Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts.
2025/08/25 09:44:18 parsed 1 programs
[ 47.265159][ T4190] cgroup: Unknown subsys name 'net'
[ 47.406302][ T4190] cgroup: Unknown subsys name 'rlimit'
[ 48.596231][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 50.677960][ T4226] chnl_net:caif_netlink_parms(): no params data found
[ 50.734625][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.742369][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.750460][ T4226] device bridge_slave_0 entered promiscuous mode
[ 50.760690][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.767839][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.775891][ T4226] device bridge_slave_1 entered promiscuous mode
[ 50.802510][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 50.813668][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 50.842000][ T4226] team0: Port device team_slave_0 added
[ 50.849431][ T4226] team0: Port device team_slave_1 added
[ 50.871025][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 50.878023][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.908070][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 50.921023][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 50.928010][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.954958][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 50.991237][ T4226] device hsr_slave_0 entered promiscuous mode
[ 50.998423][ T4226] device hsr_slave_1 entered promiscuous mode
[ 51.119446][ T4226] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 51.130685][ T4226] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 51.141603][ T4226] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 51.151057][ T4226] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 51.183128][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.190301][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.198213][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.205317][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.265922][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0
[ 51.280313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 51.293139][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 51.302683][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 51.310375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 51.323586][ T4226] 8021q: adding VLAN 0 to HW filter on device team0
[ 51.334917][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 51.344111][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.351210][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.363422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 51.373030][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.380080][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.403567][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 51.414092][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 51.424476][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 51.432876][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 51.447473][ T4226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 51.458905][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 51.469004][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 51.559169][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 51.566856][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 51.584641][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 51.615217][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 51.638363][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 51.650063][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 51.658307][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 51.676015][ T4226] device veth0_vlan entered promiscuous mode
[ 51.692576][ T4226] device veth1_vlan entered promiscuous mode
[ 51.717685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 51.727961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 51.738194][ T4226] device veth0_macvtap entered promiscuous mode
[ 51.746946][ T4226] device veth1_macvtap entered promiscuous mode
[ 51.760187][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 51.767923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 51.776470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 51.784563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 51.793168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 51.805246][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 51.812638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 51.821580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 51.832551][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.841738][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.850401][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.859804][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.941839][ T4226] syz-executor (4226) used greatest stack depth: 20128 bytes left
[ 52.188519][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 52.203987][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 52.214431][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 52.215609][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 52.232730][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 52.240696][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/08/25 09:44:25 executed programs: 0
[ 53.582635][ T4285] chnl_net:caif_netlink_parms(): no params data found
[ 53.633095][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.640383][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.648991][ T4285] device bridge_slave_0 entered promiscuous mode
[ 53.658897][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.666230][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.674424][ T4285] device bridge_slave_1 entered promiscuous mode
[ 53.696132][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 53.706943][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 53.729122][ T4285] team0: Port device team_slave_0 added
[ 53.736894][ T4285] team0: Port device team_slave_1 added
[ 53.755661][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 53.763140][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 53.789103][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 53.801599][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 53.808537][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 53.835005][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 53.870205][ T4285] device hsr_slave_0 entered promiscuous mode
[ 53.877244][ T4285] device hsr_slave_1 entered promiscuous mode
[ 53.884185][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 53.892323][ T4285] Cannot create hsr debugfs directory
[ 53.970291][ T4285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 55.482031][ T4301] Bluetooth: hci0: command 0x0409 tx timeout
[ 56.876550][ T4285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 56.927429][ T4285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 56.976494][ T4285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 57.051031][ T4285] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.060894][ T4285] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.070164][ T4285] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.078557][ T4285] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.140822][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.154884][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 57.163475][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 57.172966][ T4285] 8021q: adding VLAN 0 to HW filter on device team0
[ 57.188926][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 57.197704][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 57.206205][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.213268][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.235784][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 57.243814][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 57.252691][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 57.261021][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.268096][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.277427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 57.305300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 57.315492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 57.324903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 57.333911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 57.344257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 57.353038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 57.364040][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 57.372431][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 57.384448][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 57.392775][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 57.404306][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 57.503160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 57.510572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 57.522340][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 57.551682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 57.560351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 57.561443][ T21] Bluetooth: hci0: command 0x041b tx timeout
[ 57.582004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 57.590247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 57.598936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 57.607236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 57.617185][ T4285] device veth0_vlan entered promiscuous mode
[ 57.640831][ T4285] device veth1_vlan entered promiscuous mode
[ 57.656509][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 57.664594][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 57.672993][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 57.681416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 57.692291][ T4285] device veth0_macvtap entered promiscuous mode
[ 57.702655][ T4285] device veth1_macvtap entered promiscuous mode
[ 57.722277][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 57.734697][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 57.746920][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 57.764627][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 57.772968][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 57.780754][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 57.789749][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 57.799237][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 57.810307][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 57.823004][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 57.832850][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 57.842157][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 57.856576][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.867549][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.876671][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.886066][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.900367][ T410] device hsr_slave_0 left promiscuous mode
[ 57.906810][ T410] device hsr_slave_1 left promiscuous mode
[ 57.913971][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 57.922332][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 57.930255][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 57.937926][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 57.945518][ T410] device bridge_slave_1 left promiscuous mode
[ 57.952579][ T410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.971786][ T410] device bridge_slave_0 left promiscuous mode
[ 57.977942][ T410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.994977][ T410] device veth1_macvtap left promiscuous mode
[ 58.001225][ T410] device veth0_macvtap left promiscuous mode
[ 58.007253][ T410] device veth1_vlan left promiscuous mode
[ 58.013829][ T410] device veth0_vlan left promiscuous mode
[ 58.139541][ T410] team0 (unregistering): Port device team_slave_1 removed
[ 58.153345][ T410] team0 (unregistering): Port device team_slave_0 removed
[ 58.164571][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 58.177978][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 58.227229][ T410] bond0 (unregistering): Released all slaves
[ 58.326939][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.347390][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.367366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2025/08/25 09:44:30 executed programs: 2
[ 58.376333][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.385064][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.410561][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 58.457801][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 58.505252][ T4323] ==================================================================
[ 58.513488][ T4323] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 58.520696][ T4323] Read of size 4 at addr ffff888072d4b238 by task syz.0.19/4323
[ 58.528338][ T4323]
[ 58.530659][ T4323] CPU: 1 PID: 4323 Comm: syz.0.19 Not tainted 5.15.189-syzkaller #0
[ 58.538620][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 58.548662][ T4323] Call Trace:
[ 58.551926][ T4323]
[ 58.554851][ T4323] dump_stack_lvl+0x168/0x230
[ 58.559508][ T4323] ? show_regs_print_info+0x20/0x20
[ 58.564680][ T4323] ? _printk+0xcc/0x110
[ 58.568813][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 58.573641][ T4323] ? load_image+0x3b0/0x3b0
[ 58.578121][ T4323] print_address_description+0x60/0x2d0
[ 58.583639][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 58.588464][ T4323] kasan_report+0xdf/0x130
[ 58.592863][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 58.597707][ T4323] ax25_fillin_cb+0x459/0x640
[ 58.602370][ T4323] ax25_setsockopt+0x8a2/0xa40
[ 58.607127][ T4323] ? ax25_shutdown+0x10/0x10
[ 58.611701][ T4323] ? aa_sock_opt_perm+0x74/0x100
[ 58.616630][ T4323] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 58.622153][ T4323] ? security_socket_setsockopt+0x7a/0xa0
[ 58.627846][ T4323] ? ax25_shutdown+0x10/0x10
[ 58.632419][ T4323] __sys_setsockopt+0x2bf/0x3d0
[ 58.637261][ T4323] __x64_sys_setsockopt+0xb1/0xc0
[ 58.642262][ T4323] do_syscall_64+0x4c/0xa0
[ 58.646657][ T4323] ? clear_bhb_loop+0x30/0x80
[ 58.651309][ T4323] ? clear_bhb_loop+0x30/0x80
[ 58.655979][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 58.661862][ T4323] RIP: 0033:0x7f67b9d8ebe9
[ 58.666255][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 58.685837][ T4323] RSP: 002b:00007ffe0721ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 58.694229][ T4323] RAX: ffffffffffffffda RBX: 00007f67b9fb5fa0 RCX: 00007f67b9d8ebe9
[ 58.702197][ T4323] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 58.710164][ T4323] RBP: 00007f67b9e11e19 R08: 0000000000000010 R09: 0000000000000000
[ 58.718110][ T4323] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[ 58.726064][ T4323] R13: 00007f67b9fb5fa0 R14: 00007f67b9fb5fa0 R15: 0000000000000005
[ 58.734031][ T4323]
[ 58.737034][ T4323]
[ 58.739333][ T4323] Allocated by task 4321:
[ 58.743631][ T4323] __kasan_kmalloc+0xb5/0xf0
[ 58.748199][ T4323] ax25_dev_device_up+0x50/0x580
[ 58.753113][ T4323] ax25_device_event+0x483/0x4f0
[ 58.758037][ T4323] raw_notifier_call_chain+0xcb/0x160
[ 58.763388][ T4323] __dev_notify_flags+0x178/0x2d0
[ 58.768387][ T4323] dev_change_flags+0xe3/0x1a0
[ 58.773125][ T4323] dev_ifsioc+0x147/0xe70
[ 58.777445][ T4323] dev_ioctl+0x55f/0xe50
[ 58.781665][ T4323] sock_do_ioctl+0x222/0x2f0
[ 58.786229][ T4323] sock_ioctl+0x4ed/0x6e0
[ 58.790526][ T4323] __se_sys_ioctl+0xfa/0x170
[ 58.795091][ T4323] do_syscall_64+0x4c/0xa0
[ 58.799489][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 58.805355][ T4323]
[ 58.807674][ T4323] Freed by task 4322:
[ 58.811629][ T4323] kasan_set_track+0x4b/0x70
[ 58.816210][ T4323] kasan_set_free_info+0x1f/0x40
[ 58.821124][ T4323] ____kasan_slab_free+0xd5/0x110
[ 58.826133][ T4323] slab_free_freelist_hook+0xea/0x170
[ 58.831481][ T4323] kfree+0xef/0x2a0
[ 58.835278][ T4323] ax25_release+0x661/0x870
[ 58.839765][ T4323] sock_close+0xd5/0x240
[ 58.843991][ T4323] __fput+0x234/0x930
[ 58.847948][ T4323] task_work_run+0x125/0x1a0
[ 58.852516][ T4323] exit_to_user_mode_loop+0x10f/0x130
[ 58.857886][ T4323] exit_to_user_mode_prepare+0xb1/0x140
[ 58.863411][ T4323] syscall_exit_to_user_mode+0x16/0x40
[ 58.868843][ T4323] do_syscall_64+0x58/0xa0
[ 58.873235][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 58.879103][ T4323]
[ 58.881402][ T4323] The buggy address belongs to the object at ffff888072d4b200
[ 58.881402][ T4323] which belongs to the cache kmalloc-192 of size 192
[ 58.895425][ T4323] The buggy address is located 56 bytes inside of
[ 58.895425][ T4323] 192-byte region [ffff888072d4b200, ffff888072d4b2c0)
[ 58.908589][ T4323] The buggy address belongs to the page:
[ 58.914196][ T4323] page:ffffea0001cb52c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72d4b
[ 58.924328][ T4323] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 58.931860][ T4323] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00
[ 58.940430][ T4323] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 58.949004][ T4323] page dumped because: kasan: bad access detected
[ 58.955398][ T4323] page_owner tracks the page as allocated
[ 58.961087][ T4323] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1274, ts 58449089689, free_ts 58393042484
[ 58.977045][ T4323] get_page_from_freelist+0x1b77/0x1c60
[ 58.982595][ T4323] __alloc_pages+0x1e1/0x470
[ 58.987162][ T4323] new_slab+0xb6/0x4b0
[ 58.991205][ T4323] ___slab_alloc+0x81e/0xdf0
[ 58.995777][ T4323] __kmalloc_node+0x200/0x3b0
[ 59.000428][ T4323] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 59.006213][ T4323] new_slab+0x100/0x4b0
[ 59.010374][ T4323] ___slab_alloc+0x81e/0xdf0
[ 59.014946][ T4323] kmem_cache_alloc+0x195/0x290
[ 59.019772][ T4323] __d_alloc+0x2a/0x6f0
[ 59.023903][ T4323] d_alloc_parallel+0x7e/0x12d0
[ 59.028728][ T4323] __lookup_slow+0x113/0x3d0
[ 59.033296][ T4323] lookup_one_len+0x18e/0x2c0
[ 59.037945][ T4323] start_creating+0x184/0x310
[ 59.042595][ T4323] __debugfs_create_file+0x6f/0x510
[ 59.047769][ T4323] ieee80211_sta_debugfs_add+0x2c9/0x770
[ 59.053379][ T4323] page last free stack trace:
[ 59.058034][ T4323] free_unref_page_prepare+0x637/0x6c0
[ 59.063468][ T4323] free_unref_page+0x94/0x280
[ 59.068121][ T4323] __unfreeze_partials+0x1a5/0x200
[ 59.073205][ T4323] put_cpu_partial+0x12d/0x190
[ 59.077946][ T4323] qlist_free_all+0x35/0x90
[ 59.082424][ T4323] kasan_quarantine_reduce+0x150/0x160
[ 59.087857][ T4323] __kasan_slab_alloc+0x2f/0xd0
[ 59.092684][ T4323] slab_post_alloc_hook+0x4c/0x380
[ 59.097806][ T4323] kmem_cache_alloc+0x100/0x290
[ 59.102633][ T4323] sock_alloc_inode+0x17/0xb0
[ 59.107290][ T4323] new_inode_pseudo+0x5f/0x210
[ 59.112032][ T4323] __sock_create+0x129/0x900
[ 59.116612][ T4323] __sys_socket+0xe2/0x170
[ 59.121001][ T4323] __x64_sys_socket+0x76/0x80
[ 59.125650][ T4323] do_syscall_64+0x4c/0xa0
[ 59.130044][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 59.135913][ T4323]
[ 59.138211][ T4323] Memory state around the buggy address:
[ 59.143811][ T4323] ffff888072d4b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 59.151848][ T4323] ffff888072d4b180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 59.159898][ T4323] >ffff888072d4b200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 59.167971][ T4323] ^
[ 59.173840][ T4323] ffff888072d4b280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 59.181878][ T4323] ffff888072d4b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 59.189934][ T4323] ==================================================================
[ 59.197969][ T4323] Disabling lock debugging due to kernel taint
[ 59.206273][ T4323] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 59.213478][ T4323] CPU: 1 PID: 4323 Comm: syz.0.19 Tainted: G B 5.15.189-syzkaller #0
[ 59.222823][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 59.232862][ T4323] Call Trace:
[ 59.236123][ T4323]
[ 59.239034][ T4323] dump_stack_lvl+0x168/0x230
[ 59.243689][ T4323] ? show_regs_print_info+0x20/0x20
[ 59.248865][ T4323] ? load_image+0x3b0/0x3b0
[ 59.253346][ T4323] panic+0x2c9/0x7f0
[ 59.257260][ T4323] ? bpf_jit_dump+0xd0/0xd0
[ 59.261752][ T4323] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 59.267626][ T4323] ? _raw_spin_unlock+0x40/0x40
[ 59.272458][ T4323] ? print_memory_metadata+0x314/0x400
[ 59.277896][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 59.282723][ T4323] check_panic_on_warn+0x80/0xa0
[ 59.287643][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 59.292469][ T4323] end_report+0x6d/0xf0
[ 59.296603][ T4323] kasan_report+0x102/0x130
[ 59.301081][ T4323] ? ax25_fillin_cb+0x459/0x640
[ 59.305915][ T4323] ax25_fillin_cb+0x459/0x640
[ 59.310567][ T4323] ax25_setsockopt+0x8a2/0xa40
[ 59.315307][ T4323] ? ax25_shutdown+0x10/0x10
[ 59.319883][ T4323] ? aa_sock_opt_perm+0x74/0x100
[ 59.324794][ T4323] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 59.330318][ T4323] ? security_socket_setsockopt+0x7a/0xa0
[ 59.336013][ T4323] ? ax25_shutdown+0x10/0x10
[ 59.340582][ T4323] __sys_setsockopt+0x2bf/0x3d0
[ 59.345405][ T4323] __x64_sys_setsockopt+0xb1/0xc0
[ 59.350402][ T4323] do_syscall_64+0x4c/0xa0
[ 59.354794][ T4323] ? clear_bhb_loop+0x30/0x80
[ 59.359445][ T4323] ? clear_bhb_loop+0x30/0x80
[ 59.364094][ T4323] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 59.369972][ T4323] RIP: 0033:0x7f67b9d8ebe9
[ 59.374366][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 59.393944][ T4323] RSP: 002b:00007ffe0721ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 59.402331][ T4323] RAX: ffffffffffffffda RBX: 00007f67b9fb5fa0 RCX: 00007f67b9d8ebe9
[ 59.410281][ T4323] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 59.418225][ T4323] RBP: 00007f67b9e11e19 R08: 0000000000000010 R09: 0000000000000000
[ 59.426171][ T4323] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[ 59.434133][ T4323] R13: 00007f67b9fb5fa0 R14: 00007f67b9fb5fa0 R15: 0000000000000005
[ 59.442085][ T4323]
[ 59.445275][ T4323] Kernel Offset: disabled
[ 59.449596][ T4323] Rebooting in 86400 seconds..