no interfaces have a carrier
[ 35.895673][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 35.911215][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts.
2025/11/25 18:18:53 parsed 1 programs
syzkaller login: [ 64.015261][ T4271] cgroup: Unknown subsys name 'net'
[ 64.145495][ T4271] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 65.416823][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 66.751796][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.760262][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.768011][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.776084][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.783973][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.792061][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 67.806498][ T4305] chnl_net:caif_netlink_parms(): no params data found
[ 67.851450][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.859429][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.867194][ T4305] device bridge_slave_0 entered promiscuous mode
[ 67.881411][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.888712][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.896354][ T4305] device bridge_slave_1 entered promiscuous mode
[ 67.917937][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 67.932916][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 67.953877][ T4305] team0: Port device team_slave_0 added
[ 67.962442][ T4305] team0: Port device team_slave_1 added
[ 67.978964][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 67.985974][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 68.012087][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 68.028799][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 68.035760][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 68.061762][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 68.091913][ T4305] device hsr_slave_0 entered promiscuous mode
[ 68.099521][ T4305] device hsr_slave_1 entered promiscuous mode
[ 68.188876][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 68.205338][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 68.214353][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 68.224587][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 68.248809][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.256269][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.264301][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.271405][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 68.314341][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 68.329466][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 68.341333][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.350539][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.360823][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 68.377400][ T4305] 8021q: adding VLAN 0 to HW filter on device team0
[ 68.390699][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 68.399507][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.406690][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 68.422942][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 68.432137][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.439260][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.461818][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 68.471187][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 68.483732][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 68.492826][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 68.506395][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 68.520789][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 68.529587][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 68.694962][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 68.703631][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 68.717868][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.736076][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 68.756516][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 68.765353][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 68.773575][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 68.788014][ T4305] device veth0_vlan entered promiscuous mode
[ 68.798829][ T4305] device veth1_vlan entered promiscuous mode
[ 68.817107][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 68.826075][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 68.837246][ T4305] device veth0_macvtap entered promiscuous mode
[ 68.853556][ T4305] device veth1_macvtap entered promiscuous mode
[ 68.867498][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 68.875263][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 68.885066][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 68.893107][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 68.902440][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 68.913927][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 68.924190][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 68.932877][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 68.944209][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.953817][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.962963][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.972312][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.134032][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.146623][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.157706][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 69.177367][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.187645][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.198227][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 69.323429][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/25 18:19:01 executed programs: 0
[ 70.863179][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.871450][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.880370][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.888705][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.897196][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 70.905366][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 71.010586][ T4367] chnl_net:caif_netlink_parms(): no params data found
[ 71.050027][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.057578][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.065741][ T4367] device bridge_slave_0 entered promiscuous mode
[ 71.073685][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.081025][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.089455][ T4367] device bridge_slave_1 entered promiscuous mode
[ 71.113204][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.125136][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.148453][ T4367] team0: Port device team_slave_0 added
[ 71.156285][ T4367] team0: Port device team_slave_1 added
[ 71.173827][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.181163][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.207657][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.220016][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.226973][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.253429][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.283002][ T4367] device hsr_slave_0 entered promiscuous mode
[ 71.289825][ T4367] device hsr_slave_1 entered promiscuous mode
[ 71.296644][ T4367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 71.304800][ T4367] Cannot create hsr debugfs directory
[ 71.352495][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.359386][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.728851][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.949408][ T47] Bluetooth: hci0: command 0x0409 tx timeout
[ 74.087679][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.150623][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.002722][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.013720][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.025653][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.028857][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[ 75.041618][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.131778][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.143981][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 75.152754][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.163253][ T4367] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.205335][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 75.214354][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.223176][ T51] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.230479][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.255552][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 75.264382][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 75.273938][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.283462][ T51] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.290587][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.299609][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 75.309990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 75.345598][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 75.355896][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.364446][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.376195][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 75.386187][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.409157][ T37] device hsr_slave_0 left promiscuous mode
[ 75.416158][ T37] device hsr_slave_1 left promiscuous mode
[ 75.424028][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 75.431687][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 75.442035][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 75.449864][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 75.457637][ T37] device bridge_slave_1 left promiscuous mode
[ 75.464747][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.475934][ T37] device bridge_slave_0 left promiscuous mode
[ 75.482337][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.502233][ T37] device veth1_macvtap left promiscuous mode
[ 75.508789][ T37] device veth0_macvtap left promiscuous mode
[ 75.514857][ T37] device veth1_vlan left promiscuous mode
[ 75.520976][ T37] device veth0_vlan left promiscuous mode
[ 75.814044][ T37] team0 (unregistering): Port device team_slave_1 removed
[ 75.843850][ T37] team0 (unregistering): Port device team_slave_0 removed
[ 75.873951][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 75.904033][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 76.171923][ T37] bond0 (unregistering): Released all slaves
[ 76.274644][ T4367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 76.285515][ T4367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 76.299288][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 76.308582][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.319092][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 76.327484][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.336168][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 76.469810][ T129] cfg80211: failed to load regulatory.db
[ 76.545852][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 76.564073][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 76.580187][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.612783][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 76.626121][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 76.671487][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 76.689994][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 76.704632][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 76.715418][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 76.730964][ T4367] device veth0_vlan entered promiscuous mode
[ 76.747310][ T4367] device veth1_vlan entered promiscuous mode
[ 76.785797][ T4367] device veth0_macvtap entered promiscuous mode
[ 76.811729][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 76.844710][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 76.891317][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 76.908910][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 76.919643][ T4367] device veth1_macvtap entered promiscuous mode
[ 76.943891][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 76.955671][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 76.983552][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.992273][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.001294][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.020614][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.029801][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.038658][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.049728][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.058857][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.067698][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.077061][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.108820][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[ 77.191020][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.200003][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.212542][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.228338][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.236392][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.245331][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.568482][ T4418] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 77.781046][ T4418] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 77.792417][ T4418] usb 1-1: config 0 interface 0 has no altsetting 0
[ 77.802158][ T4418] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 77.811413][ T4418] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 77.819662][ T4418] usb 1-1: Product: syz
[ 77.823851][ T4418] usb 1-1: Manufacturer: syz
[ 77.828866][ T4418] usb 1-1: SerialNumber: syz
[ 77.839209][ T4418] usb 1-1: config 0 descriptor??
[ 77.851814][ T4418] usb 1-1: selecting invalid altsetting 0
[ 78.049879][ T4434] ==================================================================
[ 78.058104][ T4434] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x21f/0x410
[ 78.065466][ T4434] Write of size 264 at addr ffff8880276d1e00 by task syz.0.17/4434
[ 78.073353][ T4434]
[ 78.075699][ T4434] CPU: 0 PID: 4434 Comm: syz.0.17 Not tainted syzkaller #0
[ 78.082986][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 78.093156][ T4434] Call Trace:
[ 78.096653][ T4434]
[ 78.099599][ T4434] dump_stack_lvl+0x168/0x22e
[ 78.104304][ T4434] ? __lock_acquire+0x7c50/0x7c50
[ 78.109329][ T4434] ? show_regs_print_info+0x12/0x12
[ 78.114518][ T4434] ? load_image+0x3b0/0x3b0
[ 78.119056][ T4434] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 78.124431][ T4434] ? __virt_addr_valid+0x188/0x540
[ 78.129535][ T4434] ? __virt_addr_valid+0x465/0x540
[ 78.134689][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.139310][ T4434] print_report+0xa8/0x210
[ 78.143785][ T4434] kasan_report+0x10b/0x140
[ 78.148297][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.152997][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.157605][ T4434] kasan_check_range+0x27b/0x290
[ 78.162560][ T4434] memcpy+0x3c/0x60
[ 78.166380][ T4434] copy_to_urb+0x21f/0x410
[ 78.170784][ T4434] prepare_playback_urb+0x912/0x1440
[ 78.176069][ T4434] snd_usb_endpoint_start+0x49c/0x1280
[ 78.181523][ T4434] ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[ 78.187923][ T4434] ? __rwlock_init+0x140/0x140
[ 78.192677][ T4434] start_endpoints+0xa1/0x270
[ 78.197356][ T4434] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[ 78.204039][ T4434] snd_usb_substream_playback_trigger+0x3eb/0x7d0
[ 78.210454][ T4434] snd_pcm_action+0xda/0x230
[ 78.215039][ T4434] __snd_pcm_lib_xfer+0x179f/0x1c70
[ 78.220317][ T4434] ? fill_silence+0x240/0x240
[ 78.224984][ T4434] ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[ 78.230500][ T4434] ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 78.236321][ T4434] ? resample_expand+0x7e0/0x860
[ 78.241274][ T4434] ? pcm_lib_apply_appl_ptr+0x540/0x540
[ 78.246904][ T4434] snd_pcm_oss_write3+0x1b8/0x310
[ 78.252157][ T4434] snd_pcm_plug_write_transfer+0x2b4/0x4a0
[ 78.257967][ T4434] ? snd_pcm_plug_client_channels_buf+0x600/0x600
[ 78.264380][ T4434] ? snd_pcm_plug_client_channels_buf+0x466/0x600
[ 78.270809][ T4434] snd_pcm_oss_write+0xbae/0x1110
[ 78.275823][ T4434] ? snd_pcm_oss_read+0x8b0/0x8b0
[ 78.280829][ T4434] ? end_current_label_crit_section+0x14b/0x170
[ 78.287058][ T4434] ? common_file_perm+0x171/0x1c0
[ 78.292243][ T4434] ? fsnotify_perm+0x5a/0x550
[ 78.296922][ T4434] ? security_file_permission+0x75/0xa0
[ 78.302451][ T4434] ? snd_pcm_oss_read+0x8b0/0x8b0
[ 78.307639][ T4434] vfs_write+0x2c4/0x960
[ 78.311873][ T4434] ? file_end_write+0x250/0x250
[ 78.316713][ T4434] ? __ia32_sys_get_robust_list+0x80/0x80
[ 78.322534][ T4434] ? do_sys_openat2+0x1fe/0x490
[ 78.327379][ T4434] ? __se_sys_futex+0x14a/0x440
[ 78.332218][ T4434] ? __fdget_pos+0x1d4/0x360
[ 78.336799][ T4434] ksys_write+0x143/0x240
[ 78.341210][ T4434] ? __ia32_sys_read+0x80/0x80
[ 78.346099][ T4434] ? lockdep_hardirqs_on+0x94/0x140
[ 78.351638][ T4434] do_syscall_64+0x4c/0xa0
[ 78.356038][ T4434] ? clear_bhb_loop+0x60/0xb0
[ 78.360716][ T4434] ? clear_bhb_loop+0x60/0xb0
[ 78.365391][ T4434] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 78.371288][ T4434] RIP: 0033:0x7f7fa618f749
[ 78.375726][ T4434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.395442][ T4434] RSP: 002b:00007ffccac21868 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 78.403931][ T4434] RAX: ffffffffffffffda RBX: 00007f7fa63e5fa0 RCX: 00007f7fa618f749
[ 78.411890][ T4434] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[ 78.419971][ T4434] RBP: 00007f7fa6213f91 R08: 0000000000000000 R09: 0000000000000000
[ 78.428017][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.435998][ T4434] R13: 00007f7fa63e5fa0 R14: 00007f7fa63e5fa0 R15: 0000000000000003
[ 78.444016][ T4434]
[ 78.447038][ T4434]
[ 78.449354][ T4434] Allocated by task 4434:
[ 78.453664][ T4434] kasan_set_track+0x4b/0x70
[ 78.458347][ T4434] __kasan_kmalloc+0x8e/0xa0
[ 78.462925][ T4434] __kmalloc+0xb0/0x240
[ 78.467065][ T4434] snd_usb_endpoint_set_params+0x16bb/0x2a50
[ 78.473131][ T4434] snd_usb_hw_params+0x123a/0x19b0
[ 78.478405][ T4434] snd_pcm_hw_params+0x829/0x1c50
[ 78.483555][ T4434] snd_pcm_oss_change_params_locked+0x222c/0x3ee0
[ 78.489964][ T4434] snd_pcm_oss_write+0x2f8/0x1110
[ 78.494971][ T4434] vfs_write+0x2c4/0x960
[ 78.499200][ T4434] ksys_write+0x143/0x240
[ 78.503601][ T4434] do_syscall_64+0x4c/0xa0
[ 78.508098][ T4434] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 78.513975][ T4434]
[ 78.516284][ T4434] The buggy address belongs to the object at ffff8880276d1e00
[ 78.516284][ T4434] which belongs to the cache kmalloc-128 of size 128
[ 78.530326][ T4434] The buggy address is located 0 bytes inside of
[ 78.530326][ T4434] 128-byte region [ffff8880276d1e00, ffff8880276d1e80)
[ 78.543417][ T4434]
[ 78.545726][ T4434] The buggy address belongs to the physical page:
[ 78.552173][ T4434] page:ffffea00009db440 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276d1
[ 78.562325][ T4434] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 78.569885][ T4434] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880174418c0
[ 78.578451][ T4434] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 78.587228][ T4434] page dumped because: kasan: bad access detected
[ 78.593633][ T4434] page_owner tracks the page as allocated
[ 78.599331][ T4434] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4376, tgid 4376 (udevd), ts 77945785905, free_ts 77940043593
[ 78.617025][ T4434] post_alloc_hook+0x173/0x1a0
[ 78.621868][ T4434] get_page_from_freelist+0x1a26/0x1ac0
[ 78.627397][ T4434] __alloc_pages+0x1df/0x4e0
[ 78.631994][ T4434] alloc_slab_page+0x5d/0x160
[ 78.636656][ T4434] new_slab+0x87/0x2c0
[ 78.640802][ T4434] ___slab_alloc+0xbc6/0x1230
[ 78.645554][ T4434] __kmem_cache_alloc_node+0x1a0/0x260
[ 78.651006][ T4434] kmalloc_trace+0x26/0xe0
[ 78.655417][ T4434] kernfs_fop_open+0x7d3/0xcc0
[ 78.660168][ T4434] do_dentry_open+0x7e9/0x10d0
[ 78.664976][ T4434] path_openat+0x25c6/0x2e70
[ 78.669547][ T4434] do_filp_open+0x1c1/0x3c0
[ 78.674034][ T4434] do_sys_openat2+0x142/0x490
[ 78.678698][ T4434] __x64_sys_openat+0x135/0x160
[ 78.683534][ T4434] do_syscall_64+0x4c/0xa0
[ 78.688022][ T4434] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 78.693926][ T4434] page last free stack trace:
[ 78.698586][ T4434] free_unref_page_prepare+0x8b4/0x9a0
[ 78.704033][ T4434] free_unref_page+0x2e/0x3f0
[ 78.708746][ T4434] __unfreeze_partials+0x1a5/0x200
[ 78.713840][ T4434] put_cpu_partial+0x17c/0x250
[ 78.718595][ T4434] qlist_free_all+0x76/0xe0
[ 78.723252][ T4434] kasan_quarantine_reduce+0x144/0x160
[ 78.728692][ T4434] __kasan_slab_alloc+0x1e/0x80
[ 78.733536][ T4434] slab_post_alloc_hook+0x4b/0x480
[ 78.738630][ T4434] __kmem_cache_alloc_node+0x140/0x260
[ 78.744082][ T4434] kmalloc_trace+0x26/0xe0
[ 78.748506][ T4434] kernfs_fop_open+0x3f1/0xcc0
[ 78.753342][ T4434] do_dentry_open+0x7e9/0x10d0
[ 78.758093][ T4434] path_openat+0x25c6/0x2e70
[ 78.762669][ T4434] do_filp_open+0x1c1/0x3c0
[ 78.767154][ T4434] do_sys_openat2+0x142/0x490
[ 78.771817][ T4434] __x64_sys_openat+0x135/0x160
[ 78.776658][ T4434]
[ 78.778993][ T4434] Memory state around the buggy address:
[ 78.784614][ T4434] ffff8880276d1d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.792742][ T4434] ffff8880276d1d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.800788][ T4434] >ffff8880276d1e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 78.808920][ T4434] ^
[ 78.816872][ T4434] ffff8880276d1e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.825008][ T4434] ffff8880276d1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 78.833054][ T4434] ==================================================================
[ 78.841121][ T4434] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.848298][ T4434] CPU: 0 PID: 4434 Comm: syz.0.17 Not tainted syzkaller #0
[ 78.855503][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 78.865646][ T4434] Call Trace:
[ 78.869050][ T4434]
[ 78.872057][ T4434] dump_stack_lvl+0x168/0x22e
[ 78.876727][ T4434] ? memcpy+0x3c/0x60
[ 78.880701][ T4434] ? show_regs_print_info+0x12/0x12
[ 78.885888][ T4434] ? load_image+0x3b0/0x3b0
[ 78.890389][ T4434] panic+0x2c9/0x710
[ 78.894274][ T4434] ? __lock_acquire+0x7c50/0x7c50
[ 78.899490][ T4434] ? bpf_jit_dump+0xd0/0xd0
[ 78.903989][ T4434] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 78.909870][ T4434] ? _raw_spin_unlock+0x40/0x40
[ 78.914718][ T4434] check_panic_on_warn+0x80/0xa0
[ 78.919646][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.924222][ T4434] end_report+0x66/0x110
[ 78.928546][ T4434] kasan_report+0x118/0x140
[ 78.933036][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.937623][ T4434] ? copy_to_urb+0x21f/0x410
[ 78.942199][ T4434] kasan_check_range+0x27b/0x290
[ 78.947143][ T4434] memcpy+0x3c/0x60
[ 78.950945][ T4434] copy_to_urb+0x21f/0x410
[ 78.955356][ T4434] prepare_playback_urb+0x912/0x1440
[ 78.960640][ T4434] snd_usb_endpoint_start+0x49c/0x1280
[ 78.966112][ T4434] ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[ 78.972432][ T4434] ? __rwlock_init+0x140/0x140
[ 78.977188][ T4434] start_endpoints+0xa1/0x270
[ 78.981857][ T4434] ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[ 78.988442][ T4434] snd_usb_substream_playback_trigger+0x3eb/0x7d0
[ 78.995101][ T4434] snd_pcm_action+0xda/0x230
[ 78.999681][ T4434] __snd_pcm_lib_xfer+0x179f/0x1c70
[ 79.004882][ T4434] ? fill_silence+0x240/0x240
[ 79.009544][ T4434] ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[ 79.014950][ T4434] ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 79.020599][ T4434] ? resample_expand+0x7e0/0x860
[ 79.025532][ T4434] ? pcm_lib_apply_appl_ptr+0x540/0x540
[ 79.031090][ T4434] snd_pcm_oss_write3+0x1b8/0x310
[ 79.036161][ T4434] snd_pcm_plug_write_transfer+0x2b4/0x4a0
[ 79.041994][ T4434] ? snd_pcm_plug_client_channels_buf+0x600/0x600
[ 79.048394][ T4434] ? snd_pcm_plug_client_channels_buf+0x466/0x600
[ 79.054793][ T4434] snd_pcm_oss_write+0xbae/0x1110
[ 79.059809][ T4434] ? snd_pcm_oss_read+0x8b0/0x8b0
[ 79.064840][ T4434] ? end_current_label_crit_section+0x14b/0x170
[ 79.071147][ T4434] ? common_file_perm+0x171/0x1c0
[ 79.076178][ T4434] ? fsnotify_perm+0x5a/0x550
[ 79.080848][ T4434] ? security_file_permission+0x75/0xa0
[ 79.086401][ T4434] ? snd_pcm_oss_read+0x8b0/0x8b0
[ 79.091408][ T4434] vfs_write+0x2c4/0x960
[ 79.095640][ T4434] ? file_end_write+0x250/0x250
[ 79.100561][ T4434] ? __ia32_sys_get_robust_list+0x80/0x80
[ 79.106323][ T4434] ? do_sys_openat2+0x1fe/0x490
[ 79.111251][ T4434] ? __se_sys_futex+0x14a/0x440
[ 79.116180][ T4434] ? __fdget_pos+0x1d4/0x360
[ 79.120845][ T4434] ksys_write+0x143/0x240
[ 79.125161][ T4434] ? __ia32_sys_read+0x80/0x80
[ 79.129953][ T4434] ? lockdep_hardirqs_on+0x94/0x140
[ 79.135142][ T4434] do_syscall_64+0x4c/0xa0
[ 79.139539][ T4434] ? clear_bhb_loop+0x60/0xb0
[ 79.144210][ T4434] ? clear_bhb_loop+0x60/0xb0
[ 79.148873][ T4434] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 79.154848][ T4434] RIP: 0033:0x7f7fa618f749
[ 79.159259][ T4434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 79.178991][ T4434] RSP: 002b:00007ffccac21868 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 79.187506][ T4434] RAX: ffffffffffffffda RBX: 00007f7fa63e5fa0 RCX: 00007f7fa618f749
[ 79.195993][ T4434] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[ 79.203966][ T4434] RBP: 00007f7fa6213f91 R08: 0000000000000000 R09: 0000000000000000
[ 79.212039][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.220261][ T4434] R13: 00007f7fa63e5fa0 R14: 00007f7fa63e5fa0 R15: 0000000000000003
[ 79.228828][ T4434]
[ 79.232325][ T4434] Kernel Offset: disabled
[ 79.236874][ T4434] Rebooting in 86400 seconds..