Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts.
2026/04/21 20:29:20 parsed 1 programs
[ 44.064714][ T28] audit: type=1400 audit(1776803360.913:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 44.067482][ T28] audit: type=1400 audit(1776803360.913:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 44.758016][ T28] audit: type=1400 audit(1776803361.603:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 44.759056][ T289] cgroup: Unknown subsys name 'net'
[ 44.780698][ T28] audit: type=1400 audit(1776803361.603:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 44.807930][ T28] audit: type=1400 audit(1776803361.633:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 44.808062][ T289] cgroup: Unknown subsys name 'devices'
[ 44.951957][ T289] cgroup: Unknown subsys name 'hugetlb'
[ 44.957555][ T289] cgroup: Unknown subsys name 'rlimit'
[ 45.095149][ T28] audit: type=1400 audit(1776803361.943:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 45.118324][ T28] audit: type=1400 audit(1776803361.943:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 45.132214][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 45.138931][ T28] audit: type=1400 audit(1776803361.943:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 45.167467][ T28] audit: type=1400 audit(1776803361.943:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 45.178013][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 45.187728][ T28] audit: type=1400 audit(1776803361.943:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 45.987460][ T301] request_module fs-gadgetfs succeeded, but still no fs?
[ 45.987460][ T300] request_module fs-gadgetfs succeeded, but still no fs?
[ 46.485279][ T333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.492423][ T333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.500142][ T333] device bridge_slave_0 entered promiscuous mode
[ 46.511544][ T333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.518590][ T333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.526717][ T333] device bridge_slave_1 entered promiscuous mode
[ 46.585325][ T333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.592420][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 46.599720][ T333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.606797][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 46.630471][ T319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.637921][ T319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.645928][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 46.654970][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 46.674877][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 46.683099][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.690126][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 46.697660][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 46.705824][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.712858][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 46.721273][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 46.730510][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 46.745077][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 46.755944][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 46.764145][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 46.771801][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 46.779796][ T333] device veth0_vlan entered promiscuous mode
2026/04/21 20:29:23 executed programs: 0
[ 46.789377][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 46.798350][ T333] device veth1_macvtap entered promiscuous mode
[ 46.807132][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 46.816947][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 46.974517][ T364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.981620][ T364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.989058][ T364] device bridge_slave_0 entered promiscuous mode
[ 46.996423][ T364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.003509][ T364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.011161][ T364] device bridge_slave_1 entered promiscuous mode
[ 47.058685][ T367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.065796][ T367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.073322][ T367] device bridge_slave_0 entered promiscuous mode
[ 47.080242][ T367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.087402][ T367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.094747][ T367] device bridge_slave_1 entered promiscuous mode
[ 47.147950][ T368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.155058][ T368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.162632][ T368] device bridge_slave_0 entered promiscuous mode
[ 47.169635][ T368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.176771][ T368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.184120][ T368] device bridge_slave_1 entered promiscuous mode
[ 47.196329][ T363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.203471][ T363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.210954][ T363] device bridge_slave_0 entered promiscuous mode
[ 47.240537][ T363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.247592][ T363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.255244][ T363] device bridge_slave_1 entered promiscuous mode
[ 47.287119][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.294212][ T366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.301655][ T366] device bridge_slave_0 entered promiscuous mode
[ 47.319921][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.327428][ T366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.334825][ T366] device bridge_slave_1 entered promiscuous mode
[ 47.531322][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 47.538807][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 47.549458][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 47.557311][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 47.570580][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 47.578918][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 47.587123][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.594164][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.601599][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 47.609832][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 47.618331][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.625382][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.653173][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 47.660882][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 47.669135][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 47.677537][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.684605][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.692802][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 47.701811][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 47.709898][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.716931][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.724291][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 47.732395][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 47.740351][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 47.748383][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 47.756376][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 47.764397][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 47.772527][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 47.800426][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 47.808857][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 47.816893][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 47.825318][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 47.833325][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 47.840835][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 47.848181][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 47.856731][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 47.865682][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.872738][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.880220][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 47.888732][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 47.896982][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.904009][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.911437][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 47.919520][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 47.927798][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 47.937597][ T363] device veth0_vlan entered promiscuous mode
[ 47.958915][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 47.966511][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 47.974210][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 47.983163][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 47.991379][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.998401][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.006277][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 48.027876][ T367] device veth0_vlan entered promiscuous mode
[ 48.036068][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.044371][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.051942][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.059377][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 48.067915][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 48.076261][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.083319][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.090711][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 48.098961][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.108825][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 48.116938][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.127854][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.161673][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.171675][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 48.179604][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.187727][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 48.195204][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 48.202627][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 48.211158][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 48.219514][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.226552][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.233919][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 48.242388][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 48.250635][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.257641][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.265075][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 48.272994][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.281068][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 48.289291][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.297638][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 48.305829][ T363] device veth1_macvtap entered promiscuous mode
[ 48.317538][ T368] device veth0_vlan entered promiscuous mode
[ 48.329898][ T367] device veth1_macvtap entered promiscuous mode
[ 48.337868][ T364] device veth0_vlan entered promiscuous mode
[ 48.344440][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.354149][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.362950][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.370390][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.377770][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 48.385790][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.393880][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.401347][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.420930][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.429313][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.449870][ T368] device veth1_macvtap entered promiscuous mode
[ 48.458256][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.467522][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.476493][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 48.485393][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.493976][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 48.502347][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.511987][ T364] device veth1_macvtap entered promiscuous mode
[ 48.528102][ T366] device veth0_vlan entered promiscuous mode
[ 48.536307][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 48.545222][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.553632][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 48.562031][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.571140][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 48.579353][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.587902][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 48.595964][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.604287][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.611767][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.645940][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 48.653585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 48.666254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.666367][ T392] Bluetooth: hci2: Frame reassembly failed (-84)
[ 48.688393][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 48.696798][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.705198][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 48.713513][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.722392][ T366] device veth1_macvtap entered promiscuous mode
[ 48.740704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 48.748399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 48.757041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.775964][ T319] Bluetooth: hci3: Frame reassembly failed (-84)
[ 48.783162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 48.791483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.817701][ T394] Bluetooth: hci4: Frame reassembly failed (-84)
[ 49.080904][ T8] device bridge_slave_1 left promiscuous mode
[ 49.087081][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.094535][ T8] device bridge_slave_0 left promiscuous mode
[ 49.100835][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.108656][ T8] device veth1_macvtap left promiscuous mode
[ 49.114901][ T8] device veth0_vlan left promiscuous mode
[ 50.490330][ T386] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 50.660337][ T398] Bluetooth: hci1: command 0x1003 tx timeout
[ 50.660465][ T388] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 50.730335][ T388] Bluetooth: hci2: command 0x1003 tx timeout
[ 50.730347][ T390] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 50.810327][ T393] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 50.810340][ T390] Bluetooth: hci3: command 0x1003 tx timeout
[ 50.890358][ T393] Bluetooth: hci4: command 0x1003 tx timeout
[ 50.891905][ T396] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 52.570336][ T396] Bluetooth: hci0: command 0x080f tx timeout
[ 52.570451][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 52.576412][ T396] Bluetooth: hci0: sending frame failed (-49)
[ 52.590052][ T389] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 52.596305][ T391] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 52.605640][ T8] Bluetooth: hci5: Frame reassembly failed (-84)
[ 52.607568][ T395] Bluetooth: hci0: Opcode 0x080f failed: -4
2026/04/21 20:29:29 executed programs: 15
[ 52.618021][ T397] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 52.675153][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 52.708451][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 52.715077][ T394] Bluetooth: hci2: Frame reassembly failed (-84)
[ 52.721311][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 54.650311][ T45] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 54.650443][ T406] Bluetooth: hci5: command 0x1003 tx timeout
[ 54.668831][ T392] Bluetooth: hci4: Frame reassembly failed (-84)
[ 54.730292][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 54.730454][ T398] Bluetooth: hci3: command 0x1003 tx timeout
[ 54.736416][ T406] Bluetooth: hci2: command 0x1003 tx timeout
[ 54.742485][ T390] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 54.748338][ T406] Bluetooth: hci1: command 0x1003 tx timeout
[ 54.754402][ T387] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 54.760925][ T393] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 55.675945][ T402] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 55.706228][ T403] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 55.712268][ T404] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 55.718249][ T405] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 55.755593][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 55.769610][ T394] Bluetooth: hci3: Frame reassembly failed (-84)
[ 56.730297][ T45] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 56.730309][ T390] Bluetooth: hci4: command 0x1003 tx timeout
[ 57.670810][ T407] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 57.683606][ T10] Bluetooth: hci0: Frame reassembly failed (-84)
2026/04/21 20:29:34 executed programs: 24
[ 57.716513][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 57.770390][ T408] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 57.770405][ T388] Bluetooth: hci2: command 0x1003 tx timeout
[ 57.770422][ T388] Bluetooth: hci1: command 0x1003 tx timeout
[ 57.776543][ T390] Bluetooth: hci3: command 0x1003 tx timeout
[ 57.782544][ T387] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 57.794850][ T10] Bluetooth: hci2: Frame reassembly failed (-84)
[ 57.806947][ T393] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 57.814251][ T394] Bluetooth: hci3: Frame reassembly failed (-84)
[ 57.828676][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 57.835188][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 59.690320][ T406] Bluetooth: hci0: command 0x1003 tx timeout
[ 59.690324][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 59.702596][ T414] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 59.708636][ T415] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 59.714732][ T416] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 59.720964][ T417] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 59.727032][ T418] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 59.775749][ T392] Bluetooth: hci0: Frame reassembly failed (-84)
[ 59.780352][ T398] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 59.782160][ T45] Bluetooth: hci4: command 0x1003 tx timeout
[ 59.802353][ T8] Bluetooth: hci4: Frame reassembly failed (-84)
[ 59.850325][ T408] Bluetooth: hci1: command 0x1003 tx timeout
[ 59.850330][ T387] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 59.850352][ T408] Bluetooth: hci3: command 0x1003 tx timeout
[ 59.862466][ T387] Bluetooth: hci2: command 0x1003 tx timeout
[ 59.868536][ T393] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 59.874481][ T388] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 59.889270][ T392] Bluetooth: hci1: Frame reassembly failed (-84)
[ 59.897588][ T8] Bluetooth: hci2: Frame reassembly failed (-84)
[ 59.897603][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 59.911458][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 61.850323][ T398] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 61.850339][ T393] Bluetooth: hci0: command 0x1003 tx timeout
[ 61.850356][ T393] Bluetooth: hci4: command 0x1003 tx timeout
[ 61.856452][ T406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 61.874601][ T419] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 61.880668][ T420] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 61.886715][ T421] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 61.892794][ T423] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 61.898948][ T422] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 61.930329][ T387] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 61.930377][ T406] Bluetooth: hci3: command 0x1003 tx timeout
[ 61.936433][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 61.942464][ T388] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 61.948537][ T398] Bluetooth: hci2: command 0x1003 tx timeout
[ 61.954781][ T406] Bluetooth: hci1: command 0x1003 tx timeout
[ 61.973569][ T319] Bluetooth: hci0: Frame reassembly failed (-84)
[ 61.983307][ T319] Bluetooth: hci1: Frame reassembly failed (-84)
[ 61.991860][ T8] Bluetooth: hci2: Frame reassembly failed (-84)
[ 62.000341][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 62.013949][ T392] Bluetooth: hci4: Frame reassembly failed (-84)
[ 62.020453][ T392] Bluetooth: hci4: Frame reassembly failed (-84)
[ 64.010423][ T388] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 64.010541][ T408] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 64.016635][ T388] Bluetooth: hci3: command 0x1003 tx timeout
[ 64.016653][ T388] Bluetooth: hci2: command 0x1003 tx timeout
[ 64.016665][ T388] Bluetooth: hci1: command 0x1003 tx timeout
[ 64.022760][ T387] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 64.029231][ T398] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 64.090300][ T398] Bluetooth: hci4: command 0x1003 tx timeout
[ 64.090292][ T45] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 64.973407][ T424] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 64.989514][ T425] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 64.995575][ T426] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 65.001618][ T427] Bluetooth: hci0: Opcode 0x080f failed: -4
2026/04/21 20:29:41 executed programs: 39
[ 65.021793][ T428] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 65.034196][ T392] Bluetooth: hci0: Frame reassembly failed (-84)
[ 65.055913][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 65.105649][ T8] Bluetooth: hci2: Frame reassembly failed (-84)
[ 65.114045][ T392] Bluetooth: hci3: Frame reassembly failed (-84)
[ 65.122147][ T392] Bluetooth: hci4: Frame reassembly failed (-84)
[ 67.050311][ T388] Bluetooth: hci0: command 0x1003 tx timeout
[ 67.050311][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 67.062512][ T429] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 67.068569][ T430] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 67.074881][ T431] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 67.081469][ T432] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 67.087593][ T433] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 67.126462][ T406] ==================================================================
[ 67.134559][ T406] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[ 67.141037][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 67.141592][ T406] Write of size 8 at addr ffff88811bb00a00 by task kworker/u5:7/406
[ 67.155871][ T406]
[ 67.158206][ T406] CPU: 1 PID: 406 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 67.165639][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 67.170384][ T45] Bluetooth: hci4: command 0x1003 tx timeout
[ 67.175676][ T406] Workqueue: hci0 hci_power_on
[ 67.175709][ T406] Call Trace:
[ 67.175714][ T406]
[ 67.175720][ T406] __dump_stack+0x21/0x24
[ 67.175736][ T406] dump_stack_lvl+0x110/0x170
[ 67.175751][ T406] ? __cfi_dump_stack_lvl+0x8/0x8
[ 67.175765][ T406] ? __cfi_sched_clock_cpu+0x10/0x10
[ 67.175780][ T406] ? enqueue_timer+0xae/0x480
[ 67.175797][ T406] print_address_description+0x71/0x200
[ 67.175819][ T406] print_report+0x4a/0x60
[ 67.175839][ T406] kasan_report+0x122/0x150
[ 67.181836][ T398] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 67.186547][ T406] ? enqueue_timer+0xae/0x480
[ 67.241459][ T406] __asan_report_store8_noabort+0x17/0x20
[ 67.247163][ T406] enqueue_timer+0xae/0x480
[ 67.251639][ T406] __mod_timer+0x84c/0xc00
[ 67.256028][ T406] schedule_timeout+0x154/0x340
[ 67.260853][ T406] ? __cfi_schedule_timeout+0x10/0x10
[ 67.266198][ T406] ? queue_work_on+0x104/0x150
[ 67.270938][ T406] ? __cfi_process_timeout+0x10/0x10
[ 67.276196][ T406] ? prepare_to_wait_event+0x40b/0x440
[ 67.281632][ T406] __hci_cmd_sync_sk+0x3be/0xd30
[ 67.286566][ T406] ? __cfi___hci_cmd_sync_sk+0x10/0x10
[ 67.292012][ T406] ? __cfi_autoremove_wake_function+0x10/0x10
[ 67.298056][ T406] ? __kasan_check_read+0x11/0x20
[ 67.303077][ T406] hci_dev_open_sync+0x13e0/0x32a0
[ 67.308172][ T406] ? put_prev_entity+0x3b0/0x3b0
[ 67.313087][ T406] ? __cfi_hci_dev_open_sync+0x10/0x10
[ 67.318523][ T406] ? __kasan_check_write+0x14/0x20
[ 67.323615][ T406] ? __switch_to+0x517/0xe60
[ 67.328201][ T406] ? psi_group_change+0xb73/0x12b0
[ 67.333287][ T406] ? __kasan_check_write+0x14/0x20
[ 67.338383][ T406] ? mutex_lock+0x93/0x1b0
[ 67.342790][ T406] ? __cfi_mutex_lock+0x10/0x10
[ 67.347631][ T406] ? kthread_data+0x50/0xc0
[ 67.352117][ T406] hci_power_on+0x195/0x5c0
[ 67.356625][ T406] ? __cfi_hci_power_on+0x10/0x10
[ 67.361630][ T406] ? __schedule+0xbae/0x1500
[ 67.366195][ T406] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 67.371715][ T406] process_one_work+0x71f/0xc40
[ 67.376542][ T406] worker_thread+0xa29/0x11e0
[ 67.381190][ T406] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 67.386623][ T406] kthread+0x281/0x320
[ 67.390669][ T406] ? __cfi_worker_thread+0x10/0x10
[ 67.395752][ T406] ? __cfi_kthread+0x10/0x10
[ 67.400322][ T406] ret_from_fork+0x1f/0x30
[ 67.404716][ T406]
[ 67.407712][ T406]
[ 67.410021][ T406] Allocated by task 429:
[ 67.414236][ T406] kasan_set_track+0x4b/0x70
[ 67.418800][ T406] kasan_save_alloc_info+0x25/0x30
[ 67.423887][ T406] __kasan_kmalloc+0x95/0xb0
[ 67.428451][ T406] __kmalloc+0xb1/0x1e0
[ 67.432584][ T406] hci_alloc_dev_priv+0x27/0x1bd0
[ 67.437584][ T406] hci_uart_tty_ioctl+0x3c8/0xa20
[ 67.442584][ T406] tty_ioctl+0x8ef/0xc60
[ 67.446803][ T406] __se_sys_ioctl+0x12f/0x1b0
[ 67.451454][ T406] __x64_sys_ioctl+0x7b/0x90
[ 67.456025][ T406] x64_sys_call+0x58b/0x9a0
[ 67.460504][ T406] do_syscall_64+0x4c/0xa0
[ 67.464891][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 67.470759][ T406]
[ 67.473059][ T406] Freed by task 433:
[ 67.476925][ T406] kasan_set_track+0x4b/0x70
[ 67.481490][ T406] kasan_save_free_info+0x31/0x50
[ 67.486493][ T406] ____kasan_slab_free+0x132/0x180
[ 67.491578][ T406] __kasan_slab_free+0x11/0x20
[ 67.496315][ T406] slab_free_freelist_hook+0xc2/0x190
[ 67.501664][ T406] __kmem_cache_free+0xb7/0x1b0
[ 67.506489][ T406] kfree+0x6f/0xf0
[ 67.510183][ T406] hci_release_dev+0x12a3/0x13b0
[ 67.515095][ T406] bt_host_release+0x82/0x90
[ 67.519661][ T406] device_release+0xa4/0x1d0
[ 67.524236][ T406] kobject_put+0x19d/0x280
[ 67.528644][ T406] put_device+0x1f/0x30
[ 67.532780][ T406] hci_dev_cmd+0x279/0x740
[ 67.537173][ T406] hci_sock_ioctl+0x41e/0x7f0
[ 67.541827][ T406] sock_do_ioctl+0x114/0x330
[ 67.546392][ T406] sock_ioctl+0x4bd/0x710
[ 67.550711][ T406] __se_sys_ioctl+0x12f/0x1b0
[ 67.555378][ T406] __x64_sys_ioctl+0x7b/0x90
[ 67.559938][ T406] x64_sys_call+0x58b/0x9a0
[ 67.564422][ T406] do_syscall_64+0x4c/0xa0
[ 67.568811][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 67.574677][ T406]
[ 67.576993][ T406] Last potentially related work creation:
[ 67.582680][ T406] kasan_save_stack+0x3a/0x60
[ 67.587333][ T406] __kasan_record_aux_stack+0xb6/0xc0
[ 67.592698][ T406] kasan_record_aux_stack_noalloc+0xb/0x10
[ 67.598480][ T406] insert_work+0x51/0x300
[ 67.602786][ T406] __queue_work+0x9b1/0xd30
[ 67.607264][ T406] queue_work_on+0xde/0x150
[ 67.611749][ T406] __hci_cmd_sync_sk+0xa7f/0xd30
[ 67.616741][ T406] hci_cmd_sync_status+0x53/0x120
[ 67.621757][ T406] hci_dev_cmd+0x648/0x740
[ 67.626159][ T406] hci_sock_ioctl+0x41e/0x7f0
[ 67.630824][ T406] sock_do_ioctl+0x114/0x330
[ 67.635406][ T406] sock_ioctl+0x4bd/0x710
[ 67.639714][ T406] __se_sys_ioctl+0x12f/0x1b0
[ 67.644372][ T406] __x64_sys_ioctl+0x7b/0x90
[ 67.648933][ T406] x64_sys_call+0x58b/0x9a0
[ 67.653412][ T406] do_syscall_64+0x4c/0xa0
[ 67.657815][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 67.663682][ T406]
[ 67.665982][ T406] Second to last potentially related work creation:
[ 67.672534][ T406] kasan_save_stack+0x3a/0x60
[ 67.677188][ T406] __kasan_record_aux_stack+0xb6/0xc0
[ 67.682531][ T406] kasan_record_aux_stack_noalloc+0xb/0x10
[ 67.688316][ T406] insert_work+0x51/0x300
[ 67.692619][ T406] __queue_work+0x9b1/0xd30
[ 67.697097][ T406] queue_work_on+0xde/0x150
[ 67.701573][ T406] __hci_cmd_sync_sk+0xa7f/0xd30
[ 67.706480][ T406] hci_cmd_sync_status+0x53/0x120
[ 67.711476][ T406] hci_dev_cmd+0x648/0x740
[ 67.715866][ T406] hci_sock_ioctl+0x41e/0x7f0
[ 67.720513][ T406] sock_do_ioctl+0x114/0x330
[ 67.725081][ T406] sock_ioctl+0x4bd/0x710
[ 67.729382][ T406] __se_sys_ioctl+0x12f/0x1b0
[ 67.734032][ T406] __x64_sys_ioctl+0x7b/0x90
[ 67.738592][ T406] x64_sys_call+0x58b/0x9a0
[ 67.743065][ T406] do_syscall_64+0x4c/0xa0
[ 67.747451][ T406] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 67.753315][ T406]
[ 67.755613][ T406] The buggy address belongs to the object at ffff88811bb00000
[ 67.755613][ T406] which belongs to the cache kmalloc-8k of size 8192
[ 67.769635][ T406] The buggy address is located 2560 bytes inside of
[ 67.769635][ T406] 8192-byte region [ffff88811bb00000, ffff88811bb02000)
[ 67.783051][ T406]
[ 67.785349][ T406] The buggy address belongs to the physical page:
[ 67.791729][ T406] page:ffffea00046ec000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bb00
[ 67.801945][ T406] head:ffffea00046ec000 order:3 compound_mapcount:0 compound_pincount:0
[ 67.810241][ T406] flags: 0x4000000000010200(slab|head|zone=1)
[ 67.816292][ T406] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500
[ 67.824844][ T406] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[ 67.833394][ T406] page dumped because: kasan: bad access detected
[ 67.839780][ T406] page_owner tracks the page as allocated
[ 67.845464][ T406] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 429, tgid 429 (syz.5.46), ts 65033447250, free_ts 65008239080
[ 67.867657][ T406] post_alloc_hook+0x1f5/0x210
[ 67.872400][ T406] prep_new_page+0x1c/0x110
[ 67.876877][ T406] get_page_from_freelist+0x2d12/0x2d80
[ 67.882397][ T406] __alloc_pages+0x1fa/0x610
[ 67.886960][ T406] alloc_slab_page+0x6e/0xf0
[ 67.891520][ T406] new_slab+0x98/0x3d0
[ 67.895586][ T406] ___slab_alloc+0x6bd/0xb20
[ 67.900147][ T406] __slab_alloc+0x5e/0xa0
[ 67.904452][ T406] __kmem_cache_alloc_node+0x203/0x2c0
[ 67.909882][ T406] __kmalloc+0xa1/0x1e0
[ 67.914007][ T406] hci_alloc_dev_priv+0x27/0x1bd0
[ 67.919002][ T406] hci_uart_tty_ioctl+0x3c8/0xa20
[ 67.924002][ T406] tty_ioctl+0x8ef/0xc60
[ 67.928216][ T406] __se_sys_ioctl+0x12f/0x1b0
[ 67.932864][ T406] __x64_sys_ioctl+0x7b/0x90
[ 67.937423][ T406] x64_sys_call+0x58b/0x9a0
[ 67.941898][ T406] page last free stack trace:
[ 67.946541][ T406] free_unref_page_prepare+0x7f8/0x800
[ 67.951971][ T406] free_unref_page+0x95/0x540
[ 67.956640][ T406] __free_pages+0x67/0x100
[ 67.961028][ T406] __free_slab+0xca/0x1a0
[ 67.965330][ T406] discard_slab+0x29/0x40
[ 67.969637][ T406] __slab_free+0x201/0x280
[ 67.974027][ T406] ___cache_free+0xbf/0xd0
[ 67.978417][ T406] qlist_free_all+0xc6/0x140
[ 67.982978][ T406] kasan_quarantine_reduce+0x14a/0x170
[ 67.988431][ T406] __kasan_slab_alloc+0x24/0x80
[ 67.993255][ T406] slab_post_alloc_hook+0x4f/0x2d0
[ 67.998341][ T406] __kmem_cache_alloc_node+0x192/0x2c0
[ 68.003772][ T406] __kmalloc_node+0xa1/0x1e0
[ 68.008342][ T406] kvmalloc_node+0x28a/0x460
[ 68.012901][ T406] simple_xattr_alloc+0x43/0xa0
[ 68.017727][ T406] shmem_initxattrs+0x8d/0x1e0
[ 68.022470][ T406]
[ 68.024767][ T406] Memory state around the buggy address:
[ 68.030365][ T406] ffff88811bb00900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 68.038397][ T406] ffff88811bb00980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 68.046427][ T406] >ffff88811bb00a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 68.054455][ T406] ^
[ 68.058512][ T406] ffff88811bb00a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 68.066548][ T406] ffff88811bb00b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 68.074581][ T406] ==================================================================
[ 68.082610][ T406] Disabling lock debugging due to kernel taint
[ 68.088918][ T387] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 68.089050][ T393] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 68.095215][ T387] Bluetooth: hci3: command 0x1003 tx timeout
[ 68.101093][ T408] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 68.121644][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 68.126205][ T8] Bluetooth: hci2: Frame reassembly failed (-84)
[ 68.135607][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 68.144008][ T8] Bluetooth: hci4: Frame reassembly failed (-84)
[ 68.144790][ T28] kauditd_printk_skb: 35 callbacks suppressed
[ 68.144813][ T28] audit: type=1400 audit(1776803384.993:109): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 68.178216][ T28] audit: type=1400 audit(1776803384.993:110): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.199657][ T28] audit: type=1400 audit(1776803384.993:111): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.220940][ T28] audit: type=1400 audit(1776803384.993:112): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.241452][ T28] audit: type=1400 audit(1776803384.993:113): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 68.261889][ T28] audit: type=1400 audit(1776803384.993:114): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 68.284746][ T28] audit: type=1400 audit(1776803384.993:115): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 69.130486][ T406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 69.130532][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 69.148281][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 69.156677][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0
[ 69.165157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 69.175194][ C1] RIP: 0010:__queue_work+0x575/0xd30
[ 69.180469][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 7d b9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc d2 6e 00 49 8b 7d 00 e8 c3 78
[ 69.200072][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[ 69.206124][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100333cc0
[ 69.214077][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 69.222030][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb
[ 69.229989][ C1] R10: dffffc0000000000 R11: ffffed1023760139 R12: dffffc0000000000
[ 69.237943][ C1] R13: 0000000000000000 R14: ffff88811bb009c8 R15: 0000000000000008
[ 69.245895][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 69.254808][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.261377][ C1] CR2: 0000200000000280 CR3: 000000013448c000 CR4: 00000000003506a0
[ 69.269333][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.277285][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.285239][ C1] Call Trace:
[ 69.288502][ C1]
[ 69.291333][ C1] delayed_work_timer_fn+0x61/0x80
[ 69.296438][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 69.302231][ C1] call_timer_fn+0x46/0x2a0
[ 69.306726][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 69.312514][ C1] __run_timers+0x689/0x9f0
[ 69.317004][ C1] ? calc_index+0x200/0x200
[ 69.321492][ C1] ? kvm_sched_clock_read+0x18/0x40
[ 69.326675][ C1] run_timer_softirq+0x6a/0xf0
[ 69.331420][ C1] handle_softirqs+0x1d7/0x600
[ 69.336170][ C1] ? irqtime_account_irq+0xc4/0x240
[ 69.341355][ C1] __irq_exit_rcu+0x52/0xf0
[ 69.345846][ C1] irq_exit_rcu+0x9/0x10
[ 69.350073][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 69.355691][ C1]
[ 69.358604][ C1]
[ 69.361517][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 69.367480][ C1] RIP: 0010:default_idle+0xf/0x20
[ 69.372487][ C1] Code: a7 81 b5 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d f3 b6 64 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 69.392075][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[ 69.398121][ C1] RAX: ffff8881f6f00000 RBX: ffff888100333cc0 RCX: b35209e019a2a900
[ 69.406071][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8940 RDI: ffffffff85ca8900
[ 69.414028][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[ 69.421980][ C1] R10: 0000000000000000 R11: ffffffff85017c00 R12: 0000000000000000
[ 69.429933][ C1] R13: 0000000000000000 R14: ffff888100333cc0 R15: dffffc0000000000
[ 69.437891][ C1] ? __cfi_default_idle+0x10/0x10
[ 69.442902][ C1] arch_cpu_idle+0x1c/0x20
[ 69.447298][ C1] default_idle_call+0x71/0x1d0
[ 69.452127][ C1] do_idle+0x1a7/0x560
[ 69.456181][ C1] ? try_to_wake_up+0x613/0x1220
[ 69.461101][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 69.466283][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 69.472069][ C1] ? complete+0x167/0x1c0
[ 69.476385][ C1] cpu_startup_entry+0x43/0x60
[ 69.481129][ C1] start_secondary+0x119/0x120
[ 69.485878][ C1] secondary_startup_64_no_verify+0xce/0xdb
[ 69.491755][ C1]
[ 69.494765][ C1] Modules linked in:
[ 69.498646][ C1] ---[ end trace 0000000000000000 ]---
[ 69.504085][ C1] RIP: 0010:__queue_work+0x575/0xd30
[ 69.509381][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 45 29 00 4c 89 ff e8 30 7d b9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc d2 6e 00 49 8b 7d 00 e8 c3 78
[ 69.528996][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[ 69.535054][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100333cc0
[ 69.543011][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 69.550962][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb
[ 69.558915][ C1] R10: dffffc0000000000 R11: ffffed1023760139 R12: dffffc0000000000
[ 69.566871][ C1] R13: 0000000000000000 R14: ffff88811bb009c8 R15: 0000000000000008
[ 69.574830][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 69.583753][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.590325][ C1] CR2: 0000200000000280 CR3: 000000013448c000 CR4: 00000000003506a0
[ 69.598290][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.606244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.614219][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 69.621692][ C1] Kernel Offset: disabled
[ 69.625996][ C1] Rebooting in 86400 seconds..