[ 73.787801][ T42] audit: type=1400 audit(1785304246.115:207): avc: denied { transition } for pid=5966 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.797268][ T42] audit: type=1400 audit(1785304246.125:208): avc: denied { noatsecure } for pid=5966 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.805883][ T42] audit: type=1400 audit(1785304246.125:209): avc: denied { rlimitinh } for pid=5966 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.813136][ T42] audit: type=1400 audit(1785304246.125:210): avc: denied { siginh } for pid=5966 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.520134][ T42] audit: type=1400 audit(1785304250.855:211): avc: denied { write } for pid=5974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.564093][ T42] audit: type=1400 audit(1785304250.895:212): avc: denied { write } for pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.945411][ T42] audit: type=1400 audit(1785304251.275:213): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.997744][ T42] audit: type=1400 audit(1785304251.325:214): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.230543][ T42] audit: type=1400 audit(1785304251.565:215): avc: denied { write } for pid=5987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.291188][ T42] audit: type=1400 audit(1785304251.625:216): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.383705][ T42] audit: type=1400 audit(1785304251.715:217): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:38382' (ED25519) to the list of known hosts. [ 79.446211][ T42] audit: type=1400 audit(1785304251.775:218): avc: denied { write } for pid=6001 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/07/29 05:50:53 parsed 1 programs 2026/07/29 05:50:53 serving rpc on tcp://45211 [ 81.546068][ T56] cfg80211: failed to load regulatory.db [ 83.232752][ T42] audit: type=1400 audit(1785304255.565:219): avc: denied { read write } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.244281][ T42] audit: type=1400 audit(1785304255.575:220): avc: denied { open } for pid=6015 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.303644][ T42] audit: type=1400 audit(1785304255.635:221): avc: denied { unlink } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.713178][ T42] audit: type=1400 audit(1785304256.045:222): avc: denied { relabelto } for pid=6018 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 84.566429][ T6015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.307429][ T42] audit: type=1400 audit(1785304259.635:223): avc: denied { sys_module } for pid=6036 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.597613][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.600400][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.603070][ T6036] bridge_slave_0: entered allmulticast mode [ 87.606533][ T6036] bridge_slave_0: entered promiscuous mode [ 87.610766][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.613449][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.616076][ T6036] bridge_slave_1: entered allmulticast mode [ 87.619434][ T6036] bridge_slave_1: entered promiscuous mode [ 87.639371][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.646235][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.660962][ T6036] team0: Port device team_slave_0 added [ 87.664211][ T6036] team0: Port device team_slave_1 added [ 87.678803][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.680997][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.691515][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.695812][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.697913][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.706138][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.733745][ T6036] hsr_slave_0: entered promiscuous mode [ 87.736499][ T6036] hsr_slave_1: entered promiscuous mode [ 87.848218][ T42] audit: type=1400 audit(1785304260.175:224): avc: denied { write } for pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.908970][ T42] audit: type=1400 audit(1785304260.245:225): avc: denied { write } for pid=6056 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.996462][ T42] audit: type=1400 audit(1785304260.325:226): avc: denied { write } for pid=6058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.045259][ T42] audit: type=1400 audit(1785304260.375:227): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.112166][ T42] audit: type=1400 audit(1785304260.445:228): avc: denied { write } for pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.153292][ T42] audit: type=1400 audit(1785304260.485:229): avc: denied { write } for pid=6066 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.238591][ T42] audit: type=1400 audit(1785304260.565:230): avc: denied { write } for pid=6068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.251698][ T6036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.256333][ T6036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.265923][ T6036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.272596][ T6036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.276151][ T6036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.283479][ T6036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.286449][ T6036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.295604][ T6036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.296329][ T42] audit: type=1400 audit(1785304260.625:231): avc: denied { write } for pid=6071 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.317752][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.320445][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.323188][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.325746][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.366480][ T42] audit: type=1400 audit(1785304260.695:232): avc: denied { write } for pid=6079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.374294][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.392726][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.395896][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.405769][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.411779][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.414192][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.420106][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.422434][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.450475][ T6036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.691758][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.718365][ T6036] veth0_vlan: entered promiscuous mode [ 88.728640][ T6036] veth1_vlan: entered promiscuous mode [ 88.744420][ T6036] veth0_macvtap: entered promiscuous mode [ 88.750103][ T6036] veth1_macvtap: entered promiscuous mode [ 88.761552][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.769839][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.781856][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.785071][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.790471][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.793639][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.888040][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.999554][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.091648][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.175657][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.383228][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.388382][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.391908][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.394891][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.397621][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.028330][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.033033][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.054727][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.057631][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 05:51:02 executed programs: 0 [ 90.604800][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.608943][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.612427][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.615658][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.620793][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.013040][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.015919][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.019345][ T6194] bridge_slave_0: entered allmulticast mode [ 91.023269][ T6194] bridge_slave_0: entered promiscuous mode [ 91.028227][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.034817][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.037813][ T6194] bridge_slave_1: entered allmulticast mode [ 91.041053][ T6194] bridge_slave_1: entered promiscuous mode [ 91.063563][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.070194][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.095506][ T6194] team0: Port device team_slave_0 added [ 91.099095][ T6194] team0: Port device team_slave_1 added [ 91.112666][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.114861][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.123143][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.127733][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.130127][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.139971][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.181694][ T6194] hsr_slave_0: entered promiscuous mode [ 91.184791][ T6194] hsr_slave_1: entered promiscuous mode [ 91.187747][ T6194] debugfs: 'hsr0' already exists in 'hsr' [ 91.190628][ T6194] Cannot create hsr debugfs directory [ 91.472199][ T13] bridge_slave_1: left allmulticast mode [ 91.474583][ T13] bridge_slave_1: left promiscuous mode [ 91.476947][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.482854][ T13] bridge_slave_0: left allmulticast mode [ 91.485572][ T13] bridge_slave_0: left promiscuous mode [ 91.488056][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.600370][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.607010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.615148][ T13] bond0 (unregistering): Released all slaves [ 91.735747][ T13] hsr_slave_0: left promiscuous mode [ 91.739034][ T13] hsr_slave_1: left promiscuous mode [ 91.742009][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.745130][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.748963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.752156][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.760274][ T13] veth1_macvtap: left promiscuous mode [ 91.762761][ T13] veth0_macvtap: left promiscuous mode [ 91.765154][ T13] veth1_vlan: left promiscuous mode [ 91.767428][ T13] veth0_vlan: left promiscuous mode [ 91.941042][ T13] team0 (unregistering): Port device team_slave_1 removed [ 91.952730][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.020888][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.318219][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 92.318238][ T42] audit: type=1400 audit(1785304264.645:256): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.387842][ T42] audit: type=1400 audit(1785304264.715:257): avc: denied { write } for pid=6229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.442238][ T42] audit: type=1400 audit(1785304264.775:258): avc: denied { write } for pid=6232 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.467826][ T6194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.478933][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.481726][ T6194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.485725][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.488664][ T6194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.495027][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.502534][ T6194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.508336][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.567924][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.583369][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.589854][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.592934][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.604362][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.607196][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.668684][ T64] Bluetooth: hci0: command tx timeout [ 93.074304][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.105864][ T6194] veth0_vlan: entered promiscuous mode [ 93.116160][ T6194] veth1_vlan: entered promiscuous mode [ 93.150562][ T6194] veth0_macvtap: entered promiscuous mode [ 93.154563][ T6194] veth1_macvtap: entered promiscuous mode [ 93.164703][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.171998][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.182286][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185855][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.192094][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.195551][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.248989][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.251517][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.267874][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271500][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.306713][ T42] audit: type=1400 audit(1785304265.635:259): avc: denied { mount } for pid=6250 comm="syz.0.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 93.308370][ T6251] ehci-pci 0000:00:1d.7: remove, state 1 [ 93.317167][ T6251] usb usb1: USB disconnect, device number 1 [ 93.320392][ T6251] usb 1-1: USB disconnect, device number 2 [ 93.396467][ T6251] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 93.434957][ T6252] FAULT_INJECTION: forcing a failure. [ 93.434957][ T6252] name failslab, interval 1, probability 0, space 0, times 1 [ 93.440851][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 93.440867][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.440874][ T6252] Call Trace: [ 93.440890][ T6252] [ 93.440895][ T6252] dump_stack_lvl+0x100/0x190 [ 93.440914][ T6252] should_fail_ex.cold+0x5/0xa [ 93.440930][ T6252] should_failslab+0xc2/0x120 [ 93.440946][ T6252] kmem_cache_alloc_noprof+0x91/0x6a0 [ 93.440960][ T6252] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 93.440972][ T6252] ? acpi_ut_create_update_state+0x72/0x130 [ 93.440993][ T6252] acpi_ut_create_update_state+0x72/0x130 [ 93.441010][ T6252] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 93.441027][ T6252] acpi_ut_update_object_reference+0x32f/0x800 [ 93.441042][ T6252] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 93.441055][ T6252] ? __pfx_acpi_ut_trace+0x10/0x10 [ 93.441065][ T6252] ? __pfx_acpi_ut_trace+0x10/0x10 [ 93.441075][ T6252] ? acpi_ut_status_exit+0x111/0x1c0 [ 93.441088][ T6252] acpi_ut_add_reference+0x80/0x170 [ 93.441101][ T6252] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 93.441116][ T6252] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 93.441132][ T6252] ? acpi_ds_create_operand+0x267/0xc20 [ 93.441150][ T6252] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 93.441164][ T6252] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 93.441177][ T6252] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 93.441187][ T6252] ? __asan_memset+0x23/0x50 [ 93.441199][ T6252] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 93.441237][ T6252] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 93.441256][ T6252] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 93.441274][ T6252] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 93.441291][ T6252] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 93.441304][ T6252] acpi_ds_exec_end_op+0xb78/0x1e60 [ 93.441322][ T6252] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 93.441339][ T6252] acpi_ps_parse_loop+0x5e1/0x26e0 [ 93.441360][ T6252] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 93.441377][ T6252] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 93.441389][ T6252] ? acpi_ut_create_thread_state+0x6d/0x170 [ 93.441410][ T6252] acpi_ps_parse_aml+0x81e/0x1120 [ 93.441430][ T6252] acpi_ps_execute_method+0x5c4/0xe90 [ 93.441445][ T6252] acpi_ns_evaluate+0x640/0x1670 [ 93.441460][ T6252] acpi_ut_evaluate_object+0xf7/0x610 [ 93.441475][ T6252] acpi_rs_get_prt_method_data+0xa0/0x150 [ 93.441488][ T6252] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 93.441501][ T6252] ? acpi_ut_status_exit+0x111/0x1c0 [ 93.441513][ T6252] ? acpi_rs_validate_parameters+0x104/0x210 [ 93.441527][ T6252] acpi_get_irq_routing_table+0xb8/0x140 [ 93.441541][ T6252] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 93.441557][ T6252] ? do_raw_spin_lock+0x128/0x260 [ 93.441574][ T6252] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 93.441597][ T6252] ? mark_held_locks+0x40/0x70 [ 93.441615][ T6252] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 93.441628][ T6252] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.441640][ T6252] ? pci_conf1_read+0x138/0x240 [ 93.441655][ T6252] acpi_pci_irq_lookup+0x8e/0x6b0 [ 93.441669][ T6252] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 93.441682][ T6252] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 93.441702][ T6252] ? check_prev_add+0x354/0xe60 [ 93.441720][ T6252] acpi_pci_irq_enable+0x1f5/0x6f0 [ 93.441738][ T6252] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 93.441759][ T6252] ? __pfx_pci_enable_resources+0x10/0x10 [ 93.441782][ T6252] ? lock_acquire+0x1b9/0x370 [ 93.441801][ T6252] pcibios_enable_device+0xb6/0xe0 [ 93.441820][ T6252] do_pci_enable_device+0x21f/0x4a0 [ 93.441833][ T6252] ? __pfx_do_pci_enable_device+0x10/0x10 [ 93.441846][ T6252] ? pci_update_current_state+0x102/0x240 [ 93.441858][ T6252] ? __pfx_pci_update_current_state+0x10/0x10 [ 93.441874][ T6252] pci_enable_device_flags+0x27c/0x370 [ 93.441891][ T6252] ? __pfx_ehci_pci_probe+0x10/0x10 [ 93.441908][ T6252] usb_hcd_pci_probe+0x56/0xcb0 [ 93.441923][ T6252] ? mark_held_locks+0x40/0x70 [ 93.441936][ T6252] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.441950][ T6252] ? __pfx_ehci_pci_probe+0x10/0x10 [ 93.441973][ T6252] ehci_pci_probe+0x35/0x50 [ 93.441997][ T6252] local_pci_probe+0xdd/0x1b0 [ 93.442012][ T6252] pci_call_probe+0x176/0x800 [ 93.442033][ T6252] ? __pfx_pci_call_probe+0x10/0x10 [ 93.442051][ T6252] ? find_held_lock+0x2b/0x80 [ 93.442075][ T6252] ? pci_match_device+0x450/0x5f0 [ 93.442089][ T6252] ? pci_match_device+0x450/0x5f0 [ 93.442105][ T6252] ? pci_match_id+0x34d/0x3f0 [ 93.442123][ T6252] ? pci_match_device+0xb4/0x5f0 [ 93.442144][ T6252] pci_device_probe+0x1cd/0x370 [ 93.442163][ T6252] ? __pfx_pci_device_probe+0x10/0x10 [ 93.442181][ T6252] really_probe+0x241/0xa60 [ 93.442204][ T6252] __driver_probe_device+0x20e/0x450 [ 93.442222][ T6252] device_driver_attach+0xd1/0x220 [ 93.442238][ T6252] bind_store+0xf4/0x190 [ 93.442247][ T6252] ? __pfx_bind_store+0x10/0x10 [ 93.442258][ T6252] drv_attr_store+0x74/0xb0 [ 93.442275][ T6252] ? __pfx_drv_attr_store+0x10/0x10 [ 93.442291][ T6252] sysfs_kf_write+0xf2/0x150 [ 93.442310][ T6252] kernfs_fop_write_iter+0x3e0/0x5f0 [ 93.442325][ T6252] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.442343][ T6252] vfs_write+0x6ac/0x1050 [ 93.442361][ T6252] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.442378][ T6252] ? __pfx_vfs_write+0x10/0x10 [ 93.442404][ T6252] ksys_write+0x12a/0x250 [ 93.442421][ T6252] ? __pfx_ksys_write+0x10/0x10 [ 93.442442][ T6252] do_syscall_64+0x115/0x870 [ 93.442454][ T6252] ? clear_bhb_loop+0x40/0x90 [ 93.442468][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.442480][ T6252] RIP: 0033:0x7faf72b9de99 [ 93.442490][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.442501][ T6252] RSP: 002b:00007faf73a89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.442522][ T6252] RAX: ffffffffffffffda RBX: 00007faf72e26090 RCX: 00007faf72b9de99 [ 93.442529][ T6252] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000004 [ 93.442535][ T6252] RBP: 00007faf73a89090 R08: 0000000000000000 R09: 0000000000000000 [ 93.442541][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.442547][ T6252] R13: 00007faf72e26128 R14: 00007faf72e26090 R15: 00007ffcff270148 [ 93.442561][ T6252] [ 93.442569][ T6252] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 93.778778][ T5810] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 93.934842][ T5810] usb 2-1: not running at top speed; connect to a high speed hub [ 93.954249][ T5810] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 93.957476][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 93.961384][ T5810] usb 2-1: Product: QEMU USB Tablet [ 93.963754][ T5810] usb 2-1: Manufacturer: QEMU [ 93.965181][ T5810] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 93.993900][ T5810] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 94.065986][ T5810] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 94.081632][ T6252] usb 2-1: USB disconnect, device number 2 [ 94.189672][ T6255] fido_id[6255]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 94.229772][ T6252] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 94.236141][ T6252] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 94.244422][ T6252] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 94.268737][ T6252] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 94.274481][ T6252] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 94.277857][ T6252] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 94.281952][ T6252] usb usb1: Product: EHCI Host Controller [ 94.283943][ T6252] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 94.286126][ T6252] usb usb1: SerialNumber: 0000:00:1d.7 [ 94.296540][ T6252] hub 1-0:1.0: USB hub found [ 94.299563][ T6252] hub 1-0:1.0: 6 ports detected [ 94.342557][ T6252] hub 2-0:1.0: USB hub found [ 94.345172][ T6252] hub 2-0:1.0: 2 ports detected [ 94.382506][ T6252] hub 3-0:1.0: USB hub found [ 94.385840][ T6252] hub 3-0:1.0: 2 ports detected [ 94.421401][ T6252] hub 4-0:1.0: USB hub found [ 94.423947][ T6252] hub 4-0:1.0: 2 ports detected [ 94.435690][ T42] audit: type=1400 audit(1785304266.765:260): avc: denied { unmount } for pid=6194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.458903][ T6260] ehci-pci 0000:00:1d.7: remove, state 1 [ 94.461694][ T6260] usb usb1: USB disconnect, device number 1 [ 94.539367][ T5791] usb usb1-port1: attempt power cycle [ 94.657239][ T6260] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 94.664656][ T6260] ================================================================== [ 94.667957][ T6260] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 94.671538][ T6260] Read of size 1 at addr ffff888022753480 by task syz.0.18/6260 [ 94.675909][ T6260] [ 94.677414][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 94.677440][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.677451][ T6260] Call Trace: [ 94.677460][ T6260] [ 94.677470][ T6260] dump_stack_lvl+0x100/0x190 [ 94.677497][ T6260] print_report+0x13d/0x4b0 [ 94.677523][ T6260] ? __virt_addr_valid+0x239/0x430 [ 94.677548][ T6260] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 94.677571][ T6260] kasan_report+0xdf/0x1c0 [ 94.677595][ T6260] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 94.677620][ T6260] acpi_ns_get_attached_object+0x148/0x1b0 [ 94.677643][ T6260] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 94.677667][ T6260] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 94.677686][ T6260] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 94.677710][ T6260] ? acpi_ds_create_operand+0x267/0xc20 [ 94.677737][ T6260] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 94.677759][ T6260] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 94.677781][ T6260] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 94.677798][ T6260] ? __asan_memset+0x23/0x50 [ 94.677816][ T6260] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 94.677836][ T6260] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 94.677864][ T6260] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 94.677892][ T6260] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 94.677924][ T6260] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 94.677943][ T6260] acpi_ds_exec_end_op+0xb78/0x1e60 [ 94.677971][ T6260] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 94.677998][ T6260] acpi_ps_parse_loop+0x5e1/0x26e0 [ 94.678028][ T6260] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 94.678055][ T6260] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 94.678073][ T6260] ? acpi_ut_create_thread_state+0x6d/0x170 [ 94.678104][ T6260] acpi_ps_parse_aml+0x81e/0x1120 [ 94.678134][ T6260] acpi_ps_execute_method+0x5c4/0xe90 [ 94.678156][ T6260] acpi_ns_evaluate+0x640/0x1670 [ 94.678178][ T6260] acpi_ut_evaluate_object+0xf7/0x610 [ 94.678201][ T6260] acpi_rs_get_prt_method_data+0xa0/0x150 [ 94.678223][ T6260] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 94.678244][ T6260] ? acpi_ut_status_exit+0x111/0x1c0 [ 94.678263][ T6260] ? acpi_rs_validate_parameters+0x104/0x210 [ 94.678285][ T6260] acpi_get_irq_routing_table+0xb8/0x140 [ 94.678307][ T6260] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 94.678331][ T6260] ? do_raw_spin_lock+0x128/0x260 [ 94.678358][ T6260] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 94.678381][ T6260] ? do_raw_spin_lock+0x128/0x260 [ 94.678406][ T6260] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 94.678429][ T6260] ? mark_held_locks+0x40/0x70 [ 94.678451][ T6260] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 94.678471][ T6260] acpi_pci_irq_lookup+0x8e/0x6b0 [ 94.678493][ T6260] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 94.678517][ T6260] acpi_pci_irq_disable+0x1a8/0x360 [ 94.678538][ T6260] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 94.678560][ T6260] pcibios_disable_device+0x89/0xb0 [ 94.678589][ T6260] do_pci_disable_device+0x9f/0x100 [ 94.678612][ T6260] ? __pfx_do_pci_disable_device+0x10/0x10 [ 94.678633][ T6260] ? usb_free_streams+0x2b3/0x350 [ 94.678656][ T6260] ? kfree+0x22b/0x6c0 [ 94.678685][ T6260] pci_disable_device+0x130/0x270 [ 94.678706][ T6260] usb_hcd_pci_remove+0x1ed/0x300 [ 94.678731][ T6260] pci_device_remove+0xb2/0x1d0 [ 94.678750][ T6260] ? __pfx_pci_device_remove+0x10/0x10 [ 94.678768][ T6260] device_remove+0xcb/0x180 [ 94.678790][ T6260] device_release_driver_internal+0x44e/0x620 [ 94.678817][ T6260] unbind_store+0xf8/0x110 [ 94.678836][ T6260] ? __pfx_unbind_store+0x10/0x10 [ 94.678854][ T6260] drv_attr_store+0x74/0xb0 [ 94.678881][ T6260] ? __pfx_drv_attr_store+0x10/0x10 [ 94.678936][ T6260] sysfs_kf_write+0xf2/0x150 [ 94.678965][ T6260] kernfs_fop_write_iter+0x3e0/0x5f0 [ 94.678988][ T6260] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.679016][ T6260] vfs_write+0x6ac/0x1050 [ 94.679046][ T6260] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 94.679070][ T6260] ? __pfx_vfs_write+0x10/0x10 [ 94.679104][ T6260] ksys_write+0x12a/0x250 [ 94.679130][ T6260] ? __pfx_ksys_write+0x10/0x10 [ 94.679160][ T6260] do_syscall_64+0x115/0x870 [ 94.679182][ T6260] ? clear_bhb_loop+0x40/0x90 [ 94.679204][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.679223][ T6260] RIP: 0033:0x7faf72b9de99 [ 94.679240][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.679257][ T6260] RSP: 002b:00007faf73aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.679276][ T6260] RAX: ffffffffffffffda RBX: 00007faf72e25fa0 RCX: 00007faf72b9de99 [ 94.679289][ T6260] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000003 [ 94.679300][ T6260] RBP: 00007faf72c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 94.679311][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.679322][ T6260] R13: 00007faf72e26038 R14: 00007faf72e25fa0 R15: 00007ffcff270148 [ 94.679339][ T6260] [ 94.679346][ T6260] [ 94.738638][ T64] Bluetooth: hci0: command tx timeout [ 94.740959][ T6260] Allocated by task 1: [ 94.740975][ T6260] kasan_save_stack+0x30/0x50 [ 94.741002][ T6260] kasan_save_track+0x14/0x30 [ 94.888778][ T6260] __kasan_slab_alloc+0x89/0x90 [ 94.890326][ T6260] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 94.892033][ T6260] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 94.893960][ T6260] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 94.895955][ T6260] acpi_ds_build_internal_object+0x173/0x790 [ 94.897865][ T6260] acpi_ds_create_node+0xe3/0x280 [ 94.899458][ T6260] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 94.901129][ T6260] acpi_ps_parse_loop+0x5e1/0x26e0 [ 94.902752][ T6260] acpi_ps_parse_aml+0x81e/0x1120 [ 94.904360][ T6260] acpi_ps_execute_table+0x393/0x500 [ 94.905994][ T6260] acpi_ns_execute_table+0x596/0x970 [ 94.907533][ T6260] acpi_ns_parse_table+0xcb/0x160 [ 94.909128][ T6260] acpi_ns_load_table+0xc9/0x490 [ 94.910722][ T6260] acpi_tb_load_namespace+0x2b0/0x8f0 [ 94.912434][ T6260] acpi_load_tables+0x89/0x160 [ 94.913942][ T6260] acpi_init+0x146/0x840 [ 94.915267][ T6260] do_one_initcall+0x11d/0x700 [ 94.916790][ T6260] kernel_init_freeable+0x6ea/0x7b0 [ 94.918424][ T6260] kernel_init+0x1f/0x1e0 [ 94.919780][ T6260] ret_from_fork+0x72b/0xd50 [ 94.921243][ T6260] ret_from_fork_asm+0x1a/0x30 [ 94.922770][ T6260] [ 94.923543][ T6260] Freed by task 6252: [ 94.924802][ T6260] kasan_save_stack+0x30/0x50 [ 94.926320][ T6260] kasan_save_track+0x14/0x30 [ 94.927818][ T6260] kasan_save_free_info+0x3b/0x70 [ 94.929433][ T6260] __kasan_slab_free+0x5f/0x80 [ 94.930947][ T6260] kmem_cache_free+0x127/0x6b0 [ 94.932401][ T6260] acpi_os_release_object+0x1c/0x30 [ 94.933985][ T6260] acpi_ut_delete_object_desc+0xea/0x130 [ 94.935677][ T6260] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 94.937680][ T6260] acpi_ut_update_object_reference+0x5f9/0x800 [ 94.939462][ T6260] acpi_ut_remove_reference+0x192/0x1d0 [ 94.941136][ T6260] acpi_rs_get_prt_method_data+0xcd/0x150 [ 94.942862][ T6260] acpi_get_irq_routing_table+0xb8/0x140 [ 94.944477][ T6260] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 94.946317][ T6260] acpi_pci_irq_lookup+0x8e/0x6b0 [ 94.947887][ T6260] acpi_pci_irq_enable+0x1f5/0x6f0 [ 94.949455][ T6260] pcibios_enable_device+0xb6/0xe0 [ 94.950979][ T6260] do_pci_enable_device+0x21f/0x4a0 [ 94.952567][ T6260] pci_enable_device_flags+0x27c/0x370 [ 94.954224][ T6260] usb_hcd_pci_probe+0x56/0xcb0 [ 94.955714][ T6260] ehci_pci_probe+0x35/0x50 [ 94.957149][ T6260] local_pci_probe+0xdd/0x1b0 [ 94.958643][ T6260] pci_call_probe+0x176/0x800 [ 94.960133][ T6260] pci_device_probe+0x1cd/0x370 [ 94.961679][ T6260] really_probe+0x241/0xa60 [ 94.963151][ T6260] __driver_probe_device+0x20e/0x450 [ 94.964801][ T6260] device_driver_attach+0xd1/0x220 [ 94.966616][ T6260] bind_store+0xf4/0x190 [ 94.968053][ T6260] drv_attr_store+0x74/0xb0 [ 94.969508][ T6260] sysfs_kf_write+0xf2/0x150 [ 94.970990][ T6260] kernfs_fop_write_iter+0x3e0/0x5f0 [ 94.972659][ T6260] vfs_write+0x6ac/0x1050 [ 94.974041][ T6260] ksys_write+0x12a/0x250 [ 94.975423][ T6260] do_syscall_64+0x115/0x870 [ 94.977017][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.978957][ T6260] [ 94.979744][ T6260] The buggy address belongs to the object at ffff888022753478 [ 94.979744][ T6260] which belongs to the cache Acpi-Operand of size 72 [ 94.984062][ T6260] The buggy address is located 8 bytes inside of [ 94.984062][ T6260] freed 72-byte region [ffff888022753478, ffff8880227534c0) [ 94.988873][ T6260] [ 94.989651][ T6260] The buggy address belongs to the physical page: [ 94.991639][ T6260] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880227532d8 pfn:0x22753 [ 94.994739][ T6260] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 94.997287][ T6260] page_type: f5(slab) [ 94.998561][ T6260] raw: 00fff00000000200 ffff88801bc4da40 ffffea0000898f10 ffffea000089e950 [ 95.001258][ T6260] raw: ffff8880227532d8 000000080027001e 00000000f5000000 0000000000000000 [ 95.003916][ T6260] page dumped because: kasan: bad access detected [ 95.005935][ T6260] page_owner tracks the page as allocated [ 95.007703][ T6260] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2646274022, free_ts 0 [ 95.013505][ T6260] post_alloc_hook+0xfd/0x120 [ 95.015008][ T6260] get_page_from_freelist+0xf48/0x3530 [ 95.016764][ T6260] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 95.018665][ T6260] new_slab+0xa2/0x640 [ 95.019955][ T6260] refill_objects+0xe3/0x410 [ 95.021443][ T6260] __pcs_replace_empty_main+0x376/0x680 [ 95.023187][ T6260] kmem_cache_alloc_noprof+0x46e/0x6a0 [ 95.024917][ T6260] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 95.026899][ T6260] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 95.028937][ T6260] acpi_ds_create_operand+0x6be/0xc20 [ 95.030632][ T6260] acpi_ds_eval_data_object_operands+0x125/0x640 [ 95.032651][ T6260] acpi_ds_exec_end_op+0xe41/0x1e60 [ 95.034301][ T6260] acpi_ps_parse_loop+0x5e1/0x26e0 [ 95.035921][ T6260] acpi_ps_parse_aml+0x81e/0x1120 [ 95.037514][ T6260] acpi_ps_execute_table+0x393/0x500 [ 95.039196][ T6260] acpi_ns_execute_table+0x596/0x970 [ 95.040852][ T6260] page_owner free stack trace missing [ 95.042545][ T6260] [ 95.043334][ T6260] Memory state around the buggy address: [ 95.045082][ T6260] ffff888022753380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 95.047842][ T6260] ffff888022753400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 95.050360][ T6260] >ffff888022753480: fb fb fb fb fb fb fb fb fc fc fc fc 00 00 00 00 [ 95.052863][ T6260] ^ [ 95.054153][ T6260] ffff888022753500: 00 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 00 [ 95.056803][ T6260] ffff888022753580: 00 00 fc fc fc fc 00 00 00 00 00 00 00 00 00 fc [ 95.059303][ T6260] ================================================================== [ 95.063641][ T6260] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.066043][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 95.069133][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.072297][ T6260] Call Trace: [ 95.073387][ T6260] [ 95.074321][ T6260] dump_stack_lvl+0x100/0x190 [ 95.075812][ T6260] vpanic+0x552/0x970 [ 95.077319][ T6260] ? __pfx_vpanic+0x10/0x10 [ 95.078793][ T6260] ? mark_held_locks+0x40/0x70 [ 95.080328][ T6260] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 95.082222][ T6260] panic+0xd1/0xe0 [ 95.083424][ T6260] ? __pfx_panic+0x10/0x10 [ 95.084834][ T6260] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 95.086970][ T6260] ? preempt_schedule_common+0x42/0xc0 [ 95.088722][ T6260] ? check_panic_on_warn+0x1f/0x90 [ 95.090354][ T6260] check_panic_on_warn.cold+0x19/0x34 [ 95.092050][ T6260] end_report.part.0+0x3a/0x90 [ 95.093565][ T6260] kasan_report.cold+0xe/0x18 [ 95.095092][ T6260] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 95.097014][ T6260] acpi_ns_get_attached_object+0x148/0x1b0 [ 95.098888][ T6260] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 95.100760][ T6260] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 95.102410][ T6260] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 95.104471][ T6260] ? acpi_ds_create_operand+0x267/0xc20 [ 95.106315][ T6260] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 95.108196][ T6260] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 95.110110][ T6260] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 95.111682][ T6260] ? __asan_memset+0x23/0x50 [ 95.113135][ T6260] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 95.115022][ T6260] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 95.116904][ T6260] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 95.118900][ T6260] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 95.120687][ T6260] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 95.122298][ T6260] acpi_ds_exec_end_op+0xb78/0x1e60 [ 95.123907][ T6260] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 95.125680][ T6260] acpi_ps_parse_loop+0x5e1/0x26e0 [ 95.127345][ T6260] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 95.129107][ T6260] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 95.131009][ T6260] ? acpi_ut_create_thread_state+0x6d/0x170 [ 95.132868][ T6260] acpi_ps_parse_aml+0x81e/0x1120 [ 95.134476][ T6260] acpi_ps_execute_method+0x5c4/0xe90 [ 95.136234][ T6260] acpi_ns_evaluate+0x640/0x1670 [ 95.137850][ T6260] acpi_ut_evaluate_object+0xf7/0x610 [ 95.139576][ T6260] acpi_rs_get_prt_method_data+0xa0/0x150 [ 95.141363][ T6260] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 95.143384][ T6260] ? acpi_ut_status_exit+0x111/0x1c0 [ 95.145041][ T6260] ? acpi_rs_validate_parameters+0x104/0x210 [ 95.146977][ T6260] acpi_get_irq_routing_table+0xb8/0x140 [ 95.148755][ T6260] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 95.150740][ T6260] ? do_raw_spin_lock+0x128/0x260 [ 95.152378][ T6260] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 95.154218][ T6260] ? do_raw_spin_lock+0x128/0x260 [ 95.155798][ T6260] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 95.158068][ T6260] ? mark_held_locks+0x40/0x70 [ 95.159573][ T6260] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.161417][ T6260] acpi_pci_irq_lookup+0x8e/0x6b0 [ 95.163001][ T6260] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 95.164773][ T6260] acpi_pci_irq_disable+0x1a8/0x360 [ 95.166466][ T6260] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 95.168282][ T6260] pcibios_disable_device+0x89/0xb0 [ 95.169932][ T6260] do_pci_disable_device+0x9f/0x100 [ 95.171555][ T6260] ? __pfx_do_pci_disable_device+0x10/0x10 [ 95.173372][ T6260] ? usb_free_streams+0x2b3/0x350 [ 95.174951][ T6260] ? kfree+0x22b/0x6c0 [ 95.176243][ T6260] pci_disable_device+0x130/0x270 [ 95.177835][ T6260] usb_hcd_pci_remove+0x1ed/0x300 [ 95.179419][ T6260] pci_device_remove+0xb2/0x1d0 [ 95.180960][ T6260] ? __pfx_pci_device_remove+0x10/0x10 [ 95.182649][ T6260] device_remove+0xcb/0x180 [ 95.184137][ T6260] device_release_driver_internal+0x44e/0x620 [ 95.186081][ T6260] unbind_store+0xf8/0x110 [ 95.187667][ T6260] ? __pfx_unbind_store+0x10/0x10 [ 95.189329][ T6260] drv_attr_store+0x74/0xb0 [ 95.190777][ T6260] ? __pfx_drv_attr_store+0x10/0x10 [ 95.192402][ T6260] sysfs_kf_write+0xf2/0x150 [ 95.193787][ T6260] kernfs_fop_write_iter+0x3e0/0x5f0 [ 95.195451][ T6260] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.197335][ T6260] vfs_write+0x6ac/0x1050 [ 95.198755][ T6260] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 95.200595][ T6260] ? __pfx_vfs_write+0x10/0x10 [ 95.202115][ T6260] ksys_write+0x12a/0x250 [ 95.203517][ T6260] ? __pfx_ksys_write+0x10/0x10 [ 95.205056][ T6260] do_syscall_64+0x115/0x870 [ 95.206605][ T6260] ? clear_bhb_loop+0x40/0x90 [ 95.208108][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.210184][ T6260] RIP: 0033:0x7faf72b9de99 [ 95.211879][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.218538][ T6260] RSP: 002b:00007faf73aaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.221133][ T6260] RAX: ffffffffffffffda RBX: 00007faf72e25fa0 RCX: 00007faf72b9de99 [ 95.223614][ T6260] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000003 [ 95.226132][ T6260] RBP: 00007faf72c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 95.228662][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.231141][ T6260] R13: 00007faf72e26038 R14: 00007faf72e25fa0 R15: 00007ffcff270148 [ 95.233646][ T6260] [ 95.235235][ T6260] Kernel Offset: disabled [ 95.236599][ T6260] Rebooting in 86400 seconds..