Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts.
2026/04/10 02:13:46 parsed 1 programs
[ 89.623206][ T30] kauditd_printk_skb: 19 callbacks suppressed
[ 89.623221][ T30] audit: type=1400 audit(1775787228.361:105): avc: denied { unlink } for pid=6214 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 90.840931][ T6214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.548430][ T30] audit: type=1400 audit(1775787231.281:106): avc: denied { unmount } for pid=6226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 92.845875][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.868358][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.977785][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.999778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.250414][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.276250][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.284982][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.296484][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.310334][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.881496][ T6248] chnl_net:caif_netlink_parms(): no params data found
[ 94.201148][ T30] audit: type=1401 audit(1775787232.931:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 94.268820][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.278137][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.285956][ T6248] bridge_slave_0: entered allmulticast mode
[ 94.294228][ T6248] bridge_slave_0: entered promiscuous mode
[ 94.526427][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.533749][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.540829][ T6248] bridge_slave_1: entered allmulticast mode
[ 94.547646][ T6248] bridge_slave_1: entered promiscuous mode
[ 94.630641][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.648374][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.732417][ T6248] team0: Port device team_slave_0 added
[ 94.788444][ T6248] team0: Port device team_slave_1 added
[ 94.865449][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.874182][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.900285][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.914738][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.923247][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.972394][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.080561][ T6248] hsr_slave_0: entered promiscuous mode
[ 95.093861][ T6248] hsr_slave_1: entered promiscuous mode
[ 95.203507][ T6248] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 95.212348][ T6248] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 95.221773][ T6248] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 95.230328][ T6248] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 95.273228][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.287227][ T6248] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.302616][ T70] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.309734][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.318915][ T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.325997][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.447814][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.507987][ T6248] veth0_vlan: entered promiscuous mode
[ 95.524132][ T6248] veth1_vlan: entered promiscuous mode
[ 95.554734][ T6248] veth0_macvtap: entered promiscuous mode
[ 95.563211][ T6248] veth1_macvtap: entered promiscuous mode
[ 95.583804][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.596916][ T6248] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.608178][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.617587][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.627669][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.637624][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/04/10 02:13:54 executed programs: 0
[ 95.782228][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.790201][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.805632][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.829069][ T6324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 95.837392][ T6324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.845617][ T6324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.853671][ T6324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 95.861626][ T6328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 95.861676][ T6324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 95.869139][ T6328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 95.885611][ T6324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 95.886317][ T6328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 95.893034][ T6324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 95.902040][ T6328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 95.918102][ T6324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 95.925958][ T6324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 95.938394][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 95.946177][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 95.955121][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 95.972057][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 95.994582][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 96.007051][ T6324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 96.016323][ T6324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 96.025450][ T6324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 96.035243][ T6324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 96.356215][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.416456][ T6325] chnl_net:caif_netlink_parms(): no params data found
[ 96.438627][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.481984][ T6329] chnl_net:caif_netlink_parms(): no params data found
[ 96.509988][ T6321] chnl_net:caif_netlink_parms(): no params data found
[ 96.669302][ T6332] chnl_net:caif_netlink_parms(): no params data found
[ 96.685613][ T6318] chnl_net:caif_netlink_parms(): no params data found
[ 96.709193][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.716939][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.724112][ T6325] bridge_slave_0: entered allmulticast mode
[ 96.730705][ T6325] bridge_slave_0: entered promiscuous mode
[ 96.740002][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.747310][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.755268][ T6321] bridge_slave_0: entered allmulticast mode
[ 96.763639][ T6321] bridge_slave_0: entered promiscuous mode
[ 96.786172][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.793394][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.800532][ T6329] bridge_slave_0: entered allmulticast mode
[ 96.807425][ T6329] bridge_slave_0: entered promiscuous mode
[ 96.816501][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.823817][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.831165][ T6329] bridge_slave_1: entered allmulticast mode
[ 96.837838][ T6329] bridge_slave_1: entered promiscuous mode
[ 96.844516][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.851963][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.859036][ T6325] bridge_slave_1: entered allmulticast mode
[ 96.865829][ T6325] bridge_slave_1: entered promiscuous mode
[ 96.872630][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.879689][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.887262][ T6321] bridge_slave_1: entered allmulticast mode
[ 96.894574][ T6321] bridge_slave_1: entered promiscuous mode
[ 96.962298][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.983512][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.004794][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.019481][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.030184][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.042360][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.115792][ T6329] team0: Port device team_slave_0 added
[ 97.122617][ T6325] team0: Port device team_slave_0 added
[ 97.135941][ T6321] team0: Port device team_slave_0 added
[ 97.142894][ T6321] team0: Port device team_slave_1 added
[ 97.155247][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.162496][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.169600][ T6318] bridge_slave_0: entered allmulticast mode
[ 97.176558][ T6318] bridge_slave_0: entered promiscuous mode
[ 97.184004][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.191484][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.198573][ T6318] bridge_slave_1: entered allmulticast mode
[ 97.205424][ T6318] bridge_slave_1: entered promiscuous mode
[ 97.213285][ T6329] team0: Port device team_slave_1 added
[ 97.219963][ T6325] team0: Port device team_slave_1 added
[ 97.239327][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.246320][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.274752][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.305407][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.312616][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.319704][ T6332] bridge_slave_0: entered allmulticast mode
[ 97.326664][ T6332] bridge_slave_0: entered promiscuous mode
[ 97.334850][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.342180][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.349272][ T6332] bridge_slave_1: entered allmulticast mode
[ 97.356466][ T6332] bridge_slave_1: entered promiscuous mode
[ 97.363390][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.370327][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.397308][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.436396][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.443427][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.469629][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.486227][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.493200][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.519474][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.533181][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.542853][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.549782][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.576046][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.588070][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.595223][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.621354][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.641855][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.657276][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.667949][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.717115][ T6318] team0: Port device team_slave_0 added
[ 97.724611][ T6318] team0: Port device team_slave_1 added
[ 97.738291][ T6332] team0: Port device team_slave_0 added
[ 97.745747][ T6332] team0: Port device team_slave_1 added
[ 97.780092][ T6321] hsr_slave_0: entered promiscuous mode
[ 97.786451][ T6321] hsr_slave_1: entered promiscuous mode
[ 97.792932][ T6321] debugfs: 'hsr0' already exists in 'hsr'
[ 97.798645][ T6321] Cannot create hsr debugfs directory
[ 97.817294][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.824290][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.851553][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.863791][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.870735][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.897350][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.918393][ T6329] hsr_slave_0: entered promiscuous mode
[ 97.924857][ T6329] hsr_slave_1: entered promiscuous mode
[ 97.931181][ T6329] debugfs: 'hsr0' already exists in 'hsr'
[ 97.936897][ T6329] Cannot create hsr debugfs directory
[ 97.960383][ T6325] hsr_slave_0: entered promiscuous mode
[ 97.966968][ T6325] hsr_slave_1: entered promiscuous mode
[ 97.973118][ T6325] debugfs: 'hsr0' already exists in 'hsr'
[ 97.978834][ T6325] Cannot create hsr debugfs directory
[ 97.992411][ T6324] Bluetooth: hci3: command tx timeout
[ 97.998255][ T6324] Bluetooth: hci2: command tx timeout
[ 98.004199][ T5130] Bluetooth: hci0: command tx timeout
[ 98.009976][ T51] Bluetooth: hci1: command tx timeout
[ 98.023971][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.049072][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.056209][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.082690][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.093654][ T51] Bluetooth: hci4: command tx timeout
[ 98.117463][ T6318] hsr_slave_0: entered promiscuous mode
[ 98.123833][ T6318] hsr_slave_1: entered promiscuous mode
[ 98.129694][ T6318] debugfs: 'hsr0' already exists in 'hsr'
[ 98.135510][ T6318] Cannot create hsr debugfs directory
[ 98.145716][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.152721][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.179018][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.337340][ T6332] hsr_slave_0: entered promiscuous mode
[ 98.343619][ T6332] hsr_slave_1: entered promiscuous mode
[ 98.349429][ T6332] debugfs: 'hsr0' already exists in 'hsr'
[ 98.355611][ T6332] Cannot create hsr debugfs directory
[ 98.575068][ T6325] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 98.584876][ T6325] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 98.596794][ T6325] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 98.605772][ T6325] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 98.655741][ T6329] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 98.698207][ T6329] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 98.715421][ T6329] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 98.767716][ T6329] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 98.788676][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.886893][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.938576][ T6325] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.969103][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.976226][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.038728][ T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.045850][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.078354][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.118089][ T6329] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.139549][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.146704][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.224511][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.231638][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.566155][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.581605][ T36] bridge_slave_1: left allmulticast mode
[ 99.592845][ T36] bridge_slave_1: left promiscuous mode
[ 99.598565][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.624705][ T36] bridge_slave_0: left allmulticast mode
[ 99.630360][ T36] bridge_slave_0: left promiscuous mode
[ 99.648153][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.849696][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.860626][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.886184][ T36] bond0 (unregistering): Released all slaves
[ 99.999786][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.067675][ T36] hsr_slave_0: left promiscuous mode
[ 100.073111][ T51] Bluetooth: hci3: command tx timeout
[ 100.082365][ T51] Bluetooth: hci1: command tx timeout
[ 100.087775][ T51] Bluetooth: hci2: command tx timeout
[ 100.093694][ T6324] Bluetooth: hci0: command tx timeout
[ 100.099769][ T36] hsr_slave_1: left promiscuous mode
[ 100.108065][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.116539][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.127429][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.136871][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.149727][ T36] veth1_macvtap: left promiscuous mode
[ 100.156560][ T36] veth0_macvtap: left promiscuous mode
[ 100.162211][ T36] veth1_vlan: left promiscuous mode
[ 100.162486][ T51] Bluetooth: hci4: command tx timeout
[ 100.167429][ T36] veth0_vlan: left promiscuous mode
[ 100.385222][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 100.400296][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 100.554803][ T6329] veth0_vlan: entered promiscuous mode
[ 100.624167][ T6329] veth1_vlan: entered promiscuous mode
[ 100.666707][ T6325] veth0_vlan: entered promiscuous mode
[ 100.679430][ T6329] veth0_macvtap: entered promiscuous mode
[ 100.708397][ T6329] veth1_macvtap: entered promiscuous mode
[ 100.723733][ T6325] veth1_vlan: entered promiscuous mode
[ 100.771036][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.808491][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.822980][ T6325] veth0_macvtap: entered promiscuous mode
[ 100.842784][ T6325] veth1_macvtap: entered promiscuous mode
[ 100.874828][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.905005][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.922556][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.946693][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.955774][ T6332] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 100.966596][ T6332] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 100.977186][ T152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.995250][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.009327][ T6332] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 101.020277][ T6332] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 101.125701][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.135295][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.161890][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.204399][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.284558][ T6321] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 101.314356][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.314490][ T6321] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 101.334256][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.368224][ T6321] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 101.394356][ T6321] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 101.430584][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.442600][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.456712][ T6318] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.479446][ T6318] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.504808][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.506001][ T6318] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.530245][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.530634][ T6318] netdevsim netdevsim0 netdevsim3: renamed from eth3
2026/04/10 02:14:00 executed programs: 10
[ 101.624365][ T30] audit: type=1400 audit(1775787240.361:108): avc: denied { read write } for pid=6490 comm="syz.3.20" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 101.649177][ T30] audit: type=1400 audit(1775787240.361:109): avc: denied { open } for pid=6490 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 101.678214][ T30] audit: type=1400 audit(1775787240.361:110): avc: denied { ioctl } for pid=6490 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 101.678652][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.708021][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.719397][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.780842][ T6332] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.817102][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.824228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.862987][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.870104][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.871554][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 101.974672][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.985534][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.006174][ T6321] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.041547][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.048671][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.064318][ T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.071474][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.090963][ T6318] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.101262][ T10] usb 4-1: Using ep0 maxpacket: 16
[ 102.101363][ T6504] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 102.108872][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 102.143760][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.150926][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.152440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 102.158984][ T51] Bluetooth: hci2: command tx timeout
[ 102.175140][ T6324] Bluetooth: hci0: command tx timeout
[ 102.176800][ T5130] Bluetooth: hci1: command tx timeout
[ 102.180522][ T6324] Bluetooth: hci3: command tx timeout
[ 102.193217][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 102.207225][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 102.216720][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 102.224637][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.231806][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.237035][ T10] usb 4-1: Product: syz
[ 102.243183][ T6324] Bluetooth: hci4: command tx timeout
[ 102.254793][ T10] usb 4-1: Manufacturer: syz
[ 102.261119][ T10] usb 4-1: SerialNumber: syz
[ 102.271861][ T6504] usb 5-1: Using ep0 maxpacket: 16
[ 102.272713][ T10] usb 4-1: config 0 descriptor??
[ 102.296218][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 102.302765][ T6504] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 102.307906][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 102.363473][ T6504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 102.383839][ T6504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 102.411590][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.436900][ T6504] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 102.451203][ T6504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 102.468981][ T6504] usb 5-1: Product: syz
[ 102.489682][ T6504] usb 5-1: Manufacturer: syz
[ 102.505975][ T6504] usb 5-1: SerialNumber: syz
[ 102.522929][ T6332] veth0_vlan: entered promiscuous mode
[ 102.528884][ T6504] usb 5-1: config 0 descriptor??
[ 102.545516][ T6504] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 102.566226][ T6332] veth1_vlan: entered promiscuous mode
[ 102.573008][ T6504] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 102.574048][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 102.621835][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 102.661803][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 102.672874][ T10] em28xx 4-1:0.0: No AC97 audio processor
[ 102.678635][ T10] em28xx 4-1:0.0: We currently don't support analog TV or stream capture on dual tuners.
[ 102.700913][ T6332] veth0_macvtap: entered promiscuous mode
[ 102.719525][ T6332] veth1_macvtap: entered promiscuous mode
[ 102.756143][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.783768][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 102.790609][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 102.803559][ T6318] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.804045][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 102.817713][ T10] em28xx 4-1:0.0: No AC97 audio processor
[ 102.822566][ T6504] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 102.825288][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.844655][ T6504] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 102.858969][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.866650][ T6504] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 102.877695][ T6504] em28xx 5-1:0.0: No AC97 audio processor
[ 102.884051][ T6504] em28xx 5-1:0.0: We currently don't support analog TV or stream capture on dual tuners.
[ 102.912973][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.930438][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.970100][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.981591][ T6504] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 102.987944][ T6504] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 102.991452][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.008190][ T6504] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 103.030925][ T6504] em28xx 5-1:0.0: No AC97 audio processor
[ 103.151275][ T6318] veth0_vlan: entered promiscuous mode
[ 103.164192][ T6321] veth0_vlan: entered promiscuous mode
[ 103.234015][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.270525][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.298120][ T6318] veth1_vlan: entered promiscuous mode
[ 103.307270][ T6321] veth1_vlan: entered promiscuous mode
[ 103.361182][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.369005][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.408957][ T10] usb 4-1: USB disconnect, device number 2
[ 103.426681][ T10] em28xx 4-1:0.0: Disconnecting em28xx #2
[ 103.462841][ T6321] veth0_macvtap: entered promiscuous mode
[ 103.476376][ T10] em28xx 4-1:0.0: Disconnecting em28xx
[ 103.480419][ T6318] veth0_macvtap: entered promiscuous mode
[ 103.503795][ T6318] veth1_macvtap: entered promiscuous mode
[ 103.511940][ T10] em28xx 4-1:0.0: Freeing device
[ 103.530553][ T6321] veth1_macvtap: entered promiscuous mode
[ 103.538654][ T10] em28xx 4-1:0.0: Freeing device
[ 103.572890][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.612551][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.650670][ T3473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.664457][ T6504] usb 5-1: USB disconnect, device number 2
[ 103.673077][ T3473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.682307][ T6504] em28xx 5-1:0.0: Disconnecting em28xx #3
[ 103.688592][ T6504] em28xx 5-1:0.0: Disconnecting em28xx
[ 103.700134][ T3473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.708913][ T6504] ==================================================================
[ 103.716962][ T6504] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 103.726079][ T6504] Read of size 8 at addr ffff88805617c250 by task kworker/1:7/6504
[ 103.733962][ T6504]
[ 103.736279][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full)
[ 103.736300][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 103.736311][ T6504] Workqueue: usb_hub_wq hub_event
[ 103.736343][ T6504] Call Trace:
[ 103.736349][ T6504]
[ 103.736355][ T6504] dump_stack_lvl+0x100/0x190
[ 103.736383][ T6504] print_report+0x156/0x4c9
[ 103.736407][ T6504] ? __virt_addr_valid+0x239/0x430
[ 103.736435][ T6504] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 103.736461][ T6504] kasan_report+0xdf/0x1e0
[ 103.736480][ T6504] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 103.736509][ T6504] __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 103.736535][ T6504] em28xx_close_extension+0x10b/0x2b0
[ 103.736556][ T6504] em28xx_usb_disconnect.cold+0x13d/0x253
[ 103.736584][ T6504] usb_unbind_interface+0x1dd/0x9e0
[ 103.736612][ T6504] ? kernfs_remove_by_name_ns+0x9f/0xf0
[ 103.736634][ T6504] ? __pfx_usb_unbind_interface+0x10/0x10
[ 103.736662][ T6504] device_remove+0x12a/0x180
[ 103.736688][ T6504] device_release_driver_internal+0x44e/0x620
[ 103.736709][ T6504] bus_remove_device+0x2bc/0x560
[ 103.736733][ T6504] ? __pfx_bus_remove_device+0x10/0x10
[ 103.736752][ T6504] ? __pfx_device_remove_attrs+0x10/0x10
[ 103.736776][ T6504] ? up_write+0x290/0x4f0
[ 103.736797][ T6504] device_del+0x376/0x9b0
[ 103.736814][ T6504] ? __pfx_device_del+0x10/0x10
[ 103.736828][ T6504] ? kobject_put+0xb9/0x640
[ 103.736850][ T6504] usb_disable_device+0x367/0x810
[ 103.736876][ T6504] usb_disconnect+0x2e2/0x9a0
[ 103.736902][ T6504] hub_event+0x1d0c/0x4af0
[ 103.736933][ T6504] ? __lock_acquire+0x4a5/0x2630
[ 103.736950][ T6504] ? do_raw_spin_unlock+0x145/0x1e0
[ 103.736970][ T6504] ? __pfx_hub_event+0x10/0x10
[ 103.736992][ T6504] ? debug_object_deactivate+0x2e4/0x3b0
[ 103.737022][ T6504] ? rcu_is_watching+0x12/0xc0
[ 103.737045][ T6504] process_one_work+0xa23/0x19a0
[ 103.737067][ T6504] ? __pfx_process_one_work+0x10/0x10
[ 103.737088][ T6504] ? __pfx_hub_event+0x10/0x10
[ 103.737113][ T6504] worker_thread+0x5ef/0xe50
[ 103.737134][ T6504] ? __pfx_worker_thread+0x10/0x10
[ 103.737152][ T6504] ? kthread+0x13a/0x450
[ 103.737167][ T6504] ? __pfx_worker_thread+0x10/0x10
[ 103.737185][ T6504] kthread+0x370/0x450
[ 103.737201][ T6504] ? __pfx_kthread+0x10/0x10
[ 103.737217][ T6504] ret_from_fork+0x754/0xd80
[ 103.737235][ T6504] ? __pfx_ret_from_fork+0x10/0x10
[ 103.737253][ T6504] ? __switch_to+0x7b4/0x1120
[ 103.737274][ T6504] ? __pfx_kthread+0x10/0x10
[ 103.737292][ T6504] ret_from_fork_asm+0x1a/0x30
[ 103.737318][ T6504]
[ 103.737324][ T6504]
[ 103.832023][ T6394] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 103.832919][ T6504] Allocated by task 6412:
[ 103.870686][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.872911][ T6504] kasan_save_stack+0x30/0x50
[ 103.872940][ T6504] kasan_save_track+0x14/0x30
[ 103.872961][ T6504] __kasan_kmalloc+0xaa/0xb0
[ 103.872983][ T6504] __kmalloc_node_track_caller_noprof+0x304/0x850
[ 103.873009][ T6504] kmalloc_reserve+0xe8/0x350
[ 103.873025][ T6504] __alloc_skb+0x185/0x710
[ 103.873045][ T6504] alloc_skb_with_frags+0xe0/0x810
[ 103.873074][ T6504] sock_alloc_send_pskb+0x801/0x980
[ 103.873095][ T6504] unix_dgram_sendmsg+0x3c7/0x1820
[ 103.873114][ T6504] sock_write_iter+0x524/0x5a0
[ 103.873130][ T6504] vfs_write+0x6ac/0x1070
[ 103.873144][ T6504] ksys_write+0x1f8/0x250
[ 103.873157][ T6504] do_syscall_64+0x106/0xf80
[ 103.873171][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.873187][ T6504]
[ 103.873191][ T6504] Freed by task 5178:
[ 103.873199][ T6504] kasan_save_stack+0x30/0x50
[ 103.873222][ T6504] kasan_save_track+0x14/0x30
[ 103.873246][ T6504] kasan_save_free_info+0x3b/0x70
[ 103.873265][ T6504] __kasan_slab_free+0x5f/0x80
[ 103.873279][ T6504] kfree+0x1f6/0x6b0
[ 103.883220][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.887393][ T6504] skb_free_head+0xb9/0x160
[ 103.895440][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 103.896697][ T6504] skb_release_data+0x79b/0x9d0
[ 103.981534][ T6394] usb 3-1: Using ep0 maxpacket: 16
[ 103.983075][ T6504] consume_skb+0xc4/0x110
[ 103.993912][ T6394] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 103.995803][ T6504] __unix_dgram_recvmsg+0x754/0xc30
[ 104.000213][ T6394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 104.007279][ T6504] unix_dgram_recvmsg+0xd0/0x110
[ 104.007298][ T6504] sock_recvmsg+0x1a4/0x1f0
[ 104.007317][ T6504] ____sys_recvmsg+0x218/0x640
[ 104.007331][ T6504] ___sys_recvmsg+0x16a/0x1a0
[ 104.007346][ T6504] __sys_recvmsg+0x16d/0x220
[ 104.007366][ T6504] do_syscall_64+0x106/0xf80
[ 104.007379][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.016084][ T6394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 104.016677][ T6504]
[ 104.016683][ T6504] The buggy address belongs to the object at ffff88805617c000
[ 104.016683][ T6504] which belongs to the cache kmalloc-cg-512 of size 512
[ 104.029331][ T6394] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 104.032279][ T6504] The buggy address is located 80 bytes to the right of
[ 104.032279][ T6504] allocated 512-byte region [ffff88805617c000, ffff88805617c200)
[ 104.032296][ T6504]
[ 104.032301][ T6504] The buggy address belongs to the physical page:
[ 104.032313][ T6504] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5617c
[ 104.032328][ T6504] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 104.032339][ T6504] memcg:ffff88805617c211
[ 104.032345][ T6504] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 104.032360][ T6504] page_type: f5(slab)
[ 104.032374][ T6504] raw: 00fff00000000040 ffff88813fe58140 dead000000000100 dead000000000122
[ 104.036934][ T6394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.041862][ T6504] raw: 0000000000000000 0000040000100010 00000000f5000000 ffff88805617c211
[ 104.041877][ T6504] head: 00fff00000000040 ffff88813fe58140 dead000000000100 dead000000000122
[ 104.041891][ T6504] head: 0000000000000000 0000040000100010 00000000f5000000 ffff88805617c211
[ 104.041904][ T6504] head: 00fff00000000002 ffffea0001585f01 00000000ffffffff 00000000ffffffff
[ 104.041918][ T6504] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 104.041926][ T6504] page dumped because: kasan: bad access detected
[ 104.041934][ T6504] page_owner tracks the page as allocated
[ 104.041940][ T6504] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5167, tgid 5167 (klogd), ts 103543772922, free_ts 103538632030
[ 104.066088][ T6394] usb 3-1: Product: syz
[ 104.070131][ T6504] post_alloc_hook+0x153/0x170
[ 104.070156][ T6504] get_page_from_freelist+0x111d/0x3140
[ 104.070178][ T6504] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 104.077629][ T30] audit: type=1400 audit(1775787242.781:111): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 104.078375][ T6504] new_slab+0xa6/0x6b0
[ 104.082380][ T30] audit: type=1400 audit(1775787242.791:112): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 104.086978][ T6504] refill_objects+0x26b/0x400
[ 104.092034][ T10] usb 4-1: Using ep0 maxpacket: 16
[ 104.096618][ T6504] __pcs_replace_empty_main+0x1ab/0x660
[ 104.101428][ T30] audit: type=1400 audit(1775787242.791:113): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 104.105218][ T6504] __kmalloc_node_track_caller_noprof+0x694/0x850
[ 104.105244][ T6504] kmalloc_reserve+0xe8/0x350
[ 104.113470][ T30] audit: type=1400 audit(1775787242.791:114): avc: denied { add_name } for pid=5160 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 104.116892][ T6504] __alloc_skb+0x185/0x710
[ 104.116915][ T6504] alloc_skb_with_frags+0xe0/0x810
[ 104.116937][ T6504] sock_alloc_send_pskb+0x801/0x980
[ 104.125185][ T6394] usb 3-1: Manufacturer: syz
[ 104.129186][ T6504] unix_dgram_sendmsg+0x3c7/0x1820
[ 104.129208][ T6504] __sys_sendto+0x468/0x4b0
[ 104.129228][ T6504] __x64_sys_sendto+0xe0/0x1c0
[ 104.135161][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 104.138603][ T6504] do_syscall_64+0x106/0xf80
[ 104.150717][ T6394] usb 3-1: SerialNumber: syz
[ 104.155184][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.155203][ T6504] page last free pid 10 tgid 10 stack trace:
[ 104.155213][ T6504] __free_frozen_pages+0x7e1/0x10d0
[ 104.155232][ T6504] kref_put.constprop.0.isra.0+0x4d/0x6d
[ 104.155257][ T6504] em28xx_usb_disconnect.cold+0x1b4/0x253
[ 104.155280][ T6504] usb_unbind_interface+0x1dd/0x9e0
[ 104.155304][ T6504] device_remove+0x12a/0x180
[ 104.155326][ T6504] device_release_driver_internal+0x44e/0x620
[ 104.155343][ T6504] bus_remove_device+0x2bc/0x560
[ 104.155363][ T6504] device_del+0x376/0x9b0
[ 104.155376][ T6504] usb_disable_device+0x367/0x810
[ 104.155396][ T6504] usb_disconnect+0x2e2/0x9a0
[ 104.155417][ T6504] hub_event+0x1d0c/0x4af0
[ 104.155438][ T6504] process_one_work+0xa23/0x19a0
[ 104.155455][ T6504] worker_thread+0x5ef/0xe50
[ 104.155470][ T6504] kthread+0x370/0x450
[ 104.155485][ T6504] ret_from_fork+0x754/0xd80
[ 104.155500][ T6504] ret_from_fork_asm+0x1a/0x30
[ 104.155520][ T6504]
[ 104.155524][ T6504] Memory state around the buggy address:
[ 104.155534][ T6504] ffff88805617c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.155546][ T6504] ffff88805617c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.155557][ T6504] >ffff88805617c200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.155566][ T6504] ^
[ 104.155573][ T6504] ffff88805617c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.155581][ T6504] ffff88805617c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.155588][ T6504] ==================================================================
[ 104.203412][ T6504] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.203428][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full)
[ 104.203446][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 104.203456][ T6504] Workqueue: usb_hub_wq hub_event
[ 104.203481][ T6504] Call Trace:
[ 104.203485][ T6504]
[ 104.203491][ T6504] dump_stack_lvl+0x100/0x190
[ 104.203515][ T6504] vpanic+0x552/0x970
[ 104.203530][ T6504] ? __pfx_vpanic+0x10/0x10
[ 104.203547][ T6504] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 104.203569][ T6504] panic+0xd1/0xe0
[ 104.203582][ T6504] ? __pfx_panic+0x10/0x10
[ 104.203597][ T6504] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 104.203618][ T6504] ? preempt_schedule_common+0x42/0xc0
[ 104.203642][ T6504] ? check_panic_on_warn+0x1f/0x90
[ 104.203658][ T6504] check_panic_on_warn.cold+0x19/0x34
[ 104.203673][ T6504] end_report.part.0+0x3a/0x90
[ 104.203694][ T6504] kasan_report.cold+0xe/0x18
[ 104.203714][ T6504] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 104.203738][ T6504] __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 104.203761][ T6504] em28xx_close_extension+0x10b/0x2b0
[ 104.203779][ T6504] em28xx_usb_disconnect.cold+0x13d/0x253
[ 104.203802][ T6504] usb_unbind_interface+0x1dd/0x9e0
[ 104.203826][ T6504] ? kernfs_remove_by_name_ns+0x9f/0xf0
[ 104.203845][ T6504] ? __pfx_usb_unbind_interface+0x10/0x10
[ 104.203867][ T6504] device_remove+0x12a/0x180
[ 104.203894][ T6504] device_release_driver_internal+0x44e/0x620
[ 104.203912][ T6504] bus_remove_device+0x2bc/0x560
[ 104.203934][ T6504] ? __pfx_bus_remove_device+0x10/0x10
[ 104.203954][ T6504] ? __pfx_device_remove_attrs+0x10/0x10
[ 104.203975][ T6504] ? up_write+0x290/0x4f0
[ 104.203994][ T6504] device_del+0x376/0x9b0
[ 104.204008][ T6504] ? __pfx_device_del+0x10/0x10
[ 104.204020][ T6504] ? kobject_put+0xb9/0x640
[ 104.204038][ T6504] usb_disable_device+0x367/0x810
[ 104.204061][ T6504] usb_disconnect+0x2e2/0x9a0
[ 104.204087][ T6504] hub_event+0x1d0c/0x4af0
[ 104.204113][ T6504] ? __lock_acquire+0x4a5/0x2630
[ 104.204128][ T6504] ? do_raw_spin_unlock+0x145/0x1e0
[ 104.204145][ T6504] ? __pfx_hub_event+0x10/0x10
[ 104.204165][ T6504] ? debug_object_deactivate+0x2e4/0x3b0
[ 104.204190][ T6504] ? rcu_is_watching+0x12/0xc0
[ 104.204209][ T6504] process_one_work+0xa23/0x19a0
[ 104.204229][ T6504] ? __pfx_process_one_work+0x10/0x10
[ 104.204247][ T6504] ? __pfx_hub_event+0x10/0x10
[ 104.204268][ T6504] worker_thread+0x5ef/0xe50
[ 104.204286][ T6504] ? __pfx_worker_thread+0x10/0x10
[ 104.204302][ T6504] ? kthread+0x13a/0x450
[ 104.204316][ T6504] ? __pfx_worker_thread+0x10/0x10
[ 104.204331][ T6504] kthread+0x370/0x450
[ 104.204345][ T6504] ? __pfx_kthread+0x10/0x10
[ 104.204360][ T6504] ret_from_fork+0x754/0xd80
[ 104.204375][ T6504] ? __pfx_ret_from_fork+0x10/0x10
[ 104.204390][ T6504] ? __switch_to+0x7b4/0x1120
[ 104.204408][ T6504] ? __pfx_kthread+0x10/0x10
[ 104.204423][ T6504] ret_from_fork_asm+0x1a/0x30
[ 104.204445][ T6504]
[ 104.212805][ T6504] Kernel Offset: disabled