Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts.
2026/09/06 18:42:23 parsed 1 programs
2026/09/06 18:42:23 serving rpc on tcp://38657
[ 72.765950][ T5627] cgroup: Unknown subsys name 'net'
[ 72.874756][ T5627] cgroup: Unknown subsys name 'cpuset'
[ 72.884040][ T5627] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 74.261201][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 77.144365][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.150109][ T5635] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 77.150543][ T5635] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 77.150919][ T5635] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 77.152187][ T5635] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 78.597567][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.598289][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.598438][ T5661] bridge_slave_0: entered allmulticast mode
[ 78.600293][ T5661] bridge_slave_0: entered promiscuous mode
[ 78.606947][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.607145][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.607269][ T5661] bridge_slave_1: entered allmulticast mode
[ 78.608993][ T5661] bridge_slave_1: entered promiscuous mode
[ 78.641244][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.644788][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.675300][ T5661] team0: Port device team_slave_0 added
[ 78.678221][ T5661] team0: Port device team_slave_1 added
[ 78.699933][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.699961][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.701034][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.704115][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.704128][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.704150][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.753683][ T5661] hsr_slave_0: entered promiscuous mode
[ 78.754880][ T5661] hsr_slave_1: entered promiscuous mode
[ 78.903562][ T5661] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.915178][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 78.916360][ T5661] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.927458][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 78.932895][ T5661] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.940311][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 78.943696][ T5661] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.955397][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 78.989589][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.990121][ T5661] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.990606][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.990718][ T5661] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.023529][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.030887][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.073325][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.089817][ T5661] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.100186][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.100452][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.119836][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.119941][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.402287][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.447593][ T5661] veth0_vlan: entered promiscuous mode
[ 79.455814][ T5661] veth1_vlan: entered promiscuous mode
[ 79.484282][ T5661] veth0_macvtap: entered promiscuous mode
[ 79.489901][ T5661] veth1_macvtap: entered promiscuous mode
[ 79.509486][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.514725][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.582961][ T3356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.583030][ T3356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.583058][ T3356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.583081][ T3356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.714393][ T3356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.799610][ T3356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.893837][ T3356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.969243][ T3356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.079031][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.082753][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.083270][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.084074][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.084617][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.668469][ T3389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.668790][ T3389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.731561][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.731614][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/06 18:42:35 executed programs: 0
[ 82.108536][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.110918][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.113856][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.115449][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.116267][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.498257][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.498422][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.498832][ T5753] bridge_slave_0: entered allmulticast mode
[ 82.500480][ T5753] bridge_slave_0: entered promiscuous mode
[ 82.504871][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.505019][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.505136][ T5753] bridge_slave_1: entered allmulticast mode
[ 82.506845][ T5753] bridge_slave_1: entered promiscuous mode
[ 82.555599][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.573105][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.625612][ T5753] team0: Port device team_slave_0 added
[ 82.634988][ T5753] team0: Port device team_slave_1 added
[ 82.680898][ T3356] bridge_slave_1: left allmulticast mode
[ 82.680946][ T3356] bridge_slave_1: left promiscuous mode
[ 82.682441][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.695117][ T3356] bridge_slave_0: left allmulticast mode
[ 82.695141][ T3356] bridge_slave_0: left promiscuous mode
[ 82.695326][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.822796][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.837704][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.842824][ T3356] bond0 (unregistering): Released all slaves
[ 82.855555][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.855589][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.855611][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.857516][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.857527][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.857548][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.986810][ T3356] hsr_slave_0: left promiscuous mode
[ 82.992382][ T3356] hsr_slave_1: left promiscuous mode
[ 82.993323][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.993351][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.000195][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.000215][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.034160][ T3356] veth1_macvtap: left promiscuous mode
[ 83.034249][ T3356] veth0_macvtap: left promiscuous mode
[ 83.034365][ T3356] veth1_vlan: left promiscuous mode
[ 83.034444][ T3356] veth0_vlan: left promiscuous mode
[ 83.357331][ T3356] team0 (unregistering): Port device team_slave_1 removed
[ 83.369072][ T3356] team0 (unregistering): Port device team_slave_0 removed
[ 83.497647][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[ 83.529470][ T5753] hsr_slave_0: entered promiscuous mode
[ 83.530522][ T5753] hsr_slave_1: entered promiscuous mode
[ 84.162216][ T52] Bluetooth: hci0: command tx timeout
[ 84.262431][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[ 84.769025][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.790134][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 84.802952][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.818584][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 84.826853][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.837850][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 84.897248][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.923143][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 85.198127][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.228701][ T5753] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.237289][ T429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.237446][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.254034][ T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.254155][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.635146][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.668666][ T5753] veth0_vlan: entered promiscuous mode
[ 85.678194][ T5753] veth1_vlan: entered promiscuous mode
[ 85.704405][ T5753] veth0_macvtap: entered promiscuous mode
[ 85.709948][ T5753] veth1_macvtap: entered promiscuous mode
[ 85.723627][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.727651][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.752539][ T3356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.752603][ T3356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.752893][ T3356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.828057][ T429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.836786][ T429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.864172][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.864207][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.873925][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.161752][ T189] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 86.231519][ T52] Bluetooth: hci0: command tx timeout
[ 86.314772][ T189] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 86.320475][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 86.320502][ T189] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 86.325455][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 86.325482][ T189] usb 1-1: Product: syz
[ 86.325494][ T189] usb 1-1: Manufacturer: syz
[ 86.325515][ T189] usb 1-1: SerialNumber: syz
[ 86.875599][ T10] cfg80211: failed to load regulatory.db
[ 87.342230][ C0] ==================================================================
[ 87.342248][ C0] BUG: KASAN: slab-out-of-bounds in gb_operation_message_alloc+0x242/0x280
[ 87.342293][ C0] Write of size 2 at addr ffff88802bb5a022 by task syz.0.17/5842
[ 87.342309][ C0]
[ 87.342326][ C0] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 87.342348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 87.342366][ C0] Call Trace:
[ 87.342377][ C0]
[ 87.342384][ C0] dump_stack_lvl+0xe8/0x150
[ 87.342412][ C0] print_address_description+0x55/0x1e0
[ 87.342438][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 87.342465][ C0] print_report+0x58/0x70
[ 87.342487][ C0] kasan_report+0x117/0x150
[ 87.342512][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 87.342544][ C0] gb_operation_message_alloc+0x242/0x280
[ 87.342576][ C0] gb_operation_create_common+0xa9/0x650
[ 87.342607][ C0] gb_connection_recv+0x284/0x1280
[ 87.342641][ C0] ? __pfx_gb_connection_recv+0x10/0x10
[ 87.342668][ C0] ? do_raw_spin_unlock+0xf5/0x200
[ 87.342698][ C0] greybus_data_rcvd+0x22c/0x550
[ 87.342720][ C0] cport_in_callback+0x1bd/0x3b0
[ 87.342742][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 87.342769][ C0] dummy_timer+0xa91/0x4cf0
[ 87.342811][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 87.342831][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.342853][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 87.342875][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 87.342920][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 87.342949][ C0] handle_softirqs+0x226/0x860
[ 87.342974][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 87.343002][ C0] __irq_exit_rcu+0xcb/0x220
[ 87.343025][ C0] irq_exit_rcu+0x9/0x30
[ 87.343048][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 87.343077][ C0]
[ 87.343085][ C0]
[ 87.343093][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 87.343114][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 87.343144][ C0] Code: f7 e8 5d b5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 f2 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ce ad f5 65 48 8b 05 9c 71 ad 07 48 85 c0 74 18 5b 41 5e c3
[ 87.343161][ C0] RSP: 0018:ffffc900033df7a0 EFLAGS: 00000206
[ 87.343182][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 87.343193][ C0] RDX: 0000000000000000 RSI: ffffffff8e474d42 RDI: 0000000000000001
[ 87.343202][ C0] RBP: 0000000000000008 R08: ffffffff907a187f R09: 1ffffffff20f430f
[ 87.343212][ C0] R10: dffffc0000000000 R11: fffffbfff20f4310 R12: ffff888074b43020
[ 87.343222][ C0] R13: 1ffff1100502a018 R14: ffff888028150000 R15: dffffc0000000000
[ 87.343238][ C0] dummy_queue+0x477/0x900
[ 87.343258][ C0] usb_ep_queue+0xf1/0x3c0
[ 87.343275][ C0] raw_process_ep_io+0x5e4/0xd80
[ 87.343294][ C0] ? __pfx_raw_process_ep_io+0x10/0x10
[ 87.343314][ C0] ? _copy_from_user+0x94/0xb0
[ 87.343330][ C0] raw_ioctl+0x251c/0x41c0
[ 87.343345][ C0] ? tomoyo_path_number_perm+0x219/0x5f0
[ 87.343368][ C0] ? tomoyo_path_number_perm+0x219/0x5f0
[ 87.343390][ C0] ? do_vfs_ioctl+0x116f/0x1530
[ 87.343408][ C0] ? __pfx_raw_ioctl+0x10/0x10
[ 87.343426][ C0] ? hook_file_ioctl_compat+0x1f2/0x600
[ 87.343448][ C0] ? __fget_files+0x2a/0x420
[ 87.343468][ C0] ? __fget_files+0x3a2/0x420
[ 87.343486][ C0] ? __fget_files+0x2a/0x420
[ 87.343505][ C0] ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 87.343527][ C0] __ia32_compat_sys_ioctl+0x5ea/0x950
[ 87.343543][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 87.343560][ C0] ? __se_sys_futex_time32+0x3ab/0x440
[ 87.343587][ C0] ? __pfx___se_sys_futex_time32+0x10/0x10
[ 87.343612][ C0] __do_fast_syscall_32+0x27a/0x6a0
[ 87.343629][ C0] ? do_fast_syscall_32+0x33/0x70
[ 87.343643][ C0] ? asm_int80_emulation+0x1a/0x20
[ 87.343659][ C0] ? do_int80_emulation+0x299/0x500
[ 87.343678][ C0] ? trace_irq_disable+0x3b/0x140
[ 87.343695][ C0] do_fast_syscall_32+0x33/0x70
[ 87.343711][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 87.343733][ C0] RIP: 0023:0xf70af0ec
[ 87.343753][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 87.343764][ C0] RSP: 002b:00000000f68a44b4 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 87.343778][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507
[ 87.343788][ C0] RDX: 00000000f68a44f8 RSI: 00000000f7477ff4 RDI: 00000000f68a4504
[ 87.343797][ C0] RBP: 00000000f68a5518 R08: 0000000000000000 R09: 0000000000000000
[ 87.343806][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 87.343816][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 87.343832][ C0]
[ 87.343838][ C0]
[ 87.343843][ C0] Allocated by task 5842:
[ 87.343850][ C0] kasan_save_track+0x3e/0x80
[ 87.343864][ C0] __kasan_kmalloc+0x93/0xb0
[ 87.343880][ C0] __kmalloc_noprof+0x36b/0x720
[ 87.343916][ C0] gb_operation_message_alloc+0x8c/0x280
[ 87.343939][ C0] gb_operation_create_common+0xa9/0x650
[ 87.343958][ C0] gb_connection_recv+0x284/0x1280
[ 87.343982][ C0] greybus_data_rcvd+0x22c/0x550
[ 87.343995][ C0] cport_in_callback+0x1bd/0x3b0
[ 87.344008][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 87.344031][ C0] dummy_timer+0xa91/0x4cf0
[ 87.344053][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 87.344077][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 87.344101][ C0] handle_softirqs+0x226/0x860
[ 87.344123][ C0] __irq_exit_rcu+0xcb/0x220
[ 87.344143][ C0] irq_exit_rcu+0x9/0x30
[ 87.344161][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 87.344186][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 87.344205][ C0]
[ 87.344210][ C0] The buggy address belongs to the object at ffff88802bb5a020
[ 87.344210][ C0] which belongs to the cache kmalloc-8 of size 8
[ 87.344226][ C0] The buggy address is located 2 bytes inside of
[ 87.344226][ C0] allocated 3-byte region [ffff88802bb5a020, ffff88802bb5a023)
[ 87.344244][ C0]
[ 87.344250][ C0] The buggy address belongs to the physical page:
[ 87.344270][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bb5a
[ 87.344289][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 87.344310][ C0] page_type: f5(slab)
[ 87.344329][ C0] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122
[ 87.344345][ C0] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000
[ 87.344355][ C0] page dumped because: kasan: bad access detected
[ 87.344369][ C0] page_owner tracks the page as allocated
[ 87.344374][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11897549784
[ 87.344401][ C0] post_alloc_hook+0x1f9/0x250
[ 87.344428][ C0] get_page_from_freelist+0x2209/0x2280
[ 87.344447][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 87.344464][ C0] allocate_slab+0x7d/0x620
[ 87.344485][ C0] refill_objects+0x2d5/0x350
[ 87.344505][ C0] __pcs_replace_empty_main+0x2c8/0x6c0
[ 87.344526][ C0] __kmalloc_cache_noprof+0x39b/0x600
[ 87.344554][ C0] usb_control_msg+0x73/0x3e0
[ 87.344583][ C0] hub_power_on+0x1b6/0x460
[ 87.344601][ C0] hub_activate+0x363/0x1b20
[ 87.344621][ C0] hub_probe+0x28fc/0x3c00
[ 87.344637][ C0] usb_probe_interface+0x788/0xe50
[ 87.344658][ C0] really_probe+0x254/0xae0
[ 87.344678][ C0] __driver_probe_device+0x1e8/0x360
[ 87.344693][ C0] driver_probe_device+0x4f/0x240
[ 87.344712][ C0] __device_attach_driver+0x270/0x410
[ 87.344731][ C0] page_owner free stack trace missing
[ 87.344738][ C0]
[ 87.344743][ C0] Memory state around the buggy address:
[ 87.344754][ C0] ffff88802bb59f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.344765][ C0] ffff88802bb59f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 87.344776][ C0] >ffff88802bb5a000: fa fc fc fc 03 fc fc fc 06 fc fc fc 07 fc fc fc
[ 87.344786][ C0] ^
[ 87.344796][ C0] ffff88802bb5a080: 06 fc fc fc 06 fc fc fc 00 fc fc fc 00 fc fc fc
[ 87.344809][ C0] ffff88802bb5a100: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 87.344820][ C0] ==================================================================
[ 87.344831][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.165412][ C0] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 88.174513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 88.184557][ C0] Call Trace:
[ 88.187825][ C0]
[ 88.190657][ C0] vpanic+0x56d/0xa60
[ 88.194671][ C0] ? __pfx_vpanic+0x10/0x10
[ 88.199172][ C0] panic+0xc5/0xd0
[ 88.202884][ C0] ? __pfx_panic+0x10/0x10
[ 88.207292][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.213195][ C0] ? rcu_is_watching+0x16/0xb0
[ 88.217959][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.223848][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.229753][ C0] check_panic_on_warn+0x89/0xb0
[ 88.234701][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.240593][ C0] end_report+0x73/0x170
[ 88.244827][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.250720][ C0] kasan_report+0x128/0x150
[ 88.255213][ C0] ? gb_operation_message_alloc+0x242/0x280
[ 88.261098][ C0] gb_operation_message_alloc+0x242/0x280
[ 88.266813][ C0] gb_operation_create_common+0xa9/0x650
[ 88.272446][ C0] gb_connection_recv+0x284/0x1280
[ 88.277553][ C0] ? __pfx_gb_connection_recv+0x10/0x10
[ 88.283090][ C0] ? do_raw_spin_unlock+0xf5/0x200
[ 88.288197][ C0] greybus_data_rcvd+0x22c/0x550
[ 88.293151][ C0] cport_in_callback+0x1bd/0x3b0
[ 88.298076][ C0] __usb_hcd_giveback_urb+0x378/0x540
[ 88.303440][ C0] dummy_timer+0xa91/0x4cf0
[ 88.307946][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 88.312877][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.318686][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 88.323622][ C0] __hrtimer_run_queues+0x3bc/0xa10
[ 88.328821][ C0] hrtimer_run_softirq+0x1e3/0x2e0
[ 88.333931][ C0] handle_softirqs+0x226/0x860
[ 88.338686][ C0] ? __irq_exit_rcu+0xcb/0x220
[ 88.343451][ C0] __irq_exit_rcu+0xcb/0x220
[ 88.348072][ C0] irq_exit_rcu+0x9/0x30
[ 88.352319][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 88.357954][ C0]
[ 88.360893][ C0]
[ 88.363816][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 88.369784][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 88.376189][ C0] Code: f7 e8 5d b5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 f2 e8 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ce ad f5 65 48 8b 05 9c 71 ad 07 48 85 c0 74 18 5b 41 5e c3
[ 88.395806][ C0] RSP: 0018:ffffc900033df7a0 EFLAGS: 00000206
[ 88.401873][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 88.409834][ C0] RDX: 0000000000000000 RSI: ffffffff8e474d42 RDI: 0000000000000001
[ 88.417842][ C0] RBP: 0000000000000008 R08: ffffffff907a187f R09: 1ffffffff20f430f
[ 88.425809][ C0] R10: dffffc0000000000 R11: fffffbfff20f4310 R12: ffff888074b43020
[ 88.433779][ C0] R13: 1ffff1100502a018 R14: ffff888028150000 R15: dffffc0000000000
[ 88.441849][ C0] dummy_queue+0x477/0x900
[ 88.446264][ C0] usb_ep_queue+0xf1/0x3c0
[ 88.450695][ C0] raw_process_ep_io+0x5e4/0xd80
[ 88.455625][ C0] ? __pfx_raw_process_ep_io+0x10/0x10
[ 88.461079][ C0] ? _copy_from_user+0x94/0xb0
[ 88.465834][ C0] raw_ioctl+0x251c/0x41c0
[ 88.470264][ C0] ? tomoyo_path_number_perm+0x219/0x5f0
[ 88.475890][ C0] ? tomoyo_path_number_perm+0x219/0x5f0
[ 88.481520][ C0] ? do_vfs_ioctl+0x116f/0x1530
[ 88.486356][ C0] ? __pfx_raw_ioctl+0x10/0x10
[ 88.491127][ C0] ? hook_file_ioctl_compat+0x1f2/0x600
[ 88.496681][ C0] ? __fget_files+0x2a/0x420
[ 88.501280][ C0] ? __fget_files+0x3a2/0x420
[ 88.505975][ C0] ? __fget_files+0x2a/0x420
[ 88.510556][ C0] ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 88.516099][ C0] __ia32_compat_sys_ioctl+0x5ea/0x950
[ 88.521574][ C0] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 88.527548][ C0] ? __se_sys_futex_time32+0x3ab/0x440
[ 88.533008][ C0] ? __pfx___se_sys_futex_time32+0x10/0x10
[ 88.538823][ C0] __do_fast_syscall_32+0x27a/0x6a0
[ 88.544014][ C0] ? do_fast_syscall_32+0x33/0x70
[ 88.549025][ C0] ? asm_int80_emulation+0x1a/0x20
[ 88.554132][ C0] ? do_int80_emulation+0x299/0x500
[ 88.559314][ C0] ? trace_irq_disable+0x3b/0x140
[ 88.564369][ C0] do_fast_syscall_32+0x33/0x70
[ 88.569211][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 88.575550][ C0] RIP: 0023:0xf70af0ec
[ 88.579605][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 88.599206][ C0] RSP: 002b:00000000f68a44b4 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 88.607610][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507
[ 88.615575][ C0] RDX: 00000000f68a44f8 RSI: 00000000f7477ff4 RDI: 00000000f68a4504
[ 88.623554][ C0] RBP: 00000000f68a5518 R08: 0000000000000000 R09: 0000000000000000
[ 88.631544][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 88.639512][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 88.647494][ C0]
[ 88.650781][ C0] Kernel Offset: disabled
[ 88.655102][ C0] Rebooting in 86400 seconds..