[ 53.285389][ T40] audit: type=1400 audit(1768874528.743:60): avc: denied { rlimitinh } for pid=5914 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.292017][ T40] audit: type=1400 audit(1768874528.743:61): avc: denied { siginh } for pid=5914 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:33547' (ED25519) to the list of known hosts. [ 60.592555][ T40] audit: type=1400 audit(1768874536.073:62): avc: denied { execute } for pid=5932 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.601267][ T40] audit: type=1400 audit(1768874536.073:63): avc: denied { execute_no_trans } for pid=5932 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/01/20 02:02:17 parsed 1 programs [ 61.856621][ T40] audit: type=1400 audit(1768874537.333:64): avc: denied { node_bind } for pid=5932 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.773705][ T40] audit: type=1400 audit(1768874539.253:65): avc: denied { mounton } for pid=5942 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.783850][ T40] audit: type=1400 audit(1768874539.263:66): avc: denied { mount } for pid=5942 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.793216][ T5942] cgroup: Unknown subsys name 'net' [ 63.797774][ T40] audit: type=1400 audit(1768874539.273:67): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.938578][ T5942] cgroup: Unknown subsys name 'cpuset' [ 63.945262][ T5942] cgroup: Unknown subsys name 'rlimit' [ 64.124212][ T40] audit: type=1400 audit(1768874539.603:68): avc: denied { setattr } for pid=5942 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.131709][ T40] audit: type=1400 audit(1768874539.603:69): avc: denied { create } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.138683][ T40] audit: type=1400 audit(1768874539.603:70): avc: denied { write } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.146808][ T40] audit: type=1400 audit(1768874539.603:71): avc: denied { read } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.192964][ T5945] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.868334][ T5942] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.541622][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 66.541637][ T40] audit: type=1400 audit(1768874542.023:82): avc: denied { execmem } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.549650][ T40] audit: type=1400 audit(1768874542.023:83): avc: denied { read } for pid=5955 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.557328][ T40] audit: type=1400 audit(1768874542.023:84): avc: denied { open } for pid=5955 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.565091][ T40] audit: type=1400 audit(1768874542.023:85): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.612935][ T40] audit: type=1400 audit(1768874542.093:86): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.619410][ T40] audit: type=1400 audit(1768874542.093:87): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.TIZmlI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.628641][ T40] audit: type=1400 audit(1768874542.093:88): avc: denied { mount } for pid=5955 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.637832][ T40] audit: type=1400 audit(1768874542.093:89): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.TIZmlI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.646061][ T40] audit: type=1400 audit(1768874542.093:90): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/syzkaller.TIZmlI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.654753][ T40] audit: type=1400 audit(1768874542.103:91): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.664835][ T5955] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.602642][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 67.684111][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.688133][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.691382][ T5984] bridge_slave_0: entered allmulticast mode [ 67.695664][ T5984] bridge_slave_0: entered promiscuous mode [ 67.701346][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.703994][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.706283][ T5984] bridge_slave_1: entered allmulticast mode [ 67.708837][ T5984] bridge_slave_1: entered promiscuous mode [ 67.731032][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.735471][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.751515][ T5984] team0: Port device team_slave_0 added [ 67.754533][ T5984] team0: Port device team_slave_1 added [ 67.767299][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.769508][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.777806][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.801396][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.803672][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.812226][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.835329][ T5984] hsr_slave_0: entered promiscuous mode [ 67.837603][ T5984] hsr_slave_1: entered promiscuous mode [ 67.938128][ T5984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.945458][ T5984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.950111][ T5984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.957643][ T5984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.980079][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.982461][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.985421][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.987900][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.022566][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.032897][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.036443][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.045448][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.052481][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.054780][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.061474][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.063790][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.188437][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.213972][ T5984] veth0_vlan: entered promiscuous mode [ 68.219176][ T5984] veth1_vlan: entered promiscuous mode [ 68.241620][ T5984] veth0_macvtap: entered promiscuous mode [ 68.247228][ T5984] veth1_macvtap: entered promiscuous mode [ 68.262885][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.271655][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.282223][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.285544][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289695][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.293187][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.404282][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.476572][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.479651][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.505095][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.518277][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.521476][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.579331][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.653021][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.987207][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.991363][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.994196][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.997248][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.999703][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/01/20 02:02:25 executed programs: 0 [ 69.726455][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.729705][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.733097][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.736080][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.738740][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.870733][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 69.958072][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.960502][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.963237][ T6053] bridge_slave_0: entered allmulticast mode [ 69.967133][ T6053] bridge_slave_0: entered promiscuous mode [ 69.971877][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.974588][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.977580][ T6053] bridge_slave_1: entered allmulticast mode [ 69.981841][ T6053] bridge_slave_1: entered promiscuous mode [ 70.006940][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.011549][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.036202][ T6053] team0: Port device team_slave_0 added [ 70.040467][ T6053] team0: Port device team_slave_1 added [ 70.061748][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.064794][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.075825][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.081919][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.084860][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.095969][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.135990][ T6053] hsr_slave_0: entered promiscuous mode [ 70.139663][ T6053] hsr_slave_1: entered promiscuous mode [ 70.142896][ T6053] debugfs: 'hsr0' already exists in 'hsr' [ 70.144900][ T6053] Cannot create hsr debugfs directory [ 71.734806][ T61] bridge_slave_1: left allmulticast mode [ 71.737368][ T61] bridge_slave_1: left promiscuous mode [ 71.741008][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.748726][ T61] bridge_slave_0: left allmulticast mode [ 71.750963][ T61] bridge_slave_0: left promiscuous mode [ 71.752929][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.780566][ T67] Bluetooth: hci0: command tx timeout [ 71.988584][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.994736][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.998527][ T61] bond0 (unregistering): Released all slaves [ 72.082887][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 72.082897][ T40] audit: type=1400 audit(1768874547.563:112): avc: denied { create } for pid=6062 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.094905][ T40] audit: type=1400 audit(1768874547.573:113): avc: denied { write } for pid=6062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.107977][ T40] audit: type=1400 audit(1768874547.573:114): avc: denied { append } for pid=6062 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.135711][ T40] audit: type=1400 audit(1768874547.613:115): avc: denied { unlink } for pid=6065 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.145834][ T61] hsr_slave_0: left promiscuous mode [ 72.148818][ T61] hsr_slave_1: left promiscuous mode [ 72.151332][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.153819][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.157020][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.159412][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.171231][ T61] veth1_macvtap: left promiscuous mode [ 72.173161][ T61] veth0_macvtap: left promiscuous mode [ 72.175039][ T61] veth1_vlan: left promiscuous mode [ 72.176780][ T61] veth0_vlan: left promiscuous mode [ 72.442061][ T61] team0 (unregistering): Port device team_slave_1 removed [ 72.457457][ T61] team0 (unregistering): Port device team_slave_0 removed [ 73.001330][ T6053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.007645][ T6053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.016431][ T6053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.023892][ T6053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.092481][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.110155][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.116869][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.120052][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.133960][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137053][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.471509][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.507087][ T6053] veth0_vlan: entered promiscuous mode [ 73.516141][ T6053] veth1_vlan: entered promiscuous mode [ 73.550087][ T6053] veth0_macvtap: entered promiscuous mode [ 73.560536][ T6053] veth1_macvtap: entered promiscuous mode [ 73.572314][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.581944][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.595959][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.599655][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.652431][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.656349][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.688191][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.691990][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.705865][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.708764][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.746782][ T40] audit: type=1400 audit(1768874549.223:116): avc: denied { read write } for pid=6095 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.759428][ T40] audit: type=1400 audit(1768874549.223:117): avc: denied { open } for pid=6095 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.760872][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.769139][ T40] audit: type=1400 audit(1768874549.223:118): avc: denied { ioctl } for pid=6095 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.773181][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.860654][ T67] Bluetooth: hci0: command tx timeout [ 73.979957][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.149980][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 74.154567][ T29] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 74.157856][ T29] usb 5-1: config 0 has no interface number 0 [ 74.160417][ T29] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 74.164475][ T29] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 74.168696][ T29] usb 5-1: config 0 interface 54 has no altsetting 0 [ 74.173035][ T29] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 74.176749][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.179964][ T29] usb 5-1: Product: syz [ 74.181661][ T29] usb 5-1: Manufacturer: syz [ 74.183604][ T29] usb 5-1: SerialNumber: syz [ 74.188434][ T29] usb 5-1: config 0 descriptor?? [ 74.192010][ T6096] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.194925][ T6096] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.202133][ T29] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 74.208631][ T29] scsi host6: usb-storage 5-1:0.54 [ 75.302708][ T6100] ------------[ cut here ]------------ [ 75.305220][ T6100] URB ffff88802571b800 submitted while active [ 75.307793][ T6100] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15a0/0x1970, CPU#2: usb-storage/6100 [ 75.312133][ T6100] Modules linked in: [ 75.313922][ T6100] CPU: 2 UID: 0 PID: 6100 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 75.317726][ T6100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.322496][ T6100] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 75.325551][ T6100] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 44 a8 fa 48 8d 3d 40 cf 7d 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 44 a8 fa 0f 1f [ 75.333683][ T6100] RSP: 0018:ffffc90003cdf670 EFLAGS: 00010293 [ 75.336167][ T6100] RAX: 0000000000000000 RBX: ffff88802571b800 RCX: dffffc0000000000 [ 75.339376][ T6100] RDX: ffff888029bca4c0 RSI: ffff88802571b800 RDI: ffffffff909489e0 [ 75.342947][ T6100] RBP: 1ffff9200079bee1 R08: 0000000000000002 R09: 0000000000000000 [ 75.346356][ T6100] R10: 0000000000000000 R11: 0000000000002ba1 R12: ffff88802bbf4ee8 [ 75.349970][ T6100] R13: ffff88802bbf4e60 R14: ffffc90003cdf728 R15: ffff88802571b800 [ 75.353247][ T6100] FS: 0000000000000000(0000) GS:ffff8880d6af1000(0000) knlGS:0000000000000000 [ 75.356887][ T6100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.359699][ T6100] CR2: 00007ffc4e52d810 CR3: 000000000e184000 CR4: 0000000000352ef0 [ 75.363127][ T6100] Call Trace: [ 75.364544][ T6100] [ 75.365895][ T6100] ? lockdep_init_map_type+0x5c/0x270 [ 75.368118][ T6100] ? lockdep_init_map_type+0x5c/0x270 [ 75.370684][ T6100] ? __init_swait_queue_head+0xca/0x150 [ 75.372876][ T6100] usb_stor_msg_common+0x23f/0x560 [ 75.374982][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.376950][ T6100] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 75.379227][ T6100] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.381752][ T6100] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 75.384052][ T6100] ene_send_scsi_cmd+0x130/0x610 [ 75.386158][ T6100] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 75.388326][ T6100] ? __pfx_stack_trace_save+0x10/0x10 [ 75.390568][ T6100] ? __kasan_check_byte+0x13/0x50 [ 75.392632][ T6100] ? __asan_memset+0x23/0x50 [ 75.394544][ T6100] ene_transport+0x13fd/0x37f0 [ 75.396537][ T6100] ? lock_release+0x201/0x2d0 [ 75.398508][ T6100] ? unwind_next_frame+0x3fe/0x20b0 [ 75.400802][ T6100] ? ret_from_fork_asm+0x1a/0x30 [ 75.402847][ T6100] ? __pfx_ene_transport+0x10/0x10 [ 75.404933][ T6100] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.407496][ T6100] ? arch_stack_walk+0x94/0x100 [ 75.409531][ T6100] ? ret_from_fork_asm+0x1a/0x30 [ 75.411732][ T6100] ? stack_trace_save+0x8e/0xc0 [ 75.413771][ T6100] ? __pfx_stack_trace_save+0x10/0x10 [ 75.416148][ T6100] ? check_path.constprop.0+0x24/0x50 [ 75.418371][ T6100] usb_stor_invoke_transport+0xe7/0x1560 [ 75.420819][ T6100] ? lockdep_unlock+0x64/0xd0 [ 75.422829][ T6100] ? __lock_acquire+0x12c2/0x2890 [ 75.425028][ T6100] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 75.427694][ T6100] ? __wait_for_common+0x1e0/0x4e0 [ 75.430023][ T6100] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.432198][ T6100] ? find_held_lock+0x2b/0x80 [ 75.434154][ T6100] ? mark_held_locks+0x49/0x80 [ 75.436138][ T6100] usb_stor_control_thread+0x5eb/0xb00 [ 75.438360][ T6100] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 75.440861][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.442834][ T6100] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.445204][ T6100] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.447302][ T6100] ? __kthread_parkme+0x19e/0x250 [ 75.449330][ T6100] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 75.451932][ T6100] kthread+0x3c5/0x780 [ 75.453669][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.455659][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.457721][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.459722][ T6100] ret_from_fork+0x983/0xb10 [ 75.461828][ T6100] ? __pfx_ret_from_fork+0x10/0x10 [ 75.464071][ T6100] ? __switch_to+0x7af/0x10d0 [ 75.466068][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.467999][ T6100] ret_from_fork_asm+0x1a/0x30 [ 75.470189][ T6100] [ 75.471546][ T6100] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.474622][ T6100] CPU: 2 UID: 0 PID: 6100 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 75.478488][ T6100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.483042][ T6100] Call Trace: [ 75.484510][ T6100] [ 75.485810][ T6100] dump_stack_lvl+0x3d/0x1f0 [ 75.487808][ T6100] vpanic+0x640/0x6f0 [ 75.489515][ T6100] ? usb_submit_urb+0x15a0/0x1970 [ 75.491567][ T6100] panic+0xca/0xd0 [ 75.493138][ T6100] ? __pfx_panic+0x10/0x10 [ 75.495020][ T6100] ? check_panic_on_warn+0x1f/0xb0 [ 75.497177][ T6100] check_panic_on_warn+0xab/0xb0 [ 75.499307][ T6100] __warn+0x108/0x3c0 [ 75.501062][ T6100] __report_bug+0x2a0/0x520 [ 75.503053][ T6100] ? usb_submit_urb+0x15a0/0x1970 [ 75.505248][ T6100] ? __pfx___report_bug+0x10/0x10 [ 75.507435][ T6100] report_bug_entry+0xe1/0x290 [ 75.509556][ T6100] ? usb_submit_urb+0x15a3/0x1970 [ 75.511690][ T6100] handle_bug+0x18a/0x260 [ 75.513527][ T6100] exc_invalid_op+0x17/0x50 [ 75.515475][ T6100] asm_exc_invalid_op+0x1a/0x20 [ 75.517589][ T6100] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 75.519986][ T6100] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 44 a8 fa 48 8d 3d 40 cf 7d 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 44 a8 fa 0f 1f [ 75.528071][ T6100] RSP: 0018:ffffc90003cdf670 EFLAGS: 00010293 [ 75.530756][ T6100] RAX: 0000000000000000 RBX: ffff88802571b800 RCX: dffffc0000000000 [ 75.534158][ T6100] RDX: ffff888029bca4c0 RSI: ffff88802571b800 RDI: ffffffff909489e0 [ 75.537515][ T6100] RBP: 1ffff9200079bee1 R08: 0000000000000002 R09: 0000000000000000 [ 75.540854][ T6100] R10: 0000000000000000 R11: 0000000000002ba1 R12: ffff88802bbf4ee8 [ 75.544122][ T6100] R13: ffff88802bbf4e60 R14: ffffc90003cdf728 R15: ffff88802571b800 [ 75.547371][ T6100] ? lockdep_init_map_type+0x5c/0x270 [ 75.549608][ T6100] ? lockdep_init_map_type+0x5c/0x270 [ 75.551794][ T6100] ? __init_swait_queue_head+0xca/0x150 [ 75.554162][ T6100] usb_stor_msg_common+0x23f/0x560 [ 75.556260][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.558209][ T6100] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 75.560580][ T6100] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.563128][ T6100] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 75.565526][ T6100] ene_send_scsi_cmd+0x130/0x610 [ 75.567337][ T6100] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 75.569404][ T6100] ? __pfx_stack_trace_save+0x10/0x10 [ 75.571489][ T6100] ? __kasan_check_byte+0x13/0x50 [ 75.573459][ T6100] ? __asan_memset+0x23/0x50 [ 75.575264][ T6100] ene_transport+0x13fd/0x37f0 [ 75.577108][ T6100] ? lock_release+0x201/0x2d0 [ 75.578889][ T6100] ? unwind_next_frame+0x3fe/0x20b0 [ 75.580952][ T6100] ? ret_from_fork_asm+0x1a/0x30 [ 75.582901][ T6100] ? __pfx_ene_transport+0x10/0x10 [ 75.584923][ T6100] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 75.587378][ T6100] ? arch_stack_walk+0x94/0x100 [ 75.589339][ T6100] ? ret_from_fork_asm+0x1a/0x30 [ 75.591306][ T6100] ? stack_trace_save+0x8e/0xc0 [ 75.593198][ T6100] ? __pfx_stack_trace_save+0x10/0x10 [ 75.595357][ T6100] ? check_path.constprop.0+0x24/0x50 [ 75.597593][ T6100] usb_stor_invoke_transport+0xe7/0x1560 [ 75.600050][ T6100] ? lockdep_unlock+0x64/0xd0 [ 75.602061][ T6100] ? __lock_acquire+0x12c2/0x2890 [ 75.604251][ T6100] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 75.606887][ T6100] ? __wait_for_common+0x1e0/0x4e0 [ 75.609096][ T6100] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.611181][ T6100] ? find_held_lock+0x2b/0x80 [ 75.613247][ T6100] ? mark_held_locks+0x49/0x80 [ 75.615249][ T6100] usb_stor_control_thread+0x5eb/0xb00 [ 75.617579][ T6100] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 75.620154][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.622230][ T6100] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.624667][ T6100] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.626771][ T6100] ? __kthread_parkme+0x19e/0x250 [ 75.628909][ T6100] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 75.631497][ T6100] kthread+0x3c5/0x780 [ 75.633219][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.635218][ T6100] ? rcu_is_watching+0x12/0xc0 [ 75.637276][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.639297][ T6100] ret_from_fork+0x983/0xb10 [ 75.641383][ T6100] ? __pfx_ret_from_fork+0x10/0x10 [ 75.643574][ T6100] ? __switch_to+0x7af/0x10d0 [ 75.645555][ T6100] ? __pfx_kthread+0x10/0x10 [ 75.647548][ T6100] ret_from_fork_asm+0x1a/0x30 [ 75.649667][ T6100] [ 75.651759][ T6100] Kernel Offset: disabled [ 75.653603][ T6100] Rebooting in 86400 seconds..