Warning: Permanently added '[localhost]:45081' (ED25519) to the list of known hosts. [ 60.128794][ T40] audit: type=1400 audit(1767745575.695:62): avc: denied { execute } for pid=5934 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.138743][ T40] audit: type=1400 audit(1767745575.695:63): avc: denied { execute_no_trans } for pid=5934 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/01/07 00:26:17 parsed 1 programs [ 61.658244][ T40] audit: type=1400 audit(1767745577.225:64): avc: denied { node_bind } for pid=5934 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.869605][ T40] audit: type=1400 audit(1767745579.435:65): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.880670][ T40] audit: type=1400 audit(1767745579.445:66): avc: denied { mount } for pid=5945 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.882907][ T5945] cgroup: Unknown subsys name 'net' [ 63.897109][ T40] audit: type=1400 audit(1767745579.465:67): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.074278][ T5945] cgroup: Unknown subsys name 'cpuset' [ 64.081208][ T5945] cgroup: Unknown subsys name 'rlimit' [ 64.257261][ T40] audit: type=1400 audit(1767745579.815:68): avc: denied { setattr } for pid=5945 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.265322][ T40] audit: type=1400 audit(1767745579.825:69): avc: denied { create } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.272203][ T40] audit: type=1400 audit(1767745579.825:70): avc: denied { write } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.279141][ T40] audit: type=1400 audit(1767745579.825:71): avc: denied { read } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.318616][ T5948] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.008164][ T5945] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.619848][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 66.619865][ T40] audit: type=1400 audit(1767745582.185:82): avc: denied { execmem } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.630055][ T40] audit: type=1400 audit(1767745582.185:83): avc: denied { read } for pid=5953 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.637552][ T40] audit: type=1400 audit(1767745582.185:84): avc: denied { open } for pid=5953 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.645732][ T40] audit: type=1400 audit(1767745582.185:85): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.695025][ T40] audit: type=1400 audit(1767745582.255:86): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.702376][ T40] audit: type=1400 audit(1767745582.255:87): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzkaller.UEZjZn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.717516][ T40] audit: type=1400 audit(1767745582.265:88): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.725024][ T40] audit: type=1400 audit(1767745582.265:89): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzkaller.UEZjZn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.741230][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.747442][ T40] audit: type=1400 audit(1767745582.265:90): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzkaller.UEZjZn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.756076][ T40] audit: type=1400 audit(1767745582.275:91): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.949214][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 67.033409][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.036886][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.039666][ T5959] bridge_slave_0: entered allmulticast mode [ 67.042992][ T5959] bridge_slave_0: entered promiscuous mode [ 67.048173][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.050606][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.053319][ T5959] bridge_slave_1: entered allmulticast mode [ 67.056652][ T5959] bridge_slave_1: entered promiscuous mode [ 67.083610][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.090493][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.120748][ T5959] team0: Port device team_slave_0 added [ 67.125698][ T5959] team0: Port device team_slave_1 added [ 67.152238][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.155256][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.166992][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.175268][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.178383][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.189946][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.233663][ T5959] hsr_slave_0: entered promiscuous mode [ 67.236956][ T5959] hsr_slave_1: entered promiscuous mode [ 67.393575][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.405261][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.412449][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.421352][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.452977][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.455441][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.458652][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.461171][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.496015][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.507505][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.511106][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.523942][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.532726][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.535918][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.544315][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.547471][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.701563][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.727018][ T5959] veth0_vlan: entered promiscuous mode [ 67.740402][ T5959] veth1_vlan: entered promiscuous mode [ 67.765607][ T5959] veth0_macvtap: entered promiscuous mode [ 67.771723][ T5959] veth1_macvtap: entered promiscuous mode [ 67.783358][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.792432][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.801308][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.805406][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.810352][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.814172][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.912506][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.979956][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.052997][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.108161][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.030753][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.033330][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.061753][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.064613][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.310280][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.313495][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.318940][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.326473][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.330332][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/01/07 00:26:25 executed programs: 0 [ 70.137869][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.141740][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.145409][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.150548][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.154074][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.268975][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 70.358037][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.360452][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.362831][ T6057] bridge_slave_0: entered allmulticast mode [ 70.366035][ T6057] bridge_slave_0: entered promiscuous mode [ 70.370014][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.372684][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.374954][ T6057] bridge_slave_1: entered allmulticast mode [ 70.378475][ T6057] bridge_slave_1: entered promiscuous mode [ 70.402121][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.407715][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.425015][ T6057] team0: Port device team_slave_0 added [ 70.428553][ T6057] team0: Port device team_slave_1 added [ 70.442949][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.445435][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.453107][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.458287][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.461849][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.470843][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.507539][ T6057] hsr_slave_0: entered promiscuous mode [ 70.510091][ T6057] hsr_slave_1: entered promiscuous mode [ 70.512143][ T6057] debugfs: 'hsr0' already exists in 'hsr' [ 70.514005][ T6057] Cannot create hsr debugfs directory [ 70.827299][ T1145] bridge_slave_1: left allmulticast mode [ 70.829608][ T1145] bridge_slave_1: left promiscuous mode [ 70.831740][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.839715][ T1145] bridge_slave_0: left allmulticast mode [ 70.841826][ T1145] bridge_slave_0: left promiscuous mode [ 70.844162][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.070197][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.077116][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.083128][ T1145] bond0 (unregistering): Released all slaves [ 71.249010][ T1145] hsr_slave_0: left promiscuous mode [ 71.253139][ T1145] hsr_slave_1: left promiscuous mode [ 71.256796][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.260475][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.265173][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.268644][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.282778][ T1145] veth1_macvtap: left promiscuous mode [ 71.285043][ T1145] veth0_macvtap: left promiscuous mode [ 71.287402][ T1145] veth1_vlan: left promiscuous mode [ 71.289298][ T1145] veth0_vlan: left promiscuous mode [ 71.542653][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 71.561370][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 72.119397][ T6057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.125452][ T6057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.136403][ T6057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.143126][ T6057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.178265][ T64] Bluetooth: hci0: command tx timeout [ 72.215323][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.230214][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.238411][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.241036][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.252295][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.255366][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.733354][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.789130][ T6057] veth0_vlan: entered promiscuous mode [ 72.795258][ T6057] veth1_vlan: entered promiscuous mode [ 72.824386][ T6057] veth0_macvtap: entered promiscuous mode [ 72.834312][ T6057] veth1_macvtap: entered promiscuous mode [ 72.851207][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.862748][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.877548][ T1260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.881100][ T1260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.884865][ T1260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.888506][ T1260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.965309][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.971425][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.984796][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.989876][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.029631][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 73.029644][ T40] audit: type=1400 audit(1767745588.595:116): avc: denied { read write } for pid=6094 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.042904][ T40] audit: type=1400 audit(1767745588.595:117): avc: denied { open } for pid=6094 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.054160][ T40] audit: type=1400 audit(1767745588.595:118): avc: denied { ioctl } for pid=6094 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.267475][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.430341][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 73.434251][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 73.438476][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 229, changing to 11 [ 73.442933][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 17664, setting to 1024 [ 73.454438][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 73.458196][ T24] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 73.461344][ T24] usb 5-1: Manufacturer: syz [ 73.478086][ T24] usb 5-1: config 0 descriptor?? [ 73.482832][ T6094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.490334][ T24] smsusb:smsusb_probe: board id=9, interface number 0 [ 73.495789][ T24] smsusb:siano_media_device_register: media controller created [ 73.500660][ T24] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 73.503505][ T24] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 73.506807][ T24] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 73.511651][ T24] ------------[ cut here ]------------ [ 73.513921][ T24] WARNING: mm/slub.c:6789 at free_large_kmalloc+0xfd/0x160, CPU#2: kworker/2:0/24 [ 73.517764][ T24] Modules linked in: [ 73.519490][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 73.523207][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.527650][ T24] Workqueue: usb_hub_wq hub_event [ 73.529755][ T24] RIP: 0010:free_large_kmalloc+0xfd/0x160 [ 73.532078][ T24] Code: 75 27 90 0f 0b 90 80 3d 0c a9 54 0e 00 74 4e 48 8b 74 24 20 48 89 ef e8 71 f1 0b 00 bd 00 f0 ff ff 45 31 e4 e9 63 ff ff ff 90 <0f> 0b 90 48 c7 c6 1c 99 ab 8d 48 89 df 5b 5d 41 5c 41 5d e9 7b 29 [ 73.539985][ T24] RSP: 0018:ffffc9000062ecf0 EFLAGS: 00010202 [ 73.542504][ T24] RAX: 00000000000000ff RBX: ffffea00015a3880 RCX: ffffffff816e965e [ 73.545786][ T24] RDX: 0000000000000000 RSI: ffff8880568e2000 RDI: ffffea00015a3880 [ 73.549131][ T24] RBP: ffff8880568e2000 R08: 0000000000000007 R09: 0000000000000000 [ 73.552270][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804731a000 [ 73.555468][ T24] R13: ffff888026e61000 R14: dffffc0000000000 R15: ffff88804731a0f0 [ 73.558907][ T24] FS: 0000000000000000(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 73.562659][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.565294][ T24] CR2: 0000560563ef1bf0 CR3: 00000000325af000 CR4: 0000000000352ef0 [ 73.569263][ T24] Call Trace: [ 73.570653][ T24] [ 73.571876][ T24] usb_free_urb.part.0+0xe5/0x100 [ 73.573956][ T24] usb_free_urb+0x1f/0x30 [ 73.575762][ T24] smsusb_term_device+0x108/0x210 [ 73.577927][ T24] smsusb_init_device+0xac5/0xe70 [ 73.580019][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 73.582272][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 73.584558][ T24] ? usb_clear_halt+0x61/0x160 [ 73.586539][ T24] smsusb_probe+0x5f8/0x1180 [ 73.588621][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 73.590756][ T24] ? mark_held_locks+0x49/0x80 [ 73.592741][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.595105][ T24] ? __pm_runtime_set_status+0x13c/0xa80 [ 73.597516][ T24] usb_probe_interface+0x303/0xa80 [ 73.599730][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.602143][ T24] really_probe+0x241/0xb20 [ 73.604203][ T24] __driver_probe_device+0x1de/0x470 [ 73.606408][ T24] driver_probe_device+0x4c/0x1b0 [ 73.608777][ T24] __device_attach_driver+0x1df/0x350 [ 73.611223][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.613878][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.615985][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.618353][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.620491][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.622842][ T24] __device_attach+0x1e4/0x4e0 [ 73.624822][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.627002][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 73.629189][ T24] device_initial_probe+0xaa/0xc0 [ 73.631221][ T24] bus_probe_device+0x64/0x150 [ 73.633186][ T24] device_add+0x116e/0x1980 [ 73.635016][ T24] ? __pfx_device_add+0x10/0x10 [ 73.636985][ T24] ? preempt_schedule_thunk+0x16/0x30 [ 73.639246][ T24] usb_set_configuration+0x1187/0x1e50 [ 73.641556][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.644166][ T24] usb_generic_driver_probe+0xb1/0x110 [ 73.646459][ T24] usb_probe_device+0xef/0x400 [ 73.648534][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 73.650709][ T24] really_probe+0x241/0xb20 [ 73.652600][ T24] __driver_probe_device+0x1de/0x470 [ 73.654747][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 73.657034][ T24] driver_probe_device+0x4c/0x1b0 [ 73.659174][ T24] __device_attach_driver+0x1df/0x350 [ 73.661379][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.663785][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.665819][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.668092][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.670650][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.673126][ T24] __device_attach+0x1e4/0x4e0 [ 73.675237][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.678049][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 73.680204][ T24] device_initial_probe+0xaa/0xc0 [ 73.682214][ T24] bus_probe_device+0x64/0x150 [ 73.684170][ T24] device_add+0x116e/0x1980 [ 73.686054][ T24] ? __pfx_device_add+0x10/0x10 [ 73.688295][ T24] ? add_device_randomness+0xb7/0xf0 [ 73.690554][ T24] usb_new_device+0xd07/0x1a90 [ 73.692887][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 73.695336][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 73.697633][ T24] ? mark_held_locks+0x49/0x80 [ 73.699590][ T24] hub_event+0x313a/0x52f0 [ 73.701468][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.703405][ T24] ? free_object_list.isra.0+0x250/0x2a0 [ 73.705647][ T24] ? finish_task_switch.isra.0+0x202/0xbd0 [ 73.708202][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.710166][ T24] process_one_work+0x9ba/0x1b20 [ 73.712233][ T24] ? __pfx_process_one_work+0x10/0x10 [ 73.714537][ T24] ? assign_work+0x1a0/0x250 [ 73.716650][ T24] worker_thread+0x6c8/0xf10 [ 73.718729][ T24] ? __pfx_worker_thread+0x10/0x10 [ 73.720827][ T24] kthread+0x3c5/0x780 [ 73.722552][ T24] ? __pfx_kthread+0x10/0x10 [ 73.724459][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.726461][ T24] ? __pfx_kthread+0x10/0x10 [ 73.728464][ T24] ret_from_fork+0x983/0xb10 [ 73.730399][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 73.732618][ T24] ? __switch_to+0x7af/0x10d0 [ 73.734699][ T24] ? __pfx_kthread+0x10/0x10 [ 73.736665][ T24] ret_from_fork_asm+0x1a/0x30 [ 73.738725][ T24] [ 73.739998][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.742887][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 73.746137][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.749619][ T24] Workqueue: usb_hub_wq hub_event [ 73.751315][ T24] Call Trace: [ 73.752464][ T24] [ 73.753461][ T24] dump_stack_lvl+0x3d/0x1f0 [ 73.754968][ T24] vpanic+0x640/0x6f0 [ 73.756262][ T24] ? free_large_kmalloc+0xfd/0x160 [ 73.757863][ T24] panic+0xca/0xd0 [ 73.759024][ T24] ? __pfx_panic+0x10/0x10 [ 73.760484][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 73.762116][ T24] check_panic_on_warn+0xab/0xb0 [ 73.763675][ T24] __warn+0x108/0x3c0 [ 73.764967][ T24] __report_bug+0x2a0/0x520 [ 73.766603][ T24] ? free_large_kmalloc+0xfd/0x160 [ 73.768659][ T24] ? __pfx___report_bug+0x10/0x10 [ 73.770253][ T24] ? worker_thread+0x6c8/0xf10 [ 73.771821][ T24] ? kthread+0x3c5/0x780 [ 73.773245][ T24] ? ret_from_fork+0x983/0xb10 [ 73.774809][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 73.776533][ T24] ? find_held_lock+0x2b/0x80 [ 73.778103][ T24] ? smscore_unregister_device+0x566/0x850 [ 73.780016][ T24] ? free_large_kmalloc+0xfd/0x160 [ 73.781641][ T24] report_bug+0xb2/0x220 [ 73.782995][ T24] ? free_large_kmalloc+0xfd/0x160 [ 73.784693][ T24] handle_bug+0x127/0x260 [ 73.786131][ T24] exc_invalid_op+0x17/0x50 [ 73.787625][ T24] asm_exc_invalid_op+0x1a/0x20 [ 73.789239][ T24] RIP: 0010:free_large_kmalloc+0xfd/0x160 [ 73.791158][ T24] Code: 75 27 90 0f 0b 90 80 3d 0c a9 54 0e 00 74 4e 48 8b 74 24 20 48 89 ef e8 71 f1 0b 00 bd 00 f0 ff ff 45 31 e4 e9 63 ff ff ff 90 <0f> 0b 90 48 c7 c6 1c 99 ab 8d 48 89 df 5b 5d 41 5c 41 5d e9 7b 29 [ 73.797628][ T24] RSP: 0018:ffffc9000062ecf0 EFLAGS: 00010202 [ 73.799596][ T24] RAX: 00000000000000ff RBX: ffffea00015a3880 RCX: ffffffff816e965e [ 73.802191][ T24] RDX: 0000000000000000 RSI: ffff8880568e2000 RDI: ffffea00015a3880 [ 73.804775][ T24] RBP: ffff8880568e2000 R08: 0000000000000007 R09: 0000000000000000 [ 73.807437][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804731a000 [ 73.810166][ T24] R13: ffff888026e61000 R14: dffffc0000000000 R15: ffff88804731a0f0 [ 73.812822][ T24] ? __phys_addr+0xde/0x180 [ 73.814310][ T24] usb_free_urb.part.0+0xe5/0x100 [ 73.816065][ T24] usb_free_urb+0x1f/0x30 [ 73.817556][ T24] smsusb_term_device+0x108/0x210 [ 73.819293][ T24] smsusb_init_device+0xac5/0xe70 [ 73.821053][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 73.822851][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 73.824777][ T24] ? usb_clear_halt+0x61/0x160 [ 73.826508][ T24] smsusb_probe+0x5f8/0x1180 [ 73.828113][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 73.829817][ T24] ? mark_held_locks+0x49/0x80 [ 73.831386][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.833313][ T24] ? __pm_runtime_set_status+0x13c/0xa80 [ 73.835184][ T24] usb_probe_interface+0x303/0xa80 [ 73.836882][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.838698][ T24] really_probe+0x241/0xb20 [ 73.840202][ T24] __driver_probe_device+0x1de/0x470 [ 73.841932][ T24] driver_probe_device+0x4c/0x1b0 [ 73.843583][ T24] __device_attach_driver+0x1df/0x350 [ 73.845443][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.847481][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.849253][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.851105][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.852848][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.854803][ T24] __device_attach+0x1e4/0x4e0 [ 73.856342][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.857983][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 73.859643][ T24] device_initial_probe+0xaa/0xc0 [ 73.861264][ T24] bus_probe_device+0x64/0x150 [ 73.862758][ T24] device_add+0x116e/0x1980 [ 73.864234][ T24] ? __pfx_device_add+0x10/0x10 [ 73.865779][ T24] ? preempt_schedule_thunk+0x16/0x30 [ 73.867429][ T24] usb_set_configuration+0x1187/0x1e50 [ 73.869232][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.871120][ T24] usb_generic_driver_probe+0xb1/0x110 [ 73.872846][ T24] usb_probe_device+0xef/0x400 [ 73.874424][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 73.876274][ T24] really_probe+0x241/0xb20 [ 73.877771][ T24] __driver_probe_device+0x1de/0x470 [ 73.879544][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 73.881423][ T24] driver_probe_device+0x4c/0x1b0 [ 73.883137][ T24] __device_attach_driver+0x1df/0x350 [ 73.884982][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.886975][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.888598][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.890337][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.892030][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.893930][ T24] __device_attach+0x1e4/0x4e0 [ 73.895511][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.897240][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 73.898945][ T24] device_initial_probe+0xaa/0xc0 [ 73.901008][ T24] bus_probe_device+0x64/0x150 [ 73.902658][ T24] device_add+0x116e/0x1980 [ 73.904232][ T24] ? __pfx_device_add+0x10/0x10 [ 73.905920][ T24] ? add_device_randomness+0xb7/0xf0 [ 73.907742][ T24] usb_new_device+0xd07/0x1a90 [ 73.909484][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 73.911287][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 73.912940][ T24] ? mark_held_locks+0x49/0x80 [ 73.914447][ T24] hub_event+0x313a/0x52f0 [ 73.916099][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.917730][ T24] ? free_object_list.isra.0+0x250/0x2a0 [ 73.919594][ T24] ? finish_task_switch.isra.0+0x202/0xbd0 [ 73.921542][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.923134][ T24] process_one_work+0x9ba/0x1b20 [ 73.925026][ T24] ? __pfx_process_one_work+0x10/0x10 [ 73.926759][ T24] ? assign_work+0x1a0/0x250 [ 73.928282][ T24] worker_thread+0x6c8/0xf10 [ 73.929774][ T24] ? __pfx_worker_thread+0x10/0x10 [ 73.931445][ T24] kthread+0x3c5/0x780 [ 73.932885][ T24] ? __pfx_kthread+0x10/0x10 [ 73.934512][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.936167][ T24] ? __pfx_kthread+0x10/0x10 [ 73.937690][ T24] ret_from_fork+0x983/0xb10 [ 73.939180][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 73.940810][ T24] ? __switch_to+0x7af/0x10d0 [ 73.942325][ T24] ? __pfx_kthread+0x10/0x10 [ 73.943814][ T24] ret_from_fork_asm+0x1a/0x30 [ 73.945410][ T24] [ 73.947142][ T24] Kernel Offset: disabled [ 73.948534][ T24] Rebooting in 86400 seconds..