[ 31.742911][ T43] audit: type=1400 audit(1792109818.232:116): avc: denied { write } for pid=5638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 31.777495][ T43] audit: type=1400 audit(1792109818.272:117): avc: denied { write } for pid=5641 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.208074][ T43] audit: type=1400 audit(1792109818.702:118): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.242339][ T43] audit: type=1400 audit(1792109818.732:119): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.448753][ T43] audit: type=1400 audit(1792109818.942:120): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.498862][ T43] audit: type=1400 audit(1792109818.992:121): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.568170][ T43] audit: type=1400 audit(1792109819.062:122): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.605508][ T43] audit: type=1400 audit(1792109819.092:123): avc: denied { write } for pid=5659 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.688812][ T43] audit: type=1400 audit(1792109819.182:124): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.728744][ T43] audit: type=1400 audit(1792109819.222:125): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:27345' (ED25519) to the list of known hosts.
2026/10/16 00:17:02 parsed 1 programs
2026/10/16 00:17:02 serving rpc on tcp://35259
[ 38.232848][ T43] kauditd_printk_skb: 15 callbacks suppressed
[ 38.232867][ T43] audit: type=1400 audit(1792109824.722:141): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 38.234181][ T43] audit: type=1400 audit(1792109824.722:142): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 38.236970][ T5732] cgroup: Unknown subsys name 'net'
[ 38.238164][ T43] audit: type=1400 audit(1792109824.732:143): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 38.399051][ T5732] cgroup: Unknown subsys name 'cpuset'
[ 38.402018][ T5732] cgroup: Unknown subsys name 'rlimit'
[ 38.554352][ T43] audit: type=1400 audit(1792109825.042:144): avc: denied { setattr } for pid=5732 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 38.554676][ T43] audit: type=1400 audit(1792109825.042:145): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 38.554845][ T43] audit: type=1400 audit(1792109825.042:146): avc: denied { write } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 38.555438][ T43] audit: type=1400 audit(1792109825.042:147): avc: denied { read } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 38.571832][ T43] audit: type=1400 audit(1792109825.062:148): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 38.572183][ T43] audit: type=1400 audit(1792109825.062:149): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 38.616881][ T5738] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 38.618176][ T43] audit: type=1400 audit(1792109825.112:150): avc: denied { relabelto } for pid=5738 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 39.283309][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 41.285238][ T5741] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.288080][ T5741] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.289211][ T5741] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.406392][ T5741] infiniband rxe0: set active
[ 41.406411][ T5741] infiniband rxe0: added rxe_eth0
[ 41.406912][ T10] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.418108][ T5741] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 41.418137][ T5741] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 41.418168][ T5741] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 41.436618][ T5741] RDS/IB: rxe0: added
[ 41.436805][ T5741] smc: adding ib device rxe0 with port count 1
[ 41.436861][ T5741] smc: ib device rxe0 port 1 has no pnetid
[ 41.437649][ T42] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.463871][ T5741] rxe_eth0 speed is unknown, defaulting to 1000
[ 41.766912][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 41.766966][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 41.767022][ T5741] bridge_slave_0: entered allmulticast mode
[ 41.768813][ T5741] bridge_slave_0: entered promiscuous mode
[ 41.771595][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 41.771663][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 41.771744][ T5741] bridge_slave_1: entered allmulticast mode
[ 41.773163][ T5741] bridge_slave_1: entered promiscuous mode
[ 41.793429][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 41.796426][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 41.814062][ T5741] team0: Port device team_slave_0 added
[ 41.815355][ T5741] team0: Port device team_slave_1 added
[ 41.832863][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 41.832874][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 41.832887][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 41.834074][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 41.834082][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 41.834093][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 41.861591][ T5741] hsr_slave_0: entered promiscuous mode
[ 41.862408][ T5741] hsr_slave_1: entered promiscuous mode
[ 41.993207][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 41.999553][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 42.001195][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 42.004538][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 42.005451][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 42.010114][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 42.010665][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 42.013733][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 42.029072][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.029132][ T5741] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 42.029343][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.029386][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 42.059696][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0
[ 42.066419][ T152] bridge0: port 1(bridge_slave_0) entered disabled state
[ 42.068925][ T152] bridge0: port 2(bridge_slave_1) entered disabled state
[ 42.079174][ T5741] 8021q: adding VLAN 0 to HW filter on device team0
[ 42.082453][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.082502][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 42.085464][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.085507][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 42.300451][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 42.331064][ T5741] veth0_vlan: entered promiscuous mode
[ 42.337351][ T5741] veth1_vlan: entered promiscuous mode
[ 42.358692][ T5741] veth0_macvtap: entered promiscuous mode
[ 42.360636][ T5741] veth1_macvtap: entered promiscuous mode
[ 42.367871][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 42.373747][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 42.398113][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.398140][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.398157][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.398174][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 42.437680][ T5741] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 42.565278][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 42.586720][ T5781] rxe_eth0 speed is unknown, defaulting to 1000
[ 42.624649][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 42.784664][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 42.860827][ T5785] rxe_eth0 speed is unknown, defaulting to 1000
[ 42.873863][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 43.113009][ T5791] rxe_eth0 speed is unknown, defaulting to 1000
[ 43.322970][ T5796] rxe_eth0 speed is unknown, defaulting to 1000
[ 43.542240][ T5801] rxe_eth0 speed is unknown, defaulting to 1000
[ 43.725474][ T43] kauditd_printk_skb: 32 callbacks suppressed
[ 43.725492][ T43] audit: type=1400 audit(1792109830.212:183): avc: denied { create } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 43.728684][ T43] audit: type=1400 audit(1792109830.222:184): avc: denied { sys_admin } for pid=5805 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 43.749508][ T5806] rxe_eth0 speed is unknown, defaulting to 1000
[ 43.934170][ T43] audit: type=1400 audit(1792109830.422:185): avc: denied { sys_chroot } for pid=5806 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 44.025545][ T5811] rxe_eth0 speed is unknown, defaulting to 1000
[ 44.200373][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 44.382948][ T43] audit: type=1400 audit(1792109830.872:186): avc: denied { create } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 44.383127][ T43] audit: type=1400 audit(1792109830.872:187): avc: denied { read write } for pid=5821 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 44.383437][ T43] audit: type=1400 audit(1792109830.872:188): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 44.395070][ T43] audit: type=1400 audit(1792109830.882:189): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="socket:[9365]" dev="sockfs" ino=9365 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 44.395528][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 44.396902][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 44.397342][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 44.398932][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 44.399707][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 44.422834][ T5821] rxe_eth0 speed is unknown, defaulting to 1000
[ 44.658824][ T5828] rxe_eth0 speed is unknown, defaulting to 1000
[ 44.781295][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 44.781314][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 44.801863][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 44.801877][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 44.935120][ T5833] rxe_eth0 speed is unknown, defaulting to 1000
[ 45.135974][ T5838] rxe_eth0 speed is unknown, defaulting to 1000
[ 45.299188][ T5843] rxe_eth0 speed is unknown, defaulting to 1000
[ 45.470126][ T5848] rxe_eth0 speed is unknown, defaulting to 1000
[ 45.754750][ T5853] rxe_eth0 speed is unknown, defaulting to 1000
[ 46.035312][ T13] bridge_slave_1: left allmulticast mode
[ 46.035343][ T13] bridge_slave_1: left promiscuous mode
[ 46.036440][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.045035][ T13] bridge_slave_0: left allmulticast mode
[ 46.045051][ T13] bridge_slave_0: left promiscuous mode
[ 46.045185][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
2026/10/16 00:17:12 executed programs: 0
[ 46.141441][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 46.144704][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 46.146753][ T13] bond0 (unregistering): Released all slaves
[ 46.164453][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 46.165395][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 46.165819][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 46.167250][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 46.167895][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 46.217512][ T43] audit: type=1400 audit(1792109832.712:190): avc: denied { write } for pid=5861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.276726][ T43] audit: type=1400 audit(1792109832.772:191): avc: denied { write } for pid=5866 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.328549][ T13] hsr_slave_0: left promiscuous mode
[ 46.329400][ T13] hsr_slave_1: left promiscuous mode
[ 46.330166][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 46.330182][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 46.330835][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 46.330844][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 46.334669][ T13] veth1_macvtap: left promiscuous mode
[ 46.334697][ T13] veth0_macvtap: left promiscuous mode
[ 46.334744][ T13] veth1_vlan: left promiscuous mode
[ 46.334781][ T13] veth0_vlan: left promiscuous mode
[ 46.446516][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 46.452427][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 46.507805][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2
[ 46.530520][ T5857] rxe_eth0 speed is unknown, defaulting to 1000
[ 46.565043][ T43] audit: type=1400 audit(1792109833.052:192): avc: denied { write } for pid=5874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 46.678415][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3
[ 46.803780][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.803922][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.804017][ T5857] bridge_slave_0: entered allmulticast mode
[ 46.805362][ T5857] bridge_slave_0: entered promiscuous mode
[ 46.807580][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.807659][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.807728][ T5857] bridge_slave_1: entered allmulticast mode
[ 46.808475][ T5857] bridge_slave_1: entered promiscuous mode
[ 46.821462][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 46.822830][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 46.837134][ T5857] team0: Port device team_slave_0 added
[ 46.839399][ T5857] team0: Port device team_slave_1 added
[ 46.862908][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 46.862919][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 46.862931][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 46.863934][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 46.863945][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 46.863962][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 46.872691][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4
[ 46.897465][ T5857] hsr_slave_0: entered promiscuous mode
[ 46.897922][ T5857] hsr_slave_1: entered promiscuous mode
[ 47.647853][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 47.651716][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 47.652564][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 47.656685][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 47.658062][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 47.665765][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 47.666779][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 47.676624][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 47.712053][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[ 47.721887][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[ 47.724855][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.724935][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.738070][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.738115][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.965940][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 48.004140][ T5857] veth0_vlan: entered promiscuous mode
[ 48.009842][ T5857] veth1_vlan: entered promiscuous mode
[ 48.032063][ T5857] veth0_macvtap: entered promiscuous mode
[ 48.037924][ T5857] veth1_macvtap: entered promiscuous mode
[ 48.057833][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 48.069950][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 48.107876][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.108334][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.108481][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.108605][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.160065][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 48.160079][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 48.200678][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 48.200691][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 48.216651][ T66] Bluetooth: hci0: command tx timeout
[ 48.508677][ T1686] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 48.666047][ T1686] usb 5-1: Using ep0 maxpacket: 32
[ 48.668757][ T1686] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 48.668794][ T1686] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[ 48.670993][ T1686] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[ 48.671014][ T1686] usb 5-1: config 3 has an invalid interface number: 25 but max is 1
[ 48.671029][ T1686] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[ 48.671044][ T1686] usb 5-1: config 3 has no interface number 0
[ 48.671057][ T1686] usb 5-1: config 3 has no interface number 1
[ 48.671093][ T1686] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 48.671110][ T1686] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 48.671131][ T1686] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[ 48.671159][ T1686] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 48.671181][ T1686] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 48.671201][ T1686] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[ 48.671222][ T1686] usb 5-1: config 3 interface 223 has no altsetting 1
[ 48.671236][ T1686] usb 5-1: config 3 interface 25 has no altsetting 0
[ 48.673814][ T1686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 48.673832][ T1686] usb 5-1: Product: syz
[ 48.673843][ T1686] usb 5-1: Manufacturer: syz
[ 48.673855][ T1686] usb 5-1: SerialNumber: syz
[ 48.935426][ T1686] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[ 48.944615][ T1686] usb 5-1: USB disconnect, device number 2
[ 49.002159][ T1686]
[ 49.002988][ T1686] =========================
[ 49.004458][ T1686] WARNING: held lock freed!
[ 49.006014][ T1686] syzkaller #0 Not tainted
[ 49.007455][ T1686] -------------------------
[ 49.009288][ T1686] kworker/0:3/1686 is freeing memory ffff888037c1c000-ffff888037c1c7ff, with a lock still held there!
[ 49.012743][ T1686] ffff888037c1c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 49.015878][ T1686] locks held by kworker/0:3/1686: 5, last CPU#0:
[ 49.017921][ T1686] #0: ffff88801d746d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 49.021641][ T1686] #1: ffffc90006ccfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 49.026193][ T1686] #2: ffff88802e2481d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[ 49.029923][ T1686] #3: ffff888053a081d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[ 49.033784][ T1686] #4: ffff888037c1c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 49.037550][ T1686]
[ 49.037550][ T1686] stack backtrace:
[ 49.039561][ T1686] CPU: 0 UID: 0 PID: 1686 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 49.042895][ T1686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 49.047100][ T1686] Workqueue: usb_hub_wq hub_event
[ 49.049253][ T1686] Call Trace:
[ 49.050668][ T1686]
[ 49.051928][ T1686] dump_stack_lvl+0x100/0x190
[ 49.053928][ T1686] debug_check_no_locks_freed+0x115/0x120
[ 49.056300][ T1686] ? device_release+0xc0/0x270
[ 49.058293][ T1686] ? device_release+0xd2/0x270
[ 49.060320][ T1686] kfree+0x180/0x6d0
[ 49.061996][ T1686] ? put_device+0x24/0x30
[ 49.063834][ T1686] ? __pfx_usb_release_interface+0x10/0x10
[ 49.066004][ T1686] device_release+0xd2/0x270
[ 49.067913][ T1686] kobject_put+0x1f7/0x640
[ 49.069750][ T1686] put_device+0x1f/0x30
[ 49.071089][ T1686] v4l2_device_disconnect+0x60/0xc0
[ 49.072745][ T1686] usbtv_video_free+0x25/0x30
[ 49.074259][ T1686] usbtv_disconnect+0x58/0xa0
[ 49.075750][ T1686] usb_unbind_interface+0x1dd/0x9e0
[ 49.077576][ T1686] ? __pfx_usb_unbind_interface+0x10/0x10
[ 49.079357][ T1686] device_remove+0x12a/0x180
[ 49.080815][ T1686] device_release_driver_internal+0x44e/0x620
[ 49.082720][ T1686] bus_remove_device+0x2bc/0x560
[ 49.084290][ T1686] ? __pfx_bus_remove_device+0x10/0x10
[ 49.085997][ T1686] ? __pfx_device_remove_attrs+0x10/0x10
[ 49.087820][ T1686] device_del+0x376/0x9b0
[ 49.089286][ T1686] ? __pfx_device_del+0x10/0x10
[ 49.090817][ T1686] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 49.092628][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.094127][ T1686] usb_disable_device+0x367/0x810
[ 49.095708][ T1686] ? mark_held_locks+0x40/0x70
[ 49.097501][ T1686] usb_disconnect+0x2e2/0x9a0
[ 49.099524][ T1686] hub_event+0x1bb1/0x4420
[ 49.101425][ T1686] ? __lock_acquire+0x5c0/0x1f40
[ 49.103557][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.105639][ T1686] ? lock_sequence+0xb0/0x110
[ 49.107663][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.109718][ T1686] ? process_one_work+0xa2c/0x1b10
[ 49.111912][ T1686] ? process_one_work+0x906/0x1b10
[ 49.114088][ T1686] ? process_one_work+0x906/0x1b10
[ 49.116109][ T1686] process_one_work+0xac7/0x1b10
[ 49.118225][ T1686] ? __pfx_process_one_work+0x10/0x10
[ 49.120328][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.121829][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.123345][ T1686] worker_thread+0x5ef/0xe50
[ 49.124820][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.126735][ T1686] ? kthread+0x13a/0x450
[ 49.128575][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.130721][ T1686] kthread+0x373/0x450
[ 49.132491][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.134505][ T1686] ret_from_fork+0x730/0xd60
[ 49.136490][ T1686] ? __pfx_ret_from_fork+0x10/0x10
[ 49.138682][ T1686] ? __switch_to+0x800/0x10f0
[ 49.140690][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.142667][ T1686] ret_from_fork_asm+0x1a/0x30
[ 49.144712][ T1686]
[ 49.147007][ T1686] ==================================================================
[ 49.147017][ T1686] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0
[ 49.147042][ T1686] Read of size 8 at addr ffff888037c1c008 by task kworker/0:3/1686
[ 49.147054][ T1686]
[ 49.147062][ T1686] CPU: 0 UID: 0 PID: 1686 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 49.147083][ T1686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 49.147093][ T1686] Workqueue: usb_hub_wq hub_event
[ 49.147111][ T1686] Call Trace:
[ 49.147116][ T1686]
[ 49.147122][ T1686] dump_stack_lvl+0x100/0x190
[ 49.147145][ T1686] print_report+0x13d/0x4b0
[ 49.147167][ T1686] ? __virt_addr_valid+0x239/0x430
[ 49.147184][ T1686] ? usb_unbind_interface+0x935/0x9e0
[ 49.147201][ T1686] kasan_report+0xdf/0x1c0
[ 49.147234][ T1686] ? usb_unbind_interface+0x935/0x9e0
[ 49.147256][ T1686] usb_unbind_interface+0x935/0x9e0
[ 49.147279][ T1686] ? __pfx_usb_unbind_interface+0x10/0x10
[ 49.147301][ T1686] device_remove+0x12a/0x180
[ 49.147326][ T1686] device_release_driver_internal+0x44e/0x620
[ 49.147351][ T1686] bus_remove_device+0x2bc/0x560
[ 49.147374][ T1686] ? __pfx_bus_remove_device+0x10/0x10
[ 49.147398][ T1686] ? __pfx_device_remove_attrs+0x10/0x10
[ 49.147424][ T1686] device_del+0x376/0x9b0
[ 49.147451][ T1686] ? __pfx_device_del+0x10/0x10
[ 49.147476][ T1686] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 49.147503][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.147526][ T1686] usb_disable_device+0x367/0x810
[ 49.147545][ T1686] ? mark_held_locks+0x40/0x70
[ 49.147568][ T1686] usb_disconnect+0x2e2/0x9a0
[ 49.147587][ T1686] hub_event+0x1bb1/0x4420
[ 49.147611][ T1686] ? __lock_acquire+0x5c0/0x1f40
[ 49.147634][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.147650][ T1686] ? lock_sequence+0xb0/0x110
[ 49.147666][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.147685][ T1686] ? process_one_work+0xa2c/0x1b10
[ 49.147728][ T1686] ? process_one_work+0x906/0x1b10
[ 49.147754][ T1686] ? process_one_work+0x906/0x1b10
[ 49.147781][ T1686] process_one_work+0xac7/0x1b10
[ 49.147809][ T1686] ? __pfx_process_one_work+0x10/0x10
[ 49.147834][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.147859][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.147879][ T1686] worker_thread+0x5ef/0xe50
[ 49.147894][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.147910][ T1686] ? kthread+0x13a/0x450
[ 49.147931][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.147947][ T1686] kthread+0x373/0x450
[ 49.147970][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.148012][ T1686] ret_from_fork+0x730/0xd60
[ 49.148032][ T1686] ? __pfx_ret_from_fork+0x10/0x10
[ 49.148050][ T1686] ? __switch_to+0x800/0x10f0
[ 49.148074][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.148095][ T1686] ret_from_fork_asm+0x1a/0x30
[ 49.148117][ T1686]
[ 49.148122][ T1686]
[ 49.148126][ T1686] Allocated by task 1686:
[ 49.148134][ T1686] kasan_save_stack+0x30/0x50
[ 49.148154][ T1686] kasan_save_track+0x14/0x30
[ 49.148197][ T1686] __kasan_kmalloc+0xaa/0xb0
[ 49.148223][ T1686] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 49.148238][ T1686] usb_set_configuration+0x10d0/0x1dc0
[ 49.148255][ T1686] usb_generic_driver_probe+0xa1/0xe0
[ 49.148277][ T1686] usb_probe_device+0xef/0x400
[ 49.148292][ T1686] really_probe+0x241/0xa60
[ 49.148317][ T1686] __driver_probe_device+0x210/0x460
[ 49.148339][ T1686] driver_probe_device+0x4a/0x140
[ 49.148362][ T1686] __device_attach_driver+0x1df/0x320
[ 49.148387][ T1686] bus_for_each_drv+0x159/0x1e0
[ 49.148407][ T1686] __device_attach+0x1e4/0x4d0
[ 49.148432][ T1686] device_initial_probe+0xaf/0xd0
[ 49.148447][ T1686] bus_probe_device+0x64/0x160
[ 49.148467][ T1686] device_add+0x121d/0x1970
[ 49.148483][ T1686] usb_new_device.part.0+0xcc2/0x1686
[ 49.148507][ T1686] hub_event.cold+0x1e3/0xe90
[ 49.148529][ T1686] process_one_work+0xac7/0x1b10
[ 49.148553][ T1686] worker_thread+0x5ef/0xe50
[ 49.148567][ T1686] kthread+0x373/0x450
[ 49.148590][ T1686] ret_from_fork+0x730/0xd60
[ 49.148605][ T1686] ret_from_fork_asm+0x1a/0x30
[ 49.148620][ T1686]
[ 49.148623][ T1686] Freed by task 1686:
[ 49.148630][ T1686] kasan_save_stack+0x30/0x50
[ 49.148651][ T1686] kasan_save_track+0x14/0x30
[ 49.148670][ T1686] kasan_save_free_info+0x3b/0x70
[ 49.148685][ T1686] __kasan_slab_free+0x5f/0x80
[ 49.148707][ T1686] kfree+0x22b/0x6d0
[ 49.148720][ T1686] device_release+0xd2/0x270
[ 49.148739][ T1686] kobject_put+0x1f7/0x640
[ 49.148754][ T1686] put_device+0x1f/0x30
[ 49.148773][ T1686] v4l2_device_disconnect+0x60/0xc0
[ 49.148793][ T1686] usbtv_video_free+0x25/0x30
[ 49.148814][ T1686] usbtv_disconnect+0x58/0xa0
[ 49.148830][ T1686] usb_unbind_interface+0x1dd/0x9e0
[ 49.148849][ T1686] device_remove+0x12a/0x180
[ 49.148870][ T1686] device_release_driver_internal+0x44e/0x620
[ 49.148887][ T1686] bus_remove_device+0x2bc/0x560
[ 49.148910][ T1686] device_del+0x376/0x9b0
[ 49.148932][ T1686] usb_disable_device+0x367/0x810
[ 49.148949][ T1686] usb_disconnect+0x2e2/0x9a0
[ 49.148963][ T1686] hub_event+0x1bb1/0x4420
[ 49.148980][ T1686] process_one_work+0xac7/0x1b10
[ 49.149002][ T1686] worker_thread+0x5ef/0xe50
[ 49.149015][ T1686] kthread+0x373/0x450
[ 49.149035][ T1686] ret_from_fork+0x730/0xd60
[ 49.149052][ T1686] ret_from_fork_asm+0x1a/0x30
[ 49.149068][ T1686]
[ 49.149072][ T1686] The buggy address belongs to the object at ffff888037c1c000
[ 49.149072][ T1686] which belongs to the cache kmalloc-2k of size 2048
[ 49.149086][ T1686] The buggy address is located 8 bytes inside of
[ 49.149086][ T1686] freed 2048-byte region [ffff888037c1c000, ffff888037c1c800)
[ 49.149102][ T1686]
[ 49.149106][ T1686] The buggy address belongs to the physical page:
[ 49.149116][ T1686] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888037c1d000 pfn:0x37c18
[ 49.149133][ T1686] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 49.149147][ T1686] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 49.149165][ T1686] page_type: f5(slab)
[ 49.149180][ T1686] raw: 00fff00000000240 ffff88801d042f00 ffffea0000bc7610 ffffea0000d42410
[ 49.149194][ T1686] raw: ffff888037c1d000 0000000000080007 00000000f5000000 0000000000000000
[ 49.149213][ T1686] head: 00fff00000000240 ffff88801d042f00 ffffea0000bc7610 ffffea0000d42410
[ 49.149225][ T1686] head: ffff888037c1d000 0000000000080007 00000000f5000000 0000000000000000
[ 49.149237][ T1686] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 49.149248][ T1686] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 49.149255][ T1686] page dumped because: kasan: bad access detected
[ 49.149261][ T1686] page_owner tracks the page as allocated
[ 49.149266][ T1686] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5741, tgid 5741 (syz-executor), ts 41611680848
[ 49.149287][ T1686] post_alloc_hook+0xfd/0x120
[ 49.149300][ T1686] get_page_from_freelist+0x110d/0x35d0
[ 49.149315][ T1686] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 49.149329][ T1686] new_slab+0xa9/0x6e0
[ 49.149341][ T1686] refill_objects+0xe3/0x410
[ 49.149354][ T1686] __pcs_replace_empty_main+0x35e/0x650
[ 49.149367][ T1686] __kmalloc_cache_noprof+0x4f4/0x6d0
[ 49.149379][ T1686] rxrpc_alloc_connection+0xa3/0x770
[ 49.149396][ T1686] rxrpc_prealloc_service_connection+0x26/0x390
[ 49.149415][ T1686] rxrpc_service_prealloc_one+0x2c5/0x1040
[ 49.149427][ T1686] rxrpc_kernel_charge_accept+0xdd/0x120
[ 49.149439][ T1686] afs_charge_preallocation+0xd8/0x360
[ 49.149459][ T1686] afs_open_socket+0x31e/0x3f0
[ 49.149476][ T1686] afs_net_init+0x825/0xb00
[ 49.149489][ T1686] ops_init+0x1e2/0x5f0
[ 49.149502][ T1686] setup_net+0x118/0x3a0
[ 49.149515][ T1686] page last free pid 5732 tgid 5732 ts 39995794030 stack trace:
[ 49.149525][ T1686] __free_frozen_pages+0x79f/0x10f0
[ 49.149546][ T1686] __folio_put+0x3b4/0x5f0
[ 49.149566][ T1686] skb_release_data+0x5dd/0x860
[ 49.149578][ T1686] __kfree_skb+0x4f/0x70
[ 49.149589][ T1686] tcp_ack+0x206d/0x7420
[ 49.149606][ T1686] tcp_rcv_established+0x11bd/0x39f0
[ 49.149625][ T1686] tcp_v4_do_rcv+0xbb6/0x1260
[ 49.149644][ T1686] __release_sock+0x35a/0x440
[ 49.149656][ T1686] __sk_flush_backlog+0x27/0xc0
[ 49.149668][ T1686] tcp_sendmsg_locked+0x2c54/0x4420
[ 49.149688][ T1686] tcp_sendmsg+0x2e/0x50
[ 49.149706][ T1686] inet_sendmsg+0xb9/0x140
[ 49.149726][ T1686] sock_write_iter+0x4ea/0x5b0
[ 49.149742][ T1686] vfs_write+0x6af/0x1050
[ 49.149758][ T1686] ksys_write+0x1f8/0x250
[ 49.149773][ T1686] do_syscall_64+0x123/0x790
[ 49.149791][ T1686]
[ 49.149794][ T1686] Memory state around the buggy address:
[ 49.149802][ T1686] ffff888037c1bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 49.149811][ T1686] ffff888037c1bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 49.149821][ T1686] >ffff888037c1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.149828][ T1686] ^
[ 49.149834][ T1686] ffff888037c1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.149844][ T1686] ffff888037c1c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.149851][ T1686] ==================================================================
[ 49.149902][ T1686] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 49.485970][ T1686] CPU: 0 UID: 0 PID: 1686 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 49.488606][ T1686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 49.491470][ T1686] Workqueue: usb_hub_wq hub_event
[ 49.492936][ T1686] Call Trace:
[ 49.493942][ T1686]
[ 49.494797][ T1686] dump_stack_lvl+0x100/0x190
[ 49.496148][ T1686] vpanic+0x553/0x970
[ 49.497238][ T1686] ? __pfx_vpanic+0x10/0x10
[ 49.498492][ T1686] ? rcu_is_watching+0x13/0xc0
[ 49.499856][ T1686] ? trace_irq_enable.constprop.0+0x122/0x160
[ 49.501585][ T1686] ? usb_unbind_interface+0x935/0x9e0
[ 49.503112][ T1686] panic+0xd1/0xe0
[ 49.504184][ T1686] ? __pfx_panic+0x10/0x10
[ 49.505457][ T1686] ? usb_unbind_interface+0x935/0x9e0
[ 49.506987][ T1686] ? preempt_schedule_common+0x3c/0xb0
[ 49.508564][ T1686] check_panic_on_warn.cold+0x19/0x34
[ 49.510085][ T1686] end_report.part.0+0x3a/0x90
[ 49.511469][ T1686] kasan_report.cold+0xe/0x18
[ 49.512813][ T1686] ? usb_unbind_interface+0x935/0x9e0
[ 49.514374][ T1686] usb_unbind_interface+0x935/0x9e0
[ 49.515857][ T1686] ? __pfx_usb_unbind_interface+0x10/0x10
[ 49.517490][ T1686] device_remove+0x12a/0x180
[ 49.518810][ T1686] device_release_driver_internal+0x44e/0x620
[ 49.520538][ T1686] bus_remove_device+0x2bc/0x560
[ 49.521964][ T1686] ? __pfx_bus_remove_device+0x10/0x10
[ 49.523530][ T1686] ? __pfx_device_remove_attrs+0x10/0x10
[ 49.525142][ T1686] device_del+0x376/0x9b0
[ 49.526404][ T1686] ? __pfx_device_del+0x10/0x10
[ 49.527807][ T1686] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 49.529437][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.530775][ T1686] usb_disable_device+0x367/0x810
[ 49.532212][ T1686] ? mark_held_locks+0x40/0x70
[ 49.533611][ T1686] usb_disconnect+0x2e2/0x9a0
[ 49.534983][ T1686] hub_event+0x1bb1/0x4420
[ 49.536282][ T1686] ? __lock_acquire+0x5c0/0x1f40
[ 49.537715][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.539084][ T1686] ? lock_sequence+0xb0/0x110
[ 49.540482][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.541836][ T1686] ? process_one_work+0xa2c/0x1b10
[ 49.543348][ T1686] ? process_one_work+0x906/0x1b10
[ 49.544883][ T1686] ? process_one_work+0x906/0x1b10
[ 49.546383][ T1686] process_one_work+0xac7/0x1b10
[ 49.547829][ T1686] ? __pfx_process_one_work+0x10/0x10
[ 49.549311][ T1686] ? lock_acquire+0x1d1/0x380
[ 49.550665][ T1686] ? __pfx_hub_event+0x10/0x10
[ 49.552048][ T1686] worker_thread+0x5ef/0xe50
[ 49.553403][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.554825][ T1686] ? kthread+0x13a/0x450
[ 49.555999][ T1686] ? __pfx_worker_thread+0x10/0x10
[ 49.557492][ T1686] kthread+0x373/0x450
[ 49.558683][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.560022][ T1686] ret_from_fork+0x730/0xd60
[ 49.561368][ T1686] ? __pfx_ret_from_fork+0x10/0x10
[ 49.562834][ T1686] ? __switch_to+0x800/0x10f0
[ 49.564251][ T1686] ? __pfx_kthread+0x10/0x10
[ 49.565587][ T1686] ret_from_fork_asm+0x1a/0x30
[ 49.566995][ T1686]
[ 49.568516][ T1686] Kernel Offset: disabled
[ 49.569762][ T1686] Rebooting in 86400 seconds..