Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts.
2026/04/10 01:57:14 parsed 1 programs
[ 85.274075][ T30] kauditd_printk_skb: 13 callbacks suppressed
[ 85.274090][ T30] audit: type=1400 audit(1775786234.294:105): avc: denied { node_bind } for pid=6207 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 87.308253][ T30] audit: type=1400 audit(1775786236.324:106): avc: denied { mounton } for pid=6213 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 87.342433][ T30] audit: type=1400 audit(1775786236.364:107): avc: denied { unlink } for pid=6213 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 88.490311][ T6213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.281768][ T30] audit: type=1400 audit(1775786239.304:108): avc: denied { unmount } for pid=6226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 90.645039][ T6228] chnl_net:caif_netlink_parms(): no params data found
[ 90.924115][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.940913][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.948031][ T6228] bridge_slave_0: entered allmulticast mode
[ 90.956598][ T6228] bridge_slave_0: entered promiscuous mode
[ 90.965235][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.972496][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.979587][ T6228] bridge_slave_1: entered allmulticast mode
[ 90.986951][ T6228] bridge_slave_1: entered promiscuous mode
[ 91.072622][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.134770][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.191493][ T6228] team0: Port device team_slave_0 added
[ 91.221395][ T6228] team0: Port device team_slave_1 added
[ 91.354655][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.373839][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.381399][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.389011][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.396994][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.546077][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.553137][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.579140][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.611043][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.619962][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.646507][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.769428][ T6228] hsr_slave_0: entered promiscuous mode
[ 91.775554][ T6228] hsr_slave_1: entered promiscuous mode
[ 91.956116][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.972461][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.082840][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.109785][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.599996][ T30] audit: type=1401 audit(1775786241.614:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 92.644562][ T6228] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 92.669792][ T6228] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 92.686921][ T6228] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 92.701234][ T6228] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 92.788856][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.809293][ T6228] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.824461][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.831587][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.857108][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.864236][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.037615][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.074223][ T6228] veth0_vlan: entered promiscuous mode
[ 93.086807][ T6228] veth1_vlan: entered promiscuous mode
[ 93.106827][ T6228] veth0_macvtap: entered promiscuous mode
[ 93.115087][ T6228] veth1_macvtap: entered promiscuous mode
[ 93.128027][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.139628][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.156093][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.166134][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.176532][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.185599][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/04/10 01:57:22 executed programs: 0
[ 93.283788][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.291751][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.307451][ T6321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.321894][ T6321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 93.333831][ T6321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 93.342627][ T6321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.342783][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 93.357205][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.374629][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 93.384537][ T6321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 93.392936][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 93.403777][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 93.416926][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 93.429908][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 93.437405][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 93.456497][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 93.482172][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 93.490093][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 93.497428][ T6321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 93.514770][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 93.522653][ T6321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 93.533474][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 93.542669][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 93.549782][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 93.557398][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 93.774164][ T6317] chnl_net:caif_netlink_parms(): no params data found
[ 93.853926][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.906220][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.913926][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.921053][ T6317] bridge_slave_0: entered allmulticast mode
[ 93.927740][ T6317] bridge_slave_0: entered promiscuous mode
[ 93.955131][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.962253][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.969307][ T6317] bridge_slave_1: entered allmulticast mode
[ 93.976200][ T6317] bridge_slave_1: entered promiscuous mode
[ 94.055733][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.067360][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.113291][ T6317] team0: Port device team_slave_0 added
[ 94.132032][ T6317] team0: Port device team_slave_1 added
[ 94.141672][ T6320] chnl_net:caif_netlink_parms(): no params data found
[ 94.159399][ T6330] chnl_net:caif_netlink_parms(): no params data found
[ 94.203148][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.210076][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.236049][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.248779][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.255798][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.282585][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.323086][ T6328] chnl_net:caif_netlink_parms(): no params data found
[ 94.342849][ T6326] chnl_net:caif_netlink_parms(): no params data found
[ 94.424014][ T6317] hsr_slave_0: entered promiscuous mode
[ 94.431097][ T6317] hsr_slave_1: entered promiscuous mode
[ 94.436908][ T6317] debugfs: 'hsr0' already exists in 'hsr'
[ 94.442648][ T6317] Cannot create hsr debugfs directory
[ 94.467066][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.474334][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.481881][ T6330] bridge_slave_0: entered allmulticast mode
[ 94.488509][ T6330] bridge_slave_0: entered promiscuous mode
[ 94.497311][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.504516][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.511668][ T6330] bridge_slave_1: entered allmulticast mode
[ 94.518736][ T6330] bridge_slave_1: entered promiscuous mode
[ 94.536860][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.544264][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.551407][ T6320] bridge_slave_0: entered allmulticast mode
[ 94.558021][ T6320] bridge_slave_0: entered promiscuous mode
[ 94.581685][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.591601][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.598660][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.605875][ T6320] bridge_slave_1: entered allmulticast mode
[ 94.613086][ T6320] bridge_slave_1: entered promiscuous mode
[ 94.639001][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.694529][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.701941][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.708997][ T6326] bridge_slave_0: entered allmulticast mode
[ 94.715739][ T6326] bridge_slave_0: entered promiscuous mode
[ 94.725337][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.757814][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.764938][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.772358][ T6326] bridge_slave_1: entered allmulticast mode
[ 94.778958][ T6326] bridge_slave_1: entered promiscuous mode
[ 94.786823][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.796785][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.803896][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.811012][ T6328] bridge_slave_0: entered allmulticast mode
[ 94.817608][ T6328] bridge_slave_0: entered promiscuous mode
[ 94.829135][ T6330] team0: Port device team_slave_0 added
[ 94.836695][ T6330] team0: Port device team_slave_1 added
[ 94.854732][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.862033][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.869113][ T6328] bridge_slave_1: entered allmulticast mode
[ 94.876113][ T6328] bridge_slave_1: entered promiscuous mode
[ 94.932836][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.944843][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.959006][ T6320] team0: Port device team_slave_0 added
[ 94.967980][ T6320] team0: Port device team_slave_1 added
[ 94.979285][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.993482][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.000408][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.026469][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.038402][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.045721][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.072582][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.103088][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.124682][ T6326] team0: Port device team_slave_0 added
[ 95.159899][ T6326] team0: Port device team_slave_1 added
[ 95.166365][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.173840][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.200109][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.219074][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.226036][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.252081][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.287440][ T6328] team0: Port device team_slave_0 added
[ 95.304229][ T6330] hsr_slave_0: entered promiscuous mode
[ 95.310210][ T6330] hsr_slave_1: entered promiscuous mode
[ 95.316602][ T6330] debugfs: 'hsr0' already exists in 'hsr'
[ 95.322773][ T6330] Cannot create hsr debugfs directory
[ 95.335824][ T6328] team0: Port device team_slave_1 added
[ 95.354216][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.385650][ T6320] hsr_slave_0: entered promiscuous mode
[ 95.391762][ T6320] hsr_slave_1: entered promiscuous mode
[ 95.397655][ T6320] debugfs: 'hsr0' already exists in 'hsr'
[ 95.403424][ T6320] Cannot create hsr debugfs directory
[ 95.409364][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.416516][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.443929][ T51] Bluetooth: hci1: command tx timeout
[ 95.449485][ T51] Bluetooth: hci0: command tx timeout
[ 95.455453][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.474015][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.481464][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.507765][ T51] Bluetooth: hci2: command tx timeout
[ 95.510531][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.580695][ T5841] Bluetooth: hci3: command tx timeout
[ 95.586268][ T51] Bluetooth: hci4: command tx timeout
[ 95.608177][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.628238][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.635347][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.661728][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.693445][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.700384][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.727157][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.824306][ T6326] hsr_slave_0: entered promiscuous mode
[ 95.832505][ T6326] hsr_slave_1: entered promiscuous mode
[ 95.838599][ T6326] debugfs: 'hsr0' already exists in 'hsr'
[ 95.847592][ T6326] Cannot create hsr debugfs directory
[ 95.862630][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.984442][ T6328] hsr_slave_0: entered promiscuous mode
[ 95.992746][ T6328] hsr_slave_1: entered promiscuous mode
[ 95.998638][ T6328] debugfs: 'hsr0' already exists in 'hsr'
[ 96.011805][ T6328] Cannot create hsr debugfs directory
[ 96.455646][ T1140] bridge_slave_1: left allmulticast mode
[ 96.462336][ T1140] bridge_slave_1: left promiscuous mode
[ 96.468031][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.477497][ T1140] bridge_slave_0: left allmulticast mode
[ 96.485217][ T1140] bridge_slave_0: left promiscuous mode
[ 96.490940][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.714750][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 96.725360][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 96.738859][ T1140] bond0 (unregistering): Released all slaves
[ 96.798972][ T6317] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 96.857013][ T6317] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 96.899308][ T6317] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 96.912893][ T6317] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 97.006600][ T6330] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 97.022709][ T6330] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 97.050423][ T1140] hsr_slave_0: left promiscuous mode
[ 97.056294][ T1140] hsr_slave_1: left promiscuous mode
[ 97.062450][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.069822][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.078633][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.088187][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.099533][ T1140] veth1_macvtap: left promiscuous mode
[ 97.105574][ T1140] veth0_macvtap: left promiscuous mode
[ 97.111310][ T1140] veth1_vlan: left promiscuous mode
[ 97.116573][ T1140] veth0_vlan: left promiscuous mode
[ 97.239425][ T1140] team0 (unregistering): Port device team_slave_1 removed
[ 97.251795][ T1140] team0 (unregistering): Port device team_slave_0 removed
[ 97.314123][ T6330] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 97.335854][ T6330] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 97.473323][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.498605][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.505477][ T5841] Bluetooth: hci1: command tx timeout
[ 97.511179][ T51] Bluetooth: hci0: command tx timeout
[ 97.528554][ T6317] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.555347][ T780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.562449][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.579900][ T6330] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.597117][ T51] Bluetooth: hci2: command tx timeout
[ 97.599162][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.609632][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.648179][ T780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.655310][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.670060][ T780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.671915][ T51] Bluetooth: hci4: command tx timeout
[ 97.677162][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.682777][ T5841] Bluetooth: hci3: command tx timeout
[ 97.809980][ T6330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 98.031360][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.126917][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.164478][ T6330] veth0_vlan: entered promiscuous mode
[ 98.203437][ T6330] veth1_vlan: entered promiscuous mode
[ 98.220188][ T6320] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.241932][ T6317] veth0_vlan: entered promiscuous mode
[ 98.261686][ T6320] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.273257][ T6320] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.297584][ T6317] veth1_vlan: entered promiscuous mode
[ 98.305714][ T6320] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.363433][ T6330] veth0_macvtap: entered promiscuous mode
[ 98.393606][ T6330] veth1_macvtap: entered promiscuous mode
[ 98.407499][ T6317] veth0_macvtap: entered promiscuous mode
[ 98.421513][ T6317] veth1_macvtap: entered promiscuous mode
[ 98.430275][ T6326] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 98.460357][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.496682][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.505164][ T6326] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 98.547993][ T6326] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 98.572899][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.593140][ T6326] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 98.612427][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.621945][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.664643][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.680707][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.718701][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.739838][ T6328] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 98.755765][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.765888][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.793007][ T6328] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 98.815627][ T6328] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 98.830997][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.839693][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.869156][ T6328] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 98.936370][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.958695][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.985966][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.017416][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.029158][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.065778][ T6320] 8021q: adding VLAN 0 to HW filter on device team0
2026/04/10 01:57:28 executed programs: 10
[ 99.122384][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.129487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.154111][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.161234][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.197346][ T30] audit: type=1400 audit(1775786248.214:110): avc: denied { read write } for pid=6511 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 99.237243][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.248135][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.267955][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.278863][ T30] audit: type=1400 audit(1775786248.214:111): avc: denied { open } for pid=6511 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 99.328639][ T30] audit: type=1400 audit(1775786248.214:112): avc: denied { ioctl } for pid=6511 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 99.388841][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.405121][ T6326] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.412312][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.443865][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.451007][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.458917][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 99.491968][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.499090][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.544521][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.581640][ T51] Bluetooth: hci0: command tx timeout
[ 99.587037][ T5841] Bluetooth: hci1: command tx timeout
[ 99.619179][ T6328] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.626075][ T9] usb 3-1: Using ep0 maxpacket: 16
[ 99.633754][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 99.646324][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 99.658588][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 99.674778][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.681205][ T5841] Bluetooth: hci2: command tx timeout
[ 99.681887][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.691602][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 99.704656][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 99.712702][ T9] usb 3-1: Product: syz
[ 99.718781][ T9] usb 3-1: Manufacturer: syz
[ 99.723953][ T9] usb 3-1: SerialNumber: syz
[ 99.736953][ T6326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 99.743108][ T9] usb 3-1: config 0 descriptor??
[ 99.753080][ T5841] Bluetooth: hci4: command tx timeout
[ 99.758462][ T5841] Bluetooth: hci3: command tx timeout
[ 99.774331][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 99.774895][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.784226][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 99.798325][ T6522] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 99.810293][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.817420][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.852422][ T6328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 99.880703][ T6328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 99.980772][ T6522] usb 2-1: Using ep0 maxpacket: 16
[ 99.988980][ T6522] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 100.020570][ T6522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 100.042724][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 100.045870][ T6320] veth0_vlan: entered promiscuous mode
[ 100.056374][ T6522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 100.074727][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 100.093305][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 100.100274][ T9] em28xx 3-1:0.0: No AC97 audio processor
[ 100.102086][ T6320] veth1_vlan: entered promiscuous mode
[ 100.122582][ T6522] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 100.134536][ T9] em28xx 3-1:0.0: We currently don't support analog TV or stream capture on dual tuners.
[ 100.147031][ T6522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 100.155391][ T6522] usb 2-1: Product: syz
[ 100.159544][ T6522] usb 2-1: Manufacturer: syz
[ 100.166190][ T6522] usb 2-1: SerialNumber: syz
[ 100.180296][ T6522] usb 2-1: config 0 descriptor??
[ 100.201278][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.204329][ T6522] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 100.221653][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 100.228383][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 100.253382][ T6522] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 100.267317][ T6320] veth0_macvtap: entered promiscuous mode
[ 100.275140][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 100.290913][ T9] em28xx 3-1:0.0: No AC97 audio processor
[ 100.319525][ T6320] veth1_macvtap: entered promiscuous mode
[ 100.338423][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.366633][ T6326] veth0_vlan: entered promiscuous mode
[ 100.390060][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.418140][ T6326] veth1_vlan: entered promiscuous mode
[ 100.435751][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.465844][ T1140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.483189][ T6522] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 100.489247][ T1140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.519931][ T1140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.532174][ T6522] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 100.564289][ T6522] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[ 100.566891][ T1140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.589606][ T6522] em28xx 2-1:0.0: No AC97 audio processor
[ 100.596177][ T6326] veth0_macvtap: entered promiscuous mode
[ 100.610663][ T6522] em28xx 2-1:0.0: We currently don't support analog TV or stream capture on dual tuners.
[ 100.616193][ T6326] veth1_macvtap: entered promiscuous mode
[ 100.672388][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.688879][ T6522] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 100.694636][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.720562][ T6522] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 100.731667][ T6522] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[ 100.740548][ T6522] em28xx 2-1:0.0: No AC97 audio processor
[ 100.754089][ T263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.790858][ T263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.822405][ T263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.838099][ T263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.913020][ T9] usb 3-1: USB disconnect, device number 2
[ 100.933928][ T263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.963024][ T9] em28xx 3-1:0.0: Disconnecting em28xx #1
[ 100.968758][ T9] em28xx 3-1:0.0: Disconnecting em28xx
[ 100.981493][ T263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.025649][ T9] em28xx 3-1:0.0: Freeing device
[ 101.039926][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.050588][ T9] em28xx 3-1:0.0: Freeing device
[ 101.065687][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.120144][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.140761][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.155035][ T6328] veth0_vlan: entered promiscuous mode
[ 101.179052][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.199594][ T6328] veth1_vlan: entered promiscuous mode
[ 101.205315][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.266756][ T6328] veth0_macvtap: entered promiscuous mode
[ 101.299457][ T6328] veth1_macvtap: entered promiscuous mode
[ 101.362446][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.371137][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 101.373821][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.380922][ T6522] usb 2-1: USB disconnect, device number 2
[ 101.410888][ T780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.416726][ T6522] em28xx 2-1:0.0: Disconnecting em28xx #3
[ 101.429497][ T780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.437947][ T6522] em28xx 2-1:0.0: Disconnecting em28xx
[ 101.457251][ T6522] ==================================================================
[ 101.459445][ T780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.465309][ T6522] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 101.465341][ T6522] Read of size 8 at addr ffff888034a94250 by task kworker/0:5/6522
[ 101.465355][ T6522]
[ 101.465363][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 101.465381][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 101.465392][ T6522] Workqueue: usb_hub_wq hub_event
[ 101.465415][ T6522] Call Trace:
[ 101.465421][ T6522]
[ 101.465426][ T6522] dump_stack_lvl+0x100/0x190
[ 101.465450][ T6522] print_report+0x156/0x4c9
[ 101.465470][ T6522] ? __virt_addr_valid+0x239/0x430
[ 101.465493][ T6522] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 101.465514][ T6522] kasan_report+0xdf/0x1e0
[ 101.465530][ T6522] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 101.465553][ T6522] __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 101.465575][ T6522] em28xx_close_extension+0x10b/0x2b0
[ 101.465593][ T6522] em28xx_usb_disconnect.cold+0x13d/0x253
[ 101.465615][ T6522] usb_unbind_interface+0x1dd/0x9e0
[ 101.465639][ T6522] ? kernfs_remove_by_name_ns+0x9f/0xf0
[ 101.465657][ T6522] ? __pfx_usb_unbind_interface+0x10/0x10
[ 101.465680][ T6522] device_remove+0x12a/0x180
[ 101.465702][ T6522] device_release_driver_internal+0x44e/0x620
[ 101.465720][ T6522] bus_remove_device+0x2bc/0x560
[ 101.465741][ T6522] ? __pfx_bus_remove_device+0x10/0x10
[ 101.465761][ T6522] ? __pfx_device_remove_attrs+0x10/0x10
[ 101.465782][ T6522] ? up_write+0x290/0x4f0
[ 101.465800][ T6522] device_del+0x376/0x9b0
[ 101.465813][ T6522] ? __pfx_device_del+0x10/0x10
[ 101.465826][ T6522] ? kobject_put+0xb9/0x640
[ 101.465844][ T6522] usb_disable_device+0x367/0x810
[ 101.465866][ T6522] usb_disconnect+0x2e2/0x9a0
[ 101.465887][ T6522] hub_event+0x1d0c/0x4af0
[ 101.465913][ T6522] ? __lock_acquire+0x4a5/0x2630
[ 101.465927][ T6522] ? do_raw_spin_unlock+0x145/0x1e0
[ 101.465944][ T6522] ? __pfx_hub_event+0x10/0x10
[ 101.465963][ T6522] ? debug_object_deactivate+0x2e4/0x3b0
[ 101.465988][ T6522] ? rcu_is_watching+0x12/0xc0
[ 101.466007][ T6522] process_one_work+0xa23/0x19a0
[ 101.466027][ T6522] ? __pfx_process_one_work+0x10/0x10
[ 101.466045][ T6522] ? __pfx_hub_event+0x10/0x10
[ 101.466065][ T6522] worker_thread+0x5ef/0xe50
[ 101.466082][ T6522] ? __pfx_worker_thread+0x10/0x10
[ 101.466098][ T6522] ? kthread+0x13a/0x450
[ 101.466116][ T6522] ? __pfx_worker_thread+0x10/0x10
[ 101.466131][ T6522] kthread+0x370/0x450
[ 101.466144][ T6522] ? __pfx_kthread+0x10/0x10
[ 101.466158][ T6522] ret_from_fork+0x754/0xd80
[ 101.466173][ T6522] ? __pfx_ret_from_fork+0x10/0x10
[ 101.466189][ T6522] ? __switch_to+0x7b4/0x1120
[ 101.466206][ T6522] ? __pfx_kthread+0x10/0x10
[ 101.466221][ T6522] ret_from_fork_asm+0x1a/0x30
[ 101.466242][ T6522]
[ 101.466247][ T6522]
[ 101.479032][ T780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.483221][ T6522] Allocated by task 1152:
[ 101.483230][ T6522] kasan_save_stack+0x30/0x50
[ 101.483255][ T6522] kasan_save_track+0x14/0x30
[ 101.483276][ T6522] __kasan_slab_alloc+0x89/0x90
[ 101.483289][ T6522] kmem_cache_alloc_node_noprof+0x25a/0x6f0
[ 101.483314][ T6522] kmalloc_reserve+0x148/0x350
[ 101.483330][ T6522] __alloc_skb+0x185/0x710
[ 101.483350][ T6522] inet6_rt_notify+0x1d2/0x4c0
[ 101.483371][ T6522] fib6_add_rt2node+0x1c1d/0x3df0
[ 101.483385][ T6522] fib6_add+0x60e/0x1d30
[ 101.483398][ T6522] ip6_route_add+0xf9/0x1d0
[ 101.483416][ T6522] addrconf_add_mroute+0x1de/0x350
[ 101.491407][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 101.493576][ T6522] addrconf_add_dev+0x14e/0x1a0
[ 101.600549][ T5911] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 101.604594][ T6522] addrconf_init_auto_addrs+0x10e/0x780
[ 101.661772][ T29] usb 1-1: Using ep0 maxpacket: 16
[ 101.662382][ T6522] addrconf_notify+0x9aa/0x19d0
[ 101.669649][ T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 101.672722][ T6522] notifier_call_chain+0x99/0x420
[ 101.672741][ T6522] call_netdevice_notifiers_info+0xbe/0x110
[ 101.672759][ T6522] netif_state_change+0x165/0x380
[ 101.672774][ T6522] linkwatch_do_dev+0xdb/0x110
[ 101.672788][ T6522] __linkwatch_run_queue+0x3a9/0x900
[ 101.672804][ T6522] linkwatch_event+0x8f/0xc0
[ 101.672819][ T6522] process_one_work+0xa23/0x19a0
[ 101.678791][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 101.683070][ T6522] worker_thread+0x5ef/0xe50
[ 101.683089][ T6522] kthread+0x370/0x450
[ 101.683103][ T6522] ret_from_fork+0x754/0xd80
[ 101.698016][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 101.701706][ T6522] ret_from_fork_asm+0x1a/0x30
[ 101.701728][ T6522]
[ 101.701733][ T6522] Freed by task 1152:
[ 101.701741][ T6522] kasan_save_stack+0x30/0x50
[ 101.701766][ T6522] kasan_save_track+0x14/0x30
[ 101.709091][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 101.710880][ T6522] kasan_save_free_info+0x3b/0x70
[ 101.710903][ T6522] __kasan_slab_free+0x5f/0x80
[ 101.710916][ T6522] kfree+0x1f6/0x6b0
[ 101.710933][ T6522] skb_free_head+0xb9/0x160
[ 101.715967][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 101.720061][ T6522] skb_release_data+0x79b/0x9d0
[ 101.720084][ T6522] consume_skb+0xc4/0x110
[ 101.730572][ T29] usb 1-1: Product: syz
[ 101.734375][ T6522] netlink_broadcast_filtered+0x3cc/0xf50
[ 101.751053][ T29] usb 1-1: Manufacturer: syz
[ 101.753060][ T6522] nlmsg_notify+0xb1/0x290
[ 101.753078][ T6522] inet6_rt_notify+0x2d8/0x4c0
[ 101.753099][ T6522] fib6_add_rt2node+0x1c1d/0x3df0
[ 101.765780][ T29] usb 1-1: SerialNumber: syz
[ 101.766695][ T6522] fib6_add+0x60e/0x1d30
[ 101.772032][ T5911] usb 4-1: Using ep0 maxpacket: 16
[ 101.777381][ T6522] ip6_route_add+0xf9/0x1d0
[ 101.784712][ T29] usb 1-1: config 0 descriptor??
[ 101.786503][ T6522] addrconf_add_mroute+0x1de/0x350
[ 101.794669][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 101.796230][ T6522] addrconf_add_dev+0x14e/0x1a0
[ 101.800446][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7
[ 101.804912][ T6522] addrconf_init_auto_addrs+0x10e/0x780
[ 101.804929][ T6522] addrconf_notify+0x9aa/0x19d0
[ 101.804945][ T6522] notifier_call_chain+0x99/0x420
[ 101.804960][ T6522] call_netdevice_notifiers_info+0xbe/0x110
[ 101.804976][ T6522] netif_state_change+0x165/0x380
[ 101.804990][ T6522] linkwatch_do_dev+0xdb/0x110
[ 101.805006][ T6522] __linkwatch_run_queue+0x3a9/0x900
[ 101.805021][ T6522] linkwatch_event+0x8f/0xc0
[ 101.805035][ T6522] process_one_work+0xa23/0x19a0
[ 101.813916][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024
[ 101.817545][ T6522] worker_thread+0x5ef/0xe50
[ 101.825648][ T29] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 101.829792][ T6522] kthread+0x370/0x450
[ 101.835811][ T29] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 101.840386][ T6522] ret_from_fork+0x754/0xd80
[ 101.840404][ T6522] ret_from_fork_asm+0x1a/0x30
[ 101.840423][ T6522]
[ 101.840429][ T6522] The buggy address belongs to the object at ffff888034a94000
[ 101.840429][ T6522] which belongs to the cache skbuff_small_head of size 704
[ 101.847554][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1
[ 101.856666][ T6522] The buggy address is located 592 bytes inside of
[ 101.856666][ T6522] freed 704-byte region [ffff888034a94000, ffff888034a942c0)
[ 101.856685][ T6522]
[ 101.856690][ T6522] The buggy address belongs to the physical page:
[ 101.856697][ T6522] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34a94
[ 101.856712][ T6522] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.856725][ T6522] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 101.856740][ T6522] page_type: f5(slab)
[ 101.856755][ T6522] raw: 00fff00000000040 ffff88802028ac80 dead000000000122 0000000000000000
[ 101.856770][ T6522] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[ 101.870564][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 101.872624][ T6522] head: 00fff00000000040 ffff88802028ac80 dead000000000122 0000000000000000
[ 101.872641][ T6522] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000
[ 101.872656][ T6522] head: 00fff00000000002 ffffea0000d2a501 00000000ffffffff 00000000ffffffff
[ 101.877452][ T5911] usb 4-1: Product: syz
[ 101.882643][ T6522] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 101.882653][ T6522] page dumped because: kasan: bad access detected
[ 101.882661][ T6522] page_owner tracks the page as allocated
[ 101.882667][ T6522] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1152, tgid 1152 (kworker/u8:9), ts 101221633385, free_ts 101077163654
[ 101.894457][ T5911] usb 4-1: Manufacturer: syz
[ 101.903051][ T6522] post_alloc_hook+0x153/0x170
[ 101.903075][ T6522] get_page_from_freelist+0x111d/0x3140
[ 101.903097][ T6522] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 101.903123][ T6522] new_slab+0xa6/0x6b0
[ 101.903141][ T6522] refill_objects+0x26b/0x400
[ 101.903161][ T6522] __pcs_replace_empty_main+0x1ab/0x660
[ 101.903185][ T6522] kmem_cache_alloc_node_noprof+0x569/0x6f0
[ 101.903208][ T6522] kmalloc_reserve+0x148/0x350
[ 101.903225][ T6522] __alloc_skb+0x185/0x710
[ 101.903244][ T6522] __ipv6_ifa_notify+0x1f1/0xf90
[ 101.903266][ T6522] addrconf_dad_completed+0x195/0xff0
[ 101.903283][ T6522] addrconf_dad_work+0x83c/0x1360
[ 101.903297][ T6522] process_one_work+0xa23/0x19a0
[ 101.903313][ T6522] worker_thread+0x5ef/0xe50
[ 101.903329][ T6522] kthread+0x370/0x450
[ 101.903343][ T6522] ret_from_fork+0x754/0xd80
[ 101.903359][ T6522] page last free pid 9 tgid 9 stack trace:
[ 101.903367][ T6522] __free_frozen_pages+0x7e1/0x10d0
[ 101.903387][ T6522] stack_depot_save_flags+0x435/0x9d0
[ 101.903406][ T6522] kasan_save_stack+0x3f/0x50
[ 101.903429][ T6522] kasan_save_track+0x14/0x30
[ 101.903452][ T6522] __kasan_kmalloc+0xaa/0xb0
[ 101.903475][ T6522] kobject_uevent_env+0x263/0x18b0
[ 101.903494][ T6522] device_del+0x605/0x9b0
[ 101.903508][ T6522] usb_disconnect+0x5b5/0x9a0
[ 101.903527][ T6522] hub_event+0x1d0c/0x4af0
[ 101.903547][ T6522] process_one_work+0xa23/0x19a0
[ 101.903563][ T6522] worker_thread+0x5ef/0xe50
[ 101.903579][ T6522] kthread+0x370/0x450
[ 101.903593][ T6522] ret_from_fork+0x754/0xd80
[ 101.903608][ T6522] ret_from_fork_asm+0x1a/0x30
[ 101.903627][ T6522]
[ 101.903631][ T6522] Memory state around the buggy address:
[ 101.927653][ T5911] usb 4-1: SerialNumber: syz
[ 101.927863][ T6522] ffff888034a94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.927876][ T6522] ffff888034a94180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.927888][ T6522] >ffff888034a94200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.942881][ T5911] usb 4-1: config 0 descriptor??
[ 101.943518][ T6522] ^
[ 101.943529][ T6522] ffff888034a94280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 101.943541][ T6522] ffff888034a94300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 101.962370][ T5911] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0)
[ 101.966900][ T6522] ==================================================================
[ 101.968984][ T30] audit: type=1400 audit(1775786250.914:113): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 102.000741][ T5841] Bluetooth: hci1: command tx timeout
[ 102.006850][ T30] audit: type=1400 audit(1775786250.914:114): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.007812][ T5841] Bluetooth: hci0: command tx timeout
[ 102.011740][ T30] audit: type=1400 audit(1775786250.914:115): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.011775][ T30] audit: type=1400 audit(1775786250.914:116): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.016558][ T5841] Bluetooth: hci2: command tx timeout
[ 102.021845][ T30] audit: type=1400 audit(1775786250.914:117): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 102.026161][ T5841] Bluetooth: hci3: command tx timeout
[ 102.031047][ T51] Bluetooth: hci4: command tx timeout
[ 102.120090][ T5911] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 102.125588][ T30] audit: type=1400 audit(1775786250.914:118): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 102.201527][ T29] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 102.210801][ T30] audit: type=1400 audit(1775786250.914:119): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 102.210992][ T9] usb 3-1: Using ep0 maxpacket: 16
[ 102.255091][ T5911] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 102.260018][ T6522] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.260030][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 102.260048][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 102.260058][ T6522] Workqueue: usb_hub_wq hub_event
[ 102.260082][ T6522] Call Trace:
[ 102.260087][ T6522]
[ 102.260093][ T6522] dump_stack_lvl+0x100/0x190
[ 102.260127][ T6522] vpanic+0x552/0x970
[ 102.260142][ T6522] ? __pfx_vpanic+0x10/0x10
[ 102.260158][ T6522] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 102.260181][ T6522] panic+0xd1/0xe0
[ 102.260195][ T6522] ? __pfx_panic+0x10/0x10
[ 102.260209][ T6522] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 102.260230][ T6522] ? preempt_schedule_common+0x42/0xc0
[ 102.260254][ T6522] ? check_panic_on_warn+0x1f/0x90
[ 102.260271][ T6522] check_panic_on_warn.cold+0x19/0x34
[ 102.260286][ T6522] end_report.part.0+0x3a/0x90
[ 102.260306][ T6522] kasan_report.cold+0xe/0x18
[ 102.260326][ T6522] ? __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 102.260350][ T6522] __list_del_entry_valid_or_report+0x1b1/0x1d0
[ 102.260372][ T6522] em28xx_close_extension+0x10b/0x2b0
[ 102.260390][ T6522] em28xx_usb_disconnect.cold+0x13d/0x253
[ 102.260413][ T6522] usb_unbind_interface+0x1dd/0x9e0
[ 102.260437][ T6522] ? kernfs_remove_by_name_ns+0x9f/0xf0
[ 102.260456][ T6522] ? __pfx_usb_unbind_interface+0x10/0x10
[ 102.260479][ T6522] device_remove+0x12a/0x180
[ 102.260501][ T6522] device_release_driver_internal+0x44e/0x620
[ 102.260519][ T6522] bus_remove_device+0x2bc/0x560
[ 102.260541][ T6522] ? __pfx_bus_remove_device+0x10/0x10
[ 102.260561][ T6522] ? __pfx_device_remove_attrs+0x10/0x10
[ 102.260582][ T6522] ? up_write+0x290/0x4f0
[ 102.260600][ T6522] device_del+0x376/0x9b0
[ 102.260615][ T6522] ? __pfx_device_del+0x10/0x10
[ 102.260627][ T6522] ? kobject_put+0xb9/0x640
[ 102.260645][ T6522] usb_disable_device+0x367/0x810
[ 102.260667][ T6522] usb_disconnect+0x2e2/0x9a0
[ 102.260689][ T6522] hub_event+0x1d0c/0x4af0
[ 102.260715][ T6522] ? __lock_acquire+0x4a5/0x2630
[ 102.260730][ T6522] ? do_raw_spin_unlock+0x145/0x1e0
[ 102.260748][ T6522] ? __pfx_hub_event+0x10/0x10
[ 102.260768][ T6522] ? debug_object_deactivate+0x2e4/0x3b0
[ 102.260793][ T6522] ? rcu_is_watching+0x12/0xc0
[ 102.260812][ T6522] process_one_work+0xa23/0x19a0
[ 102.260832][ T6522] ? __pfx_process_one_work+0x10/0x10
[ 102.260851][ T6522] ? __pfx_hub_event+0x10/0x10
[ 102.260871][ T6522] worker_thread+0x5ef/0xe50
[ 102.260889][ T6522] ? __pfx_worker_thread+0x10/0x10
[ 102.260905][ T6522] ? kthread+0x13a/0x450
[ 102.260919][ T6522] ? __pfx_worker_thread+0x10/0x10
[ 102.260934][ T6522] kthread+0x370/0x450
[ 102.260947][ T6522] ? __pfx_kthread+0x10/0x10
[ 102.260962][ T6522] ret_from_fork+0x754/0xd80
[ 102.260977][ T6522] ? __pfx_ret_from_fork+0x10/0x10
[ 102.260993][ T6522] ? __switch_to+0x7b4/0x1120
[ 102.261011][ T6522] ? __pfx_kthread+0x10/0x10
[ 102.261025][ T6522] ret_from_fork_asm+0x1a/0x30
[ 102.261047][ T6522]
[ 102.266563][ T6522] Kernel Offset: disabled