338] RSP: 002b:00007fff38880918 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 70.607119][ T4338] RAX: ffffffffffffffda RBX: 00007fa594c59fa0 RCX: 00007fa5949e0799
[ 70.615310][ T4338] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 70.623740][ T4338] RBP: 00007fa594a76c99 R08: 0000000000000010 R09: 0000000000000000
[ 70.631695][ T4338] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 70.639801][ T4338] R13: 00007fa594c59fac R14: 00007fa594c59fa0 R15: 00007fa594c59fa0
[ 70.648452][ T4338]
[ 70.652687][ T4338] Kernel Offset: disabled
[ 70.657285][ T4338] Rebooting in 86400 seconds..