Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts.
2026/02/19 13:07:54 parsed 1 programs
[ 69.588833][ T4189] cgroup: Unknown subsys name 'net'
[ 69.719968][ T4189] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.271840][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.376619][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.383225][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[ 74.011185][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.026380][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.050527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 74.070099][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.078868][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.088953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 75.346904][ T4258] chnl_net:caif_netlink_parms(): no params data found
[ 75.395753][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.404023][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.412108][ T4258] device bridge_slave_0 entered promiscuous mode
[ 75.421498][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.429201][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.437388][ T4258] device bridge_slave_1 entered promiscuous mode
[ 75.457898][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.469172][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.491926][ T4258] team0: Port device team_slave_0 added
[ 75.500130][ T4258] team0: Port device team_slave_1 added
[ 75.517366][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.524562][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.550596][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.564032][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.571008][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.596977][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.627670][ T4258] device hsr_slave_0 entered promiscuous mode
[ 75.634513][ T4258] device hsr_slave_1 entered promiscuous mode
[ 75.753656][ T4258] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.765033][ T4258] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.775374][ T4258] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.786529][ T4258] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.834703][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.842026][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.850176][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.857521][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.950520][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.967488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.976653][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.986329][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.000129][ T4258] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.028836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.038865][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.046010][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.057140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 76.066407][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.073570][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.122809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 76.131902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 76.147134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 76.164961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.173604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.186360][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 76.314385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 76.321942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 76.351642][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.371364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 76.380537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 76.400414][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 76.409368][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 76.420041][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 76.428720][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 76.439907][ T4258] device veth0_vlan entered promiscuous mode
[ 76.470912][ T4258] device veth1_vlan entered promiscuous mode
[ 76.491937][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 76.500543][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 76.509399][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 76.518566][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 76.530384][ T4258] device veth0_macvtap entered promiscuous mode
[ 76.550914][ T4258] device veth1_macvtap entered promiscuous mode
[ 76.585407][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.596231][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 76.605623][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 76.614210][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 76.623547][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.633832][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.653871][ T4258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.663000][ T4258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.671733][ T4258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.681448][ T4258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.691550][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 76.700890][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/02/19 13:08:05 executed programs: 0
[ 77.976699][ T4303] chnl_net:caif_netlink_parms(): no params data found
[ 78.049722][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.057121][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.068027][ T4303] device bridge_slave_0 entered promiscuous mode
[ 78.077593][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.087838][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.097290][ T4303] device bridge_slave_1 entered promiscuous mode
[ 78.130872][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.143590][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.169694][ T4303] team0: Port device team_slave_0 added
[ 78.181247][ T4303] team0: Port device team_slave_1 added
[ 78.202547][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.209735][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.236203][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.251683][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.259701][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.288739][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.342010][ T4303] device hsr_slave_0 entered promiscuous mode
[ 78.349514][ T4303] device hsr_slave_1 entered promiscuous mode
[ 78.359697][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 78.368239][ T4303] Cannot create hsr debugfs directory
[ 78.450964][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.853892][ T4268] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.219755][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.294121][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.371896][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.507978][ T4303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.519933][ T4303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.535914][ T4303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.545076][ T4303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.611958][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.635339][ T4303] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.643622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 81.652059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 81.676667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 81.686534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 81.710236][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.717553][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.729491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 81.739226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 81.750639][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.757860][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.770672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 81.793878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 81.802264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 81.811877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 81.825574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 81.835332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 81.844852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 81.880551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 81.890527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 81.899755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 81.909157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 81.918125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 81.930766][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 81.954156][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[ 82.109469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.117396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.140820][ T1275] device hsr_slave_0 left promiscuous mode
[ 82.150795][ T1275] device hsr_slave_1 left promiscuous mode
[ 82.159099][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.169195][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.178206][ T1275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.188471][ T1275] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.196858][ T1275] device bridge_slave_1 left promiscuous mode
[ 82.206829][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.227489][ T1275] device bridge_slave_0 left promiscuous mode
[ 82.234567][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.260716][ T1275] device veth1_macvtap left promiscuous mode
[ 82.269878][ T1275] device veth0_macvtap left promiscuous mode
[ 82.277226][ T1275] device veth1_vlan left promiscuous mode
[ 82.285609][ T1275] device veth0_vlan left promiscuous mode
[ 82.469033][ T1275] team0 (unregistering): Port device team_slave_1 removed
[ 82.487799][ T1275] team0 (unregistering): Port device team_slave_0 removed
[ 82.501665][ T1275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.517985][ T1275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.579379][ T1275] bond0 (unregistering): Released all slaves
[ 82.662253][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.686156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.695195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.718949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.727715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.737035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.746278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.756139][ T4303] device veth0_vlan entered promiscuous mode
[ 82.771847][ T4303] device veth1_vlan entered promiscuous mode
[ 82.800210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 82.808713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 82.817953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 82.827703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 82.839252][ T4303] device veth0_macvtap entered promiscuous mode
[ 82.851674][ T4303] device veth1_macvtap entered promiscuous mode
[ 82.876855][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.885669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 82.896235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 82.904995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 82.914225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 82.926781][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.936701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 82.945416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 82.957482][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.966842][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.975714][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.984959][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.045185][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.057599][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.066003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/02/19 13:08:10 executed programs: 2
[ 83.090400][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.098597][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.117072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.166959][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 83.212484][ T4323] ==================================================================
[ 83.220820][ T4323] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 83.228075][ T4323] Read of size 4 at addr ffff888075d38338 by task syz.0.19/4323
[ 83.235739][ T4323]
[ 83.238111][ T4323] CPU: 1 PID: 4323 Comm: syz.0.19 Not tainted syzkaller #0
[ 83.245332][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 83.255422][ T4323] Call Trace:
[ 83.258755][ T4323]
[ 83.261721][ T4323] dump_stack_lvl+0x188/0x250
[ 83.266437][ T4323] ? show_regs_print_info+0x20/0x20
[ 83.271669][ T4323] ? _printk+0xda/0x130
[ 83.275859][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 83.280851][ T4323] ? load_image+0x400/0x400
[ 83.285405][ T4323] print_address_description+0x60/0x2d0
[ 83.291084][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 83.295962][ T4323] kasan_report+0xdf/0x130
[ 83.300412][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 83.305300][ T4323] ax25_fillin_cb+0x459/0x640
[ 83.310016][ T4323] ax25_setsockopt+0x8c9/0xa60
[ 83.314826][ T4323] ? ax25_shutdown+0x10/0x10
[ 83.319492][ T4323] ? aa_sock_opt_perm+0x74/0x100
[ 83.324467][ T4323] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 83.330045][ T4323] ? security_socket_setsockopt+0x7a/0xa0
[ 83.335799][ T4323] ? ax25_shutdown+0x10/0x10
[ 83.340424][ T4323] __sys_setsockopt+0x2bf/0x3d0
[ 83.345396][ T4323] __x64_sys_setsockopt+0xb1/0xc0
[ 83.350474][ T4323] do_syscall_64+0x4c/0xa0
[ 83.355352][ T4323] ? clear_bhb_loop+0x30/0x80
[ 83.360141][ T4323] ? clear_bhb_loop+0x30/0x80
[ 83.364848][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.370796][ T4323] RIP: 0033:0x7f42070d3629
[ 83.375249][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 83.394892][ T4323] RSP: 002b:00007ffefb310978 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 83.403522][ T4323] RAX: ffffffffffffffda RBX: 00007f420734cfa0 RCX: 00007f42070d3629
[ 83.411520][ T4323] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 83.419524][ T4323] RBP: 00007f4207169b39 R08: 0000000000000010 R09: 0000000000000000
[ 83.427529][ T4323] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 83.435526][ T4323] R13: 00007f420734cfac R14: 00007f420734cfa0 R15: 00007f420734cfa0
[ 83.443539][ T4323]
[ 83.446585][ T4323]
[ 83.448929][ T4323] Allocated by task 4321:
[ 83.453278][ T4323] __kasan_kmalloc+0xb5/0xf0
[ 83.457940][ T4323] ax25_dev_device_up+0x50/0x580
[ 83.462905][ T4323] ax25_device_event+0x483/0x4f0
[ 83.467870][ T4323] raw_notifier_call_chain+0xcb/0x160
[ 83.473369][ T4323] __dev_notify_flags+0x194/0x300
[ 83.478427][ T4323] dev_change_flags+0xe3/0x1a0
[ 83.483222][ T4323] dev_ifsioc+0x130/0xd50
[ 83.487575][ T4323] dev_ioctl+0x545/0xe30
[ 83.491873][ T4323] sock_do_ioctl+0x245/0x320
[ 83.496487][ T4323] sock_ioctl+0x4d2/0x710
[ 83.500844][ T4323] __se_sys_ioctl+0xfa/0x170
[ 83.505458][ T4323] do_syscall_64+0x4c/0xa0
[ 83.509903][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.515927][ T4323]
[ 83.518298][ T4323] Freed by task 4322:
[ 83.522309][ T4323] kasan_set_track+0x4b/0x70
[ 83.526942][ T4323] kasan_set_free_info+0x1f/0x40
[ 83.531920][ T4323] ____kasan_slab_free+0xd5/0x110
[ 83.537073][ T4323] slab_free_freelist_hook+0xea/0x170
[ 83.542478][ T4323] kfree+0xef/0x2a0
[ 83.546322][ T4323] ax25_release+0x661/0x870
[ 83.550851][ T4323] sock_close+0xd5/0x240
[ 83.555124][ T4323] __fput+0x234/0x930
[ 83.559218][ T4323] task_work_run+0x125/0x1a0
[ 83.563842][ T4323] exit_to_user_mode_loop+0x10f/0x130
[ 83.569250][ T4323] exit_to_user_mode_prepare+0xee/0x180
[ 83.574822][ T4323] syscall_exit_to_user_mode+0x16/0x40
[ 83.580321][ T4323] do_syscall_64+0x58/0xa0
[ 83.584763][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.590680][ T4323]
[ 83.593029][ T4323] The buggy address belongs to the object at ffff888075d38300
[ 83.593029][ T4323] which belongs to the cache kmalloc-192 of size 192
[ 83.607104][ T4323] The buggy address is located 56 bytes inside of
[ 83.607104][ T4323] 192-byte region [ffff888075d38300, ffff888075d383c0)
[ 83.620328][ T4323] The buggy address belongs to the page:
[ 83.625995][ T4323] page:ffffea0001d74e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75d38
[ 83.636264][ T4323] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 83.643849][ T4323] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c41a00
[ 83.652487][ T4323] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 83.661096][ T4323] page dumped because: kasan: bad access detected
[ 83.667555][ T4323] page_owner tracks the page as allocated
[ 83.673470][ T4323] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4303, ts 83155482096, free_ts 83155236946
[ 83.689536][ T4323] get_page_from_freelist+0x1bbd/0x1ca0
[ 83.695135][ T4323] __alloc_pages+0x1ee/0x480
[ 83.699782][ T4323] new_slab+0xb6/0x4b0
[ 83.704005][ T4323] ___slab_alloc+0x80a/0xdd0
[ 83.708646][ T4323] __kmalloc_node+0x200/0x3b0
[ 83.713354][ T4323] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 83.719202][ T4323] slab_post_alloc_hook+0xba/0x380
[ 83.724378][ T4323] kmem_cache_alloc+0x100/0x290
[ 83.729312][ T4323] __d_alloc+0x2a/0x6f0
[ 83.733519][ T4323] d_alloc_pseudo+0x19/0x70
[ 83.738066][ T4323] alloc_file_pseudo+0xe0/0x200
[ 83.742968][ T4323] sock_alloc_file+0xb3/0x240
[ 83.747681][ T4323] __sys_socket+0x11d/0x170
[ 83.752215][ T4323] __x64_sys_socket+0x76/0x80
[ 83.756930][ T4323] do_syscall_64+0x4c/0xa0
[ 83.761717][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.767821][ T4323] page last free stack trace:
[ 83.772541][ T4323] free_unref_page_prepare+0x637/0x6c0
[ 83.778370][ T4323] free_unref_page+0x8f/0x2a0
[ 83.783113][ T4323] __vunmap+0x8b9/0xa50
[ 83.787390][ T4323] do_arpt_get_ctl+0xd53/0x1000
[ 83.792271][ T4323] nf_getsockopt+0x25e/0x280
[ 83.796919][ T4323] ip_getsockopt+0x1256/0x16a0
[ 83.801714][ T4323] tcp_getsockopt+0x200/0x25a0
[ 83.806506][ T4323] __sys_getsockopt+0x1b0/0x230
[ 83.811474][ T4323] __x64_sys_getsockopt+0xb1/0xc0
[ 83.816617][ T4323] do_syscall_64+0x4c/0xa0
[ 83.821074][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.827016][ T4323]
[ 83.829383][ T4323] Memory state around the buggy address:
[ 83.835039][ T4323] ffff888075d38200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 83.843123][ T4323] ffff888075d38280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 83.851206][ T4323] >ffff888075d38300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 83.859283][ T4323] ^
[ 83.865222][ T4323] ffff888075d38380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 83.873313][ T4323] ffff888075d38400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 83.881402][ T4323] ==================================================================
[ 83.890047][ T4323] Disabling lock debugging due to kernel taint
[ 83.913392][ T4323] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 83.921085][ T4323] CPU: 1 PID: 4323 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 83.929706][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 83.939916][ T4323] Call Trace:
[ 83.943229][ T4323]
[ 83.946180][ T4323] dump_stack_lvl+0x188/0x250
[ 83.950896][ T4323] ? show_regs_print_info+0x20/0x20
[ 83.956118][ T4323] ? load_image+0x400/0x400
[ 83.960654][ T4323] panic+0x2e5/0x810
[ 83.964578][ T4323] ? bpf_jit_dump+0xd0/0xd0
[ 83.969121][ T4323] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 83.975135][ T4323] ? _raw_spin_unlock+0x40/0x40
[ 83.980008][ T4323] ? print_memory_metadata+0x314/0x400
[ 83.985596][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 83.990472][ T4323] check_panic_on_warn+0x80/0xa0
[ 83.995525][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 84.000398][ T4323] end_report+0x6d/0xf0
[ 84.004583][ T4323] kasan_report+0x102/0x130
[ 84.009116][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 84.013993][ T4323] ax25_fillin_cb+0x459/0x640
[ 84.014380][ T4300] Bluetooth: hci0: command 0x040f tx timeout
[ 84.018722][ T4323] ax25_setsockopt+0x8c9/0xa60
[ 84.018747][ T4323] ? ax25_shutdown+0x10/0x10
[ 84.034127][ T4323] ? aa_sock_opt_perm+0x74/0x100
[ 84.039103][ T4323] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 84.044683][ T4323] ? security_socket_setsockopt+0x7a/0xa0
[ 84.050425][ T4323] ? ax25_shutdown+0x10/0x10
[ 84.055037][ T4323] __sys_setsockopt+0x2bf/0x3d0
[ 84.059916][ T4323] __x64_sys_setsockopt+0xb1/0xc0
[ 84.064974][ T4323] do_syscall_64+0x4c/0xa0
[ 84.069416][ T4323] ? clear_bhb_loop+0x30/0x80
[ 84.074213][ T4323] ? clear_bhb_loop+0x30/0x80
[ 84.079000][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.084930][ T4323] RIP: 0033:0x7f42070d3629
[ 84.089482][ T4323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.109209][ T4323] RSP: 002b:00007ffefb310978 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 84.117667][ T4323] RAX: ffffffffffffffda RBX: 00007f420734cfa0 RCX: 00007f42070d3629
[ 84.125780][ T4323] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004
[ 84.133787][ T4323] RBP: 00007f4207169b39 R08: 0000000000000010 R09: 0000000000000000
[ 84.141790][ T4323] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[ 84.149789][ T4323] R13: 00007f420734cfac R14: 00007f420734cfa0 R15: 00007f420734cfa0
[ 84.157809][ T4323]
[ 84.161137][ T4323] Kernel Offset: disabled
[ 84.165482][ T4323] Rebooting in 86400 seconds..