Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:01 parsed 1 programs [ 62.803162][ T4408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 64.214710][ T4536] chnl_net:caif_netlink_parms(): no params data found [ 64.232897][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.234157][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.235499][ T4536] device bridge_slave_0 entered promiscuous mode [ 64.237682][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.238841][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.240451][ T4536] device bridge_slave_1 entered promiscuous mode [ 64.248972][ T4536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.251585][ T4536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.260045][ T4536] team0: Port device team_slave_0 added [ 64.262214][ T4536] team0: Port device team_slave_1 added [ 64.271315][ T4536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.272397][ T4536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.276345][ T4536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.278662][ T4536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.280108][ T4536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.284340][ T4536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.340733][ T4536] device hsr_slave_0 entered promiscuous mode [ 64.389786][ T4536] device hsr_slave_1 entered promiscuous mode [ 64.992929][ T4536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.061013][ T4536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.110844][ T4536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.171712][ T4536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.234809][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.236042][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.237191][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.238422][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.244775][ T269] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.246355][ T269] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.285581][ T4536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.299547][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.301264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.307195][ T4536] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.311059][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.312943][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.314397][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.315434][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.318944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.321990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.323557][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.324577][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.328093][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.331815][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.336973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.338768][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.341950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.344174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.348742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.351659][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.353350][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.354843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.356472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.358738][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.432566][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.433931][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.437839][ T4536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.445296][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.447082][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.461164][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.462702][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.464479][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.466282][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.467745][ T4536] device veth0_vlan entered promiscuous mode [ 65.471923][ T4536] device veth1_vlan entered promiscuous mode [ 65.480632][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.482298][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.483772][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.485367][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.488357][ T4536] device veth0_macvtap entered promiscuous mode [ 65.491460][ T4536] device veth1_macvtap entered promiscuous mode [ 65.497818][ T4536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.499190][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.501216][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.502739][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.504396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.508548][ T4536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.510660][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.512275][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.515281][ T4536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.516614][ T4536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.517947][ T4536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.519307][ T4536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.076840][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.078295][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.080851][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.095527][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.096837][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.098472][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:06 executed programs: 0 [ 66.416535][ T4774] chnl_net:caif_netlink_parms(): no params data found [ 66.435980][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.437218][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.438692][ T4774] device bridge_slave_0 entered promiscuous mode [ 66.441183][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.442376][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.443890][ T4774] device bridge_slave_1 entered promiscuous mode [ 66.453180][ T4774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.455894][ T4774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.464291][ T4774] team0: Port device team_slave_0 added [ 66.466343][ T4774] team0: Port device team_slave_1 added [ 66.474503][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.475636][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.479866][ T4774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.482711][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.483742][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.487506][ T4774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.521118][ T4774] device hsr_slave_0 entered promiscuous mode [ 66.560079][ T4774] device hsr_slave_1 entered promiscuous mode [ 66.579768][ T4774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.580942][ T4774] Cannot create hsr debugfs directory [ 66.613566][ T4774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.409690][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 68.665156][ T4774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.620972][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.621770][ T1991] cfg80211: failed to load regulatory.db [ 69.622120][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.490264][ T4184] Bluetooth: hci0: command 0x041b tx timeout [ 70.954287][ T4774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.994855][ T4774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.165777][ T4774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.191717][ T4774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.231195][ T4774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.296240][ T4774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.373846][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.378014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.381533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.384842][ T4774] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.391297][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.394847][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.396856][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.397907][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.402625][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.404214][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.405758][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.407244][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.408384][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.411148][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.414120][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.417016][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.419226][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.422371][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.427264][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.429179][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.431567][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.433093][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.447785][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.449468][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.453169][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.494372][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.495715][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.499371][ T4774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.505940][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.507646][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.515698][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.517273][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.518901][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.520948][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.523269][ T4774] device veth0_vlan entered promiscuous mode [ 71.527095][ T4774] device veth1_vlan entered promiscuous mode [ 71.536978][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.538536][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.540706][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.542330][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.545028][ T4774] device veth0_macvtap entered promiscuous mode [ 71.547467][ T4774] device veth1_macvtap entered promiscuous mode [ 71.552685][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.554366][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.556427][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.557623][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.559217][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.561327][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.562948][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.565976][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.567744][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.570100][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.571248][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.572984][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.575638][ T4774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.576923][ T4774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.578208][ T4774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.580655][ T4774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.603435][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.604672][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.606231][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.615644][ T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.616985][ T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.618577][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 2 [ 71.657221][ T4948] ================================================================== [ 71.658578][ T4948] BUG: KASAN: use-after-free in __lock_acquire+0xf0/0x651c [ 71.659827][ T4948] Read of size 8 at addr ffff0000d1cc58b8 by task syz.0.16/4948 [ 71.661116][ T4948] [ 71.661514][ T4948] CPU: 0 PID: 4948 Comm: syz.0.16 Not tainted 5.15.189-syzkaller #0 [ 71.662822][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 71.664527][ T4948] Call trace: [ 71.665091][ T4948] dump_backtrace+0x0/0x43c [ 71.665889][ T4948] show_stack+0x2c/0x3c [ 71.666585][ T4948] __dump_stack+0x30/0x40 [ 71.667274][ T4948] dump_stack_lvl+0xf8/0x160 [ 71.667994][ T4948] print_address_description+0x78/0x30c [ 71.668857][ T4948] kasan_report+0xec/0x15c [ 71.669548][ T4948] __asan_report_load8_noabort+0x44/0x50 [ 71.670500][ T4948] __lock_acquire+0xf0/0x651c [ 71.671189][ T4948] lock_acquire+0x1f4/0x620 [ 71.671847][ T4948] _raw_spin_lock_irq+0xcc/0x13c [ 71.672605][ T4948] io_poll_remove_entries+0x168/0x430 [ 71.673473][ T4948] io_poll_task_func+0xe8/0x250 [ 71.674259][ T4948] tctx_task_work+0x284/0x514 [ 71.675015][ T4948] task_work_run+0x12c/0x1e0 [ 71.675816][ T4948] do_exit+0x684/0x1f58 [ 71.676512][ T4948] do_group_exit+0x100/0x268 [ 71.677268][ T4948] get_signal+0x73c/0x1340 [ 71.678003][ T4948] do_notify_resume+0x35c/0x3128 [ 71.678849][ T4948] el0_svc+0xf0/0x1e0 [ 71.679555][ T4948] el0t_64_sync_handler+0xcc/0xe4 [ 71.680378][ T4948] el0t_64_sync+0x1a0/0x1a4 [ 71.681133][ T4948] [ 71.681543][ T4948] Allocated by task 1: [ 71.682240][ T4948] __kasan_kmalloc+0xb0/0xf0 [ 71.682997][ T4948] kmem_cache_alloc_trace+0x274/0x3fc [ 71.683856][ T4948] comedi_device_postconfig+0x428/0xb48 [ 71.684754][ T4948] comedi_auto_config+0x228/0x328 [ 71.685594][ T4948] comedi_test_init+0xb0/0x14c [ 71.686313][ T4948] do_one_initcall+0x228/0x8b0 [ 71.687131][ T4948] do_initcall_level+0x154/0x214 [ 71.687915][ T4948] do_initcalls+0x58/0xac [ 71.688559][ T4948] do_basic_setup+0x8c/0xa0 [ 71.689296][ T4948] kernel_init_freeable+0x404/0x5fc [ 71.690094][ T4948] kernel_init+0x24/0x1d0 [ 71.690742][ T4948] ret_from_fork+0x10/0x20 [ 71.691424][ T4948] [ 71.691792][ T4948] Freed by task 4948: [ 71.692423][ T4948] kasan_set_track+0x4c/0x84 [ 71.693162][ T4948] kasan_set_free_info+0x28/0x4c [ 71.693996][ T4948] ____kasan_slab_free+0x118/0x164 [ 71.694861][ T4948] __kasan_slab_free+0x18/0x28 [ 71.695631][ T4948] slab_free_freelist_hook+0x128/0x1e8 [ 71.696490][ T4948] kfree+0x170/0x40c [ 71.697188][ T4948] comedi_device_detach+0x2c4/0x5d8 [ 71.698015][ T4948] comedi_unlocked_ioctl+0xb28/0xdcc [ 71.698903][ T4948] __arm64_sys_ioctl+0x14c/0x1c8 [ 71.699609][ T4948] invoke_syscall+0x98/0x2b8 [ 71.700307][ T4948] el0_svc_common+0x138/0x258 [ 71.700989][ T4948] do_el0_svc+0x58/0x14c [ 71.701648][ T4948] el0_svc+0x78/0x1e0 [ 71.702238][ T4948] el0t_64_sync_handler+0xcc/0xe4 [ 71.702963][ T4948] el0t_64_sync+0x1a0/0x1a4 [ 71.703611][ T4948] [ 71.703958][ T4948] The buggy address belongs to the object at ffff0000d1cc5800 [ 71.703958][ T4948] which belongs to the cache kmalloc-256 of size 256 [ 71.705976][ T4948] The buggy address is located 184 bytes inside of [ 71.705976][ T4948] 256-byte region [ffff0000d1cc5800, ffff0000d1cc5900) [ 71.707868][ T4948] The buggy address belongs to the page: [ 71.708659][ T4948] page:000000009ab5ffe4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111cc4 [ 71.710362][ T4948] head:000000009ab5ffe4 order:1 compound_mapcount:0 [ 71.711397][ T4948] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 71.712794][ T4948] raw: 05ffc00000010200 fffffc000344cc80 0000000400000004 ffff0000c0002480 [ 71.714194][ T4948] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 71.715612][ T4948] page dumped because: kasan: bad access detected [ 71.716601][ T4948] [ 71.716972][ T4948] Memory state around the buggy address: [ 71.717850][ T4948] ffff0000d1cc5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.719116][ T4948] ffff0000d1cc5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.720466][ T4948] >ffff0000d1cc5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.721717][ T4948] ^ [ 71.722592][ T4948] ffff0000d1cc5900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.723982][ T4948] ffff0000d1cc5980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.725361][ T4948] ================================================================== [ 71.726748][ T4948] Disabling lock debugging due to kernel taint [ 72.569756][ T4170] Bluetooth: hci0: command 0x040f tx timeout [ 73.504625][ T1645] device hsr_slave_0 left promiscuous mode [ 73.540118][ T1645] device hsr_slave_1 left promiscuous mode [ 73.589973][ T1645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.591378][ T1645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.593109][ T1645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.597160][ T1645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.598646][ T1645] device bridge_slave_1 left promiscuous mode [ 73.599733][ T1645] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.641783][ T1645] device bridge_slave_0 left promiscuous mode [ 73.642850][ T1645] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.769816][ T1645] device veth1_macvtap left promiscuous mode [ 73.770934][ T1645] device veth0_macvtap left promiscuous mode [ 73.771876][ T1645] device veth1_vlan left promiscuous mode [ 73.772770][ T1645] device veth0_vlan left promiscuous mode [ 73.891999][ T1645] team0 (unregistering): Port device team_slave_1 removed [ 73.901225][ T1645] team0 (unregistering): Port device team_slave_0 removed [ 73.906701][ T1645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.933459][ T1645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.056398][ T1645] bond0 (unregistering): Released all slaves [ 74.649668][ T4180] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:16 executed programs: 292