Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts.
2025/09/20 02:46:05 parsed 1 programs
[ 76.909361][ T5871] cgroup: Unknown subsys name 'net'
[ 77.058723][ T5871] cgroup: Unknown subsys name 'cpuset'
[ 77.067519][ T5871] cgroup: Unknown subsys name 'rlimit'
[ 78.557876][ T5871] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.087150][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 81.810120][ T5893] chnl_net:caif_netlink_parms(): no params data found
[ 81.906820][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.914405][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.922225][ T5893] bridge_slave_0: entered allmulticast mode
[ 81.930187][ T5893] bridge_slave_0: entered promiscuous mode
[ 81.940326][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.947518][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.955132][ T5893] bridge_slave_1: entered allmulticast mode
[ 81.963061][ T5893] bridge_slave_1: entered promiscuous mode
[ 81.995787][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.008365][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.038375][ T5893] team0: Port device team_slave_0 added
[ 82.047412][ T5893] team0: Port device team_slave_1 added
[ 82.078813][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.086414][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.112323][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.127331][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.134283][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.160797][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.230218][ T5893] hsr_slave_0: entered promiscuous mode
[ 82.237651][ T5893] hsr_slave_1: entered promiscuous mode
[ 82.455078][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.469009][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.481758][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.493141][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.522889][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.530059][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.537936][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.545011][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.598067][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.615635][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.624749][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.640573][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.653128][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.660298][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.676393][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.683559][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.843104][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.888137][ T5893] veth0_vlan: entered promiscuous mode
[ 82.900424][ T5893] veth1_vlan: entered promiscuous mode
[ 82.931138][ T5893] veth0_macvtap: entered promiscuous mode
[ 82.941340][ T5893] veth1_macvtap: entered promiscuous mode
[ 82.957315][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.971830][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.986601][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.998015][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.008885][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.026196][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.146836][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.250758][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.310116][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.375227][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.098919][ T5966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.106733][ T5966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.114093][ T5966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.123687][ T5966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.131522][ T5966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.343454][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.352275][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.378337][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.387719][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/20 02:46:16 executed programs: 0
[ 85.751756][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.760516][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.769672][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.778047][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.785967][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.971812][ T36] bridge_slave_1: left allmulticast mode
[ 85.981176][ T36] bridge_slave_1: left promiscuous mode
[ 85.988652][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.005318][ T36] bridge_slave_0: left allmulticast mode
[ 86.012473][ T36] bridge_slave_0: left promiscuous mode
[ 86.024100][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.214093][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.225235][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.236006][ T36] bond0 (unregistering): Released all slaves
[ 86.254395][ T5981] chnl_net:caif_netlink_parms(): no params data found
[ 86.353490][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.361020][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.368647][ T5981] bridge_slave_0: entered allmulticast mode
[ 86.376183][ T5981] bridge_slave_0: entered promiscuous mode
[ 86.384864][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.392099][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.399305][ T5981] bridge_slave_1: entered allmulticast mode
[ 86.407092][ T5981] bridge_slave_1: entered promiscuous mode
[ 86.432306][ T36] hsr_slave_0: left promiscuous mode
[ 86.438161][ T36] hsr_slave_1: left promiscuous mode
[ 86.443992][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.451903][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.460001][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.467873][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.482821][ T36] veth1_macvtap: left promiscuous mode
[ 86.488447][ T36] veth0_macvtap: left promiscuous mode
[ 86.494337][ T36] veth1_vlan: left promiscuous mode
[ 86.499821][ T36] veth0_vlan: left promiscuous mode
[ 86.762356][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 86.785336][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 87.027328][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.043298][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.092435][ T5981] team0: Port device team_slave_0 added
[ 87.101616][ T5981] team0: Port device team_slave_1 added
[ 87.158255][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.165223][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.192551][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.219075][ T983] cfg80211: failed to load regulatory.db
[ 87.233523][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.241370][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.267826][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.358717][ T5981] hsr_slave_0: entered promiscuous mode
[ 87.365177][ T5981] hsr_slave_1: entered promiscuous mode
[ 87.856461][ T5966] Bluetooth: hci0: command tx timeout
[ 88.422887][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.511675][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.524224][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.546047][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.745025][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.767759][ T5981] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.792477][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.799768][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.829479][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.836721][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.106091][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.163718][ T5981] veth0_vlan: entered promiscuous mode
[ 89.179203][ T5981] veth1_vlan: entered promiscuous mode
[ 89.219097][ T5981] veth0_macvtap: entered promiscuous mode
[ 89.233687][ T5981] veth1_macvtap: entered promiscuous mode
[ 89.258599][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.274728][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.299651][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.309844][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.327790][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.352211][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.422820][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.443649][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.479456][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.487987][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.815826][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 89.935643][ T5966] Bluetooth: hci0: command tx timeout
[ 89.975506][ T43] usb 1-1: Using ep0 maxpacket: 32
[ 89.983232][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 89.993306][ T43] usb 1-1: config 2 has an invalid interface number: 240 but max is 0
[ 90.001646][ T43] usb 1-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config
[ 90.011923][ T43] usb 1-1: config 2 has no interface number 0
[ 90.018068][ T43] usb 1-1: config 2 interface 240 has no altsetting 0
[ 90.027591][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=cf.f0
[ 90.036698][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 90.044680][ T43] usb 1-1: Product: syz
[ 90.048981][ T43] usb 1-1: Manufacturer: syz
[ 90.053575][ T43] usb 1-1: SerialNumber: syz
[ 90.284397][ T43] usb 1-1: USB disconnect, device number 2
[ 90.296636][ T43] ==================================================================
[ 90.304723][ T43] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0
[ 90.312359][ T43] Read of size 8 at addr ffff888028fe98a0 by task kworker/1:1/43
[ 90.320076][ T43]
[ 90.322421][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 90.322433][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 90.322440][ T43] Workqueue: usb_hub_wq hub_event
[ 90.322464][ T43] Call Trace:
[ 90.322470][ T43]
[ 90.322474][ T43] dump_stack_lvl+0x189/0x250
[ 90.322488][ T43] ? __kasan_check_byte+0x12/0x40
[ 90.322502][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.322513][ T43] ? lock_release+0x4b/0x3e0
[ 90.322528][ T43] ? __virt_addr_valid+0x4a5/0x5c0
[ 90.322540][ T43] print_report+0xca/0x240
[ 90.322550][ T43] ? hdm_disconnect+0x10d/0x1c0
[ 90.322562][ T43] kasan_report+0x118/0x150
[ 90.322575][ T43] ? hdm_disconnect+0x10d/0x1c0
[ 90.322587][ T43] hdm_disconnect+0x10d/0x1c0
[ 90.322600][ T43] usb_unbind_interface+0x26e/0x910
[ 90.322616][ T43] ? __pfx_usb_unbind_interface+0x10/0x10
[ 90.322630][ T43] device_release_driver_internal+0x4d9/0x800
[ 90.322644][ T43] bus_remove_device+0x34d/0x410
[ 90.322654][ T43] device_del+0x511/0x8e0
[ 90.322666][ T43] ? __pm_runtime_barrier+0x212/0x460
[ 90.322679][ T43] ? __pfx_device_del+0x10/0x10
[ 90.322689][ T43] ? __pfx___mutex_lock+0x10/0x10
[ 90.322701][ T43] usb_disable_device+0x3e9/0x8a0
[ 90.322716][ T43] usb_disconnect+0x330/0x950
[ 90.322729][ T43] hub_event+0x1cf5/0x4a20
[ 90.322746][ T43] ? do_raw_spin_lock+0x121/0x290
[ 90.322758][ T43] ? register_lock_class+0x51/0x320
[ 90.322774][ T43] ? __pfx_hub_event+0x10/0x10
[ 90.322786][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 90.322797][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 90.322811][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 90.322819][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 90.322827][ T43] process_scheduled_works+0xae1/0x17b0
[ 90.322841][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 90.322857][ T43] worker_thread+0x8a0/0xda0
[ 90.322867][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 90.322883][ T43] ? __kthread_parkme+0x7b/0x200
[ 90.322894][ T43] kthread+0x70e/0x8a0
[ 90.322906][ T43] ? __pfx_worker_thread+0x10/0x10
[ 90.322915][ T43] ? __pfx_kthread+0x10/0x10
[ 90.322926][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 90.322939][ T43] ? lockdep_hardirqs_on+0x9c/0x150
[ 90.322949][ T43] ? __pfx_kthread+0x10/0x10
[ 90.322960][ T43] ret_from_fork+0x439/0x7d0
[ 90.322970][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 90.322980][ T43] ? __switch_to_asm+0x39/0x70
[ 90.322992][ T43] ? __switch_to_asm+0x33/0x70
[ 90.323003][ T43] ? __pfx_kthread+0x10/0x10
[ 90.323014][ T43] ret_from_fork_asm+0x1a/0x30
[ 90.323029][ T43]
[ 90.323032][ T43]
[ 90.583590][ T43] Allocated by task 43:
[ 90.587720][ T43] kasan_save_track+0x3e/0x80
[ 90.592375][ T43] __kasan_kmalloc+0x93/0xb0
[ 90.596938][ T43] __kmalloc_cache_noprof+0x230/0x3d0
[ 90.602288][ T43] hdm_probe+0x96/0x1400
[ 90.606518][ T43] usb_probe_interface+0x665/0xc30
[ 90.611645][ T43] really_probe+0x26a/0x9e0
[ 90.616135][ T43] __driver_probe_device+0x18c/0x2f0
[ 90.621398][ T43] driver_probe_device+0x4f/0x430
[ 90.626407][ T43] __device_attach_driver+0x2ce/0x530
[ 90.631751][ T43] bus_for_each_drv+0x251/0x2e0
[ 90.636579][ T43] __device_attach+0x2b8/0x400
[ 90.641324][ T43] bus_probe_device+0x185/0x260
[ 90.646234][ T43] device_add+0x7b6/0xb50
[ 90.650625][ T43] usb_set_configuration+0x1a87/0x20e0
[ 90.656161][ T43] usb_generic_driver_probe+0x8d/0x150
[ 90.661610][ T43] usb_probe_device+0x1c4/0x390
[ 90.666446][ T43] really_probe+0x26a/0x9e0
[ 90.670929][ T43] __driver_probe_device+0x18c/0x2f0
[ 90.676189][ T43] driver_probe_device+0x4f/0x430
[ 90.681216][ T43] __device_attach_driver+0x2ce/0x530
[ 90.686587][ T43] bus_for_each_drv+0x251/0x2e0
[ 90.691421][ T43] __device_attach+0x2b8/0x400
[ 90.696167][ T43] bus_probe_device+0x185/0x260
[ 90.700996][ T43] device_add+0x7b6/0xb50
[ 90.705310][ T43] usb_new_device+0xa39/0x16f0
[ 90.710071][ T43] hub_event+0x2958/0x4a20
[ 90.714561][ T43] process_scheduled_works+0xae1/0x17b0
[ 90.720086][ T43] worker_thread+0x8a0/0xda0
[ 90.724654][ T43] kthread+0x70e/0x8a0
[ 90.728793][ T43] ret_from_fork+0x439/0x7d0
[ 90.733361][ T43] ret_from_fork_asm+0x1a/0x30
[ 90.738110][ T43]
[ 90.740418][ T43] Freed by task 43:
[ 90.744205][ T43] kasan_save_track+0x3e/0x80
[ 90.748868][ T43] kasan_save_free_info+0x46/0x50
[ 90.753873][ T43] __kasan_slab_free+0x5b/0x80
[ 90.758716][ T43] kfree+0x18e/0x440
[ 90.762617][ T43] device_release+0x9c/0x1c0
[ 90.767196][ T43] kobject_put+0x22b/0x480
[ 90.771592][ T43] hdm_disconnect+0xf3/0x1c0
[ 90.776171][ T43] usb_unbind_interface+0x26e/0x910
[ 90.781379][ T43] device_release_driver_internal+0x4d9/0x800
[ 90.787440][ T43] bus_remove_device+0x34d/0x410
[ 90.792368][ T43] device_del+0x511/0x8e0
[ 90.796680][ T43] usb_disable_device+0x3e9/0x8a0
[ 90.801689][ T43] usb_disconnect+0x330/0x950
[ 90.806352][ T43] hub_event+0x1cf5/0x4a20
[ 90.810766][ T43] process_scheduled_works+0xae1/0x17b0
[ 90.816390][ T43] worker_thread+0x8a0/0xda0
[ 90.820965][ T43] kthread+0x70e/0x8a0
[ 90.825030][ T43] ret_from_fork+0x439/0x7d0
[ 90.829606][ T43] ret_from_fork_asm+0x1a/0x30
[ 90.834356][ T43]
[ 90.836756][ T43] The buggy address belongs to the object at ffff888028fe8000
[ 90.836756][ T43] which belongs to the cache kmalloc-8k of size 8192
[ 90.850809][ T43] The buggy address is located 6304 bytes inside of
[ 90.850809][ T43] freed 8192-byte region [ffff888028fe8000, ffff888028fea000)
[ 90.864785][ T43]
[ 90.867130][ T43] The buggy address belongs to the physical page:
[ 90.873528][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28fe8
[ 90.882269][ T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 90.890753][ T43] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 90.898711][ T43] page_type: f5(slab)
[ 90.902667][ T43] raw: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001
[ 90.911234][ T43] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 90.919820][ T43] head: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001
[ 90.928499][ T43] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[ 90.937153][ T43] head: 00fff00000000003 ffffea0000a3fa01 00000000ffffffff 00000000ffffffff
[ 90.945806][ T43] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 90.954473][ T43] page dumped because: kasan: bad access detected
[ 90.960871][ T43] page_owner tracks the page as allocated
[ 90.966563][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5694, tgid 5694 (sshd), ts 58331838347, free_ts 58290006297
[ 90.986422][ T43] post_alloc_hook+0x240/0x2a0
[ 90.991176][ T43] get_page_from_freelist+0x21e4/0x22c0
[ 90.996694][ T43] __alloc_frozen_pages_noprof+0x181/0x370
[ 91.002476][ T43] alloc_pages_mpol+0x232/0x4a0
[ 91.007314][ T43] allocate_slab+0x8a/0x370
[ 91.011813][ T43] ___slab_alloc+0xbeb/0x1420
[ 91.016475][ T43] __kmalloc_cache_noprof+0x296/0x3d0
[ 91.021826][ T43] tomoyo_init_log+0x111f/0x1f70
[ 91.026740][ T43] tomoyo_supervisor+0x340/0x1480
[ 91.031740][ T43] tomoyo_env_perm+0x149/0x1e0
[ 91.036480][ T43] tomoyo_find_next_domain+0x15cf/0x1aa0
[ 91.042087][ T43] tomoyo_bprm_check_security+0x11c/0x180
[ 91.047795][ T43] security_bprm_check+0x89/0x270
[ 91.052794][ T43] bprm_execve+0x8ee/0x1450
[ 91.057283][ T43] do_execveat_common+0x510/0x6a0
[ 91.062305][ T43] __x64_sys_execve+0x94/0xb0
[ 91.066975][ T43] page last free pid 5693 tgid 5693 stack trace:
[ 91.073276][ T43] __free_frozen_pages+0xbc4/0xd30
[ 91.078373][ T43] __put_partials+0x156/0x1a0
[ 91.083023][ T43] put_cpu_partial+0x17c/0x250
[ 91.087762][ T43] __slab_free+0x2d5/0x3c0
[ 91.092156][ T43] qlist_free_all+0x97/0x140
[ 91.096719][ T43] kasan_quarantine_reduce+0x148/0x160
[ 91.102150][ T43] __kasan_slab_alloc+0x22/0x80
[ 91.107024][ T43] __kmalloc_cache_noprof+0x1be/0x3d0
[ 91.112401][ T43] tomoyo_init_log+0x111f/0x1f70
[ 91.117488][ T43] tomoyo_supervisor+0x340/0x1480
[ 91.122487][ T43] tomoyo_env_perm+0x149/0x1e0
[ 91.127232][ T43] tomoyo_find_next_domain+0x15cf/0x1aa0
[ 91.132860][ T43] tomoyo_bprm_check_security+0x11c/0x180
[ 91.138562][ T43] security_bprm_check+0x89/0x270
[ 91.143562][ T43] bprm_execve+0x8ee/0x1450
[ 91.148040][ T43] do_execveat_common+0x510/0x6a0
[ 91.153061][ T43]
[ 91.155358][ T43] Memory state around the buggy address:
[ 91.160970][ T43] ffff888028fe9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.169007][ T43] ffff888028fe9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.177042][ T43] >ffff888028fe9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.185076][ T43] ^
[ 91.190167][ T43] ffff888028fe9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.198290][ T43] ffff888028fe9980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.206331][ T43] ==================================================================
[ 91.226145][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 91.233370][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 91.242568][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 91.252625][ T43] Workqueue: usb_hub_wq hub_event
[ 91.257643][ T43] Call Trace:
[ 91.260902][ T43]
[ 91.263811][ T43] dump_stack_lvl+0x99/0x250
[ 91.268385][ T43] ? __asan_memcpy+0x40/0x70
[ 91.272952][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 91.278126][ T43] ? __pfx__printk+0x10/0x10
[ 91.282697][ T43] vpanic+0x281/0x750
[ 91.286659][ T43] ? preempt_schedule+0xae/0xc0
[ 91.291506][ T43] ? __pfx_vpanic+0x10/0x10
[ 91.295999][ T43] ? preempt_schedule_common+0x83/0xd0
[ 91.301445][ T43] ? preempt_schedule+0xae/0xc0
[ 91.306276][ T43] ? __pfx_preempt_schedule+0x10/0x10
[ 91.311638][ T43] panic+0xb9/0xc0
[ 91.315423][ T43] ? __pfx_panic+0x10/0x10
[ 91.319818][ T43] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 91.325690][ T43] ? hdm_disconnect+0x10d/0x1c0
[ 91.330518][ T43] check_panic_on_warn+0x89/0xb0
[ 91.335530][ T43] ? hdm_disconnect+0x10d/0x1c0
[ 91.340381][ T43] end_report+0x78/0x160
[ 91.344625][ T43] kasan_report+0x129/0x150
[ 91.349112][ T43] ? hdm_disconnect+0x10d/0x1c0
[ 91.353955][ T43] hdm_disconnect+0x10d/0x1c0
[ 91.358615][ T43] usb_unbind_interface+0x26e/0x910
[ 91.363803][ T43] ? __pfx_usb_unbind_interface+0x10/0x10
[ 91.369505][ T43] device_release_driver_internal+0x4d9/0x800
[ 91.375556][ T43] bus_remove_device+0x34d/0x410
[ 91.380475][ T43] device_del+0x511/0x8e0
[ 91.384785][ T43] ? __pm_runtime_barrier+0x212/0x460
[ 91.390144][ T43] ? __pfx_device_del+0x10/0x10
[ 91.394978][ T43] ? __pfx___mutex_lock+0x10/0x10
[ 91.399993][ T43] usb_disable_device+0x3e9/0x8a0
[ 91.405015][ T43] usb_disconnect+0x330/0x950
[ 91.409675][ T43] hub_event+0x1cf5/0x4a20
[ 91.414083][ T43] ? do_raw_spin_lock+0x121/0x290
[ 91.419091][ T43] ? register_lock_class+0x51/0x320
[ 91.424278][ T43] ? __pfx_hub_event+0x10/0x10
[ 91.429026][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 91.434728][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 91.439916][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 91.445618][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 91.451318][ T43] process_scheduled_works+0xae1/0x17b0
[ 91.456863][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 91.462830][ T43] worker_thread+0x8a0/0xda0
[ 91.467403][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 91.473737][ T43] ? __kthread_parkme+0x7b/0x200
[ 91.478665][ T43] kthread+0x70e/0x8a0
[ 91.482721][ T43] ? __pfx_worker_thread+0x10/0x10
[ 91.487816][ T43] ? __pfx_kthread+0x10/0x10
[ 91.492390][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 91.497572][ T43] ? lockdep_hardirqs_on+0x9c/0x150
[ 91.502752][ T43] ? __pfx_kthread+0x10/0x10
[ 91.507327][ T43] ret_from_fork+0x439/0x7d0
[ 91.511896][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 91.516988][ T43] ? __switch_to_asm+0x39/0x70
[ 91.521742][ T43] ? __switch_to_asm+0x33/0x70
[ 91.526489][ T43] ? __pfx_kthread+0x10/0x10
[ 91.531059][ T43] ret_from_fork_asm+0x1a/0x30
[ 91.535812][ T43]
[ 91.538945][ T43] Kernel Offset: disabled
[ 91.543247][ T43] Rebooting in 86400 seconds..