Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts.
2025/09/09 10:32:14 parsed 1 programs
[ 91.734784][ T5865] cgroup: Unknown subsys name 'net'
[ 91.911837][ T5865] cgroup: Unknown subsys name 'cpuset'
[ 91.921885][ T5865] cgroup: Unknown subsys name 'rlimit'
[ 92.000013][ T929] cfg80211: failed to load regulatory.db
[ 93.686330][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.854891][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 97.346768][ T5889] chnl_net:caif_netlink_parms(): no params data found
[ 97.433152][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.441428][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.448808][ T5889] bridge_slave_0: entered allmulticast mode
[ 97.456173][ T5889] bridge_slave_0: entered promiscuous mode
[ 97.465548][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.472839][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.480170][ T5889] bridge_slave_1: entered allmulticast mode
[ 97.487424][ T5889] bridge_slave_1: entered promiscuous mode
[ 97.521965][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.533951][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.570043][ T5889] team0: Port device team_slave_0 added
[ 97.578080][ T5889] team0: Port device team_slave_1 added
[ 97.610095][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.617067][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.643084][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.656222][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.664322][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.690306][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.739650][ T5889] hsr_slave_0: entered promiscuous mode
[ 97.746432][ T5889] hsr_slave_1: entered promiscuous mode
[ 97.909009][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.921939][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.932828][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.944023][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.979643][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.986914][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.995031][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.002219][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.064085][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.082859][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.092257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.110151][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.125366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.132656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.148208][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.155389][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.348161][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.393949][ T5889] veth0_vlan: entered promiscuous mode
[ 98.410991][ T5889] veth1_vlan: entered promiscuous mode
[ 98.445823][ T5889] veth0_macvtap: entered promiscuous mode
[ 98.455992][ T5889] veth1_macvtap: entered promiscuous mode
[ 98.477243][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.492740][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.509048][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.520365][ T1006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.530135][ T1006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.540384][ T1006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.700768][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.772379][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.840802][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.924928][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.586263][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.595669][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.630792][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.639542][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.447605][ T12] bridge_slave_1: left allmulticast mode
[ 101.468369][ T12] bridge_slave_1: left promiscuous mode
[ 101.475252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.531887][ T12] bridge_slave_0: left allmulticast mode
[ 101.543261][ T12] bridge_slave_0: left promiscuous mode
[ 101.551011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.884472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.897696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.910614][ T12] bond0 (unregistering): Released all slaves
[ 102.083399][ T12] hsr_slave_0: left promiscuous mode
[ 102.102255][ T12] hsr_slave_1: left promiscuous mode
[ 102.109719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.117307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.127060][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.143327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.156544][ T5980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.165673][ T5980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.170595][ T12] veth1_macvtap: left promiscuous mode
[ 102.175513][ T5980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.178540][ T12] veth0_macvtap: left promiscuous mode
[ 102.191883][ T12] veth1_vlan: left promiscuous mode
[ 102.192084][ T5980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.197394][ T12] veth0_vlan: left promiscuous mode
[ 102.205860][ T5980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.524342][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 102.551899][ T12] team0 (unregistering): Port device team_slave_0 removed
2025/09/09 10:32:29 executed programs: 0
[ 103.823358][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.832743][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.845201][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.859751][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.867747][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.488657][ T6003] chnl_net:caif_netlink_parms(): no params data found
[ 104.748869][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.756564][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.782682][ T6003] bridge_slave_0: entered allmulticast mode
[ 104.791449][ T6003] bridge_slave_0: entered promiscuous mode
[ 104.802568][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.810782][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.819336][ T6003] bridge_slave_1: entered allmulticast mode
[ 104.827331][ T6003] bridge_slave_1: entered promiscuous mode
[ 104.955022][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.968493][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.012503][ T6003] team0: Port device team_slave_0 added
[ 105.022232][ T6003] team0: Port device team_slave_1 added
[ 105.092821][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.100006][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.126644][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.150127][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.157135][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.184038][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.312507][ T6003] hsr_slave_0: entered promiscuous mode
[ 105.323276][ T6003] hsr_slave_1: entered promiscuous mode
[ 105.918744][ T5980] Bluetooth: hci0: command tx timeout
[ 106.001337][ T6003] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.014033][ T6003] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.027625][ T6003] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.040367][ T6003] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.159300][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.190553][ T6003] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.206715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.213945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.241954][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.249223][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.519750][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.579109][ T6003] veth0_vlan: entered promiscuous mode
[ 106.595893][ T6003] veth1_vlan: entered promiscuous mode
[ 106.640101][ T6003] veth0_macvtap: entered promiscuous mode
[ 106.652878][ T6003] veth1_macvtap: entered promiscuous mode
[ 106.682011][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.701004][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.721244][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.741770][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.760490][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.790146][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.845507][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.860022][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.902523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.913095][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.228519][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 107.398194][ T43] usb 1-1: Using ep0 maxpacket: 32
[ 107.415104][ T43] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 107.424056][ T43] usb 1-1: config 0 has no interface number 0
[ 107.430548][ T43] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 107.445145][ T43] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 107.454750][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 107.463124][ T43] usb 1-1: Product: syz
[ 107.467401][ T43] usb 1-1: Manufacturer: syz
[ 107.473872][ T43] usb 1-1: SerialNumber: syz
[ 107.483631][ T43] usb 1-1: config 0 descriptor??
[ 107.498199][ T43] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 107.508172][ T43] em28xx 1-1:0.132: Video interface 132 found:
[ 107.762783][ T43] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 107.844982][ T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 107.853903][ T43] em28xx 1-1:0.132: board has no eeprom
[ 107.918192][ T43] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 107.926157][ T43] em28xx 1-1:0.132: analog set to bulk mode.
[ 107.933061][ T929] em28xx 1-1:0.132: Registering V4L2 extension
[ 107.946804][ T43] usb 1-1: USB disconnect, device number 2
[ 107.954434][ T43] em28xx 1-1:0.132: Disconnecting em28xx
[ 107.999373][ T5980] Bluetooth: hci0: command tx timeout
[ 108.048530][ T929] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 108.055742][ T929] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 108.062954][ T929] em28xx 1-1:0.132: No AC97 audio processor
[ 108.076423][ T929] usb 1-1: Decoder not found
[ 108.081310][ T929] em28xx 1-1:0.132: failed to create media graph
[ 108.088297][ T929] em28xx 1-1:0.132: V4L2 device video103 deregistered
[ 108.098260][ T929] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 108.107571][ T43] em28xx 1-1:0.132: Closing input extension
[ 108.116287][ T43] ==================================================================
[ 108.124374][ T43] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0
[ 108.132723][ T43] Read of size 4 at addr ffff88807f4874f0 by task kworker/1:1/43
[ 108.140441][ T43]
[ 108.142779][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 108.142796][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 108.142807][ T43] Workqueue: usb_hub_wq hub_event
[ 108.142831][ T43] Call Trace:
[ 108.142839][ T43]
[ 108.142845][ T43] dump_stack_lvl+0x189/0x250
[ 108.142869][ T43] ? rcu_is_watching+0x15/0xb0
[ 108.142885][ T43] ? __kasan_check_byte+0x12/0x40
[ 108.142902][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.142922][ T43] ? rcu_is_watching+0x15/0xb0
[ 108.142939][ T43] ? lock_release+0x4b/0x3e0
[ 108.142955][ T43] ? __virt_addr_valid+0x1c8/0x5c0
[ 108.142976][ T43] ? __virt_addr_valid+0x4a5/0x5c0
[ 108.142996][ T43] print_report+0xca/0x240
[ 108.143010][ T43] ? media_devnode_unregister+0xe2/0xf0
[ 108.143028][ T43] kasan_report+0x118/0x150
[ 108.143044][ T43] ? media_devnode_unregister+0xe2/0xf0
[ 108.143065][ T43] media_devnode_unregister+0xe2/0xf0
[ 108.143082][ T43] media_device_unregister+0x37c/0x400
[ 108.143103][ T43] em28xx_release_resources+0xac/0x240
[ 108.143129][ T43] em28xx_usb_disconnect+0x19f/0x2f0
[ 108.143150][ T43] usb_unbind_interface+0x26e/0x910
[ 108.143169][ T43] ? __pfx_usb_unbind_interface+0x10/0x10
[ 108.143185][ T43] device_release_driver_internal+0x4d6/0x800
[ 108.143206][ T43] bus_remove_device+0x34d/0x410
[ 108.143230][ T43] device_del+0x511/0x8e0
[ 108.143248][ T43] ? __pfx_device_del+0x10/0x10
[ 108.143262][ T43] ? kobject_put+0x446/0x480
[ 108.143287][ T43] usb_disable_device+0x3e9/0x8a0
[ 108.143304][ T43] usb_disconnect+0x330/0x950
[ 108.143328][ T43] hub_event+0x1cf5/0x4a20
[ 108.143351][ T43] ? do_raw_spin_lock+0x121/0x290
[ 108.143371][ T43] ? register_lock_class+0x51/0x320
[ 108.143391][ T43] ? __pfx_hub_event+0x10/0x10
[ 108.143404][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 108.143423][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 108.143441][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 108.143456][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 108.143472][ T43] process_scheduled_works+0xae1/0x17b0
[ 108.143499][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 108.143521][ T43] worker_thread+0x8a0/0xda0
[ 108.143547][ T43] kthread+0x711/0x8a0
[ 108.143567][ T43] ? __pfx_worker_thread+0x10/0x10
[ 108.143584][ T43] ? __pfx_kthread+0x10/0x10
[ 108.143603][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 108.143621][ T43] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.143639][ T43] ? __pfx_kthread+0x10/0x10
[ 108.143658][ T43] ret_from_fork+0x47c/0x820
[ 108.143675][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 108.143693][ T43] ? __switch_to_asm+0x39/0x70
[ 108.143707][ T43] ? __switch_to_asm+0x33/0x70
[ 108.143720][ T43] ? __pfx_kthread+0x10/0x10
[ 108.143740][ T43] ret_from_fork_asm+0x1a/0x30
[ 108.143761][ T43]
[ 108.143766][ T43]
[ 108.421120][ T43] Allocated by task 43:
[ 108.425272][ T43] kasan_save_track+0x3e/0x80
[ 108.429977][ T43] __kasan_kmalloc+0x93/0xb0
[ 108.434572][ T43] __kmalloc_cache_noprof+0x3d5/0x6f0
[ 108.439947][ T43] __media_device_register+0x58/0x280
[ 108.445325][ T43] em28xx_usb_probe+0x1764/0x2a20
[ 108.450359][ T43] usb_probe_interface+0x665/0xc30
[ 108.455481][ T43] really_probe+0x26a/0x9e0
[ 108.459990][ T43] __driver_probe_device+0x18c/0x2f0
[ 108.465277][ T43] driver_probe_device+0x4f/0x430
[ 108.470304][ T43] __device_attach_driver+0x2ce/0x530
[ 108.475682][ T43] bus_for_each_drv+0x251/0x2e0
[ 108.480542][ T43] __device_attach+0x2b8/0x400
[ 108.485313][ T43] bus_probe_device+0x185/0x260
[ 108.490173][ T43] device_add+0x7b6/0xb50
[ 108.494528][ T43] usb_set_configuration+0x1a87/0x20e0
[ 108.499991][ T43] usb_generic_driver_probe+0x8d/0x150
[ 108.505452][ T43] usb_probe_device+0x1c1/0x390
[ 108.510316][ T43] really_probe+0x26a/0x9e0
[ 108.514840][ T43] __driver_probe_device+0x18c/0x2f0
[ 108.520143][ T43] driver_probe_device+0x4f/0x430
[ 108.525188][ T43] __device_attach_driver+0x2ce/0x530
[ 108.530606][ T43] bus_for_each_drv+0x251/0x2e0
[ 108.535588][ T43] __device_attach+0x2b8/0x400
[ 108.540357][ T43] bus_probe_device+0x185/0x260
[ 108.545219][ T43] device_add+0x7b6/0xb50
[ 108.549548][ T43] usb_new_device+0xa39/0x16f0
[ 108.554320][ T43] hub_event+0x2958/0x4a20
[ 108.558736][ T43] process_scheduled_works+0xae1/0x17b0
[ 108.564313][ T43] worker_thread+0x8a0/0xda0
[ 108.568910][ T43] kthread+0x711/0x8a0
[ 108.572985][ T43] ret_from_fork+0x47c/0x820
[ 108.577751][ T43] ret_from_fork_asm+0x1a/0x30
[ 108.582556][ T43]
[ 108.584881][ T43] Freed by task 43:
[ 108.588680][ T43] kasan_save_track+0x3e/0x80
[ 108.593358][ T43] __kasan_save_free_info+0x46/0x50
[ 108.598564][ T43] __kasan_slab_free+0x5b/0x80
[ 108.603328][ T43] kfree+0x199/0x6d0
[ 108.607230][ T43] media_devnode_release+0x61/0xa0
[ 108.612370][ T43] device_release+0x9c/0x1c0
[ 108.616996][ T43] kobject_put+0x228/0x480
[ 108.621420][ T43] media_devnode_unregister+0x6d/0xf0
[ 108.626810][ T43] media_device_unregister+0x37c/0x400
[ 108.632275][ T43] em28xx_release_resources+0xac/0x240
[ 108.637741][ T43] em28xx_usb_disconnect+0x19f/0x2f0
[ 108.643035][ T43] usb_unbind_interface+0x26e/0x910
[ 108.648239][ T43] device_release_driver_internal+0x4d6/0x800
[ 108.654308][ T43] bus_remove_device+0x34d/0x410
[ 108.659272][ T43] device_del+0x511/0x8e0
[ 108.663612][ T43] usb_disable_device+0x3e9/0x8a0
[ 108.668643][ T43] usb_disconnect+0x330/0x950
[ 108.673346][ T43] hub_event+0x1cf5/0x4a20
[ 108.677768][ T43] process_scheduled_works+0xae1/0x17b0
[ 108.683344][ T43] worker_thread+0x8a0/0xda0
[ 108.687958][ T43] kthread+0x711/0x8a0
[ 108.692059][ T43] ret_from_fork+0x47c/0x820
[ 108.696673][ T43] ret_from_fork_asm+0x1a/0x30
[ 108.701445][ T43]
[ 108.703789][ T43] The buggy address belongs to the object at ffff88807f487000
[ 108.703789][ T43] which belongs to the cache kmalloc-2k of size 2048
[ 108.717856][ T43] The buggy address is located 1264 bytes inside of
[ 108.717856][ T43] freed 2048-byte region [ffff88807f487000, ffff88807f487800)
[ 108.731840][ T43]
[ 108.734172][ T43] The buggy address belongs to the physical page:
[ 108.740595][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f480
[ 108.749353][ T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 108.757854][ T43] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 108.765409][ T43] page_type: f5(slab)
[ 108.769392][ T43] raw: 00fff00000000040 ffff88801a842000 ffffea0001f04800 dead000000000002
[ 108.777976][ T43] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 108.786562][ T43] head: 00fff00000000040 ffff88801a842000 ffffea0001f04800 dead000000000002
[ 108.795247][ T43] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 108.803933][ T43] head: 00fff00000000003 ffffea0001fd2001 00000000ffffffff 00000000ffffffff
[ 108.812624][ T43] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 108.821300][ T43] page dumped because: kasan: bad access detected
[ 108.827733][ T43] page_owner tracks the page as allocated
[ 108.833448][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5884, tgid 5884 (syz-executor), ts 97002998287, free_ts 96959536657
[ 108.854814][ T43] post_alloc_hook+0x240/0x2a0
[ 108.859588][ T43] get_page_from_freelist+0x21e4/0x22c0
[ 108.865149][ T43] __alloc_frozen_pages_noprof+0x181/0x370
[ 108.870965][ T43] alloc_pages_mpol+0x232/0x4a0
[ 108.875819][ T43] allocate_slab+0x8a/0x330
[ 108.880418][ T43] ___slab_alloc+0xbd1/0x13f0
[ 108.885098][ T43] __slab_alloc+0x55/0xa0
[ 108.889432][ T43] __kmalloc_node_track_caller_noprof+0x5c7/0x800
[ 108.895846][ T43] kmemdup_noprof+0x2b/0x70
[ 108.900702][ T43] ip_vs_control_net_init+0x816/0x1900
[ 108.906168][ T43] __ip_vs_init+0x2d2/0x460
[ 108.910673][ T43] ops_init+0x35c/0x5c0
[ 108.914834][ T43] setup_net+0x10c/0x320
[ 108.919087][ T43] copy_net_ns+0x31b/0x4d0
[ 108.923520][ T43] create_new_namespaces+0x3f3/0x720
[ 108.928828][ T43] unshare_nsproxy_namespaces+0x11c/0x170
[ 108.934564][ T43] page last free pid 5884 tgid 5884 stack trace:
[ 108.940892][ T43] __free_frozen_pages+0xbc4/0xd30
[ 108.946024][ T43] __put_partials+0x146/0x170
[ 108.950710][ T43] put_cpu_partial+0x17c/0x250
[ 108.955485][ T43] __slab_free+0x2b9/0x390
[ 108.959911][ T43] qlist_free_all+0x97/0x140
[ 108.964502][ T43] kasan_quarantine_reduce+0x148/0x160
[ 108.969962][ T43] __kasan_slab_alloc+0x22/0x80
[ 108.974815][ T43] kmem_cache_alloc_noprof+0x367/0x6e0
[ 108.980279][ T43] getname_flags+0xb8/0x540
[ 108.984792][ T43] user_path_at+0x24/0x60
[ 108.989116][ T43] __se_sys_mount+0x2d4/0x410
[ 108.993801][ T43] do_syscall_64+0xfa/0xfa0
[ 108.998327][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.004223][ T43]
[ 109.006543][ T43] Memory state around the buggy address:
[ 109.012173][ T43] ffff88807f487380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.020234][ T43] ffff88807f487400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.028299][ T43] >ffff88807f487480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.036357][ T43] ^
[ 109.044070][ T43] ffff88807f487500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.052135][ T43] ffff88807f487580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 109.060190][ T43] ==================================================================
[ 109.127376][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 109.134626][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 109.143839][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 109.153902][ T43] Workqueue: usb_hub_wq hub_event
[ 109.158969][ T43] Call Trace:
[ 109.162264][ T43]
[ 109.165243][ T43] dump_stack_lvl+0x99/0x250
[ 109.169857][ T43] ? __asan_memcpy+0x40/0x70
[ 109.174458][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.179677][ T43] ? __pfx__printk+0x10/0x10
[ 109.184290][ T43] vpanic+0x237/0x6d0
[ 109.188286][ T43] ? __pfx_vpanic+0x10/0x10
[ 109.192793][ T43] ? preempt_schedule+0xae/0xc0
[ 109.197650][ T43] ? __pfx_preempt_schedule+0x10/0x10
[ 109.203036][ T43] panic+0xb9/0xc0
[ 109.206762][ T43] ? __pfx_panic+0x10/0x10
[ 109.211187][ T43] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 109.217107][ T43] ? media_devnode_unregister+0xe2/0xf0
[ 109.222665][ T43] check_panic_on_warn+0x89/0xb0
[ 109.227616][ T43] ? media_devnode_unregister+0xe2/0xf0
[ 109.233168][ T43] end_report+0x78/0x160
[ 109.237414][ T43] kasan_report+0x129/0x150
[ 109.241940][ T43] ? media_devnode_unregister+0xe2/0xf0
[ 109.247511][ T43] media_devnode_unregister+0xe2/0xf0
[ 109.252926][ T43] media_device_unregister+0x37c/0x400
[ 109.258393][ T43] em28xx_release_resources+0xac/0x240
[ 109.263867][ T43] em28xx_usb_disconnect+0x19f/0x2f0
[ 109.269164][ T43] usb_unbind_interface+0x26e/0x910
[ 109.274371][ T43] ? __pfx_usb_unbind_interface+0x10/0x10
[ 109.280096][ T43] device_release_driver_internal+0x4d6/0x800
[ 109.286173][ T43] bus_remove_device+0x34d/0x410
[ 109.291143][ T43] device_del+0x511/0x8e0
[ 109.295479][ T43] ? __pfx_device_del+0x10/0x10
[ 109.300342][ T43] ? kobject_put+0x446/0x480
[ 109.304947][ T43] usb_disable_device+0x3e9/0x8a0
[ 109.309978][ T43] usb_disconnect+0x330/0x950
[ 109.314675][ T43] hub_event+0x1cf5/0x4a20
[ 109.319105][ T43] ? do_raw_spin_lock+0x121/0x290
[ 109.324143][ T43] ? register_lock_class+0x51/0x320
[ 109.329357][ T43] ? __pfx_hub_event+0x10/0x10
[ 109.334135][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 109.339870][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 109.345087][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 109.350816][ T43] ? process_scheduled_works+0x9ef/0x17b0
[ 109.356548][ T43] process_scheduled_works+0xae1/0x17b0
[ 109.362110][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 109.368102][ T43] worker_thread+0x8a0/0xda0
[ 109.372707][ T43] kthread+0x711/0x8a0
[ 109.376786][ T43] ? __pfx_worker_thread+0x10/0x10
[ 109.381898][ T43] ? __pfx_kthread+0x10/0x10
[ 109.386503][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 109.391735][ T43] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.396947][ T43] ? __pfx_kthread+0x10/0x10
[ 109.401569][ T43] ret_from_fork+0x47c/0x820
[ 109.406174][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 109.411297][ T43] ? __switch_to_asm+0x39/0x70
[ 109.416069][ T43] ? __switch_to_asm+0x33/0x70
[ 109.420835][ T43] ? __pfx_kthread+0x10/0x10
[ 109.425448][ T43] ret_from_fork_asm+0x1a/0x30
[ 109.430230][ T43]
[ 109.433592][ T43] Kernel Offset: disabled
[ 109.437943][ T43] Rebooting in 86400 seconds..