Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2026/03/19 21:46:30 parsed 1 programs [ 56.055865][ T30] audit: type=1400 audit(1773956790.499:62): avc: denied { node_bind } for pid=5802 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.139453][ T30] audit: type=1400 audit(1773956792.579:63): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.163016][ T30] audit: type=1400 audit(1773956792.599:64): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.166210][ T5809] cgroup: Unknown subsys name 'net' [ 58.192177][ T30] audit: type=1400 audit(1773956792.629:65): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.318024][ T5809] cgroup: Unknown subsys name 'cpuset' [ 58.326009][ T5809] cgroup: Unknown subsys name 'rlimit' [ 58.436488][ T30] audit: type=1400 audit(1773956792.879:66): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.460012][ T30] audit: type=1400 audit(1773956792.879:67): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.512423][ T30] audit: type=1400 audit(1773956792.879:68): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.534105][ T30] audit: type=1400 audit(1773956792.879:69): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.554534][ T30] audit: type=1400 audit(1773956792.899:70): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.575252][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.580309][ T30] audit: type=1400 audit(1773956792.899:71): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.553263][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.168639][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 61.168654][ T30] audit: type=1400 audit(1773956795.609:76): avc: denied { execmem } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.215338][ T30] audit: type=1400 audit(1773956795.659:77): avc: denied { read } for pid=5819 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.236587][ T30] audit: type=1400 audit(1773956795.659:78): avc: denied { open } for pid=5819 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.260888][ T30] audit: type=1400 audit(1773956795.659:79): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.282794][ T30] audit: type=1400 audit(1773956795.719:80): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.KVvQgw/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.307387][ T30] audit: type=1400 audit(1773956795.719:81): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.329473][ T30] audit: type=1400 audit(1773956795.729:82): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.KVvQgw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.355342][ T30] audit: type=1400 audit(1773956795.729:83): avc: denied { mount } for pid=5819 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.359307][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.391680][ T30] audit: type=1400 audit(1773956795.729:84): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.KVvQgw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.418285][ T30] audit: type=1400 audit(1773956795.729:85): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/root/syzkaller.KVvQgw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.521761][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.537229][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.545074][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.552803][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.560575][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.605152][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 62.680989][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.689980][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.697118][ T5858] bridge_slave_0: entered allmulticast mode [ 62.703817][ T5858] bridge_slave_0: entered promiscuous mode [ 62.712861][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.719985][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.727776][ T5858] bridge_slave_1: entered allmulticast mode [ 62.735289][ T5858] bridge_slave_1: entered promiscuous mode [ 62.764535][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.775487][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.798854][ T5858] team0: Port device team_slave_0 added [ 62.806383][ T5858] team0: Port device team_slave_1 added [ 62.823548][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.830618][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.856586][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.868951][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.876048][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.902223][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.934500][ T5858] hsr_slave_0: entered promiscuous mode [ 62.940573][ T5858] hsr_slave_1: entered promiscuous mode [ 63.032680][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.042903][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.052769][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.062374][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.083339][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.090477][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.098185][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.105384][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.142634][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.158235][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.166447][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.177758][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.189575][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.196649][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.216061][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.223143][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.327114][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.355454][ T5858] veth0_vlan: entered promiscuous mode [ 63.366330][ T5858] veth1_vlan: entered promiscuous mode [ 63.386595][ T5858] veth0_macvtap: entered promiscuous mode [ 63.395735][ T5858] veth1_macvtap: entered promiscuous mode [ 63.410432][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.422846][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.436861][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.447385][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.457226][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.467212][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.556037][ T128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.641198][ T128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.720667][ T128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.754372][ T128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.407206][ T411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.424497][ T411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.447247][ T411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.455698][ T411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/19 21:46:39 executed programs: 0 [ 64.743361][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.751673][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.759770][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.769442][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.778560][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.883345][ T5911] chnl_net:caif_netlink_parms(): no params data found [ 64.930392][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.940555][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.947936][ T5911] bridge_slave_0: entered allmulticast mode [ 64.954797][ T5911] bridge_slave_0: entered promiscuous mode [ 64.962816][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.970085][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.977478][ T5911] bridge_slave_1: entered allmulticast mode [ 64.984124][ T5911] bridge_slave_1: entered promiscuous mode [ 65.004028][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.015497][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.040833][ T5911] team0: Port device team_slave_0 added [ 65.048040][ T5911] team0: Port device team_slave_1 added [ 65.072253][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.079236][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.105427][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.117513][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.125001][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.152088][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.186847][ T5911] hsr_slave_0: entered promiscuous mode [ 65.192905][ T5911] hsr_slave_1: entered promiscuous mode [ 65.198995][ T5911] debugfs: 'hsr0' already exists in 'hsr' [ 65.204966][ T5911] Cannot create hsr debugfs directory [ 65.817586][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.823916][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.481084][ T128] bridge_slave_1: left allmulticast mode [ 66.489207][ T128] bridge_slave_1: left promiscuous mode [ 66.495590][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.505650][ T128] bridge_slave_0: left allmulticast mode [ 66.511279][ T128] bridge_slave_0: left promiscuous mode [ 66.517006][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.630115][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.640191][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.649705][ T128] bond0 (unregistering): Released all slaves [ 66.779428][ T128] hsr_slave_0: left promiscuous mode [ 66.786697][ T128] hsr_slave_1: left promiscuous mode [ 66.792713][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.801640][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.810222][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.818007][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.840124][ T128] veth1_macvtap: left promiscuous mode [ 66.845868][ T128] veth0_macvtap: left promiscuous mode [ 66.851500][ T128] veth1_vlan: left promiscuous mode [ 66.857627][ T5132] Bluetooth: hci0: command tx timeout [ 66.863885][ T128] veth0_vlan: left promiscuous mode [ 67.023172][ T128] team0 (unregistering): Port device team_slave_1 removed [ 67.038012][ T128] team0 (unregistering): Port device team_slave_0 removed [ 67.368718][ T5911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.386115][ T5911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.398188][ T5911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.412219][ T5911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.633349][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.663533][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.678735][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.685864][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.711662][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.719235][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.008811][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.078856][ T5911] veth0_vlan: entered promiscuous mode [ 68.112453][ T5911] veth1_vlan: entered promiscuous mode [ 68.145011][ T5911] veth0_macvtap: entered promiscuous mode [ 68.157651][ T5911] veth1_macvtap: entered promiscuous mode [ 68.179370][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.192236][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.207750][ T411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220941][ T411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.237284][ T411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.262720][ T411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.319256][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.336435][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.388784][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.399253][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.463665][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 68.463681][ T30] audit: type=1400 audit(1773956802.899:105): avc: denied { read write } for pid=5990 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.503909][ T30] audit: type=1400 audit(1773956802.939:106): avc: denied { open } for pid=5990 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.527931][ T30] audit: type=1400 audit(1773956802.939:107): avc: denied { ioctl } for pid=5990 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.734627][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.884488][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 68.891863][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.901658][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 68.911487][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 68.922996][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 66, changing to 7 [ 68.934426][ T5132] Bluetooth: hci0: command tx timeout [ 68.939896][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 41605, setting to 1024 [ 68.953031][ T9] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 68.962111][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.970693][ T9] usb 1-1: Product: syz [ 68.974865][ T9] usb 1-1: Manufacturer: syz [ 68.979436][ T9] usb 1-1: SerialNumber: syz [ 68.987233][ T9] usb 1-1: config 0 descriptor?? [ 68.996599][ T9] smsusb:smsusb_probe: board id=2, interface number 0 [ 69.006079][ T9] smsusb:siano_media_device_register: media controller created [ 69.015607][ T9] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 69.023179][ T9] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 69.032122][ T9] ------------[ cut here ]------------ [ 69.037595][ T9] !PageLargeKmalloc(page) [ 69.037606][ T9] WARNING: mm/slub.c:6393 at free_large_kmalloc+0x96/0xd0, CPU#0: kworker/0:0/9 [ 69.050945][ T9] Modules linked in: [ 69.054921][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 69.064017][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.074097][ T9] Workqueue: usb_hub_wq hub_event [ 69.079177][ T9] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 69.084830][ T9] Code: 28 90 0f 0b 90 80 3d b7 04 59 0e 00 0f 84 95 62 bb fe 48 8b 74 24 28 48 89 ef e8 e5 3b 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e4 2e e6 8d 5b 5d 41 5c 41 [ 69.104515][ T9] RSP: 0018:ffffc900000e6d70 EFLAGS: 00010202 [ 69.110576][ T9] RAX: 00000000000000ff RBX: ffffea00017e1880 RCX: ffffffff81b9d74e [ 69.118555][ T9] RDX: 0000000000000000 RSI: ffff88805f862000 RDI: ffffea00017e1880 [ 69.126556][ T9] RBP: ffff88805f862000 R08: 0000000000000007 R09: 0000000000000000 [ 69.134796][ T9] R10: 0000000000000000 R11: ffffffff82752834 R12: ffff88807c7a7000 [ 69.142747][ T9] R13: ffff88807c7a6000 R14: dffffc0000000000 R15: ffff88807c7a70f0 [ 69.150979][ T9] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 69.160005][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.166641][ T9] CR2: 00007ffc91faf0f0 CR3: 00000000345eb000 CR4: 00000000003526f0 [ 69.174664][ T9] Call Trace: [ 69.177942][ T9] [ 69.180854][ T9] usb_free_urb.part.0+0xf8/0x110 [ 69.185897][ T9] usb_free_urb+0x1f/0x30 [ 69.190218][ T9] smsusb_term_device+0x108/0x200 [ 69.195262][ T9] smsusb_init_device+0xb4e/0xbb0 [ 69.200289][ T9] ? __pfx_smsusb_init_device+0x10/0x10 [ 69.205870][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 69.211423][ T9] ? usb_clear_halt+0x61/0x160 [ 69.216212][ T9] smsusb_probe+0xd7f/0xe1f [ 69.220712][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 69.225744][ T9] ? mark_held_locks+0x40/0x70 [ 69.230509][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.236728][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.242518][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 69.248468][ T9] usb_probe_interface+0x303/0x8f0 [ 69.253587][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.259394][ T9] really_probe+0x241/0xa60 [ 69.263902][ T9] __driver_probe_device+0x1de/0x400 [ 69.269217][ T9] driver_probe_device+0x4c/0x1b0 [ 69.274257][ T9] __device_attach_driver+0x1df/0x340 [ 69.279707][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 69.285599][ T9] bus_for_each_drv+0x159/0x1e0 [ 69.290441][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.295825][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 69.301017][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.306898][ T9] __device_attach+0x1e4/0x4d0 [ 69.311671][ T9] ? __pfx___device_attach+0x10/0x10 [ 69.316967][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.322158][ T9] device_initial_probe+0xaf/0xd0 [ 69.327212][ T9] bus_probe_device+0x64/0x160 [ 69.331969][ T9] device_add+0x11d9/0x1950 [ 69.336931][ T9] ? __pfx_device_add+0x10/0x10 [ 69.341799][ T9] usb_set_configuration+0xd97/0x1c60 [ 69.347665][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 69.353762][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 69.359488][ T9] usb_probe_device+0xef/0x400 [ 69.364303][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 69.369690][ T9] really_probe+0x241/0xa60 [ 69.374276][ T9] __driver_probe_device+0x1de/0x400 [ 69.379564][ T9] ? usb_driver_applicable+0x1c7/0x220 [ 69.385064][ T9] driver_probe_device+0x4c/0x1b0 [ 69.390103][ T9] __device_attach_driver+0x1df/0x340 [ 69.395504][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 69.401410][ T9] bus_for_each_drv+0x159/0x1e0 [ 69.406285][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.411652][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 69.417157][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.422981][ T9] __device_attach+0x1e4/0x4d0 [ 69.427775][ T9] ? __pfx___device_attach+0x10/0x10 [ 69.433136][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.438368][ T9] device_initial_probe+0xaf/0xd0 [ 69.443631][ T9] bus_probe_device+0x64/0x160 [ 69.448678][ T9] device_add+0x11d9/0x1950 [ 69.453177][ T9] ? __pfx_device_add+0x10/0x10 [ 69.458042][ T9] ? add_device_randomness+0xb7/0xf0 [ 69.463362][ T9] usb_new_device.cold+0x685/0x115c [ 69.468589][ T9] ? do_raw_spin_lock+0x128/0x260 [ 69.473615][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 69.478834][ T9] ? mark_held_locks+0x40/0x70 [ 69.483598][ T9] hub_event+0x314d/0x4af0 [ 69.488069][ T9] ? __pfx_hub_event+0x10/0x10 [ 69.492832][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 69.498546][ T9] ? ttwu_queue_wakelist+0x70/0x430 [ 69.503779][ T9] ? rcu_is_watching+0x12/0xc0 [ 69.508570][ T9] process_one_work+0xa23/0x19a0 [ 69.513516][ T9] ? __pfx_process_one_work+0x10/0x10 [ 69.518915][ T9] ? __pfx_hub_event+0x10/0x10 [ 69.523677][ T9] worker_thread+0x5ef/0xe50 [ 69.528310][ T9] ? kthread+0x13a/0x450 [ 69.532544][ T9] ? __pfx_worker_thread+0x10/0x10 [ 69.537666][ T9] kthread+0x370/0x450 [ 69.541945][ T9] ? __pfx_kthread+0x10/0x10 [ 69.546814][ T9] ret_from_fork+0x754/0xd80 [ 69.551408][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 69.556529][ T9] ? __switch_to+0x7b4/0x1120 [ 69.561196][ T9] ? __pfx_kthread+0x10/0x10 [ 69.565803][ T9] ret_from_fork_asm+0x1a/0x30 [ 69.570576][ T9] [ 69.573570][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.580825][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 69.589912][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.599949][ T9] Workqueue: usb_hub_wq hub_event [ 69.604965][ T9] Call Trace: [ 69.608223][ T9] [ 69.611151][ T9] dump_stack_lvl+0x100/0x190 [ 69.615825][ T9] vpanic+0x552/0x970 [ 69.619795][ T9] ? __pfx_vpanic+0x10/0x10 [ 69.624285][ T9] panic+0xd1/0xe0 [ 69.627985][ T9] ? __pfx_panic+0x10/0x10 [ 69.632386][ T9] ? check_panic_on_warn+0x1f/0x90 [ 69.637476][ T9] check_panic_on_warn.cold+0x19/0x34 [ 69.642830][ T9] ? free_large_kmalloc+0x96/0xd0 [ 69.647839][ T9] __warn.cold+0x191/0x348 [ 69.652238][ T9] __report_bug+0x296/0x3d0 [ 69.656725][ T9] ? free_large_kmalloc+0x96/0xd0 [ 69.661742][ T9] ? __pfx___report_bug+0x10/0x10 [ 69.666749][ T9] ? device_initial_probe+0xaf/0xd0 [ 69.671934][ T9] ? bus_probe_device+0x64/0x160 [ 69.676856][ T9] ? device_add+0x11d9/0x1950 [ 69.681512][ T9] ? usb_new_device.cold+0x685/0x115c [ 69.686869][ T9] ? hub_event+0x314d/0x4af0 [ 69.691444][ T9] ? process_one_work+0xa23/0x19a0 [ 69.696548][ T9] ? worker_thread+0x5ef/0xe50 [ 69.701293][ T9] ? kthread+0x370/0x450 [ 69.705527][ T9] ? ret_from_fork+0x754/0xd80 [ 69.710271][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 69.715205][ T9] ? find_held_lock+0x2b/0x80 [ 69.719866][ T9] ? smscore_unregister_device+0x537/0x7f0 [ 69.725651][ T9] ? smscore_unregister_device+0x537/0x7f0 [ 69.731437][ T9] ? free_large_kmalloc+0x96/0xd0 [ 69.736442][ T9] report_bug+0xb2/0x220 [ 69.740667][ T9] ? free_large_kmalloc+0x96/0xd0 [ 69.745676][ T9] handle_bug+0x16a/0x2a0 [ 69.749992][ T9] exc_invalid_op+0x17/0x50 [ 69.754479][ T9] asm_exc_invalid_op+0x1a/0x20 [ 69.759309][ T9] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 69.764931][ T9] Code: 28 90 0f 0b 90 80 3d b7 04 59 0e 00 0f 84 95 62 bb fe 48 8b 74 24 28 48 89 ef e8 e5 3b 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 e4 2e e6 8d 5b 5d 41 5c 41 [ 69.784543][ T9] RSP: 0018:ffffc900000e6d70 EFLAGS: 00010202 [ 69.790607][ T9] RAX: 00000000000000ff RBX: ffffea00017e1880 RCX: ffffffff81b9d74e [ 69.798557][ T9] RDX: 0000000000000000 RSI: ffff88805f862000 RDI: ffffea00017e1880 [ 69.806516][ T9] RBP: ffff88805f862000 R08: 0000000000000007 R09: 0000000000000000 [ 69.814466][ T9] R10: 0000000000000000 R11: ffffffff82752834 R12: ffff88807c7a7000 [ 69.822443][ T9] R13: ffff88807c7a6000 R14: dffffc0000000000 R15: ffff88807c7a70f0 [ 69.830415][ T9] ? kasan_save_track+0x14/0x30 [ 69.835264][ T9] ? __phys_addr+0xde/0x180 [ 69.839790][ T9] usb_free_urb.part.0+0xf8/0x110 [ 69.844805][ T9] usb_free_urb+0x1f/0x30 [ 69.849149][ T9] smsusb_term_device+0x108/0x200 [ 69.854170][ T9] smsusb_init_device+0xb4e/0xbb0 [ 69.859210][ T9] ? __pfx_smsusb_init_device+0x10/0x10 [ 69.864765][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 69.870311][ T9] ? usb_clear_halt+0x61/0x160 [ 69.875075][ T9] smsusb_probe+0xd7f/0xe1f [ 69.879582][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 69.884602][ T9] ? mark_held_locks+0x40/0x70 [ 69.889354][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 69.895146][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.901029][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 69.906655][ T9] usb_probe_interface+0x303/0x8f0 [ 69.911864][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.917485][ T9] really_probe+0x241/0xa60 [ 69.921983][ T9] __driver_probe_device+0x1de/0x400 [ 69.927265][ T9] driver_probe_device+0x4c/0x1b0 [ 69.932276][ T9] __device_attach_driver+0x1df/0x340 [ 69.937639][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 69.943520][ T9] bus_for_each_drv+0x159/0x1e0 [ 69.948357][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.953712][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 69.958896][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.964688][ T9] __device_attach+0x1e4/0x4d0 [ 69.969441][ T9] ? __pfx___device_attach+0x10/0x10 [ 69.974712][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.979897][ T9] device_initial_probe+0xaf/0xd0 [ 69.986089][ T9] bus_probe_device+0x64/0x160 [ 69.990882][ T9] device_add+0x11d9/0x1950 [ 69.995390][ T9] ? __pfx_device_add+0x10/0x10 [ 70.000231][ T9] usb_set_configuration+0xd97/0x1c60 [ 70.005601][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 70.011652][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 70.017008][ T9] usb_probe_device+0xef/0x400 [ 70.021766][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 70.027139][ T9] really_probe+0x241/0xa60 [ 70.031634][ T9] __driver_probe_device+0x1de/0x400 [ 70.036904][ T9] ? usb_driver_applicable+0x1c7/0x220 [ 70.042351][ T9] driver_probe_device+0x4c/0x1b0 [ 70.047364][ T9] __device_attach_driver+0x1df/0x340 [ 70.052726][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 70.058610][ T9] bus_for_each_drv+0x159/0x1e0 [ 70.063446][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.068800][ T9] ? lockdep_hardirqs_on+0x78/0x100 [ 70.073981][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.079772][ T9] __device_attach+0x1e4/0x4d0 [ 70.084540][ T9] ? __pfx___device_attach+0x10/0x10 [ 70.089813][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.095013][ T9] device_initial_probe+0xaf/0xd0 [ 70.100028][ T9] bus_probe_device+0x64/0x160 [ 70.104778][ T9] device_add+0x11d9/0x1950 [ 70.109278][ T9] ? __pfx_device_add+0x10/0x10 [ 70.114131][ T9] ? add_device_randomness+0xb7/0xf0 [ 70.119427][ T9] usb_new_device.cold+0x685/0x115c [ 70.124616][ T9] ? do_raw_spin_lock+0x128/0x260 [ 70.129625][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 70.134813][ T9] ? mark_held_locks+0x40/0x70 [ 70.139568][ T9] hub_event+0x314d/0x4af0 [ 70.143986][ T9] ? __pfx_hub_event+0x10/0x10 [ 70.148733][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.154350][ T9] ? ttwu_queue_wakelist+0x70/0x430 [ 70.159556][ T9] ? rcu_is_watching+0x12/0xc0 [ 70.164314][ T9] process_one_work+0xa23/0x19a0 [ 70.169267][ T9] ? __pfx_process_one_work+0x10/0x10 [ 70.174643][ T9] ? __pfx_hub_event+0x10/0x10 [ 70.179394][ T9] worker_thread+0x5ef/0xe50 [ 70.183973][ T9] ? kthread+0x13a/0x450 [ 70.188194][ T9] ? __pfx_worker_thread+0x10/0x10 [ 70.193287][ T9] kthread+0x370/0x450 [ 70.197335][ T9] ? __pfx_kthread+0x10/0x10 [ 70.201906][ T9] ret_from_fork+0x754/0xd80 [ 70.206481][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 70.211576][ T9] ? __switch_to+0x7b4/0x1120 [ 70.216235][ T9] ? __pfx_kthread+0x10/0x10 [ 70.220805][ T9] ret_from_fork_asm+0x1a/0x30 [ 70.225658][ T9] [ 70.228940][ T9] Kernel Offset: disabled [ 70.233238][ T9] Rebooting in 86400 seconds..