[ 73.616825][ T42] audit: type=1400 audit(1786803369.115:209): avc: denied { transition } for pid=5952 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.626649][ T42] audit: type=1400 audit(1786803369.115:210): avc: denied { noatsecure } for pid=5952 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.634946][ T42] audit: type=1400 audit(1786803369.125:211): avc: denied { rlimitinh } for pid=5952 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.642766][ T42] audit: type=1400 audit(1786803369.125:212): avc: denied { siginh } for pid=5952 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.608531][ T42] audit: type=1400 audit(1786803373.115:213): avc: denied { write } for pid=5959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.661611][ T42] audit: type=1400 audit(1786803373.165:214): avc: denied { write } for pid=5962 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.636863][ T42] audit: type=1400 audit(1786803374.135:215): avc: denied { write } for pid=5965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.697656][ T42] audit: type=1400 audit(1786803374.195:216): avc: denied { write } for pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.803555][ T42] audit: type=1400 audit(1786803374.305:217): avc: denied { write } for pid=5971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.885790][ T42] audit: type=1400 audit(1786803374.385:218): avc: denied { write } for pid=5974 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.982829][ T42] audit: type=1400 audit(1786803374.485:219): avc: denied { write } for pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.047302][ T42] audit: type=1400 audit(1786803374.545:220): avc: denied { write } for pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:54076' (ED25519) to the list of known hosts. 2026/08/15 14:16:17 parsed 1 programs 2026/08/15 14:16:17 serving rpc on tcp://36691 [ 81.614914][ T56] cfg80211: failed to load regulatory.db [ 83.890904][ T42] audit: type=1400 audit(1786803379.395:221): avc: denied { read write } for pid=6000 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.899161][ T42] audit: type=1400 audit(1786803379.395:222): avc: denied { open } for pid=6000 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.960493][ T42] audit: type=1400 audit(1786803379.465:223): avc: denied { unlink } for pid=6000 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 84.359274][ T42] audit: type=1400 audit(1786803379.865:224): avc: denied { relabelto } for pid=6003 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 85.035256][ T6000] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.753908][ T42] audit: type=1400 audit(1786803382.255:225): avc: denied { sys_module } for pid=6006 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.043820][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.046184][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.048722][ T6006] bridge_slave_0: entered allmulticast mode [ 87.051786][ T6006] bridge_slave_0: entered promiscuous mode [ 87.057010][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.059191][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.061582][ T6006] bridge_slave_1: entered allmulticast mode [ 87.064304][ T6006] bridge_slave_1: entered promiscuous mode [ 87.080779][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.085969][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.101349][ T6006] team0: Port device team_slave_0 added [ 87.104630][ T6006] team0: Port device team_slave_1 added [ 87.119739][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.121969][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.130131][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.134451][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.136670][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.144834][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.169674][ T6006] hsr_slave_0: entered promiscuous mode [ 87.171945][ T6006] hsr_slave_1: entered promiscuous mode [ 87.267512][ T42] audit: type=1400 audit(1786803382.765:226): avc: denied { write } for pid=6022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.310869][ T42] audit: type=1400 audit(1786803382.815:227): avc: denied { write } for pid=6026 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.404743][ T42] audit: type=1400 audit(1786803382.905:228): avc: denied { write } for pid=6028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.456122][ T42] audit: type=1400 audit(1786803382.955:229): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.524585][ T42] audit: type=1400 audit(1786803383.025:230): avc: denied { write } for pid=6033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.660030][ T6006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.665090][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.669204][ T6006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.676246][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.689260][ T6006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.698080][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.701998][ T6006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.708309][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.731926][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.734925][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.737964][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.740923][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.769995][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.779223][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.782809][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.793435][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.801832][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.804923][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.811906][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.814908][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.093358][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.120574][ T6006] veth0_vlan: entered promiscuous mode [ 88.125869][ T6006] veth1_vlan: entered promiscuous mode [ 88.146807][ T6006] veth0_macvtap: entered promiscuous mode [ 88.152839][ T6006] veth1_macvtap: entered promiscuous mode [ 88.161632][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.174527][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.197768][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.201733][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217710][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.242571][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.358299][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.429394][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.529297][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.596830][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.957363][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 88.957382][ T42] audit: type=1400 audit(1786803384.455:250): avc: denied { write } for pid=6122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.009283][ T42] audit: type=1400 audit(1786803384.515:251): avc: denied { write } for pid=6127 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.390440][ T42] audit: type=1401 audit(1786803384.895:252): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 90.011729][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.014991][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.044318][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.048556][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.114341][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.120194][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.124157][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.130447][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.133765][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/15 14:16:26 executed programs: 0 [ 90.775394][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.779388][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.783115][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.788535][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.793247][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.167985][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.170378][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.172839][ T6180] bridge_slave_0: entered allmulticast mode [ 91.175533][ T6180] bridge_slave_0: entered promiscuous mode [ 91.179030][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.181394][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.183753][ T6180] bridge_slave_1: entered allmulticast mode [ 91.186416][ T6180] bridge_slave_1: entered promiscuous mode [ 91.203236][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.207903][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.225543][ T6180] team0: Port device team_slave_0 added [ 91.228933][ T6180] team0: Port device team_slave_1 added [ 91.242910][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.245439][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.253529][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.258364][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.260560][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.268836][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.292683][ T6180] hsr_slave_0: entered promiscuous mode [ 91.294948][ T6180] hsr_slave_1: entered promiscuous mode [ 91.297033][ T6180] debugfs: 'hsr0' already exists in 'hsr' [ 91.299174][ T6180] Cannot create hsr debugfs directory [ 91.701048][ T12] bridge_slave_1: left allmulticast mode [ 91.703546][ T12] bridge_slave_1: left promiscuous mode [ 91.706375][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.712095][ T12] bridge_slave_0: left allmulticast mode [ 91.713992][ T12] bridge_slave_0: left promiscuous mode [ 91.715913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.767925][ T42] audit: type=1400 audit(1786803387.265:253): avc: denied { write } for pid=6199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.809795][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.815856][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.824461][ T42] audit: type=1400 audit(1786803387.325:254): avc: denied { write } for pid=6202 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.832740][ T12] bond0 (unregistering): Released all slaves [ 91.871823][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 91.934853][ T12] hsr_slave_0: left promiscuous mode [ 91.934917][ T42] audit: type=1400 audit(1786803387.435:255): avc: denied { write } for pid=6205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.944106][ T12] hsr_slave_1: left promiscuous mode [ 91.946297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.948848][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.951656][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.954074][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.961928][ T12] veth1_macvtap: left promiscuous mode [ 91.963809][ T12] veth0_macvtap: left promiscuous mode [ 91.965557][ T12] veth1_vlan: left promiscuous mode [ 91.967311][ T12] veth0_vlan: left promiscuous mode [ 91.979505][ T42] audit: type=1400 audit(1786803387.485:256): avc: denied { write } for pid=6208 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.102618][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.109924][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.190746][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 92.349297][ T42] audit: type=1400 audit(1786803387.855:257): avc: denied { write } for pid=6212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.393840][ T42] audit: type=1400 audit(1786803387.895:258): avc: denied { write } for pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.461578][ T42] audit: type=1400 audit(1786803387.965:259): avc: denied { write } for pid=6217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.623307][ T6180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.627921][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.631113][ T6180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.635076][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.637989][ T6180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.641989][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.644819][ T6180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.649939][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.701732][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.712257][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.718312][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.720712][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.729612][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.731992][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.817928][ T5085] Bluetooth: hci0: command tx timeout [ 93.466498][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.498624][ T6180] veth0_vlan: entered promiscuous mode [ 93.506199][ T6180] veth1_vlan: entered promiscuous mode [ 93.539800][ T6180] veth0_macvtap: entered promiscuous mode [ 93.563802][ T6180] veth1_macvtap: entered promiscuous mode [ 93.577875][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.587332][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.688731][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.692591][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.697664][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701209][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722212][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.725282][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.737847][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.740983][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771640][ T6246] ================================================================== [ 93.774340][ T6246] BUG: KASAN: invalid-free in f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.776930][ T6246] Free of addr ffff888026429c93 by task syz.0.17/6246 [ 93.779759][ T6246] [ 93.781354][ T6246] CPU: 3 UID: 0 PID: 6246 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 93.781369][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.781388][ T6246] Call Trace: [ 93.781410][ T6246] [ 93.781415][ T6246] dump_stack_lvl+0x100/0x190 [ 93.781434][ T6246] print_report+0x13d/0x4b0 [ 93.781452][ T6246] ? __virt_addr_valid+0x239/0x430 [ 93.781468][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.781487][ T6246] kasan_report_invalid_free+0xb8/0x190 [ 93.781505][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.781522][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.781539][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.781555][ T6246] check_slab_allocation+0xe1/0xf0 [ 93.781569][ T6246] ? f_uac1_opts_c_srate_store+0x170/0x260 [ 93.781592][ T6246] kfree+0x1b6/0x6c0 [ 93.781605][ T6246] ? __asan_memcpy+0x3c/0x60 [ 93.781624][ T6246] f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.782025][ T6246] ? __pfx_f_uac1_opts_c_srate_store+0x10/0x10 [ 93.782052][ T6246] ? configfs_write_iter+0x388/0x4e0 [ 93.782074][ T6246] configfs_write_iter+0x302/0x4e0 [ 93.782089][ T6246] vfs_write+0x6ac/0x1050 [ 93.782100][ T6246] ? __pfx_configfs_write_iter+0x10/0x10 [ 93.782114][ T6246] ? __pfx_vfs_write+0x10/0x10 [ 93.782127][ T6246] ksys_write+0x12a/0x250 [ 93.782137][ T6246] ? __pfx_ksys_write+0x10/0x10 [ 93.782148][ T6246] do_syscall_64+0x115/0x870 [ 93.782164][ T6246] ? clear_bhb_loop+0x70/0xc0 [ 93.782177][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.782189][ T6246] RIP: 0033:0x7f9cdfd9e019 [ 93.782200][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.782211][ T6246] RSP: 002b:00007f9ce0bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.782234][ T6246] RAX: ffffffffffffffda RBX: 00007f9ce0025fa0 RCX: 00007f9cdfd9e019 [ 93.782241][ T6246] RDX: 0000000000000029 RSI: 0000200000000040 RDI: 0000000000000003 [ 93.782248][ T6246] RBP: 00007f9cdfe3500c R08: 0000000000000000 R09: 0000000000000000 [ 93.782255][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.782261][ T6246] R13: 00007f9ce0026038 R14: 00007f9ce0025fa0 R15: 00007ffcbcd23c98 [ 93.782271][ T6246] [ 93.782275][ T6246] [ 93.855526][ T6246] Allocated by task 6246: [ 93.856877][ T6246] kasan_save_stack+0x30/0x50 [ 93.858359][ T6246] kasan_save_track+0x14/0x30 [ 93.859840][ T6246] __kasan_kmalloc+0xaa/0xb0 [ 93.861288][ T6246] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 93.863404][ T6246] kstrdup+0x51/0xe0 [ 93.864641][ T6246] f_uac1_opts_c_srate_store+0x113/0x260 [ 93.866392][ T6246] configfs_write_iter+0x302/0x4e0 [ 93.867999][ T6246] vfs_write+0x6ac/0x1050 [ 93.869327][ T6246] ksys_write+0x12a/0x250 [ 93.870611][ T6246] do_syscall_64+0x115/0x870 [ 93.872055][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.873882][ T6246] [ 93.874612][ T6246] The buggy address belongs to the object at ffff888026429c80 [ 93.874612][ T6246] which belongs to the cache kmalloc-64 of size 64 [ 93.878767][ T6246] The buggy address is located 19 bytes inside of [ 93.878767][ T6246] 42-byte region [ffff888026429c80, ffff888026429caa) [ 93.882827][ T6246] [ 93.883636][ T6246] The buggy address belongs to the physical page: [ 93.885629][ T6246] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26429 [ 93.888341][ T6246] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.890544][ T6246] page_type: f5(slab) [ 93.891867][ T6246] raw: 00fff00000000000 ffff88801c0428c0 dead000000000100 dead000000000122 [ 93.894647][ T6246] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 93.897402][ T6246] page dumped because: kasan: bad access detected [ 93.899475][ T6246] page_owner tracks the page as allocated [ 93.901398][ T6246] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5753176190, free_ts 0 [ 93.907570][ T6246] post_alloc_hook+0xfd/0x120 [ 93.909126][ T6246] get_page_from_freelist+0xf48/0x3530 [ 93.910871][ T6246] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 93.912911][ T6246] new_slab+0xa2/0x640 [ 93.914258][ T6246] refill_objects+0xe3/0x410 [ 93.915776][ T6246] __pcs_replace_empty_main+0x376/0x680 [ 93.917535][ T6246] __kmalloc_noprof+0x66d/0x820 [ 93.919116][ T6246] acpi_evaluate_object+0x2ba/0xe00 [ 93.920818][ T6246] acpi_evaluate_dsm+0x19c/0x290 [ 93.922495][ T6246] acpi_check_dsm+0x66/0x260 [ 93.924075][ T6246] acpi_nfit_init+0x21c1/0x85a0 [ 93.925645][ T6246] acpi_nfit_probe+0x5eb/0x6a0 [ 93.927229][ T6246] platform_probe+0x106/0x1d0 [ 93.928739][ T6246] really_probe+0x241/0xa60 [ 93.930212][ T6246] __driver_probe_device+0x20e/0x450 [ 93.931954][ T6246] driver_probe_device+0x4a/0x140 [ 93.933642][ T6246] page_owner free stack trace missing [ 93.935273][ T6246] [ 93.936033][ T6246] Memory state around the buggy address: [ 93.937694][ T6246] ffff888026429b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.940077][ T6246] ffff888026429c00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 93.942684][ T6246] >ffff888026429c80: 00 00 00 00 00 02 fc fc fc fc fc fc fc fc fc fc [ 93.945259][ T6246] ^ [ 93.946747][ T6246] ffff888026429d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.949340][ T6246] ffff888026429d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.951905][ T6246] ================================================================== [ 93.956169][ T6246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.958464][ T6246] CPU: 2 UID: 0 PID: 6246 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 93.961304][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.964481][ T6246] Call Trace: [ 93.965550][ T6246] [ 93.966495][ T6246] dump_stack_lvl+0x100/0x190 [ 93.967906][ T6246] vpanic+0x552/0x970 [ 93.969030][ T6246] ? __pfx_vpanic+0x10/0x10 [ 93.970356][ T6246] ? mark_held_locks+0x40/0x70 [ 93.971893][ T6246] panic+0xd1/0xe0 [ 93.973134][ T6246] ? __pfx_panic+0x10/0x10 [ 93.974560][ T6246] ? preempt_schedule_common+0x42/0xc0 [ 93.976311][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.978171][ T6246] ? check_panic_on_warn+0x1f/0x90 [ 93.979816][ T6246] check_panic_on_warn.cold+0x19/0x34 [ 93.981513][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.983384][ T6246] end_report.part.0+0x3a/0x90 [ 93.984905][ T6246] kasan_report_invalid_free.cold+0xd/0x12 [ 93.986749][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.988598][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.990448][ T6246] ? f_uac1_opts_c_srate_store+0x1d4/0x260 [ 93.992247][ T6246] check_slab_allocation+0xe1/0xf0 [ 93.993804][ T6246] ? f_uac1_opts_c_srate_store+0x170/0x260 [ 93.995657][ T6246] kfree+0x1b6/0x6c0 [ 93.997043][ T6246] ? __asan_memcpy+0x3c/0x60 [ 93.998729][ T6246] f_uac1_opts_c_srate_store+0x1d4/0x260 [ 94.000616][ T6246] ? __pfx_f_uac1_opts_c_srate_store+0x10/0x10 [ 94.002732][ T6246] ? configfs_write_iter+0x388/0x4e0 [ 94.004402][ T6246] configfs_write_iter+0x302/0x4e0 [ 94.006013][ T6246] vfs_write+0x6ac/0x1050 [ 94.007380][ T6246] ? __pfx_configfs_write_iter+0x10/0x10 [ 94.009143][ T6246] ? __pfx_vfs_write+0x10/0x10 [ 94.010651][ T6246] ksys_write+0x12a/0x250 [ 94.012016][ T6246] ? __pfx_ksys_write+0x10/0x10 [ 94.013592][ T6246] do_syscall_64+0x115/0x870 [ 94.015089][ T6246] ? clear_bhb_loop+0x70/0xc0 [ 94.016620][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.018500][ T6246] RIP: 0033:0x7f9cdfd9e019 [ 94.019925][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.026890][ T6246] RSP: 002b:00007f9ce0bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.030148][ T6246] RAX: ffffffffffffffda RBX: 00007f9ce0025fa0 RCX: 00007f9cdfd9e019 [ 94.033235][ T6246] RDX: 0000000000000029 RSI: 0000200000000040 RDI: 0000000000000003 [ 94.036000][ T6246] RBP: 00007f9cdfe3500c R08: 0000000000000000 R09: 0000000000000000 [ 94.038501][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.041011][ T6246] R13: 00007f9ce0026038 R14: 00007f9ce0025fa0 R15: 00007ffcbcd23c98 [ 94.043545][ T6246] [ 94.045182][ T6246] Kernel Offset: disabled [ 94.046576][ T6246] Rebooting in 86400 seconds..