Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. 1970/01/01 00:00:36 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:38 parsed 1 programs [ 41.040199][ T4301] cgroup: Unknown subsys name 'net' [ 41.310520][ T4301] cgroup: Unknown subsys name 'rlimit' [ 41.623783][ T4301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 51.858071][ T4316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.860683][ T4316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.863219][ T4316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.866397][ T4316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.868863][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.871109][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.636403][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 52.674045][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.676461][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.679117][ T4333] device bridge_slave_0 entered promiscuous mode [ 52.686704][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.688780][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.691336][ T4333] device bridge_slave_1 entered promiscuous mode [ 52.706009][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.710200][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.725569][ T4333] team0: Port device team_slave_0 added [ 52.728763][ T4333] team0: Port device team_slave_1 added [ 52.743442][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.745520][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.752768][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.757639][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.759570][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.766760][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.836493][ T4333] device hsr_slave_0 entered promiscuous mode [ 52.874822][ T4333] device hsr_slave_1 entered promiscuous mode [ 52.994278][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.057220][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.135771][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.186729][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.232964][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.235206][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.237742][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.239759][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.273962][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.283866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.290467][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.293996][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.297693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.307260][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.314888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.317617][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.319775][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.326671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.329302][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.331230][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.348313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.352981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.356200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.364010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.369586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.374382][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.482993][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.486005][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.492975][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.508107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.521097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.524131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.530092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.535426][ T4333] device veth0_vlan entered promiscuous mode [ 53.542886][ T4333] device veth1_vlan entered promiscuous mode [ 53.555858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.558458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.561210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.567651][ T4333] device veth0_macvtap entered promiscuous mode [ 53.571788][ T4333] device veth1_macvtap entered promiscuous mode [ 53.582731][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.585589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.589104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.595871][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.598538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.603406][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.606537][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.608952][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.611233][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.838916][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.499332][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.501656][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.504799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.526300][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.528947][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.532316][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:55 executed programs: 0 [ 55.875267][ T4316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.878353][ T4316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.881288][ T4316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.885736][ T4316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.888600][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.891035][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.985261][ T4397] chnl_net:caif_netlink_parms(): no params data found [ 56.017323][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.019457][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.022317][ T4397] device bridge_slave_0 entered promiscuous mode [ 56.026223][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.028194][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.030937][ T4397] device bridge_slave_1 entered promiscuous mode [ 56.045602][ T4397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.050076][ T4397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.063403][ T4397] team0: Port device team_slave_0 added [ 56.066740][ T4397] team0: Port device team_slave_1 added [ 56.081622][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.083751][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.091546][ T4397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.096376][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.098376][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.106406][ T4397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.196391][ T4397] device hsr_slave_0 entered promiscuous mode [ 56.254940][ T4397] device hsr_slave_1 entered promiscuous mode [ 56.294729][ T4397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.298420][ T4397] Cannot create hsr debugfs directory [ 56.678302][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.934848][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 58.717186][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.798225][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.818997][ T4397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.856903][ T4397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.969693][ T4397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.006367][ T4397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.015254][ T4316] Bluetooth: hci0: command 0x041b tx timeout [ 60.201072][ T4397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.207868][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.210639][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.215858][ T4397] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.220443][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.223356][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.226629][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.228602][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.231249][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.290418][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.293289][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.296100][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.298304][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.303323][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.308739][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.313751][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.319231][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.321953][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.327937][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.331225][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.409475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.412230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.415504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.418210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.422741][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.548975][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.551262][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.610244][ T4397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.620927][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.623850][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.638293][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.641035][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.643802][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.647504][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.714362][ T4397] device veth0_vlan entered promiscuous mode [ 60.721028][ T4397] device veth1_vlan entered promiscuous mode [ 60.733295][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.736189][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.738790][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.741948][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.746931][ T4397] device veth0_macvtap entered promiscuous mode [ 60.811134][ T4397] device veth1_macvtap entered promiscuous mode [ 60.820613][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.823672][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.828010][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.830375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.833080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.836567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.839303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.843974][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.847941][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.851873][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.920053][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.922950][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.928607][ T4397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.930937][ T4397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.933589][ T4397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.936095][ T4397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.969223][ T9] device hsr_slave_0 left promiscuous mode [ 61.005863][ T9] device hsr_slave_1 left promiscuous mode [ 61.084677][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.086885][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.090419][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.092685][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.096115][ T9] device bridge_slave_1 left promiscuous mode [ 61.098565][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.135915][ T9] device bridge_slave_0 left promiscuous mode [ 61.137804][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.265010][ T9] device veth1_macvtap left promiscuous mode [ 61.266945][ T9] device veth0_macvtap left promiscuous mode [ 61.269019][ T9] device veth1_vlan left promiscuous mode [ 61.270978][ T9] device veth0_vlan left promiscuous mode [ 62.094916][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 63.176939][ T9] team0 (unregistering): Port device team_slave_1 removed [ 63.335612][ T9] team0 (unregistering): Port device team_slave_0 removed [ 63.498153][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.725533][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.174957][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 64.496698][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498625][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.198424][ T9] bond0 (unregistering): Released all slaves [ 66.436657][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.438964][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.442128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.465900][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.468435][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.472226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:06 executed programs: 2 [ 66.579329][ T4454] ================================================================== [ 66.581592][ T4454] BUG: KASAN: use-after-free in __xfrm_decode_session+0x14c4/0x1b8c [ 66.583860][ T4454] Read of size 1 at addr ffff0000de62a623 by task syz.0.16/4454 [ 66.586075][ T4454] [ 66.586698][ T4454] CPU: 0 PID: 4454 Comm: syz.0.16 Not tainted 6.1.142-syzkaller #0 [ 66.588925][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.591821][ T4454] Call trace: [ 66.592738][ T4454] dump_backtrace+0x1c8/0x1f4 [ 66.594076][ T4454] show_stack+0x2c/0x3c [ 66.595252][ T4454] __dump_stack+0x30/0x40 [ 66.596485][ T4454] dump_stack_lvl+0xf8/0x160 [ 66.597784][ T4454] print_address_description+0x88/0x220 [ 66.599304][ T4454] print_report+0x50/0x68 [ 66.600585][ T4454] kasan_report+0xa8/0x100 [ 66.601849][ T4454] __asan_report_load1_noabort+0x2c/0x38 [ 66.603538][ T4454] __xfrm_decode_session+0x14c4/0x1b8c [ 66.605114][ T4454] icmpv6_route_lookup+0x310/0x470 [ 66.606554][ T4454] icmp6_send+0xb98/0x13e4 [ 66.607773][ T4454] ip6_link_failure+0x44/0x4a8 [ 66.609186][ T4454] ip6_tnl_xmit+0xed8/0x2448 [ 66.610513][ T4454] ip6_tnl_start_xmit+0xb88/0x1088 [ 66.612014][ T4454] dev_hard_start_xmit+0x244/0x8e0 [ 66.613528][ T4454] sch_direct_xmit+0x204/0x480 [ 66.614834][ T4454] __qdisc_run+0x8c0/0x1368 [ 66.616088][ T4454] __dev_queue_xmit+0xc18/0x309c [ 66.617479][ T4454] neigh_connected_output+0x358/0x3e8 [ 66.618965][ T4454] ip6_finish_output2+0xd60/0x1844 [ 66.620389][ T4454] ip6_fragment+0x1558/0x247c [ 66.621688][ T4454] ip6_finish_output+0x444/0x930 [ 66.623066][ T4454] ip6_output+0x274/0x500 [ 66.624365][ T4454] ip6_xmit+0x111c/0x19c4 [ 66.625591][ T4454] sctp_v6_xmit+0x83c/0xf70 [ 66.626854][ T4454] sctp_packet_transmit+0x1df4/0x22e4 [ 66.628395][ T4454] sctp_packet_singleton+0x1d0/0x2bc [ 66.629854][ T4454] sctp_outq_flush+0x404/0x27bc [ 66.631170][ T4454] sctp_outq_uncork+0x84/0xc0 [ 66.632481][ T4454] sctp_do_sm+0x427c/0x4894 [ 66.633798][ T4454] sctp_primitive_ASSOCIATE+0x98/0xc8 [ 66.635288][ T4454] sctp_sendmsg_to_asoc+0xfc8/0x1344 [ 66.636786][ T4454] sctp_sendmsg+0x14dc/0x20cc [ 66.638117][ T4454] inet_sendmsg+0x154/0x284 [ 66.639336][ T4454] __sys_sendto+0x304/0x3fc [ 66.640592][ T4454] __arm64_sys_sendto+0xd8/0xf8 [ 66.641991][ T4454] invoke_syscall+0x98/0x2bc [ 66.643339][ T4454] el0_svc_common+0x138/0x258 [ 66.644655][ T4454] do_el0_svc+0x58/0x13c [ 66.645882][ T4454] el0_svc+0x58/0x138 [ 66.646955][ T4454] el0t_64_sync_handler+0x84/0xf0 [ 66.648390][ T4454] el0t_64_sync+0x18c/0x190 [ 66.649654][ T4454] [ 66.650296][ T4454] Allocated by task 4298: [ 66.651512][ T4454] kasan_set_track+0x4c/0x80 [ 66.652832][ T4454] kasan_save_alloc_info+0x28/0x34 [ 66.654245][ T4454] __kasan_slab_alloc+0x70/0x88 [ 66.655620][ T4454] slab_post_alloc_hook+0x74/0x43c [ 66.657085][ T4454] kmem_cache_alloc+0x234/0x318 [ 66.658428][ T4454] __sigqueue_alloc+0x3e0/0x4e0 [ 66.659748][ T4454] __send_signal_locked+0x1d8/0xc78 [ 66.661209][ T4454] send_signal_locked+0xac/0x854 [ 66.662553][ T4454] do_send_specific+0x19c/0x2cc [ 66.663986][ T4454] __arm64_sys_tgkill+0x1c4/0x244 [ 66.665372][ T4454] invoke_syscall+0x98/0x2bc [ 66.666685][ T4454] el0_svc_common+0x138/0x258 [ 66.668001][ T4454] do_el0_svc+0x58/0x13c [ 66.669191][ T4454] el0_svc+0x58/0x138 [ 66.670279][ T4454] el0t_64_sync_handler+0x84/0xf0 [ 66.671647][ T4454] el0t_64_sync+0x18c/0x190 [ 66.672886][ T4454] [ 66.673531][ T4454] Freed by task 4297: [ 66.674602][ T4454] kasan_set_track+0x4c/0x80 [ 66.675935][ T4454] kasan_save_free_info+0x3c/0x60 [ 66.677275][ T4454] ____kasan_slab_free+0x148/0x1b0 [ 66.678737][ T4454] __kasan_slab_free+0x18/0x28 [ 66.680053][ T4454] slab_free_freelist_hook+0x16c/0x1ec [ 66.681628][ T4454] kmem_cache_free+0x11c/0x324 [ 66.682991][ T4454] __dequeue_signal+0x3fc/0x4fc [ 66.684409][ T4454] dequeue_signal+0x70/0x3cc [ 66.685632][ T4454] get_signal+0x41c/0x1310 [ 66.686848][ T4454] do_notify_resume+0x290/0x2b0c [ 66.688229][ T4454] el0_svc+0x98/0x138 [ 66.689318][ T4454] el0t_64_sync_handler+0x84/0xf0 [ 66.690700][ T4454] el0t_64_sync+0x18c/0x190 [ 66.691934][ T4454] [ 66.692605][ T4454] The buggy address belongs to the object at ffff0000de62a620 [ 66.692605][ T4454] which belongs to the cache sigqueue of size 80 [ 66.696417][ T4454] The buggy address is located 3 bytes inside of [ 66.696417][ T4454] 80-byte region [ffff0000de62a620, ffff0000de62a670) [ 66.700171][ T4454] [ 66.700804][ T4454] The buggy address belongs to the physical page: [ 66.702634][ T4454] page:0000000030afacf5 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e62a [ 66.705482][ T4454] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 66.707697][ T4454] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c03dd080 [ 66.710031][ T4454] raw: 0000000000000000 0000000000240024 00000001ffffffff 0000000000000000 [ 66.712385][ T4454] page dumped because: kasan: bad access detected [ 66.714216][ T4454] [ 66.714835][ T4454] Memory state around the buggy address: [ 66.716462][ T4454] ffff0000de62a500: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 66.718678][ T4454] ffff0000de62a580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 66.720951][ T4454] >ffff0000de62a600: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fc fc [ 66.723126][ T4454] ^ [ 66.724549][ T4454] ffff0000de62a680: fc fc fa fb fb fb fb fb fb fb fb fb fc fc fc fc [ 66.726764][ T4454] ffff0000de62a700: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 66.728949][ T4454] ================================================================== [ 66.731327][ T4454] Disabling lock debugging due to kernel taint [ 69.614911][ T14] cfg80211: failed to load regulatory.db 1970/01/01 00:01:11 executed programs: 48