no interfaces have a carrier
[ 45.332568][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0
[ 45.354119][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts.
2026/08/05 17:55:08 parsed 1 programs
2026/08/05 17:55:08 serving rpc on tcp://37771
syzkaller login: [ 72.508608][ T4284] cgroup: Unknown subsys name 'net'
[ 72.620458][ T4284] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.870874][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 75.256908][ T4299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.265256][ T4299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.274397][ T4299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.283206][ T4299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.291422][ T4299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.299787][ T4299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.066628][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.074684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.117315][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.192902][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.218644][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.288715][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.638456][ T4348] chnl_net:caif_netlink_parms(): no params data found
[ 77.739997][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.756596][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.764463][ T4348] device bridge_slave_0 entered promiscuous mode
[ 77.804536][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.811849][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.821245][ T4348] device bridge_slave_1 entered promiscuous mode
[ 77.864273][ T4348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.875431][ T4348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.897825][ T4348] team0: Port device team_slave_0 added
[ 77.914981][ T4348] team0: Port device team_slave_1 added
[ 77.931979][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.939204][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.965520][ T4348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.981128][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.988245][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.014586][ T4348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.049163][ T4348] device hsr_slave_0 entered promiscuous mode
[ 78.057003][ T4348] device hsr_slave_1 entered promiscuous mode
[ 78.164472][ T4348] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 78.176159][ T4348] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 78.186923][ T4348] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 78.207057][ T4348] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 78.230566][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.237802][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.246143][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.253257][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.303830][ T4348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.347326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.357908][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.366832][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.375039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 78.389145][ T4348] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.407572][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 78.416563][ T32] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.423633][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.464500][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 78.473904][ T32] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.481081][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.492483][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 78.503279][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 78.515510][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 78.525921][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 78.543121][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 78.570392][ T4348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 78.581081][ T4348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 78.593142][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 78.602781][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 78.611919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 78.621813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 78.631561][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 78.640152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 78.650452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 78.848627][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 78.856362][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 78.870287][ T4348] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.898329][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 78.908007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 78.942997][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 78.951312][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 78.960139][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 78.968022][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 78.978937][ T4348] device veth0_vlan entered promiscuous mode
[ 78.990112][ T4348] device veth1_vlan entered promiscuous mode
[ 79.009815][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.018353][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.027086][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.035815][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.052687][ T4348] device veth0_macvtap entered promiscuous mode
[ 79.063367][ T4348] device veth1_macvtap entered promiscuous mode
[ 79.078458][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.086249][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.096229][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.104926][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.113641][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.124934][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.142097][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.151890][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 79.164046][ T4348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.173162][ T4348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.182303][ T4348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.191187][ T4348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/05 17:55:16 executed programs: 0
[ 79.369007][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.378382][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.386584][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.394991][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.402702][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.410252][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.440817][ T4299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 79.450853][ T4299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 79.461078][ T4299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 79.473077][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 79.507696][ T4390] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 79.507858][ T4394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 79.514990][ T4390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 79.531920][ T4394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 79.535483][ T4390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 79.547161][ T4394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 79.555897][ T4394] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 79.563681][ T4394] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 79.564490][ T4390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 79.581371][ T4395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 79.590933][ T4395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 79.598890][ T4395] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 79.610533][ T4395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 79.618761][ T4299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 79.634310][ T4394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 79.642507][ T4395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 79.651161][ T4394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 79.667022][ T4301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 79.675578][ T4301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 79.687388][ T4301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 79.960020][ T4386] chnl_net:caif_netlink_parms(): no params data found
[ 80.124456][ T4389] chnl_net:caif_netlink_parms(): no params data found
[ 80.142737][ T4382] chnl_net:caif_netlink_parms(): no params data found
[ 80.232870][ T4388] chnl_net:caif_netlink_parms(): no params data found
[ 80.285826][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.292929][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.301618][ T4386] device bridge_slave_0 entered promiscuous mode
[ 80.310861][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.319771][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.327583][ T4386] device bridge_slave_1 entered promiscuous mode
[ 80.371454][ T4393] chnl_net:caif_netlink_parms(): no params data found
[ 80.404716][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.414511][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.422752][ T4382] device bridge_slave_0 entered promiscuous mode
[ 80.436223][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.443388][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.454335][ T4382] device bridge_slave_1 entered promiscuous mode
[ 80.480074][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.489871][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.498198][ T4389] device bridge_slave_0 entered promiscuous mode
[ 80.507364][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.514511][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.522715][ T4389] device bridge_slave_1 entered promiscuous mode
[ 80.570658][ T4386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.582574][ T4386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.612230][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.628575][ T4389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.669690][ T4389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.682488][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.693696][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.701486][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.709376][ T4388] device bridge_slave_0 entered promiscuous mode
[ 80.719353][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.726519][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.734309][ T4388] device bridge_slave_1 entered promiscuous mode
[ 80.744104][ T4386] team0: Port device team_slave_0 added
[ 80.762579][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.791525][ T4386] team0: Port device team_slave_1 added
[ 80.836458][ T4382] team0: Port device team_slave_0 added
[ 80.845902][ T4388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.863700][ T4388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.878014][ T4389] team0: Port device team_slave_0 added
[ 80.895831][ T4382] team0: Port device team_slave_1 added
[ 80.902301][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.909935][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.918100][ T4393] device bridge_slave_0 entered promiscuous mode
[ 80.927566][ T4389] team0: Port device team_slave_1 added
[ 80.933437][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.940617][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.948657][ T4393] device bridge_slave_1 entered promiscuous mode
[ 80.962979][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.970128][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.996599][ T4386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.012870][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.019993][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.046181][ T4386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.106333][ T4388] team0: Port device team_slave_0 added
[ 81.112826][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.120223][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.148448][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.171710][ T4393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.183480][ T4393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.193948][ T4388] team0: Port device team_slave_1 added
[ 81.200543][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.207926][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.234115][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.251317][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.258537][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.285042][ T4389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.337750][ T4382] device hsr_slave_0 entered promiscuous mode
[ 81.344768][ T4382] device hsr_slave_1 entered promiscuous mode
[ 81.351850][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.359819][ T4382] Cannot create hsr debugfs directory
[ 81.365799][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.372750][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.399462][ T4389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.428708][ T4386] device hsr_slave_0 entered promiscuous mode
[ 81.435655][ T4386] device hsr_slave_1 entered promiscuous mode
[ 81.442185][ T4386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.450419][ T4386] Cannot create hsr debugfs directory
[ 81.456780][ T4301] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.467223][ T4393] team0: Port device team_slave_0 added
[ 81.475621][ T4393] team0: Port device team_slave_1 added
[ 81.485848][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.492821][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.519870][ T4388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.532028][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.539537][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.568662][ T4388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.609481][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.617263][ T4390] Bluetooth: hci1: command 0x0409 tx timeout
[ 81.623634][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.649888][ T4393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.695652][ T4301] Bluetooth: hci3: command 0x0409 tx timeout
[ 81.701934][ T4301] Bluetooth: hci2: command 0x0409 tx timeout
[ 81.719750][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.733398][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.760057][ T4393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.785281][ T4301] Bluetooth: hci4: command 0x0409 tx timeout
[ 81.829928][ T4389] device hsr_slave_0 entered promiscuous mode
[ 81.865678][ T4389] device hsr_slave_1 entered promiscuous mode
[ 81.885217][ T4389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.892895][ T4389] Cannot create hsr debugfs directory
[ 81.962751][ T4388] device hsr_slave_0 entered promiscuous mode
[ 81.972605][ T4388] device hsr_slave_1 entered promiscuous mode
[ 81.982990][ T4388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.993904][ T4388] Cannot create hsr debugfs directory
[ 82.046070][ T4393] device hsr_slave_0 entered promiscuous mode
[ 82.052941][ T4393] device hsr_slave_1 entered promiscuous mode
[ 82.060271][ T4393] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.068465][ T4393] Cannot create hsr debugfs directory
[ 82.383339][ T4382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.392795][ T4382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.402514][ T4382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.411497][ T4382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.463765][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.482610][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 82.490579][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 82.503839][ T4382] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.513607][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 82.523061][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 82.531584][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.538713][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.553231][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 82.561447][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 82.571311][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 82.580697][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.587847][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.595639][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 82.611082][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 82.621680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 82.631942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 82.641540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 82.656931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 82.666073][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 82.679234][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 82.688408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.701450][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 82.710327][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.721422][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.876343][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.883864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.903058][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.920098][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.930366][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.950806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.959687][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.969704][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.977992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.989829][ T4382] device veth0_vlan entered promiscuous mode
[ 83.001306][ T4382] device veth1_vlan entered promiscuous mode
[ 83.021345][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 83.029834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 83.038449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 83.047471][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 83.059367][ T4382] device veth0_macvtap entered promiscuous mode
[ 83.069771][ T4382] device veth1_macvtap entered promiscuous mode
[ 83.084034][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 83.095734][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 83.107090][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.114456][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 83.127053][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 83.135019][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 83.144231][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 83.157237][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 83.168584][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 83.181180][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.190084][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 83.200469][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 83.212229][ T4382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.222158][ T4382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.230982][ T4382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.239725][ T4382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.292124][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.322851][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.334647][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.344442][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.364840][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.373163][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.382208][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.545303][ T4301] Bluetooth: hci0: command 0x041b tx timeout
[ 83.695474][ T4301] Bluetooth: hci1: command 0x041b tx timeout
[ 83.715575][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 83.775494][ T4301] Bluetooth: hci3: command 0x041b tx timeout
[ 83.781568][ T4301] Bluetooth: hci2: command 0x041b tx timeout
[ 83.867066][ T4390] Bluetooth: hci4: command 0x041b tx timeout
[ 83.907902][ T41] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 83.918259][ T41] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 83.928500][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 83.938487][ T41] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 83.954899][ T41] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 83.964204][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 83.972256][ T41] usb 1-1: Product: syz
[ 83.976507][ T41] usb 1-1: Manufacturer: syz
[ 83.981104][ T41] usb 1-1: SerialNumber: syz
[ 83.992055][ T4427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 84.004032][ T4427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 84.155050][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.221791][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.222140][ T41] redrat3 1-1:1.0: Problem fetching firmware ID
[ 84.243878][ T41] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 84.339581][ T41] rc_core: IR keymap rc-hauppauge not found
[ 84.352730][ T41] Registered IR keymap rc-empty
[ 84.369632][ T41] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0
[ 84.383113][ T41] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input5
[ 84.453950][ T41] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 84.468958][ T41] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 84.477693][ T41] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 84.534817][ T41] redrat3: probe of 1-1:1.0 failed with error -5
[ 84.556120][ T3639] ==================================================================
[ 84.564232][ T3639] BUG: KASAN: use-after-free in string+0x204/0x290
[ 84.570769][ T3639] Read of size 1 at addr ffff8880765a9728 by task udevd/3639
[ 84.578154][ T3639]
[ 84.580502][ T3639] CPU: 1 PID: 3639 Comm: udevd Not tainted syzkaller #0
[ 84.587450][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.597535][ T3639] Call Trace:
[ 84.600821][ T3639]
[ 84.603794][ T3639] dump_stack_lvl+0x188/0x24e
[ 84.608497][ T3639] ? __lock_acquire+0x7c40/0x7c40
[ 84.613540][ T3639] ? show_regs_print_info+0x12/0x12
[ 84.618755][ T3639] ? load_image+0x410/0x410
[ 84.623257][ T3639] ? __virt_addr_valid+0x467/0x540
[ 84.628366][ T3639] ? string+0x204/0x290
[ 84.632517][ T3639] print_report+0xa8/0x210
[ 84.636929][ T3639] kasan_report+0x10b/0x140
[ 84.641578][ T3639] ? string+0x204/0x290
[ 84.645756][ T3639] string+0x204/0x290
[ 84.649732][ T3639] vsnprintf+0x10db/0x1c20
[ 84.654139][ T3639] add_uevent_var+0x1cd/0x460
[ 84.658812][ T3639] ? kobject_uevent_env+0x890/0x890
[ 84.664009][ T3639] ? trace_contention_end+0x5f/0x170
[ 84.669298][ T3639] ? __mutex_lock+0x1ab/0xae0
[ 84.674019][ T3639] rc_dev_uevent+0x15b/0x190
[ 84.678677][ T3639] dev_uevent+0x4d6/0x740
[ 84.683017][ T3639] ? dev_uevent_name+0xa0/0xa0
[ 84.687788][ T3639] uevent_show+0x1a8/0x320
[ 84.692231][ T3639] dev_attr_show+0x50/0xb0
[ 84.696656][ T3639] sysfs_kf_seq_show+0x349/0x4b0
[ 84.701771][ T3639] ? device_get_ownership+0xa0/0xa0
[ 84.707008][ T3639] seq_read_iter+0x460/0xc50
[ 84.711596][ T3639] vfs_read+0x471/0x960
[ 84.715753][ T3639] ? kernel_read+0x1e0/0x1e0
[ 84.720338][ T3639] ? __x64_sys_newfstat+0x19a/0x220
[ 84.725632][ T3639] ? do_sys_openat2+0x20a/0x4f0
[ 84.730478][ T3639] ? __fdget_pos+0x2b5/0x360
[ 84.735065][ T3639] ksys_read+0x14d/0x260
[ 84.739306][ T3639] ? vfs_write+0x9a0/0x9a0
[ 84.743747][ T3639] ? lockdep_hardirqs_on+0x94/0x140
[ 84.748939][ T3639] do_syscall_64+0x4c/0xa0
[ 84.753355][ T3639] ? clear_bhb_loop+0x60/0xb0
[ 84.758025][ T3639] ? clear_bhb_loop+0x60/0xb0
[ 84.762707][ T3639] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.768616][ T3639] RIP: 0033:0x7fbdf75c9407
[ 84.773027][ T3639] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 84.792631][ T3639] RSP: 002b:00007ffc5a106800 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 84.801038][ T3639] RAX: ffffffffffffffda RBX: 00007fbdf753d880 RCX: 00007fbdf75c9407
[ 84.809004][ T3639] RDX: 0000000000001000 RSI: 00005650eca436b0 RDI: 000000000000000c
[ 84.816989][ T3639] RBP: 00007fbdf7711ff0 R08: 0000000000000000 R09: 0000000000000000
[ 84.824950][ T3639] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 84.832911][ T3639] R13: 00007fbdf7711ea0 R14: 0000000000000000 R15: 00005650ec8875d0
[ 84.840880][ T3639]
[ 84.843887][ T3639]
[ 84.846233][ T3639] Allocated by task 41:
[ 84.850377][ T3639] kasan_set_track+0x4b/0x70
[ 84.854963][ T3639] __kasan_kmalloc+0x8e/0xa0
[ 84.859549][ T3639] redrat3_dev_probe+0x3ef/0x23c0
[ 84.864568][ T3639] usb_probe_interface+0x5be/0xae0
[ 84.869686][ T3639] really_probe+0x24a/0xb40
[ 84.874180][ T3639] __driver_probe_device+0x1f5/0x390
[ 84.879458][ T3639] driver_probe_device+0x4f/0x420
[ 84.884474][ T3639] __device_attach_driver+0x2c6/0x510
[ 84.889837][ T3639] bus_for_each_drv+0x184/0x210
[ 84.894677][ T3639] __device_attach+0x2a7/0x480
[ 84.899435][ T3639] bus_probe_device+0xba/0x1d0
[ 84.904188][ T3639] device_add+0xbcf/0x1050
[ 84.908598][ T3639] usb_set_configuration+0x19d5/0x2030
[ 84.914047][ T3639] usb_generic_driver_probe+0x89/0x150
[ 84.919503][ T3639] usb_probe_device+0x126/0x250
[ 84.924468][ T3639] really_probe+0x24a/0xb40
[ 84.928961][ T3639] __driver_probe_device+0x1f5/0x390
[ 84.934235][ T3639] driver_probe_device+0x4f/0x420
[ 84.939257][ T3639] __device_attach_driver+0x2c6/0x510
[ 84.944620][ T3639] bus_for_each_drv+0x184/0x210
[ 84.949466][ T3639] __device_attach+0x2a7/0x480
[ 84.954238][ T3639] bus_probe_device+0xba/0x1d0
[ 84.958991][ T3639] device_add+0xbcf/0x1050
[ 84.963406][ T3639] usb_new_device+0xa01/0x15e0
[ 84.968268][ T3639] hub_event+0x2b2f/0x5200
[ 84.972677][ T3639] process_one_work+0x8ab/0x1160
[ 84.977609][ T3639] worker_thread+0xaf5/0x12a0
[ 84.982276][ T3639] kthread+0x29d/0x330
[ 84.986381][ T3639] ret_from_fork+0x1f/0x30
[ 84.990812][ T3639]
[ 84.993127][ T3639] Freed by task 41:
[ 84.996920][ T3639] kasan_set_track+0x4b/0x70
[ 85.001508][ T3639] kasan_save_free_info+0x27/0x40
[ 85.006557][ T3639] ____kasan_slab_free+0x126/0x1f0
[ 85.011660][ T3639] slab_free_freelist_hook+0x133/0x1b0
[ 85.017113][ T3639] __kmem_cache_free+0xb6/0x200
[ 85.021961][ T3639] redrat3_dev_probe+0x1b69/0x23c0
[ 85.027066][ T3639] usb_probe_interface+0x5be/0xae0
[ 85.032168][ T3639] really_probe+0x24a/0xb40
[ 85.036660][ T3639] __driver_probe_device+0x1f5/0x390
[ 85.041936][ T3639] driver_probe_device+0x4f/0x420
[ 85.046949][ T3639] __device_attach_driver+0x2c6/0x510
[ 85.052312][ T3639] bus_for_each_drv+0x184/0x210
[ 85.057152][ T3639] __device_attach+0x2a7/0x480
[ 85.061906][ T3639] bus_probe_device+0xba/0x1d0
[ 85.066664][ T3639] device_add+0xbcf/0x1050
[ 85.071107][ T3639] usb_set_configuration+0x19d5/0x2030
[ 85.076561][ T3639] usb_generic_driver_probe+0x89/0x150
[ 85.082668][ T3639] usb_probe_device+0x126/0x250
[ 85.087520][ T3639] really_probe+0x24a/0xb40
[ 85.092060][ T3639] __driver_probe_device+0x1f5/0x390
[ 85.097351][ T3639] driver_probe_device+0x4f/0x420
[ 85.102373][ T3639] __device_attach_driver+0x2c6/0x510
[ 85.107737][ T3639] bus_for_each_drv+0x184/0x210
[ 85.112574][ T3639] __device_attach+0x2a7/0x480
[ 85.117331][ T3639] bus_probe_device+0xba/0x1d0
[ 85.122092][ T3639] device_add+0xbcf/0x1050
[ 85.126504][ T3639] usb_new_device+0xa01/0x15e0
[ 85.131259][ T3639] hub_event+0x2b2f/0x5200
[ 85.135667][ T3639] process_one_work+0x8ab/0x1160
[ 85.140598][ T3639] worker_thread+0xaf5/0x12a0
[ 85.145272][ T3639] kthread+0x29d/0x330
[ 85.149333][ T3639] ret_from_fork+0x1f/0x30
[ 85.153743][ T3639]
[ 85.156119][ T3639] The buggy address belongs to the object at ffff8880765a9000
[ 85.156119][ T3639] which belongs to the cache kmalloc-2k of size 2048
[ 85.170164][ T3639] The buggy address is located 1832 bytes inside of
[ 85.170164][ T3639] 2048-byte region [ffff8880765a9000, ffff8880765a9800)
[ 85.183605][ T3639]
[ 85.185924][ T3639] The buggy address belongs to the physical page:
[ 85.192338][ T3639] page:ffffea0001d96a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x765a8
[ 85.202482][ T3639] head:ffffea0001d96a00 order:3 compound_mapcount:0 compound_pincount:0
[ 85.210795][ T3639] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 85.218784][ T3639] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442000
[ 85.227357][ T3639] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 85.235922][ T3639] page dumped because: kasan: bad access detected
[ 85.242337][ T3639] page_owner tracks the page as allocated
[ 85.248037][ T3639] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 41, tgid 41 (kworker/1:1), ts 83989989245, free_ts 77325807102
[ 85.268822][ T3639] post_alloc_hook+0x173/0x1a0
[ 85.273613][ T3639] get_page_from_freelist+0x206b/0x2180
[ 85.279159][ T3639] __alloc_pages+0x1ec/0x4f0
[ 85.283762][ T3639] alloc_slab_page+0x5d/0x180
[ 85.288443][ T3639] new_slab+0x87/0x2d0
[ 85.292529][ T3639] ___slab_alloc+0xbc5/0x1240
[ 85.297196][ T3639] __kmem_cache_alloc_node+0x126/0x270
[ 85.302646][ T3639] kmalloc_trace+0x26/0xe0
[ 85.307078][ T3639] usb_set_configuration+0x3b6/0x2030
[ 85.312476][ T3639] usb_generic_driver_probe+0x89/0x150
[ 85.317945][ T3639] usb_probe_device+0x126/0x250
[ 85.322786][ T3639] really_probe+0x24a/0xb40
[ 85.327277][ T3639] __driver_probe_device+0x1f5/0x390
[ 85.332549][ T3639] driver_probe_device+0x4f/0x420
[ 85.337570][ T3639] __device_attach_driver+0x2c6/0x510
[ 85.342935][ T3639] bus_for_each_drv+0x184/0x210
[ 85.347773][ T3639] page last free stack trace:
[ 85.352432][ T3639] free_unref_page_prepare+0x8e5/0x9e0
[ 85.357886][ T3639] free_unref_page+0x2e/0x3f0
[ 85.362559][ T3639] __unfreeze_partials+0x188/0x1e0
[ 85.367670][ T3639] put_cpu_partial+0x17c/0x250
[ 85.372426][ T3639] qlist_free_all+0x76/0xe0
[ 85.376934][ T3639] kasan_quarantine_reduce+0x144/0x160
[ 85.382408][ T3639] __kasan_slab_alloc+0x1e/0x80
[ 85.387260][ T3639] slab_post_alloc_hook+0x4b/0x490
[ 85.392361][ T3639] kmem_cache_alloc+0x18b/0x2f0
[ 85.397205][ T3639] getname_flags+0xb7/0x500
[ 85.401695][ T3639] __x64_sys_newfstatat+0x16f/0x240
[ 85.406885][ T3639] do_syscall_64+0x4c/0xa0
[ 85.411294][ T3639] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 85.417197][ T3639]
[ 85.419508][ T3639] Memory state around the buggy address:
[ 85.425130][ T3639] ffff8880765a9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.433186][ T3639] ffff8880765a9680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.441240][ T3639] >ffff8880765a9700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.449294][ T3639] ^
[ 85.454664][ T3639] ffff8880765a9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.462720][ T3639] ffff8880765a9800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.470772][ T3639] ==================================================================
[ 85.513227][ T3639] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.515825][ T41] usb 1-1: USB disconnect, device number 2
[ 85.526269][ T3639] CPU: 0 PID: 3639 Comm: udevd Not tainted syzkaller #0
[ 85.533217][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 85.543283][ T3639] Call Trace:
[ 85.546565][ T3639]
[ 85.549504][ T3639] dump_stack_lvl+0x188/0x24e
[ 85.554200][ T3639] ? memcpy+0x3c/0x60
[ 85.558199][ T3639] ? show_regs_print_info+0x12/0x12
[ 85.563420][ T3639] ? load_image+0x410/0x410
[ 85.567942][ T3639] panic+0x2d3/0x710
[ 85.571853][ T3639] ? bpf_jit_dump+0xd0/0xd0
[ 85.576369][ T3639] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 85.582367][ T3639] ? _raw_spin_unlock+0x40/0x40
[ 85.587231][ T3639] ? print_memory_metadata+0x314/0x400
[ 85.592708][ T3639] check_panic_on_warn+0x80/0xa0
[ 85.597670][ T3639] ? string+0x204/0x290
[ 85.601838][ T3639] end_report+0x66/0x110
[ 85.606100][ T3639] kasan_report+0x118/0x140
2026/08/05 17:55:22 executed programs: 11
[ 85.610617][ T3639] ? string+0x204/0x290
[ 85.614789][ T3639] string+0x204/0x290
[ 85.618790][ T3639] vsnprintf+0x10db/0x1c20
[ 85.623226][ T3639] add_uevent_var+0x1cd/0x460
[ 85.627922][ T3639] ? kobject_uevent_env+0x890/0x890
[ 85.633136][ T3639] ? trace_contention_end+0x5f/0x170
[ 85.638440][ T3639] ? __mutex_lock+0x1ab/0xae0
[ 85.643140][ T3639] rc_dev_uevent+0x15b/0x190
[ 85.647792][ T3639] dev_uevent+0x4d6/0x740
[ 85.652146][ T3639] ? dev_uevent_name+0xa0/0xa0
[ 85.656937][ T3639] uevent_show+0x1a8/0x320
[ 85.661377][ T3639] dev_attr_show+0x50/0xb0
[ 85.665815][ T3639] sysfs_kf_seq_show+0x349/0x4b0
[ 85.670773][ T3639] ? device_get_ownership+0xa0/0xa0
[ 85.676008][ T3639] seq_read_iter+0x460/0xc50
[ 85.680621][ T3639] vfs_read+0x471/0x960
[ 85.684799][ T3639] ? kernel_read+0x1e0/0x1e0
[ 85.689415][ T3639] ? __x64_sys_newfstat+0x19a/0x220
[ 85.694646][ T3639] ? do_sys_openat2+0x20a/0x4f0
[ 85.699517][ T3639] ? __fdget_pos+0x2b5/0x360
[ 85.704134][ T3639] ksys_read+0x14d/0x260
[ 85.708398][ T3639] ? vfs_write+0x9a0/0x9a0
[ 85.712833][ T3639] ? lockdep_hardirqs_on+0x94/0x140
[ 85.718048][ T3639] do_syscall_64+0x4c/0xa0
[ 85.722486][ T3639] ? clear_bhb_loop+0x60/0xb0
[ 85.727185][ T3639] ? clear_bhb_loop+0x60/0xb0
[ 85.731888][ T3639] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 85.737804][ T3639] RIP: 0033:0x7fbdf75c9407
[ 85.742230][ T3639] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 85.761837][ T3639] RSP: 002b:00007ffc5a106800 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 85.770271][ T3639] RAX: ffffffffffffffda RBX: 00007fbdf753d880 RCX: 00007fbdf75c9407
[ 85.778258][ T3639] RDX: 0000000000001000 RSI: 00005650eca436b0 RDI: 000000000000000c
[ 85.786254][ T3639] RBP: 00007fbdf7711ff0 R08: 0000000000000000 R09: 0000000000000000
[ 85.794242][ T3639] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 85.802236][ T3639] R13: 00007fbdf7711ea0 R14: 0000000000000000 R15: 00005650ec8875d0
[ 85.810231][ T3639]
[ 85.813516][ T3639] Kernel Offset: disabled
[ 85.817831][ T3639] Rebooting in 86400 seconds..