Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts.
2025/08/28 11:13:24 parsed 1 programs
[ 57.497459][ T4190] cgroup: Unknown subsys name 'net'
[ 57.612486][ T4190] cgroup: Unknown subsys name 'rlimit'
[ 59.111953][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 61.694912][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.715334][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.734334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 61.750346][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.759247][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.769010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 62.420381][ T4244] chnl_net:caif_netlink_parms(): no params data found
[ 62.484322][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.492507][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.500641][ T4244] device bridge_slave_0 entered promiscuous mode
[ 62.509599][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.517087][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.524873][ T4244] device bridge_slave_1 entered promiscuous mode
[ 62.551308][ T4244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.562937][ T4244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.592956][ T4244] team0: Port device team_slave_0 added
[ 62.600933][ T4244] team0: Port device team_slave_1 added
[ 62.629379][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.636359][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.662666][ T4244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.675261][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.682466][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.708717][ T4244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.739058][ T4244] device hsr_slave_0 entered promiscuous mode
[ 62.746121][ T4244] device hsr_slave_1 entered promiscuous mode
[ 62.960462][ T4244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 62.970901][ T4244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 62.980968][ T4244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 62.990165][ T4244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 63.012110][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.019297][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.027199][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.034454][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.075765][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.091059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 63.100427][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.108667][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.116509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 63.130428][ T4244] 8021q: adding VLAN 0 to HW filter on device team0
[ 63.141445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 63.150212][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.157318][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.169391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 63.178516][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.185591][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.206214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 63.214724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 63.227107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 63.240651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 63.269427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 63.281946][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 63.373695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 63.381579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 63.411956][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 63.428006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 63.436647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 63.453617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 63.462787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 63.473539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 63.487707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 63.519266][ T4244] device veth0_vlan entered promiscuous mode
[ 63.532272][ T4244] device veth1_vlan entered promiscuous mode
[ 63.551544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 63.561008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 63.569573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 63.578541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 63.588969][ T4244] device veth0_macvtap entered promiscuous mode
[ 63.610394][ T4244] device veth1_macvtap entered promiscuous mode
[ 63.624946][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 63.632605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 63.641574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 63.650263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 63.660305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 63.672849][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 63.698636][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 63.708255][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 63.720709][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.730050][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.740510][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.749475][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/08/28 11:13:32 executed programs: 0
[ 64.762505][ T4292] chnl_net:caif_netlink_parms(): no params data found
[ 64.832435][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.839852][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.852258][ T4292] device bridge_slave_0 entered promiscuous mode
[ 64.865410][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.875093][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.883725][ T4292] device bridge_slave_1 entered promiscuous mode
[ 64.916617][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 64.931968][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 64.964449][ T4292] team0: Port device team_slave_0 added
[ 64.975141][ T4292] team0: Port device team_slave_1 added
[ 65.005556][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.015100][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 65.044165][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.059443][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.066413][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 65.095613][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.141657][ T4292] device hsr_slave_0 entered promiscuous mode
[ 65.151761][ T4292] device hsr_slave_1 entered promiscuous mode
[ 65.159376][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 65.169833][ T4292] Cannot create hsr debugfs directory
[ 65.266068][ T4292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.678237][ T4261] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.698578][ T4292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.768228][ T4261] Bluetooth: hci0: command 0x041b tx timeout
[ 69.102120][ T4292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 69.164638][ T4292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 69.264655][ T4292] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.275231][ T4292] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.284892][ T4292] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.293649][ T4292] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.352968][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.376346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 69.388205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 69.399294][ T4292] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.419655][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 69.429118][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 69.437636][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.444670][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.453606][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 69.471278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 69.480110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 69.490873][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.497983][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.505758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 69.525596][ T4292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 69.536591][ T4292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 69.550351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 69.560040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 69.570057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 69.578915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 69.589644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 69.598274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 69.606505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 69.614928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 69.623509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 69.632054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 69.640078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 69.754955][ T812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 69.762973][ T812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 69.776633][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 69.806445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 69.816110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 69.835100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 69.843986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 69.852986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 69.861113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 69.871067][ T4292] device veth0_vlan entered promiscuous mode
[ 69.891550][ T4292] device veth1_vlan entered promiscuous mode
[ 69.907639][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 69.915666][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 69.925805][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 69.935207][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 69.949709][ T9] device hsr_slave_0 left promiscuous mode
[ 69.956244][ T9] device hsr_slave_1 left promiscuous mode
[ 69.963598][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 69.971389][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 69.981071][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 69.988767][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 69.996491][ T9] device bridge_slave_1 left promiscuous mode
[ 70.003782][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.016234][ T9] device bridge_slave_0 left promiscuous mode
[ 70.022677][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.039428][ T9] device veth1_macvtap left promiscuous mode
[ 70.045645][ T9] device veth0_macvtap left promiscuous mode
[ 70.052025][ T9] device veth1_vlan left promiscuous mode
[ 70.058628][ T9] device veth0_vlan left promiscuous mode
[ 70.195473][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 70.209364][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 70.223433][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 70.237206][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 70.288493][ T9] bond0 (unregistering): Released all slaves
[ 70.350712][ T4292] device veth0_macvtap entered promiscuous mode
[ 70.363937][ T4292] device veth1_macvtap entered promiscuous mode
[ 70.378591][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.386005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 70.394494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 70.406169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 70.415152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 70.427454][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.436289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 70.445387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 70.456609][ T4292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.465782][ T4292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.475257][ T4292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.484153][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.548893][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.557827][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.571134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 70.589952][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2025/08/28 11:13:38 executed programs: 2
[ 70.604736][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.613997][ T812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 70.669537][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 70.729493][ T4319] ==================================================================
[ 70.738186][ T4319] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 70.745408][ T4319] Read of size 4 at addr ffff88802b742238 by task syz.0.19/4319
[ 70.753032][ T4319]
[ 70.755362][ T4319] CPU: 1 PID: 4319 Comm: syz.0.19 Not tainted 5.15.189-syzkaller #0
[ 70.763339][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[ 70.773389][ T4319] Call Trace:
[ 70.776667][ T4319]
[ 70.779603][ T4319] dump_stack_lvl+0x168/0x230
[ 70.784297][ T4319] ? show_regs_print_info+0x20/0x20
[ 70.789504][ T4319] ? _printk+0xcc/0x110
[ 70.793684][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 70.798551][ T4319] ? load_image+0x3b0/0x3b0
[ 70.803050][ T4319] print_address_description+0x60/0x2d0
[ 70.809020][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 70.813872][ T4319] kasan_report+0xdf/0x130
[ 70.818278][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 70.823120][ T4319] ax25_fillin_cb+0x459/0x640
[ 70.827795][ T4319] ax25_setsockopt+0x8a2/0xa40
[ 70.832602][ T4319] ? ax25_shutdown+0x10/0x10
[ 70.837181][ T4319] ? aa_sock_opt_perm+0x74/0x100
[ 70.842106][ T4319] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 70.847640][ T4319] ? security_socket_setsockopt+0x7a/0xa0
[ 70.853346][ T4319] ? ax25_shutdown+0x10/0x10
[ 70.858097][ T4319] __sys_setsockopt+0x2bf/0x3d0
[ 70.862944][ T4319] __x64_sys_setsockopt+0xb1/0xc0
[ 70.867957][ T4319] do_syscall_64+0x4c/0xa0
[ 70.872362][ T4319] ? clear_bhb_loop+0x30/0x80
[ 70.877032][ T4319] ? clear_bhb_loop+0x30/0x80
[ 70.878306][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[ 70.881722][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.893600][ T4319] RIP: 0033:0x7f7271707be9
[ 70.898100][ T4319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.917712][ T4319] RSP: 002b:00007ffe10fe8208 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 70.926332][ T4319] RAX: ffffffffffffffda RBX: 00007f727192efa0 RCX: 00007f7271707be9
[ 70.934432][ T4319] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 70.942423][ T4319] RBP: 00007f727178ae19 R08: 0000000000000010 R09: 0000000000000000
[ 70.950386][ T4319] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 70.958349][ T4319] R13: 00007f727192efa0 R14: 00007f727192efa0 R15: 0000000000000005
[ 70.966493][ T4319]
[ 70.969699][ T4319]
[ 70.972015][ T4319] Allocated by task 4317:
[ 70.976322][ T4319] __kasan_kmalloc+0xb5/0xf0
[ 70.980908][ T4319] ax25_dev_device_up+0x50/0x580
[ 70.985851][ T4319] ax25_device_event+0x483/0x4f0
[ 70.990783][ T4319] raw_notifier_call_chain+0xcb/0x160
[ 70.996153][ T4319] __dev_notify_flags+0x178/0x2d0
[ 71.001163][ T4319] dev_change_flags+0xe3/0x1a0
[ 71.005912][ T4319] dev_ifsioc+0x147/0xe70
[ 71.010313][ T4319] dev_ioctl+0x55f/0xe50
[ 71.014537][ T4319] sock_do_ioctl+0x222/0x2f0
[ 71.019134][ T4319] sock_ioctl+0x4ed/0x6e0
[ 71.023451][ T4319] __se_sys_ioctl+0xfa/0x170
[ 71.028033][ T4319] do_syscall_64+0x4c/0xa0
[ 71.032459][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.038344][ T4319]
[ 71.040663][ T4319] Freed by task 4318:
[ 71.044625][ T4319] kasan_set_track+0x4b/0x70
[ 71.049206][ T4319] kasan_set_free_info+0x1f/0x40
[ 71.054132][ T4319] ____kasan_slab_free+0xd5/0x110
[ 71.059176][ T4319] slab_free_freelist_hook+0xea/0x170
[ 71.064629][ T4319] kfree+0xef/0x2a0
[ 71.068446][ T4319] ax25_release+0x661/0x870
[ 71.072991][ T4319] sock_close+0xd5/0x240
[ 71.077248][ T4319] __fput+0x234/0x930
[ 71.081253][ T4319] task_work_run+0x125/0x1a0
[ 71.085843][ T4319] exit_to_user_mode_loop+0x10f/0x130
[ 71.091204][ T4319] exit_to_user_mode_prepare+0xb1/0x140
[ 71.096743][ T4319] syscall_exit_to_user_mode+0x16/0x40
[ 71.102205][ T4319] do_syscall_64+0x58/0xa0
[ 71.106607][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.112485][ T4319]
[ 71.114798][ T4319] The buggy address belongs to the object at ffff88802b742200
[ 71.114798][ T4319] which belongs to the cache kmalloc-192 of size 192
[ 71.128833][ T4319] The buggy address is located 56 bytes inside of
[ 71.128833][ T4319] 192-byte region [ffff88802b742200, ffff88802b7422c0)
[ 71.142111][ T4319] The buggy address belongs to the page:
[ 71.147849][ T4319] page:ffffea0000add080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b742
[ 71.158070][ T4319] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 71.165605][ T4319] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00
[ 71.174173][ T4319] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 71.182742][ T4319] page dumped because: kasan: bad access detected
[ 71.189320][ T4319] page_owner tracks the page as allocated
[ 71.195021][ T4319] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4317, ts 70658893863, free_ts 69924332622
[ 71.211244][ T4319] get_page_from_freelist+0x1b77/0x1c60
[ 71.216810][ T4319] __alloc_pages+0x1e1/0x470
[ 71.221611][ T4319] new_slab+0xb6/0x4b0
[ 71.225678][ T4319] ___slab_alloc+0x81e/0xdf0
[ 71.230279][ T4319] __kmalloc_node+0x200/0x3b0
[ 71.234966][ T4319] memcg_alloc_page_obj_cgroups+0x81/0x120
[ 71.240780][ T4319] slab_post_alloc_hook+0xba/0x380
[ 71.245906][ T4319] kmem_cache_alloc+0x100/0x290
[ 71.250838][ T4319] __d_alloc+0x2a/0x6f0
[ 71.255031][ T4319] d_alloc_parallel+0x7e/0x12d0
[ 71.259954][ T4319] path_openat+0x935/0x2f30
[ 71.264563][ T4319] do_filp_open+0x1b3/0x3e0
[ 71.269052][ T4319] do_sys_openat2+0x142/0x4a0
[ 71.273958][ T4319] __x64_sys_openat+0x135/0x160
[ 71.279173][ T4319] do_syscall_64+0x4c/0xa0
[ 71.280468][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.283624][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.283652][ T4319] page last free stack trace:
[ 71.290256][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.296031][ T4319] free_unref_page_prepare+0x637/0x6c0
[ 71.312505][ T4319] free_unref_page+0x94/0x280
[ 71.317226][ T4319] __unfreeze_partials+0x1a5/0x200
[ 71.322347][ T4319] put_cpu_partial+0x12d/0x190
[ 71.327105][ T4319] qlist_free_all+0x35/0x90
[ 71.331628][ T4319] kasan_quarantine_reduce+0x150/0x160
[ 71.337151][ T4319] __kasan_slab_alloc+0x2f/0xd0
[ 71.342006][ T4319] slab_post_alloc_hook+0x4c/0x380
[ 71.347141][ T4319] __kmalloc+0x127/0x330
[ 71.351379][ T4319] fib6_info_alloc+0x2e/0xe0
[ 71.356056][ T4319] ip6_route_info_create+0x44f/0x1210
[ 71.361435][ T4319] ip6_route_add+0x24/0x130
[ 71.365926][ T4319] addrconf_add_dev+0x250/0x350
[ 71.370763][ T4319] addrconf_init_auto_addrs+0x5f8/0xa80
[ 71.376298][ T4319] addrconf_notify+0xa6b/0xf00
[ 71.381062][ T4319] raw_notifier_call_chain+0xcb/0x160
[ 71.386426][ T4319]
[ 71.388746][ T4319] Memory state around the buggy address:
[ 71.394360][ T4319] ffff88802b742100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 71.402404][ T4319] ffff88802b742180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 71.410449][ T4319] >ffff88802b742200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.418489][ T4319] ^
[ 71.424386][ T4319] ffff88802b742280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 71.432434][ T4319] ffff88802b742300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 71.440495][ T4319] ==================================================================
[ 71.448548][ T4319] Disabling lock debugging due to kernel taint
[ 71.458769][ T4319] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 71.466002][ T4319] CPU: 0 PID: 4319 Comm: syz.0.19 Tainted: G B 5.15.189-syzkaller #0
[ 71.475369][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[ 71.485411][ T4319] Call Trace:
[ 71.488684][ T4319]
[ 71.491615][ T4319] dump_stack_lvl+0x168/0x230
[ 71.496279][ T4319] ? show_regs_print_info+0x20/0x20
[ 71.501465][ T4319] ? load_image+0x3b0/0x3b0
[ 71.505955][ T4319] panic+0x2c9/0x7f0
[ 71.509835][ T4319] ? bpf_jit_dump+0xd0/0xd0
[ 71.514342][ T4319] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 71.520399][ T4319] ? _raw_spin_unlock+0x40/0x40
[ 71.525236][ T4319] ? print_memory_metadata+0x314/0x400
[ 71.530684][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 71.535526][ T4319] check_panic_on_warn+0x80/0xa0
[ 71.540496][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 71.545350][ T4319] end_report+0x6d/0xf0
[ 71.549504][ T4319] kasan_report+0x102/0x130
[ 71.554012][ T4319] ? ax25_fillin_cb+0x459/0x640
[ 71.558856][ T4319] ax25_fillin_cb+0x459/0x640
[ 71.563521][ T4319] ax25_setsockopt+0x8a2/0xa40
[ 71.568273][ T4319] ? ax25_shutdown+0x10/0x10
[ 71.572849][ T4319] ? aa_sock_opt_perm+0x74/0x100
[ 71.577773][ T4319] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 71.583303][ T4319] ? security_socket_setsockopt+0x7a/0xa0
[ 71.589095][ T4319] ? ax25_shutdown+0x10/0x10
[ 71.593696][ T4319] __sys_setsockopt+0x2bf/0x3d0
[ 71.598643][ T4319] __x64_sys_setsockopt+0xb1/0xc0
[ 71.603663][ T4319] do_syscall_64+0x4c/0xa0
[ 71.608169][ T4319] ? clear_bhb_loop+0x30/0x80
[ 71.612929][ T4319] ? clear_bhb_loop+0x30/0x80
[ 71.617692][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.623575][ T4319] RIP: 0033:0x7f7271707be9
[ 71.627978][ T4319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 71.647593][ T4319] RSP: 002b:00007ffe10fe8208 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 71.655995][ T4319] RAX: ffffffffffffffda RBX: 00007f727192efa0 RCX: 00007f7271707be9
[ 71.663951][ T4319] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 71.672013][ T4319] RBP: 00007f727178ae19 R08: 0000000000000010 R09: 0000000000000000
[ 71.679969][ T4319] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 71.687927][ T4319] R13: 00007f727192efa0 R14: 00007f727192efa0 R15: 0000000000000005
[ 71.695902][ T4319]
[ 71.699109][ T4319] Kernel Offset: disabled
[ 71.703424][ T4319] Rebooting in 86400 seconds..