[ 25.708561][ T380] veth0_vlan: entered promiscuous mode
[ 25.720369][ T380] veth1_macvtap: entered promiscuous mode
[ 25.966148][ T12] bridge_slave_1: left allmulticast mode
[ 25.971811][ T12] bridge_slave_1: left promiscuous mode
[ 25.977634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.985380][ T12] bridge_slave_0: left allmulticast mode
[ 25.991024][ T12] bridge_slave_0: left promiscuous mode
[ 25.996850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.127905][ T12] veth1_macvtap: left promiscuous mode
[ 26.133871][ T12] veth0_vlan: left promiscuous mode
Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
2026/10/22 12:28:57 parsed 1 programs
2026/10/22 12:28:57 serving rpc on tcp://38461
Setting up swapspace version 1, size = 127995904 bytes
[ 35.816262][ T36] kauditd_printk_skb: 32 callbacks suppressed
[ 35.816279][ T36] audit: type=1400 audit(1792672138.640:106): avc: denied { unlink } for pid=420 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 35.855113][ T420] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 36.853744][ T432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.863172][ T432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 36.870575][ T432] bridge_slave_0: entered allmulticast mode
[ 36.878850][ T432] bridge_slave_0: entered promiscuous mode
[ 36.924591][ T432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.931752][ T432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 36.948912][ T432] bridge_slave_1: entered allmulticast mode
[ 36.955666][ T432] bridge_slave_1: entered promiscuous mode
[ 37.011450][ T36] audit: type=1400 audit(1792672139.830:107): avc: denied { create } for pid=457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 37.125337][ T36] audit: type=1401 audit(1792672139.950:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 37.338022][ T432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.345091][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 37.352716][ T432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.359859][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 37.529787][ T432] veth0_vlan: entered promiscuous mode
[ 37.543783][ T432] veth1_macvtap: entered promiscuous mode
2026/10/22 12:29:00 executed programs: 0
[ 37.824946][ T488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.832014][ T488] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.839511][ T488] bridge_slave_0: entered allmulticast mode
[ 37.846970][ T488] bridge_slave_0: entered promiscuous mode
[ 37.853469][ T488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.860567][ T488] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.867860][ T488] bridge_slave_1: entered allmulticast mode
[ 37.874178][ T488] bridge_slave_1: entered promiscuous mode
[ 37.926768][ T493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.933924][ T493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.941122][ T493] bridge_slave_0: entered allmulticast mode
[ 37.947631][ T493] bridge_slave_0: entered promiscuous mode
[ 37.966955][ T493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.974103][ T493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.981225][ T493] bridge_slave_1: entered allmulticast mode
[ 37.987605][ T493] bridge_slave_1: entered promiscuous mode
[ 38.006687][ T12] bridge_slave_1: left allmulticast mode
[ 38.012705][ T12] bridge_slave_1: left promiscuous mode
[ 38.018420][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.026076][ T12] bridge_slave_0: left allmulticast mode
[ 38.031865][ T12] bridge_slave_0: left promiscuous mode
[ 38.037829][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.120659][ T490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.127970][ T490] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.135131][ T490] bridge_slave_0: entered allmulticast mode
[ 38.141661][ T490] bridge_slave_0: entered promiscuous mode
[ 38.151143][ T490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.158452][ T490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.165675][ T490] bridge_slave_1: entered allmulticast mode
[ 38.171905][ T490] bridge_slave_1: entered promiscuous mode
[ 38.266917][ T12] veth1_macvtap: left promiscuous mode
[ 38.272429][ T12] veth0_vlan: left promiscuous mode
[ 38.312047][ T494] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.319187][ T494] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.326513][ T494] bridge_slave_0: entered allmulticast mode
[ 38.333072][ T494] bridge_slave_0: entered promiscuous mode
[ 38.339651][ T494] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.347033][ T494] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.354249][ T494] bridge_slave_1: entered allmulticast mode
[ 38.360869][ T494] bridge_slave_1: entered promiscuous mode
[ 38.392463][ T490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.399849][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.407327][ T490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.414454][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.460303][ T493] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.467728][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.475222][ T493] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.482596][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.496733][ T488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.503810][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.512476][ T488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.520188][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.555090][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.562497][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.569848][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.577339][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.584771][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.592097][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.606958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.614117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.624846][ T483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.631963][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.661223][ T483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.668548][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.676330][ T483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.683375][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.707524][ T483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.714599][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.722260][ T483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.729502][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.751829][ T490] veth0_vlan: entered promiscuous mode
[ 38.770761][ T493] veth0_vlan: entered promiscuous mode
[ 38.783847][ T490] veth1_macvtap: entered promiscuous mode
[ 38.796633][ T483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.803680][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.812078][ T483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.819159][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.831837][ T493] veth1_macvtap: entered promiscuous mode
[ 38.846463][ T488] veth0_vlan: entered promiscuous mode
[ 38.873636][ T488] veth1_macvtap: entered promiscuous mode
[ 38.900133][ T36] audit: type=1400 audit(1792672141.720:109): avc: denied { read write } for pid=507 comm="syz.1.18" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 38.916856][ T494] veth0_vlan: entered promiscuous mode
[ 38.930075][ T36] audit: type=1400 audit(1792672141.720:110): avc: denied { open } for pid=509 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 38.954216][ T36] audit: type=1400 audit(1792672141.720:111): avc: denied { ioctl } for pid=509 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 38.955248][ T494] veth1_macvtap: entered promiscuous mode
[ 39.134702][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 39.142463][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 39.244651][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 39.254724][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 39.295781][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 39.306875][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 39.317909][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 39.327157][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 39.335209][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 39.344237][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 39.395860][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 39.406978][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 39.421449][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 39.430869][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 39.442374][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 39.453513][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 39.761290][ T45] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0
[ 39.773627][ T45] input input5: Absolute device without dev->absinfo, refusing to register
[ 39.782452][ T65] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[ 39.793836][ T65] input input8: Absolute device without dev->absinfo, refusing to register
[ 39.802807][ T45] wacom 0003:056A:033B.0001: probe with driver wacom failed with error -22
[ 39.811856][ T65] wacom 0003:056A:033B.0002: probe with driver wacom failed with error -22
[ 39.855166][ T9] wacom 0003:056A:033B.0003: hidraw2: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0
[ 39.868939][ T9] input input11: Absolute device without dev->absinfo, refusing to register
[ 39.879821][ T9] wacom 0003:056A:033B.0003: probe with driver wacom failed with error -22
[ 39.888755][ T10] wacom 0003:056A:033B.0004: hidraw3: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0
[ 39.904184][ T10] input input14: Absolute device without dev->absinfo, refusing to register
[ 39.913204][ T10] wacom 0003:056A:033B.0004: probe with driver wacom failed with error -22
[ 39.956698][ T36] audit: type=1400 audit(1792672142.780:112): avc: denied { write } for pid=507 comm="syz.1.18" name="hidraw2" dev="devtmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 40.015304][ T10] usb 2-1: USB disconnect, device number 2
[ 40.016537][ T45] usb 3-1: USB disconnect, device number 2
[ 40.115017][ T65] usb 4-1: USB disconnect, device number 2
[ 40.121232][ T9] usb 6-1: USB disconnect, device number 2
[ 40.784615][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 40.792247][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 40.854698][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 40.864623][ T512] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 40.955786][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 40.966842][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 40.978045][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 40.987877][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 40.997198][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 41.005369][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 41.005888][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 41.025622][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 41.034973][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 41.035617][ T512] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 41.054843][ T512] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 41.064263][ T512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 41.427643][ T31] wacom 0003:056A:033B.0005: hidraw4: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[ 41.439176][ T31] input input17: Absolute device without dev->absinfo, refusing to register
[ 41.453255][ T31] wacom 0003:056A:033B.0005: probe with driver wacom failed with error -22
[ 41.462339][ T45] wacom 0003:056A:033B.0006: hidraw5: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0
[ 41.465343][ T9] wacom 0003:056A:033B.0007: hidraw6: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0
[ 41.474449][ T45] input input20: Absolute device without dev->absinfo, refusing to register
[ 41.487503][ T9] input input23: Absolute device without dev->absinfo, refusing to register
[ 41.503425][ T512] wacom 0003:056A:033B.0008: hidraw7: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0
[ 41.524916][ T9] wacom 0003:056A:033B.0007: probe with driver wacom failed with error -22
[ 41.526244][ T45] wacom 0003:056A:033B.0006: probe with driver wacom failed with error -22
[ 41.544563][ T512] input input26: Absolute device without dev->absinfo, refusing to register
[ 41.557877][ T512] wacom 0003:056A:033B.0008: probe with driver wacom failed with error -22
[ 41.627119][ T527] ==================================================================
[ 41.635410][ T527] BUG: KASAN: slab-use-after-free in usbhid_power+0x7c/0xd0
[ 41.642718][ T527] Read of size 8 at addr ffff888121144008 by task syz.2.21/527
[ 41.650247][ T527]
[ 41.652571][ T527] CPU: 1 UID: 0 PID: 527 Comm: syz.2.21 Not tainted syzkaller #0 53d24410295fc729510e1ea88c6b904bd8dcf976
[ 41.652587][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 41.652600][ T527] Call Trace:
[ 41.652605][ T527]
[ 41.652611][ T527] __dump_stack+0x21/0x30
[ 41.652630][ T527] dump_stack_lvl+0x140/0x1c0
[ 41.652644][ T527] ? __cfi_dump_stack_lvl+0x10/0x10
[ 41.652691][ T527] print_address_description+0x71/0x210
[ 41.652708][ T527] print_report+0x4a/0x70
[ 41.652722][ T527] kasan_report+0x162/0x1a0
[ 41.652734][ T527] ? usbhid_power+0x7c/0xd0
[ 41.652746][ T527] ? __kmalloc_cache_noprof+0x23c/0x470
[ 41.652760][ T527] ? usbhid_power+0x7c/0xd0
[ 41.652772][ T527] __asan_report_load8_noabort+0x18/0x20
[ 41.652786][ T527] usbhid_power+0x7c/0xd0
[ 41.652797][ T527] hidraw_open+0x254/0x960
[ 41.652809][ T527] chrdev_open+0x4eb/0x610
[ 41.652825][ T527] ? __cfi_chrdev_open+0x10/0x10
[ 41.652840][ T527] ? bpf_lsm_file_open+0xd/0x20
[ 41.652851][ T527] ? __cfi_chrdev_open+0x10/0x10
[ 41.652865][ T527] do_dentry_open+0x97f/0x1510
[ 41.652877][ T527] vfs_open+0x86/0x240
[ 41.652888][ T527] ? __cfi_vfs_open+0x10/0x10
[ 41.652899][ T527] ? may_open+0x352/0x430
[ 41.652909][ T527] path_openat+0x2c49/0x35a0
[ 41.652920][ T527] ? schedule+0xc5/0x240
[ 41.652932][ T527] ? kasan_save_alloc_info+0x3a/0x50
[ 41.652944][ T527] ? getname+0x1b/0x30
[ 41.652957][ T527] ? x64_sys_call+0xe69/0x2ee0
[ 41.652967][ T527] ? do_syscall_64+0x57/0xf0
[ 41.652978][ T527] ? do_filp_open+0x440/0x440
[ 41.652989][ T527] do_filp_open+0x1f2/0x440
[ 41.653003][ T527] ? __cfi_do_filp_open+0x10/0x10
[ 41.653015][ T527] ? alloc_fd+0x4c1/0x570
[ 41.653031][ T527] do_sys_openat2+0x134/0x1d0
[ 41.653042][ T527] ? common_nsleep+0x93/0xb0
[ 41.653052][ T527] ? do_sys_open+0x100/0x100
[ 41.653063][ T527] __x64_sys_openat+0x13a/0x170
[ 41.653076][ T527] x64_sys_call+0xe69/0x2ee0
[ 41.653086][ T527] do_syscall_64+0x57/0xf0
[ 41.653095][ T527] ? clear_bhb_loop+0x50/0xa0
[ 41.653108][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 41.653121][ T527] RIP: 0033:0x7f784915e98e
[ 41.653136][ T527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 41.653145][ T527] RSP: 002b:00007f784a10ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 41.653162][ T527] RAX: ffffffffffffffda RBX: 00007f784a10b6c0 RCX: 00007f784915e98e
[ 41.653169][ T527] RDX: 0000000000008a00 RSI: 00007f784a10ac00 RDI: ffffffffffffff9c
[ 41.653177][ T527] RBP: 00007f784a10ac00 R08: 0000000000000000 R09: 0000000000000000
[ 41.653183][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 41.653190][ T527] R13: 00007f7849426038 R14: 00007f7849425fa0 R15: 00007fffdada5f98
[ 41.653199][ T527]
[ 41.653202][ T527]
[ 41.940891][ T527] Allocated by task 528:
[ 41.945110][ T527] kasan_save_track+0x3e/0x80
[ 41.949798][ T527] kasan_save_alloc_info+0x3a/0x50
[ 41.954899][ T527] __kasan_slab_alloc+0x73/0x90
[ 41.959945][ T527] kmem_cache_alloc_node_noprof+0x1ca/0x420
[ 41.966015][ T527] kmalloc_reserve+0xcf/0x4f0
[ 41.970693][ T527] __alloc_skb+0x13f/0x360
[ 41.975121][ T527] alloc_uevent_skb+0x85/0x240
[ 41.979895][ T527] kobject_uevent_net_broadcast+0x356/0x5e0
[ 41.985877][ T527] kobject_uevent_env+0x551/0x7e0
[ 41.990896][ T527] kobject_uevent+0x21/0x40
[ 41.995589][ T527] driver_bound+0x449/0x480
[ 42.000098][ T527] really_probe+0x7ef/0x8b0
[ 42.004818][ T527] __driver_probe_device+0x193/0x280
[ 42.010130][ T527] driver_probe_device+0x54/0x3f0
[ 42.015168][ T527] __driver_attach+0x422/0x5e0
[ 42.019942][ T527] bus_for_each_dev+0x246/0x2d0
[ 42.024790][ T527] driver_attach+0x46/0x50
[ 42.029260][ T527] bus_add_driver+0x393/0x730
[ 42.034009][ T527] driver_register+0x2b7/0x3c0
[ 42.038787][ T527] usb_gadget_register_driver_owner+0xfc/0x270
[ 42.045052][ T527] raw_ioctl+0x144c/0x37a0
[ 42.049486][ T527] __se_sys_ioctl+0x123/0x1b0
[ 42.054202][ T527] __x64_sys_ioctl+0x7f/0xa0
[ 42.058785][ T527] x64_sys_call+0x1878/0x2ee0
[ 42.063472][ T527] do_syscall_64+0x57/0xf0
[ 42.067896][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 42.073785][ T527]
[ 42.076117][ T527] Freed by task 110:
[ 42.080088][ T527] kasan_save_track+0x3e/0x80
[ 42.084854][ T527] kasan_save_free_info+0x44/0x50
[ 42.089885][ T527] __kasan_slab_free+0x5f/0x80
[ 42.095074][ T527] kfree+0x158/0x440
[ 42.098978][ T527] skb_free_head+0xf7/0x300
[ 42.103471][ T527] skb_release_data+0x6d0/0x860
[ 42.108320][ T527] __kfree_skb+0x62/0x210
[ 42.112649][ T527] consume_skb+0x65/0x1a0
[ 42.117013][ T527] skb_free_datagram+0x19/0x30
[ 42.121773][ T527] netlink_recvmsg+0x5e7/0xe60
[ 42.126535][ T527] sock_recvmsg+0x188/0x1e0
[ 42.131034][ T527] ____sys_recvmsg+0x1e7/0x4a0
[ 42.135789][ T527] ___sys_recvmsg+0x214/0x590
[ 42.140460][ T527] __x64_sys_recvmsg+0x1bb/0x2a0
[ 42.145392][ T527] x64_sys_call+0xdb5/0x2ee0
[ 42.150020][ T527] do_syscall_64+0x57/0xf0
[ 42.154441][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 42.160332][ T527]
[ 42.162644][ T527] The buggy address belongs to the object at ffff888121144000
[ 42.162644][ T527] which belongs to the cache skbuff_small_head of size 768
[ 42.177211][ T527] The buggy address is located 8 bytes inside of
[ 42.177211][ T527] freed 768-byte region [ffff888121144000, ffff888121144300)
[ 42.190945][ T527]
[ 42.193269][ T527] The buggy address belongs to the physical page:
[ 42.199678][ T527] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121144
[ 42.208601][ T527] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 42.217106][ T527] flags: 0x4000000000000040(head|zone=1)
[ 42.222726][ T527] page_type: f5(slab)
[ 42.226792][ T527] raw: 4000000000000040 ffff888105679b40 dead000000000122 0000000000000000
[ 42.235367][ T527] raw: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000
[ 42.244035][ T527] head: 4000000000000040 ffff888105679b40 dead000000000122 0000000000000000
[ 42.252728][ T527] head: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000
[ 42.261392][ T527] head: 4000000000000002 ffffea0004845101 ffffffffffffffff 0000000000000000
[ 42.270056][ T527] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 42.278919][ T527] page dumped because: kasan: bad access detected
[ 42.285346][ T527] page_owner tracks the page as allocated
[ 42.291141][ T527] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12, tgid 12 (kworker/u8:0), ts 40406341986, free_ts 40128802688
[ 42.313129][ T527] post_alloc_hook+0x37d/0x3b0
[ 42.317936][ T527] prep_new_page+0x2d/0x180
[ 42.322528][ T527] get_page_from_freelist+0x4aea/0x4ba0
[ 42.328071][ T527] __alloc_pages_noprof+0x35a/0x7e0
[ 42.333278][ T527] alloc_slab_page+0x6b/0x1e0
[ 42.337975][ T527] allocate_slab+0x69/0x430
[ 42.342581][ T527] ___slab_alloc+0x591/0x8c0
[ 42.347159][ T527] kmem_cache_alloc_node_noprof+0x29b/0x420
[ 42.353053][ T527] kmalloc_reserve+0xcf/0x4f0
[ 42.357825][ T527] __alloc_skb+0x13f/0x360
[ 42.362583][ T527] inet6_rt_notify+0x351/0x520
[ 42.367346][ T527] fib6_add+0x25c5/0x4c00
[ 42.371673][ T527] ip6_ins_rt+0xd7/0x140
[ 42.375903][ T527] __ipv6_ifa_notify+0x51d/0xee0
[ 42.381009][ T527] addrconf_dad_completed+0x198/0xef0
[ 42.386370][ T527] addrconf_dad_work+0xc7f/0x1550
[ 42.391396][ T527] page last free pid 9 tgid 9 stack trace:
[ 42.397216][ T527] free_unref_page+0xb99/0xf50
[ 42.402063][ T527] __folio_put+0x272/0x2c0
[ 42.406552][ T527] free_large_kmalloc+0xb7/0x110
[ 42.411500][ T527] kfree+0x209/0x440
[ 42.415563][ T527] usbhid_disconnect+0xab/0xc0
[ 42.420325][ T527] usb_unbind_interface+0x2b0/0xa40
[ 42.425601][ T527] device_release_driver_internal+0x525/0x830
[ 42.431657][ T527] device_release_driver+0x1d/0x30
[ 42.436777][ T527] bus_remove_device+0x34f/0x370
[ 42.441966][ T527] device_del+0x583/0xcf0
[ 42.446316][ T527] usb_disable_device+0x3af/0x770
[ 42.451603][ T527] usb_disconnect+0x331/0x950
[ 42.456335][ T527] hub_event+0x1ad5/0x4360
[ 42.461024][ T527] process_scheduled_works+0x7f7/0x1060
[ 42.467182][ T527] worker_thread+0xc99/0x13f0
[ 42.471858][ T527] kthread+0x2c7/0x360
[ 42.476013][ T527]
[ 42.478322][ T527] Memory state around the buggy address:
[ 42.484030][ T527] ffff888121143f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 42.492192][ T527] ffff888121143f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 42.500423][ T527] >ffff888121144000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.508512][ T527] ^
[ 42.512841][ T527] ffff888121144080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.521082][ T527] ffff888121144100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.529221][ T527] ==================================================================
[ 42.539139][ T527] Disabling lock debugging due to kernel taint
[ 42.545484][ T527] Oops: general protection fault, probably for non-canonical address 0x176014e0000029e: 0000 [#1] PREEMPT SMP KASAN PTI
[ 42.545683][ T36] audit: type=1400 audit(1792672145.370:113): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 42.558012][ T527] CPU: 1 UID: 0 PID: 527 Comm: syz.2.21 Tainted: G B syzkaller #0 53d24410295fc729510e1ea88c6b904bd8dcf976
[ 42.558041][ T527] Tainted: [B]=BAD_PAGE
[ 42.558047][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 42.558057][ T527] RIP: 0010:__pm_runtime_resume+0x49/0xa0
[ 42.558081][ T527] Code: ff e8 2b 10 3f fe 89 d8 83 e0 04 75 07 e8 df 0b 3f fe eb 1e e8 d8 0b 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 d7 8a 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 b0 4e 60
[ 42.583109][ T36] audit: type=1400 audit(1792672145.370:114): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 42.593228][ T527] RSP: 0018:ffffc9000126f6a8 EFLAGS: 00010202
[ 42.593255][ T527] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff834a4339
[ 42.593267][ T527] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0176014e0000029e
[ 42.593278][ T527] RBP: ffffc9000126f6c8 R08: 0176014e000002a2 R09: 00000000000002ec
[ 42.593289][ T527] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000002
[ 42.593300][ T527] R13: ffffffff86811ce0 R14: 0176014e000000be R15: dffffc0000000000
[ 42.593313][ T527] FS: 00007f784a10b6c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000
[ 42.593328][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.593341][ T527] CR2: 00007ffd81e66f24 CR3: 000000011ed88000 CR4: 00000000003526b0
[ 42.598192][ T36] audit: type=1400 audit(1792672145.370:115): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 42.607795][ T527] Call Trace:
[ 42.607805][ T527]
[ 42.607812][ T527] usb_autopm_get_interface+0x25/0xf0
[ 42.607840][ T527] usbhid_power+0x84/0xd0
[ 42.607860][ T527] hidraw_open+0x254/0x960
[ 42.614130][ T36] audit: type=1400 audit(1792672145.370:116): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 42.633265][ T527] chrdev_open+0x4eb/0x610
[ 42.633298][ T527] ? __cfi_chrdev_open+0x10/0x10
[ 42.633322][ T527] ? bpf_lsm_file_open+0xd/0x20
[ 42.633340][ T527] ? __cfi_chrdev_open+0x10/0x10
[ 42.655343][ T36] audit: type=1400 audit(1792672145.370:117): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 42.660856][ T527] do_dentry_open+0x97f/0x1510
[ 42.660891][ T527] vfs_open+0x86/0x240
[ 42.660910][ T527] ? __cfi_vfs_open+0x10/0x10
[ 42.669557][ T36] audit: type=1400 audit(1792672145.370:118): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 42.677005][ T527] ? may_open+0x352/0x430
[ 42.677032][ T527] path_openat+0x2c49/0x35a0
[ 42.677050][ T527] ? schedule+0xc5/0x240
[ 42.677069][ T527] ? kasan_save_alloc_info+0x3a/0x50
[ 42.685602][ T36] audit: type=1400 audit(1792672145.370:119): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 42.693064][ T527] ? getname+0x1b/0x30
[ 42.693095][ T527] ? x64_sys_call+0xe69/0x2ee0
[ 42.913602][ T527] ? do_syscall_64+0x57/0xf0
[ 42.918207][ T527] ? do_filp_open+0x440/0x440
[ 42.922880][ T527] do_filp_open+0x1f2/0x440
[ 42.927643][ T527] ? __cfi_do_filp_open+0x10/0x10
[ 42.932674][ T527] ? alloc_fd+0x4c1/0x570
[ 42.937093][ T527] do_sys_openat2+0x134/0x1d0
[ 42.941878][ T527] ? common_nsleep+0x93/0xb0
[ 42.946460][ T527] ? do_sys_open+0x100/0x100
[ 42.951061][ T527] __x64_sys_openat+0x13a/0x170
[ 42.955905][ T527] x64_sys_call+0xe69/0x2ee0
[ 42.960486][ T527] do_syscall_64+0x57/0xf0
[ 42.964894][ T527] ? clear_bhb_loop+0x50/0xa0
[ 42.969602][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 42.975592][ T527] RIP: 0033:0x7f784915e98e
[ 42.979997][ T527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 42.999625][ T527] RSP: 002b:00007f784a10ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 43.008118][ T527] RAX: ffffffffffffffda RBX: 00007f784a10b6c0 RCX: 00007f784915e98e
[ 43.016181][ T527] RDX: 0000000000008a00 RSI: 00007f784a10ac00 RDI: ffffffffffffff9c
[ 43.024143][ T527] RBP: 00007f784a10ac00 R08: 0000000000000000 R09: 0000000000000000
[ 43.032108][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 43.040072][ T527] R13: 00007f7849426038 R14: 00007f7849425fa0 R15: 00007fffdada5f98
[ 43.048060][ T527]
[ 43.051171][ T527] Modules linked in:
[ 43.056517][ T527] ---[ end trace 0000000000000000 ]---
[ 43.062350][ T527] RIP: 0010:__pm_runtime_resume+0x49/0xa0
[ 43.068440][ T527] Code: ff e8 2b 10 3f fe 89 d8 83 e0 04 75 07 e8 df 0b 3f fe eb 1e e8 d8 0b 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 d7 8a 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 b0 4e 60
[ 43.088744][ T527] RSP: 0018:ffffc9000126f6a8 EFLAGS: 00010202
[ 43.095099][ T527] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff834a4339
[ 43.103323][ T527] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0176014e0000029e
[ 43.111600][ T527] RBP: ffffc9000126f6c8 R08: 0176014e000002a2 R09: 00000000000002ec
[ 43.119778][ T527] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000002
[ 43.128006][ T527] R13: ffffffff86811ce0 R14: 0176014e000000be R15: dffffc0000000000
[ 43.136353][ T527] FS: 00007f784a10b6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000
[ 43.145500][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.152348][ T527] CR2: 00007ffd81e66f24 CR3: 000000011ed88000 CR4: 00000000003526b0
[ 43.160618][ T527] Kernel panic - not syncing: Fatal exception
[ 43.166980][ T527] Kernel Offset: disabled
[ 43.171295][ T527] Rebooting in 86400 seconds..