Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. 1970/01/01 00:00:42 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:43 parsed 1 programs [ 46.462919][ T4040] cgroup: Unknown subsys name 'net' [ 46.741844][ T4040] cgroup: Unknown subsys name 'rlimit' [ 47.130880][ T4040] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 56.620635][ T4096] chnl_net:caif_netlink_parms(): no params data found [ 56.662225][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.664304][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.668862][ T4096] device bridge_slave_0 entered promiscuous mode [ 56.673122][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.675089][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.678325][ T4096] device bridge_slave_1 entered promiscuous mode [ 56.696934][ T4096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.701534][ T4096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.720818][ T4096] team0: Port device team_slave_0 added [ 56.724613][ T4096] team0: Port device team_slave_1 added [ 56.740402][ T4096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.742249][ T4096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.750954][ T4096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.758108][ T4096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.759956][ T4096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.768656][ T4096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.837901][ T4096] device hsr_slave_0 entered promiscuous mode [ 56.875972][ T4096] device hsr_slave_1 entered promiscuous mode [ 57.002978][ T4096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.049830][ T4096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.088471][ T4096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.127852][ T4096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.237458][ T4096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.248429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.251936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.258892][ T4096] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.263559][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.266702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.269658][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.271804][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.275120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.280796][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.283696][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.287544][ T1372] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.289565][ T1372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.294314][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.302160][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.307528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.310737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.313634][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.332727][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.336122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.338888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.341674][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.345270][ T4096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.436630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.438925][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.444030][ T4096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.470397][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.484877][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.488224][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.490917][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.498299][ T4096] device veth0_vlan entered promiscuous mode [ 57.504615][ T4096] device veth1_vlan entered promiscuous mode [ 57.523754][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.528093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.531254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.536274][ T4096] device veth0_macvtap entered promiscuous mode [ 57.540914][ T4096] device veth1_macvtap entered promiscuous mode [ 57.552449][ T4096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.554736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.558930][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.561796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.567273][ T4096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.571023][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.574074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.580096][ T4096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.582588][ T4096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.585057][ T4096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.588513][ T4096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843278][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.852304][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.859189][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.862561][ T1372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.864818][ T1372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.868724][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:58 executed programs: 0 [ 58.299454][ T4143] chnl_net:caif_netlink_parms(): no params data found [ 58.340041][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.342218][ T4143] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.344825][ T4143] device bridge_slave_0 entered promiscuous mode [ 58.349209][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.351288][ T4143] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.353801][ T4143] device bridge_slave_1 entered promiscuous mode [ 58.370888][ T4143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.375394][ T4143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.424057][ T4143] team0: Port device team_slave_0 added [ 58.429076][ T4143] team0: Port device team_slave_1 added [ 58.443690][ T4143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.447428][ T4143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.454468][ T4143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.459223][ T4143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.461144][ T4143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.468882][ T4143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.548026][ T4143] device hsr_slave_0 entered promiscuous mode [ 58.595933][ T4143] device hsr_slave_1 entered promiscuous mode [ 58.635613][ T4143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.637833][ T4143] Cannot create hsr debugfs directory [ 58.698183][ T4143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.226273][ T4057] Bluetooth: hci0: command 0x0409 tx timeout [ 60.822916][ T4143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.306106][ T4150] Bluetooth: hci0: command 0x041b tx timeout [ 62.902285][ T4143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.999007][ T4143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.176800][ T4143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.207631][ T4143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.250048][ T4143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.297929][ T4143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.403752][ T4143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.414156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.418048][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.423672][ T4143] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.429611][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.432451][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.435001][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.437007][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.448395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.451848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.459449][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.462160][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.464202][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.473179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.477032][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.491389][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.495095][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.498431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.502380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.505076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.510834][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.513608][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.520994][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.523665][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.530588][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.813554][ T4143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.816787][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.818946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.832836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.835676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.848083][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.850848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.854018][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.857029][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.862470][ T4143] device veth0_vlan entered promiscuous mode [ 63.871003][ T4143] device veth1_vlan entered promiscuous mode [ 63.886960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.889903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.892559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.896897][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.901643][ T4143] device veth0_macvtap entered promiscuous mode [ 63.907304][ T4143] device veth1_macvtap entered promiscuous mode [ 63.919778][ T4143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.922783][ T4143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.928374][ T4143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.930744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.933534][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.939904][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.942663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.947977][ T4143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.950869][ T4143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.954384][ T4143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.957121][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.960048][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.965408][ T4143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.968113][ T4143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.970525][ T4143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.972983][ T4143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.014646][ T1663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.017880][ T1663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.027724][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.031347][ T1663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.033538][ T1663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.038077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:03 executed programs: 2 [ 64.099928][ T4162] ================================================================== [ 64.102182][ T4162] BUG: KASAN: use-after-free in __lock_acquire+0xf0/0x651c [ 64.104254][ T4162] Read of size 8 at addr ffff0000c8cb02b8 by task syz.0.16/4162 [ 64.106331][ T4162] [ 64.107006][ T4162] CPU: 0 PID: 4162 Comm: syz.0.16 Not tainted 5.15.189-syzkaller #0 [ 64.109204][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.112021][ T4162] Call trace: [ 64.112919][ T4162] dump_backtrace+0x0/0x43c [ 64.114203][ T4162] show_stack+0x2c/0x3c [ 64.115330][ T4162] __dump_stack+0x30/0x40 [ 64.116518][ T4162] dump_stack_lvl+0xf8/0x160 [ 64.117868][ T4162] print_address_description+0x78/0x30c [ 64.119405][ T4162] kasan_report+0xec/0x15c [ 64.120627][ T4162] __asan_report_load8_noabort+0x44/0x50 [ 64.122216][ T4162] __lock_acquire+0xf0/0x651c [ 64.123507][ T4162] lock_acquire+0x1f4/0x620 [ 64.124802][ T4162] _raw_spin_lock_irq+0xcc/0x13c [ 64.126120][ T4162] io_poll_remove_entries+0x168/0x430 [ 64.127564][ T4162] io_poll_task_func+0xe8/0x250 [ 64.128932][ T4162] tctx_task_work+0x284/0x514 [ 64.130193][ T4162] task_work_run+0x12c/0x1e0 [ 64.131514][ T4162] do_exit+0x684/0x1f58 [ 64.132635][ T4162] do_group_exit+0x100/0x268 [ 64.133879][ T4162] __wake_up_parent+0x0/0x60 [ 64.135142][ T4162] invoke_syscall+0x98/0x2b8 [ 64.136428][ T4162] el0_svc_common+0x138/0x258 [ 64.137741][ T4162] do_el0_svc+0x58/0x14c [ 64.138890][ T4162] el0_svc+0x78/0x1e0 [ 64.139962][ T4162] el0t_64_sync_handler+0xcc/0xe4 [ 64.141349][ T4162] el0t_64_sync+0x1a0/0x1a4 [ 64.142644][ T4162] [ 64.143329][ T4162] Allocated by task 1: [ 64.144456][ T4162] __kasan_kmalloc+0xb0/0xf0 [ 64.145696][ T4162] kmem_cache_alloc_trace+0x274/0x3fc [ 64.147215][ T4162] comedi_device_postconfig+0x428/0xb48 [ 64.148696][ T4162] comedi_auto_config+0x228/0x328 [ 64.150124][ T4162] comedi_test_init+0xb0/0x14c [ 64.151441][ T4162] do_one_initcall+0x228/0x8b0 [ 64.152768][ T4162] do_initcall_level+0x154/0x214 [ 64.154157][ T4162] do_initcalls+0x58/0xac [ 64.155322][ T4162] do_basic_setup+0x8c/0xa0 [ 64.156503][ T4162] kernel_init_freeable+0x404/0x5fc [ 64.157956][ T4162] kernel_init+0x24/0x1d0 [ 64.159133][ T4162] ret_from_fork+0x10/0x20 [ 64.160274][ T4162] [ 64.160879][ T4162] Freed by task 4162: [ 64.161910][ T4162] kasan_set_track+0x4c/0x84 [ 64.163181][ T4162] kasan_set_free_info+0x28/0x4c [ 64.164539][ T4162] ____kasan_slab_free+0x118/0x164 [ 64.165980][ T4162] __kasan_slab_free+0x18/0x28 [ 64.167285][ T4162] slab_free_freelist_hook+0x128/0x1e8 [ 64.168693][ T4162] kfree+0x170/0x40c [ 64.169703][ T4162] comedi_device_detach+0x2c4/0x5d8 [ 64.171232][ T4162] comedi_unlocked_ioctl+0xb28/0xdcc [ 64.172642][ T4162] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.173981][ T4162] invoke_syscall+0x98/0x2b8 [ 64.175221][ T4162] el0_svc_common+0x138/0x258 [ 64.176486][ T4162] do_el0_svc+0x58/0x14c [ 64.177644][ T4162] el0_svc+0x78/0x1e0 [ 64.178670][ T4162] el0t_64_sync_handler+0xcc/0xe4 [ 64.179886][ T4162] el0t_64_sync+0x1a0/0x1a4 [ 64.181098][ T4162] [ 64.181672][ T4162] The buggy address belongs to the object at ffff0000c8cb0200 [ 64.181672][ T4162] which belongs to the cache kmalloc-256 of size 256 [ 64.185489][ T4162] The buggy address is located 184 bytes inside of [ 64.185489][ T4162] 256-byte region [ffff0000c8cb0200, ffff0000c8cb0300) [ 64.189115][ T4162] The buggy address belongs to the page: [ 64.190619][ T4162] page:0000000027fc25b4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108cb0 [ 64.193439][ T4162] head:0000000027fc25b4 order:1 compound_mapcount:0 [ 64.195219][ T4162] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 64.197429][ T4162] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002480 [ 64.199778][ T4162] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 64.202159][ T4162] page dumped because: kasan: bad access detected [ 64.204026][ T4162] [ 64.204673][ T4162] Memory state around the buggy address: [ 64.206236][ T4162] ffff0000c8cb0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.208512][ T4162] ffff0000c8cb0200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.210813][ T4162] >ffff0000c8cb0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.213006][ T4162] ^ [ 64.214683][ T4162] ffff0000c8cb0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.216868][ T4162] ffff0000c8cb0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.219032][ T4162] ================================================================== [ 64.221217][ T4162] Disabling lock debugging due to kernel taint [ 64.389394][ T4119] Bluetooth: hci0: command 0x040f tx timeout [ 66.343571][ T153] device hsr_slave_0 left promiscuous mode [ 66.386921][ T153] device hsr_slave_1 left promiscuous mode [ 66.446220][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.448265][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.450686][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.452677][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.455131][ T153] device bridge_slave_1 left promiscuous mode [ 66.460284][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.475651][ T4083] Bluetooth: hci0: command 0x0419 tx timeout [ 66.496572][ T153] device bridge_slave_0 left promiscuous mode [ 66.498455][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.616037][ T153] device veth1_macvtap left promiscuous mode [ 66.617688][ T153] device veth0_macvtap left promiscuous mode [ 66.619287][ T153] device veth1_vlan left promiscuous mode [ 66.620805][ T153] device veth0_vlan left promiscuous mode [ 66.799738][ T153] team0 (unregistering): Port device team_slave_1 removed [ 66.810794][ T153] team0 (unregistering): Port device team_slave_0 removed [ 66.819810][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.851059][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.952771][ T153] bond0 (unregistering): Released all slaves 1970/01/01 00:01:09 executed programs: 261 [ 69.666719][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.668648][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:14 executed programs: 543