Warning: Permanently added '[localhost]:11670' (ED25519) to the list of known hosts. [ 50.100639][ T40] audit: type=1400 audit(1765676173.633:62): avc: denied { execute } for pid=5928 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.108354][ T40] audit: type=1400 audit(1765676173.643:63): avc: denied { execute_no_trans } for pid=5928 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/12/14 01:36:14 parsed 1 programs [ 51.379655][ T40] audit: type=1400 audit(1765676174.913:64): avc: denied { node_bind } for pid=5928 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.475233][ T40] audit: type=1400 audit(1765676177.013:65): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.484013][ T40] audit: type=1400 audit(1765676177.023:66): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.485691][ T5940] cgroup: Unknown subsys name 'net' [ 53.494542][ T40] audit: type=1400 audit(1765676177.033:67): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.626667][ T5940] cgroup: Unknown subsys name 'cpuset' [ 53.632387][ T5940] cgroup: Unknown subsys name 'rlimit' [ 53.766019][ T40] audit: type=1400 audit(1765676177.303:68): avc: denied { setattr } for pid=5940 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.775412][ T40] audit: type=1400 audit(1765676177.303:69): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.783954][ T40] audit: type=1400 audit(1765676177.303:70): avc: denied { write } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.791929][ T40] audit: type=1400 audit(1765676177.303:71): avc: denied { read } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.811708][ T5945] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.456525][ T5940] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.970180][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 55.970191][ T40] audit: type=1400 audit(1765676179.503:82): avc: denied { execmem } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.978765][ T40] audit: type=1400 audit(1765676179.513:83): avc: denied { read } for pid=5950 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.986200][ T40] audit: type=1400 audit(1765676179.513:84): avc: denied { open } for pid=5950 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.993514][ T40] audit: type=1400 audit(1765676179.513:85): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.044595][ T40] audit: type=1400 audit(1765676179.583:86): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.052123][ T40] audit: type=1400 audit(1765676179.583:87): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.0afgpF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.061537][ T40] audit: type=1400 audit(1765676179.583:88): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.069958][ T40] audit: type=1400 audit(1765676179.583:89): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.0afgpF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.078755][ T40] audit: type=1400 audit(1765676179.583:90): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.0afgpF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.087749][ T40] audit: type=1400 audit(1765676179.593:91): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.100347][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.265381][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 56.320932][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.324680][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.327747][ T5955] bridge_slave_0: entered allmulticast mode [ 56.331737][ T5955] bridge_slave_0: entered promiscuous mode [ 56.338755][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.340978][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.343587][ T5955] bridge_slave_1: entered allmulticast mode [ 56.347455][ T5955] bridge_slave_1: entered promiscuous mode [ 56.373646][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.381099][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.409094][ T5955] team0: Port device team_slave_0 added [ 56.415817][ T5955] team0: Port device team_slave_1 added [ 56.438139][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.441043][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.451881][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.458426][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.461213][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.471831][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.512028][ T5955] hsr_slave_0: entered promiscuous mode [ 56.514454][ T5955] hsr_slave_1: entered promiscuous mode [ 56.609740][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.615807][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.620074][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.626196][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.644482][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.646833][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.649488][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.651905][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.681902][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.695172][ T5021] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.697992][ T5021] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.706704][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.715386][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.717671][ T5021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.725004][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.727421][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.848047][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.873832][ T5955] veth0_vlan: entered promiscuous mode [ 56.878895][ T5955] veth1_vlan: entered promiscuous mode [ 56.895086][ T5955] veth0_macvtap: entered promiscuous mode [ 56.899912][ T5955] veth1_macvtap: entered promiscuous mode [ 56.909219][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.918223][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.926807][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.930932][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.934475][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.939748][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.027625][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.112344][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.186941][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.197957][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.200532][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.224041][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.226488][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.264279][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.999909][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.003081][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.005831][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.008664][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.011134][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/14 01:36:22 executed programs: 0 [ 58.841209][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.845311][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.848643][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.852318][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.855793][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.963766][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 59.047509][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.049840][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.052047][ T6047] bridge_slave_0: entered allmulticast mode [ 59.054705][ T6047] bridge_slave_0: entered promiscuous mode [ 59.058686][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.061145][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.063841][ T6047] bridge_slave_1: entered allmulticast mode [ 59.066408][ T6047] bridge_slave_1: entered promiscuous mode [ 59.082468][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.087771][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.113239][ T6047] team0: Port device team_slave_0 added [ 59.117830][ T6047] team0: Port device team_slave_1 added [ 59.137335][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.140040][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.150016][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.156130][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.158991][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.171069][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.206637][ T6047] hsr_slave_0: entered promiscuous mode [ 59.209590][ T6047] hsr_slave_1: entered promiscuous mode [ 59.212396][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 59.214964][ T6047] Cannot create hsr debugfs directory [ 60.383615][ T1147] bridge_slave_1: left allmulticast mode [ 60.385490][ T1147] bridge_slave_1: left promiscuous mode [ 60.387854][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.392304][ T1147] bridge_slave_0: left allmulticast mode [ 60.394690][ T1147] bridge_slave_0: left promiscuous mode [ 60.396520][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.536918][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.541375][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.545394][ T1147] bond0 (unregistering): Released all slaves [ 60.652279][ T1147] hsr_slave_0: left promiscuous mode [ 60.655161][ T1147] hsr_slave_1: left promiscuous mode [ 60.657480][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.662429][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.665912][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.668902][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.678675][ T1147] veth1_macvtap: left promiscuous mode [ 60.681000][ T1147] veth0_macvtap: left promiscuous mode [ 60.683809][ T1147] veth1_vlan: left promiscuous mode [ 60.685978][ T1147] veth0_vlan: left promiscuous mode [ 60.910108][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 60.923688][ T5297] Bluetooth: hci0: command tx timeout [ 60.926984][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 61.501783][ T6047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.506227][ T6047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.510594][ T6047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.516332][ T6047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.573938][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.585428][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.593586][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.596632][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.605605][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.608120][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.027862][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.052036][ T6047] veth0_vlan: entered promiscuous mode [ 62.064295][ T6047] veth1_vlan: entered promiscuous mode [ 62.085902][ T6047] veth0_macvtap: entered promiscuous mode [ 62.092263][ T6047] veth1_macvtap: entered promiscuous mode [ 62.110785][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.122433][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.137621][ T1059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.142912][ T1059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.148837][ T1059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.152096][ T1059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.216030][ T5021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.218765][ T5021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.270087][ T5021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.273455][ T5021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.313961][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 62.313978][ T40] audit: type=1400 audit(1765676185.853:116): avc: denied { read write } for pid=6089 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.323330][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.323344][ T40] audit: type=1400 audit(1765676185.853:117): avc: denied { open } for pid=6089 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.326748][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.333165][ T40] audit: type=1400 audit(1765676185.853:118): avc: denied { ioctl } for pid=6089 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.552746][ T5974] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.722746][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 62.726378][ T5974] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 62.729475][ T5974] usb 5-1: config 0 has no interface number 0 [ 62.731993][ T5974] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 62.736214][ T5974] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 62.740144][ T5974] usb 5-1: config 0 interface 54 has no altsetting 0 [ 62.745128][ T5974] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 62.748778][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.752039][ T5974] usb 5-1: Product: syz [ 62.753875][ T5974] usb 5-1: Manufacturer: syz [ 62.755874][ T5974] usb 5-1: SerialNumber: syz [ 62.773073][ T5974] usb 5-1: config 0 descriptor?? [ 62.776203][ T6090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.778534][ T6090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.784675][ T5974] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 62.791570][ T5974] scsi host6: usb-storage 5-1:0.54 [ 63.003366][ T5297] Bluetooth: hci0: command tx timeout [ 63.805361][ T6095] ------------[ cut here ]------------ [ 63.807751][ T6095] URB ffff888106a99b00 submitted while active [ 63.810240][ T6095] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#1: usb-storage/6095 [ 63.813538][ T6095] Modules linked in: [ 63.815246][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 63.818920][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.823280][ T6095] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 63.825590][ T6095] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 b7 19 a9 fa 48 8d 3d a0 73 7e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 99 19 a9 fa 0f 1f [ 63.833124][ T6095] RSP: 0018:ffffc90003aff670 EFLAGS: 00010293 [ 63.835584][ T6095] RAX: 0000000000000000 RBX: ffff888106a99b00 RCX: dffffc0000000000 [ 63.838719][ T6095] RDX: ffff888029d74980 RSI: ffff888106a99b00 RDI: ffffffff90943db0 [ 63.841835][ T6095] RBP: 1ffff9200075fee1 R08: 0000000000000002 R09: 0000000000000000 [ 63.844966][ T6095] R10: 0000000000000000 R11: 0000000000002ba1 R12: ffff888039800ee8 [ 63.848127][ T6095] R13: ffff888039800e60 R14: ffffc90003aff728 R15: ffff888106a99b00 [ 63.851259][ T6095] FS: 0000000000000000(0000) GS:ffff8880d69fa000(0000) knlGS:0000000000000000 [ 63.854886][ T6095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.857593][ T6095] CR2: 0000564726f21168 CR3: 0000000039502000 CR4: 0000000000352ef0 [ 63.860714][ T6095] Call Trace: [ 63.862132][ T6095] [ 63.863461][ T6095] ? lockdep_init_map_type+0x5c/0x270 [ 63.865613][ T6095] ? lockdep_init_map_type+0x5c/0x270 [ 63.867803][ T6095] ? __init_swait_queue_head+0xca/0x150 [ 63.870035][ T6095] usb_stor_msg_common+0x23f/0x560 [ 63.872126][ T6095] ? rcu_is_watching+0x12/0xc0 [ 63.874094][ T6095] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 63.876399][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 63.878862][ T6095] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 63.881204][ T6095] ene_send_scsi_cmd+0x130/0x610 [ 63.883298][ T6095] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 63.885524][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 63.887703][ T6095] ? __kasan_check_byte+0x13/0x50 [ 63.889800][ T6095] ? __asan_memset+0x23/0x50 [ 63.891736][ T6095] ene_transport+0x13fd/0x37f0 [ 63.893745][ T6095] ? lock_release+0x201/0x2d0 [ 63.895713][ T6095] ? unwind_next_frame+0x3fe/0x20a0 [ 63.897881][ T6095] ? ret_from_fork_asm+0x1a/0x30 [ 63.899894][ T6095] ? __pfx_ene_transport+0x10/0x10 [ 63.901919][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 63.904445][ T6095] ? arch_stack_walk+0x94/0x100 [ 63.906423][ T6095] ? ret_from_fork_asm+0x1a/0x30 [ 63.908463][ T6095] ? stack_trace_save+0x8e/0xc0 [ 63.910449][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 63.912684][ T6095] ? check_path.constprop.0+0x24/0x50 [ 63.914861][ T6095] usb_stor_invoke_transport+0xee/0x1570 [ 63.917147][ T6095] ? lockdep_unlock+0x64/0xd0 [ 63.919138][ T6095] ? __lock_acquire+0x12c2/0x2890 [ 63.921180][ T6095] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 63.923752][ T6095] ? __wait_for_common+0x1e0/0x4e0 [ 63.925823][ T6095] ? do_raw_spin_lock+0x12c/0x2b0 [ 63.927956][ T6095] ? find_held_lock+0x2b/0x80 [ 63.929877][ T6095] ? mark_held_locks+0x49/0x80 [ 63.931822][ T6095] usb_stor_control_thread+0x5eb/0xb00 [ 63.934085][ T6095] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 63.936535][ T6095] ? rcu_is_watching+0x12/0xc0 [ 63.938492][ T6095] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.940858][ T6095] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.943057][ T6095] ? __kthread_parkme+0x19e/0x250 [ 63.945121][ T6095] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 63.947576][ T6095] kthread+0x3c5/0x780 [ 63.949270][ T6095] ? __pfx_kthread+0x10/0x10 [ 63.951187][ T6095] ? rcu_is_watching+0x12/0xc0 [ 63.953183][ T6095] ? __pfx_kthread+0x10/0x10 [ 63.955141][ T6095] ret_from_fork+0x983/0xb10 [ 63.957044][ T6095] ? __pfx_ret_from_fork+0x10/0x10 [ 63.959156][ T6095] ? __switch_to+0x7af/0x10d0 [ 63.961060][ T6095] ? __pfx_kthread+0x10/0x10 [ 63.963111][ T6095] ret_from_fork_asm+0x1a/0x30 [ 63.965150][ T6095] [ 63.966443][ T6095] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.969373][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 63.972983][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.977139][ T6095] Call Trace: [ 63.978480][ T6095] [ 63.979694][ T6095] dump_stack_lvl+0x3d/0x1f0 [ 63.981535][ T6095] vpanic+0x640/0x6f0 [ 63.983153][ T6095] panic+0xca/0xd0 [ 63.984649][ T6095] ? __pfx_panic+0x10/0x10 [ 63.986419][ T6095] ? check_panic_on_warn+0x1f/0xb0 [ 63.988423][ T6095] check_panic_on_warn+0xab/0xb0 [ 63.990387][ T6095] __warn+0x108/0x3c0 [ 63.991955][ T6095] __report_bug+0x2a0/0x520 [ 63.993779][ T6095] ? __pfx___report_bug+0x10/0x10 [ 63.995778][ T6095] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.997825][ T6095] ? usb_submit_urb+0x15a3/0x1970 [ 63.999832][ T6095] report_bug_entry+0xb2/0x220 [ 64.001723][ T6095] ? usb_submit_urb+0x15a3/0x1970 [ 64.003728][ T6095] handle_bug+0x18a/0x260 [ 64.005503][ T6095] exc_invalid_op+0x17/0x50 [ 64.007315][ T6095] asm_exc_invalid_op+0x1a/0x20 [ 64.009236][ T6095] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 64.011464][ T6095] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 b7 19 a9 fa 48 8d 3d a0 73 7e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 99 19 a9 fa 0f 1f [ 64.018886][ T6095] RSP: 0018:ffffc90003aff670 EFLAGS: 00010293 [ 64.021277][ T6095] RAX: 0000000000000000 RBX: ffff888106a99b00 RCX: dffffc0000000000 [ 64.024395][ T6095] RDX: ffff888029d74980 RSI: ffff888106a99b00 RDI: ffffffff90943db0 [ 64.027455][ T6095] RBP: 1ffff9200075fee1 R08: 0000000000000002 R09: 0000000000000000 [ 64.030549][ T6095] R10: 0000000000000000 R11: 0000000000002ba1 R12: ffff888039800ee8 [ 64.033596][ T6095] R13: ffff888039800e60 R14: ffffc90003aff728 R15: ffff888106a99b00 [ 64.036780][ T6095] ? lockdep_init_map_type+0x5c/0x270 [ 64.038874][ T6095] ? lockdep_init_map_type+0x5c/0x270 [ 64.040993][ T6095] ? __init_swait_queue_head+0xca/0x150 [ 64.043189][ T6095] usb_stor_msg_common+0x23f/0x560 [ 64.045247][ T6095] ? rcu_is_watching+0x12/0xc0 [ 64.047159][ T6095] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 64.049335][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 64.051737][ T6095] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 64.053978][ T6095] ene_send_scsi_cmd+0x130/0x610 [ 64.055973][ T6095] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 64.058091][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 64.060241][ T6095] ? __kasan_check_byte+0x13/0x50 [ 64.062214][ T6095] ? __asan_memset+0x23/0x50 [ 64.064084][ T6095] ene_transport+0x13fd/0x37f0 [ 64.066087][ T6095] ? lock_release+0x201/0x2d0 [ 64.067998][ T6095] ? unwind_next_frame+0x3fe/0x20a0 [ 64.070039][ T6095] ? ret_from_fork_asm+0x1a/0x30 [ 64.072043][ T6095] ? __pfx_ene_transport+0x10/0x10 [ 64.074096][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 64.076690][ T6095] ? arch_stack_walk+0x94/0x100 [ 64.078633][ T6095] ? ret_from_fork_asm+0x1a/0x30 [ 64.080615][ T6095] ? stack_trace_save+0x8e/0xc0 [ 64.082534][ T6095] ? __pfx_stack_trace_save+0x10/0x10 [ 64.084683][ T6095] ? check_path.constprop.0+0x24/0x50 [ 64.086765][ T6095] usb_stor_invoke_transport+0xee/0x1570 [ 64.089104][ T6095] ? lockdep_unlock+0x64/0xd0 [ 64.091006][ T6095] ? __lock_acquire+0x12c2/0x2890 [ 64.092810][ T6095] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 64.095207][ T6095] ? __wait_for_common+0x1e0/0x4e0 [ 64.097243][ T6095] ? do_raw_spin_lock+0x12c/0x2b0 [ 64.099248][ T6095] ? find_held_lock+0x2b/0x80 [ 64.101120][ T6095] ? mark_held_locks+0x49/0x80 [ 64.103087][ T6095] usb_stor_control_thread+0x5eb/0xb00 [ 64.105266][ T6095] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 64.107616][ T6095] ? rcu_is_watching+0x12/0xc0 [ 64.109504][ T6095] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 64.111802][ T6095] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.113812][ T6095] ? __kthread_parkme+0x19e/0x250 [ 64.115757][ T6095] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 64.118115][ T6095] kthread+0x3c5/0x780 [ 64.119698][ T6095] ? __pfx_kthread+0x10/0x10 [ 64.121546][ T6095] ? rcu_is_watching+0x12/0xc0 [ 64.123429][ T6095] ? __pfx_kthread+0x10/0x10 [ 64.125218][ T6095] ret_from_fork+0x983/0xb10 [ 64.127019][ T6095] ? __pfx_ret_from_fork+0x10/0x10 [ 64.129056][ T6095] ? __switch_to+0x7af/0x10d0 [ 64.131038][ T6095] ? __pfx_kthread+0x10/0x10 [ 64.132927][ T6095] ret_from_fork_asm+0x1a/0x30 [ 64.134901][ T6095] [ 64.136768][ T6095] Kernel Offset: disabled [ 64.138478][ T6095] Rebooting in 86400 seconds..