Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts.
2025/11/01 21:41:54 parsed 1 programs
[ 74.336496][ T5831] cgroup: Unknown subsys name 'net'
[ 74.468979][ T5831] cgroup: Unknown subsys name 'cpuset'
[ 74.477644][ T5831] cgroup: Unknown subsys name 'rlimit'
[ 75.878483][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 78.379997][ T5838] chnl_net:caif_netlink_parms(): no params data found
[ 78.452516][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.459822][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.467477][ T5838] bridge_slave_0: entered allmulticast mode
[ 78.475059][ T5838] bridge_slave_0: entered promiscuous mode
[ 78.483985][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.491232][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.498463][ T5838] bridge_slave_1: entered allmulticast mode
[ 78.506032][ T5838] bridge_slave_1: entered promiscuous mode
[ 78.536466][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.548139][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.579364][ T5838] team0: Port device team_slave_0 added
[ 78.587798][ T5838] team0: Port device team_slave_1 added
[ 78.614056][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.621080][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.647411][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.660071][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.667113][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.693702][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.734747][ T5838] hsr_slave_0: entered promiscuous mode
[ 78.741195][ T5838] hsr_slave_1: entered promiscuous mode
[ 78.874099][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.886385][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.898160][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.908270][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.938567][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.945845][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.953723][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.960953][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.019767][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.040362][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.049118][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.063795][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.078561][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.085752][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.100349][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.107619][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.263279][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.307572][ T5838] veth0_vlan: entered promiscuous mode
[ 79.318894][ T5838] veth1_vlan: entered promiscuous mode
[ 79.348204][ T5838] veth0_macvtap: entered promiscuous mode
[ 79.358259][ T5838] veth1_macvtap: entered promiscuous mode
[ 79.377829][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.391663][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.407851][ T1322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.417655][ T1322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.428863][ T1322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.437760][ T1322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.495255][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 79.612224][ T1322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.690389][ T1322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.803035][ T1322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.879248][ T1322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.103477][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.113039][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.124343][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.133023][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.144547][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.605033][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.626916][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.665918][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.673901][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.767844][ T1322] bridge_slave_1: left allmulticast mode
[ 82.774076][ T1322] bridge_slave_1: left promiscuous mode
[ 82.783749][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.799653][ T1322] bridge_slave_0: left allmulticast mode
[ 82.815015][ T1322] bridge_slave_0: left promiscuous mode
[ 82.828045][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state
2025/11/01 21:42:05 executed programs: 0
[ 83.247024][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.256724][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.264897][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.274162][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.285932][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.352454][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.363212][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.373632][ T1322] bond0 (unregistering): Released all slaves
[ 83.503027][ T1322] hsr_slave_0: left promiscuous mode
[ 83.509425][ T1322] hsr_slave_1: left promiscuous mode
[ 83.515766][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.523194][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.535319][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.542839][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.563993][ T1322] veth1_macvtap: left promiscuous mode
[ 83.569984][ T1322] veth0_macvtap: left promiscuous mode
[ 83.576508][ T1322] veth1_vlan: left promiscuous mode
[ 83.581984][ T1322] veth0_vlan: left promiscuous mode
[ 84.009955][ T1322] team0 (unregistering): Port device team_slave_1 removed
[ 84.034330][ T1322] team0 (unregistering): Port device team_slave_0 removed
[ 84.431518][ T5955] chnl_net:caif_netlink_parms(): no params data found
[ 84.679862][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.693436][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.701419][ T5955] bridge_slave_0: entered allmulticast mode
[ 84.710526][ T5955] bridge_slave_0: entered promiscuous mode
[ 84.719988][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.727627][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.734867][ T5955] bridge_slave_1: entered allmulticast mode
[ 84.743025][ T5955] bridge_slave_1: entered promiscuous mode
[ 84.798213][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.811515][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.852980][ T5955] team0: Port device team_slave_0 added
[ 84.863170][ T5955] team0: Port device team_slave_1 added
[ 85.307202][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.314177][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.341376][ T5875] Bluetooth: hci0: command tx timeout
[ 85.347906][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.361310][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.370422][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.396797][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.485045][ T5955] hsr_slave_0: entered promiscuous mode
[ 85.498993][ T5955] hsr_slave_1: entered promiscuous mode
[ 86.483019][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.502552][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.519186][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.530650][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.651364][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.679511][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.693597][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.700863][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.718807][ T9] cfg80211: failed to load regulatory.db
[ 86.728243][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.735490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.001561][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.069939][ T5955] veth0_vlan: entered promiscuous mode
[ 87.087875][ T5955] veth1_vlan: entered promiscuous mode
[ 87.129723][ T5955] veth0_macvtap: entered promiscuous mode
[ 87.142365][ T5955] veth1_macvtap: entered promiscuous mode
[ 87.167155][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.186200][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.202970][ T1345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.217704][ T1345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.236447][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.247003][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.322402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.336431][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.381365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.390394][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.422832][ T5875] Bluetooth: hci0: command tx timeout
[ 87.696021][ T6048] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 87.865131][ T6048] usb 1-1: config 0 interface 0 has no altsetting 0
[ 87.876849][ T6048] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 87.886207][ T6048] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 87.895069][ T6048] usb 1-1: Product: syz
[ 87.900131][ T6048] usb 1-1: Manufacturer: syz
[ 87.904760][ T6048] usb 1-1: SerialNumber: syz
[ 87.916680][ T6048] usb 1-1: config 0 descriptor??
[ 87.939829][ T6048] usb 1-1: selecting invalid altsetting 0
[ 88.136541][ T6054] ==================================================================
[ 88.144671][ T6054] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460
[ 88.151969][ T6054] Write of size 264 at addr ffff88806e69a380 by task syz.0.17/6054
[ 88.159847][ T6054]
[ 88.162174][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 88.162186][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 88.162198][ T6054] Call Trace:
[ 88.162204][ T6054]
[ 88.162209][ T6054] dump_stack_lvl+0x189/0x250
[ 88.162225][ T6054] ? __virt_addr_valid+0x1c8/0x5c0
[ 88.162239][ T6054] ? rcu_is_watching+0x15/0xb0
[ 88.162250][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.162262][ T6054] ? rcu_is_watching+0x15/0xb0
[ 88.162272][ T6054] ? lock_release+0x4b/0x3e0
[ 88.162287][ T6054] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 88.162300][ T6054] ? __virt_addr_valid+0x1c8/0x5c0
[ 88.162312][ T6054] ? __virt_addr_valid+0x4a5/0x5c0
[ 88.162325][ T6054] print_report+0xca/0x240
[ 88.162338][ T6054] ? copy_to_urb+0x261/0x460
[ 88.162354][ T6054] kasan_report+0x118/0x150
[ 88.162365][ T6054] ? copy_to_urb+0x261/0x460
[ 88.162380][ T6054] kasan_check_range+0x2b0/0x2c0
[ 88.162389][ T6054] ? copy_to_urb+0x261/0x460
[ 88.162403][ T6054] __asan_memcpy+0x40/0x70
[ 88.162418][ T6054] copy_to_urb+0x261/0x460
[ 88.162432][ T6054] ? __kernel_text_address+0xd/0x40
[ 88.162447][ T6054] prepare_playback_urb+0x953/0x13d0
[ 88.162467][ T6054] ? __pfx_prepare_playback_urb+0x10/0x10
[ 88.162481][ T6054] ? lockdep_unlock+0x89/0x120
[ 88.162494][ T6054] ? validate_chain+0x897/0x2140
[ 88.162505][ T6054] ? __pfx_prepare_playback_urb+0x10/0x10
[ 88.162519][ T6054] prepare_outbound_urb+0x377/0xc50
[ 88.162537][ T6054] ? _copy_from_iter+0xc3d/0x1790
[ 88.162551][ T6054] ? __asan_memcpy+0x40/0x70
[ 88.162564][ T6054] ? __pfx_prepare_outbound_urb+0x10/0x10
[ 88.162581][ T6054] ? snd_usb_endpoint_start_quirk+0x1f7/0x320
[ 88.162597][ T6054] snd_usb_endpoint_start+0x4db/0x1530
[ 88.162611][ T6054] ? __pfx_snd_usb_endpoint_start+0x10/0x10
[ 88.162621][ T6054] ? do_raw_spin_lock+0x121/0x290
[ 88.162635][ T6054] start_endpoints+0xa1/0x280
[ 88.162648][ T6054] ? snd_usb_substream_playback_trigger+0x3ce/0x830
[ 88.162663][ T6054] snd_usb_substream_playback_trigger+0x3e0/0x830
[ 88.162678][ T6054] snd_pcm_do_start+0xb7/0x180
[ 88.162689][ T6054] snd_pcm_action+0xe7/0x240
[ 88.162704][ T6054] __snd_pcm_lib_xfer+0x1762/0x1d00
[ 88.162718][ T6054] ? __pfx_interleaved_copy+0x10/0x10
[ 88.162730][ T6054] ? __pfx_default_write_copy+0x10/0x10
[ 88.162743][ T6054] ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[ 88.162757][ T6054] snd_pcm_oss_write3+0x1bc/0x350
[ 88.162769][ T6054] snd_pcm_plug_write_transfer+0x2cb/0x4c0
[ 88.162784][ T6054] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10
[ 88.162797][ T6054] ? snd_pcm_plug_client_channels_buf+0x490/0x640
[ 88.162811][ T6054] snd_pcm_oss_write+0xa2b/0xf20
[ 88.162828][ T6054] ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 88.162838][ T6054] ? bpf_lsm_file_permission+0x9/0x20
[ 88.162850][ T6054] ? security_file_permission+0x75/0x290
[ 88.162861][ T6054] ? rw_verify_area+0x255/0x4d0
[ 88.162872][ T6054] ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 88.162882][ T6054] vfs_write+0x27e/0xb30
[ 88.162894][ T6054] ? __pfx_vfs_write+0x10/0x10
[ 88.162907][ T6054] ? __pfx_do_futex+0x10/0x10
[ 88.162926][ T6054] ksys_write+0x145/0x250
[ 88.162937][ T6054] ? __pfx_ksys_write+0x10/0x10
[ 88.162948][ T6054] ? do_syscall_64+0xbe/0xfa0
[ 88.162963][ T6054] do_syscall_64+0xfa/0xfa0
[ 88.162976][ T6054] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.162989][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.162998][ T6054] ? clear_bhb_loop+0x60/0xb0
[ 88.163009][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.163019][ T6054] RIP: 0033:0x7f59ec58efc9
[ 88.163032][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 88.163041][ T6054] RSP: 002b:00007ffd0d7f4958 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 88.163053][ T6054] RAX: ffffffffffffffda RBX: 00007f59ec7e5fa0 RCX: 00007f59ec58efc9
[ 88.163061][ T6054] RDX: 00000000000005ce RSI: 0000200000000e00 RDI: 0000000000000004
[ 88.163067][ T6054] RBP: 00007f59ec611f91 R08: 0000000000000000 R09: 0000000000000000
[ 88.163073][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.163079][ T6054] R13: 00007f59ec7e5fa0 R14: 00007f59ec7e5fa0 R15: 0000000000000003
[ 88.163089][ T6054]
[ 88.163093][ T6054]
[ 88.577862][ T6054] Allocated by task 6054:
[ 88.582200][ T6054] kasan_save_track+0x3e/0x80
[ 88.586979][ T6054] __kasan_kmalloc+0x93/0xb0
[ 88.591564][ T6054] __kmalloc_noprof+0x41d/0x800
[ 88.596413][ T6054] snd_usb_endpoint_set_params+0x1597/0x29c0
[ 88.602380][ T6054] snd_usb_hw_params+0xb12/0x12e0
[ 88.607402][ T6054] snd_pcm_hw_params+0x89d/0x1d30
[ 88.612422][ T6054] snd_pcm_oss_change_params_locked+0x21cd/0x3f70
[ 88.618824][ T6054] snd_pcm_oss_make_ready_locked+0x7d/0x300
[ 88.624705][ T6054] snd_pcm_oss_write+0x281/0xf20
[ 88.629632][ T6054] vfs_write+0x27e/0xb30
[ 88.633889][ T6054] ksys_write+0x145/0x250
[ 88.638206][ T6054] do_syscall_64+0xfa/0xfa0
[ 88.642700][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.648580][ T6054]
[ 88.650889][ T6054] The buggy address belongs to the object at ffff88806e69a380
[ 88.650889][ T6054] which belongs to the cache kmalloc-64 of size 64
[ 88.664755][ T6054] The buggy address is located 0 bytes inside of
[ 88.664755][ T6054] allocated 54-byte region [ffff88806e69a380, ffff88806e69a3b6)
[ 88.678635][ T6054]
[ 88.680966][ T6054] The buggy address belongs to the physical page:
[ 88.687370][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e69a
[ 88.696122][ T6054] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 88.703660][ T6054] page_type: f5(slab)
[ 88.707634][ T6054] raw: 00fff00000000000 ffff88801b0268c0 0000000000000000 0000000000000001
[ 88.716214][ T6054] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[ 88.724775][ T6054] page dumped because: kasan: bad access detected
[ 88.731179][ T6054] page_owner tracks the page as allocated
[ 88.736877][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5855, tgid 5855 (modprobe), ts 79184011870, free_ts 74616955267
[ 88.755707][ T6054] post_alloc_hook+0x240/0x2a0
[ 88.760468][ T6054] get_page_from_freelist+0x2365/0x2440
[ 88.766001][ T6054] __alloc_frozen_pages_noprof+0x181/0x370
[ 88.771795][ T6054] alloc_pages_mpol+0x232/0x4a0
[ 88.776629][ T6054] allocate_slab+0x96/0x350
[ 88.781124][ T6054] ___slab_alloc+0xe94/0x18a0
[ 88.785795][ T6054] __slab_alloc+0x65/0x100
[ 88.790213][ T6054] __kmalloc_noprof+0x47d/0x800
[ 88.795064][ T6054] tomoyo_encode+0x28b/0x550
[ 88.799652][ T6054] tomoyo_realpath_from_path+0x58d/0x5d0
[ 88.805286][ T6054] tomoyo_check_open_permission+0x1c1/0x3b0
[ 88.811180][ T6054] security_file_open+0xb1/0x270
[ 88.816130][ T6054] do_dentry_open+0x384/0x13f0
[ 88.820909][ T6054] vfs_open+0x3b/0x340
[ 88.824972][ T6054] path_openat+0x2ee5/0x3830
[ 88.829565][ T6054] do_filp_open+0x1fa/0x410
[ 88.834081][ T6054] page last free pid 5831 tgid 5831 stack trace:
[ 88.840410][ T6054] __free_frozen_pages+0xbc8/0xd30
[ 88.845528][ T6054] vfree+0x25a/0x400
[ 88.849417][ T6054] kcov_close+0x28/0x50
[ 88.853556][ T6054] __fput+0x44c/0xa70
[ 88.857524][ T6054] fput_close_sync+0x119/0x200
[ 88.862271][ T6054] __x64_sys_close+0x7f/0x110
[ 88.866946][ T6054] do_syscall_64+0xfa/0xfa0
[ 88.871442][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.877327][ T6054]
[ 88.879635][ T6054] Memory state around the buggy address:
[ 88.885251][ T6054] ffff88806e69a280: 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc fc
[ 88.893302][ T6054] ffff88806e69a300: 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc fc
[ 88.901355][ T6054] >ffff88806e69a380: 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc fc
[ 88.909399][ T6054] ^
[ 88.915020][ T6054] ffff88806e69a400: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 88.923068][ T6054] ffff88806e69a480: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 88.931111][ T6054] ==================================================================
[ 88.939154][ T6054] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.946349][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 88.955446][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 88.965500][ T6054] Call Trace:
[ 88.968791][ T6054]
[ 88.971728][ T6054] dump_stack_lvl+0x99/0x250
[ 88.976318][ T6054] ? __asan_memcpy+0x40/0x70
[ 88.980907][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.986100][ T6054] ? __pfx__printk+0x10/0x10
[ 88.990692][ T6054] vpanic+0x237/0x6d0
[ 88.994661][ T6054] ? __pfx_vpanic+0x10/0x10
[ 88.999157][ T6054] panic+0xb9/0xc0
[ 89.002870][ T6054] ? __pfx_panic+0x10/0x10
[ 89.007271][ T6054] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 89.013329][ T6054] ? is_module_address+0x17/0xf0
[ 89.018257][ T6054] ? copy_to_urb+0x261/0x460
[ 89.022846][ T6054] check_panic_on_warn+0x89/0xb0
[ 89.027788][ T6054] ? copy_to_urb+0x261/0x460
[ 89.032376][ T6054] end_report+0x78/0x160
[ 89.036607][ T6054] kasan_report+0x129/0x150
[ 89.041098][ T6054] ? copy_to_urb+0x261/0x460
[ 89.045683][ T6054] kasan_check_range+0x2b0/0x2c0
[ 89.050613][ T6054] ? copy_to_urb+0x261/0x460
[ 89.055201][ T6054] __asan_memcpy+0x40/0x70
[ 89.059611][ T6054] copy_to_urb+0x261/0x460
[ 89.064023][ T6054] ? __kernel_text_address+0xd/0x40
[ 89.069221][ T6054] prepare_playback_urb+0x953/0x13d0
[ 89.074509][ T6054] ? __pfx_prepare_playback_urb+0x10/0x10
[ 89.080222][ T6054] ? lockdep_unlock+0x89/0x120
[ 89.084988][ T6054] ? validate_chain+0x897/0x2140
[ 89.089918][ T6054] ? __pfx_prepare_playback_urb+0x10/0x10
[ 89.095632][ T6054] prepare_outbound_urb+0x377/0xc50
[ 89.100834][ T6054] ? _copy_from_iter+0xc3d/0x1790
[ 89.105851][ T6054] ? __asan_memcpy+0x40/0x70
[ 89.110436][ T6054] ? __pfx_prepare_outbound_urb+0x10/0x10
[ 89.116156][ T6054] ? snd_usb_endpoint_start_quirk+0x1f7/0x320
[ 89.122223][ T6054] snd_usb_endpoint_start+0x4db/0x1530
[ 89.127682][ T6054] ? __pfx_snd_usb_endpoint_start+0x10/0x10
[ 89.133567][ T6054] ? do_raw_spin_lock+0x121/0x290
[ 89.138586][ T6054] start_endpoints+0xa1/0x280
[ 89.143265][ T6054] ? snd_usb_substream_playback_trigger+0x3ce/0x830
[ 89.149848][ T6054] snd_usb_substream_playback_trigger+0x3e0/0x830
[ 89.156271][ T6054] snd_pcm_do_start+0xb7/0x180
[ 89.161048][ T6054] snd_pcm_action+0xe7/0x240
[ 89.165650][ T6054] __snd_pcm_lib_xfer+0x1762/0x1d00
[ 89.170848][ T6054] ? __pfx_interleaved_copy+0x10/0x10
[ 89.176216][ T6054] ? __pfx_default_write_copy+0x10/0x10
[ 89.181757][ T6054] ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[ 89.187393][ T6054] snd_pcm_oss_write3+0x1bc/0x350
[ 89.192411][ T6054] snd_pcm_plug_write_transfer+0x2cb/0x4c0
[ 89.198213][ T6054] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10
[ 89.204540][ T6054] ? snd_pcm_plug_client_channels_buf+0x490/0x640
[ 89.210956][ T6054] snd_pcm_oss_write+0xa2b/0xf20
[ 89.215890][ T6054] ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 89.221340][ T6054] ? bpf_lsm_file_permission+0x9/0x20
[ 89.226703][ T6054] ? security_file_permission+0x75/0x290
[ 89.232328][ T6054] ? rw_verify_area+0x255/0x4d0
[ 89.237176][ T6054] ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 89.242635][ T6054] vfs_write+0x27e/0xb30
[ 89.246875][ T6054] ? __pfx_vfs_write+0x10/0x10
[ 89.251633][ T6054] ? __pfx_do_futex+0x10/0x10
[ 89.256313][ T6054] ksys_write+0x145/0x250
[ 89.260635][ T6054] ? __pfx_ksys_write+0x10/0x10
[ 89.265478][ T6054] ? do_syscall_64+0xbe/0xfa0
[ 89.270150][ T6054] do_syscall_64+0xfa/0xfa0
[ 89.274646][ T6054] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.279840][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.285905][ T6054] ? clear_bhb_loop+0x60/0xb0
[ 89.290575][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.296459][ T6054] RIP: 0033:0x7f59ec58efc9
[ 89.300872][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 89.320558][ T6054] RSP: 002b:00007ffd0d7f4958 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 89.328967][ T6054] RAX: ffffffffffffffda RBX: 00007f59ec7e5fa0 RCX: 00007f59ec58efc9
[ 89.337018][ T6054] RDX: 00000000000005ce RSI: 0000200000000e00 RDI: 0000000000000004
[ 89.344978][ T6054] RBP: 00007f59ec611f91 R08: 0000000000000000 R09: 0000000000000000
[ 89.352948][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 89.360908][ T6054] R13: 00007f59ec7e5fa0 R14: 00007f59ec7e5fa0 R15: 0000000000000003
[ 89.368880][ T6054]
[ 89.372161][ T6054] Kernel Offset: disabled
[ 89.376477][ T6054] Rebooting in 86400 seconds..