Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2026/09/09 15:37:47 parsed 1 programs 2026/09/09 15:37:47 serving rpc on tcp://35165 Setting up swapspace version 1, size = 127995904 bytes [ 41.530172][ T36] audit: type=1400 audit(1788968269.190:106): avc: denied { unlink } for pid=421 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.582513][ T421] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.485920][ T36] audit: type=1401 audit(1788968270.140:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 42.845366][ T36] audit: type=1400 audit(1788968270.500:108): avc: denied { create } for pid=452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.976322][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.983536][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.990962][ T448] bridge_slave_0: entered allmulticast mode [ 42.997406][ T448] bridge_slave_0: entered promiscuous mode [ 43.005201][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.012617][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.019769][ T448] bridge_slave_1: entered allmulticast mode [ 43.026265][ T448] bridge_slave_1: entered promiscuous mode [ 43.293055][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.300200][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.307934][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.315000][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.375384][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.396009][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.466275][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.473932][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.488232][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.495329][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.563252][ T448] veth0_vlan: entered promiscuous mode [ 43.596746][ T448] veth1_macvtap: entered promiscuous mode 2026/09/09 15:37:51 executed programs: 0 [ 43.707279][ T12] bridge_slave_1: left allmulticast mode [ 43.713016][ T12] bridge_slave_1: left promiscuous mode [ 43.718806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.726708][ T12] bridge_slave_0: left allmulticast mode [ 43.739099][ T12] bridge_slave_0: left promiscuous mode [ 43.744792][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.873166][ T12] veth1_macvtap: left promiscuous mode [ 43.878852][ T12] veth0_vlan: left promiscuous mode [ 43.966157][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.973464][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.980933][ T490] bridge_slave_0: entered allmulticast mode [ 43.988011][ T490] bridge_slave_0: entered promiscuous mode [ 44.000893][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.008030][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.015620][ T490] bridge_slave_1: entered allmulticast mode [ 44.022364][ T490] bridge_slave_1: entered promiscuous mode [ 44.073650][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.080855][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.088050][ T493] bridge_slave_0: entered allmulticast mode [ 44.094332][ T493] bridge_slave_0: entered promiscuous mode [ 44.104131][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.111243][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.118404][ T493] bridge_slave_1: entered allmulticast mode [ 44.124864][ T493] bridge_slave_1: entered promiscuous mode [ 44.159793][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.166937][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.174252][ T487] bridge_slave_0: entered allmulticast mode [ 44.180764][ T487] bridge_slave_0: entered promiscuous mode [ 44.187104][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.194190][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.201671][ T492] bridge_slave_0: entered allmulticast mode [ 44.208132][ T492] bridge_slave_0: entered promiscuous mode [ 44.217939][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.225111][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.232745][ T487] bridge_slave_1: entered allmulticast mode [ 44.239456][ T487] bridge_slave_1: entered promiscuous mode [ 44.245600][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.252782][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.259923][ T492] bridge_slave_1: entered allmulticast mode [ 44.266259][ T492] bridge_slave_1: entered promiscuous mode [ 44.444106][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.451216][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.458554][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.465614][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.478487][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.485664][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.494059][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.501165][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.512058][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.519442][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.526780][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.533825][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.559428][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.566562][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.573896][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.581042][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.622845][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.630825][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.638499][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.646275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.654969][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.663566][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.671192][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.678512][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.696316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.703508][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.711180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.718339][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.730404][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.737505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.745199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.752514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.766584][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.773711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.781922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.789128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.812869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.820148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.827946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.835034][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.872379][ T492] veth0_vlan: entered promiscuous mode [ 44.895115][ T490] veth0_vlan: entered promiscuous mode [ 44.905161][ T487] veth0_vlan: entered promiscuous mode [ 44.926098][ T493] veth0_vlan: entered promiscuous mode [ 44.939472][ T490] veth1_macvtap: entered promiscuous mode [ 44.945844][ T492] veth1_macvtap: entered promiscuous mode [ 44.962111][ T493] veth1_macvtap: entered promiscuous mode [ 44.969749][ T487] veth1_macvtap: entered promiscuous mode [ 45.033856][ T36] audit: type=1400 audit(1788968272.690:109): avc: denied { read write } for pid=508 comm="syz.5.18" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.063000][ T36] audit: type=1400 audit(1788968272.690:110): avc: denied { open } for pid=508 comm="syz.5.18" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.131111][ T36] audit: type=1400 audit(1788968272.690:111): avc: denied { ioctl } for pid=508 comm="syz.5.18" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.285969][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.335911][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 45.345963][ T507] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 45.353514][ T383] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.447402][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.461369][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.470780][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.479099][ T10] usb 6-1: SerialNumber: syz [ 45.487979][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.502658][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.512275][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.520481][ T46] usb 3-1: SerialNumber: syz [ 45.526115][ T383] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.539359][ T507] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.555686][ T383] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.566097][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.574166][ T383] usb 1-1: SerialNumber: syz [ 45.578891][ T507] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.588831][ T507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.597653][ T507] usb 4-1: SerialNumber: syz [ 46.088028][ T36] audit: type=1400 audit(1788968273.750:112): avc: denied { mount } for pid=508 comm="syz.5.18" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.097704][ T383] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 46.122064][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 46.132157][ T10] usb 6-1: USB disconnect, device number 2 [ 46.146519][ T383] usb 1-1: USB disconnect, device number 2 [ 46.168494][ T46] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 46.177807][ T46] usb 3-1: USB disconnect, device number 2 [ 46.206349][ T515] ================================================================== [ 46.215234][ T515] BUG: KASAN: slab-use-after-free in string+0x20f/0x2b0 [ 46.222528][ T515] Read of size 1 at addr ffff88810672c4e0 by task syz.0.17/515 [ 46.230327][ T515] [ 46.232711][ T515] CPU: 0 UID: 0 PID: 515 Comm: syz.0.17 Not tainted syzkaller #0 8bdede19488dc39e9141486945817d855ff9c5f3 [ 46.232747][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.232769][ T515] Call Trace: [ 46.232777][ T515] [ 46.232788][ T515] __dump_stack+0x21/0x30 [ 46.232829][ T515] dump_stack_lvl+0x140/0x1c0 [ 46.232862][ T515] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.232897][ T515] ? update_curr+0x6b9/0x9c0 [ 46.232939][ T515] print_address_description+0x71/0x210 [ 46.232972][ T515] print_report+0x4a/0x70 [ 46.233003][ T515] kasan_report+0x162/0x1a0 [ 46.233034][ T515] ? string+0x20f/0x2b0 [ 46.233069][ T515] ? string+0x20f/0x2b0 [ 46.233099][ T515] __asan_report_load1_noabort+0x18/0x20 [ 46.233123][ T515] string+0x20f/0x2b0 [ 46.233155][ T515] vsnprintf+0xe65/0x1ad0 [ 46.233190][ T515] snprintf+0xe9/0x140 [ 46.233223][ T515] ? __kernel_text_address+0x11/0x40 [ 46.233254][ T515] ? __cfi_snprintf+0x10/0x10 [ 46.233288][ T515] ? dev_vprintk_emit+0x179/0x400 [ 46.233315][ T515] dev_vprintk_emit+0x313/0x400 [ 46.233342][ T515] ? __cfi_dev_vprintk_emit+0x10/0x10 [ 46.233369][ T515] ? avc_has_extended_perms+0x7fb/0xe60 [ 46.233401][ T515] dev_printk_emit+0xef/0x150 [ 46.233429][ T515] ? __cfi_dev_printk_emit+0x10/0x10 [ 46.233458][ T515] __dev_printk+0x17f/0x1b0 [ 46.233483][ T515] _dev_err+0x11f/0x180 [ 46.233510][ T515] ? __cfi__dev_err+0x10/0x10 [ 46.233536][ T515] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 46.233572][ T515] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 46.233609][ T515] ? dummy_set_halt+0xe6/0x1c0 [ 46.233632][ T515] raw_ioctl+0x2929/0x37a0 [ 46.233678][ T515] ? __cfi_futex_wait+0x10/0x10 [ 46.233701][ T515] ? __cfi_raw_ioctl+0x10/0x10 [ 46.233735][ T515] ? selinux_file_ioctl+0x732/0x1480 [ 46.233761][ T515] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 46.233793][ T515] ? do_futex+0x32a/0x510 [ 46.233825][ T515] ? __cfi_do_futex+0x10/0x10 [ 46.233855][ T515] ? get_timespec64+0x11a/0x1b0 [ 46.233889][ T515] ? __fget_files+0x2bc/0x330 [ 46.233919][ T515] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.233949][ T515] ? security_file_ioctl+0x3e/0x110 [ 46.233971][ T515] ? __cfi_raw_ioctl+0x10/0x10 [ 46.234005][ T515] __se_sys_ioctl+0x126/0x1b0 [ 46.234036][ T515] __x64_sys_ioctl+0x7f/0xa0 [ 46.234062][ T515] x64_sys_call+0x1878/0x2ee0 [ 46.234082][ T515] do_syscall_64+0x57/0xf0 [ 46.234102][ T515] ? clear_bhb_loop+0x50/0xa0 [ 46.234132][ T515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.234161][ T515] RIP: 0033:0x7f761c19db2b [ 46.234193][ T515] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 46.234213][ T515] RSP: 002b:00007f761d0a3f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.234250][ T515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f761c19db2b [ 46.234268][ T515] RDX: 0000000000000000 RSI: 000000000000550c RDI: 0000000000000003 [ 46.234283][ T515] RBP: 00007f761c233eaf R08: 0000000000000003 R09: 0000000000000409 [ 46.234299][ T515] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 46.234314][ T515] R13: 0000200000000080 R14: 00007f761c425fa0 R15: 00007fff477cf2a8 [ 46.234335][ T515] [ 46.234344][ T515] [ 46.561883][ T515] Allocated by task 1: [ 46.565991][ T515] kasan_save_track+0x3e/0x80 [ 46.570744][ T515] kasan_save_alloc_info+0x3a/0x50 [ 46.575913][ T515] __kasan_kmalloc+0x96/0xb0 [ 46.580656][ T515] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 46.587219][ T515] kvasprintf+0xf1/0x260 [ 46.591540][ T515] kvasprintf_const+0xf6/0x250 [ 46.596362][ T515] kobject_set_name_vargs+0x65/0x120 [ 46.601715][ T515] dev_set_name+0xe3/0x140 [ 46.606390][ T515] usb_add_gadget+0x436/0x780 [ 46.611118][ T515] usb_add_gadget_udc+0x11e/0x160 [ 46.616189][ T515] dummy_udc_probe+0x6ea/0x7f0 [ 46.621269][ T515] platform_probe+0x17a/0x200 [ 46.626008][ T515] really_probe+0x2e1/0x8b0 [ 46.630646][ T515] __driver_probe_device+0x193/0x280 [ 46.635979][ T515] driver_probe_device+0x54/0x3f0 [ 46.641137][ T515] __device_attach_driver+0x2f1/0x4b0 [ 46.646661][ T515] bus_for_each_drv+0x264/0x300 [ 46.651574][ T515] __device_attach+0x2c4/0x3c0 [ 46.656401][ T515] device_initial_probe+0x1e/0x30 [ 46.661483][ T515] bus_probe_device+0x18b/0x270 [ 46.666594][ T515] device_add+0x7fd/0xbf0 [ 46.670995][ T515] platform_device_add+0x464/0x6c0 [ 46.676194][ T515] dummy_hcd_init+0xce2/0x1230 [ 46.681013][ T515] do_one_initcall+0x1e8/0x6a0 [ 46.685954][ T515] do_initcall_level+0x174/0x2e5 [ 46.690956][ T515] do_initcalls+0x7e/0x160 [ 46.695453][ T515] do_basic_setup+0x95/0xb0 [ 46.700273][ T515] kernel_init_freeable+0x2b1/0x400 [ 46.705516][ T515] kernel_init+0x21/0x1e0 [ 46.709903][ T515] ret_from_fork+0x64/0xa0 [ 46.714384][ T515] ret_from_fork_asm+0x1a/0x30 [ 46.719190][ T515] [ 46.721543][ T515] Freed by task 509: [ 46.725461][ T515] kasan_save_track+0x3e/0x80 [ 46.730190][ T515] kasan_save_free_info+0x44/0x50 [ 46.735276][ T515] __kasan_slab_free+0x5f/0x80 [ 46.740086][ T515] kfree+0x158/0x440 [ 46.744022][ T515] kfree_const+0x3d/0x50 [ 46.748324][ T515] kobject_put+0x21f/0x2a0 [ 46.752971][ T515] put_device+0x23/0x40 [ 46.757449][ T515] usb_del_gadget_udc+0x25/0x30 [ 46.762339][ T515] dummy_udc_remove+0x5c/0x70 [ 46.767057][ T515] platform_remove+0x7e/0xb0 [ 46.771874][ T515] device_release_driver_internal+0x4ad/0x830 [ 46.778088][ T515] device_driver_detach+0x3f/0x50 [ 46.783161][ T515] unbind_store+0x1ab/0x1f0 [ 46.787753][ T515] drv_attr_store+0x91/0xb0 [ 46.792308][ T515] sysfs_kf_write+0x13e/0x160 [ 46.797227][ T515] kernfs_fop_write_iter+0x316/0x510 [ 46.802748][ T515] vfs_write+0x762/0xfd0 [ 46.807213][ T515] ksys_write+0x145/0x260 [ 46.811682][ T515] __x64_sys_write+0x7f/0x90 [ 46.816325][ T515] x64_sys_call+0x271c/0x2ee0 [ 46.821139][ T515] do_syscall_64+0x57/0xf0 [ 46.825616][ T515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.831993][ T515] [ 46.834354][ T515] The buggy address belongs to the object at ffff88810672c4e0 [ 46.834354][ T515] which belongs to the cache kmalloc-16 of size 16 [ 46.848273][ T515] The buggy address is located 0 bytes inside of [ 46.848273][ T515] freed 16-byte region [ffff88810672c4e0, ffff88810672c4f0) [ 46.861861][ T515] [ 46.864235][ T515] The buggy address belongs to the physical page: [ 46.870729][ T515] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10672c [ 46.879962][ T515] anon flags: 0x4000000000000000(zone=1) [ 46.885716][ T515] page_type: f5(slab) [ 46.889786][ T515] raw: 4000000000000000 ffff888100041640 0000000000000000 dead000000000001 [ 46.898589][ T515] raw: 0000000000000000 0000000000800080 00000001f5000000 0000000000000000 [ 46.907205][ T515] page dumped because: kasan: bad access detected [ 46.913666][ T515] page_owner tracks the page as allocated [ 46.919426][ T515] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 4766307871, free_ts 0 [ 46.936012][ T36] audit: type=1400 audit(1788968274.340:113): avc: denied { unmount } for pid=490 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.937177][ T515] post_alloc_hook+0x37d/0x3b0 [ 46.961720][ T515] prep_new_page+0x2d/0x180 [ 46.966288][ T515] get_page_from_freelist+0x4aea/0x4ba0 [ 46.971979][ T515] __alloc_pages_noprof+0x35a/0x7e0 [ 46.977238][ T515] alloc_slab_page+0x6b/0x1e0 [ 46.982021][ T515] allocate_slab+0x69/0x430 [ 46.986679][ T515] ___slab_alloc+0x591/0x8c0 [ 46.991358][ T515] __kmalloc_noprof+0x2fc/0x510 [ 46.996390][ T515] usb_hcd_submit_urb+0x7d5/0x19d0 [ 47.001569][ T515] usb_submit_urb+0xfa1/0x1610 [ 47.006534][ T515] usb_start_wait_urb+0x127/0x380 [ 47.011651][ T515] usb_control_msg+0x25c/0x490 [ 47.016470][ T515] usb_get_status+0xf9/0x340 [ 47.021130][ T515] hub_probe+0x1b01/0x2f80 [ 47.025773][ T515] usb_probe_interface+0x6a8/0xbf0 [ 47.031108][ T515] really_probe+0x2e1/0x8b0 [ 47.035789][ T515] page_owner free stack trace missing [ 47.041497][ T515] [ 47.043849][ T515] Memory state around the buggy address: [ 47.049505][ T515] ffff88810672c380: 00 04 fc fc 00 01 fc fc 00 04 fc fc 00 04 fc fc [ 47.057683][ T515] ffff88810672c400: 00 04 fc fc 00 01 fc fc 00 04 fc fc 00 00 fc fc [ 47.065878][ T515] >ffff88810672c480: 00 00 fc fc 00 01 fc fc 00 04 fc fc fa fb fc fc [ 47.074007][ T515] ^ [ 47.081256][ T515] ffff88810672c500: fa fb fc fc fa fb fc fc 00 04 fc fc fa fb fc fc [ 47.089352][ T515] ffff88810672c580: 00 04 fc fc 00 01 fc fc 00 04 fc fc 00 04 fc fc [ 47.097446][ T515] ================================================================== [ 47.105723][ T515] Disabling lock debugging due to kernel taint [ 47.111913][ T515] gadget }p!: fail, usb_ep_set_halt returned -108 [ 47.135328][ T36] audit: type=1400 audit(1788968274.790:114): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.171925][ T36] audit: type=1400 audit(1788968274.790:115): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.181817][ T507] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 47.194483][ T36] audit: type=1400 audit(1788968274.790:116): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.227921][ T507] usb 4-1: USB disconnect, device number 2 [ 47.239117][ T36] audit: type=1400 audit(1788968274.800:117): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.270989][ T36] audit: type=1400 audit(1788968274.800:118): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.292795][ T36] audit: type=1400 audit(1788968274.800:119): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.316227][ T36] audit: type=1400 audit(1788968274.800:120): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.376229][ T519] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.525959][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 47.534702][ T519] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.549014][ T519] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.558355][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 47.566623][ T519] usb 3-1: SerialNumber: syz [ 47.676911][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.693005][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.704371][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 47.716830][ T10] usb 6-1: SerialNumber: syz [ 47.758585][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.767442][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.955911][ T507] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 48.107435][ T507] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.121536][ T507] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.131416][ T507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.139666][ T507] usb 4-1: SerialNumber: syz [ 48.177683][ T519] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 48.194299][ T519] usb 3-1: USB disconnect, device number 3 [ 48.294506][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.303349][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.329670][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 48.345773][ T10] usb 6-1: USB disconnect, device number 3 2026/09/09 15:37:56 executed programs: 17 [ 48.750630][ T507] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 48.759959][ T507] usb 4-1: USB disconnect, device number 3 [ 48.821227][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.830254][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.935934][ T518] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.075919][ T519] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.087361][ T518] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.101239][ T518] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.110473][ T518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.118691][ T518] usb 3-1: SerialNumber: syz [ 49.237146][ T519] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.251254][ T519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.260547][ T519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.268693][ T519] usb 6-1: SerialNumber: syz [ 49.355758][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.365063][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.515882][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 49.677019][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.690988][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.700152][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.708460][ T46] usb 4-1: SerialNumber: syz [ 49.734944][ T518] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.744224][ T518] usb 3-1: USB disconnect, device number 4 [ 49.878815][ T519] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.891090][ T519] usb 6-1: USB disconnect, device number 4 [ 49.900263][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.909789][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.319603][ T46] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 50.328795][ T46] usb 4-1: USB disconnect, device number 4 [ 50.432217][ T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.441057][ T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.475990][ T518] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.625914][ T519] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 50.627684][ T518] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.647211][ T518] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.656336][ T518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.664451][ T518] usb 3-1: SerialNumber: syz [ 50.777150][ T519] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.791128][ T519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.800594][ T519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.808664][ T519] usb 6-1: SerialNumber: syz [ 50.967297][ T558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.976161][ T558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.066052][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.216963][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.231454][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.241108][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.249304][ T9] usb 4-1: SerialNumber: syz [ 51.276217][ T518] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 51.286937][ T518] usb 3-1: USB disconnect, device number 5 [ 51.418319][ T519] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 51.429203][ T519] usb 6-1: USB disconnect, device number 5 [ 51.494152][ T560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.502926][ T560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.861164][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 51.873028][ T9] usb 4-1: USB disconnect, device number 5 [ 52.018020][ T518] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 52.023161][ T566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.035161][ T566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.155976][ T519] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.187196][ T518] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.201421][ T518] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.210595][ T518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.218683][ T518] usb 3-1: SerialNumber: syz [ 52.307177][ T519] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.321270][ T519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.330757][ T519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.339117][ T519] usb 6-1: SerialNumber: syz [ 52.556994][ T570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.568824][ T570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.605907][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.768378][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.782982][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.792315][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.800550][ T9] usb 4-1: SerialNumber: syz [ 52.828141][ T518] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 52.837328][ T518] usb 3-1: USB disconnect, device number 6 [ 52.948347][ T519] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 52.959660][ T519] usb 6-1: USB disconnect, device number 6 [ 53.089344][ T572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.098191][ T572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.409502][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 53.420362][ T9] usb 4-1: USB disconnect, device number 6 [ 53.575904][ T519] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 53.616001][ T578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.624878][ T578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.685944][ T533] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 53.727088][ T519] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.740994][ T519] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.750114][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.758355][ T519] usb 3-1: SerialNumber: syz [ 53.837099][ T533] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.851274][ T533] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.861086][ T533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.869345][ T533] usb 6-1: SerialNumber: syz 2026/09/09 15:38:01 executed programs: 38 [ 54.141947][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.150935][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.158794][ T518] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.317100][ T518] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.331674][ T518] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.340802][ T518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.348957][ T518] usb 4-1: SerialNumber: syz [ 54.368519][ T519] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.379460][ T519] usb 3-1: USB disconnect, device number 7 [ 54.479612][ T533] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.489602][ T533] usb 6-1: USB disconnect, device number 7 [ 54.670607][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.680198][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.957809][ T518] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.967169][ T518] usb 4-1: USB disconnect, device number 7 [ 55.115974][ T519] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 55.196656][ T590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.205793][ T590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.225935][ T383] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 55.267040][ T519] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.281233][ T519] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.290856][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.298959][ T519] usb 3-1: SerialNumber: syz [ 55.387774][ T383] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.401824][ T383] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.411384][ T383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.422315][ T383] usb 6-1: SerialNumber: syz [ 55.705902][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.724997][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.733642][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.857011][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.871242][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.880532][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.888624][ T9] usb 4-1: SerialNumber: syz [ 55.907961][ T519] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 55.919898][ T519] usb 3-1: USB disconnect, device number 8 [ 56.032576][ T383] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 56.041982][ T383] usb 6-1: USB disconnect, device number 8