[ 80.528160][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 80.528172][ T42] audit: type=1400 audit(1782611812.270:208): avc: denied { transition } for pid=5977 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.539854][ T42] audit: type=1400 audit(1782611812.270:209): avc: denied { noatsecure } for pid=5977 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.547938][ T42] audit: type=1400 audit(1782611812.270:210): avc: denied { rlimitinh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.556110][ T42] audit: type=1400 audit(1782611812.270:211): avc: denied { siginh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.115047][ T42] audit: type=1400 audit(1782611815.860:212): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.188612][ T42] audit: type=1400 audit(1782611815.930:213): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.553341][ T42] audit: type=1400 audit(1782611816.290:214): avc: denied { write } for pid=5991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.595424][ T42] audit: type=1400 audit(1782611816.340:215): avc: denied { write } for pid=5994 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.171109][ T42] audit: type=1400 audit(1782611816.910:216): avc: denied { write } for pid=5997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.232975][ T42] audit: type=1400 audit(1782611816.970:217): avc: denied { write } for pid=6000 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.601524][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 85.601541][ T42] audit: type=1400 audit(1782611817.340:220): avc: denied { write } for pid=6010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.657026][ T42] audit: type=1400 audit(1782611817.400:221): avc: denied { write } for pid=6015 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.760120][ T42] audit: type=1400 audit(1782611817.500:222): avc: denied { write } for pid=6019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:22388' (ED25519) to the list of known hosts. [ 85.821229][ T42] audit: type=1400 audit(1782611817.560:223): avc: denied { write } for pid=6024 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.460488][ T42] audit: type=1400 audit(1782611818.200:224): avc: denied { write } for pid=6035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.515112][ T42] audit: type=1400 audit(1782611818.260:225): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.686304][ T50] cfg80211: failed to load regulatory.db 2026/06/28 01:56:59 parsed 1 programs [ 87.729597][ T42] audit: type=1400 audit(1782611819.470:226): avc: denied { node_bind } for pid=6028 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 87.916124][ T42] audit: type=1400 audit(1782611819.660:227): avc: denied { write } for pid=6046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.962684][ T42] audit: type=1400 audit(1782611819.700:228): avc: denied { write } for pid=6049 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.957223][ T42] audit: type=1400 audit(1782611822.700:229): avc: denied { read write } for pid=6043 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.967455][ T42] audit: type=1400 audit(1782611822.700:230): avc: denied { open } for pid=6043 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.015581][ T42] audit: type=1400 audit(1782611822.760:231): avc: denied { unlink } for pid=6043 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.337886][ T42] audit: type=1400 audit(1782611823.080:232): avc: denied { relabelto } for pid=6054 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 92.175055][ T6043] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.777598][ T42] audit: type=1401 audit(1782611825.520:233): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 94.300952][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.303677][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.409896][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.415352][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.507940][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.512610][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.517461][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.520694][ T42] audit: type=1400 audit(1782611826.260:234): avc: denied { sys_module } for pid=6117 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.520704][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.530159][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.064065][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.066350][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.068548][ T6117] bridge_slave_0: entered allmulticast mode [ 95.071072][ T6117] bridge_slave_0: entered promiscuous mode [ 95.074726][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.076979][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.079185][ T6117] bridge_slave_1: entered allmulticast mode [ 95.081723][ T6117] bridge_slave_1: entered promiscuous mode [ 95.096529][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.100672][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.117089][ T6117] team0: Port device team_slave_0 added [ 95.119986][ T6117] team0: Port device team_slave_1 added [ 95.132261][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.135200][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.143280][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.147513][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.149664][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.157571][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.186918][ T6117] hsr_slave_0: entered promiscuous mode [ 95.189412][ T6117] hsr_slave_1: entered promiscuous mode [ 95.309158][ T6117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.316795][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.320023][ T6117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.324361][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.327890][ T6117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.333568][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.337184][ T6117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.342618][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.407532][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.418046][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.423590][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.426432][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.432257][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.434493][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.691103][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.723776][ T6117] veth0_vlan: entered promiscuous mode [ 95.732923][ T6117] veth1_vlan: entered promiscuous mode [ 95.756084][ T6117] veth0_macvtap: entered promiscuous mode [ 95.762063][ T6117] veth1_macvtap: entered promiscuous mode [ 95.777586][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.786067][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.796597][ T5542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799835][ T5542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.804061][ T5542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.807000][ T5542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/28 01:57:07 executed programs: 0 [ 95.917390][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.922790][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.934194][ T6169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.936915][ T6169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.951810][ T6170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.958062][ T6170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.966060][ T6170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.968690][ T6176] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.969584][ T6170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.972278][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.972384][ T6176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.972469][ T6176] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.973103][ T6176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.974666][ T6170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.975016][ T6176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.975247][ T6176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.982525][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.984000][ T6170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.985889][ T6176] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.000693][ T6170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.005404][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.099012][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.172671][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.660891][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.664003][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.667096][ T6171] bridge_slave_0: entered allmulticast mode [ 96.670944][ T6171] bridge_slave_0: entered promiscuous mode [ 96.714166][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.717222][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.720267][ T6171] bridge_slave_1: entered allmulticast mode [ 96.724237][ T6171] bridge_slave_1: entered promiscuous mode [ 96.777191][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.779598][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.781862][ T6172] bridge_slave_0: entered allmulticast mode [ 96.784908][ T6172] bridge_slave_0: entered promiscuous mode [ 96.788713][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.791035][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.793933][ T6164] bridge_slave_0: entered allmulticast mode [ 96.797120][ T6164] bridge_slave_0: entered promiscuous mode [ 96.808748][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.813281][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.825618][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.828044][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.831244][ T6172] bridge_slave_1: entered allmulticast mode [ 96.834667][ T6172] bridge_slave_1: entered promiscuous mode [ 96.837184][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.839924][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.842128][ T6164] bridge_slave_1: entered allmulticast mode [ 96.845452][ T6164] bridge_slave_1: entered promiscuous mode [ 96.901831][ T6171] team0: Port device team_slave_0 added [ 96.905148][ T6171] team0: Port device team_slave_1 added [ 96.921467][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.930946][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.937119][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.940150][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.942849][ T6167] bridge_slave_0: entered allmulticast mode [ 96.946361][ T6167] bridge_slave_0: entered promiscuous mode [ 96.950029][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.952478][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.955005][ T6167] bridge_slave_1: entered allmulticast mode [ 96.957644][ T6167] bridge_slave_1: entered promiscuous mode [ 96.977325][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.007291][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.011743][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.016890][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.022472][ T6164] team0: Port device team_slave_0 added [ 97.025694][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.027901][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.035996][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.040740][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.042958][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.051112][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.083811][ T6164] team0: Port device team_slave_1 added [ 97.100576][ T6167] team0: Port device team_slave_0 added [ 97.104752][ T6172] team0: Port device team_slave_0 added [ 97.114840][ T6172] team0: Port device team_slave_1 added [ 97.119354][ T6167] team0: Port device team_slave_1 added [ 97.127468][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.129580][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.137390][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.160530][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.163649][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.172855][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.199516][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.202346][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.212082][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.218304][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.221068][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.231204][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.236261][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.238479][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.247850][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.256723][ T6171] hsr_slave_0: entered promiscuous mode [ 97.259936][ T6171] hsr_slave_1: entered promiscuous mode [ 97.262898][ T6171] debugfs: 'hsr0' already exists in 'hsr' [ 97.265491][ T6171] Cannot create hsr debugfs directory [ 97.277504][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.280123][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.290217][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.356250][ T6164] hsr_slave_0: entered promiscuous mode [ 97.358666][ T6164] hsr_slave_1: entered promiscuous mode [ 97.360632][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 97.362285][ T6164] Cannot create hsr debugfs directory [ 97.415880][ T6172] hsr_slave_0: entered promiscuous mode [ 97.419041][ T6172] hsr_slave_1: entered promiscuous mode [ 97.421952][ T6172] debugfs: 'hsr0' already exists in 'hsr' [ 97.424525][ T6172] Cannot create hsr debugfs directory [ 97.442621][ T6167] hsr_slave_0: entered promiscuous mode [ 97.445835][ T6167] hsr_slave_1: entered promiscuous mode [ 97.448739][ T6167] debugfs: 'hsr0' already exists in 'hsr' [ 97.451113][ T6167] Cannot create hsr debugfs directory [ 97.579544][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.795295][ T6171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.801281][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.805203][ T6171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.811176][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.815162][ T6171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.821664][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.825699][ T6171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.831258][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.866702][ T42] audit: type=1400 audit(1782611829.610:235): avc: denied { write } for pid=6240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.936264][ T42] audit: type=1400 audit(1782611829.680:236): avc: denied { write } for pid=6249 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.937868][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.982475][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.987817][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.990056][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.996248][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.998579][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.044097][ T6169] Bluetooth: hci2: command tx timeout [ 98.044135][ T64] Bluetooth: hci1: command tx timeout [ 98.046109][ T5092] Bluetooth: hci3: command tx timeout [ 98.048678][ T6170] Bluetooth: hci4: command tx timeout [ 98.051005][ T42] audit: type=1400 audit(1782611829.790:237): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.112800][ T42] audit: type=1400 audit(1782611829.850:238): avc: denied { write } for pid=6256 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.210493][ T42] audit: type=1400 audit(1782611829.950:239): avc: denied { write } for pid=6262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.269276][ T42] audit: type=1400 audit(1782611830.010:240): avc: denied { write } for pid=6267 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.311875][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.341388][ T6171] veth0_vlan: entered promiscuous mode [ 98.345495][ T42] audit: type=1400 audit(1782611830.090:241): avc: denied { write } for pid=6271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.361529][ T6171] veth1_vlan: entered promiscuous mode [ 98.385876][ T6171] veth0_macvtap: entered promiscuous mode [ 98.392020][ T6171] veth1_macvtap: entered promiscuous mode [ 98.395028][ T42] audit: type=1400 audit(1782611830.140:242): avc: denied { write } for pid=6274 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.408694][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.418471][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.427656][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.431987][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.435122][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438143][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.478709][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.481955][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.495808][ T42] audit: type=1400 audit(1782611830.240:243): avc: denied { write } for pid=6276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.505004][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.507760][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.549675][ T42] audit: type=1400 audit(1782611830.290:244): avc: denied { read write } for pid=6280 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.794376][ T73] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 98.834897][ T12] bridge_slave_1: left allmulticast mode [ 98.837908][ T12] bridge_slave_1: left promiscuous mode [ 98.840171][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.846029][ T12] bridge_slave_0: left allmulticast mode [ 98.848521][ T12] bridge_slave_0: left promiscuous mode [ 98.851002][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.943452][ T73] usb 7-1: Using ep0 maxpacket: 16 [ 98.948389][ T73] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.953447][ T73] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 98.959997][ T73] usb 7-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 98.964426][ T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.967453][ T73] usb 7-1: Product: syz [ 98.969148][ T73] usb 7-1: Manufacturer: syz [ 98.970977][ T73] usb 7-1: SerialNumber: syz [ 98.977190][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.984699][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.987501][ T73] em28xx 7-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 98.992155][ T73] em28xx 7-1:246.0: Audio interface 0 found (Vendor Class) [ 98.996749][ T12] bond0 (unregistering): Released all slaves [ 99.122387][ T12] hsr_slave_0: left promiscuous mode [ 99.125686][ T12] hsr_slave_1: left promiscuous mode [ 99.128745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.131814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.136688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.139713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.147558][ T12] veth1_macvtap: left promiscuous mode [ 99.149611][ T12] veth0_macvtap: left promiscuous mode [ 99.151262][ T12] veth1_vlan: left promiscuous mode [ 99.152820][ T12] veth0_vlan: left promiscuous mode [ 99.244654][ T73] em28xx 7-1:246.0: unknown em28xx chip ID (0) [ 99.247888][ T73] em28xx 7-1:246.0: Config register raw data: 0xfffffffb [ 99.251168][ T73] em28xx 7-1:246.0: AC97 chip type couldn't be determined [ 99.254686][ T73] em28xx 7-1:246.0: No AC97 audio processor [ 99.257839][ T73] em28xx 7-1:246.0: We currently don't support analog TV or stream capture on dual tuners. [ 99.298933][ T12] team0 (unregistering): Port device team_slave_1 removed [ 99.308149][ T12] team0 (unregistering): Port device team_slave_0 removed [ 99.316661][ T73] em28xx 7-1:246.0: unknown em28xx chip ID (0) [ 99.319254][ T73] em28xx 7-1:246.0: Config register raw data: 0xfffffffb [ 99.322004][ T73] em28xx 7-1:246.0: AC97 chip type couldn't be determined [ 99.325307][ T73] em28xx 7-1:246.0: No AC97 audio processor [ 99.544788][ T73] usb 7-1: USB disconnect, device number 2 [ 99.548180][ T73] em28xx 7-1:246.0: Disconnecting em28xx #1 [ 99.550050][ T73] em28xx 7-1:246.0: Disconnecting em28xx [ 99.558704][ T73] em28xx 7-1:246.0: Freeing device [ 99.560376][ T73] em28xx 7-1:246.0: Freeing device [ 100.013309][ T73] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 100.135005][ T6170] Bluetooth: hci3: command tx timeout [ 100.137780][ T5092] Bluetooth: hci4: command tx timeout [ 100.137844][ T6169] Bluetooth: hci1: command tx timeout [ 100.141139][ T64] Bluetooth: hci2: command tx timeout [ 100.163435][ T73] usb 7-1: Using ep0 maxpacket: 16 [ 100.167927][ T73] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 100.173149][ T73] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 100.182674][ T73] usb 7-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 100.193187][ T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.197041][ T73] usb 7-1: Product: syz [ 100.198797][ T73] usb 7-1: Manufacturer: syz [ 100.200678][ T73] usb 7-1: SerialNumber: syz [ 100.211411][ T73] em28xx 7-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 100.215334][ T73] em28xx 7-1:246.0: Audio interface 0 found (Vendor Class) [ 100.355874][ T6172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.363073][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.367105][ T6172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.374796][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.378168][ T6172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.383606][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.387552][ T6172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.392927][ T6172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.458358][ T6164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.465085][ T6164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.466447][ T73] em28xx 7-1:246.0: unknown em28xx chip ID (0) [ 100.468413][ T6164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.474764][ T73] em28xx 7-1:246.0: Config register raw data: 0xfffffffb [ 100.475211][ T6164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.479664][ T73] em28xx 7-1:246.0: AC97 chip type couldn't be determined [ 100.479720][ T6164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.485322][ T73] em28xx 7-1:246.0: No AC97 audio processor [ 100.486737][ T6164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.487537][ T73] ================================================================== [ 100.487554][ T73] BUG: KASAN: use-after-free in __list_add_valid_or_report+0x112/0x130 [ 100.487572][ T73] Read of size 8 at addr ffff88803489c250 by task kworker/2:2/73 [ 100.487580][ T73] [ 100.487586][ T73] CPU: 2 UID: 0 PID: 73 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 100.487598][ T73] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.487605][ T73] Workqueue: usb_hub_wq hub_event [ 100.487617][ T73] Call Trace: [ 100.487621][ T73] [ 100.487625][ T73] dump_stack_lvl+0x100/0x190 [ 100.487640][ T73] print_report+0x13d/0x4b0 [ 100.487655][ T73] ? __virt_addr_valid+0x239/0x430 [ 100.487669][ T73] ? __list_add_valid_or_report+0x112/0x130 [ 100.487681][ T73] kasan_report+0xdf/0x1c0 [ 100.487695][ T73] ? __list_add_valid_or_report+0x112/0x130 [ 100.487708][ T73] __list_add_valid_or_report+0x112/0x130 [ 100.487721][ T73] em28xx_init_extension+0x48/0x200 [ 100.487736][ T73] ? em28xx_audio_setup+0x115/0x370 [ 100.487749][ T73] em28xx_init_dev.isra.0+0xb49/0x1829 [ 100.487761][ T73] ? _dev_info+0xef/0x127 [ 100.487776][ T73] ? __pfx_em28xx_init_dev.isra.0+0x10/0x10 [ 100.487789][ T73] ? lockdep_init_map_type+0x5c/0x250 [ 100.487803][ T73] ? lockdep_init_map_type+0x5c/0x250 [ 100.487817][ T73] em28xx_usb_probe.cold+0xca7/0x25f6 [ 100.487831][ T73] usb_probe_interface+0x303/0x8f0 [ 100.487844][ T73] ? __pfx_usb_probe_interface+0x10/0x10 [ 100.487857][ T73] really_probe+0x241/0xa60 [ 100.487869][ T73] __driver_probe_device+0x20e/0x450 [ 100.487881][ T73] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.487894][ T73] driver_probe_device+0x4a/0x140 [ 100.487906][ T73] __device_attach_driver+0x1df/0x320 [ 100.487918][ T73] ? __pfx___device_attach_driver+0x10/0x10 [ 100.487930][ T73] bus_for_each_drv+0x159/0x1e0 [ 100.487946][ T73] ? __pfx_bus_for_each_drv+0x10/0x10 [ 100.487962][ T73] ? lockdep_hardirqs_on+0x78/0x100 [ 100.487977][ T73] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.487992][ T73] __device_attach+0x1e4/0x4d0 [ 100.488008][ T73] ? __pfx___device_attach+0x10/0x10 [ 100.488019][ T73] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.488035][ T73] device_initial_probe+0xaf/0xd0 [ 100.488048][ T73] bus_probe_device+0x64/0x160 [ 100.488058][ T73] device_add+0x121d/0x1970 [ 100.488072][ T73] ? __pfx_device_add+0x10/0x10 [ 100.488085][ T73] ? mark_held_locks+0x40/0x70 [ 100.488099][ T73] usb_set_configuration+0xd97/0x1c60 [ 100.488113][ T73] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 100.488129][ T73] usb_generic_driver_probe+0xa1/0xe0 [ 100.488145][ T73] usb_probe_device+0xef/0x400 [ 100.488156][ T73] ? __pfx_usb_probe_device+0x10/0x10 [ 100.488167][ T73] really_probe+0x241/0xa60 [ 100.488179][ T73] __driver_probe_device+0x20e/0x450 [ 100.488190][ T73] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.488203][ T73] driver_probe_device+0x4a/0x140 [ 100.488214][ T73] __device_attach_driver+0x1df/0x320 [ 100.488227][ T73] ? __pfx___device_attach_driver+0x10/0x10 [ 100.488238][ T73] bus_for_each_drv+0x159/0x1e0 [ 100.488254][ T73] ? __pfx_bus_for_each_drv+0x10/0x10 [ 100.488270][ T73] ? lockdep_hardirqs_on+0x78/0x100 [ 100.488285][ T73] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.488299][ T73] __device_attach+0x1e4/0x4d0 [ 100.488311][ T73] ? __pfx___device_attach+0x10/0x10 [ 100.488323][ T73] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.488339][ T73] device_initial_probe+0xaf/0xd0 [ 100.488351][ T73] bus_probe_device+0x64/0x160 [ 100.488361][ T73] device_add+0x121d/0x1970 [ 100.488375][ T73] ? __pfx_device_add+0x10/0x10 [ 100.488388][ T73] ? add_device_randomness+0xc9/0x110 [ 100.488404][ T73] usb_new_device.cold+0x685/0x115c [ 100.488421][ T73] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 100.488436][ T73] ? do_raw_spin_lock+0x128/0x260 [ 100.488451][ T73] ? __pfx_usb_new_device+0x10/0x10 [ 100.488462][ T73] ? mark_held_locks+0x40/0x70 [ 100.488475][ T73] hub_event+0x314d/0x4af0 [ 100.488489][ T73] ? __pfx_hub_event+0x10/0x10 [ 100.488502][ T73] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.488516][ T73] ? rcu_is_watching+0x12/0xc0 [ 100.488533][ T73] process_one_work+0xa23/0x1940 [ 100.488547][ T73] ? __pfx_process_one_work+0x10/0x10 [ 100.488560][ T73] ? __pfx_hub_event+0x10/0x10 [ 100.488571][ T73] worker_thread+0x5ef/0xe50 [ 100.488584][ T73] ? kthread+0x13a/0x450 [ 100.488593][ T73] ? __pfx_worker_thread+0x10/0x10 [ 100.488604][ T73] kthread+0x370/0x450 [ 100.488613][ T73] ? __pfx_kthread+0x10/0x10 [ 100.488623][ T73] ret_from_fork+0x72b/0xd50 [ 100.488638][ T73] ? __pfx_ret_from_fork+0x10/0x10 [ 100.488653][ T73] ? __switch_to+0x800/0x10f0 [ 100.488663][ T73] ? __pfx_kthread+0x10/0x10 [ 100.488673][ T73] ret_from_fork_asm+0x1a/0x30 [ 100.488685][ T73] [ 100.488689][ T73] [ 100.492733][ T6164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.494967][ T73] The buggy address belongs to the physical page: [ 100.494975][ T73] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803489f740 pfn:0x3489c [ 100.494988][ T73] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 100.495010][ T73] raw: 00fff00000000000 ffffea0001476f08 ffffea00009a7c08 0000000000000000 [ 100.495023][ T73] raw: ffff88803489f740 0000000000000000 00000000ffffffff 0000000000000000 [ 100.495032][ T73] page dumped because: kasan: bad access detected [ 100.495040][ T73] page_owner tracks the page as freed [ 100.495045][ T73] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40cc0(GFP_KERNEL|__GFP_COMP), pid 73, tgid 73 (kworker/2:2), ts 99261115952, free_ts 99560362097 [ 100.495071][ T73] post_alloc_hook+0xfd/0x120 [ 100.495098][ T73] get_page_from_freelist+0xf48/0x3530 [ 100.495114][ T73] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 100.495131][ T73] alloc_pages_mpol+0x1fb/0x540 [ 100.495152][ T73] ___kmalloc_large_node+0xe5/0x120 [ 100.495173][ T73] __kmalloc_large_node_noprof+0x1c/0x70 [ 100.495194][ T73] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 100.495214][ T73] kmemdup_noprof+0x29/0x60 [ 100.495230][ T73] em28xx_usb_probe.cold+0x12bc/0x25f6 [ 100.495247][ T73] usb_probe_interface+0x303/0x8f0 [ 100.495267][ T73] really_probe+0x241/0xa60 [ 100.495284][ T73] __driver_probe_device+0x20e/0x450 [ 100.495301][ T73] driver_probe_device+0x4a/0x140 [ 100.495318][ T73] __device_attach_driver+0x1df/0x320 [ 100.495336][ T73] bus_for_each_drv+0x159/0x1e0 [ 100.697487][ T73] __device_attach+0x1e4/0x4d0 [ 100.698978][ T73] page last free pid 73 tgid 73 stack trace: [ 100.700780][ T73] __free_frozen_pages+0x79f/0x1090 [ 100.702369][ T73] kref_put.constprop.0.isra.0+0x4d/0x6d [ 100.704158][ T73] em28xx_usb_disconnect.cold+0x1b4/0x253 [ 100.706170][ T73] usb_unbind_interface+0x1dd/0x9e0 [ 100.707839][ T73] device_remove+0x12a/0x180 [ 100.709325][ T73] device_release_driver_internal+0x44e/0x620 [ 100.711174][ T73] bus_remove_device+0x2bc/0x560 [ 100.712676][ T73] device_del+0x376/0x9b0 [ 100.714016][ T73] usb_disable_device+0x367/0x810 [ 100.715517][ T73] usb_disconnect+0x2e2/0x9a0 [ 100.716962][ T73] hub_event+0x1d0c/0x4af0 [ 100.718384][ T73] process_one_work+0xa23/0x1940 [ 100.719912][ T73] worker_thread+0x5ef/0xe50 [ 100.721337][ T73] kthread+0x370/0x450 [ 100.722611][ T73] ret_from_fork+0x72b/0xd50 [ 100.724038][ T73] ret_from_fork_asm+0x1a/0x30 [ 100.725495][ T73] [ 100.726284][ T73] Memory state around the buggy address: [ 100.728005][ T73] ffff88803489c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.730512][ T73] ffff88803489c180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.732975][ T73] >ffff88803489c200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.735579][ T73] ^ [ 100.737683][ T73] ffff88803489c280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.740880][ T73] ffff88803489c300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.743820][ T73] ================================================================== [ 100.748641][ T73] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.751071][ T73] CPU: 2 UID: 0 PID: 73 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 100.754154][ T73] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.757217][ T73] Workqueue: usb_hub_wq hub_event [ 100.758833][ T73] Call Trace: [ 100.760014][ T73] [ 100.760920][ T73] dump_stack_lvl+0x100/0x190 [ 100.762392][ T73] vpanic+0x552/0x970 [ 100.763609][ T73] ? __pfx_vpanic+0x10/0x10 [ 100.765395][ T73] ? mark_held_locks+0x40/0x70 [ 100.767066][ T73] ? __list_add_valid_or_report+0x112/0x130 [ 100.769084][ T73] panic+0xd1/0xe0 [ 100.770332][ T73] ? __pfx_panic+0x10/0x10 [ 100.771715][ T73] ? __list_add_valid_or_report+0x112/0x130 [ 100.773500][ T73] ? preempt_schedule_common+0x42/0xc0 [ 100.775155][ T73] ? check_panic_on_warn+0x1f/0x90 [ 100.776725][ T73] check_panic_on_warn.cold+0x19/0x34 [ 100.778397][ T73] end_report.part.0+0x3a/0x90 [ 100.780002][ T73] kasan_report.cold+0xe/0x18 [ 100.781468][ T73] ? __list_add_valid_or_report+0x112/0x130 [ 100.783336][ T73] __list_add_valid_or_report+0x112/0x130 [ 100.785090][ T73] em28xx_init_extension+0x48/0x200 [ 100.786760][ T73] ? em28xx_audio_setup+0x115/0x370 [ 100.788382][ T73] em28xx_init_dev.isra.0+0xb49/0x1829 [ 100.790138][ T73] ? _dev_info+0xef/0x127 [ 100.791535][ T73] ? __pfx_em28xx_init_dev.isra.0+0x10/0x10 [ 100.793393][ T73] ? lockdep_init_map_type+0x5c/0x250 [ 100.795101][ T73] ? lockdep_init_map_type+0x5c/0x250 [ 100.796786][ T73] em28xx_usb_probe.cold+0xca7/0x25f6 [ 100.798457][ T73] usb_probe_interface+0x303/0x8f0 [ 100.800088][ T73] ? __pfx_usb_probe_interface+0x10/0x10 [ 100.801867][ T73] really_probe+0x241/0xa60 [ 100.803282][ T73] __driver_probe_device+0x20e/0x450 [ 100.804943][ T73] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.806774][ T73] driver_probe_device+0x4a/0x140 [ 100.808369][ T73] __device_attach_driver+0x1df/0x320 [ 100.810050][ T73] ? __pfx___device_attach_driver+0x10/0x10 [ 100.811948][ T73] bus_for_each_drv+0x159/0x1e0 [ 100.813564][ T73] ? __pfx_bus_for_each_drv+0x10/0x10 [ 100.815394][ T73] ? lockdep_hardirqs_on+0x78/0x100 [ 100.817060][ T73] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.818877][ T73] __device_attach+0x1e4/0x4d0 [ 100.820398][ T73] ? __pfx___device_attach+0x10/0x10 [ 100.822047][ T73] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.823716][ T73] device_initial_probe+0xaf/0xd0 [ 100.825310][ T73] bus_probe_device+0x64/0x160 [ 100.826818][ T73] device_add+0x121d/0x1970 [ 100.828230][ T73] ? __pfx_device_add+0x10/0x10 [ 100.829751][ T73] ? mark_held_locks+0x40/0x70 [ 100.831294][ T73] usb_set_configuration+0xd97/0x1c60 [ 100.832945][ T73] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 100.835019][ T73] usb_generic_driver_probe+0xa1/0xe0 [ 100.836699][ T73] usb_probe_device+0xef/0x400 [ 100.838204][ T73] ? __pfx_usb_probe_device+0x10/0x10 [ 100.839911][ T73] really_probe+0x241/0xa60 [ 100.841330][ T73] __driver_probe_device+0x20e/0x450 [ 100.842977][ T73] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.844911][ T73] driver_probe_device+0x4a/0x140 [ 100.846516][ T73] __device_attach_driver+0x1df/0x320 [ 100.848206][ T73] ? __pfx___device_attach_driver+0x10/0x10 [ 100.850048][ T73] bus_for_each_drv+0x159/0x1e0 [ 100.851591][ T73] ? __pfx_bus_for_each_drv+0x10/0x10 [ 100.853289][ T73] ? lockdep_hardirqs_on+0x78/0x100 [ 100.854951][ T73] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.857341][ T73] __device_attach+0x1e4/0x4d0 [ 100.859117][ T73] ? __pfx___device_attach+0x10/0x10 [ 100.861237][ T73] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.863045][ T73] device_initial_probe+0xaf/0xd0 [ 100.864609][ T73] bus_probe_device+0x64/0x160 [ 100.866246][ T73] device_add+0x121d/0x1970 [ 100.868070][ T73] ? __pfx_device_add+0x10/0x10 [ 100.870047][ T73] ? add_device_randomness+0xc9/0x110 [ 100.872187][ T73] usb_new_device.cold+0x685/0x115c [ 100.874271][ T73] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 100.876555][ T73] ? do_raw_spin_lock+0x128/0x260 [ 100.878562][ T73] ? __pfx_usb_new_device+0x10/0x10 [ 100.880636][ T73] ? mark_held_locks+0x40/0x70 [ 100.882558][ T73] hub_event+0x314d/0x4af0 [ 100.884337][ T73] ? __pfx_hub_event+0x10/0x10 [ 100.886274][ T73] ? debug_object_deactivate+0x2e4/0x3b0 [ 100.888504][ T73] ? rcu_is_watching+0x12/0xc0 [ 100.890428][ T73] process_one_work+0xa23/0x1940 [ 100.892405][ T73] ? __pfx_process_one_work+0x10/0x10 [ 100.894532][ T73] ? __pfx_hub_event+0x10/0x10 [ 100.896453][ T73] worker_thread+0x5ef/0xe50 [ 100.898315][ T73] ? kthread+0x13a/0x450 [ 100.900036][ T73] ? __pfx_worker_thread+0x10/0x10 [ 100.902080][ T73] kthread+0x370/0x450 [ 100.903722][ T73] ? __pfx_kthread+0x10/0x10 [ 100.905570][ T73] ret_from_fork+0x72b/0xd50 [ 100.907416][ T73] ? __pfx_ret_from_fork+0x10/0x10 [ 100.909454][ T73] ? __switch_to+0x800/0x10f0 [ 100.911354][ T73] ? __pfx_kthread+0x10/0x10 [ 100.913198][ T73] ret_from_fork_asm+0x1a/0x30 [ 100.915116][ T73] [ 100.916950][ T73] Kernel Offset: disabled [ 100.918678][ T73] Rebooting in 86400 seconds..