Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts.
2025/07/03 09:45:28 ignoring optional flag "sandboxArg"="0"
2025/07/03 09:45:29 parsed 1 programs
[ 124.316169][ T6310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 126.950983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.959191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.982497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.991413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.065356][ T6335] chnl_net:caif_netlink_parms(): no params data found
[ 128.146585][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.154097][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.161635][ T6335] bridge_slave_0: entered allmulticast mode
[ 128.169242][ T6335] bridge_slave_0: entered promiscuous mode
[ 128.177159][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.185278][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.192584][ T6335] bridge_slave_1: entered allmulticast mode
[ 128.199870][ T6335] bridge_slave_1: entered promiscuous mode
[ 128.245751][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.261429][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.291567][ T6335] team0: Port device team_slave_0 added
[ 128.299586][ T6335] team0: Port device team_slave_1 added
[ 128.323811][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 128.330949][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 128.356916][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 128.369075][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 128.376028][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 128.402429][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 128.442772][ T6335] hsr_slave_0: entered promiscuous mode
[ 128.449760][ T6335] hsr_slave_1: entered promiscuous mode
[ 129.055609][ T6335] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 129.070530][ T6335] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 129.083908][ T6335] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 129.095989][ T6335] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 129.216859][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.241586][ T6335] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.255427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.262639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.278212][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.285395][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.558038][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.616538][ T6335] veth0_vlan: entered promiscuous mode
[ 129.633316][ T6335] veth1_vlan: entered promiscuous mode
[ 129.675480][ T6335] veth0_macvtap: entered promiscuous mode
[ 129.687466][ T6335] veth1_macvtap: entered promiscuous mode
[ 129.713826][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.733390][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.754534][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.780508][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.803623][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.829813][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.975982][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.054691][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.127108][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.201675][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.397282][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 130.412729][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 130.421517][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 130.430666][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 130.439348][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.345106][ T12] bridge_slave_1: left allmulticast mode
[ 132.351840][ T12] bridge_slave_1: left promiscuous mode
[ 132.358554][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.374663][ T12] bridge_slave_0: left allmulticast mode
[ 132.380863][ T12] bridge_slave_0: left promiscuous mode
[ 132.386696][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 132.678851][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 132.690575][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 132.701201][ T12] bond0 (unregistering): Released all slaves
[ 132.820840][ T12] hsr_slave_0: left promiscuous mode
[ 132.826987][ T12] hsr_slave_1: left promiscuous mode
[ 132.845248][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 132.866859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 132.887861][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 132.899798][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 132.945633][ T12] veth1_macvtap: left promiscuous mode
[ 132.969644][ T12] veth0_macvtap: left promiscuous mode
[ 132.975362][ T12] veth1_vlan: left promiscuous mode
[ 132.982254][ T12] veth0_vlan: left promiscuous mode
[ 133.108431][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.115041][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.627689][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 133.667999][ T12] team0 (unregistering): Port device team_slave_0 removed
2025/07/03 09:45:44 executed programs: 0
[ 135.964384][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 135.973687][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 135.983408][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 135.992469][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 136.011248][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 136.301547][ T6582] chnl_net:caif_netlink_parms(): no params data found
[ 136.445452][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.452838][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.460685][ T6582] bridge_slave_0: entered allmulticast mode
[ 136.469287][ T6582] bridge_slave_0: entered promiscuous mode
[ 136.478282][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.485609][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.493005][ T6582] bridge_slave_1: entered allmulticast mode
[ 136.501635][ T6582] bridge_slave_1: entered promiscuous mode
[ 136.548038][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 136.561745][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 136.610216][ T6582] team0: Port device team_slave_0 added
[ 136.619910][ T6582] team0: Port device team_slave_1 added
[ 136.664403][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 136.676833][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 136.703308][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 136.717486][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 136.724892][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 136.751672][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 136.844366][ T6582] hsr_slave_0: entered promiscuous mode
[ 136.851910][ T6582] hsr_slave_1: entered promiscuous mode
[ 137.314486][ T6582] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.326474][ T6582] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.345546][ T6582] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 137.357992][ T6582] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 137.494204][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0
[ 137.521809][ T6582] 8021q: adding VLAN 0 to HW filter on device team0
[ 137.538133][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.545414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 137.575804][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.583063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.853261][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 137.913034][ T6582] veth0_vlan: entered promiscuous mode
[ 137.931182][ T6582] veth1_vlan: entered promiscuous mode
[ 137.975206][ T6582] veth0_macvtap: entered promiscuous mode
[ 137.990005][ T6582] veth1_macvtap: entered promiscuous mode
[ 138.019300][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 138.035275][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 138.050158][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.060077][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.070315][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.071118][ T5932] Bluetooth: hci0: command tx timeout
[ 138.085716][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.157443][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 138.176099][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 138.214320][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 138.232429][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 138.540016][ T5846] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 138.698792][ T5846] usb 1-1: Using ep0 maxpacket: 16
[ 138.722494][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 138.736379][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 138.750856][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 138.764936][ T5846] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 138.774461][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 138.800768][ T5846] usb 1-1: config 0 descriptor??
[ 139.232156][ T5846] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[ 139.239901][ T5846] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[ 139.260460][ T5846] ==================================================================
[ 139.268559][ T5846] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12ec/0x23b0
[ 139.276304][ T5846] Read of size 832 at addr ffff888021ad5e81 by task kworker/1:3/5846
[ 139.284381][ T5846]
[ 139.286722][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/1:3 Not tainted 6.16.0-rc4-next-20250702-syzkaller-06656-g50c8770a42fa-dirty #0 PREEMPT(full)
[ 139.286744][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 139.286755][ T5846] Workqueue: usb_hub_wq hub_event
[ 139.286792][ T5846] Call Trace:
[ 139.286799][ T5846]
[ 139.286805][ T5846] dump_stack_lvl+0x189/0x250
[ 139.286825][ T5846] ? __virt_addr_valid+0x1c8/0x5c0
[ 139.286843][ T5846] ? rcu_is_watching+0x15/0xb0
[ 139.286858][ T5846] ? __kasan_check_byte+0x12/0x40
[ 139.286876][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10
[ 139.286892][ T5846] ? rcu_is_watching+0x15/0xb0
[ 139.286907][ T5846] ? lock_release+0x4b/0x3e0
[ 139.286931][ T5846] ? __virt_addr_valid+0x1c8/0x5c0
[ 139.286948][ T5846] ? __virt_addr_valid+0x4a5/0x5c0
[ 139.286966][ T5846] print_report+0xd2/0x2b0
[ 139.286987][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 139.287000][ T5846] kasan_report+0x118/0x150
[ 139.287019][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 139.287036][ T5846] kasan_check_range+0x2b0/0x2c0
[ 139.287054][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 139.287069][ T5846] __asan_memcpy+0x29/0x70
[ 139.287083][ T5846] mon_bin_event+0x12ec/0x23b0
[ 139.287107][ T5846] ? __pfx_mon_bin_event+0x10/0x10
[ 139.287120][ T5846] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 139.287140][ T5846] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 139.287157][ T5846] ? __driver_probe_device+0x18c/0x2f0
[ 139.287177][ T5846] ? __device_attach_driver+0x2ce/0x530
[ 139.287194][ T5846] ? bus_for_each_drv+0x251/0x2e0
[ 139.287216][ T5846] ? __device_attach+0x2b8/0x400
[ 139.287231][ T5846] ? bus_probe_device+0x185/0x260
[ 139.287251][ T5846] ? hid_add_device+0x398/0x540
[ 139.287272][ T5846] ? __pfx_mon_bin_submit+0x10/0x10
[ 139.287296][ T5846] mon_submit+0x193/0x210
[ 139.287317][ T5846] usb_hcd_submit_urb+0x11d/0x1aa0
[ 139.287343][ T5846] usb_start_wait_urb+0x114/0x4c0
[ 139.287362][ T5846] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 139.287386][ T5846] usb_control_msg+0x232/0x3e0
[ 139.287404][ T5846] usbhid_raw_request+0x3cd/0x4e0
[ 139.287431][ T5846] __hid_request+0x1c1/0x370
[ 139.287450][ T5846] hidinput_connect+0x218a/0x3030
[ 139.287489][ T5846] hid_connect+0x499/0x19a0
[ 139.287512][ T5846] ? usbhid_start+0x1a92/0x24b0
[ 139.287534][ T5846] ? __pfx_hid_connect+0x10/0x10
[ 139.287559][ T5846] hid_hw_start+0xa8/0x120
[ 139.287578][ T5846] ms_probe+0x180/0x430
[ 139.287601][ T5846] hid_device_probe+0x39d/0x710
[ 139.287622][ T5846] ? driver_sysfs_add+0x1fe/0x210
[ 139.287640][ T5846] ? __pfx_hid_device_probe+0x10/0x10
[ 139.287658][ T5846] really_probe+0x26a/0x9a0
[ 139.287679][ T5846] __driver_probe_device+0x18c/0x2f0
[ 139.287698][ T5846] driver_probe_device+0x4f/0x430
[ 139.287717][ T5846] __device_attach_driver+0x2ce/0x530
[ 139.287737][ T5846] bus_for_each_drv+0x251/0x2e0
[ 139.287759][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 139.287777][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 139.287798][ T5846] ? __lock_acquire+0xab9/0xd20
[ 139.287823][ T5846] __device_attach+0x2b8/0x400
[ 139.287841][ T5846] ? __pfx___device_attach+0x10/0x10
[ 139.287859][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 139.287879][ T5846] bus_probe_device+0x185/0x260
[ 139.287902][ T5846] device_add+0x7b6/0xb50
[ 139.287920][ T5846] hid_add_device+0x398/0x540
[ 139.287941][ T5846] usbhid_probe+0xe13/0x12a0
[ 139.287967][ T5846] usb_probe_interface+0x637/0xbf0
[ 139.287991][ T5846] ? __pfx_usb_probe_interface+0x10/0x10
[ 139.288010][ T5846] really_probe+0x26a/0x9a0
[ 139.288030][ T5846] __driver_probe_device+0x18c/0x2f0
[ 139.288049][ T5846] driver_probe_device+0x4f/0x430
[ 139.288068][ T5846] __device_attach_driver+0x2ce/0x530
[ 139.288088][ T5846] bus_for_each_drv+0x251/0x2e0
[ 139.288110][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 139.288128][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 139.288154][ T5846] __device_attach+0x2b8/0x400
[ 139.288172][ T5846] ? __pfx___device_attach+0x10/0x10
[ 139.288190][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 139.288210][ T5846] bus_probe_device+0x185/0x260
[ 139.288233][ T5846] device_add+0x7b6/0xb50
[ 139.288250][ T5846] usb_set_configuration+0x1a87/0x20e0
[ 139.288280][ T5846] usb_generic_driver_probe+0x8d/0x150
[ 139.288300][ T5846] usb_probe_device+0x1c1/0x390
[ 139.288320][ T5846] ? __pfx_usb_probe_device+0x10/0x10
[ 139.288337][ T5846] really_probe+0x26a/0x9a0
[ 139.288354][ T5846] __driver_probe_device+0x18c/0x2f0
[ 139.288369][ T5846] driver_probe_device+0x4f/0x430
[ 139.288384][ T5846] __device_attach_driver+0x2ce/0x530
[ 139.288403][ T5846] bus_for_each_drv+0x251/0x2e0
[ 139.288421][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 139.288438][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 139.288463][ T5846] __device_attach+0x2b8/0x400
[ 139.288502][ T5846] ? __pfx___device_attach+0x10/0x10
[ 139.288520][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 139.288538][ T5846] bus_probe_device+0x185/0x260
[ 139.288560][ T5846] device_add+0x7b6/0xb50
[ 139.288574][ T5846] usb_new_device+0xa39/0x16f0
[ 139.288592][ T5846] ? __pfx_usb_new_device+0x10/0x10
[ 139.288607][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 139.288622][ T5846] ? lockdep_hardirqs_on+0x9c/0x150
[ 139.288640][ T5846] hub_event+0x2941/0x4a00
[ 139.288673][ T5846] ? __pfx_hub_event+0x10/0x10
[ 139.288688][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 139.288711][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 139.288726][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 139.288747][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 139.288769][ T5846] process_scheduled_works+0xae1/0x17b0
[ 139.288801][ T5846] ? __pfx_process_scheduled_works+0x10/0x10
[ 139.288829][ T5846] worker_thread+0x8a0/0xda0
[ 139.288845][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 139.288866][ T5846] ? __kthread_parkme+0x7b/0x200
[ 139.288884][ T5846] kthread+0x70e/0x8a0
[ 139.288902][ T5846] ? __pfx_worker_thread+0x10/0x10
[ 139.288917][ T5846] ? __pfx_kthread+0x10/0x10
[ 139.288932][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 139.288947][ T5846] ? lockdep_hardirqs_on+0x9c/0x150
[ 139.288964][ T5846] ? __pfx_kthread+0x10/0x10
[ 139.288982][ T5846] ret_from_fork+0x3fc/0x770
[ 139.288996][ T5846] ? __pfx_ret_from_fork+0x10/0x10
[ 139.289012][ T5846] ? __switch_to_asm+0x39/0x70
[ 139.289029][ T5846] ? __switch_to_asm+0x33/0x70
[ 139.289046][ T5846] ? __pfx_kthread+0x10/0x10
[ 139.289063][ T5846] ret_from_fork_asm+0x1a/0x30
[ 139.289088][ T5846]
[ 139.289094][ T5846]
[ 139.906181][ T5846] Allocated by task 5846:
[ 139.910569][ T5846] kasan_save_track+0x3e/0x80
[ 139.915228][ T5846] __kasan_kmalloc+0x93/0xb0
[ 139.919790][ T5846] __kmalloc_noprof+0x27a/0x4f0
[ 139.924614][ T5846] __hid_request+0x94/0x370
[ 139.929091][ T5846] hidinput_connect+0x218a/0x3030
[ 139.934098][ T5846] hid_connect+0x499/0x19a0
[ 139.938574][ T5846] hid_hw_start+0xa8/0x120
[ 139.942990][ T5846] ms_probe+0x180/0x430
[ 139.947156][ T5846] hid_device_probe+0x39d/0x710
[ 139.952124][ T5846] really_probe+0x26a/0x9a0
[ 139.956723][ T5846] __driver_probe_device+0x18c/0x2f0
[ 139.961982][ T5846] driver_probe_device+0x4f/0x430
[ 139.966981][ T5846] __device_attach_driver+0x2ce/0x530
[ 139.972412][ T5846] bus_for_each_drv+0x251/0x2e0
[ 139.977241][ T5846] __device_attach+0x2b8/0x400
[ 139.982074][ T5846] bus_probe_device+0x185/0x260
[ 139.986904][ T5846] device_add+0x7b6/0xb50
[ 139.991312][ T5846] hid_add_device+0x398/0x540
[ 139.995961][ T5846] usbhid_probe+0xe13/0x12a0
[ 140.000612][ T5846] usb_probe_interface+0x637/0xbf0
[ 140.005720][ T5846] really_probe+0x26a/0x9a0
[ 140.010195][ T5846] __driver_probe_device+0x18c/0x2f0
[ 140.015451][ T5846] driver_probe_device+0x4f/0x430
[ 140.020457][ T5846] __device_attach_driver+0x2ce/0x530
[ 140.025811][ T5846] bus_for_each_drv+0x251/0x2e0
[ 140.030640][ T5846] __device_attach+0x2b8/0x400
[ 140.035376][ T5846] bus_probe_device+0x185/0x260
[ 140.040325][ T5846] device_add+0x7b6/0xb50
[ 140.044636][ T5846] usb_set_configuration+0x1a87/0x20e0
[ 140.050066][ T5846] usb_generic_driver_probe+0x8d/0x150
[ 140.055500][ T5846] usb_probe_device+0x1c1/0x390
[ 140.060325][ T5846] really_probe+0x26a/0x9a0
[ 140.064805][ T5846] __driver_probe_device+0x18c/0x2f0
[ 140.070063][ T5846] driver_probe_device+0x4f/0x430
[ 140.075065][ T5846] __device_attach_driver+0x2ce/0x530
[ 140.080411][ T5846] bus_for_each_drv+0x251/0x2e0
[ 140.085327][ T5846] __device_attach+0x2b8/0x400
[ 140.090062][ T5846] bus_probe_device+0x185/0x260
[ 140.094922][ T5846] device_add+0x7b6/0xb50
[ 140.099273][ T5846] usb_new_device+0xa39/0x16f0
[ 140.104008][ T5846] hub_event+0x2941/0x4a00
[ 140.108403][ T5846] process_scheduled_works+0xae1/0x17b0
[ 140.113938][ T5846] worker_thread+0x8a0/0xda0
[ 140.118535][ T5846] kthread+0x70e/0x8a0
[ 140.122593][ T5846] ret_from_fork+0x3fc/0x770
[ 140.127153][ T5846] ret_from_fork_asm+0x1a/0x30
[ 140.131894][ T5846]
[ 140.134294][ T5846] The buggy address belongs to the object at ffff888021ad5e80
[ 140.134294][ T5846] which belongs to the cache kmalloc-8 of size 8
[ 140.147970][ T5846] The buggy address is located 1 bytes inside of
[ 140.147970][ T5846] allocated 7-byte region [ffff888021ad5e80, ffff888021ad5e87)
[ 140.161733][ T5846]
[ 140.164040][ T5846] The buggy address belongs to the physical page:
[ 140.170516][ T5846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21ad5
[ 140.179450][ T5846] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 140.186639][ T5846] page_type: f5(slab)
[ 140.190696][ T5846] raw: 00fff00000000000 ffff88801a841500 dead000000000100 dead000000000122
[ 140.199250][ T5846] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[ 140.207891][ T5846] page dumped because: kasan: bad access detected
[ 140.214293][ T5846] page_owner tracks the page as allocated
[ 140.219978][ T5846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3280583634, free_ts 3148007746
[ 140.238614][ T5846] post_alloc_hook+0x240/0x2a0
[ 140.243553][ T5846] get_page_from_freelist+0x21e4/0x22c0
[ 140.249100][ T5846] __alloc_frozen_pages_noprof+0x181/0x370
[ 140.254904][ T5846] alloc_pages_mpol+0x232/0x4a0
[ 140.259747][ T5846] allocate_slab+0x8a/0x370
[ 140.264233][ T5846] ___slab_alloc+0xbeb/0x1410
[ 140.268888][ T5846] __kmalloc_noprof+0x305/0x4f0
[ 140.273711][ T5846] acpi_ns_internalize_name+0x2c2/0x3a0
[ 140.279320][ T5846] acpi_ns_get_node+0x1a3/0x350
[ 140.284244][ T5846] acpi_get_handle+0x181/0x2a0
[ 140.288998][ T5846] acpi_has_method+0x86/0xd0
[ 140.293570][ T5846] acpi_attr_is_visible+0x19d/0x4f0
[ 140.298742][ T5846] internal_create_group+0x5d7/0x1110
[ 140.304101][ T5846] sysfs_create_groups+0x59/0x120
[ 140.309301][ T5846] device_add_attrs+0x1c4/0x5a0
[ 140.314127][ T5846] device_add+0x496/0xb50
[ 140.318606][ T5846] page last free pid 43 tgid 43 stack trace:
[ 140.324560][ T5846] __free_frozen_pages+0xb80/0xd80
[ 140.329663][ T5846] __put_partials+0x156/0x1a0
[ 140.334314][ T5846] flush_cpu_slab+0x2b7/0x450
[ 140.338966][ T5846] process_scheduled_works+0xae1/0x17b0
[ 140.344487][ T5846] worker_thread+0x8a0/0xda0
[ 140.349309][ T5846] kthread+0x70e/0x8a0
[ 140.353439][ T5846] ret_from_fork+0x3fc/0x770
[ 140.358091][ T5846] ret_from_fork_asm+0x1a/0x30
[ 140.362834][ T5846]
[ 140.365133][ T5846] Memory state around the buggy address:
[ 140.370736][ T5846] ffff888021ad5d80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 140.378814][ T5846] ffff888021ad5e00: 00 fc fc fc 02 fc fc fc 00 fc fc fc fa fc fc fc
[ 140.386851][ T5846] >ffff888021ad5e80: 07 fc fc fc 00 fc fc fc 00 fc fc fc 05 fc fc fc
[ 140.394899][ T5846] ^
[ 140.398994][ T5846] ffff888021ad5f00: fa fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc
[ 140.407056][ T5846] ffff888021ad5f80: 00 fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc
[ 140.415097][ T5846] ==================================================================
[ 140.423169][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.430340][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/1:3 Not tainted 6.16.0-rc4-next-20250702-syzkaller-06656-g50c8770a42fa-dirty #0 PREEMPT(full)
[ 140.444293][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 140.454335][ T5846] Workqueue: usb_hub_wq hub_event
[ 140.459396][ T5846] Call Trace:
[ 140.462682][ T5846]
[ 140.465605][ T5846] dump_stack_lvl+0x99/0x250
[ 140.470177][ T5846] ? __asan_memcpy+0x40/0x70
[ 140.474741][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10
[ 140.479916][ T5846] ? __pfx__printk+0x10/0x10
[ 140.484485][ T5846] panic+0x2db/0x790
[ 140.488364][ T5846] ? __pfx_panic+0x10/0x10
[ 140.492753][ T5846] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 140.498662][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 140.505139][ T5846] ? print_memory_metadata+0x314/0x400
[ 140.510701][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 140.515634][ T5846] check_panic_on_warn+0x89/0xb0
[ 140.520589][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 140.525520][ T5846] end_report+0x78/0x160
[ 140.529758][ T5846] kasan_report+0x129/0x150
[ 140.534243][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 140.539156][ T5846] kasan_check_range+0x2b0/0x2c0
[ 140.544179][ T5846] ? mon_bin_event+0x12ec/0x23b0
[ 140.549096][ T5846] __asan_memcpy+0x29/0x70
[ 140.553512][ T5846] mon_bin_event+0x12ec/0x23b0
[ 140.558284][ T5846] ? __pfx_mon_bin_event+0x10/0x10
[ 140.563386][ T5846] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 140.568753][ T5846] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 140.574799][ T5846] ? __driver_probe_device+0x18c/0x2f0
[ 140.580237][ T5846] ? __device_attach_driver+0x2ce/0x530
[ 140.585773][ T5846] ? bus_for_each_drv+0x251/0x2e0
[ 140.590777][ T5846] ? __device_attach+0x2b8/0x400
[ 140.595689][ T5846] ? bus_probe_device+0x185/0x260
[ 140.600705][ T5846] ? hid_add_device+0x398/0x540
[ 140.605558][ T5846] ? __pfx_mon_bin_submit+0x10/0x10
[ 140.610759][ T5846] mon_submit+0x193/0x210
[ 140.615070][ T5846] usb_hcd_submit_urb+0x11d/0x1aa0
[ 140.620163][ T5846] usb_start_wait_urb+0x114/0x4c0
[ 140.625164][ T5846] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 140.630772][ T5846] usb_control_msg+0x232/0x3e0
[ 140.635540][ T5846] usbhid_raw_request+0x3cd/0x4e0
[ 140.640563][ T5846] __hid_request+0x1c1/0x370
[ 140.645172][ T5846] hidinput_connect+0x218a/0x3030
[ 140.650265][ T5846] hid_connect+0x499/0x19a0
[ 140.654930][ T5846] ? usbhid_start+0x1a92/0x24b0
[ 140.659764][ T5846] ? __pfx_hid_connect+0x10/0x10
[ 140.664801][ T5846] hid_hw_start+0xa8/0x120
[ 140.669220][ T5846] ms_probe+0x180/0x430
[ 140.673359][ T5846] hid_device_probe+0x39d/0x710
[ 140.678189][ T5846] ? driver_sysfs_add+0x1fe/0x210
[ 140.683199][ T5846] ? __pfx_hid_device_probe+0x10/0x10
[ 140.688768][ T5846] really_probe+0x26a/0x9a0
[ 140.693615][ T5846] __driver_probe_device+0x18c/0x2f0
[ 140.699014][ T5846] driver_probe_device+0x4f/0x430
[ 140.704051][ T5846] __device_attach_driver+0x2ce/0x530
[ 140.709475][ T5846] bus_for_each_drv+0x251/0x2e0
[ 140.714312][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 140.720204][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 140.725574][ T5846] ? __lock_acquire+0xab9/0xd20
[ 140.730467][ T5846] __device_attach+0x2b8/0x400
[ 140.735250][ T5846] ? __pfx___device_attach+0x10/0x10
[ 140.740517][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 140.745695][ T5846] bus_probe_device+0x185/0x260
[ 140.750528][ T5846] device_add+0x7b6/0xb50
[ 140.754837][ T5846] hid_add_device+0x398/0x540
[ 140.759582][ T5846] usbhid_probe+0xe13/0x12a0
[ 140.764161][ T5846] usb_probe_interface+0x637/0xbf0
[ 140.769257][ T5846] ? __pfx_usb_probe_interface+0x10/0x10
[ 140.774878][ T5846] really_probe+0x26a/0x9a0
[ 140.779362][ T5846] __driver_probe_device+0x18c/0x2f0
[ 140.784622][ T5846] driver_probe_device+0x4f/0x430
[ 140.789624][ T5846] __device_attach_driver+0x2ce/0x530
[ 140.795062][ T5846] bus_for_each_drv+0x251/0x2e0
[ 140.800004][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 140.805876][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 140.811346][ T5846] __device_attach+0x2b8/0x400
[ 140.816099][ T5846] ? __pfx___device_attach+0x10/0x10
[ 140.821357][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 140.826536][ T5846] bus_probe_device+0x185/0x260
[ 140.831363][ T5846] device_add+0x7b6/0xb50
[ 140.835666][ T5846] usb_set_configuration+0x1a87/0x20e0
[ 140.841117][ T5846] usb_generic_driver_probe+0x8d/0x150
[ 140.846557][ T5846] usb_probe_device+0x1c1/0x390
[ 140.851567][ T5846] ? __pfx_usb_probe_device+0x10/0x10
[ 140.856923][ T5846] really_probe+0x26a/0x9a0
[ 140.861402][ T5846] __driver_probe_device+0x18c/0x2f0
[ 140.866664][ T5846] driver_probe_device+0x4f/0x430
[ 140.871682][ T5846] __device_attach_driver+0x2ce/0x530
[ 140.877137][ T5846] bus_for_each_drv+0x251/0x2e0
[ 140.881977][ T5846] ? __pfx___device_attach_driver+0x10/0x10
[ 140.887909][ T5846] ? __pfx_bus_for_each_drv+0x10/0x10
[ 140.893262][ T5846] __device_attach+0x2b8/0x400
[ 140.898001][ T5846] ? __pfx___device_attach+0x10/0x10
[ 140.903262][ T5846] ? do_raw_spin_unlock+0x122/0x240
[ 140.908441][ T5846] bus_probe_device+0x185/0x260
[ 140.913281][ T5846] device_add+0x7b6/0xb50
[ 140.917587][ T5846] usb_new_device+0xa39/0x16f0
[ 140.922330][ T5846] ? __pfx_usb_new_device+0x10/0x10
[ 140.927505][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 140.932678][ T5846] ? lockdep_hardirqs_on+0x9c/0x150
[ 140.937849][ T5846] hub_event+0x2941/0x4a00
[ 140.942342][ T5846] ? __pfx_hub_event+0x10/0x10
[ 140.947079][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 140.952791][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 140.958137][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 140.963836][ T5846] ? process_scheduled_works+0x9ef/0x17b0
[ 140.969533][ T5846] process_scheduled_works+0xae1/0x17b0
[ 140.975078][ T5846] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.981039][ T5846] worker_thread+0x8a0/0xda0
[ 140.985617][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 140.991925][ T5846] ? __kthread_parkme+0x7b/0x200
[ 140.996841][ T5846] kthread+0x70e/0x8a0
[ 141.000971][ T5846] ? __pfx_worker_thread+0x10/0x10
[ 141.006055][ T5846] ? __pfx_kthread+0x10/0x10
[ 141.010638][ T5846] ? _raw_spin_unlock_irq+0x23/0x50
[ 141.015898][ T5846] ? lockdep_hardirqs_on+0x9c/0x150
[ 141.021071][ T5846] ? __pfx_kthread+0x10/0x10
[ 141.025635][ T5846] ret_from_fork+0x3fc/0x770
[ 141.030202][ T5846] ? __pfx_ret_from_fork+0x10/0x10
[ 141.035286][ T5846] ? __switch_to_asm+0x39/0x70
[ 141.040035][ T5846] ? __switch_to_asm+0x33/0x70
[ 141.044866][ T5846] ? __pfx_kthread+0x10/0x10
[ 141.049436][ T5846] ret_from_fork_asm+0x1a/0x30
[ 141.054189][ T5846]
[ 142.132866][ T5846] Shutting down cpus with NMI
[ 142.137892][ T5846] Kernel Offset: disabled
[ 142.142212][ T5846] Rebooting in 86400 seconds..