Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. 2026/03/10 21:27:10 parsed 1 programs [ 58.711627][ T29] audit: type=1400 audit(1773178030.664:62): avc: denied { node_bind } for pid=5801 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.696465][ T29] audit: type=1400 audit(1773178032.644:63): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.720498][ T29] audit: type=1400 audit(1773178032.674:64): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.723146][ T5808] cgroup: Unknown subsys name 'net' [ 60.749275][ T29] audit: type=1400 audit(1773178032.694:65): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.892593][ T5808] cgroup: Unknown subsys name 'cpuset' [ 60.900894][ T5808] cgroup: Unknown subsys name 'rlimit' [ 61.010970][ T29] audit: type=1400 audit(1773178032.964:66): avc: denied { setattr } for pid=5808 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.046340][ T29] audit: type=1400 audit(1773178032.964:67): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.075379][ T29] audit: type=1400 audit(1773178032.964:68): avc: denied { write } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.100902][ T29] audit: type=1400 audit(1773178032.964:69): avc: denied { read } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.114719][ T5811] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.130249][ T29] audit: type=1400 audit(1773178032.964:70): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.155112][ T29] audit: type=1400 audit(1773178032.964:71): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.132377][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.659672][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.938866][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 63.938882][ T29] audit: type=1400 audit(1773178035.884:95): avc: denied { create } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.965410][ T29] audit: type=1400 audit(1773178035.894:96): avc: denied { sys_admin } for pid=5826 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.040135][ T29] audit: type=1400 audit(1773178035.984:97): avc: denied { sys_chroot } for pid=5827 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.428939][ T29] audit: type=1401 audit(1773178036.374:98): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 64.960578][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.968508][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.030986][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.038919][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.884366][ T29] audit: type=1400 audit(1773178037.834:99): avc: denied { module_request } for pid=5875 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.934876][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 65.999402][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.007145][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.014463][ T5875] bridge_slave_0: entered allmulticast mode [ 66.022729][ T5875] bridge_slave_0: entered promiscuous mode [ 66.031712][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.038801][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.045949][ T5875] bridge_slave_1: entered allmulticast mode [ 66.052634][ T5875] bridge_slave_1: entered promiscuous mode [ 66.075783][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.088348][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.119537][ T5875] team0: Port device team_slave_0 added [ 66.127348][ T5875] team0: Port device team_slave_1 added [ 66.144811][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.152028][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.177948][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.190365][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.197300][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.223187][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.252478][ T5875] hsr_slave_0: entered promiscuous mode [ 66.258652][ T5875] hsr_slave_1: entered promiscuous mode [ 66.359217][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.369911][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.378948][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.388423][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.410135][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.417259][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.425030][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.432139][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.471576][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.486735][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.495249][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.506970][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.521079][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.528162][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.540310][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.547389][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.604250][ T29] audit: type=1400 audit(1773178038.554:100): avc: denied { sys_module } for pid=5875 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.676020][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.705076][ T5875] veth0_vlan: entered promiscuous mode [ 66.717615][ T5875] veth1_vlan: entered promiscuous mode [ 66.737946][ T5875] veth0_macvtap: entered promiscuous mode [ 66.746023][ T5875] veth1_macvtap: entered promiscuous mode [ 66.760262][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.774778][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.787945][ T85] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797671][ T85] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.808751][ T85] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.818071][ T85] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.952952][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.002765][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.061353][ T29] audit: type=1400 audit(1773178039.014:101): avc: denied { create } for pid=5905 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.061847][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.094314][ T29] audit: type=1400 audit(1773178039.034:102): avc: denied { read write } for pid=5905 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.119179][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.120281][ T29] audit: type=1400 audit(1773178039.034:103): avc: denied { open } for pid=5905 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.127475][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.150500][ T29] audit: type=1400 audit(1773178039.034:104): avc: denied { ioctl } for pid=5905 comm="syz-executor" path="socket:[6058]" dev="sockfs" ino=6058 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.157880][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.190273][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.200001][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.229102][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/10 21:27:19 executed programs: 0 [ 67.582347][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.590518][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.597926][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.606741][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.617205][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.713817][ T5917] chnl_net:caif_netlink_parms(): no params data found [ 67.766125][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.773390][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.780730][ T5917] bridge_slave_0: entered allmulticast mode [ 67.787389][ T5917] bridge_slave_0: entered promiscuous mode [ 67.794828][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.802327][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.809429][ T5917] bridge_slave_1: entered allmulticast mode [ 67.816338][ T5917] bridge_slave_1: entered promiscuous mode [ 67.836547][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.848410][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.877355][ T5917] team0: Port device team_slave_0 added [ 67.884480][ T5917] team0: Port device team_slave_1 added [ 67.901985][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.908945][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.935062][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.947359][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.954554][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.980680][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.016388][ T5917] hsr_slave_0: entered promiscuous mode [ 68.023070][ T5917] hsr_slave_1: entered promiscuous mode [ 68.029046][ T5917] debugfs: 'hsr0' already exists in 'hsr' [ 68.034948][ T5917] Cannot create hsr debugfs directory [ 69.680362][ T51] Bluetooth: hci0: command tx timeout [ 70.335091][ T35] bridge_slave_1: left allmulticast mode [ 70.341305][ T35] bridge_slave_1: left promiscuous mode [ 70.347525][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.357431][ T35] bridge_slave_0: left allmulticast mode [ 70.363918][ T35] bridge_slave_0: left promiscuous mode [ 70.369586][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.486487][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.497353][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.506796][ T35] bond0 (unregistering): Released all slaves [ 70.631339][ T35] hsr_slave_0: left promiscuous mode [ 70.637283][ T35] hsr_slave_1: left promiscuous mode [ 70.644016][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.656677][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.665087][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.674626][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.688159][ T35] veth1_macvtap: left promiscuous mode [ 70.694360][ T35] veth0_macvtap: left promiscuous mode [ 70.699941][ T35] veth1_vlan: left promiscuous mode [ 70.705211][ T35] veth0_vlan: left promiscuous mode [ 70.876341][ T35] team0 (unregistering): Port device team_slave_1 removed [ 70.888364][ T35] team0 (unregistering): Port device team_slave_0 removed [ 71.054567][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.061668][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.200949][ T5917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.217484][ T5917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.235579][ T5917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.254147][ T5917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.454637][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.483126][ T5917] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.521447][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.528584][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.548660][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.555787][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.760275][ T51] Bluetooth: hci0: command tx timeout [ 71.781422][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.816822][ T5917] veth0_vlan: entered promiscuous mode [ 71.826801][ T5917] veth1_vlan: entered promiscuous mode [ 71.848584][ T5917] veth0_macvtap: entered promiscuous mode [ 71.856744][ T5917] veth1_macvtap: entered promiscuous mode [ 71.869769][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.881706][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.894196][ T3461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.903313][ T3461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.917289][ T3461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.927751][ T3461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.971076][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.978931][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.997633][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.006008][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.054459][ T29] audit: type=1400 audit(1773178044.004:105): avc: denied { map_create } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.075928][ T29] audit: type=1400 audit(1773178044.004:106): avc: denied { perfmon } for pid=5978 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.096952][ T29] audit: type=1400 audit(1773178044.004:107): avc: denied { map_read map_write } for pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.116566][ T29] audit: type=1400 audit(1773178044.004:108): avc: denied { read write } for pid=5978 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.139865][ T29] audit: type=1400 audit(1773178044.004:109): avc: denied { open } for pid=5978 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.163819][ T29] audit: type=1400 audit(1773178044.004:110): avc: denied { ioctl } for pid=5978 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.320260][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.480164][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 72.487658][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.497486][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 72.507205][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 72.518695][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 72.530405][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 72.543861][ T24] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 72.552991][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.561654][ T24] usb 1-1: Product: syz [ 72.565820][ T24] usb 1-1: Manufacturer: syz [ 72.570520][ T24] usb 1-1: SerialNumber: syz [ 72.578765][ T24] usb 1-1: config 0 descriptor?? [ 72.586172][ T5978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.596697][ T24] smsusb:smsusb_probe: board id=2, interface number 0 [ 72.605964][ T24] smsusb:siano_media_device_register: media controller created [ 72.614900][ T24] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 72.620866][ T24] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 72.628423][ T24] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 72.637079][ T24] ------------[ cut here ]------------ [ 72.642905][ T24] !PageLargeKmalloc(page) [ 72.642915][ T24] WARNING: mm/slub.c:6396 at free_large_kmalloc+0x96/0xd0, CPU#1: kworker/1:0/24 [ 72.656399][ T24] Modules linked in: [ 72.660634][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 72.669981][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 72.680085][ T24] Workqueue: usb_hub_wq hub_event [ 72.685131][ T24] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 72.690933][ T24] Code: 28 90 0f 0b 90 80 3d b0 0c 59 0e 00 0f 84 45 7c bb fe 48 8b 74 24 28 48 89 ef e8 95 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 c1 0a e6 8d 5b 5d 41 5c 41 [ 72.710593][ T24] RSP: 0018:ffffc900001e6d70 EFLAGS: 00010202 [ 72.716651][ T24] RAX: 00000000000000ff RBX: ffffea000166d880 RCX: ffffffff81b9c68e [ 72.724926][ T24] RDX: 0000000000000000 RSI: ffff888059b62000 RDI: ffffea000166d880 [ 72.732976][ T24] RBP: ffff888059b62000 R08: 0000000000000007 R09: 0000000000000000 [ 72.740981][ T24] R10: 0000000000000000 R11: ffffffff82750da4 R12: ffff88807a186000 [ 72.748930][ T24] R13: ffff88807a185000 R14: dffffc0000000000 R15: ffff88807a1860f0 [ 72.756950][ T24] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 72.766016][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.772772][ T24] CR2: 00005625340da3e0 CR3: 0000000035ac9000 CR4: 00000000003526f0 [ 72.780800][ T24] Call Trace: [ 72.784073][ T24] [ 72.787002][ T24] usb_free_urb.part.0+0xf8/0x110 [ 72.792055][ T24] usb_free_urb+0x1f/0x30 [ 72.796389][ T24] smsusb_term_device+0x108/0x200 [ 72.801798][ T24] smsusb_init_device+0xb4e/0xbb0 [ 72.806872][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 72.812479][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 72.818039][ T24] ? usb_clear_halt+0x61/0x160 [ 72.822837][ T24] smsusb_probe+0xd7f/0xe1f [ 72.827355][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 72.832453][ T24] ? mark_held_locks+0x40/0x70 [ 72.837305][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.843156][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.848975][ T24] ? __pm_runtime_set_status+0x13c/0x970 [ 72.854651][ T24] usb_probe_interface+0x303/0x8f0 [ 72.859803][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 72.865565][ T24] really_probe+0x241/0xa60 [ 72.870281][ T24] __driver_probe_device+0x1de/0x400 [ 72.875584][ T24] driver_probe_device+0x4c/0x1b0 [ 72.880786][ T24] __device_attach_driver+0x1df/0x340 [ 72.886169][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 72.892106][ T24] bus_for_each_drv+0x159/0x1e0 [ 72.896951][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.902336][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 72.907622][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.913543][ T24] __device_attach+0x1e4/0x4d0 [ 72.918300][ T24] ? __pfx___device_attach+0x10/0x10 [ 72.923624][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.928829][ T24] device_initial_probe+0xaf/0xd0 [ 72.933927][ T24] bus_probe_device+0x64/0x160 [ 72.938696][ T24] device_add+0x11d9/0x1950 [ 72.943230][ T24] ? __pfx_device_add+0x10/0x10 [ 72.948144][ T24] usb_set_configuration+0xd97/0x1c60 [ 72.953580][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 72.959663][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 72.965517][ T24] usb_probe_device+0xef/0x400 [ 72.970516][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 72.975876][ T24] really_probe+0x241/0xa60 [ 72.980564][ T24] __driver_probe_device+0x1de/0x400 [ 72.985849][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 72.991343][ T24] driver_probe_device+0x4c/0x1b0 [ 72.996364][ T24] __device_attach_driver+0x1df/0x340 [ 73.001765][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.007680][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.012627][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.018011][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 73.023242][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.029043][ T24] __device_attach+0x1e4/0x4d0 [ 73.033865][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.039153][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.044474][ T24] device_initial_probe+0xaf/0xd0 [ 73.049505][ T24] bus_probe_device+0x64/0x160 [ 73.054333][ T24] device_add+0x11d9/0x1950 [ 73.058845][ T24] ? __pfx_device_add+0x10/0x10 [ 73.063735][ T24] ? add_device_randomness+0xb7/0xf0 [ 73.069028][ T24] usb_new_device.cold+0x685/0x115c [ 73.074464][ T24] ? do_raw_spin_lock+0x128/0x260 [ 73.079503][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 73.085004][ T24] ? mark_held_locks+0x40/0x70 [ 73.089827][ T24] hub_event+0x314d/0x4af0 [ 73.094259][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.099005][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 73.104684][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.109450][ T24] process_one_work+0x9d7/0x1920 [ 73.114425][ T24] ? __pfx_process_one_work+0x10/0x10 [ 73.120009][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.124797][ T24] worker_thread+0x5da/0xe40 [ 73.129379][ T24] ? kthread+0x13a/0x450 [ 73.133653][ T24] ? __pfx_worker_thread+0x10/0x10 [ 73.138767][ T24] kthread+0x370/0x450 [ 73.142943][ T24] ? __pfx_kthread+0x10/0x10 [ 73.147551][ T24] ret_from_fork+0x754/0xd80 [ 73.152194][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 73.157410][ T24] ? __switch_to+0x7b4/0x1120 [ 73.162129][ T24] ? __pfx_kthread+0x10/0x10 [ 73.166715][ T24] ret_from_fork_asm+0x1a/0x30 [ 73.171535][ T24] [ 73.174665][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.181931][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 73.191110][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 73.201155][ T24] Workqueue: usb_hub_wq hub_event [ 73.206171][ T24] Call Trace: [ 73.209432][ T24] [ 73.212350][ T24] dump_stack_lvl+0x100/0x190 [ 73.217021][ T24] vpanic+0x552/0x970 [ 73.220988][ T24] ? __pfx_vpanic+0x10/0x10 [ 73.225484][ T24] panic+0xd1/0xe0 [ 73.229200][ T24] ? __pfx_panic+0x10/0x10 [ 73.233604][ T24] ? check_panic_on_warn+0x1f/0x90 [ 73.238727][ T24] check_panic_on_warn.cold+0x19/0x34 [ 73.244082][ T24] ? free_large_kmalloc+0x96/0xd0 [ 73.249101][ T24] __warn.cold+0x191/0x348 [ 73.253501][ T24] __report_bug+0x296/0x3d0 [ 73.258000][ T24] ? free_large_kmalloc+0x96/0xd0 [ 73.263037][ T24] ? __pfx___report_bug+0x10/0x10 [ 73.268041][ T24] ? device_initial_probe+0xaf/0xd0 [ 73.273224][ T24] ? bus_probe_device+0x64/0x160 [ 73.278143][ T24] ? device_add+0x11d9/0x1950 [ 73.282807][ T24] ? usb_new_device.cold+0x685/0x115c [ 73.288166][ T24] ? hub_event+0x314d/0x4af0 [ 73.292765][ T24] ? process_one_work+0x9d7/0x1920 [ 73.297860][ T24] ? worker_thread+0x5da/0xe40 [ 73.302602][ T24] ? kthread+0x370/0x450 [ 73.306826][ T24] ? ret_from_fork+0x754/0xd80 [ 73.311578][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 73.316500][ T24] ? find_held_lock+0x2b/0x80 [ 73.321160][ T24] ? smscore_unregister_device+0x537/0x7f0 [ 73.326951][ T24] ? smscore_unregister_device+0x537/0x7f0 [ 73.332746][ T24] ? free_large_kmalloc+0x96/0xd0 [ 73.337754][ T24] report_bug+0xb2/0x220 [ 73.341979][ T24] ? free_large_kmalloc+0x96/0xd0 [ 73.346997][ T24] handle_bug+0x16a/0x2a0 [ 73.351314][ T24] exc_invalid_op+0x17/0x50 [ 73.355802][ T24] asm_exc_invalid_op+0x1a/0x20 [ 73.360635][ T24] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 73.366250][ T24] Code: 28 90 0f 0b 90 80 3d b0 0c 59 0e 00 0f 84 45 7c bb fe 48 8b 74 24 28 48 89 ef e8 95 3a 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 c1 0a e6 8d 5b 5d 41 5c 41 [ 73.386275][ T24] RSP: 0018:ffffc900001e6d70 EFLAGS: 00010202 [ 73.392328][ T24] RAX: 00000000000000ff RBX: ffffea000166d880 RCX: ffffffff81b9c68e [ 73.400296][ T24] RDX: 0000000000000000 RSI: ffff888059b62000 RDI: ffffea000166d880 [ 73.408250][ T24] RBP: ffff888059b62000 R08: 0000000000000007 R09: 0000000000000000 [ 73.416200][ T24] R10: 0000000000000000 R11: ffffffff82750da4 R12: ffff88807a186000 [ 73.424152][ T24] R13: ffff88807a185000 R14: dffffc0000000000 R15: ffff88807a1860f0 [ 73.432107][ T24] ? kasan_save_track+0x14/0x30 [ 73.436951][ T24] ? __phys_addr+0xde/0x180 [ 73.441449][ T24] usb_free_urb.part.0+0xf8/0x110 [ 73.446463][ T24] usb_free_urb+0x1f/0x30 [ 73.450790][ T24] smsusb_term_device+0x108/0x200 [ 73.455817][ T24] smsusb_init_device+0xb4e/0xbb0 [ 73.460855][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 73.466413][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 73.471967][ T24] ? usb_clear_halt+0x61/0x160 [ 73.476720][ T24] smsusb_probe+0xd7f/0xe1f [ 73.481216][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 73.486233][ T24] ? mark_held_locks+0x40/0x70 [ 73.490986][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.496780][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.502569][ T24] ? __pm_runtime_set_status+0x13c/0x970 [ 73.508280][ T24] usb_probe_interface+0x303/0x8f0 [ 73.513398][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.519015][ T24] really_probe+0x241/0xa60 [ 73.523506][ T24] __driver_probe_device+0x1de/0x400 [ 73.528817][ T24] driver_probe_device+0x4c/0x1b0 [ 73.533828][ T24] __device_attach_driver+0x1df/0x340 [ 73.539187][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.545064][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.549895][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.555248][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 73.560429][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.566216][ T24] __device_attach+0x1e4/0x4d0 [ 73.570965][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.576234][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.581430][ T24] device_initial_probe+0xaf/0xd0 [ 73.586448][ T24] bus_probe_device+0x64/0x160 [ 73.591207][ T24] device_add+0x11d9/0x1950 [ 73.595700][ T24] ? __pfx_device_add+0x10/0x10 [ 73.600557][ T24] usb_set_configuration+0xd97/0x1c60 [ 73.605933][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.611987][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 73.617345][ T24] usb_probe_device+0xef/0x400 [ 73.622092][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 73.627445][ T24] really_probe+0x241/0xa60 [ 73.631951][ T24] __driver_probe_device+0x1de/0x400 [ 73.637248][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 73.642714][ T24] driver_probe_device+0x4c/0x1b0 [ 73.647728][ T24] __device_attach_driver+0x1df/0x340 [ 73.653085][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 73.658961][ T24] bus_for_each_drv+0x159/0x1e0 [ 73.663794][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.669149][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 73.674331][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.680136][ T24] __device_attach+0x1e4/0x4d0 [ 73.684973][ T24] ? __pfx___device_attach+0x10/0x10 [ 73.690245][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.695438][ T24] device_initial_probe+0xaf/0xd0 [ 73.700451][ T24] bus_probe_device+0x64/0x160 [ 73.705201][ T24] device_add+0x11d9/0x1950 [ 73.709710][ T24] ? __pfx_device_add+0x10/0x10 [ 73.714547][ T24] ? add_device_randomness+0xb7/0xf0 [ 73.719837][ T24] usb_new_device.cold+0x685/0x115c [ 73.725026][ T24] ? do_raw_spin_lock+0x128/0x260 [ 73.730033][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 73.735214][ T24] ? mark_held_locks+0x40/0x70 [ 73.739983][ T24] hub_event+0x314d/0x4af0 [ 73.744400][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.749157][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 73.754870][ T24] ? rcu_is_watching+0x12/0xc0 [ 73.759643][ T24] process_one_work+0x9d7/0x1920 [ 73.764575][ T24] ? __pfx_process_one_work+0x10/0x10 [ 73.769946][ T24] ? __pfx_hub_event+0x10/0x10 [ 73.774693][ T24] worker_thread+0x5da/0xe40 [ 73.779273][ T24] ? kthread+0x13a/0x450 [ 73.783498][ T24] ? __pfx_worker_thread+0x10/0x10 [ 73.788590][ T24] kthread+0x370/0x450 [ 73.792639][ T24] ? __pfx_kthread+0x10/0x10 [ 73.797209][ T24] ret_from_fork+0x754/0xd80 [ 73.801783][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 73.807050][ T24] ? __switch_to+0x7b4/0x1120 [ 73.811757][ T24] ? __pfx_kthread+0x10/0x10 [ 73.816354][ T24] ret_from_fork_asm+0x1a/0x30 [ 73.821128][ T24] [ 73.824332][ T24] Kernel Offset: disabled [ 73.828640][ T24] Rebooting in 86400 seconds..