rocess permissive=1
[ 14.329095][ T28] audit: type=1400 audit(1756371854.144:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts.
2025/08/28 09:04:23 parsed 1 programs
[ 23.793566][ T28] audit: type=1400 audit(1756371863.624:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 23.814456][ T28] audit: type=1400 audit(1756371863.624:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 24.975155][ T28] audit: type=1400 audit(1756371864.804:66): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 24.976557][ T292] cgroup: Unknown subsys name 'net'
[ 24.997838][ T28] audit: type=1400 audit(1756371864.804:67): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.025120][ T28] audit: type=1400 audit(1756371864.834:68): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.025328][ T292] cgroup: Unknown subsys name 'devices'
[ 25.138441][ T292] cgroup: Unknown subsys name 'hugetlb'
[ 25.144080][ T292] cgroup: Unknown subsys name 'rlimit'
[ 25.286578][ T28] audit: type=1400 audit(1756371865.124:69): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 25.309765][ T28] audit: type=1400 audit(1756371865.124:70): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.330308][ T28] audit: type=1400 audit(1756371865.124:71): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.333163][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 25.351046][ T28] audit: type=1400 audit(1756371865.124:72): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 25.379711][ T28] audit: type=1400 audit(1756371865.124:73): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 25.384482][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.176809][ T301] request_module fs-gadgetfs succeeded, but still no fs?
[ 26.750624][ T332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.758414][ T332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.766287][ T332] device bridge_slave_0 entered promiscuous mode
[ 26.776036][ T332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.783164][ T332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.790744][ T332] device bridge_slave_1 entered promiscuous mode
[ 26.891917][ T332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.899036][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.906422][ T332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.913486][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.941289][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 26.950012][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.957489][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.968287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 26.976729][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.983795][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.998967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.007294][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.014351][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.037131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.045743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.063168][ T332] device veth0_vlan entered promiscuous mode
[ 27.070158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.079271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.088558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.096515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.111325][ T332] device veth1_macvtap entered promiscuous mode
[ 27.118959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.132031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
2025/08/28 09:04:27 executed programs: 0
[ 27.150491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.193047][ T332] syz-executor (332) used greatest stack depth: 21472 bytes left
[ 27.363819][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.371001][ T366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.378632][ T366] device bridge_slave_0 entered promiscuous mode
[ 27.392615][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.399742][ T366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.407333][ T366] device bridge_slave_1 entered promiscuous mode
[ 27.430892][ T369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.437975][ T369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.445494][ T369] device bridge_slave_0 entered promiscuous mode
[ 27.468876][ T369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.475930][ T369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.483467][ T369] device bridge_slave_1 entered promiscuous mode
[ 27.543751][ T371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.551001][ T371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.558567][ T371] device bridge_slave_0 entered promiscuous mode
[ 27.580979][ T371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.588128][ T371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.595568][ T371] device bridge_slave_1 entered promiscuous mode
[ 27.615372][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.622598][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.630171][ T372] device bridge_slave_0 entered promiscuous mode
[ 27.652428][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.659625][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.667411][ T372] device bridge_slave_1 entered promiscuous mode
[ 27.720290][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.727456][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.734956][ T374] device bridge_slave_0 entered promiscuous mode
[ 27.742105][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.749223][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.756749][ T374] device bridge_slave_1 entered promiscuous mode
[ 27.888283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 27.895780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.938036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 27.946574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.954694][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.961742][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.986499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 27.994328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.002928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.011322][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.018378][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.072772][ T366] device veth0_vlan entered promiscuous mode
[ 28.080808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.089850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.098019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.105410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.113092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.121346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.163101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.179871][ T366] device veth1_macvtap entered promiscuous mode
[ 28.195761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.203306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.217335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.224789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.233200][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.240283][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.247802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.255250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.263171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.285242][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.293601][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.300667][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.309084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.317363][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.324412][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.331819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.340173][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.347225][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.354721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 28.363203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.371622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 28.380174][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.388519][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.395550][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.403111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 28.411840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.420157][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.427201][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.434620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.442569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.466282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.473723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.481410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.489779][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.496924][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.504468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.512781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.521127][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.528191][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.535563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.544174][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.552297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 28.578028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.586520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.594505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.602966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.611884][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.620860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.628885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.637090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.672855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 28.681013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.689349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 28.697819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.705826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.714549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.723124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.732126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.745378][ T369] device veth0_vlan entered promiscuous mode
[ 28.766502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.774792][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.783172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.792006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.800615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.808759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.819350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.826969][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.834390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.841993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.852538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 28.860854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.870349][ T374] device veth0_vlan entered promiscuous mode
[ 28.881701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.889888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.904149][ T371] device veth0_vlan entered promiscuous mode
[ 28.911854][ T369] device veth1_macvtap entered promiscuous mode
[ 28.918660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 28.927160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.934639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.942537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 28.951073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.959568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 28.967531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.975570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.983149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.990823][ T372] device veth0_vlan entered promiscuous mode
[ 29.006859][ T374] device veth1_macvtap entered promiscuous mode
[ 29.015439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.023774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.032215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.040551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.049075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.060875][ T371] device veth1_macvtap entered promiscuous mode
[ 29.074241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.082519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.090852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.098770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.107318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.133019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.141456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.150105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.158662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.167604][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 29.175810][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.184291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.192757][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.201371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.209861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.227189][ T372] device veth1_macvtap entered promiscuous mode
[ 29.264338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 29.272036][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 29.275415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 29.297431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.303387][ T430] Bluetooth: hci2: Frame reassembly failed (-84)
[ 29.306720][ T43] Bluetooth: hci3: Frame reassembly failed (-84)
[ 29.327901][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 29.339177][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.343493][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 29.367840][ T8] device bridge_slave_1 left promiscuous mode
[ 29.374230][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.381943][ T8] device bridge_slave_0 left promiscuous mode
[ 29.388188][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.396280][ T8] device veth1_macvtap left promiscuous mode
[ 29.402433][ T8] device veth0_vlan left promiscuous mode
[ 30.786269][ T421] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 31.266191][ T423] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 31.356198][ T423] Bluetooth: hci4: command 0x1003 tx timeout
[ 31.356214][ T431] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 31.356260][ T428] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 31.362283][ T431] Bluetooth: hci3: command 0x1003 tx timeout
[ 31.368453][ T422] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 31.374931][ T423] Bluetooth: hci2: command 0x1003 tx timeout
[ 32.866290][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 32.866366][ T422] Bluetooth: hci0: command 0x080f tx timeout
[ 32.878545][ T424] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 32.884527][ T426] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 32.891751][ T429] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 32.897944][ T433] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 32.912194][ T10] Bluetooth: hci0: Frame reassembly failed (-84)
2025/08/28 09:04:32 executed programs: 15
[ 32.942393][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 32.967986][ T10] Bluetooth: hci2: Frame reassembly failed (-84)
[ 32.975019][ T430] Bluetooth: hci4: Frame reassembly failed (-84)
[ 32.981959][ T325] Bluetooth: hci3: Frame reassembly failed (-84)
[ 32.988868][ T325] Bluetooth: hci3: Frame reassembly failed (-84)
[ 34.946253][ T434] Bluetooth: hci0: command 0x1003 tx timeout
[ 34.946415][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 34.952301][ T434] Bluetooth: hci1: command 0x1003 tx timeout
[ 34.958595][ T428] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 34.970665][ T436] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 34.976876][ T439] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 34.983084][ T440] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 34.989494][ T441] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 34.995815][ T442] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 35.026254][ T423] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 35.026328][ T431] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 35.032478][ T422] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 35.032527][ T422] Bluetooth: hci3: command 0x1003 tx timeout
[ 35.044914][ T444] Bluetooth: hci4: command 0x1003 tx timeout
[ 35.066385][ T325] Bluetooth: hci0: Frame reassembly failed (-84)
[ 35.073112][ T430] Bluetooth: hci2: Frame reassembly failed (-84)
[ 35.080635][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 35.086273][ T430] Bluetooth: hci2: Frame reassembly failed (-84)
[ 35.095800][ T325] Bluetooth: hci3: Frame reassembly failed (-84)
[ 35.102754][ T325] Bluetooth: hci3: Frame reassembly failed (-84)
[ 35.117241][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 37.106173][ T425] Bluetooth: hci3: command 0x1003 tx timeout
[ 37.106178][ T431] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 37.106204][ T425] Bluetooth: hci1: command 0x1003 tx timeout
[ 37.112242][ T444] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 37.118322][ T428] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 37.124322][ T444] Bluetooth: hci0: command 0x1003 tx timeout
[ 37.130432][ T423] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 37.148729][ T447] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 37.154829][ T445] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 37.161036][ T446] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 37.167221][ T448] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 37.173492][ T449] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 37.186170][ T423] Bluetooth: hci4: command 0x1003 tx timeout
[ 37.186193][ T422] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 37.212418][ T325] Bluetooth: hci0: Frame reassembly failed (-84)
[ 37.250729][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 37.250729][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 37.250765][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 37.257936][ T43] Bluetooth: hci2: Frame reassembly failed (-84)
[ 37.277432][ T430] Bluetooth: hci3: Frame reassembly failed (-84)
[ 37.282156][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 39.266158][ T425] Bluetooth: hci2: command 0x1003 tx timeout
[ 39.266153][ T423] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 39.266184][ T425] Bluetooth: hci4: command 0x1003 tx timeout
[ 39.272261][ T423] Bluetooth: hci0: command 0x1003 tx timeout
[ 39.278331][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 39.284298][ T428] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 39.290285][ T422] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 39.308673][ T450] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 39.314785][ T452] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 39.320938][ T451] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 39.327256][ T454] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 39.333527][ T453] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 39.346264][ T422] Bluetooth: hci3: command 0x1003 tx timeout
[ 39.346285][ T444] Bluetooth: hci3: Opcode 0x1003 failed: -110
2025/08/28 09:04:39 executed programs: 30
[ 39.382850][ T10] Bluetooth: hci0: Frame reassembly failed (-84)
[ 39.406625][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 39.413556][ T325] Bluetooth: hci2: Frame reassembly failed (-84)
[ 39.422902][ T325] Bluetooth: hci3: Frame reassembly failed (-84)
[ 39.429658][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 41.426151][ T428] Bluetooth: hci3: command 0x1003 tx timeout
[ 41.426147][ T422] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 41.426177][ T428] Bluetooth: hci1: command 0x1003 tx timeout
[ 41.432191][ T422] Bluetooth: hci0: command 0x1003 tx timeout
[ 41.438317][ T431] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 41.444289][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 41.450291][ T444] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 41.468783][ T456] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.474870][ T458] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.481445][ T457] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.487754][ T460] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.493882][ T459] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.506120][ T423] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 41.506142][ T444] Bluetooth: hci4: command 0x1003 tx timeout
[ 41.525328][ T10] Bluetooth: hci0: Frame reassembly failed (-84)
[ 41.568135][ T43] Bluetooth: hci1: Frame reassembly failed (-84)
[ 41.574724][ T8] Bluetooth: hci3: Frame reassembly failed (-84)
[ 41.583832][ T10] Bluetooth: hci2: Frame reassembly failed (-84)
[ 41.584254][ T8] Bluetooth: hci3: Frame reassembly failed (-84)
[ 41.604617][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 43.586220][ T428] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 43.586261][ T425] Bluetooth: hci2: command 0x1003 tx timeout
[ 43.592481][ T428] Bluetooth: hci1: command 0x1003 tx timeout
[ 43.598464][ T444] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 43.604615][ T431] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 43.611284][ T425] Bluetooth: hci0: command 0x1003 tx timeout
[ 43.616934][ T423] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 43.629119][ T461] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.635342][ T463] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.641537][ T464] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.647901][ T462] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.655020][ T465] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.666824][ T45] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 43.666918][ T423] Bluetooth: hci4: command 0x1003 tx timeout
[ 43.703626][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 43.743652][ T43] Bluetooth: hci2: Frame reassembly failed (-84)
[ 43.751830][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 43.754451][ T8] Bluetooth: hci4: Frame reassembly failed (-84)
[ 43.758299][ T325] Bluetooth: hci1: Frame reassembly failed (-84)
[ 45.746179][ T444] Bluetooth: hci0: command 0x1003 tx timeout
[ 45.746174][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 45.746205][ T444] Bluetooth: hci2: command 0x1003 tx timeout
[ 45.753741][ T423] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 45.758524][ T431] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 45.765070][ T444] Bluetooth: hci1: command 0x1003 tx timeout
[ 45.771188][ T466] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.789123][ T467] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.795275][ T469] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.801478][ T468] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.807607][ T470] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.826476][ T431] Bluetooth: hci4: command 0x1003 tx timeout
[ 45.826479][ T45] Bluetooth: hci3: command 0x1003 tx timeout
[ 45.838790][ T425] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 45.844904][ T422] Bluetooth: hci3: Opcode 0x1003 failed: -110
2025/08/28 09:04:45 executed programs: 45
[ 45.876843][ T43] Bluetooth: hci1: Frame reassembly failed (-84)
[ 45.883346][ T43] Bluetooth: hci2: Frame reassembly failed (-84)
[ 45.884098][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 45.907252][ T8] Bluetooth: hci3: Frame reassembly failed (-84)
[ 45.914355][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 47.826142][ C0] ==================================================================
[ 47.834249][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0
[ 47.841290][ C0] Write of size 8 at addr ffff88811c358a00 by task swapper/0/0
[ 47.848853][ C0]
[ 47.851185][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[ 47.858208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 47.868269][ C0] Call Trace:
[ 47.871549][ C0]
[ 47.874400][ C0] __dump_stack+0x21/0x24
[ 47.878755][ C0] dump_stack_lvl+0xee/0x150
[ 47.883349][ C0] ? __cfi_dump_stack_lvl+0x8/0x8
[ 47.888373][ C0] ? update_rq_clock+0x1c1/0x5c0
[ 47.893308][ C0] ? __run_timers+0x32b/0x9a0
[ 47.897987][ C0] print_address_description+0x71/0x210
[ 47.903539][ C0] print_report+0x4a/0x60
[ 47.907883][ C0] kasan_report+0x122/0x150
[ 47.912401][ C0] ? __run_timers+0x32b/0x9a0
[ 47.917080][ C0] __asan_report_store8_noabort+0x17/0x20
[ 47.922798][ C0] __run_timers+0x32b/0x9a0
[ 47.927304][ C0] ? sched_clock+0x9/0x10
[ 47.931629][ C0] ? sched_clock_cpu+0x6e/0x250
[ 47.936477][ C0] ? calc_index+0x200/0x200
[ 47.940977][ C0] ? kvm_sched_clock_read+0x18/0x40
[ 47.946174][ C0] run_timer_softirq+0x6a/0xf0
[ 47.950931][ C0] handle_softirqs+0x1d7/0x600
[ 47.955687][ C0] ? irqtime_account_irq+0xc4/0x240
[ 47.956390][ T422] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 47.960889][ C0] __irq_exit_rcu+0x52/0xf0
[ 47.971438][ C0] irq_exit_rcu+0x9/0x10
[ 47.975686][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 47.981310][ C0]
[ 47.984230][ C0]
[ 47.987149][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 47.993123][ C0] RIP: 0010:default_idle+0xf/0x20
[ 47.998143][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 02 53 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 48.017739][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257
[ 48.023883][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: 1e2fd6da58b3d100
[ 48.031845][ C0] RDX: 0000000000000001 RSI: ffffffff85aa0500 RDI: ffffffff85aa04c0
[ 48.039902][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917
[ 48.047872][ C0] R10: 0000000000000000 R11: ffffffff84f33120 R12: 0000000000000000
[ 48.055834][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000
[ 48.063805][ C0] ? __cfi_default_idle+0x10/0x10
[ 48.068834][ C0] arch_cpu_idle+0x1c/0x20
[ 48.073288][ C0] default_idle_call+0x71/0x1d0
[ 48.078155][ C0] do_idle+0x1a7/0x520
[ 48.082236][ C0] ? idle_inject_timer_fn+0x60/0x60
[ 48.087431][ C0] ? debug_smp_processor_id+0x17/0x20
[ 48.092800][ C0] cpu_startup_entry+0x43/0x60
[ 48.097557][ C0] rest_init+0x10a/0x130
[ 48.101795][ C0] ? __cfi_x86_late_time_init+0x8/0x8
[ 48.107160][ C0] arch_call_rest_init+0xe/0x10
[ 48.112011][ C0] start_kernel+0x482/0x4f0
[ 48.116591][ C0] x86_64_start_reservations+0x2a/0x2c
[ 48.122067][ C0] x86_64_start_kernel+0x7c/0x81
[ 48.127002][ C0] secondary_startup_64_no_verify+0xce/0xdb
[ 48.132908][ C0]
[ 48.135931][ C0]
[ 48.138242][ C0] Allocated by task 466:
[ 48.142474][ C0] kasan_set_track+0x4b/0x70
[ 48.147069][ C0] kasan_save_alloc_info+0x25/0x30
[ 48.152175][ C0] __kasan_kmalloc+0x95/0xb0
[ 48.156784][ C0] __kmalloc+0xb1/0x1e0
[ 48.160969][ C0] hci_alloc_dev_priv+0x27/0x1bd0
[ 48.165999][ C0] hci_uart_tty_ioctl+0x3d6/0xa20
[ 48.171036][ C0] tty_ioctl+0x8ef/0xc60
[ 48.175267][ C0] __se_sys_ioctl+0x12f/0x1b0
[ 48.179946][ C0] __x64_sys_ioctl+0x7b/0x90
[ 48.184552][ C0] x64_sys_call+0x58b/0x9a0
[ 48.189048][ C0] do_syscall_64+0x4c/0xa0
[ 48.193460][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.199485][ C0]
[ 48.201798][ C0] Freed by task 470:
[ 48.205680][ C0] kasan_set_track+0x4b/0x70
[ 48.210264][ C0] kasan_save_free_info+0x31/0x50
[ 48.215299][ C0] ____kasan_slab_free+0x132/0x180
[ 48.220676][ C0] __kasan_slab_free+0x11/0x20
[ 48.225439][ C0] slab_free_freelist_hook+0xc2/0x190
[ 48.230804][ C0] __kmem_cache_free+0xb7/0x1b0
[ 48.235651][ C0] kfree+0x6f/0xf0
[ 48.239364][ C0] hci_release_dev+0x12a3/0x13b0
[ 48.244293][ C0] bt_host_release+0x82/0x90
[ 48.248891][ C0] device_release+0xa4/0x1d0
[ 48.253470][ C0] kobject_put+0x19d/0x280
[ 48.257880][ C0] put_device+0x1f/0x30
[ 48.262032][ C0] hci_dev_cmd+0x265/0x720
[ 48.266442][ C0] hci_sock_ioctl+0x41e/0x7f0
[ 48.271108][ C0] sock_do_ioctl+0x101/0x310
[ 48.275692][ C0] sock_ioctl+0x4d8/0x6e0
[ 48.280014][ C0] __se_sys_ioctl+0x12f/0x1b0
[ 48.284702][ C0] __x64_sys_ioctl+0x7b/0x90
[ 48.289482][ C0] x64_sys_call+0x58b/0x9a0
[ 48.293998][ C0] do_syscall_64+0x4c/0xa0
[ 48.298542][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.304445][ C0]
[ 48.306763][ C0] Last potentially related work creation:
[ 48.312465][ C0] kasan_save_stack+0x3a/0x60
[ 48.317137][ C0] __kasan_record_aux_stack+0xb6/0xc0
[ 48.322512][ C0] kasan_record_aux_stack_noalloc+0xb/0x10
[ 48.328319][ C0] insert_work+0x51/0x300
[ 48.332654][ C0] __queue_work+0x9b1/0xd30
[ 48.337169][ C0] queue_work_on+0xd2/0x140
[ 48.341662][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0
[ 48.346683][ C0] hci_cmd_sync_status+0x53/0x120
[ 48.351712][ C0] hci_dev_cmd+0x628/0x720
[ 48.356119][ C0] hci_sock_ioctl+0x41e/0x7f0
[ 48.360870][ C0] sock_do_ioctl+0x101/0x310
[ 48.365453][ C0] sock_ioctl+0x4d8/0x6e0
[ 48.369787][ C0] __se_sys_ioctl+0x12f/0x1b0
[ 48.374461][ C0] __x64_sys_ioctl+0x7b/0x90
[ 48.379043][ C0] x64_sys_call+0x58b/0x9a0
[ 48.383627][ C0] do_syscall_64+0x4c/0xa0
[ 48.388039][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.393920][ C0]
[ 48.396233][ C0] Second to last potentially related work creation:
[ 48.402835][ C0] kasan_save_stack+0x3a/0x60
[ 48.407507][ C0] __kasan_record_aux_stack+0xb6/0xc0
[ 48.412890][ C0] kasan_record_aux_stack_noalloc+0xb/0x10
[ 48.418818][ C0] insert_work+0x51/0x300
[ 48.423169][ C0] __queue_work+0x9b1/0xd30
[ 48.427670][ C0] queue_work_on+0xd2/0x140
[ 48.432166][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0
[ 48.437113][ C0] hci_cmd_sync_status+0x53/0x120
[ 48.442125][ C0] hci_dev_cmd+0x628/0x720
[ 48.446534][ C0] hci_sock_ioctl+0x41e/0x7f0
[ 48.451214][ C0] sock_do_ioctl+0x101/0x310
[ 48.455800][ C0] sock_ioctl+0x4d8/0x6e0
[ 48.460135][ C0] __se_sys_ioctl+0x12f/0x1b0
[ 48.464817][ C0] __x64_sys_ioctl+0x7b/0x90
[ 48.469402][ C0] x64_sys_call+0x58b/0x9a0
[ 48.473896][ C0] do_syscall_64+0x4c/0xa0
[ 48.478308][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.484189][ C0]
[ 48.486499][ C0] The buggy address belongs to the object at ffff88811c358000
[ 48.486499][ C0] which belongs to the cache kmalloc-8k of size 8192
[ 48.500562][ C0] The buggy address is located 2560 bytes inside of
[ 48.500562][ C0] 8192-byte region [ffff88811c358000, ffff88811c35a000)
[ 48.514137][ C0]
[ 48.516458][ C0] The buggy address belongs to the physical page:
[ 48.522862][ C0] page:ffffea000470d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c358
[ 48.533107][ C0] head:ffffea000470d600 order:3 compound_mapcount:0 compound_pincount:0
[ 48.541421][ C0] flags: 0x4000000000010200(slab|head|zone=1)
[ 48.547667][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500
[ 48.556328][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[ 48.564989][ C0] page dumped because: kasan: bad access detected
[ 48.571407][ C0] page_owner tracks the page as allocated
[ 48.577112][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 460, tgid 460 (syz.6.41), ts 39422809302, free_ts 39399395318
[ 48.599778][ C0] post_alloc_hook+0x1f5/0x210
[ 48.604553][ C0] prep_new_page+0x1c/0x110
[ 48.609050][ C0] get_page_from_freelist+0x2c7b/0x2cf0
[ 48.614590][ C0] __alloc_pages+0x1c3/0x450
[ 48.619169][ C0] alloc_slab_page+0x6e/0xf0
[ 48.623767][ C0] new_slab+0x98/0x3d0
[ 48.627827][ C0] ___slab_alloc+0x6f6/0xb50
[ 48.632417][ C0] __slab_alloc+0x5e/0xa0
[ 48.636753][ C0] __kmem_cache_alloc_node+0x203/0x2c0
[ 48.642206][ C0] __kmalloc+0xa1/0x1e0
[ 48.646360][ C0] hci_alloc_dev_priv+0x27/0x1bd0
[ 48.651393][ C0] hci_uart_tty_ioctl+0x3d6/0xa20
[ 48.656437][ C0] tty_ioctl+0x8ef/0xc60
[ 48.660676][ C0] __se_sys_ioctl+0x12f/0x1b0
[ 48.665369][ C0] __x64_sys_ioctl+0x7b/0x90
[ 48.669953][ C0] x64_sys_call+0x58b/0x9a0
[ 48.674471][ C0] page last free stack trace:
[ 48.679139][ C0] free_unref_page_prepare+0x742/0x750
[ 48.684679][ C0] free_unref_page+0x8f/0x530
[ 48.689348][ C0] __free_pages+0x67/0x100
[ 48.693755][ C0] __free_slab+0xca/0x1a0
[ 48.698091][ C0] __unfreeze_partials+0x160/0x190
[ 48.703198][ C0] put_cpu_partial+0xa9/0x100
[ 48.707871][ C0] __slab_free+0x1c4/0x280
[ 48.712297][ C0] ___cache_free+0xbf/0xd0
[ 48.716708][ C0] qlist_free_all+0xc6/0x140
[ 48.721286][ C0] kasan_quarantine_reduce+0x14a/0x170
[ 48.726732][ C0] __kasan_slab_alloc+0x24/0x80
[ 48.731603][ C0] slab_post_alloc_hook+0x4f/0x2d0
[ 48.736706][ C0] kmem_cache_alloc+0x16e/0x330
[ 48.741551][ C0] getname_flags+0xb9/0x500
[ 48.746070][ C0] __x64_sys_mkdirat+0x7c/0xa0
[ 48.750837][ C0] x64_sys_call+0x73d/0x9a0
[ 48.755357][ C0]
[ 48.757672][ C0] Memory state around the buggy address:
[ 48.763315][ C0] ffff88811c358900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 48.771382][ C0] ffff88811c358980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 48.779427][ C0] >ffff88811c358a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 48.787470][ C0] ^
[ 48.791520][ C0] ffff88811c358a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 48.799565][ C0] ffff88811c358b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 48.807609][ C0] ==================================================================
[ 48.815659][ C0] Disabling lock debugging due to kernel taint
[ 48.821859][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 48.833604][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 48.842012][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0
[ 48.850511][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 48.860562][ C0] RIP: 0010:__queue_work+0x575/0xd30
[ 48.865857][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 38 dc 28 00 4c 89 ff e8 80 30 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 37 6d 00 49 8b 7d 00 e8 63 2c
[ 48.885540][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[ 48.891614][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[ 48.899596][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 48.907570][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[ 48.915543][ C0] R10: ffffed102386b139 R11: 1ffff1102386b139 R12: dffffc0000000000
[ 48.923512][ C0] R13: 0000000000000000 R14: ffff88811c3589c8 R15: 0000000000000008
[ 48.931494][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 48.940424][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.947006][ C0] CR2: 00007ffe8fdbc298 CR3: 00000001225c1000 CR4: 00000000003506b0
[ 48.954999][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.962972][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.970941][ C0] Call Trace:
[ 48.974221][ C0]
[ 48.977068][ C0] delayed_work_timer_fn+0x61/0x80
[ 48.982196][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 48.988006][ C0] call_timer_fn+0x46/0x2a0
[ 48.992523][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 48.998344][ C0] __run_timers+0x667/0x9a0
[ 49.002882][ C0] ? calc_index+0x200/0x200
[ 49.007392][ C0] ? kvm_sched_clock_read+0x18/0x40
[ 49.012662][ C0] run_timer_softirq+0x6a/0xf0
[ 49.017431][ C0] handle_softirqs+0x1d7/0x600
[ 49.022196][ C0] ? irqtime_account_irq+0xc4/0x240
[ 49.027400][ C0] __irq_exit_rcu+0x52/0xf0
[ 49.031907][ C0] irq_exit_rcu+0x9/0x10
[ 49.036148][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 49.041783][ C0]
[ 49.044711][ C0]
[ 49.047642][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 49.053635][ C0] RIP: 0010:default_idle+0xf/0x20
[ 49.058664][ C0] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 02 53 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 49.078270][ C0] RSP: 0018:ffffffff86e07d58 EFLAGS: 00000257
[ 49.084338][ C0] RAX: ffff8881f7000000 RBX: ffffffff86e1c500 RCX: 1e2fd6da58b3d100
[ 49.092354][ C0] RDX: 0000000000000001 RSI: ffffffff85aa0500 RDI: ffffffff85aa04c0
[ 49.100335][ C0] RBP: ffffffff86e07d58 R08: dffffc0000000000 R09: ffffed103ee06917
[ 49.108328][ C0] R10: 0000000000000000 R11: ffffffff84f33120 R12: 0000000000000000
[ 49.116296][ C0] R13: 0000000000000000 R14: ffffffff86e1c500 R15: dffffc0000000000
[ 49.124294][ C0] ? __cfi_default_idle+0x10/0x10
[ 49.129325][ C0] arch_cpu_idle+0x1c/0x20
[ 49.133739][ C0] default_idle_call+0x71/0x1d0
[ 49.138593][ C0] do_idle+0x1a7/0x520
[ 49.142674][ C0] ? idle_inject_timer_fn+0x60/0x60
[ 49.147874][ C0] ? debug_smp_processor_id+0x17/0x20
[ 49.153252][ C0] cpu_startup_entry+0x43/0x60
[ 49.158025][ C0] rest_init+0x10a/0x130
[ 49.162268][ C0] ? __cfi_x86_late_time_init+0x8/0x8
[ 49.167641][ C0] arch_call_rest_init+0xe/0x10
[ 49.172500][ C0] start_kernel+0x482/0x4f0
[ 49.177112][ C0] x86_64_start_reservations+0x2a/0x2c
[ 49.182581][ C0] x86_64_start_kernel+0x7c/0x81
[ 49.187527][ C0] secondary_startup_64_no_verify+0xce/0xdb
[ 49.193424][ C0]
[ 49.196438][ C0] Modules linked in:
[ 49.200342][ C0] ---[ end trace 0000000000000000 ]---
[ 49.205789][ C0] RIP: 0010:__queue_work+0x575/0xd30
[ 49.211101][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 38 dc 28 00 4c 89 ff e8 80 30 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 37 6d 00 49 8b 7d 00 e8 63 2c
[ 49.230881][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046
[ 49.236945][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffffffff86e1c500
[ 49.244913][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 49.252883][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007
[ 49.260850][ C0] R10: ffffed102386b139 R11: 1ffff1102386b139 R12: dffffc0000000000
[ 49.268821][ C0] R13: 0000000000000000 R14: ffff88811c3589c8 R15: 0000000000000008
[ 49.276808][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 49.285734][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.292316][ C0] CR2: 00007ffe8fdbc298 CR3: 00000001225c1000 CR4: 00000000003506b0
[ 49.300286][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.308273][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.316245][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 49.323805][ C0] Kernel Offset: disabled
[ 49.328133][ C0] Rebooting in 86400 seconds..