Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. 2025/11/04 11:48:24 parsed 1 programs [ 68.536084][ T30] audit: type=1400 audit(1762256904.542:62): avc: denied { write } for pid=5808 comm="syz-execprog" path="pipe:[5258]" dev="pipefs" ino=5258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 68.559774][ T30] audit: type=1400 audit(1762256904.542:63): avc: denied { node_bind } for pid=5808 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.550976][ T30] audit: type=1400 audit(1762256906.552:64): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 70.575077][ T30] audit: type=1400 audit(1762256906.582:65): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.578051][ T5816] cgroup: Unknown subsys name 'net' [ 70.604791][ T30] audit: type=1400 audit(1762256906.612:66): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.724965][ T5816] cgroup: Unknown subsys name 'cpuset' [ 70.733751][ T5816] cgroup: Unknown subsys name 'rlimit' [ 70.881012][ T30] audit: type=1400 audit(1762256906.882:67): avc: denied { setattr } for pid=5816 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.905117][ T30] audit: type=1400 audit(1762256906.882:68): avc: denied { create } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.927891][ T30] audit: type=1400 audit(1762256906.882:69): avc: denied { write } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.950323][ T30] audit: type=1400 audit(1762256906.882:70): avc: denied { read } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 70.971590][ T30] audit: type=1400 audit(1762256906.912:71): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 71.003318][ T5818] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 71.115854][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.122377][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.991558][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.773764][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 73.773778][ T30] audit: type=1400 audit(1762256909.782:78): avc: denied { execmem } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.005339][ T30] audit: type=1400 audit(1762256910.012:79): avc: denied { read } for pid=5823 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.026546][ T30] audit: type=1400 audit(1762256910.012:80): avc: denied { open } for pid=5823 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.049942][ T30] audit: type=1400 audit(1762256910.012:81): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.087026][ T30] audit: type=1400 audit(1762256910.092:82): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.LRP5Gy/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.111528][ T30] audit: type=1400 audit(1762256910.092:83): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.133783][ T30] audit: type=1400 audit(1762256910.092:84): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.LRP5Gy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.159053][ T30] audit: type=1400 audit(1762256910.092:85): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.181127][ T30] audit: type=1400 audit(1762256910.102:86): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.LRP5Gy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.207700][ T30] audit: type=1400 audit(1762256910.102:87): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.LRP5Gy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.238599][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.892266][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 74.955681][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.963499][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.970801][ T5841] bridge_slave_0: entered allmulticast mode [ 74.977796][ T5841] bridge_slave_0: entered promiscuous mode [ 74.987391][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.994525][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.001672][ T5841] bridge_slave_1: entered allmulticast mode [ 75.009457][ T5841] bridge_slave_1: entered promiscuous mode [ 75.036970][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.048956][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.077726][ T5841] team0: Port device team_slave_0 added [ 75.085807][ T5841] team0: Port device team_slave_1 added [ 75.105994][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.113243][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.139162][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.151241][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.158215][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.184174][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.219693][ T5841] hsr_slave_0: entered promiscuous mode [ 75.226256][ T5841] hsr_slave_1: entered promiscuous mode [ 75.338951][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.350001][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.359316][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.368821][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.393440][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.400602][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.408534][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.415632][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.459592][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.475420][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.485118][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.499568][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.511179][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.518282][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.531247][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.539422][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.679462][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.715027][ T5841] veth0_vlan: entered promiscuous mode [ 75.724573][ T5841] veth1_vlan: entered promiscuous mode [ 75.747923][ T5841] veth0_macvtap: entered promiscuous mode [ 75.756078][ T5841] veth1_macvtap: entered promiscuous mode [ 75.775250][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.788386][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.801264][ T3518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.810876][ T3518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.823459][ T3518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.832494][ T3518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.934195][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.984787][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.064204][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.116432][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.597170][ T5889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.606359][ T5889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.614038][ T5889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.622406][ T5889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.630321][ T5889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.851178][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.859512][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.887330][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.896664][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/04 11:48:34 executed programs: 0 [ 78.130066][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.137889][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.145614][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.155711][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.164204][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.280849][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 78.336235][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.343433][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.350642][ T5924] bridge_slave_0: entered allmulticast mode [ 78.357703][ T5924] bridge_slave_0: entered promiscuous mode [ 78.365063][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.372420][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.379655][ T5924] bridge_slave_1: entered allmulticast mode [ 78.386944][ T5924] bridge_slave_1: entered promiscuous mode [ 78.411049][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.422768][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.449167][ T5924] team0: Port device team_slave_0 added [ 78.456373][ T5924] team0: Port device team_slave_1 added [ 78.484416][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.491360][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.518462][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.530523][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.537532][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.563673][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.598828][ T5924] hsr_slave_0: entered promiscuous mode [ 78.605289][ T5924] hsr_slave_1: entered promiscuous mode [ 78.611758][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 78.617548][ T5924] Cannot create hsr debugfs directory [ 78.754406][ T37] bridge_slave_1: left allmulticast mode [ 78.760252][ T37] bridge_slave_1: left promiscuous mode [ 78.766584][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.776684][ T37] bridge_slave_0: left allmulticast mode [ 78.782710][ T37] bridge_slave_0: left promiscuous mode [ 78.788371][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.963692][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.974258][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.985106][ T37] bond0 (unregistering): Released all slaves [ 79.063889][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 79.063903][ T30] audit: type=1400 audit(1762256915.072:111): avc: denied { read open } for pid=5935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.095800][ T30] audit: type=1400 audit(1762256915.072:112): avc: denied { getattr } for pid=5935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.144641][ T37] hsr_slave_0: left promiscuous mode [ 79.152994][ T37] hsr_slave_1: left promiscuous mode [ 79.159088][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.169930][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.178762][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.189588][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.209031][ T37] veth1_macvtap: left promiscuous mode [ 79.214824][ T37] veth0_macvtap: left promiscuous mode [ 79.220453][ T37] veth1_vlan: left promiscuous mode [ 79.226297][ T37] veth0_vlan: left promiscuous mode [ 79.326939][ T30] audit: type=1400 audit(1762256915.332:113): avc: denied { add_name } for pid=5934 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.434697][ T30] audit: type=1400 audit(1762256915.442:114): avc: denied { remove_name } for pid=5945 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.580918][ T37] team0 (unregistering): Port device team_slave_1 removed [ 79.601425][ T37] team0 (unregistering): Port device team_slave_0 removed [ 79.999544][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.012611][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.023448][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.035465][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.232558][ T5889] Bluetooth: hci0: command tx timeout [ 80.455854][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.476285][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.492470][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.499588][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.533541][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.540660][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.595350][ T5924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.605910][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.916577][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.046485][ T5924] veth0_vlan: entered promiscuous mode [ 81.062959][ T5924] veth1_vlan: entered promiscuous mode [ 81.103633][ T5924] veth0_macvtap: entered promiscuous mode [ 81.113914][ T5924] veth1_macvtap: entered promiscuous mode [ 81.144948][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.161667][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.178387][ T3518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.189300][ T3518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.205586][ T1331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.214755][ T1331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.282260][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.290114][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.313045][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.320843][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.352673][ T976] cfg80211: failed to load regulatory.db [ 81.368035][ T30] audit: type=1400 audit(1762256917.372:115): avc: denied { read write } for pid=5984 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.392896][ T30] audit: type=1400 audit(1762256917.392:116): avc: denied { open } for pid=5984 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.416242][ T30] audit: type=1400 audit(1762256917.392:117): avc: denied { ioctl } for pid=5984 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.621846][ T5932] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.781560][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 81.789042][ T5932] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 81.799488][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 81.809382][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 81.820870][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 81.832058][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 81.843231][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 81.857942][ T5932] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 81.867650][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.875644][ T5932] usb 1-1: Product: syz [ 81.879769][ T5932] usb 1-1: Manufacturer: syz [ 81.884359][ T5932] usb 1-1: SerialNumber: syz [ 81.892429][ T5932] usb 1-1: config 0 descriptor?? [ 81.899732][ T5984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.120025][ T5932] smsusb:smsusb_probe: board id=8, interface number 0 [ 82.129227][ T5932] smsusb:siano_media_device_register: media controller created [ 82.138170][ T5932] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 82.144320][ T5932] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 82.152606][ T5932] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 82.161149][ T5932] ------------[ cut here ]------------ [ 82.166635][ T5932] WARNING: CPU: 0 PID: 5932 at mm/slub.c:6748 free_large_kmalloc+0x114/0x180 [ 82.175421][ T5932] Modules linked in: [ 82.179385][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.188774][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.198849][ T5932] Workqueue: usb_hub_wq hub_event [ 82.203887][ T5932] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 82.209694][ T5932] Code: 00 00 00 48 89 df e8 db 38 14 00 e8 46 4b ab ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 a8 6c b4 8d e8 50 62 ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 72 6d a1 8d 48 89 df 5b 5d 41 5c 41 5d e9 34 62 [ 82.229623][ T5932] RSP: 0018:ffffc90003796da0 EFLAGS: 00010202 [ 82.236160][ T5932] RAX: 00fff00000000000 RBX: ffffea00016f1880 RCX: ffffffff816df4fe [ 82.244194][ T5932] RDX: 00000000000000ff RSI: ffff88805bc62000 RDI: ffffea00016f1880 [ 82.252176][ T5932] RBP: ffff88805bc62000 R08: 0000000000000007 R09: 0000000000000000 [ 82.260140][ T5932] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880358d8000 [ 82.268128][ T5932] R13: ffff888079c29000 R14: dffffc0000000000 R15: ffff8880358d80f0 [ 82.276113][ T5932] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 82.285066][ T5932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.291669][ T5932] CR2: 00007f4d6abf37b0 CR3: 00000000342e2000 CR4: 00000000003526f0 [ 82.299626][ T5932] Call Trace: [ 82.302918][ T5932] [ 82.305841][ T5932] usb_free_urb.part.0+0xe5/0x100 [ 82.310851][ T5932] usb_free_urb+0x1f/0x30 [ 82.315518][ T5889] Bluetooth: hci0: command tx timeout [ 82.320900][ T5932] smsusb_term_device+0x108/0x1e0 [ 82.326106][ T5932] smsusb_init_device+0xaa0/0xe00 [ 82.331131][ T5932] ? __pfx_smsusb_init_device+0x10/0x10 [ 82.336735][ T5932] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 82.342315][ T5932] ? usb_clear_halt+0x61/0x160 [ 82.347083][ T5932] smsusb_probe+0x5d3/0x1090 [ 82.351709][ T5932] ? __pfx_smsusb_probe+0x10/0x10 [ 82.356736][ T5932] ? mark_held_locks+0x49/0x80 [ 82.361536][ T5932] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.367432][ T5932] ? __pm_runtime_set_status+0x13c/0xa80 [ 82.373084][ T5932] usb_probe_interface+0x303/0xa40 [ 82.378196][ T5932] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.383853][ T5932] really_probe+0x241/0xa90 [ 82.388361][ T5932] __driver_probe_device+0x1de/0x440 [ 82.393960][ T5932] driver_probe_device+0x4c/0x1b0 [ 82.398983][ T5932] __device_attach_driver+0x1df/0x310 [ 82.404372][ T5932] ? __pfx___device_attach_driver+0x10/0x10 [ 82.410254][ T5932] bus_for_each_drv+0x159/0x1e0 [ 82.415331][ T5932] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.420704][ T5932] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.426119][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.431982][ T5932] __device_attach+0x1e4/0x4b0 [ 82.436738][ T5932] ? __pfx___device_attach+0x10/0x10 [ 82.442037][ T5932] ? do_raw_spin_unlock+0x172/0x230 [ 82.447237][ T5932] bus_probe_device+0x17f/0x1c0 [ 82.452127][ T5932] device_add+0x1148/0x1aa0 [ 82.456627][ T5932] ? __pfx_device_add+0x10/0x10 [ 82.461456][ T5932] usb_set_configuration+0x1187/0x1e20 [ 82.466967][ T5932] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 82.473489][ T5932] usb_generic_driver_probe+0xb1/0x110 [ 82.478953][ T5932] usb_probe_device+0xef/0x3e0 [ 82.483752][ T5932] ? __pfx_usb_probe_device+0x10/0x10 [ 82.489127][ T5932] really_probe+0x241/0xa90 [ 82.493686][ T5932] __driver_probe_device+0x1de/0x440 [ 82.498965][ T5932] ? usb_driver_applicable+0x1c7/0x220 [ 82.504435][ T5932] driver_probe_device+0x4c/0x1b0 [ 82.509453][ T5932] __device_attach_driver+0x1df/0x310 [ 82.514914][ T5932] ? __pfx___device_attach_driver+0x10/0x10 [ 82.520932][ T5932] bus_for_each_drv+0x159/0x1e0 [ 82.526019][ T5932] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.531394][ T5932] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.536603][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.542432][ T5932] __device_attach+0x1e4/0x4b0 [ 82.547176][ T5932] ? __pfx___device_attach+0x10/0x10 [ 82.552553][ T5932] ? do_raw_spin_unlock+0x172/0x230 [ 82.557749][ T5932] bus_probe_device+0x17f/0x1c0 [ 82.562794][ T5932] device_add+0x1148/0x1aa0 [ 82.567290][ T5932] ? __pfx_device_add+0x10/0x10 [ 82.572176][ T5932] ? add_device_randomness+0xb7/0xf0 [ 82.577459][ T5932] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 82.583372][ T5932] usb_new_device+0xd07/0x1a60 [ 82.588133][ T5932] ? do_raw_spin_lock+0x12c/0x2b0 [ 82.593180][ T5932] ? __pfx_usb_new_device+0x10/0x10 [ 82.598378][ T5932] ? mark_held_locks+0x49/0x80 [ 82.603165][ T5932] hub_event+0x2f34/0x4fe0 [ 82.607619][ T5932] ? __pfx_hub_event+0x10/0x10 [ 82.612422][ T5932] ? assoc_array_apply_edit+0x2d0/0x6c0 [ 82.617984][ T5932] ? rcu_is_watching+0x12/0xc0 [ 82.623016][ T5932] process_one_work+0x9cf/0x1b70 [ 82.627968][ T5932] ? __pfx_hcd_resume_work+0x10/0x10 [ 82.633550][ T5932] ? __pfx_process_one_work+0x10/0x10 [ 82.638933][ T5932] ? assign_work+0x1a0/0x250 [ 82.643568][ T5932] worker_thread+0x6c8/0xf10 [ 82.648173][ T5932] ? __kthread_parkme+0x19e/0x250 [ 82.653227][ T5932] ? __pfx_worker_thread+0x10/0x10 [ 82.658338][ T5932] kthread+0x3c5/0x780 [ 82.662442][ T5932] ? __pfx_kthread+0x10/0x10 [ 82.667041][ T5932] ? rcu_is_watching+0x12/0xc0 [ 82.671848][ T5932] ? __pfx_kthread+0x10/0x10 [ 82.676440][ T5932] ret_from_fork+0x675/0x7d0 [ 82.681027][ T5932] ? __pfx_kthread+0x10/0x10 [ 82.685678][ T5932] ret_from_fork_asm+0x1a/0x30 [ 82.690460][ T5932] [ 82.693519][ T5932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.700782][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 82.710137][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.720191][ T5932] Workqueue: usb_hub_wq hub_event [ 82.725212][ T5932] Call Trace: [ 82.728470][ T5932] [ 82.731385][ T5932] dump_stack_lvl+0x3d/0x1f0 [ 82.735973][ T5932] vpanic+0x640/0x6f0 [ 82.739945][ T5932] ? free_large_kmalloc+0x114/0x180 [ 82.745127][ T5932] panic+0xca/0xd0 [ 82.748836][ T5932] ? __pfx_panic+0x10/0x10 [ 82.753249][ T5932] ? check_panic_on_warn+0x1f/0xb0 [ 82.758350][ T5932] check_panic_on_warn+0xab/0xb0 [ 82.763279][ T5932] __warn+0xf6/0x3c0 [ 82.767154][ T5932] ? free_large_kmalloc+0x114/0x180 [ 82.772340][ T5932] report_bug+0x3c3/0x580 [ 82.776657][ T5932] ? free_large_kmalloc+0x114/0x180 [ 82.781843][ T5932] handle_bug+0x184/0x210 [ 82.786152][ T5932] exc_invalid_op+0x17/0x50 [ 82.790636][ T5932] asm_exc_invalid_op+0x1a/0x20 [ 82.795479][ T5932] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 82.801285][ T5932] Code: 00 00 00 48 89 df e8 db 38 14 00 e8 46 4b ab ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 a8 6c b4 8d e8 50 62 ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 72 6d a1 8d 48 89 df 5b 5d 41 5c 41 5d e9 34 62 [ 82.820975][ T5932] RSP: 0018:ffffc90003796da0 EFLAGS: 00010202 [ 82.827040][ T5932] RAX: 00fff00000000000 RBX: ffffea00016f1880 RCX: ffffffff816df4fe [ 82.834997][ T5932] RDX: 00000000000000ff RSI: ffff88805bc62000 RDI: ffffea00016f1880 [ 82.842953][ T5932] RBP: ffff88805bc62000 R08: 0000000000000007 R09: 0000000000000000 [ 82.850915][ T5932] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880358d8000 [ 82.858874][ T5932] R13: ffff888079c29000 R14: dffffc0000000000 R15: ffff8880358d80f0 [ 82.866841][ T5932] ? __phys_addr+0xde/0x180 [ 82.871347][ T5932] usb_free_urb.part.0+0xe5/0x100 [ 82.876372][ T5932] usb_free_urb+0x1f/0x30 [ 82.880698][ T5932] smsusb_term_device+0x108/0x1e0 [ 82.885721][ T5932] smsusb_init_device+0xaa0/0xe00 [ 82.890736][ T5932] ? __pfx_smsusb_init_device+0x10/0x10 [ 82.896270][ T5932] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 82.901802][ T5932] ? usb_clear_halt+0x61/0x160 [ 82.906554][ T5932] smsusb_probe+0x5d3/0x1090 [ 82.911130][ T5932] ? __pfx_smsusb_probe+0x10/0x10 [ 82.916133][ T5932] ? mark_held_locks+0x49/0x80 [ 82.920886][ T5932] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.926683][ T5932] ? __pm_runtime_set_status+0x13c/0xa80 [ 82.932307][ T5932] usb_probe_interface+0x303/0xa40 [ 82.937413][ T5932] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.943035][ T5932] really_probe+0x241/0xa90 [ 82.947523][ T5932] __driver_probe_device+0x1de/0x440 [ 82.952793][ T5932] driver_probe_device+0x4c/0x1b0 [ 82.957815][ T5932] __device_attach_driver+0x1df/0x310 [ 82.963190][ T5932] ? __pfx___device_attach_driver+0x10/0x10 [ 82.969080][ T5932] bus_for_each_drv+0x159/0x1e0 [ 82.973928][ T5932] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.979290][ T5932] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.984479][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.990281][ T5932] __device_attach+0x1e4/0x4b0 [ 82.995028][ T5932] ? __pfx___device_attach+0x10/0x10 [ 83.000293][ T5932] ? do_raw_spin_unlock+0x172/0x230 [ 83.005481][ T5932] bus_probe_device+0x17f/0x1c0 [ 83.010328][ T5932] device_add+0x1148/0x1aa0 [ 83.014819][ T5932] ? __pfx_device_add+0x10/0x10 [ 83.019664][ T5932] usb_set_configuration+0x1187/0x1e20 [ 83.025127][ T5932] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 83.031176][ T5932] usb_generic_driver_probe+0xb1/0x110 [ 83.036622][ T5932] usb_probe_device+0xef/0x3e0 [ 83.041375][ T5932] ? __pfx_usb_probe_device+0x10/0x10 [ 83.046733][ T5932] really_probe+0x241/0xa90 [ 83.051236][ T5932] __driver_probe_device+0x1de/0x440 [ 83.056520][ T5932] ? usb_driver_applicable+0x1c7/0x220 [ 83.061987][ T5932] driver_probe_device+0x4c/0x1b0 [ 83.067007][ T5932] __device_attach_driver+0x1df/0x310 [ 83.072387][ T5932] ? __pfx___device_attach_driver+0x10/0x10 [ 83.078294][ T5932] bus_for_each_drv+0x159/0x1e0 [ 83.083150][ T5932] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.088516][ T5932] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.093708][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.099521][ T5932] __device_attach+0x1e4/0x4b0 [ 83.104285][ T5932] ? __pfx___device_attach+0x10/0x10 [ 83.109556][ T5932] ? do_raw_spin_unlock+0x172/0x230 [ 83.114748][ T5932] bus_probe_device+0x17f/0x1c0 [ 83.119597][ T5932] device_add+0x1148/0x1aa0 [ 83.124094][ T5932] ? __pfx_device_add+0x10/0x10 [ 83.128932][ T5932] ? add_device_randomness+0xb7/0xf0 [ 83.134201][ T5932] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 83.140098][ T5932] usb_new_device+0xd07/0x1a60 [ 83.144850][ T5932] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.149859][ T5932] ? __pfx_usb_new_device+0x10/0x10 [ 83.155041][ T5932] ? mark_held_locks+0x49/0x80 [ 83.159797][ T5932] hub_event+0x2f34/0x4fe0 [ 83.164227][ T5932] ? __pfx_hub_event+0x10/0x10 [ 83.168974][ T5932] ? assoc_array_apply_edit+0x2d0/0x6c0 [ 83.174518][ T5932] ? rcu_is_watching+0x12/0xc0 [ 83.179268][ T5932] process_one_work+0x9cf/0x1b70 [ 83.184195][ T5932] ? __pfx_hcd_resume_work+0x10/0x10 [ 83.189473][ T5932] ? __pfx_process_one_work+0x10/0x10 [ 83.194834][ T5932] ? assign_work+0x1a0/0x250 [ 83.199406][ T5932] worker_thread+0x6c8/0xf10 [ 83.203995][ T5932] ? __kthread_parkme+0x19e/0x250 [ 83.209029][ T5932] ? __pfx_worker_thread+0x10/0x10 [ 83.214139][ T5932] kthread+0x3c5/0x780 [ 83.218200][ T5932] ? __pfx_kthread+0x10/0x10 [ 83.222776][ T5932] ? rcu_is_watching+0x12/0xc0 [ 83.227529][ T5932] ? __pfx_kthread+0x10/0x10 [ 83.232105][ T5932] ret_from_fork+0x675/0x7d0 [ 83.236683][ T5932] ? __pfx_kthread+0x10/0x10 [ 83.241265][ T5932] ret_from_fork_asm+0x1a/0x30 [ 83.246040][ T5932] [ 83.249245][ T5932] Kernel Offset: disabled [ 83.253553][ T5932] Rebooting in 86400 seconds..