Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts.
2025/11/02 23:43:52 parsed 1 programs
[ 93.043031][ T5829] cgroup: Unknown subsys name 'net'
[ 93.167639][ T5829] cgroup: Unknown subsys name 'cpuset'
[ 93.177192][ T5829] cgroup: Unknown subsys name 'rlimit'
[ 94.918841][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.280563][ T10] cfg80211: failed to load regulatory.db
[ 98.222145][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 99.838214][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.846391][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.854618][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.864447][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.872300][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.620214][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.629627][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.689488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.699877][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.986129][ T5912] chnl_net:caif_netlink_parms(): no params data found
[ 102.109778][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.117634][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.125276][ T5912] bridge_slave_0: entered allmulticast mode
[ 102.132843][ T5912] bridge_slave_0: entered promiscuous mode
[ 102.143178][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.150415][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.158207][ T5912] bridge_slave_1: entered allmulticast mode
[ 102.166120][ T5912] bridge_slave_1: entered promiscuous mode
[ 102.211571][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.224228][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.263604][ T5912] team0: Port device team_slave_0 added
[ 102.272716][ T5912] team0: Port device team_slave_1 added
[ 102.310707][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.318022][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.345431][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.358430][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.365432][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.391787][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.440339][ T5912] hsr_slave_0: entered promiscuous mode
[ 102.447085][ T5912] hsr_slave_1: entered promiscuous mode
[ 102.622551][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.635916][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.646723][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.657196][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.748766][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.772858][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.787547][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.795041][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.811383][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.818609][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.017998][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.068424][ T5912] veth0_vlan: entered promiscuous mode
[ 103.082545][ T5912] veth1_vlan: entered promiscuous mode
[ 103.121122][ T5912] veth0_macvtap: entered promiscuous mode
[ 103.131658][ T5912] veth1_macvtap: entered promiscuous mode
[ 103.152123][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.168157][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.184735][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.196614][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.211347][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.220910][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.365052][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.438221][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.510264][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.601316][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/02 23:44:07 executed programs: 0
[ 103.795069][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.802921][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.811753][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.821052][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.829597][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.016230][ T5937] chnl_net:caif_netlink_parms(): no params data found
[ 104.106250][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.113713][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.120909][ T5937] bridge_slave_0: entered allmulticast mode
[ 104.129059][ T5937] bridge_slave_0: entered promiscuous mode
[ 104.137949][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.145326][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.152687][ T5937] bridge_slave_1: entered allmulticast mode
[ 104.164316][ T5937] bridge_slave_1: entered promiscuous mode
[ 104.202724][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.215303][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.255368][ T5937] team0: Port device team_slave_0 added
[ 104.264399][ T5937] team0: Port device team_slave_1 added
[ 104.303578][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.310589][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.337649][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.350796][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.357949][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.383954][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.450966][ T5937] hsr_slave_0: entered promiscuous mode
[ 104.458138][ T5937] hsr_slave_1: entered promiscuous mode
[ 104.465207][ T5937] debugfs: 'hsr0' already exists in 'hsr'
[ 104.471064][ T5937] Cannot create hsr debugfs directory
[ 105.915074][ T5145] Bluetooth: hci0: command tx timeout
[ 106.442635][ T12] bridge_slave_1: left allmulticast mode
[ 106.450660][ T12] bridge_slave_1: left promiscuous mode
[ 106.458164][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.472376][ T12] bridge_slave_0: left allmulticast mode
[ 106.480294][ T12] bridge_slave_0: left promiscuous mode
[ 106.486746][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.732822][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 106.744522][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 106.754986][ T12] bond0 (unregistering): Released all slaves
[ 106.921244][ T12] hsr_slave_0: left promiscuous mode
[ 106.931454][ T12] hsr_slave_1: left promiscuous mode
[ 106.943965][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 106.951459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 106.960724][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 106.968595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 106.992661][ T12] veth1_macvtap: left promiscuous mode
[ 106.998622][ T12] veth0_macvtap: left promiscuous mode
[ 107.004926][ T12] veth1_vlan: left promiscuous mode
[ 107.010487][ T12] veth0_vlan: left promiscuous mode
[ 107.436700][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 107.466157][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 107.994318][ T5145] Bluetooth: hci0: command tx timeout
[ 108.001922][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 108.026097][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 108.044080][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.075563][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.267541][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.302408][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.322486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.329716][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.364856][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.372090][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.660247][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.739060][ T5937] veth0_vlan: entered promiscuous mode
[ 108.755861][ T5937] veth1_vlan: entered promiscuous mode
[ 108.806113][ T5937] veth0_macvtap: entered promiscuous mode
[ 108.817965][ T5937] veth1_macvtap: entered promiscuous mode
[ 108.851218][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.868988][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.892328][ T1143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.920363][ T1143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.942866][ T1143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.953295][ T1143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.001126][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.009903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.036550][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.045900][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.185999][ T5998] block nbd0: shutting down sockets
[ 109.197396][ T5998] block nbd0: reconnected socket
[ 109.197493][ T5145] block nbd0: Receive control failed (result -32)
[ 109.219188][ T5145] block nbd0: shutting down sockets
[ 109.244527][ T5145] ==================================================================
[ 109.252767][ T5145] BUG: KASAN: slab-use-after-free in recv_work+0x1b78/0x1c60
[ 109.260200][ T5145] Write of size 4 at addr ffff88802f2bee78 by task kworker/u9:1/5145
[ 109.268415][ T5145]
[ 109.270778][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 109.270801][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 109.270815][ T5145] Workqueue: nbd0-recv recv_work
[ 109.270856][ T5145] Call Trace:
[ 109.270865][ T5145]
[ 109.270873][ T5145] dump_stack_lvl+0x189/0x250
[ 109.270897][ T5145] ? rcu_is_watching+0x15/0xb0
[ 109.270916][ T5145] ? __kasan_check_byte+0x12/0x40
[ 109.270935][ T5145] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.270956][ T5145] ? rcu_is_watching+0x15/0xb0
[ 109.270976][ T5145] ? lock_release+0x4b/0x3e0
[ 109.271007][ T5145] ? __virt_addr_valid+0x1c8/0x5c0
[ 109.271032][ T5145] ? __virt_addr_valid+0x4a5/0x5c0
[ 109.271057][ T5145] print_report+0xca/0x240
[ 109.271081][ T5145] ? recv_work+0x1b78/0x1c60
[ 109.271107][ T5145] kasan_report+0x118/0x150
[ 109.271127][ T5145] ? recv_work+0x1b78/0x1c60
[ 109.271157][ T5145] kasan_check_range+0x2b0/0x2c0
[ 109.271178][ T5145] recv_work+0x1b78/0x1c60
[ 109.271214][ T5145] ? lockdep_unlock+0x89/0x120
[ 109.271250][ T5145] ? __pfx_recv_work+0x10/0x10
[ 109.271278][ T5145] ? __lock_acquire+0xab9/0xd20
[ 109.271315][ T5145] ? _raw_spin_unlock_irq+0x23/0x50
[ 109.271341][ T5145] ? process_one_work+0x868/0x15d0
[ 109.271358][ T5145] process_one_work+0x94a/0x15d0
[ 109.271374][ T5145] ? __lock_acquire+0xab9/0xd20
[ 109.271412][ T5145] ? __pfx_process_one_work+0x10/0x10
[ 109.271433][ T5145] ? assign_work+0x3a1/0x410
[ 109.271452][ T5145] worker_thread+0x9b0/0xee0
[ 109.271483][ T5145] kthread+0x711/0x8a0
[ 109.271508][ T5145] ? __pfx_worker_thread+0x10/0x10
[ 109.271526][ T5145] ? __pfx_kthread+0x10/0x10
[ 109.271550][ T5145] ? _raw_spin_unlock_irq+0x23/0x50
[ 109.271573][ T5145] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.271596][ T5145] ? __pfx_kthread+0x10/0x10
[ 109.271620][ T5145] ret_from_fork+0x4bc/0x870
[ 109.271650][ T5145] ? __pfx_ret_from_fork+0x10/0x10
[ 109.271682][ T5145] ? __switch_to_asm+0x39/0x70
[ 109.271707][ T5145] ? __switch_to_asm+0x33/0x70
[ 109.271731][ T5145] ? __pfx_kthread+0x10/0x10
[ 109.271754][ T5145] ret_from_fork_asm+0x1a/0x30
[ 109.271787][ T5145]
[ 109.271794][ T5145]
[ 109.481180][ T5145] Allocated by task 5998:
[ 109.485535][ T5145] kasan_save_track+0x3e/0x80
[ 109.490246][ T5145] __kasan_kmalloc+0x93/0xb0
[ 109.494859][ T5145] __kmalloc_cache_noprof+0x3e2/0x700
[ 109.500339][ T5145] nbd_alloc_and_init_config+0x88/0x260
[ 109.505921][ T5145] nbd_genl_connect+0x9d7/0x18f0
[ 109.510884][ T5145] genl_family_rcv_msg_doit+0x215/0x300
[ 109.516647][ T5145] genl_rcv_msg+0x60e/0x790
[ 109.521165][ T5145] netlink_rcv_skb+0x208/0x470
[ 109.525952][ T5145] genl_rcv+0x28/0x40
[ 109.529952][ T5145] netlink_unicast+0x82f/0x9e0
[ 109.534731][ T5145] netlink_sendmsg+0x805/0xb30
[ 109.539518][ T5145] __sock_sendmsg+0x21c/0x270
[ 109.544217][ T5145] ____sys_sendmsg+0x505/0x830
[ 109.548999][ T5145] ___sys_sendmsg+0x21f/0x2a0
[ 109.553716][ T5145] __x64_sys_sendmsg+0x19b/0x260
[ 109.558679][ T5145] do_syscall_64+0xfa/0xfa0
[ 109.563204][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.569110][ T5145]
[ 109.571444][ T5145] Freed by task 5145:
[ 109.575436][ T5145] kasan_save_track+0x3e/0x80
[ 109.580139][ T5145] kasan_save_free_info+0x46/0x50
[ 109.585265][ T5145] __kasan_slab_free+0x5c/0x80
[ 109.590249][ T5145] kfree+0x19a/0x6d0
[ 109.594214][ T5145] nbd_config_put+0x4a1/0x580
[ 109.598943][ T5145] recv_work+0x1b62/0x1c60
[ 109.603484][ T5145] process_one_work+0x94a/0x15d0
[ 109.608441][ T5145] worker_thread+0x9b0/0xee0
[ 109.613060][ T5145] kthread+0x711/0x8a0
[ 109.617145][ T5145] ret_from_fork+0x4bc/0x870
[ 109.621839][ T5145] ret_from_fork_asm+0x1a/0x30
[ 109.626717][ T5145]
[ 109.629062][ T5145] The buggy address belongs to the object at ffff88802f2bee00
[ 109.629062][ T5145] which belongs to the cache kmalloc-256 of size 256
[ 109.643165][ T5145] The buggy address is located 120 bytes inside of
[ 109.643165][ T5145] freed 256-byte region [ffff88802f2bee00, ffff88802f2bef00)
[ 109.657239][ T5145]
[ 109.659578][ T5145] The buggy address belongs to the physical page:
[ 109.666007][ T5145] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f2be
[ 109.674869][ T5145] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 109.683375][ T5145] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 109.691063][ T5145] page_type: f5(slab)
[ 109.695056][ T5145] raw: 00fff00000000040 ffff88801b026b40 dead000000000122 0000000000000000
[ 109.703675][ T5145] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 109.712356][ T5145] head: 00fff00000000040 ffff88801b026b40 dead000000000122 0000000000000000
[ 109.721126][ T5145] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 109.729825][ T5145] head: 00fff00000000001 ffffea0000bcaf81 00000000ffffffff 00000000ffffffff
[ 109.738529][ T5145] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 109.747288][ T5145] page dumped because: kasan: bad access detected
[ 109.753716][ T5145] page_owner tracks the page as allocated
[ 109.759433][ T5145] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5937, tgid 5937 (syz-executor), ts 108999640718, free_ts 108976063617
[ 109.781009][ T5145] post_alloc_hook+0x240/0x2a0
[ 109.785795][ T5145] get_page_from_freelist+0x2365/0x2440
[ 109.791352][ T5145] __alloc_frozen_pages_noprof+0x181/0x370
[ 109.797229][ T5145] alloc_pages_mpol+0x232/0x4a0
[ 109.802086][ T5145] allocate_slab+0x96/0x350
[ 109.806601][ T5145] ___slab_alloc+0xe94/0x18a0
[ 109.811370][ T5145] __slab_alloc+0x65/0x100
[ 109.815796][ T5145] __kmalloc_noprof+0x47d/0x800
[ 109.820660][ T5145] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 109.826753][ T5145] genl_family_rcv_msg_doit+0xb8/0x300
[ 109.832247][ T5145] genl_rcv_msg+0x60e/0x790
[ 109.836753][ T5145] netlink_rcv_skb+0x208/0x470
[ 109.841530][ T5145] genl_rcv+0x28/0x40
[ 109.845515][ T5145] netlink_unicast+0x82f/0x9e0
[ 109.850288][ T5145] netlink_sendmsg+0x805/0xb30
[ 109.855067][ T5145] __sock_sendmsg+0x21c/0x270
[ 109.859752][ T5145] page last free pid 5937 tgid 5937 stack trace:
[ 109.866076][ T5145] __free_frozen_pages+0xbc8/0xd30
[ 109.871237][ T5145] __slab_free+0x2e7/0x390
[ 109.875659][ T5145] qlist_free_all+0x97/0x140
[ 109.880261][ T5145] kasan_quarantine_reduce+0x148/0x160
[ 109.885736][ T5145] __kasan_slab_alloc+0x22/0x80
[ 109.890675][ T5145] kmem_cache_alloc_noprof+0x37d/0x700
[ 109.896147][ T5145] __kernfs_new_node+0xd7/0x7e0
[ 109.901008][ T5145] kernfs_new_node+0x102/0x210
[ 109.905774][ T5145] __kernfs_create_file+0x4b/0x2e0
[ 109.910901][ T5145] sysfs_add_file_mode_ns+0x238/0x300
[ 109.916288][ T5145] sysfs_merge_group+0x177/0x310
[ 109.921249][ T5145] dpm_sysfs_add+0xd2/0x270
[ 109.925755][ T5145] device_add+0x4d8/0xb80
[ 109.930126][ T5145] wiphy_register+0x1d2e/0x2d20
[ 109.934994][ T5145] ieee80211_register_hw+0x34a7/0x4110
[ 109.940463][ T5145] mac80211_hwsim_new_radio+0x2f85/0x5340
[ 109.946201][ T5145]
[ 109.948532][ T5145] Memory state around the buggy address:
[ 109.954170][ T5145] ffff88802f2bed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 109.962255][ T5145] ffff88802f2bed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 109.970325][ T5145] >ffff88802f2bee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.978398][ T5145] ^
[ 109.986424][ T5145] ffff88802f2bee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.994693][ T5145] ffff88802f2bef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.002854][ T5145] ==================================================================
[ 110.024047][ T5145] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.031357][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 110.040856][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 110.050943][ T5145] Workqueue: nbd0-recv recv_work
[ 110.055924][ T5145] Call Trace:
[ 110.059222][ T5145]
[ 110.062165][ T5145] dump_stack_lvl+0x99/0x250
[ 110.066779][ T5145] ? __asan_memcpy+0x40/0x70
[ 110.071389][ T5145] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.076696][ T5145] ? __pfx__printk+0x10/0x10
[ 110.081317][ T5145] vpanic+0x237/0x6d0
[ 110.085311][ T5145] ? __pfx_vpanic+0x10/0x10
[ 110.089818][ T5145] ? preempt_schedule+0xae/0xc0
[ 110.094713][ T5145] ? __pfx_preempt_schedule+0x10/0x10
[ 110.100108][ T5145] panic+0xb9/0xc0
[ 110.103833][ T5145] ? __pfx_panic+0x10/0x10
[ 110.108264][ T5145] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 110.114206][ T5145] ? recv_work+0x1b78/0x1c60
[ 110.118919][ T5145] check_panic_on_warn+0x89/0xb0
[ 110.123918][ T5145] ? recv_work+0x1b78/0x1c60
[ 110.128543][ T5145] end_report+0x78/0x160
[ 110.132804][ T5145] kasan_report+0x129/0x150
[ 110.137320][ T5145] ? recv_work+0x1b78/0x1c60
[ 110.141929][ T5145] kasan_check_range+0x2b0/0x2c0
[ 110.146875][ T5145] recv_work+0x1b78/0x1c60
[ 110.151309][ T5145] ? lockdep_unlock+0x89/0x120
[ 110.156743][ T5145] ? __pfx_recv_work+0x10/0x10
[ 110.161632][ T5145] ? __lock_acquire+0xab9/0xd20
[ 110.166542][ T5145] ? _raw_spin_unlock_irq+0x23/0x50
[ 110.171775][ T5145] ? process_one_work+0x868/0x15d0
[ 110.176993][ T5145] process_one_work+0x94a/0x15d0
[ 110.181963][ T5145] ? __lock_acquire+0xab9/0xd20
[ 110.186946][ T5145] ? __pfx_process_one_work+0x10/0x10
[ 110.192373][ T5145] ? assign_work+0x3a1/0x410
[ 110.197086][ T5145] worker_thread+0x9b0/0xee0
[ 110.201722][ T5145] kthread+0x711/0x8a0
[ 110.205813][ T5145] ? __pfx_worker_thread+0x10/0x10
[ 110.211022][ T5145] ? __pfx_kthread+0x10/0x10
[ 110.215721][ T5145] ? _raw_spin_unlock_irq+0x23/0x50
[ 110.220954][ T5145] ? lockdep_hardirqs_on+0x9c/0x150
[ 110.226162][ T5145] ? __pfx_kthread+0x10/0x10
[ 110.230769][ T5145] ret_from_fork+0x4bc/0x870
[ 110.235374][ T5145] ? __pfx_ret_from_fork+0x10/0x10
[ 110.240506][ T5145] ? __switch_to_asm+0x39/0x70
[ 110.245292][ T5145] ? __switch_to_asm+0x33/0x70
[ 110.250087][ T5145] ? __pfx_kthread+0x10/0x10
[ 110.254698][ T5145] ret_from_fork_asm+0x1a/0x30
[ 110.259514][ T5145]
[ 110.262825][ T5145] Kernel Offset: disabled
[ 110.267186][ T5145] Rebooting in 86400 seconds..