Warning: Permanently added '[localhost]:51127' (ED25519) to the list of known hosts. 2025/05/22 09:42:12 ignoring optional flag "sandboxArg"="0" [ 81.443438][ T838] cfg80211: failed to load regulatory.db 2025/05/22 09:42:13 parsed 1 programs [ 83.584415][ T40] audit: type=1400 audit(1747906935.219:119): avc: denied { unlink } for pid=6198 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.573325][ T6198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.168301][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.171215][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.176327][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.179527][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.184071][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.253552][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.256875][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.348657][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.352191][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.648720][ T6265] chnl_net:caif_netlink_parms(): no params data found [ 86.917826][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.920159][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.922652][ T6265] bridge_slave_0: entered allmulticast mode [ 86.925303][ T6265] bridge_slave_0: entered promiscuous mode [ 86.930160][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.933321][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.936386][ T6265] bridge_slave_1: entered allmulticast mode [ 86.940387][ T6265] bridge_slave_1: entered promiscuous mode [ 87.018592][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.024171][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.036166][ T40] audit: type=1401 audit(1747906938.669:120): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 87.107890][ T6265] team0: Port device team_slave_0 added [ 87.114027][ T6265] team0: Port device team_slave_1 added [ 87.188195][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.190519][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.198760][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.230910][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.234793][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.244017][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.363389][ T6265] hsr_slave_0: entered promiscuous mode [ 87.365844][ T6265] hsr_slave_1: entered promiscuous mode [ 87.602518][ T6265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.608139][ T6265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.614924][ T6265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.619819][ T6265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.660484][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.774242][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.781516][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.783909][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.791705][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.794846][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.943699][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.971015][ T6265] veth0_vlan: entered promiscuous mode [ 87.983505][ T6265] veth1_vlan: entered promiscuous mode [ 88.007376][ T6265] veth0_macvtap: entered promiscuous mode [ 88.011559][ T6265] veth1_macvtap: entered promiscuous mode [ 88.020562][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.029116][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.035650][ T6265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.038433][ T6265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.041344][ T6265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.044393][ T6265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/05/22 09:42:19 executed programs: 0 [ 88.165406][ T6337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.171652][ T6337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.175177][ T6337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.178175][ T6337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.193275][ T5989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.197166][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.200578][ T5989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.204623][ T6344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.207127][ T5989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.209373][ T6344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.210810][ T5989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.216621][ T5989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.219366][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.219529][ T6344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.222284][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.225966][ T6344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.228952][ T5989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.230086][ T5292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.231196][ T6340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.239168][ T5989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.520348][ T6332] chnl_net:caif_netlink_parms(): no params data found [ 88.659547][ T6339] chnl_net:caif_netlink_parms(): no params data found [ 88.674854][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 88.715516][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 88.726156][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.729222][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.732458][ T6332] bridge_slave_0: entered allmulticast mode [ 88.736369][ T6332] bridge_slave_0: entered promiscuous mode [ 88.772915][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.776068][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.779112][ T6332] bridge_slave_1: entered allmulticast mode [ 88.783137][ T6332] bridge_slave_1: entered promiscuous mode [ 88.822433][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.922442][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.960607][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.003344][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.006179][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.009054][ T6339] bridge_slave_0: entered allmulticast mode [ 89.013007][ T6339] bridge_slave_0: entered promiscuous mode [ 89.098802][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.101850][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.105254][ T6339] bridge_slave_1: entered allmulticast mode [ 89.108084][ T6339] bridge_slave_1: entered promiscuous mode [ 89.152537][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.154816][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.157094][ T6334] bridge_slave_0: entered allmulticast mode [ 89.159694][ T6334] bridge_slave_0: entered promiscuous mode [ 89.163570][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.165860][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.168137][ T6334] bridge_slave_1: entered allmulticast mode [ 89.170810][ T6334] bridge_slave_1: entered promiscuous mode [ 89.176016][ T6332] team0: Port device team_slave_0 added [ 89.198374][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.201516][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.205029][ T6342] bridge_slave_0: entered allmulticast mode [ 89.208996][ T6342] bridge_slave_0: entered promiscuous mode [ 89.214298][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.217294][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.220287][ T6342] bridge_slave_1: entered allmulticast mode [ 89.224333][ T6342] bridge_slave_1: entered promiscuous mode [ 89.260400][ T6332] team0: Port device team_slave_1 added [ 89.265985][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.289114][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.319553][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.362737][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.402347][ T6339] team0: Port device team_slave_0 added [ 89.405903][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.431031][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.434250][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.442486][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.447662][ T6339] team0: Port device team_slave_1 added [ 89.451146][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.485193][ T6334] team0: Port device team_slave_0 added [ 89.487923][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.490739][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.501397][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.554230][ T6334] team0: Port device team_slave_1 added [ 89.616358][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.618519][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.628720][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.635043][ T6342] team0: Port device team_slave_0 added [ 89.638614][ T6342] team0: Port device team_slave_1 added [ 89.655387][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.658201][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.669591][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.721861][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.724886][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.734089][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.739495][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.742272][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.750165][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.819865][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.822940][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.835648][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.860910][ T6332] hsr_slave_0: entered promiscuous mode [ 89.865153][ T6332] hsr_slave_1: entered promiscuous mode [ 89.867269][ T6332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.869666][ T6332] Cannot create hsr debugfs directory [ 89.892463][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.895169][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.905831][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.919234][ T6339] hsr_slave_0: entered promiscuous mode [ 89.921973][ T6339] hsr_slave_1: entered promiscuous mode [ 89.924325][ T6339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.926706][ T6339] Cannot create hsr debugfs directory [ 89.946449][ T6334] hsr_slave_0: entered promiscuous mode [ 89.948691][ T6334] hsr_slave_1: entered promiscuous mode [ 89.950800][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.953419][ T6334] Cannot create hsr debugfs directory [ 90.088259][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.116112][ T6342] hsr_slave_0: entered promiscuous mode [ 90.118439][ T6342] hsr_slave_1: entered promiscuous mode [ 90.120526][ T6342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.123393][ T6342] Cannot create hsr debugfs directory [ 90.228275][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.252966][ T5989] Bluetooth: hci2: command tx timeout [ 90.253022][ T6337] Bluetooth: hci0: command tx timeout [ 90.322445][ T6337] Bluetooth: hci3: command tx timeout [ 90.322676][ T5989] Bluetooth: hci1: command tx timeout [ 90.781993][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.950131][ T6332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.955712][ T6332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.959940][ T6332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.967644][ T6332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.023001][ T6339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.030244][ T6339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.036744][ T6339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.043097][ T6339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.097957][ T6334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.103374][ T6334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.110885][ T6334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.124057][ T6334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.151328][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.166834][ T6332] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.181853][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.184088][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.193175][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.196475][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.204574][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.236590][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.247553][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.249904][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.265167][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.267771][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.325060][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.353033][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.369535][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.372762][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.391862][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.394230][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.455158][ T6332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.499510][ T6332] veth0_vlan: entered promiscuous mode [ 91.510469][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.517974][ T6332] veth1_vlan: entered promiscuous mode [ 91.538563][ T6332] veth0_macvtap: entered promiscuous mode [ 91.548306][ T6332] veth1_macvtap: entered promiscuous mode [ 91.557710][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.570930][ T6339] veth0_vlan: entered promiscuous mode [ 91.575523][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.585249][ T6332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.595358][ T6332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.598065][ T6332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.601204][ T6332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.605389][ T6332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611114][ T6339] veth1_vlan: entered promiscuous mode [ 91.624166][ T6334] veth0_vlan: entered promiscuous mode [ 91.647814][ T6334] veth1_vlan: entered promiscuous mode [ 91.677584][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.677963][ T6339] veth0_macvtap: entered promiscuous mode [ 91.680880][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.686340][ T6339] veth1_macvtap: entered promiscuous mode [ 91.713923][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.714638][ T6334] veth0_macvtap: entered promiscuous mode [ 91.717040][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.721538][ T6334] veth1_macvtap: entered promiscuous mode [ 91.733346][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.746661][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.755635][ T6339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.759131][ T6339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.761979][ T6339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.765910][ T6339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.779042][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.786422][ T40] audit: type=1400 audit(1747906943.419:121): avc: denied { read write } for pid=6435 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.787628][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.794068][ T40] audit: type=1400 audit(1747906943.419:122): avc: denied { open } for pid=6435 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.805050][ T40] audit: type=1400 audit(1747906943.419:123): avc: denied { ioctl } for pid=6435 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.809302][ T6334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.817964][ T6334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.821518][ T6334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.826402][ T6334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.897097][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.900201][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.923462][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.926407][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.944808][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.947277][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.960354][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.969348][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.042720][ T6431] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.086667][ T1143] bridge_slave_1: left allmulticast mode [ 92.089163][ T1143] bridge_slave_1: left promiscuous mode [ 92.091526][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.098634][ T1143] bridge_slave_0: left allmulticast mode [ 92.101112][ T1143] bridge_slave_0: left promiscuous mode [ 92.105307][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.202242][ T6431] usb 5-1: Using ep0 maxpacket: 8 [ 92.207622][ T6431] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.212816][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.216884][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 92.220578][ T6431] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.225101][ T6431] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.228424][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.252275][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 92.262423][ T6085] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.322395][ T5989] Bluetooth: hci0: command tx timeout [ 92.324867][ T5989] Bluetooth: hci2: command tx timeout [ 92.399805][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.402515][ T5989] Bluetooth: hci1: command tx timeout [ 92.402549][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 92.402563][ T6337] Bluetooth: hci3: command tx timeout [ 92.405325][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.413352][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.416706][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.420510][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 92.424550][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.426834][ T1143] bond0 (unregistering): Released all slaves [ 92.429433][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.434964][ T6085] usb 6-1: Using ep0 maxpacket: 8 [ 92.435253][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.440093][ T6085] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.445752][ T6431] usb 5-1: usb_control_msg returned -32 [ 92.447445][ T6085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.451009][ T6431] usbtmc 5-1:16.0: can't read capabilities [ 92.453879][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.455685][ T6085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 92.460322][ T6085] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.464363][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.465763][ T6085] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.468526][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.472588][ T6085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.475379][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.493726][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.499380][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.512816][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.517402][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.547485][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.550643][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.579940][ T5918] usb 5-1: USB disconnect, device number 2 [ 92.606506][ T1143] hsr_slave_0: left promiscuous mode [ 92.609773][ T1143] hsr_slave_1: left promiscuous mode [ 92.613531][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.616585][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.621052][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.624686][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.659726][ T1143] veth1_macvtap: left promiscuous mode [ 92.661710][ T839] usb 7-1: usb_control_msg returned -32 [ 92.662148][ T1143] veth0_macvtap: left promiscuous mode [ 92.664604][ T839] usbtmc 7-1:16.0: can't read capabilities [ 92.666293][ T1143] veth1_vlan: left promiscuous mode [ 92.670404][ T1143] veth0_vlan: left promiscuous mode [ 92.671024][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.680342][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.685911][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.690639][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.696434][ T6085] usb 6-1: usb_control_msg returned -32 [ 92.698245][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.698690][ T6085] usbtmc 6-1:16.0: can't read capabilities [ 92.699734][ T40] audit: type=1400 audit(1747906944.339:124): avc: denied { write } for pid=6446 comm="syz.1.16" name="usbtmc0" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.702535][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.723853][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.727625][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.731736][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.741394][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.753992][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.757968][ T65] usb 7-1: USB disconnect, device number 2 [ 92.760689][ T6431] usb 6-1: USB disconnect, device number 2 2025/05/22 09:42:24 executed programs: 11 [ 93.193634][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 93.253286][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 93.333886][ T6431] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.482156][ T6431] usb 5-1: Using ep0 maxpacket: 8 [ 93.487580][ T6431] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.491262][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.494498][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 93.497658][ T6431] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.503019][ T6431] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.506905][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.542243][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 93.545478][ T6085] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.695793][ T6085] usb 6-1: Using ep0 maxpacket: 8 [ 93.698080][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 93.703053][ T6085] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.707806][ T6085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.712872][ T6085] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 93.717538][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.722372][ T6431] usb 5-1: usb_control_msg returned -32 [ 93.722396][ T6431] usbtmc 5-1:16.0: can't read capabilities [ 93.727269][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.731015][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.732229][ T6085] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.740036][ T6085] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.744008][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 93.747503][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.752005][ T6085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.755429][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.755432][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.761578][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.763468][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.768775][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.772313][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.775307][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.779950][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.789683][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.792767][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.802690][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.818653][ T6431] usb 5-1: USB disconnect, device number 3 [ 93.848992][ T6342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.859910][ T6342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.868208][ T6342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.876318][ T6342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.918524][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.932373][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.939573][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.942279][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.949655][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.951941][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.986063][ T6085] usb 6-1: usb_control_msg returned -32 [ 93.988111][ T6085] usbtmc 6-1:16.0: can't read capabilities [ 93.989775][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.001319][ T34] usb 7-1: usb_control_msg returned -32 [ 94.005749][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.006174][ T34] usbtmc 7-1:16.0: can't read capabilities [ 94.008906][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.018760][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.021723][ T34] usb 7-1: USB disconnect, device number 3 [ 94.026789][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.031026][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.034876][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.037656][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.040624][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.047047][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.064448][ T6497] usb 6-1: USB disconnect, device number 3 [ 94.109071][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.130107][ T6342] veth0_vlan: entered promiscuous mode [ 94.139854][ T6342] veth1_vlan: entered promiscuous mode [ 94.154768][ T6342] veth0_macvtap: entered promiscuous mode [ 94.158474][ T6342] veth1_macvtap: entered promiscuous mode [ 94.167217][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.174421][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.179301][ T6342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.182067][ T6342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.185433][ T6342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188119][ T6342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.222319][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.225337][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.249286][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.251742][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.403506][ T5989] Bluetooth: hci2: command tx timeout [ 94.404397][ T6337] Bluetooth: hci0: command tx timeout [ 94.482324][ T6337] Bluetooth: hci1: command tx timeout [ 94.482547][ T5989] Bluetooth: hci3: command tx timeout [ 94.532390][ T838] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 94.592495][ T6431] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.702647][ T838] usb 8-1: Using ep0 maxpacket: 8 [ 94.707285][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.712345][ T838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.716443][ T838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 94.720573][ T838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.726643][ T838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.729536][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.744137][ T6431] usb 5-1: Using ep0 maxpacket: 8 [ 94.747838][ T6431] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.752480][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.756475][ T6431] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 94.760424][ T6431] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.766320][ T6431] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.769956][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.784515][ T839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 94.842384][ T6530] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.932197][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 94.935314][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.938863][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.941975][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 94.942241][ T838] usb 8-1: usb_control_msg returned -32 [ 94.944182][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.944587][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.945062][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.945174][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.945199][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.945211][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.946821][ T838] usbtmc 8-1:16.0: can't read capabilities [ 94.949698][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.971972][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.975755][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.978623][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.979959][ T6431] usb 5-1: usb_control_msg returned -32 [ 94.981710][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.983491][ T6431] usbtmc 5-1:16.0: can't read capabilities [ 94.988207][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.997310][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.000722][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.005379][ C1] ================================================================== [ 95.008229][ C1] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40 [ 95.010821][ C1] Write of size 4 at addr ffff888024147110 by task syz.0.22/6526 [ 95.014300][ C1] [ 95.015361][ C1] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.22 Not tainted 6.15.0-rc7-syzkaller-gd608703fcdd9 #0 PREEMPT(full) [ 95.015375][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.015382][ C1] Call Trace: [ 95.015386][ C1] [ 95.015391][ C1] dump_stack_lvl+0x116/0x1f0 [ 95.015410][ C1] print_report+0xc3/0x670 [ 95.015421][ C1] ? __virt_addr_valid+0x5e/0x590 [ 95.015436][ C1] ? __phys_addr+0xc6/0x150 [ 95.015451][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 95.015461][ C1] kasan_report+0xe0/0x110 [ 95.015472][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 95.015483][ C1] kasan_check_range+0xef/0x1a0 [ 95.015495][ C1] usb_anchor_suspend_wakeups+0x28/0x40 [ 95.015505][ C1] __usb_hcd_giveback_urb+0x224/0x6e0 [ 95.015521][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 95.015536][ C1] dummy_timer+0x180e/0x3a20 [ 95.015547][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 95.015559][ C1] ? find_held_lock+0x2b/0x80 [ 95.015572][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 95.015583][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.015597][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 95.015608][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 95.015619][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 95.015628][ C1] ? rcu_is_watching+0x12/0xc0 [ 95.015641][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.015654][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 95.015662][ C1] __hrtimer_run_queues+0x202/0xad0 [ 95.015675][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 95.015686][ C1] ? read_tsc+0x9/0x20 [ 95.015702][ C1] hrtimer_run_softirq+0x17d/0x350 [ 95.015713][ C1] handle_softirqs+0x216/0x8e0 [ 95.015728][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 95.015741][ C1] __irq_exit_rcu+0x109/0x170 [ 95.015753][ C1] irq_exit_rcu+0x9/0x30 [ 95.015765][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 95.015779][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.015791][ C1] RIP: 0033:0x7fded2b7ff19 [ 95.015799][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.015810][ C1] RSP: 002b:00007fded39ad058 EFLAGS: 00000246 [ 95.015818][ C1] RAX: fffffffffffffff7 RBX: 00007fded2d45fa0 RCX: 00007fded2b7ff19 [ 95.015825][ C1] RDX: 0000000020000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 95.015831][ C1] RBP: 00007fded2bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 95.015837][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.015843][ C1] R13: 0000000000000000 R14: 00007fded2d45fa0 R15: 00007ffd8146d508 [ 95.015852][ C1] [ 95.015856][ C1] [ 95.015972][ T9] usb 8-1: USB disconnect, device number 2 [ 95.020062][ C1] Allocated by task 6526: [ 95.118802][ C1] kasan_save_stack+0x33/0x60 [ 95.120762][ C1] kasan_save_track+0x14/0x30 [ 95.122737][ C1] __kasan_kmalloc+0xaa/0xb0 [ 95.124715][ C1] usbtmc_open+0xa9/0x9b0 [ 95.126523][ C1] usb_open+0x189/0x220 [ 95.128363][ C1] chrdev_open+0x231/0x6a0 [ 95.130258][ C1] do_dentry_open+0x744/0x1c10 [ 95.132245][ C1] vfs_open+0x82/0x3f0 [ 95.133988][ C1] path_openat+0x1e5e/0x2d40 [ 95.135913][ C1] do_filp_open+0x20b/0x470 [ 95.137467][ C1] do_sys_openat2+0x11b/0x1d0 [ 95.139371][ C1] __x64_sys_openat+0x174/0x210 [ 95.141383][ C1] do_syscall_64+0xcd/0x260 [ 95.143237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.145604][ C1] [ 95.146575][ C1] Freed by task 6526: [ 95.148238][ C1] kasan_save_stack+0x33/0x60 [ 95.150225][ C1] kasan_save_track+0x14/0x30 [ 95.152146][ C1] kasan_save_free_info+0x3b/0x60 [ 95.154258][ C1] __kasan_slab_free+0x51/0x70 [ 95.156243][ C1] kfree+0x2b6/0x4d0 [ 95.157897][ C1] usbtmc_release+0x271/0x380 [ 95.159882][ C1] __fput+0x3ff/0xb70 [ 95.161577][ C1] task_work_run+0x150/0x240 [ 95.163473][ C1] syscall_exit_to_user_mode+0x27b/0x2a0 [ 95.165752][ C1] do_syscall_64+0xda/0x260 [ 95.167575][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.169913][ C1] [ 95.170902][ C1] The buggy address belongs to the object at ffff888024147000 [ 95.170902][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 95.172806][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.176463][ C1] The buggy address is located 272 bytes inside of [ 95.176463][ C1] freed 1024-byte region [ffff888024147000, ffff888024147400) [ 95.176486][ C1] [ 95.176490][ C1] The buggy address belongs to the physical page: [ 95.176497][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024147800 pfn:0x24140 [ 95.176514][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.176527][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.187242][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.190194][ C1] page_type: f5(slab) [ 95.190207][ C1] raw: 00fff00000000040 ffff88801b442dc0 0000000000000000 0000000000000001 [ 95.202503][ C1] raw: ffff888024147800 000000000010000f 00000000f5000000 0000000000000000 [ 95.205549][ C1] head: 00fff00000000040 ffff88801b442dc0 0000000000000000 0000000000000001 [ 95.205741][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.208946][ C1] head: ffff888024147800 000000000010000f 00000000f5000000 0000000000000000 [ 95.208963][ C1] head: 00fff00000000003 ffffea0000905001 00000000ffffffff 00000000ffffffff [ 95.208972][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.208978][ C1] page dumped because: kasan: bad access detected [ 95.208985][ C1] page_owner tracks the page as allocated [ 95.208988][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 66, tgid 66 (kworker/u32:3), ts 93070675262, free_ts 92955148522 [ 95.215762][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.217301][ C1] post_alloc_hook+0x181/0x1b0 [ 95.222178][ T40] audit: type=1400 audit(1747906946.849:125): avc: denied { read } for pid=5327 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 95.223847][ C1] get_page_from_freelist+0x135c/0x3920 [ 95.223860][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 95.223870][ C1] alloc_pages_mpol+0x1fb/0x550 [ 95.223880][ C1] new_slab+0x244/0x340 [ 95.229684][ T40] audit: type=1400 audit(1747906946.849:126): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.232072][ C1] ___slab_alloc+0xd9c/0x1940 [ 95.232091][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 95.232105][ C1] __kmalloc_noprof+0x2f2/0x510 [ 95.232113][ C1] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 95.232128][ C1] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 95.232140][ C1] ieee80211_iface_work+0xbf4/0x1020 [ 95.232152][ C1] cfg80211_wiphy_work+0x3df/0x550 [ 95.232162][ C1] process_one_work+0x9cf/0x1b70 [ 95.232173][ C1] worker_thread+0x6c8/0xf10 [ 95.232183][ C1] kthread+0x3c2/0x780 [ 95.232191][ C1] ret_from_fork+0x45/0x80 [ 95.232201][ C1] page last free pid 58 tgid 58 stack trace: [ 95.232208][ C1] __free_frozen_pages+0x69d/0xff0 [ 95.236596][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.241449][ C1] qlist_free_all+0x4e/0x120 [ 95.241484][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 95.246591][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.247749][ C1] __kasan_slab_alloc+0x69/0x90 [ 95.249381][ T40] audit: type=1400 audit(1747906946.849:127): avc: denied { write } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.257843][ C1] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 95.257877][ C1] nsim_fib_event_work+0x8bb/0x2e80 [ 95.257904][ C1] process_one_work+0x9cf/0x1b70 [ 95.257923][ C1] worker_thread+0x6c8/0xf10 [ 95.257941][ C1] kthread+0x3c2/0x780 [ 95.257962][ C1] ret_from_fork+0x45/0x80 [ 95.257980][ C1] ret_from_fork_asm+0x1a/0x30 [ 95.261678][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.261711][ C1] [ 95.265635][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.265737][ C1] Memory state around the buggy address: [ 95.269167][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.269842][ C1] ffff888024147000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.269858][ C1] ffff888024147080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.269871][ C1] >ffff888024147100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.274326][ T40] audit: type=1400 audit(1747906946.849:128): avc: denied { add_name } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.275487][ C1] ^ [ 95.275500][ C1] ffff888024147180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.275513][ C1] ffff888024147200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.278441][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.278663][ C1] ================================================================== [ 95.278676][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.278690][ C1] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.22 Not tainted 6.15.0-rc7-syzkaller-gd608703fcdd9 #0 PREEMPT(full) [ 95.278714][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.278726][ C1] Call Trace: [ 95.278733][ C1] [ 95.278741][ C1] dump_stack_lvl+0x3d/0x1f0 [ 95.278772][ C1] panic+0x71c/0x800 [ 95.278800][ C1] ? __pfx_panic+0x10/0x10 [ 95.278829][ C1] ? __pfx__printk+0x10/0x10 [ 95.278857][ C1] ? end_report+0x4c/0x170 [ 95.278876][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 95.278895][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 95.278914][ C1] check_panic_on_warn+0xab/0xb0 [ 95.278933][ C1] end_report+0x107/0x170 [ 95.278951][ C1] kasan_report+0xee/0x110 [ 95.278977][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 95.278999][ C1] kasan_check_range+0xef/0x1a0 [ 95.279023][ C1] usb_anchor_suspend_wakeups+0x28/0x40 [ 95.279042][ C1] __usb_hcd_giveback_urb+0x224/0x6e0 [ 95.279070][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 95.279097][ C1] dummy_timer+0x180e/0x3a20 [ 95.279118][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 95.279139][ C1] ? find_held_lock+0x2b/0x80 [ 95.279162][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 95.279182][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.279207][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 95.279228][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 95.279249][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 95.279267][ C1] ? rcu_is_watching+0x12/0xc0 [ 95.279288][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.279314][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 95.279331][ C1] __hrtimer_run_queues+0x202/0xad0 [ 95.279356][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 95.279376][ C1] ? read_tsc+0x9/0x20 [ 95.279406][ C1] hrtimer_run_softirq+0x17d/0x350 [ 95.279428][ C1] handle_softirqs+0x216/0x8e0 [ 95.279454][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 95.279479][ C1] __irq_exit_rcu+0x109/0x170 [ 95.279501][ C1] irq_exit_rcu+0x9/0x30 [ 95.279522][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 95.279548][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.279569][ C1] RIP: 0033:0x7fded2b7ff19 [ 95.279584][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.279602][ C1] RSP: 002b:00007fded39ad058 EFLAGS: 00000246 [ 95.279619][ C1] RAX: fffffffffffffff7 RBX: 00007fded2d45fa0 RCX: 00007fded2b7ff19 [ 95.279632][ C1] RDX: 0000000020000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 95.279645][ C1] RBP: 00007fded2bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 95.279656][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.279668][ C1] R13: 0000000000000000 R14: 00007fded2d45fa0 R15: 00007ffd8146d508 [ 95.279685][ C1] [ 95.451254][ C1] Kernel Offset: disabled [ 95.452592][ C1] Rebooting in 86400 seconds..