Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts.
2025/08/23 20:11:33 parsed 1 programs
[ 71.776059][ T4187] cgroup: Unknown subsys name 'net'
[ 71.905412][ T4187] cgroup: Unknown subsys name 'rlimit'
[ 73.446434][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 75.085502][ T4207] chnl_net:caif_netlink_parms(): no params data found
[ 75.143225][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.151316][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.159898][ T4207] device bridge_slave_0 entered promiscuous mode
[ 75.171995][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.179739][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.187566][ T4207] device bridge_slave_1 entered promiscuous mode
[ 75.211356][ T4207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.225138][ T4207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.249423][ T4207] team0: Port device team_slave_0 added
[ 75.256935][ T4207] team0: Port device team_slave_1 added
[ 75.280686][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.287813][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.315750][ T4207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.328565][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.336288][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.362261][ T4207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.396947][ T4207] device hsr_slave_0 entered promiscuous mode
[ 75.404349][ T4207] device hsr_slave_1 entered promiscuous mode
[ 75.512072][ T4207] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.523424][ T4207] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.533032][ T4207] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.543023][ T4207] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.578724][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.586063][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.594150][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.601493][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.663109][ T4207] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.677299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.688645][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.701671][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.710704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 75.728428][ T4207] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.741721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.751281][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.758522][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.779439][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.789778][ T162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.796886][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.809518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.819067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.831158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.850142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.859305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.871029][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.994030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 76.001847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 76.017644][ T4207] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.040841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 76.062454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 76.073266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 76.083361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 76.092882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 76.103468][ T4207] device veth0_vlan entered promiscuous mode
[ 76.119570][ T4207] device veth1_vlan entered promiscuous mode
[ 76.143981][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 76.156242][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 76.164950][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 76.175522][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 76.187541][ T4207] device veth0_macvtap entered promiscuous mode
[ 76.199312][ T4207] device veth1_macvtap entered promiscuous mode
[ 76.217148][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.229435][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.237022][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 76.246127][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 76.255544][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 76.265334][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.275896][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 76.285323][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 76.299600][ T4207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.308467][ T4207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.317538][ T4207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.326478][ T4207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.476864][ T4207] syz-executor (4207) used greatest stack depth: 20928 bytes left
[ 77.061086][ T579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.374567][ T579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.359027][ T579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.426905][ T579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.680389][ T579] device hsr_slave_0 left promiscuous mode
[ 82.705340][ T579] device hsr_slave_1 left promiscuous mode
[ 82.713475][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.738972][ T579] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.748304][ T579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.765212][ T579] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.774880][ T579] device bridge_slave_1 left promiscuous mode
[ 82.782379][ T579] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.797799][ T579] device bridge_slave_0 left promiscuous mode
[ 82.804676][ T579] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.822223][ T579] device veth1_macvtap left promiscuous mode
[ 82.828466][ T579] device veth0_macvtap left promiscuous mode
[ 82.835438][ T579] device veth1_vlan left promiscuous mode
[ 82.841556][ T579] device veth0_vlan left promiscuous mode
[ 83.007744][ T579] team0 (unregistering): Port device team_slave_1 removed
[ 83.024044][ T579] team0 (unregistering): Port device team_slave_0 removed
[ 83.036683][ T579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.056099][ T579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.115565][ T579] bond0 (unregistering): Released all slaves
[ 83.928515][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.949340][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.958610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.984672][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.994286][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.007715][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/08/23 20:11:50 executed programs: 0
[ 86.194239][ T4404] chnl_net:caif_netlink_parms(): no params data found
[ 86.243072][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.250971][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.259059][ T4404] device bridge_slave_0 entered promiscuous mode
[ 86.267503][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.274762][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.282793][ T4404] device bridge_slave_1 entered promiscuous mode
[ 86.309967][ T4404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.323158][ T4404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.352843][ T4404] team0: Port device team_slave_0 added
[ 86.362638][ T4404] team0: Port device team_slave_1 added
[ 86.382163][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.389371][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.415413][ T4404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.427716][ T4404] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.434857][ T4404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.461028][ T4404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.498845][ T4404] device hsr_slave_0 entered promiscuous mode
[ 86.506057][ T4404] device hsr_slave_1 entered promiscuous mode
[ 87.031064][ T1109] cfg80211: failed to load regulatory.db
[ 87.135510][ T4404] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.149210][ T4404] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.182868][ T4404] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.196645][ T4404] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.264185][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.271360][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.288520][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.355575][ T4404] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.371315][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 87.381483][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 87.405574][ T4404] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.430933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 87.441038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 87.450021][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.457207][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.481010][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 87.492280][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 87.503068][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.510331][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.523714][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 87.532748][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 87.600120][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 87.613689][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 87.625452][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 87.636541][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 87.647610][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 87.658255][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 87.672778][ T4404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 87.687086][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 87.696973][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 87.709731][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 87.718525][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 87.945809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 87.955671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 87.972750][ T4404] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.021733][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 88.033004][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.069582][ T4384] Bluetooth: hci0: command 0x0409 tx timeout
[ 88.072816][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.096605][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.111081][ T4404] device veth0_vlan entered promiscuous mode
[ 88.119853][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.128661][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.154058][ T4404] device veth1_vlan entered promiscuous mode
[ 88.207551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 88.229593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 88.238003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 88.257689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 88.281666][ T4404] device veth0_macvtap entered promiscuous mode
[ 88.301095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 88.341527][ T4404] device veth1_macvtap entered promiscuous mode
[ 88.391628][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.419217][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 88.434175][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 88.478429][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.500165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 88.509608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 88.542902][ T4404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.558831][ T4404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.608892][ T4404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.618106][ T4404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.803979][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.824279][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.852140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 88.866587][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.890350][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.908930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 88.976543][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 89.065347][ T4505] ==================================================================
[ 89.074359][ T4505] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640
[ 89.081623][ T4505] Read of size 4 at addr ffff88801db64d38 by task syz.0.19/4505
[ 89.089390][ T4505]
[ 89.091759][ T4505] CPU: 0 PID: 4505 Comm: syz.0.19 Not tainted 5.15.189-syzkaller #0
[ 89.100053][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 89.110485][ T4505] Call Trace:
[ 89.113789][ T4505]
[ 89.116734][ T4505] dump_stack_lvl+0x168/0x230
[ 89.121442][ T4505] ? show_regs_print_info+0x20/0x20
[ 89.126661][ T4505] ? _printk+0xcc/0x110
[ 89.130838][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 89.135723][ T4505] ? load_image+0x3b0/0x3b0
[ 89.140350][ T4505] print_address_description+0x60/0x2d0
[ 89.146083][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 89.150979][ T4505] kasan_report+0xdf/0x130
[ 89.155435][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 89.160318][ T4505] ax25_fillin_cb+0x459/0x640
[ 89.165024][ T4505] ax25_setsockopt+0x8a2/0xa40
[ 89.170007][ T4505] ? ax25_shutdown+0x10/0x10
[ 89.174637][ T4505] ? aa_sock_opt_perm+0x74/0x100
[ 89.179607][ T4505] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 89.185178][ T4505] ? security_socket_setsockopt+0x7a/0xa0
[ 89.190918][ T4505] ? ax25_shutdown+0x10/0x10
[ 89.195621][ T4505] __sys_setsockopt+0x2bf/0x3d0
[ 89.200504][ T4505] __x64_sys_setsockopt+0xb1/0xc0
[ 89.205559][ T4505] do_syscall_64+0x4c/0xa0
[ 89.210014][ T4505] ? clear_bhb_loop+0x30/0x80
[ 89.214865][ T4505] ? clear_bhb_loop+0x30/0x80
[ 89.219572][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.225513][ T4505] RIP: 0033:0x7fae353efbe9
[ 89.229951][ T4505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 89.249665][ T4505] RSP: 002b:00007fffee2cfd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 89.258111][ T4505] RAX: ffffffffffffffda RBX: 00007fae35616fa0 RCX: 00007fae353efbe9
[ 89.266109][ T4505] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 89.274107][ T4505] RBP: 00007fae35472e19 R08: 0000000000000010 R09: 0000000000000000
[ 89.282102][ T4505] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 89.290183][ T4505] R13: 00007fae35616fa0 R14: 00007fae35616fa0 R15: 0000000000000005
[ 89.298200][ T4505]
[ 89.301330][ T4505]
[ 89.303671][ T4505] Allocated by task 4501:
[ 89.308157][ T4505] __kasan_kmalloc+0xb5/0xf0
[ 89.312962][ T4505] ax25_dev_device_up+0x50/0x580
[ 89.318072][ T4505] ax25_device_event+0x483/0x4f0
[ 89.323040][ T4505] raw_notifier_call_chain+0xcb/0x160
[ 89.328609][ T4505] __dev_notify_flags+0x178/0x2d0
[ 89.333671][ T4505] dev_change_flags+0xe3/0x1a0
[ 89.338558][ T4505] dev_ifsioc+0x147/0xe70
[ 89.343022][ T4505] dev_ioctl+0x55f/0xe50
[ 89.347295][ T4505] sock_do_ioctl+0x222/0x2f0
[ 89.351991][ T4505] sock_ioctl+0x4ed/0x6e0
[ 89.356369][ T4505] __se_sys_ioctl+0xfa/0x170
[ 89.360983][ T4505] do_syscall_64+0x4c/0xa0
[ 89.365450][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.371363][ T4505]
[ 89.373701][ T4505] Freed by task 4504:
[ 89.377690][ T4505] kasan_set_track+0x4b/0x70
[ 89.382352][ T4505] kasan_set_free_info+0x1f/0x40
[ 89.387668][ T4505] ____kasan_slab_free+0xd5/0x110
[ 89.392729][ T4505] slab_free_freelist_hook+0xea/0x170
[ 89.398274][ T4505] kfree+0xef/0x2a0
[ 89.402108][ T4505] ax25_release+0x661/0x870
[ 89.406673][ T4505] sock_close+0xd5/0x240
[ 89.411046][ T4505] __fput+0x234/0x930
[ 89.415048][ T4505] task_work_run+0x125/0x1a0
[ 89.419661][ T4505] exit_to_user_mode_loop+0x10f/0x130
[ 89.425491][ T4505] exit_to_user_mode_prepare+0xb1/0x140
[ 89.431330][ T4505] syscall_exit_to_user_mode+0x16/0x40
[ 89.436821][ T4505] do_syscall_64+0x58/0xa0
[ 89.441257][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.447175][ T4505]
[ 89.449517][ T4505] Last potentially related work creation:
[ 89.455271][ T4505] kasan_save_stack+0x35/0x60
[ 89.459980][ T4505] kasan_record_aux_stack+0xb8/0x100
[ 89.465286][ T4505] insert_work+0x54/0x3d0
[ 89.469637][ T4505] __queue_work+0x9c5/0xd50
[ 89.474157][ T4505] queue_work_on+0x11d/0x1d0
[ 89.478764][ T4505] netdevice_event+0x803/0x900
[ 89.483549][ T4505] raw_notifier_call_chain+0xcb/0x160
[ 89.488981][ T4505] dev_set_mac_address+0x2c4/0x3d0
[ 89.494201][ T4505] dev_set_mac_address_user+0x2d/0x50
[ 89.499727][ T4505] do_setlink+0x80d/0x3980
[ 89.504183][ T4505] rtnl_newlink+0x1419/0x17d0
[ 89.508894][ T4505] rtnetlink_rcv_msg+0x9b9/0xe60
[ 89.513918][ T4505] netlink_rcv_skb+0x1e0/0x430
[ 89.519748][ T4505] netlink_unicast+0x774/0x920
[ 89.524558][ T4505] netlink_sendmsg+0x8ab/0xbc0
[ 89.529365][ T4505] __sys_sendto+0x423/0x580
[ 89.533905][ T4505] __x64_sys_sendto+0xda/0xf0
[ 89.538622][ T4505] do_syscall_64+0x4c/0xa0
[ 89.543167][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.549103][ T4505]
[ 89.551985][ T4505] Second to last potentially related work creation:
[ 89.558592][ T4505] kasan_save_stack+0x35/0x60
[ 89.563350][ T4505] kasan_record_aux_stack+0xb8/0x100
[ 89.568674][ T4505] insert_work+0x54/0x3d0
[ 89.573038][ T4505] __queue_work+0x9c5/0xd50
[ 89.577574][ T4505] queue_work_on+0x11d/0x1d0
[ 89.582302][ T4505] call_usermodehelper_exec+0x26b/0x460
[ 89.587880][ T4505] kobject_uevent_env+0x681/0x890
[ 89.592938][ T4505] device_add+0x91c/0xfb0
[ 89.597442][ T4505] wakeup_source_sysfs_add+0x1ab/0x280
[ 89.602937][ T4505] wakeup_source_register+0x171/0x240
[ 89.608785][ T4505] device_wakeup_enable+0xfe/0x290
[ 89.613937][ T4505] acpi_button_add+0x94f/0xae0
[ 89.618711][ T4505] acpi_device_probe+0xa3/0x300
[ 89.623575][ T4505] really_probe+0x284/0xc80
[ 89.628083][ T4505] __driver_probe_device+0x18c/0x330
[ 89.633393][ T4505] driver_probe_device+0x4f/0x420
[ 89.638444][ T4505] __driver_attach+0x46b/0x670
[ 89.644242][ T4505] bus_for_each_dev+0x175/0x1e0
[ 89.649097][ T4505] bus_add_driver+0x30a/0x5a0
[ 89.654434][ T4505] driver_register+0x32d/0x430
[ 89.659328][ T4505] do_one_initcall+0x1ee/0x680
[ 89.664299][ T4505] do_initcall_level+0x137/0x1f0
[ 89.669254][ T4505] do_initcalls+0x4b/0x90
[ 89.673594][ T4505] kernel_init_freeable+0x3ce/0x560
[ 89.678833][ T4505] kernel_init+0x19/0x1b0
[ 89.683192][ T4505] ret_from_fork+0x1f/0x30
[ 89.687610][ T4505]
[ 89.690047][ T4505] The buggy address belongs to the object at ffff88801db64d00
[ 89.690047][ T4505] which belongs to the cache kmalloc-192 of size 192
[ 89.704119][ T4505] The buggy address is located 56 bytes inside of
[ 89.704119][ T4505] 192-byte region [ffff88801db64d00, ffff88801db64dc0)
[ 89.717495][ T4505] The buggy address belongs to the page:
[ 89.723136][ T4505] page:ffffea000076d900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1db64
[ 89.733292][ T4505] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 89.740849][ T4505] raw: 00fff00000000200 ffffea00006cef80 0000000b0000000b ffff888016841a00
[ 89.749584][ T4505] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 89.758463][ T4505] page dumped because: kasan: bad access detected
[ 89.765065][ T4505] page_owner tracks the page as allocated
[ 89.770864][ T4505] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8018056605, free_ts 0
[ 89.785910][ T4505] get_page_from_freelist+0x1b77/0x1c60
[ 89.791471][ T4505] __alloc_pages+0x1e1/0x470
[ 89.796068][ T4505] alloc_page_interleave+0x24/0x1e0
[ 89.801282][ T4505] new_slab+0xc0/0x4b0
[ 89.805386][ T4505] ___slab_alloc+0x81e/0xdf0
[ 89.810412][ T4505] kmem_cache_alloc_node_trace+0x1dd/0x300
[ 89.816272][ T4505] init_rescuer+0x91/0x290
[ 89.820694][ T4505] alloc_workqueue+0xe98/0x13f0
[ 89.825645][ T4505] init_cifs+0x1f9/0x560
[ 89.830015][ T4505] do_one_initcall+0x1ee/0x680
[ 89.834900][ T4505] do_initcall_level+0x137/0x1f0
[ 89.840269][ T4505] do_initcalls+0x4b/0x90
[ 89.845096][ T4505] kernel_init_freeable+0x3ce/0x560
[ 89.850613][ T4505] kernel_init+0x19/0x1b0
[ 89.855744][ T4505] ret_from_fork+0x1f/0x30
[ 89.860273][ T4505] page_owner free stack trace missing
[ 89.865649][ T4505]
[ 89.867982][ T4505] Memory state around the buggy address:
[ 89.874737][ T4505] ffff88801db64c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.883108][ T4505] ffff88801db64c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[ 89.892596][ T4505] >ffff88801db64d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.900938][ T4505] ^
[ 89.906837][ T4505] ffff88801db64d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 89.915080][ T4505] ffff88801db64e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.923246][ T4505] ==================================================================
[ 89.931403][ T4505] Disabling lock debugging due to kernel taint
[ 89.944577][ T4505] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 89.951980][ T4505] CPU: 0 PID: 4505 Comm: syz.0.19 Tainted: G B 5.15.189-syzkaller #0
[ 89.961376][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 89.971437][ T4505] Call Trace:
[ 89.974721][ T4505]
[ 89.977653][ T4505] dump_stack_lvl+0x168/0x230
[ 89.982338][ T4505] ? show_regs_print_info+0x20/0x20
[ 89.987550][ T4505] ? load_image+0x3b0/0x3b0
[ 89.992064][ T4505] panic+0x2c9/0x7f0
[ 89.995963][ T4505] ? bpf_jit_dump+0xd0/0xd0
[ 90.000501][ T4505] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 90.006423][ T4505] ? _raw_spin_unlock+0x40/0x40
[ 90.011427][ T4505] ? print_memory_metadata+0x314/0x400
[ 90.017000][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 90.021874][ T4505] check_panic_on_warn+0x80/0xa0
[ 90.026823][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 90.031675][ T4505] end_report+0x6d/0xf0
[ 90.035844][ T4505] kasan_report+0x102/0x130
[ 90.040350][ T4505] ? ax25_fillin_cb+0x459/0x640
[ 90.045316][ T4505] ax25_fillin_cb+0x459/0x640
[ 90.050102][ T4505] ax25_setsockopt+0x8a2/0xa40
[ 90.055159][ T4505] ? ax25_shutdown+0x10/0x10
[ 90.059775][ T4505] ? aa_sock_opt_perm+0x74/0x100
[ 90.064859][ T4505] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 90.070745][ T4505] ? security_socket_setsockopt+0x7a/0xa0
[ 90.077138][ T4505] ? ax25_shutdown+0x10/0x10
[ 90.082660][ T4505] __sys_setsockopt+0x2bf/0x3d0
[ 90.087762][ T4505] __x64_sys_setsockopt+0xb1/0xc0
[ 90.093066][ T4505] do_syscall_64+0x4c/0xa0
[ 90.097541][ T4505] ? clear_bhb_loop+0x30/0x80
[ 90.102463][ T4505] ? clear_bhb_loop+0x30/0x80
[ 90.107153][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 90.113055][ T4505] RIP: 0033:0x7fae353efbe9
[ 90.117476][ T4505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 90.137207][ T4505] RSP: 002b:00007fffee2cfd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 90.145664][ T4505] RAX: ffffffffffffffda RBX: 00007fae35616fa0 RCX: 00007fae353efbe9
[ 90.149005][ T4395] Bluetooth: hci0: command 0x041b tx timeout
[ 90.153651][ T4505] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007
[ 90.153665][ T4505] RBP: 00007fae35472e19 R08: 0000000000000010 R09: 0000000000000000
[ 90.153677][ T4505] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[ 90.184139][ T4505] R13: 00007fae35616fa0 R14: 00007fae35616fa0 R15: 0000000000000005
[ 90.192299][ T4505]
[ 90.195668][ T4505] Kernel Offset: disabled
[ 90.200229][ T4505] Rebooting in 86400 seconds..