[ 53.085630][ T40] audit: type=1400 audit(1767746800.200:60): avc: denied { rlimitinh } for pid=5861 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.094720][ T40] audit: type=1400 audit(1767746800.200:61): avc: denied { siginh } for pid=5861 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:26911' (ED25519) to the list of known hosts. [ 61.219933][ T40] audit: type=1400 audit(1767746808.360:62): avc: denied { execute } for pid=5934 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.229313][ T40] audit: type=1400 audit(1767746808.360:63): avc: denied { execute_no_trans } for pid=5934 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/01/07 00:46:49 parsed 1 programs [ 62.739456][ T40] audit: type=1400 audit(1767746809.880:64): avc: denied { node_bind } for pid=5934 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.259760][ T40] audit: type=1400 audit(1767746812.400:65): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.271645][ T40] audit: type=1400 audit(1767746812.420:66): avc: denied { mount } for pid=5946 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.274434][ T5946] cgroup: Unknown subsys name 'net' [ 65.286276][ T40] audit: type=1400 audit(1767746812.430:67): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.440240][ T5946] cgroup: Unknown subsys name 'cpuset' [ 65.447224][ T5946] cgroup: Unknown subsys name 'rlimit' [ 65.633636][ T40] audit: type=1400 audit(1767746812.770:68): avc: denied { setattr } for pid=5946 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.643335][ T40] audit: type=1400 audit(1767746812.770:69): avc: denied { create } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.651502][ T40] audit: type=1400 audit(1767746812.770:70): avc: denied { write } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.661358][ T40] audit: type=1400 audit(1767746812.770:71): avc: denied { read } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.719940][ T5949] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.791642][ T5946] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.987336][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 68.987355][ T40] audit: type=1400 audit(1767746816.130:82): avc: denied { execmem } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.998568][ T40] audit: type=1400 audit(1767746816.130:83): avc: denied { create } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.008395][ T40] audit: type=1400 audit(1767746816.130:84): avc: denied { read write } for pid=5954 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.019118][ T40] audit: type=1400 audit(1767746816.130:85): avc: denied { open } for pid=5954 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 69.019844][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.030004][ T40] audit: type=1400 audit(1767746816.150:86): avc: denied { ioctl } for pid=5954 comm="syz-executor" path="socket:[1990]" dev="sockfs" ino=1990 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.034270][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.049414][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.053693][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.058030][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.066352][ T40] audit: type=1400 audit(1767746816.210:87): avc: denied { read } for pid=5954 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.085451][ T40] audit: type=1400 audit(1767746816.220:88): avc: denied { open } for pid=5954 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.096323][ T40] audit: type=1400 audit(1767746816.220:89): avc: denied { mounton } for pid=5954 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 69.168586][ T40] audit: type=1400 audit(1767746816.310:90): avc: denied { mount } for pid=5954 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.181236][ T40] audit: type=1400 audit(1767746816.330:91): avc: denied { mounton } for pid=5954 comm="syz-executor" path="/syzkaller.omqrTw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.220045][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.966578][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 70.063172][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.067066][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.070343][ T5975] bridge_slave_0: entered allmulticast mode [ 70.074579][ T5975] bridge_slave_0: entered promiscuous mode [ 70.080552][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.083717][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.086834][ T5975] bridge_slave_1: entered allmulticast mode [ 70.091285][ T5975] bridge_slave_1: entered promiscuous mode [ 70.129296][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.136903][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.166081][ T5975] team0: Port device team_slave_0 added [ 70.170758][ T5975] team0: Port device team_slave_1 added [ 70.194618][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.198188][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.209096][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.216632][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.219845][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.230567][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.264676][ T5975] hsr_slave_0: entered promiscuous mode [ 70.267322][ T5975] hsr_slave_1: entered promiscuous mode [ 70.396368][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.404451][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.409467][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.415412][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.447803][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.451246][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.456965][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.460440][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.510362][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.525539][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.531223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.539942][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.548095][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.551449][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.559781][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.563398][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.725115][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.761205][ T5975] veth0_vlan: entered promiscuous mode [ 70.769862][ T5975] veth1_vlan: entered promiscuous mode [ 70.794763][ T5975] veth0_macvtap: entered promiscuous mode [ 70.799350][ T5975] veth1_macvtap: entered promiscuous mode [ 70.813156][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.822375][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.830745][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834672][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840486][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.844452][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942487][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.050291][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.141774][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.212067][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.757589][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.760861][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.798019][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.802167][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/07 00:47:00 executed programs: 0 [ 73.167289][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.171132][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.174106][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.178616][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.181741][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.305243][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 73.392340][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.395470][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.398641][ T6058] bridge_slave_0: entered allmulticast mode [ 73.402531][ T6058] bridge_slave_0: entered promiscuous mode [ 73.407604][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.410933][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.414029][ T6058] bridge_slave_1: entered allmulticast mode [ 73.418222][ T6058] bridge_slave_1: entered promiscuous mode [ 73.446125][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.453698][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.481888][ T6058] team0: Port device team_slave_0 added [ 73.485714][ T6058] team0: Port device team_slave_1 added [ 73.501221][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.503894][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.512567][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.517242][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.519353][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.529150][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.568474][ T6058] hsr_slave_0: entered promiscuous mode [ 73.572357][ T6058] hsr_slave_1: entered promiscuous mode [ 73.576633][ T6058] debugfs: 'hsr0' already exists in 'hsr' [ 73.579188][ T6058] Cannot create hsr debugfs directory [ 74.368460][ T12] bridge_slave_1: left allmulticast mode [ 74.372881][ T12] bridge_slave_1: left promiscuous mode [ 74.376380][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.384230][ T12] bridge_slave_0: left allmulticast mode [ 74.388708][ T12] bridge_slave_0: left promiscuous mode [ 74.391702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.666048][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.671193][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.675602][ T12] bond0 (unregistering): Released all slaves [ 74.751523][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 74.751535][ T40] audit: type=1400 audit(1767746821.890:112): avc: denied { create } for pid=6070 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.764365][ T40] audit: type=1400 audit(1767746821.900:113): avc: denied { write } for pid=6070 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.773056][ T40] audit: type=1400 audit(1767746821.900:114): avc: denied { append } for pid=6070 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.793345][ T12] hsr_slave_0: left promiscuous mode [ 74.798347][ T12] hsr_slave_1: left promiscuous mode [ 74.800429][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.803120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.807673][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.810837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.816436][ T40] audit: type=1400 audit(1767746821.960:115): avc: denied { unlink } for pid=6073 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.827236][ T12] veth1_macvtap: left promiscuous mode [ 74.829309][ T12] veth0_macvtap: left promiscuous mode [ 74.833460][ T12] veth1_vlan: left promiscuous mode [ 74.835575][ T12] veth0_vlan: left promiscuous mode [ 75.140453][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.163080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.215714][ T5294] Bluetooth: hci0: command tx timeout [ 75.679949][ T6058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.696257][ T6058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.713896][ T6058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.721966][ T6058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.787750][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.799351][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.805053][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.807941][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.818538][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.821073][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.233982][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.269001][ T6058] veth0_vlan: entered promiscuous mode [ 76.277582][ T6058] veth1_vlan: entered promiscuous mode [ 76.298203][ T6058] veth0_macvtap: entered promiscuous mode [ 76.306762][ T6058] veth1_macvtap: entered promiscuous mode [ 76.343828][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.361084][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.382023][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.469187][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.476588][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.480497][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.512322][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.515270][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.563012][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.566163][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.587475][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.590692][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.639536][ T40] audit: type=1400 audit(1767746823.780:116): avc: denied { read write } for pid=6096 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.655337][ T40] audit: type=1400 audit(1767746823.780:117): avc: denied { open } for pid=6096 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.664991][ T40] audit: type=1400 audit(1767746823.780:118): avc: denied { ioctl } for pid=6096 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.885280][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.047753][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 77.052058][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 77.056511][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 229, changing to 11 [ 77.061765][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 17664, setting to 1024 [ 77.067681][ T34] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 77.071875][ T34] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 77.075725][ T34] usb 5-1: Manufacturer: syz [ 77.080921][ T34] usb 5-1: config 0 descriptor?? [ 77.085054][ T6096] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.093807][ T34] smsusb:smsusb_probe: board id=9, interface number 0 [ 77.101438][ T34] smsusb:siano_media_device_register: media controller created [ 77.106555][ T34] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 77.108929][ T34] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 77.112007][ T34] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 77.117160][ T34] ------------[ cut here ]------------ [ 77.119554][ T34] WARNING: mm/slub.c:6789 at free_large_kmalloc+0xfd/0x160, CPU#3: kworker/3:0/34 [ 77.123344][ T34] Modules linked in: [ 77.125287][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 77.129297][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.134307][ T34] Workqueue: usb_hub_wq hub_event [ 77.136677][ T34] RIP: 0010:free_large_kmalloc+0xfd/0x160 [ 77.138949][ T34] Code: 75 27 90 0f 0b 90 80 3d 0c a9 54 0e 00 74 4e 48 8b 74 24 20 48 89 ef e8 71 f1 0b 00 bd 00 f0 ff ff 45 31 e4 e9 63 ff ff ff 90 <0f> 0b 90 48 c7 c6 1c 99 ab 8d 48 89 df 5b 5d 41 5c 41 5d e9 7b 29 [ 77.147156][ T34] RSP: 0018:ffffc900006decf0 EFLAGS: 00010202 [ 77.149958][ T34] RAX: 00000000000000ff RBX: ffffea0001419880 RCX: ffffffff816e965e [ 77.153878][ T34] RDX: 0000000000000000 RSI: ffff888050662000 RDI: ffffea0001419880 [ 77.157802][ T34] RBP: ffff888050662000 R08: 0000000000000007 R09: 0000000000000000 [ 77.161231][ T34] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888021bfd000 [ 77.164631][ T34] R13: ffff888021bfc000 R14: dffffc0000000000 R15: ffff888021bfd0f0 [ 77.167872][ T34] FS: 0000000000000000(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 77.171766][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.174554][ T34] CR2: 00007fff9fcc4d80 CR3: 0000000034055000 CR4: 0000000000352ef0 [ 77.177976][ T34] Call Trace: [ 77.179400][ T34] [ 77.180629][ T34] usb_free_urb.part.0+0xe5/0x100 [ 77.182969][ T34] usb_free_urb+0x1f/0x30 [ 77.184988][ T34] smsusb_term_device+0x108/0x210 [ 77.187103][ T34] smsusb_init_device+0xac5/0xe70 [ 77.189341][ T34] ? __pfx_smsusb_init_device+0x10/0x10 [ 77.192012][ T34] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 77.194551][ T34] ? usb_clear_halt+0x61/0x160 [ 77.196677][ T34] smsusb_probe+0x5f8/0x1180 [ 77.198657][ T34] ? __pfx_smsusb_probe+0x10/0x10 [ 77.200518][ T34] ? mark_held_locks+0x49/0x80 [ 77.202366][ T34] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.204633][ T34] ? __pm_runtime_set_status+0x13c/0xa80 [ 77.207079][ T34] usb_probe_interface+0x303/0xa80 [ 77.209147][ T34] ? __pfx_usb_probe_interface+0x10/0x10 [ 77.211417][ T34] really_probe+0x241/0xb20 [ 77.213314][ T34] __driver_probe_device+0x1de/0x470 [ 77.215879][ T34] driver_probe_device+0x4c/0x1b0 [ 77.217975][ T34] __device_attach_driver+0x1df/0x350 [ 77.220315][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 77.222850][ T34] bus_for_each_drv+0x159/0x1e0 [ 77.224974][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.227162][ T34] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.229274][ T34] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.231789][ T34] __device_attach+0x1e4/0x4e0 [ 77.233860][ T34] ? __pfx___device_attach+0x10/0x10 [ 77.236202][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 77.238333][ T34] device_initial_probe+0xaa/0xc0 [ 77.240612][ T34] bus_probe_device+0x64/0x150 [ 77.242693][ T34] device_add+0x116e/0x1980 [ 77.244542][ T34] ? __pfx_device_add+0x10/0x10 [ 77.246638][ T34] ? preempt_schedule_thunk+0x16/0x30 [ 77.248790][ T34] usb_set_configuration+0x1187/0x1e50 [ 77.251056][ T34] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 77.253557][ T34] usb_generic_driver_probe+0xb1/0x110 [ 77.256225][ T34] usb_probe_device+0xef/0x400 [ 77.258485][ T34] ? __pfx_usb_probe_device+0x10/0x10 [ 77.261029][ T34] really_probe+0x241/0xb20 [ 77.262897][ T34] __driver_probe_device+0x1de/0x470 [ 77.265227][ T34] ? usb_driver_applicable+0x1c7/0x220 [ 77.267461][ T34] driver_probe_device+0x4c/0x1b0 [ 77.269248][ T34] __device_attach_driver+0x1df/0x350 [ 77.271386][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 77.273629][ T34] bus_for_each_drv+0x159/0x1e0 [ 77.275861][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.278101][ T34] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.280444][ T34] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.282700][ T34] __device_attach+0x1e4/0x4e0 [ 77.284602][ T34] ? __pfx___device_attach+0x10/0x10 [ 77.286792][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 77.288846][ T34] device_initial_probe+0xaa/0xc0 [ 77.290703][ T34] bus_probe_device+0x64/0x150 [ 77.292639][ T34] device_add+0x116e/0x1980 [ 77.294379][ T34] ? __pfx_device_add+0x10/0x10 [ 77.295951][ T5294] Bluetooth: hci0: command tx timeout [ 77.296374][ T34] ? add_device_randomness+0xb7/0xf0 [ 77.300667][ T34] usb_new_device+0xd07/0x1a90 [ 77.302524][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 77.304493][ T34] ? __pfx_usb_new_device+0x10/0x10 [ 77.306687][ T34] ? mark_held_locks+0x49/0x80 [ 77.308585][ T34] hub_event+0x313a/0x52f0 [ 77.310535][ T34] ? __pfx_hub_event+0x10/0x10 [ 77.312541][ T34] ? free_object_list.isra.0+0x250/0x2a0 [ 77.315123][ T34] ? finish_task_switch.isra.0+0x202/0xbd0 [ 77.317524][ T34] ? rcu_is_watching+0x12/0xc0 [ 77.319490][ T34] process_one_work+0x9ba/0x1b20 [ 77.321255][ T34] ? __pfx_process_one_work+0x10/0x10 [ 77.323326][ T34] ? assign_work+0x1a0/0x250 [ 77.325078][ T34] worker_thread+0x6c8/0xf10 [ 77.326500][ T34] ? __pfx_worker_thread+0x10/0x10 [ 77.328064][ T34] kthread+0x3c5/0x780 [ 77.329392][ T34] ? __pfx_kthread+0x10/0x10 [ 77.330879][ T34] ? rcu_is_watching+0x12/0xc0 [ 77.332615][ T34] ? __pfx_kthread+0x10/0x10 [ 77.334265][ T34] ret_from_fork+0x983/0xb10 [ 77.336099][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 77.337937][ T34] ? __switch_to+0x7af/0x10d0 [ 77.339859][ T34] ? __pfx_kthread+0x10/0x10 [ 77.341725][ T34] ret_from_fork_asm+0x1a/0x30 [ 77.343446][ T34] [ 77.344411][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.346925][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted syzkaller #0 PREEMPT(full) [ 77.350209][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.353877][ T34] Workqueue: usb_hub_wq hub_event [ 77.355596][ T34] Call Trace: [ 77.356940][ T34] [ 77.357997][ T34] dump_stack_lvl+0x3d/0x1f0 [ 77.359745][ T34] vpanic+0x640/0x6f0 [ 77.361312][ T34] ? free_large_kmalloc+0xfd/0x160 [ 77.363113][ T34] panic+0xca/0xd0 [ 77.364375][ T34] ? __pfx_panic+0x10/0x10 [ 77.365972][ T34] ? check_panic_on_warn+0x1f/0xb0 [ 77.367823][ T34] check_panic_on_warn+0xab/0xb0 [ 77.369530][ T34] __warn+0x108/0x3c0 [ 77.370911][ T34] __report_bug+0x2a0/0x520 [ 77.372636][ T34] ? free_large_kmalloc+0xfd/0x160 [ 77.374530][ T34] ? __pfx___report_bug+0x10/0x10 [ 77.376298][ T34] ? worker_thread+0x6c8/0xf10 [ 77.378372][ T34] ? kthread+0x3c5/0x780 [ 77.379870][ T34] ? ret_from_fork+0x983/0xb10 [ 77.381647][ T34] ? ret_from_fork_asm+0x1a/0x30 [ 77.383726][ T34] ? find_held_lock+0x2b/0x80 [ 77.385742][ T34] ? smscore_unregister_device+0x566/0x850 [ 77.387866][ T34] ? free_large_kmalloc+0xfd/0x160 [ 77.389871][ T34] report_bug+0xb2/0x220 [ 77.391518][ T34] ? free_large_kmalloc+0xfd/0x160 [ 77.393289][ T34] handle_bug+0x127/0x260 [ 77.394700][ T34] exc_invalid_op+0x17/0x50 [ 77.396232][ T34] asm_exc_invalid_op+0x1a/0x20 [ 77.397911][ T34] RIP: 0010:free_large_kmalloc+0xfd/0x160 [ 77.400271][ T34] Code: 75 27 90 0f 0b 90 80 3d 0c a9 54 0e 00 74 4e 48 8b 74 24 20 48 89 ef e8 71 f1 0b 00 bd 00 f0 ff ff 45 31 e4 e9 63 ff ff ff 90 <0f> 0b 90 48 c7 c6 1c 99 ab 8d 48 89 df 5b 5d 41 5c 41 5d e9 7b 29 [ 77.406261][ T34] RSP: 0018:ffffc900006decf0 EFLAGS: 00010202 [ 77.408206][ T34] RAX: 00000000000000ff RBX: ffffea0001419880 RCX: ffffffff816e965e [ 77.411287][ T34] RDX: 0000000000000000 RSI: ffff888050662000 RDI: ffffea0001419880 [ 77.413770][ T34] RBP: ffff888050662000 R08: 0000000000000007 R09: 0000000000000000 [ 77.416178][ T34] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888021bfd000 [ 77.418613][ T34] R13: ffff888021bfc000 R14: dffffc0000000000 R15: ffff888021bfd0f0 [ 77.421213][ T34] ? __phys_addr+0xde/0x180 [ 77.422674][ T34] usb_free_urb.part.0+0xe5/0x100 [ 77.424473][ T34] usb_free_urb+0x1f/0x30 [ 77.425943][ T34] smsusb_term_device+0x108/0x210 [ 77.427650][ T34] smsusb_init_device+0xac5/0xe70 [ 77.429274][ T34] ? __pfx_smsusb_init_device+0x10/0x10 [ 77.431158][ T34] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 77.433022][ T34] ? usb_clear_halt+0x61/0x160 [ 77.434578][ T34] smsusb_probe+0x5f8/0x1180 [ 77.436305][ T34] ? __pfx_smsusb_probe+0x10/0x10 [ 77.438392][ T34] ? mark_held_locks+0x49/0x80 [ 77.440510][ T34] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.443024][ T34] ? __pm_runtime_set_status+0x13c/0xa80 [ 77.444836][ T34] usb_probe_interface+0x303/0xa80 [ 77.446756][ T34] ? __pfx_usb_probe_interface+0x10/0x10 [ 77.448801][ T34] really_probe+0x241/0xb20 [ 77.450549][ T34] __driver_probe_device+0x1de/0x470 [ 77.452662][ T34] driver_probe_device+0x4c/0x1b0 [ 77.454427][ T34] __device_attach_driver+0x1df/0x350 [ 77.456442][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 77.458480][ T34] bus_for_each_drv+0x159/0x1e0 [ 77.460180][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.462265][ T34] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.464286][ T34] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.466504][ T34] __device_attach+0x1e4/0x4e0 [ 77.468458][ T34] ? __pfx___device_attach+0x10/0x10 [ 77.470464][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 77.472126][ T34] device_initial_probe+0xaa/0xc0 [ 77.473757][ T34] bus_probe_device+0x64/0x150 [ 77.475315][ T34] device_add+0x116e/0x1980 [ 77.476745][ T34] ? __pfx_device_add+0x10/0x10 [ 77.478311][ T34] ? preempt_schedule_thunk+0x16/0x30 [ 77.480120][ T34] usb_set_configuration+0x1187/0x1e50 [ 77.482110][ T34] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 77.483995][ T34] usb_generic_driver_probe+0xb1/0x110 [ 77.485954][ T34] usb_probe_device+0xef/0x400 [ 77.487603][ T34] ? __pfx_usb_probe_device+0x10/0x10 [ 77.489437][ T34] really_probe+0x241/0xb20 [ 77.491019][ T34] __driver_probe_device+0x1de/0x470 [ 77.492632][ T34] ? usb_driver_applicable+0x1c7/0x220 [ 77.494348][ T34] driver_probe_device+0x4c/0x1b0 [ 77.495916][ T34] __device_attach_driver+0x1df/0x350 [ 77.497680][ T34] ? __pfx___device_attach_driver+0x10/0x10 [ 77.499533][ T34] bus_for_each_drv+0x159/0x1e0 [ 77.501283][ T34] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.503168][ T34] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.504926][ T34] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.506803][ T34] __device_attach+0x1e4/0x4e0 [ 77.508648][ T34] ? __pfx___device_attach+0x10/0x10 [ 77.510582][ T34] ? do_raw_spin_unlock+0x172/0x230 [ 77.512278][ T34] device_initial_probe+0xaa/0xc0 [ 77.513890][ T34] bus_probe_device+0x64/0x150 [ 77.515513][ T34] device_add+0x116e/0x1980 [ 77.516999][ T34] ? __pfx_device_add+0x10/0x10 [ 77.518508][ T34] ? add_device_randomness+0xb7/0xf0 [ 77.520144][ T34] usb_new_device+0xd07/0x1a90 [ 77.522009][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 77.523974][ T34] ? __pfx_usb_new_device+0x10/0x10 [ 77.526111][ T34] ? mark_held_locks+0x49/0x80 [ 77.527687][ T34] hub_event+0x313a/0x52f0 [ 77.529222][ T34] ? __pfx_hub_event+0x10/0x10 [ 77.531028][ T34] ? free_object_list.isra.0+0x250/0x2a0 [ 77.533027][ T34] ? finish_task_switch.isra.0+0x202/0xbd0 [ 77.535001][ T34] ? rcu_is_watching+0x12/0xc0 [ 77.536484][ T34] process_one_work+0x9ba/0x1b20 [ 77.538014][ T34] ? __pfx_process_one_work+0x10/0x10 [ 77.539734][ T34] ? assign_work+0x1a0/0x250 [ 77.541403][ T34] worker_thread+0x6c8/0xf10 [ 77.542957][ T34] ? __pfx_worker_thread+0x10/0x10 [ 77.544748][ T34] kthread+0x3c5/0x780 [ 77.546240][ T34] ? __pfx_kthread+0x10/0x10 [ 77.547857][ T34] ? rcu_is_watching+0x12/0xc0 [ 77.549454][ T34] ? __pfx_kthread+0x10/0x10 [ 77.550969][ T34] ret_from_fork+0x983/0xb10 [ 77.552408][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 77.554122][ T34] ? __switch_to+0x7af/0x10d0 [ 77.555594][ T34] ? __pfx_kthread+0x10/0x10 [ 77.557163][ T34] ret_from_fork_asm+0x1a/0x30 [ 77.558878][ T34] [ 77.560969][ T34] Kernel Offset: disabled [ 77.562516][ T34] Rebooting in 86400 seconds..