[ 37.988729][ T44] audit: type=1400 audit(1792112062.465:135): avc: denied { write } for pid=5711 comm="sh" path="pipe:[4038]" dev="pipefs" ino=4038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 37.989029][ T44] audit: type=1400 audit(1792112062.465:136): avc: denied { rlimitinh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 37.989070][ T44] audit: type=1400 audit(1792112062.465:137): avc: denied { siginh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:3638' (ED25519) to the list of known hosts.
[ 42.982766][ T44] audit: type=1400 audit(1792112067.455:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[ 42.983233][ T44] audit: type=1400 audit(1792112067.455:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2026/10/16 00:54:28 parsed 1 programs
2026/10/16 00:54:28 serving rpc on tcp://41369
[ 43.969696][ T44] audit: type=1400 audit(1792112068.445:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 46.414993][ T44] audit: type=1400 audit(1792112070.895:141): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 46.417161][ T44] audit: type=1400 audit(1792112070.895:142): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.419785][ T5737] cgroup: Unknown subsys name 'net'
[ 46.421348][ T44] audit: type=1400 audit(1792112070.895:143): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.565476][ T5737] cgroup: Unknown subsys name 'cpuset'
[ 46.570112][ T5737] cgroup: Unknown subsys name 'rlimit'
[ 46.739057][ T44] audit: type=1400 audit(1792112071.215:144): avc: denied { setattr } for pid=5737 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 46.741853][ T44] audit: type=1400 audit(1792112071.215:145): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.741896][ T44] audit: type=1400 audit(1792112071.215:146): avc: denied { write } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.741930][ T44] audit: type=1400 audit(1792112071.215:147): avc: denied { read } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.753227][ T44] audit: type=1400 audit(1792112071.225:148): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 46.753683][ T44] audit: type=1400 audit(1792112071.225:149): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 46.812937][ T5743] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 47.624127][ T5737] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 49.318342][ T44] kauditd_printk_skb: 4 callbacks suppressed
[ 49.318362][ T44] audit: type=1400 audit(1792112073.795:154): avc: denied { execmem } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.322310][ T44] audit: type=1400 audit(1792112073.795:155): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 49.322546][ T44] audit: type=1400 audit(1792112073.795:156): avc: denied { open } for pid=5746 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 49.323464][ T44] audit: type=1400 audit(1792112073.795:157): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 49.327648][ T44] audit: type=1400 audit(1792112073.805:158): avc: denied { module_request } for pid=5746 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 49.352205][ T44] audit: type=1400 audit(1792112073.825:159): avc: denied { sys_module } for pid=5746 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 49.352515][ T44] audit: type=1400 audit(1792112073.825:160): avc: denied { module_request } for pid=5746 comm="syz-executor" kmod="nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 49.483799][ T44] audit: type=1400 audit(1792112073.955:161): avc: denied { create } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 49.509045][ T44] audit: type=1400 audit(1792112073.985:162): avc: denied { write } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 49.510419][ T5746] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.511016][ T5746] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.512304][ T5746] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.620701][ T5746] infiniband rxe0: set active
[ 49.621007][ T30] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.621060][ T5746] infiniband rxe0: added rxe_eth0
[ 49.630172][ T5746] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 49.630202][ T5746] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 49.630235][ T5746] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 49.654437][ T5746] RDS/IB: rxe0: added
[ 49.654684][ T5746] smc: adding ib device rxe0 with port count 1
[ 49.654746][ T5746] smc: ib device rxe0 port 1 has no pnetid
[ 49.656320][ T44] audit: type=1400 audit(1792112074.135:163): avc: denied { read } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 49.656623][ T997] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.669200][ T5746] rxe_eth0 speed is unknown, defaulting to 1000
[ 49.941221][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 49.941752][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 49.941884][ T5746] bridge_slave_0: entered allmulticast mode
[ 49.943590][ T5746] bridge_slave_0: entered promiscuous mode
[ 49.948075][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 49.948148][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 49.948236][ T5746] bridge_slave_1: entered allmulticast mode
[ 49.949520][ T5746] bridge_slave_1: entered promiscuous mode
[ 49.974101][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 49.976615][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 49.994587][ T5746] team0: Port device team_slave_0 added
[ 49.997299][ T5746] team0: Port device team_slave_1 added
[ 50.018780][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 50.018795][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 50.018814][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 50.021083][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 50.021096][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 50.021113][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 50.043515][ T5746] hsr_slave_0: entered promiscuous mode
[ 50.044125][ T5746] hsr_slave_1: entered promiscuous mode
[ 50.161783][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 50.167582][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 50.168328][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 50.170527][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 50.171862][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 50.173316][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 50.174169][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 50.179321][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 50.203230][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.203316][ T5746] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.203823][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.203907][ T5746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.258250][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 50.268329][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.269067][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.278433][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[ 50.284645][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.284727][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 50.289252][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.289330][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 50.538046][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 50.566810][ T5746] veth0_vlan: entered promiscuous mode
[ 50.570299][ T5746] veth1_vlan: entered promiscuous mode
[ 50.583301][ T5746] veth0_macvtap: entered promiscuous mode
[ 50.586230][ T5746] veth1_macvtap: entered promiscuous mode
[ 50.593760][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 50.602457][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 50.634557][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 50.634583][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 50.634600][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 50.634617][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 50.662079][ T5746] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 50.781235][ T5774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 50.801406][ T5790] rxe_eth0 speed is unknown, defaulting to 1000
[ 50.858646][ T5774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 50.929121][ T5774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 50.969075][ T5774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 51.021104][ T5797] rxe_eth0 speed is unknown, defaulting to 1000
[ 51.222386][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.222406][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.243101][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.243115][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.309536][ T5805] rxe_eth0 speed is unknown, defaulting to 1000
[ 51.559829][ T5810] rxe_eth0 speed is unknown, defaulting to 1000
[ 51.892019][ T5815] rxe_eth0 speed is unknown, defaulting to 1000
[ 52.126385][ T5821] rxe_eth0 speed is unknown, defaulting to 1000
[ 52.324732][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 52.325686][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 52.325919][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 52.326342][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 52.326934][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 52.352052][ T5826] rxe_eth0 speed is unknown, defaulting to 1000
[ 52.625147][ T5833] rxe_eth0 speed is unknown, defaulting to 1000
[ 52.849406][ T5837] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.130500][ T5840] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.308446][ T5845] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.471679][ T5850] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.652885][ T5855] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.841368][ T5860] rxe_eth0 speed is unknown, defaulting to 1000
[ 53.891804][ T5774] bridge_slave_1: left allmulticast mode
[ 53.891827][ T5774] bridge_slave_1: left promiscuous mode
[ 53.892462][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.902941][ T5774] bridge_slave_0: left allmulticast mode
[ 53.902964][ T5774] bridge_slave_0: left promiscuous mode
[ 53.903196][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.008219][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 54.011132][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 54.012016][ T5774] bond0 (unregistering): Released all slaves
[ 54.181395][ T5870] rxe_eth0 speed is unknown, defaulting to 1000
[ 54.193918][ T5774] hsr_slave_0: left promiscuous mode
[ 54.199081][ T5774] hsr_slave_1: left promiscuous mode
[ 54.199859][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 54.199875][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 54.200826][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 54.200836][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 54.217367][ T5774] veth1_macvtap: left promiscuous mode
[ 54.217394][ T5774] veth0_macvtap: left promiscuous mode
[ 54.217439][ T5774] veth1_vlan: left promiscuous mode
[ 54.217474][ T5774] veth0_vlan: left promiscuous mode
[ 54.343726][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 54.352087][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 54.427696][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2
[ 54.528658][ T44] kauditd_printk_skb: 28 callbacks suppressed
[ 54.528671][ T44] audit: type=1400 audit(1792112079.005:192): avc: denied { write } for pid=5875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.577920][ T44] audit: type=1400 audit(1792112079.055:193): avc: denied { write } for pid=5878 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.615344][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3
2026/10/16 00:54:39 executed programs: 0
[ 54.677682][ T44] audit: type=1400 audit(1792112079.155:194): avc: denied { write } for pid=5881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.701457][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 54.702375][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 54.702946][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 54.704345][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 54.704604][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 54.730871][ T44] audit: type=1400 audit(1792112079.205:195): avc: denied { write } for pid=5888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.761314][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4
[ 54.829524][ T44] audit: type=1400 audit(1792112079.305:196): avc: denied { write } for pid=5894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.884067][ T5885] rxe_eth0 speed is unknown, defaulting to 1000
[ 54.887560][ T44] audit: type=1400 audit(1792112079.365:197): avc: denied { write } for pid=5901 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 54.929604][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5
[ 55.541477][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.541521][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.541574][ T5885] bridge_slave_0: entered allmulticast mode
[ 55.542277][ T5885] bridge_slave_0: entered promiscuous mode
[ 55.544976][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.545026][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.545081][ T5885] bridge_slave_1: entered allmulticast mode
[ 55.545963][ T5885] bridge_slave_1: entered promiscuous mode
[ 55.559618][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 55.561104][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 55.595239][ T5885] team0: Port device team_slave_0 added
[ 55.597016][ T5885] team0: Port device team_slave_1 added
[ 55.609738][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 55.609748][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 55.609760][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 55.610579][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 55.610587][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 55.610599][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 55.630980][ T5885] hsr_slave_0: entered promiscuous mode
[ 55.631496][ T5885] hsr_slave_1: entered promiscuous mode
[ 55.759605][ T44] audit: type=1400 audit(1792112080.235:198): avc: denied { write } for pid=5915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 55.821237][ T44] audit: type=1400 audit(1792112080.295:199): avc: denied { write } for pid=5918 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 55.908253][ T44] audit: type=1400 audit(1792112080.385:200): avc: denied { write } for pid=5920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 55.963117][ T44] audit: type=1400 audit(1792112080.435:201): avc: denied { write } for pid=5923 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 56.110697][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 56.118680][ T5885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 56.119155][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 56.121372][ T5885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 56.121830][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 56.129632][ T5885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 56.129983][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 56.135247][ T5885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 56.153765][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.153811][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.153909][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.153951][ T5885] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.180892][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 56.187333][ T165] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.190623][ T165] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.202848][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[ 56.212075][ T165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.212150][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.219875][ T71] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.219951][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.495656][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 56.524468][ T5885] veth0_vlan: entered promiscuous mode
[ 56.530740][ T5885] veth1_vlan: entered promiscuous mode
[ 56.549357][ T5885] veth0_macvtap: entered promiscuous mode
[ 56.552403][ T5885] veth1_macvtap: entered promiscuous mode
[ 56.597569][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 56.600786][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 56.640977][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.641263][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.641450][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.641473][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.666756][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.666774][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 56.711004][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.711021][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 56.735048][ T5093] Bluetooth: hci0: command tx timeout
[ 57.014138][ T1767] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 57.174057][ T1767] usb 5-1: Using ep0 maxpacket: 32
[ 57.176797][ T1767] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 57.176820][ T1767] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[ 57.178210][ T1767] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[ 57.178222][ T1767] usb 5-1: config 3 has an invalid interface number: 25 but max is 1
[ 57.178236][ T1767] usb 5-1: config 3 has an invalid interface number: 223 but max is 1
[ 57.178250][ T1767] usb 5-1: config 3 has no interface number 0
[ 57.178262][ T1767] usb 5-1: config 3 has no interface number 1
[ 57.178298][ T1767] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 57.178314][ T1767] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 57.178330][ T1767] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[ 57.178347][ T1767] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 57.178360][ T1767] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 57.178373][ T1767] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[ 57.178385][ T1767] usb 5-1: config 3 interface 223 has no altsetting 1
[ 57.178394][ T1767] usb 5-1: config 3 interface 25 has no altsetting 0
[ 57.179839][ T1767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 57.179850][ T1767] usb 5-1: Product: syz
[ 57.179857][ T1767] usb 5-1: Manufacturer: syz
[ 57.179864][ T1767] usb 5-1: SerialNumber: syz
[ 57.419069][ T1767] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[ 57.424935][ T1767] usb 5-1: USB disconnect, device number 2
[ 57.448993][ T1767]
[ 57.449806][ T1767] =========================
[ 57.451270][ T1767] WARNING: held lock freed!
[ 57.452172][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 57.457063][ T1767] syzkaller #0 Not tainted
[ 57.458415][ T1767] -------------------------
[ 57.459786][ T1767] kworker/3:3/1767 is freeing memory ffff88805347e000-ffff88805347e7ff, with a lock still held there!
[ 57.463013][ T1767] ffff88805347e1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 57.466124][ T1767] locks held by kworker/3:3/1767: 5, last CPU#3:
[ 57.468106][ T1767] #0: ffff88801eb11940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 57.471464][ T1767] #1: ffffc900071bfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 57.474900][ T1767] #2: ffff88802da8e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[ 57.477651][ T1767] #3: ffff888053f101d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[ 57.480534][ T1767] #4: ffff88805347e1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 57.483770][ T1767]
[ 57.483770][ T1767] stack backtrace:
[ 57.485609][ T1767] CPU: 3 UID: 0 PID: 1767 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full)
[ 57.488491][ T1767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 57.491579][ T1767] Workqueue: usb_hub_wq hub_event
[ 57.493162][ T1767] Call Trace:
[ 57.494215][ T1767]
[ 57.495150][ T1767] dump_stack_lvl+0x100/0x190
[ 57.496641][ T1767] debug_check_no_locks_freed+0x115/0x120
[ 57.498555][ T1767] ? device_release+0xc0/0x270
[ 57.500133][ T1767] ? device_release+0xd2/0x270
[ 57.501649][ T1767] kfree+0x180/0x6d0
[ 57.502880][ T1767] ? put_device+0x24/0x30
[ 57.504238][ T1767] ? __pfx_usb_release_interface+0x10/0x10
[ 57.506136][ T1767] device_release+0xd2/0x270
[ 57.507830][ T1767] kobject_put+0x1f7/0x640
[ 57.509430][ T1767] put_device+0x1f/0x30
[ 57.510788][ T1767] v4l2_device_disconnect+0x60/0xc0
[ 57.512422][ T1767] usbtv_video_free+0x25/0x30
[ 57.513890][ T1767] usbtv_disconnect+0x58/0xa0
[ 57.515841][ T1767] usb_unbind_interface+0x1dd/0x9e0
[ 57.517912][ T1767] ? __pfx_usb_unbind_interface+0x10/0x10
[ 57.519762][ T1767] device_remove+0x12a/0x180
[ 57.521271][ T1767] device_release_driver_internal+0x44e/0x620
[ 57.523162][ T1767] bus_remove_device+0x2bc/0x560
[ 57.524736][ T1767] ? __pfx_bus_remove_device+0x10/0x10
[ 57.526438][ T1767] ? __pfx_device_remove_attrs+0x10/0x10
[ 57.528252][ T1767] device_del+0x376/0x9b0
[ 57.529702][ T1767] ? __pfx_device_del+0x10/0x10
[ 57.531271][ T1767] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 57.533054][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.534523][ T1767] usb_disable_device+0x367/0x810
[ 57.536104][ T1767] ? mark_held_locks+0x40/0x70
[ 57.537610][ T1767] usb_disconnect+0x2e2/0x9a0
[ 57.539238][ T1767] hub_event+0x1bb1/0x4420
[ 57.540673][ T1767] ? __lock_acquire+0x5c0/0x1f40
[ 57.542221][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.543714][ T1767] ? lock_sequence+0xb0/0x110
[ 57.545191][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.546658][ T1767] ? process_one_work+0xa2c/0x1b10
[ 57.548327][ T1767] ? process_one_work+0x906/0x1b10
[ 57.550047][ T1767] ? process_one_work+0x906/0x1b10
[ 57.551670][ T1767] process_one_work+0xac7/0x1b10
[ 57.553240][ T1767] ? __pfx_process_one_work+0x10/0x10
[ 57.554894][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.556382][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.557870][ T1767] worker_thread+0x5ef/0xe50
[ 57.559396][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.560985][ T1767] ? kthread+0x13a/0x450
[ 57.562316][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.563905][ T1767] kthread+0x373/0x450
[ 57.565195][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.566643][ T1767] ret_from_fork+0x730/0xd60
[ 57.568114][ T1767] ? __pfx_ret_from_fork+0x10/0x10
[ 57.569756][ T1767] ? __switch_to+0x800/0x10f0
[ 57.571254][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.572713][ T1767] ret_from_fork_asm+0x1a/0x30
[ 57.574213][ T1767]
[ 57.577370][ T1767] ==================================================================
[ 57.577377][ T1767] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0
[ 57.577392][ T1767] Read of size 8 at addr ffff88805347e008 by task kworker/3:3/1767
[ 57.577401][ T1767]
[ 57.577406][ T1767] CPU: 3 UID: 0 PID: 1767 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full)
[ 57.577418][ T1767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 57.577425][ T1767] Workqueue: usb_hub_wq hub_event
[ 57.577452][ T1767] Call Trace:
[ 57.577455][ T1767]
[ 57.577459][ T1767] dump_stack_lvl+0x100/0x190
[ 57.577476][ T1767] print_report+0x13d/0x4b0
[ 57.577492][ T1767] ? __virt_addr_valid+0x239/0x430
[ 57.577504][ T1767] ? usb_unbind_interface+0x935/0x9e0
[ 57.577516][ T1767] kasan_report+0xdf/0x1c0
[ 57.577532][ T1767] ? usb_unbind_interface+0x935/0x9e0
[ 57.577547][ T1767] usb_unbind_interface+0x935/0x9e0
[ 57.577561][ T1767] ? __pfx_usb_unbind_interface+0x10/0x10
[ 57.577574][ T1767] device_remove+0x12a/0x180
[ 57.577589][ T1767] device_release_driver_internal+0x44e/0x620
[ 57.577601][ T1767] bus_remove_device+0x2bc/0x560
[ 57.577616][ T1767] ? __pfx_bus_remove_device+0x10/0x10
[ 57.577630][ T1767] ? __pfx_device_remove_attrs+0x10/0x10
[ 57.577646][ T1767] device_del+0x376/0x9b0
[ 57.577662][ T1767] ? __pfx_device_del+0x10/0x10
[ 57.577677][ T1767] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 57.577694][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.577706][ T1767] usb_disable_device+0x367/0x810
[ 57.577717][ T1767] ? mark_held_locks+0x40/0x70
[ 57.577730][ T1767] usb_disconnect+0x2e2/0x9a0
[ 57.577742][ T1767] hub_event+0x1bb1/0x4420
[ 57.577756][ T1767] ? __lock_acquire+0x5c0/0x1f40
[ 57.577769][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.577779][ T1767] ? lock_sequence+0xb0/0x110
[ 57.577789][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.577800][ T1767] ? process_one_work+0xa2c/0x1b10
[ 57.577817][ T1767] ? process_one_work+0x906/0x1b10
[ 57.577833][ T1767] ? process_one_work+0x906/0x1b10
[ 57.577850][ T1767] process_one_work+0xac7/0x1b10
[ 57.577869][ T1767] ? __pfx_process_one_work+0x10/0x10
[ 57.577885][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.577898][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.577910][ T1767] worker_thread+0x5ef/0xe50
[ 57.577920][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.577930][ T1767] ? kthread+0x13a/0x450
[ 57.577948][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.577957][ T1767] kthread+0x373/0x450
[ 57.577971][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.577986][ T1767] ret_from_fork+0x730/0xd60
[ 57.577998][ T1767] ? __pfx_ret_from_fork+0x10/0x10
[ 57.578010][ T1767] ? __switch_to+0x800/0x10f0
[ 57.578029][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.578050][ T1767] ret_from_fork_asm+0x1a/0x30
[ 57.578070][ T1767]
[ 57.578077][ T1767]
[ 57.578081][ T1767] Allocated by task 1767:
[ 57.578089][ T1767] kasan_save_stack+0x30/0x50
[ 57.578108][ T1767] kasan_save_track+0x14/0x30
[ 57.578126][ T1767] __kasan_kmalloc+0xaa/0xb0
[ 57.578145][ T1767] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 57.578160][ T1767] usb_set_configuration+0x10d0/0x1dc0
[ 57.578175][ T1767] usb_generic_driver_probe+0xa1/0xe0
[ 57.578198][ T1767] usb_probe_device+0xef/0x400
[ 57.578211][ T1767] really_probe+0x241/0xa60
[ 57.578226][ T1767] __driver_probe_device+0x210/0x460
[ 57.578241][ T1767] driver_probe_device+0x4a/0x140
[ 57.578256][ T1767] __device_attach_driver+0x1df/0x320
[ 57.578272][ T1767] bus_for_each_drv+0x159/0x1e0
[ 57.578283][ T1767] __device_attach+0x1e4/0x4d0
[ 57.578298][ T1767] device_initial_probe+0xaf/0xd0
[ 57.578307][ T1767] bus_probe_device+0x64/0x160
[ 57.578319][ T1767] device_add+0x121d/0x1970
[ 57.578329][ T1767] usb_new_device.part.0+0xcc2/0x1686
[ 57.578344][ T1767] hub_event.cold+0x1e3/0xe90
[ 57.578357][ T1767] process_one_work+0xac7/0x1b10
[ 57.578372][ T1767] worker_thread+0x5ef/0xe50
[ 57.578380][ T1767] kthread+0x373/0x450
[ 57.578393][ T1767] ret_from_fork+0x730/0xd60
[ 57.578403][ T1767] ret_from_fork_asm+0x1a/0x30
[ 57.578413][ T1767]
[ 57.578415][ T1767] Freed by task 1767:
[ 57.578420][ T1767] kasan_save_stack+0x30/0x50
[ 57.578432][ T1767] kasan_save_track+0x14/0x30
[ 57.578445][ T1767] kasan_save_free_info+0x3b/0x70
[ 57.578455][ T1767] __kasan_slab_free+0x5f/0x80
[ 57.578468][ T1767] kfree+0x22b/0x6d0
[ 57.578477][ T1767] device_release+0xd2/0x270
[ 57.578488][ T1767] kobject_put+0x1f7/0x640
[ 57.578497][ T1767] put_device+0x1f/0x30
[ 57.578509][ T1767] v4l2_device_disconnect+0x60/0xc0
[ 57.578520][ T1767] usbtv_video_free+0x25/0x30
[ 57.578532][ T1767] usbtv_disconnect+0x58/0xa0
[ 57.578542][ T1767] usb_unbind_interface+0x1dd/0x9e0
[ 57.578553][ T1767] device_remove+0x12a/0x180
[ 57.578566][ T1767] device_release_driver_internal+0x44e/0x620
[ 57.578576][ T1767] bus_remove_device+0x2bc/0x560
[ 57.578589][ T1767] device_del+0x376/0x9b0
[ 57.578602][ T1767] usb_disable_device+0x367/0x810
[ 57.578612][ T1767] usb_disconnect+0x2e2/0x9a0
[ 57.578621][ T1767] hub_event+0x1bb1/0x4420
[ 57.578630][ T1767] process_one_work+0xac7/0x1b10
[ 57.578646][ T1767] worker_thread+0x5ef/0xe50
[ 57.578653][ T1767] kthread+0x373/0x450
[ 57.578666][ T1767] ret_from_fork+0x730/0xd60
[ 57.578677][ T1767] ret_from_fork_asm+0x1a/0x30
[ 57.578687][ T1767]
[ 57.578689][ T1767] The buggy address belongs to the object at ffff88805347e000
[ 57.578689][ T1767] which belongs to the cache kmalloc-2k of size 2048
[ 57.578697][ T1767] The buggy address is located 8 bytes inside of
[ 57.578697][ T1767] freed 2048-byte region [ffff88805347e000, ffff88805347e800)
[ 57.578706][ T1767]
[ 57.578708][ T1767] The buggy address belongs to the physical page:
[ 57.578713][ T1767] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53478
[ 57.578723][ T1767] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 57.578731][ T1767] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 57.578740][ T1767] page_type: f5(slab)
[ 57.578749][ T1767] raw: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122
[ 57.578757][ T1767] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 57.578766][ T1767] head: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122
[ 57.578775][ T1767] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 57.578783][ T1767] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 57.578791][ T1767] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 57.578797][ T1767] page dumped because: kasan: bad access detected
[ 57.578801][ T1767] page_owner tracks the page as allocated
[ 57.578805][ T1767] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5860, tgid 5860 (syz-executor), ts 54075963558
[ 57.578821][ T1767] post_alloc_hook+0xfd/0x120
[ 57.578831][ T1767] get_page_from_freelist+0x110d/0x35d0
[ 57.578841][ T1767] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 57.578853][ T1767] new_slab+0xa9/0x6e0
[ 57.578862][ T1767] refill_objects+0xe3/0x410
[ 57.578872][ T1767] __pcs_replace_empty_main+0x35e/0x650
[ 57.578882][ T1767] __kmalloc_noprof+0x67c/0x840
[ 57.578894][ T1767] sk_prot_alloc+0x10b/0x2a0
[ 57.578905][ T1767] sk_alloc+0x36/0xe80
[ 57.578920][ T1767] __netlink_create+0x5e/0x2c0
[ 57.578932][ T1767] netlink_create+0x29b/0x610
[ 57.578952][ T1767] __sock_create+0x339/0x860
[ 57.578963][ T1767] __sys_socket+0x14d/0x260
[ 57.578976][ T1767] __x64_sys_socket+0x72/0xb0
[ 57.578989][ T1767] do_syscall_64+0x123/0x790
[ 57.579003][ T1767] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.579013][ T1767] page last free pid 5840 tgid 5840 ts 53328649081 stack trace:
[ 57.579019][ T1767] free_pages_prepare+0x586/0xe00
[ 57.579028][ T1767] __free_contig_range_common+0x14f/0x250
[ 57.579038][ T1767] free_pages_bulk+0x12a/0x200
[ 57.579048][ T1767] vm_area_free_pages+0xb2/0x2a0
[ 57.579059][ T1767] vfree+0xf7/0x6d0
[ 57.579072][ T1767] kcov_close+0x34/0x60
[ 57.579083][ T1767] __fput+0x400/0xb60
[ 57.579098][ T1767] task_work_run+0x150/0x240
[ 57.579113][ T1767] do_exit+0x8da/0x2a50
[ 57.579125][ T1767] do_group_exit+0xd5/0x2a0
[ 57.579137][ T1767] get_signal+0x1ec7/0x21e0
[ 57.579147][ T1767] arch_do_signal_or_restart+0x91/0x7e0
[ 57.579162][ T1767] exit_to_user_mode_loop+0x139/0x700
[ 57.579175][ T1767] do_syscall_64+0x661/0x790
[ 57.579188][ T1767] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.579197][ T1767]
[ 57.579200][ T1767] Memory state around the buggy address:
[ 57.579204][ T1767] ffff88805347df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 57.579211][ T1767] ffff88805347df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 57.579218][ T1767] >ffff88805347e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 57.579223][ T1767] ^
[ 57.579228][ T1767] ffff88805347e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 57.579234][ T1767] ffff88805347e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 57.579239][ T1767] ==================================================================
[ 57.579268][ T1767] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 57.857751][ T1767] CPU: 3 UID: 0 PID: 1767 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full)
[ 57.860723][ T1767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 57.863820][ T1767] Workqueue: usb_hub_wq hub_event
[ 57.865363][ T1767] Call Trace:
[ 57.866414][ T1767]
[ 57.867349][ T1767] dump_stack_lvl+0x100/0x190
[ 57.868896][ T1767] vpanic+0x553/0x970
[ 57.870150][ T1767] ? __pfx_vpanic+0x10/0x10
[ 57.871636][ T1767] ? rcu_is_watching+0x13/0xc0
[ 57.873149][ T1767] ? trace_irq_enable.constprop.0+0x122/0x160
[ 57.875041][ T1767] ? usb_unbind_interface+0x935/0x9e0
[ 57.876732][ T1767] panic+0xd1/0xe0
[ 57.877913][ T1767] ? __pfx_panic+0x10/0x10
[ 57.879391][ T1767] ? trace_irq_enable.constprop.0+0x2f/0x160
[ 57.881265][ T1767] check_panic_on_warn.cold+0x19/0x34
[ 57.882941][ T1767] end_report.part.0+0x3a/0x90
[ 57.884448][ T1767] kasan_report.cold+0xe/0x18
[ 57.885924][ T1767] ? usb_unbind_interface+0x935/0x9e0
[ 57.887601][ T1767] usb_unbind_interface+0x935/0x9e0
[ 57.889579][ T1767] ? __pfx_usb_unbind_interface+0x10/0x10
[ 57.891394][ T1767] device_remove+0x12a/0x180
[ 57.892862][ T1767] device_release_driver_internal+0x44e/0x620
[ 57.894750][ T1767] bus_remove_device+0x2bc/0x560
[ 57.896317][ T1767] ? __pfx_bus_remove_device+0x10/0x10
[ 57.898019][ T1767] ? __pfx_device_remove_attrs+0x10/0x10
[ 57.899795][ T1767] device_del+0x376/0x9b0
[ 57.901195][ T1767] ? __pfx_device_del+0x10/0x10
[ 57.902738][ T1767] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 57.904536][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.906017][ T1767] usb_disable_device+0x367/0x810
[ 57.907589][ T1767] ? mark_held_locks+0x40/0x70
[ 57.909154][ T1767] usb_disconnect+0x2e2/0x9a0
[ 57.910679][ T1767] hub_event+0x1bb1/0x4420
[ 57.912083][ T1767] ? __lock_acquire+0x5c0/0x1f40
[ 57.913636][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.915134][ T1767] ? lock_sequence+0xb0/0x110
[ 57.916629][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.918135][ T1767] ? process_one_work+0xa2c/0x1b10
[ 57.919742][ T1767] ? process_one_work+0x906/0x1b10
[ 57.921369][ T1767] ? process_one_work+0x906/0x1b10
[ 57.922980][ T1767] process_one_work+0xac7/0x1b10
[ 57.924545][ T1767] ? __pfx_process_one_work+0x10/0x10
[ 57.926220][ T1767] ? lock_acquire+0x1d1/0x380
[ 57.927695][ T1767] ? __pfx_hub_event+0x10/0x10
[ 57.929229][ T1767] worker_thread+0x5ef/0xe50
[ 57.930692][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.932287][ T1767] ? kthread+0x13a/0x450
[ 57.933637][ T1767] ? __pfx_worker_thread+0x10/0x10
[ 57.935238][ T1767] kthread+0x373/0x450
[ 57.936547][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.938006][ T1767] ret_from_fork+0x730/0xd60
[ 57.939508][ T1767] ? __pfx_ret_from_fork+0x10/0x10
[ 57.941141][ T1767] ? __switch_to+0x800/0x10f0
[ 57.942625][ T1767] ? __pfx_kthread+0x10/0x10
[ 57.944081][ T1767] ret_from_fork_asm+0x1a/0x30
[ 57.945590][ T1767]
[ 57.947234][ T1767] Kernel Offset: disabled
[ 57.948803][ T1767] Rebooting in 86400 seconds..