Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts.
2025/11/29 12:54:36 parsed 1 programs
[ 89.913923][ T5829] cgroup: Unknown subsys name 'net'
[ 90.062616][ T5829] cgroup: Unknown subsys name 'cpuset'
[ 90.072296][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 91.830260][ T128] cfg80211: failed to load regulatory.db
[ 91.842692][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 94.743137][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.998138][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.008829][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.056531][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.065608][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.473327][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.481491][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.489192][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.497111][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.505378][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.127233][ T5908] chnl_net:caif_netlink_parms(): no params data found
[ 98.246447][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.254431][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.261777][ T5908] bridge_slave_0: entered allmulticast mode
[ 98.269737][ T5908] bridge_slave_0: entered promiscuous mode
[ 98.278846][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.285998][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.293834][ T5908] bridge_slave_1: entered allmulticast mode
[ 98.301714][ T5908] bridge_slave_1: entered promiscuous mode
[ 98.335703][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.348846][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.387976][ T5908] team0: Port device team_slave_0 added
[ 98.396142][ T5908] team0: Port device team_slave_1 added
[ 98.425420][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.433018][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.459070][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.472013][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.479485][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.505866][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.553188][ T5908] hsr_slave_0: entered promiscuous mode
[ 98.559786][ T5908] hsr_slave_1: entered promiscuous mode
[ 98.728658][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.740934][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.751623][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.762160][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.794111][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.801388][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.809287][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.816428][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.880829][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.902027][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.910466][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.926866][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.943229][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.950453][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.965417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.972613][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.155219][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.200386][ T5908] veth0_vlan: entered promiscuous mode
[ 99.215830][ T5908] veth1_vlan: entered promiscuous mode
[ 99.246629][ T5908] veth0_macvtap: entered promiscuous mode
[ 99.257840][ T5908] veth1_macvtap: entered promiscuous mode
[ 99.280040][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.295811][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.310860][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.321828][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.332584][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.341632][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.504602][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.580715][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.662976][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.753501][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/29 12:54:50 executed programs: 0
[ 99.961201][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.969138][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.976907][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.985541][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.995928][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.172611][ T5935] chnl_net:caif_netlink_parms(): no params data found
[ 100.259992][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.267255][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.274917][ T5935] bridge_slave_0: entered allmulticast mode
[ 100.282659][ T5935] bridge_slave_0: entered promiscuous mode
[ 100.292525][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.299939][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.307087][ T5935] bridge_slave_1: entered allmulticast mode
[ 100.314615][ T5935] bridge_slave_1: entered promiscuous mode
[ 100.353282][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.366085][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.405270][ T5935] team0: Port device team_slave_0 added
[ 100.415659][ T5935] team0: Port device team_slave_1 added
[ 100.447008][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.454177][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.480609][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.494431][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.501929][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.528741][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.584003][ T5935] hsr_slave_0: entered promiscuous mode
[ 100.590588][ T5935] hsr_slave_1: entered promiscuous mode
[ 100.596772][ T5935] debugfs: 'hsr0' already exists in 'hsr'
[ 100.602680][ T5935] Cannot create hsr debugfs directory
[ 102.069867][ T52] Bluetooth: hci0: command tx timeout
[ 102.347627][ T13] bridge_slave_1: left allmulticast mode
[ 102.353732][ T13] bridge_slave_1: left promiscuous mode
[ 102.360294][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.373368][ T13] bridge_slave_0: left allmulticast mode
[ 102.380574][ T13] bridge_slave_0: left promiscuous mode
[ 102.386774][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.683020][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.697149][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.708578][ T13] bond0 (unregistering): Released all slaves
[ 102.837282][ T13] hsr_slave_0: left promiscuous mode
[ 102.845432][ T13] hsr_slave_1: left promiscuous mode
[ 102.851975][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.859661][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.875728][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.883291][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.904422][ T13] veth1_macvtap: left promiscuous mode
[ 102.910393][ T13] veth0_macvtap: left promiscuous mode
[ 102.916114][ T13] veth1_vlan: left promiscuous mode
[ 102.928920][ T13] veth0_vlan: left promiscuous mode
[ 103.214736][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 103.241456][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 103.855174][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.876810][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.966717][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.980956][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.132528][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.149931][ T52] Bluetooth: hci0: command tx timeout
[ 104.176283][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.192883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.200125][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.220371][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.227571][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.439976][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.484499][ T5935] veth0_vlan: entered promiscuous mode
[ 104.496744][ T5935] veth1_vlan: entered promiscuous mode
[ 104.526454][ T5935] veth0_macvtap: entered promiscuous mode
[ 104.537291][ T5935] veth1_macvtap: entered promiscuous mode
[ 104.556117][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.571603][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.586252][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.596546][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.606530][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.616540][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.683540][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.697697][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.729782][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.737670][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/29 12:54:55 executed programs: 9
[ 106.229351][ T52] Bluetooth: hci0: command tx timeout
[ 106.869086][ T5147] ==================================================================
[ 106.877200][ T5147] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2b0
[ 106.884675][ T5147] Write of size 4 at addr ffff888079f48010 by task kworker/u9:1/5147
[ 106.892749][ T5147]
[ 106.895084][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 106.895101][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 106.895112][ T5147] Workqueue: hci0 hci_cmd_sync_work
[ 106.895138][ T5147] Call Trace:
[ 106.895145][ T5147]
[ 106.895169][ T5147] dump_stack_lvl+0x189/0x250
[ 106.895189][ T5147] ? __virt_addr_valid+0x1c8/0x5c0
[ 106.895210][ T5147] ? rcu_is_watching+0x15/0xb0
[ 106.895229][ T5147] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.895245][ T5147] ? rcu_is_watching+0x15/0xb0
[ 106.895263][ T5147] ? lock_release+0x4b/0x3b0
[ 106.895277][ T5147] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 106.895299][ T5147] ? __virt_addr_valid+0x1c8/0x5c0
[ 106.895318][ T5147] ? __virt_addr_valid+0x4a5/0x5c0
[ 106.895339][ T5147] print_report+0xca/0x240
[ 106.895354][ T5147] ? hci_conn_drop+0x34/0x2b0
[ 106.895372][ T5147] kasan_report+0x118/0x150
[ 106.895389][ T5147] ? hci_conn_valid+0x21/0x230
[ 106.895408][ T5147] ? hci_conn_drop+0x34/0x2b0
[ 106.895430][ T5147] kasan_check_range+0x2b0/0x2c0
[ 106.895449][ T5147] hci_conn_drop+0x34/0x2b0
[ 106.895467][ T5147] ? __pfx_le_read_features_complete+0x10/0x10
[ 106.895484][ T5147] hci_cmd_sync_work+0x262/0x400
[ 106.895503][ T5147] ? process_one_work+0x868/0x15a0
[ 106.895516][ T5147] process_one_work+0x93a/0x15a0
[ 106.895538][ T5147] ? __pfx_process_one_work+0x10/0x10
[ 106.895556][ T5147] ? assign_work+0x3a1/0x410
[ 106.895571][ T5147] worker_thread+0x9b0/0xee0
[ 106.895595][ T5147] kthread+0x711/0x8a0
[ 106.895614][ T5147] ? __pfx_worker_thread+0x10/0x10
[ 106.895629][ T5147] ? __pfx_kthread+0x10/0x10
[ 106.895647][ T5147] ? _raw_spin_unlock_irq+0x23/0x50
[ 106.895661][ T5147] ? lockdep_hardirqs_on+0x98/0x140
[ 106.895677][ T5147] ? __pfx_kthread+0x10/0x10
[ 106.895695][ T5147] ret_from_fork+0x599/0xb30
[ 106.895715][ T5147] ? __pfx_ret_from_fork+0x10/0x10
[ 106.895732][ T5147] ? __switch_to_asm+0x39/0x70
[ 106.895751][ T5147] ? __switch_to_asm+0x33/0x70
[ 106.895769][ T5147] ? __pfx_kthread+0x10/0x10
[ 106.895788][ T5147] ret_from_fork_asm+0x1a/0x30
[ 106.895814][ T5147]
[ 106.895819][ T5147]
[ 107.101473][ T5147] Allocated by task 52:
[ 107.105618][ T5147] kasan_save_track+0x3e/0x80
[ 107.110293][ T5147] __kasan_kmalloc+0x93/0xb0
[ 107.114879][ T5147] __kmalloc_cache_noprof+0x3e2/0x700
[ 107.120246][ T5147] __hci_conn_add+0x3c5/0x1b30
[ 107.125027][ T5147] le_conn_complete_evt+0x6f6/0x1420
[ 107.130418][ T5147] hci_le_enh_conn_complete_evt+0x189/0x4a0
[ 107.136317][ T5147] hci_event_packet+0x78f/0x1260
[ 107.141250][ T5147] hci_rx_work+0x3ee/0x1060
[ 107.145754][ T5147] process_one_work+0x93a/0x15a0
[ 107.150684][ T5147] worker_thread+0x9b0/0xee0
[ 107.155273][ T5147] kthread+0x711/0x8a0
[ 107.159354][ T5147] ret_from_fork+0x599/0xb30
[ 107.163938][ T5147] ret_from_fork_asm+0x1a/0x30
[ 107.168704][ T5147]
[ 107.171033][ T5147] Freed by task 52:
[ 107.174831][ T5147] kasan_save_track+0x3e/0x80
[ 107.179512][ T5147] kasan_save_free_info+0x46/0x50
[ 107.184545][ T5147] __kasan_slab_free+0x5c/0x80
[ 107.189311][ T5147] kfree+0x1c0/0x660
[ 107.193236][ T5147] device_release+0x9e/0x1d0
[ 107.197823][ T5147] kobject_put+0x228/0x570
[ 107.202239][ T5147] hci_conn_del+0xc36/0x1240
[ 107.206827][ T5147] hci_disconn_complete_evt+0x64e/0x950
[ 107.212367][ T5147] hci_event_packet+0x7e3/0x1260
[ 107.217309][ T5147] hci_rx_work+0x3ee/0x1060
[ 107.221900][ T5147] process_one_work+0x93a/0x15a0
[ 107.226839][ T5147] worker_thread+0x9b0/0xee0
[ 107.231426][ T5147] kthread+0x711/0x8a0
[ 107.235494][ T5147] ret_from_fork+0x599/0xb30
[ 107.240111][ T5147] ret_from_fork_asm+0x1a/0x30
[ 107.244878][ T5147]
[ 107.247204][ T5147] The buggy address belongs to the object at ffff888079f48000
[ 107.247204][ T5147] which belongs to the cache kmalloc-8k of size 8192
[ 107.261271][ T5147] The buggy address is located 16 bytes inside of
[ 107.261271][ T5147] freed 8192-byte region [ffff888079f48000, ffff888079f4a000)
[ 107.275074][ T5147]
[ 107.277397][ T5147] The buggy address belongs to the physical page:
[ 107.283809][ T5147] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f48
[ 107.292566][ T5147] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.301080][ T5147] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 107.309067][ T5147] page_type: f5(slab)
[ 107.313043][ T5147] raw: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[ 107.321633][ T5147] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 107.330208][ T5147] head: 00fff00000000040 ffff88813fe27280 0000000000000000 dead000000000001
[ 107.338880][ T5147] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 107.347544][ T5147] head: 00fff00000000003 ffffea0001e7d201 00000000ffffffff 00000000ffffffff
[ 107.356208][ T5147] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 107.364868][ T5147] page dumped because: kasan: bad access detected
[ 107.371284][ T5147] page_owner tracks the page as allocated
[ 107.376986][ T5147] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5672, tgid 5672 (sshd-session), ts 69120616657, free_ts 69073109704
[ 107.397568][ T5147] post_alloc_hook+0x234/0x290
[ 107.402334][ T5147] get_page_from_freelist+0x2365/0x2440
[ 107.407964][ T5147] __alloc_frozen_pages_noprof+0x181/0x370
[ 107.413768][ T5147] alloc_pages_mpol+0x232/0x4a0
[ 107.418630][ T5147] allocate_slab+0x86/0x3b0
[ 107.423135][ T5147] ___slab_alloc+0xf2b/0x1960
[ 107.427808][ T5147] __slab_alloc+0x65/0x100
[ 107.432219][ T5147] __kmalloc_cache_noprof+0x41e/0x700
[ 107.437583][ T5147] tomoyo_init_log+0x111f/0x1f70
[ 107.442516][ T5147] tomoyo_supervisor+0x340/0x1480
[ 107.447541][ T5147] tomoyo_env_perm+0x149/0x1e0
[ 107.452306][ T5147] tomoyo_find_next_domain+0x15ce/0x1aa0
[ 107.458028][ T5147] tomoyo_bprm_check_security+0x11c/0x180
[ 107.463738][ T5147] security_bprm_check+0x89/0x270
[ 107.468779][ T5147] bprm_execve+0x887/0x1400
[ 107.473295][ T5147] do_execveat_common+0x510/0x6a0
[ 107.478504][ T5147] page last free pid 5669 tgid 5669 stack trace:
[ 107.484819][ T5147] __free_frozen_pages+0xbc8/0xd30
[ 107.489927][ T5147] __put_partials+0x146/0x170
[ 107.494605][ T5147] put_cpu_partial+0x1f2/0x2d0
[ 107.499367][ T5147] __slab_free+0x288/0x2a0
[ 107.503781][ T5147] qlist_free_all+0x97/0x100
[ 107.508374][ T5147] kasan_quarantine_reduce+0x148/0x160
[ 107.513854][ T5147] __kasan_slab_alloc+0x22/0x80
[ 107.518706][ T5147] __kmalloc_noprof+0x3cf/0x800
[ 107.523582][ T5147] tomoyo_supervisor+0xbd5/0x1480
[ 107.528601][ T5147] tomoyo_check_unix_address+0x52b/0x7b0
[ 107.534235][ T5147] tomoyo_socket_connect_permission+0x1b2/0x290
[ 107.540484][ T5147] security_socket_connect+0xc8/0x2b0
[ 107.545859][ T5147] __sys_connect+0x231/0x440
[ 107.550448][ T5147] __x64_sys_connect+0x7a/0x90
[ 107.555209][ T5147] do_syscall_64+0xfa/0xf80
[ 107.559710][ T5147] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.565608][ T5147]
[ 107.567926][ T5147] Memory state around the buggy address:
[ 107.573547][ T5147] ffff888079f47f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.581600][ T5147] ffff888079f47f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.589654][ T5147] >ffff888079f48000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.597703][ T5147] ^
[ 107.602296][ T5147] ffff888079f48080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.610356][ T5147] ffff888079f48100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.618408][ T5147] ==================================================================
[ 107.635542][ T5147] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.642797][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full)
[ 107.652277][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.662332][ T5147] Workqueue: hci0 hci_cmd_sync_work
[ 107.667555][ T5147] Call Trace:
[ 107.670826][ T5147]
[ 107.673751][ T5147] dump_stack_lvl+0x99/0x250
[ 107.678339][ T5147] ? __asan_memcpy+0x40/0x70
[ 107.682946][ T5147] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.688171][ T5147] ? __pfx__printk+0x10/0x10
[ 107.692786][ T5147] vpanic+0x237/0x6d0
[ 107.696778][ T5147] ? __pfx_vpanic+0x10/0x10
[ 107.701289][ T5147] ? preempt_schedule+0xae/0xc0
[ 107.706143][ T5147] ? __pfx_preempt_schedule+0x10/0x10
[ 107.711532][ T5147] panic+0xb9/0xc0
[ 107.715278][ T5147] ? __pfx_panic+0x10/0x10
[ 107.719712][ T5147] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 107.725705][ T5147] ? is_module_address+0x17/0xf0
[ 107.730650][ T5147] ? hci_conn_drop+0x34/0x2b0
[ 107.735345][ T5147] check_panic_on_warn+0x89/0xb0
[ 107.740303][ T5147] ? hci_conn_drop+0x34/0x2b0
[ 107.744993][ T5147] end_report+0x6f/0x140
[ 107.749337][ T5147] kasan_report+0x129/0x150
[ 107.753851][ T5147] ? hci_conn_valid+0x21/0x230
[ 107.758630][ T5147] ? hci_conn_drop+0x34/0x2b0
[ 107.763322][ T5147] kasan_check_range+0x2b0/0x2c0
[ 107.768270][ T5147] hci_conn_drop+0x34/0x2b0
[ 107.772785][ T5147] ? __pfx_le_read_features_complete+0x10/0x10
[ 107.778945][ T5147] hci_cmd_sync_work+0x262/0x400
[ 107.783896][ T5147] ? process_one_work+0x868/0x15a0
[ 107.789005][ T5147] process_one_work+0x93a/0x15a0
[ 107.793964][ T5147] ? __pfx_process_one_work+0x10/0x10
[ 107.799340][ T5147] ? assign_work+0x3a1/0x410
[ 107.803934][ T5147] worker_thread+0x9b0/0xee0
[ 107.808534][ T5147] kthread+0x711/0x8a0
[ 107.812619][ T5147] ? __pfx_worker_thread+0x10/0x10
[ 107.817741][ T5147] ? __pfx_kthread+0x10/0x10
[ 107.822361][ T5147] ? _raw_spin_unlock_irq+0x23/0x50
[ 107.827570][ T5147] ? lockdep_hardirqs_on+0x98/0x140
[ 107.832783][ T5147] ? __pfx_kthread+0x10/0x10
[ 107.837409][ T5147] ret_from_fork+0x599/0xb30
[ 107.842011][ T5147] ? __pfx_ret_from_fork+0x10/0x10
[ 107.847128][ T5147] ? __switch_to_asm+0x39/0x70
[ 107.851906][ T5147] ? __switch_to_asm+0x33/0x70
[ 107.856692][ T5147] ? __pfx_kthread+0x10/0x10
[ 107.861295][ T5147] ret_from_fork_asm+0x1a/0x30
[ 107.866092][ T5147]
[ 107.869583][ T5147] Kernel Offset: disabled
[ 107.873945][ T5147] Rebooting in 86400 seconds..