Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts.
2026/01/08 15:45:20 parsed 1 programs
[ 26.410192][ T28] audit: type=1400 audit(1767887120.138:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 26.430895][ T28] audit: type=1400 audit(1767887120.138:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 27.211420][ T28] audit: type=1400 audit(1767887120.948:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 27.212467][ T291] cgroup: Unknown subsys name 'net'
[ 27.234070][ T28] audit: type=1400 audit(1767887120.948:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.261317][ T28] audit: type=1400 audit(1767887120.978:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.261492][ T291] cgroup: Unknown subsys name 'devices'
[ 27.402874][ T291] cgroup: Unknown subsys name 'hugetlb'
[ 27.408506][ T291] cgroup: Unknown subsys name 'rlimit'
[ 27.518080][ T28] audit: type=1400 audit(1767887121.248:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.541255][ T28] audit: type=1400 audit(1767887121.248:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.560858][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.562030][ T28] audit: type=1400 audit(1767887121.248:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.590619][ T28] audit: type=1400 audit(1767887121.248:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.610803][ T28] audit: type=1400 audit(1767887121.248:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 27.614584][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.523657][ T303] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.523657][ T302] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.833346][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.840430][ T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.861793][ T320] device bridge_slave_0 entered promiscuous mode
[ 28.900485][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.920871][ T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.928439][ T320] device bridge_slave_1 entered promiscuous mode
[ 29.204340][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.211435][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.218733][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.225814][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.284252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.292922][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.300437][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.319062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.332436][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.339492][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.347639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.355919][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.362975][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.370573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.383139][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.409133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.423898][ T320] device veth0_vlan entered promiscuous mode
[ 29.432023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.440066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.447985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.461797][ T320] device veth1_macvtap entered promiscuous mode
[ 29.469045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
2026/01/08 15:45:23 executed programs: 0
[ 29.484272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.505778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.577167][ T320] syz-executor (320) used greatest stack depth: 21248 bytes left
[ 29.733279][ T367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.740340][ T367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.747997][ T367] device bridge_slave_0 entered promiscuous mode
[ 29.759560][ T367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.766776][ T367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.774170][ T367] device bridge_slave_1 entered promiscuous mode
[ 29.795818][ T371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.803076][ T371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.810361][ T371] device bridge_slave_0 entered promiscuous mode
[ 29.832108][ T371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.839146][ T371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.846585][ T371] device bridge_slave_1 entered promiscuous mode
[ 29.892516][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.899573][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.906980][ T370] device bridge_slave_0 entered promiscuous mode
[ 29.928285][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.935423][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.943015][ T370] device bridge_slave_1 entered promiscuous mode
[ 29.972235][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.979291][ T373] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.986757][ T373] device bridge_slave_0 entered promiscuous mode
[ 30.002230][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.009716][ T373] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.017336][ T373] device bridge_slave_1 entered promiscuous mode
[ 30.087299][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.094517][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.102115][ T374] device bridge_slave_0 entered promiscuous mode
[ 30.118128][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.125270][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.132709][ T374] device bridge_slave_1 entered promiscuous mode
[ 30.223937][ T367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.231018][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.238273][ T367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.245301][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.297243][ T371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.304307][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.311591][ T371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.318601][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.348772][ T373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.355847][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.363156][ T373] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.370177][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.380558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.388475][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.396185][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.403551][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.411296][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.418954][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.426594][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.444531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.452739][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.459745][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.496415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.504132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.512586][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.519618][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.527109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.535802][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.542847][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.550199][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.558209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.566531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.574869][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.581911][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.612314][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.620367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.627960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.636127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.644384][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.652755][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.659783][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.669840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.690616][ T367] device veth0_vlan entered promiscuous mode
[ 30.699176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.707765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.716342][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.723375][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.731198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.739500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.748092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.756361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.764489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.772770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.780709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.788563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.796729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.804246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.818448][ T371] device veth0_vlan entered promiscuous mode
[ 30.839163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.847559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.856135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.864655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.873168][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.880636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.888285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.896614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.904899][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.911952][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.919307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.927652][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.935804][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.942835][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.950273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.957753][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.969766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.978170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.986389][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.993417][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.000980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 31.009259][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 31.017457][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.024483][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.058565][ T367] device veth1_macvtap entered promiscuous mode
[ 31.065490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.074111][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 31.082431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 31.089861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 31.097561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 31.105395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 31.113858][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.122350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 31.130322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 31.138561][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 31.146811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 31.155040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 31.163151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 31.171295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 31.179367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 31.187689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 31.195745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 31.204119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.212454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 31.221090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 31.228598][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 31.239183][ T374] device veth0_vlan entered promiscuous mode
[ 31.247018][ T370] device veth0_vlan entered promiscuous mode
[ 31.253341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 31.261590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.273838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 31.282582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 31.294177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.302883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.312873][ T371] device veth1_macvtap entered promiscuous mode
[ 31.326769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.336717][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.360563][ T373] device veth0_vlan entered promiscuous mode
[ 31.374309][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 31.383630][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 31.393704][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.403149][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.412338][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 31.419880][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 31.436803][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.445139][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.462178][ T370] device veth1_macvtap entered promiscuous mode
[ 31.479183][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.488467][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.508582][ T373] device veth1_macvtap entered promiscuous mode
[ 31.523211][ T28] kauditd_printk_skb: 31 callbacks suppressed
[ 31.523223][ T28] audit: type=1400 audit(1767887125.258:105): avc: denied { ioctl } for pid=422 comm="syz.2.19" path="socket:[16194]" dev="sockfs" ino=16194 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 31.536139][ T37] Bluetooth: hci0: Frame reassembly failed (-84)
[ 31.555760][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 31.562138][ T37] Bluetooth: hci1: Frame reassembly failed (-84)
[ 31.568982][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 31.583102][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.591501][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.599861][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.608426][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.629186][ T374] device veth1_macvtap entered promiscuous mode
[ 31.644734][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.653242][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.676435][ T421] Bluetooth: hci2: Frame reassembly failed (-84)
[ 31.682936][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.692077][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.700380][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.708838][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.720820][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.729239][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.765288][ T429] Bluetooth: hci3: Frame reassembly failed (-84)
[ 31.771746][ T37] Bluetooth: hci4: Frame reassembly failed (-84)
[ 32.031603][ T8] device bridge_slave_1 left promiscuous mode
[ 32.037827][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 32.045428][ T8] device bridge_slave_0 left promiscuous mode
[ 32.051631][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 32.059342][ T8] device veth1_macvtap left promiscuous mode
[ 32.065444][ T8] device veth0_vlan left promiscuous mode
[ 33.530812][ T423] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 33.532015][ T433] Bluetooth: hci0: command 0x1003 tx timeout
[ 33.536981][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 33.549165][ T422] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 33.555537][ T424] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 33.561638][ T427] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 33.568040][ T430] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 33.574339][ T431] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 33.628359][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 33.657186][ T429] Bluetooth: hci1: Frame reassembly failed (-84)
[ 33.690789][ T433] Bluetooth: hci2: command 0x1003 tx timeout
[ 33.690800][ T426] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 33.712944][ T429] Bluetooth: hci2: Frame reassembly failed (-84)
[ 33.770794][ T428] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 33.780722][ T425] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 33.787361][ T429] Bluetooth: hci3: Frame reassembly failed (-84)
[ 33.796010][ T8] Bluetooth: hci4: Frame reassembly failed (-84)
[ 35.690895][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 35.690953][ T423] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 35.697067][ T45] Bluetooth: hci1: command 0x1003 tx timeout
[ 35.770780][ T423] Bluetooth: hci2: command 0x1003 tx timeout
[ 35.770979][ T436] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 35.850950][ T436] Bluetooth: hci4: command 0x1003 tx timeout
[ 35.851014][ T425] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 35.857110][ T436] Bluetooth: hci3: command 0x1003 tx timeout
[ 35.869270][ T428] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 36.632052][ T434] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 36.658453][ T435] Bluetooth: hci0: Opcode 0x080f failed: -4
2026/01/08 15:45:30 executed programs: 20
[ 36.715867][ T437] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 36.721994][ T429] Bluetooth: hci1: Frame reassembly failed (-84)
[ 36.777930][ T8] Bluetooth: hci2: Frame reassembly failed (-84)
[ 36.789109][ T438] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 36.799288][ T439] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 36.811793][ T429] Bluetooth: hci3: Frame reassembly failed (-84)
[ 36.821891][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 36.828407][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 36.834833][ T8] Bluetooth: hci0: Frame reassembly failed (-84)
[ 36.875861][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 38.730796][ T45] Bluetooth: hci1: command 0x1003 tx timeout
[ 38.730796][ T428] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 38.749942][ T37] Bluetooth: hci1: Frame reassembly failed (-84)
[ 38.810741][ T433] Bluetooth: hci2: command 0x1003 tx timeout
[ 38.810764][ T425] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 38.829109][ T37] Bluetooth: hci2: Frame reassembly failed (-84)
[ 38.890797][ T433] Bluetooth: hci4: command 0x1003 tx timeout
[ 38.890800][ T423] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 38.890826][ T433] Bluetooth: hci0: command 0x1003 tx timeout
[ 38.896855][ T432] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 38.902957][ T436] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 38.921379][ T443] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 38.927597][ T445] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 38.933782][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 38.940267][ T446] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 38.946408][ T447] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 38.952853][ T448] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 38.966952][ T37] Bluetooth: hci0: Frame reassembly failed (-84)
[ 38.974821][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 40.810806][ T432] Bluetooth: hci1: command 0x1003 tx timeout
[ 40.810806][ T428] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 40.831536][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 40.890751][ T423] Bluetooth: hci2: command 0x1003 tx timeout
[ 40.890770][ T425] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 40.910978][ T10] Bluetooth: hci2: Frame reassembly failed (-84)
[ 40.970762][ T432] Bluetooth: hci0: command 0x1003 tx timeout
[ 40.970772][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 40.970808][ T436] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 40.976798][ T432] Bluetooth: hci3: command 0x1003 tx timeout
[ 40.983220][ T449] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.003031][ T10] Bluetooth: hci3: Frame reassembly failed (-84)
[ 41.005471][ T450] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 41.050786][ T433] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 41.051101][ T432] Bluetooth: hci4: command 0x1003 tx timeout
[ 42.890826][ T428] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 42.890853][ T433] Bluetooth: hci1: command 0x1003 tx timeout
[ 42.971530][ T425] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 42.974733][ T428] Bluetooth: hci2: command 0x1003 tx timeout
[ 43.050756][ T451] Bluetooth: hci0: Opcode 0x080f failed: -110
[ 43.050756][ T436] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 43.057265][ T428] Bluetooth: hci3: command 0x1003 tx timeout
[ 43.063037][ T425] Bluetooth: hci0: command 0x080f tx timeout
[ 43.075226][ T452] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 43.081339][ T453] Bluetooth: hci0: Opcode 0x080f failed: -22
2026/01/08 15:45:36 executed programs: 34
[ 43.096500][ T10] Bluetooth: hci0: Frame reassembly failed (-84)
[ 43.117116][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 43.123603][ T8] Bluetooth: hci1: Frame reassembly failed (-84)
[ 43.130770][ T432] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 43.130811][ T436] Bluetooth: hci4: command 0x1003 tx timeout
[ 43.151983][ T429] Bluetooth: hci2: Frame reassembly failed (-84)
[ 43.162251][ T319] Bluetooth: hci3: Frame reassembly failed (-84)
[ 43.162472][ T10] Bluetooth: hci4: Frame reassembly failed (-84)
[ 43.168684][ T319] Bluetooth: hci3: Frame reassembly failed (-84)
[ 45.130734][ T423] Bluetooth: hci1: command 0x1003 tx timeout
[ 45.130730][ T433] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 45.130772][ T425] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 45.136789][ T423] Bluetooth: hci0: command 0x1003 tx timeout
[ 45.155109][ T455] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.161365][ T456] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.167498][ T458] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.173649][ T457] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.179951][ T459] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 45.210738][ T425] Bluetooth: hci4: command 0x1003 tx timeout
[ 45.210753][ T432] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 45.210798][ T432] Bluetooth: hci3: command 0x1003 tx timeout
[ 45.216795][ T428] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 45.222908][ T436] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 45.247247][ T421] Bluetooth: hci0: Frame reassembly failed (-84)
[ 45.254112][ T460] Bluetooth: hci1: Frame reassembly failed (-84)
[ 45.260815][ T319] Bluetooth: hci2: Frame reassembly failed (-84)
[ 45.274165][ T421] Bluetooth: hci3: Frame reassembly failed (-84)
[ 45.281230][ T37] Bluetooth: hci4: Frame reassembly failed (-84)
[ 45.287577][ T37] Bluetooth: hci4: Frame reassembly failed (-84)
[ 47.290819][ T45] Bluetooth: hci4: command 0x1003 tx timeout
[ 47.290813][ T436] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 47.290860][ T436] Bluetooth: hci2: command 0x1003 tx timeout
[ 47.296869][ T45] Bluetooth: hci1: command 0x1003 tx timeout
[ 47.302946][ T432] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 47.308894][ T423] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 47.314863][ T425] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 47.320930][ T428] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 47.327145][ T436] Bluetooth: hci0: command 0x1003 tx timeout
[ 47.345208][ T462] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 47.351290][ T463] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 47.357637][ T461] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 47.364045][ T465] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 47.370221][ T464] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 47.396358][ T319] Bluetooth: hci0: Frame reassembly failed (-84)
[ 47.429590][ T10] Bluetooth: hci1: Frame reassembly failed (-84)
[ 47.436159][ T460] Bluetooth: hci2: Frame reassembly failed (-84)
[ 47.436173][ T421] Bluetooth: hci4: Frame reassembly failed (-84)
[ 47.436714][ T429] Bluetooth: hci3: Frame reassembly failed (-84)
[ 47.455624][ T429] Bluetooth: hci3: Frame reassembly failed (-84)
[ 48.330819][ T24] ==================================================================
[ 48.338923][ T24] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[ 48.345951][ T24] Write of size 8 at addr ffff88811bb60a00 by task kworker/1:0/24
[ 48.353730][ T24]
[ 48.356037][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0
[ 48.363294][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 48.373334][ T24] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[ 48.379408][ T24] Call Trace:
[ 48.382676][ T24]
[ 48.385601][ T24] __dump_stack+0x21/0x24
[ 48.389933][ T24] dump_stack_lvl+0xee/0x150
[ 48.394781][ T24] ? __cfi_dump_stack_lvl+0x8/0x8
[ 48.399794][ T24] ? __cfi__printk+0x8/0x8
[ 48.404210][ T24] ? enqueue_timer+0xae/0x480
[ 48.408884][ T24] print_address_description+0x71/0x200
[ 48.414415][ T24] print_report+0x4a/0x60
[ 48.418727][ T24] kasan_report+0x122/0x150
[ 48.423215][ T24] ? enqueue_timer+0xae/0x480
[ 48.427887][ T24] __asan_report_store8_noabort+0x17/0x20
[ 48.433590][ T24] enqueue_timer+0xae/0x480
[ 48.438080][ T24] __mod_timer+0x84a/0xbf0
[ 48.442480][ T24] mod_timer+0x1f/0x30
[ 48.446527][ T24] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0
[ 48.453872][ T24] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0
[ 48.461155][ T24] wg_packet_tx_worker+0x15e/0x4e0
[ 48.466267][ T24] process_one_work+0x71f/0xc40
[ 48.471283][ T24] worker_thread+0xa29/0x11f0
[ 48.475945][ T24] kthread+0x281/0x320
[ 48.480015][ T24] ? __cfi_worker_thread+0x10/0x10
[ 48.485162][ T24] ? __cfi_kthread+0x10/0x10
[ 48.489748][ T24] ret_from_fork+0x1f/0x30
[ 48.494153][ T24]
[ 48.497299][ T24]
[ 48.499608][ T24] Allocated by task 462:
[ 48.503827][ T24] kasan_set_track+0x4b/0x70
[ 48.508404][ T24] kasan_save_alloc_info+0x25/0x30
[ 48.513505][ T24] __kasan_kmalloc+0x95/0xb0
[ 48.518075][ T24] __kmalloc+0xb1/0x1e0
[ 48.522206][ T24] hci_alloc_dev_priv+0x27/0x1bd0
[ 48.527225][ T24] hci_uart_tty_ioctl+0x3d6/0xa20
[ 48.532228][ T24] tty_ioctl+0x8ef/0xc60
[ 48.536447][ T24] __se_sys_ioctl+0x12f/0x1b0
[ 48.541098][ T24] __x64_sys_ioctl+0x7b/0x90
[ 48.545663][ T24] x64_sys_call+0x58b/0x9a0
[ 48.550141][ T24] do_syscall_64+0x4c/0xa0
[ 48.554530][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.560400][ T24]
[ 48.562699][ T24] Freed by task 464:
[ 48.566564][ T24] kasan_set_track+0x4b/0x70
[ 48.571138][ T24] kasan_save_free_info+0x31/0x50
[ 48.576137][ T24] ____kasan_slab_free+0x132/0x180
[ 48.581224][ T24] __kasan_slab_free+0x11/0x20
[ 48.585988][ T24] slab_free_freelist_hook+0xc2/0x190
[ 48.591336][ T24] __kmem_cache_free+0xb7/0x1b0
[ 48.596168][ T24] kfree+0x6f/0xf0
[ 48.599859][ T24] hci_release_dev+0x12a3/0x13b0
[ 48.604775][ T24] bt_host_release+0x82/0x90
[ 48.609360][ T24] device_release+0xa4/0x1d0
[ 48.613930][ T24] kobject_put+0x19d/0x280
[ 48.618329][ T24] put_device+0x1f/0x30
[ 48.622504][ T24] hci_dev_cmd+0x265/0x720
[ 48.626905][ T24] hci_sock_ioctl+0x41e/0x7f0
[ 48.631578][ T24] sock_do_ioctl+0x101/0x310
[ 48.636147][ T24] sock_ioctl+0x4d8/0x6e0
[ 48.640459][ T24] __se_sys_ioctl+0x12f/0x1b0
[ 48.645113][ T24] __x64_sys_ioctl+0x7b/0x90
[ 48.649679][ T24] x64_sys_call+0x58b/0x9a0
[ 48.654163][ T24] do_syscall_64+0x4c/0xa0
[ 48.658561][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.664438][ T24]
[ 48.666743][ T24] Last potentially related work creation:
[ 48.672429][ T24] kasan_save_stack+0x3a/0x60
[ 48.677086][ T24] __kasan_record_aux_stack+0xb6/0xc0
[ 48.682441][ T24] kasan_record_aux_stack_noalloc+0xb/0x10
[ 48.688242][ T24] insert_work+0x51/0x300
[ 48.692553][ T24] __queue_work+0x9b1/0xd30
[ 48.697039][ T24] queue_work_on+0xd2/0x140
[ 48.701608][ T24] __hci_cmd_sync_sk+0xa3e/0xcf0
[ 48.706524][ T24] hci_cmd_sync_status+0x53/0x120
[ 48.711528][ T24] hci_dev_cmd+0x628/0x720
[ 48.715923][ T24] hci_sock_ioctl+0x41e/0x7f0
[ 48.720582][ T24] sock_do_ioctl+0x101/0x310
[ 48.725149][ T24] sock_ioctl+0x4d8/0x6e0
[ 48.729460][ T24] __se_sys_ioctl+0x12f/0x1b0
[ 48.734114][ T24] __x64_sys_ioctl+0x7b/0x90
[ 48.738684][ T24] x64_sys_call+0x58b/0x9a0
[ 48.743173][ T24] do_syscall_64+0x4c/0xa0
[ 48.747571][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.753449][ T24]
[ 48.755758][ T24] Second to last potentially related work creation:
[ 48.762318][ T24] kasan_save_stack+0x3a/0x60
[ 48.766980][ T24] __kasan_record_aux_stack+0xb6/0xc0
[ 48.772351][ T24] kasan_record_aux_stack_noalloc+0xb/0x10
[ 48.778140][ T24] insert_work+0x51/0x300
[ 48.782447][ T24] __queue_work+0x9b1/0xd30
[ 48.786931][ T24] queue_work_on+0xd2/0x140
[ 48.791412][ T24] __hci_cmd_sync_sk+0xa3e/0xcf0
[ 48.796345][ T24] hci_cmd_sync_status+0x53/0x120
[ 48.801370][ T24] hci_dev_cmd+0x628/0x720
[ 48.805769][ T24] hci_sock_ioctl+0x41e/0x7f0
[ 48.810429][ T24] sock_do_ioctl+0x101/0x310
[ 48.814997][ T24] sock_ioctl+0x4d8/0x6e0
[ 48.819313][ T24] __se_sys_ioctl+0x12f/0x1b0
[ 48.823976][ T24] __x64_sys_ioctl+0x7b/0x90
[ 48.828541][ T24] x64_sys_call+0x58b/0x9a0
[ 48.833024][ T24] do_syscall_64+0x4c/0xa0
[ 48.837419][ T24] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 48.843300][ T24]
[ 48.845604][ T24] The buggy address belongs to the object at ffff88811bb60000
[ 48.845604][ T24] which belongs to the cache kmalloc-8k of size 8192
[ 48.859632][ T24] The buggy address is located 2560 bytes inside of
[ 48.859632][ T24] 8192-byte region [ffff88811bb60000, ffff88811bb62000)
[ 48.873146][ T24]
[ 48.875450][ T24] The buggy address belongs to the physical page:
[ 48.881843][ T24] page:ffffea00046ed800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bb60
[ 48.892079][ T24] head:ffffea00046ed800 order:3 compound_mapcount:0 compound_pincount:0
[ 48.900387][ T24] flags: 0x4000000000010200(slab|head|zone=1)
[ 48.906722][ T24] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500
[ 48.915284][ T24] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[ 48.923849][ T24] page dumped because: kasan: bad access detected
[ 48.930242][ T24] page_owner tracks the page as allocated
[ 48.935930][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 459, tgid 459 (syz.0.44), ts 43161646022, free_ts 43155008849
[ 48.958134][ T24] post_alloc_hook+0x1f5/0x210
[ 48.962887][ T24] prep_new_page+0x1c/0x110
[ 48.967373][ T24] get_page_from_freelist+0x2c7b/0x2cf0
[ 48.972898][ T24] __alloc_pages+0x1c3/0x450
[ 48.977469][ T24] alloc_slab_page+0x6e/0xf0
[ 48.982040][ T24] new_slab+0x98/0x3d0
[ 48.986091][ T24] ___slab_alloc+0x6bd/0xb20
[ 48.990666][ T24] __slab_alloc+0x5e/0xa0
[ 48.994983][ T24] __kmem_cache_alloc_node+0x203/0x2c0
[ 49.000426][ T24] __kmalloc+0xa1/0x1e0
[ 49.004657][ T24] hci_alloc_dev_priv+0x27/0x1bd0
[ 49.009664][ T24] hci_uart_tty_ioctl+0x3d6/0xa20
[ 49.014678][ T24] tty_ioctl+0x8ef/0xc60
[ 49.018912][ T24] __se_sys_ioctl+0x12f/0x1b0
[ 49.023572][ T24] __x64_sys_ioctl+0x7b/0x90
[ 49.028142][ T24] x64_sys_call+0x58b/0x9a0
[ 49.032636][ T24] page last free stack trace:
[ 49.037285][ T24] free_unref_page_prepare+0x742/0x750
[ 49.042758][ T24] free_unref_page+0x8f/0x530
[ 49.047414][ T24] __free_pages+0x67/0x100
[ 49.051811][ T24] __free_slab+0xca/0x1a0
[ 49.056126][ T24] __unfreeze_partials+0x160/0x190
[ 49.061220][ T24] put_cpu_partial+0xa9/0x100
[ 49.065890][ T24] __slab_free+0x1c4/0x280
[ 49.070288][ T24] ___cache_free+0xbf/0xd0
[ 49.074689][ T24] qlist_free_all+0xc6/0x140
[ 49.079258][ T24] kasan_quarantine_reduce+0x14a/0x170
[ 49.084696][ T24] __kasan_slab_alloc+0x24/0x80
[ 49.089525][ T24] slab_post_alloc_hook+0x4f/0x2d0
[ 49.094616][ T24] kmem_cache_alloc+0x16e/0x330
[ 49.099475][ T24] getname_flags+0xb9/0x500
[ 49.103957][ T24] getname+0x19/0x20
[ 49.107832][ T24] do_sys_openat2+0xcb/0x7e0
[ 49.112459][ T24]
[ 49.114761][ T24] Memory state around the buggy address:
[ 49.120367][ T24] ffff88811bb60900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.128403][ T24] ffff88811bb60980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.136456][ T24] >ffff88811bb60a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.144504][ T24] ^
[ 49.148557][ T24] ffff88811bb60a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.156596][ T24] ffff88811bb60b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.164631][ T24] ==================================================================
[ 49.172667][ T24] Disabling lock debugging due to kernel taint
[ 49.183205][ T28] audit: type=1400 audit(1767887142.918:106): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 49.205005][ T28] audit: type=1400 audit(1767887142.918:107): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 49.226439][ T28] audit: type=1400 audit(1767887142.918:108): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 49.247750][ T28] audit: type=1400 audit(1767887142.918:109): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 49.268348][ T28] audit: type=1400 audit(1767887142.918:110): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 49.288918][ T28] audit: type=1400 audit(1767887142.918:111): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 49.311952][ T28] audit: type=1400 audit(1767887142.918:112): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 49.370766][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 49.382499][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 49.390979][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0
[ 49.399452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 49.409483][ C1] RIP: 0010:__queue_work+0x575/0xd30
[ 49.414766][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 e2 28 00 4c 89 ff e8 00 46 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 63 6d 00 49 8b 7d 00 e8 e3 41
[ 49.434353][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[ 49.440400][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100336540
[ 49.448349][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 49.450788][ T423] Bluetooth: hci3: command 0x1003 tx timeout
[ 49.456309][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[ 49.462311][ T45] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 49.470313][ C1] R10: ffffed102376c139 R11: 1ffff1102376c139 R12: dffffc0000000000
[ 49.476481][ T425] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 49.484387][ C1] R13: 0000000000000000 R14: ffff88811bb609c8 R15: 0000000000000008
[ 49.484399][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 49.490456][ T432] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 49.498397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.498409][ C1] CR2: 000000c006d96000 CR3: 0000000130c62000 CR4: 00000000003506a0
[ 49.498424][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.507362][ T428] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 49.513395][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.513407][ C1] Call Trace:
[ 49.513413][ C1]
[ 49.519991][ T426] Bluetooth: hci4: command 0x1003 tx timeout
[ 49.527925][ C1] delayed_work_timer_fn+0x61/0x80
[ 49.536064][ T423] Bluetooth: hci2: command 0x1003 tx timeout
[ 49.541928][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 49.541953][ C1] call_timer_fn+0x46/0x2a0
[ 49.549942][ T428] Bluetooth: hci0: command 0x1003 tx timeout
[ 49.553165][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10
[ 49.553187][ C1] __run_timers+0x672/0x9b0
[ 49.553207][ C1] ? calc_index+0x200/0x200
[ 49.604020][ C1] ? kvm_sched_clock_read+0x18/0x40
[ 49.609213][ C1] run_timer_softirq+0x6a/0xf0
[ 49.613962][ C1] handle_softirqs+0x1d7/0x600
[ 49.618707][ C1] ? irqtime_account_irq+0xc4/0x240
[ 49.623886][ C1] __irq_exit_rcu+0x52/0xf0
[ 49.628454][ C1] irq_exit_rcu+0x9/0x10
[ 49.632677][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 49.638297][ C1]
[ 49.641215][ C1]
[ 49.644134][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 49.650093][ C1] RIP: 0010:default_idle+0xf/0x20
[ 49.655097][ C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 73 d0 51 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 49.674683][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[ 49.680731][ C1] RAX: ffff8881f7100000 RBX: ffff888100336540 RCX: 6459abf9f7ef8900
[ 49.688683][ C1] RDX: 0000000000000001 RSI: ffffffff85aa1b40 RDI: ffffffff85aa1b00
[ 49.696634][ C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee26917
[ 49.704580][ C1] R10: 0000000000000000 R11: ffffffff84f46280 R12: 0000000000000000
[ 49.712530][ C1] R13: 0000000000000000 R14: ffff888100336540 R15: dffffc0000000000
[ 49.720479][ C1] ? __cfi_default_idle+0x10/0x10
[ 49.725487][ C1] arch_cpu_idle+0x1c/0x20
[ 49.729881][ C1] default_idle_call+0x71/0x1d0
[ 49.734712][ C1] do_idle+0x1a7/0x520
[ 49.738756][ C1] ? try_to_wake_up+0x613/0x1220
[ 49.743672][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 49.748844][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 49.754627][ C1] ? complete+0x167/0x1c0
[ 49.758958][ C1] cpu_startup_entry+0x43/0x60
[ 49.763702][ C1] start_secondary+0x119/0x120
[ 49.768447][ C1] secondary_startup_64_no_verify+0xce/0xdb
[ 49.774319][ C1]
[ 49.777325][ C1] Modules linked in:
[ 49.781218][ C1] ---[ end trace 0000000000000000 ]---
[ 49.786648][ C1] RIP: 0010:__queue_work+0x575/0xd30
[ 49.791912][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 f8 e2 28 00 4c 89 ff e8 00 46 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 63 6d 00 49 8b 7d 00 e8 e3 41
[ 49.811498][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046
[ 49.817548][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888100336540
[ 49.825504][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[ 49.833452][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007
[ 49.841403][ C1] R10: ffffed102376c139 R11: 1ffff1102376c139 R12: dffffc0000000000
[ 49.849361][ C1] R13: 0000000000000000 R14: ffff88811bb609c8 R15: 0000000000000008
[ 49.857311][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 49.866245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.872815][ C1] CR2: 000000c006d96000 CR3: 0000000130c62000 CR4: 00000000003506a0
[ 49.880765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.888893][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.896858][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 49.904364][ C1] Kernel Offset: disabled
[ 49.908699][ C1] Rebooting in 86400 seconds..