Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. 2025/07/03 05:57:56 ignoring optional flag "sandboxArg"="0" 2025/07/03 05:57:57 parsed 1 programs [ 50.182777][ T29] audit: type=1400 audit(1751522277.878:61): avc: denied { node_bind } for pid=2954 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.774485][ T29] audit: type=1400 audit(1751522280.468:62): avc: denied { mounton } for pid=2963 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.780812][ T2963] cgroup: Unknown subsys name 'net' [ 52.797303][ T29] audit: type=1400 audit(1751522280.468:63): avc: denied { mount } for pid=2963 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.824888][ T29] audit: type=1400 audit(1751522280.498:64): avc: denied { unmount } for pid=2963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.983553][ T2963] cgroup: Unknown subsys name 'cpuset' [ 52.992620][ T2963] cgroup: Unknown subsys name 'rlimit' [ 53.170582][ T29] audit: type=1400 audit(1751522280.868:65): avc: denied { setattr } for pid=2963 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.194160][ T29] audit: type=1400 audit(1751522280.868:66): avc: denied { create } for pid=2963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.214882][ T29] audit: type=1400 audit(1751522280.868:67): avc: denied { write } for pid=2963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.235363][ T29] audit: type=1400 audit(1751522280.868:68): avc: denied { read } for pid=2963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.255851][ T29] audit: type=1400 audit(1751522280.868:69): avc: denied { module_request } for pid=2963 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.278789][ T29] audit: type=1400 audit(1751522280.918:70): avc: denied { sys_module } for pid=2963 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.363791][ T2967] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.421105][ T2963] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.188644][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 55.188667][ T29] audit: type=1400 audit(1751522282.888:81): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/root/syzkaller.7EOOOj/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.219381][ T29] audit: type=1400 audit(1751522282.888:82): avc: denied { mount } for pid=2969 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.241806][ T29] audit: type=1400 audit(1751522282.888:83): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/root/syzkaller.7EOOOj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.267433][ T29] audit: type=1400 audit(1751522282.888:84): avc: denied { mount } for pid=2969 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.289591][ T29] audit: type=1400 audit(1751522282.888:85): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/root/syzkaller.7EOOOj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.316286][ T29] audit: type=1400 audit(1751522282.888:86): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/root/syzkaller.7EOOOj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.343633][ T29] audit: type=1400 audit(1751522282.888:87): avc: denied { unmount } for pid=2969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.363258][ T29] audit: type=1400 audit(1751522282.918:88): avc: denied { mounton } for pid=2969 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.400714][ T2969] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.588275][ T29] audit: type=1400 audit(1751522283.278:89): avc: denied { read write } for pid=2969 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.612670][ T29] audit: type=1400 audit(1751522283.278:90): avc: denied { open } for pid=2969 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.048098][ T3061] syz-executor (3061) used greatest stack depth: 22680 bytes left 2025/07/03 05:58:22 executed programs: 0 [ 74.855076][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 74.855099][ T29] audit: type=1400 audit(1751522302.548:100): avc: denied { write } for pid=2954 comm="syz-execprog" path="pipe:[2431]" dev="pipefs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2025/07/03 05:58:37 executed programs: 2 [ 89.656308][ T29] audit: type=1400 audit(1751522317.348:101): avc: denied { read write } for pid=3989 comm="syz.3.16" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.679982][ T29] audit: type=1400 audit(1751522317.348:102): avc: denied { open } for pid=3989 comm="syz.3.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.712101][ T29] audit: type=1400 audit(1751522317.398:103): avc: denied { ioctl } for pid=3989 comm="syz.3.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.938627][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.091086][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.100958][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 90.110859][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202 [ 90.122004][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 90.131142][ T10] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 90.139373][ T10] usb 4-1: Manufacturer: syz [ 90.147626][ T10] usb 4-1: config 0 descriptor?? [ 90.155152][ T3989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.166316][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 90.177058][ T10] smsusb:siano_media_device_register: media controller created [ 90.186970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.194347][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.201647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.208937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.216207][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.223473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.231014][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.238963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.246345][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.253705][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.261233][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.268774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.276291][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.283675][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.291231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.298578][ T10] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 90.306893][ T10] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 90.314111][ T10] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 90.321897][ T10] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 90.329978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.337433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.344695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.351951][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.359201][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.366493][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.374011][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.381630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.389256][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.396615][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.403924][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.411184][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.418436][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.425684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.432942][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.440471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.447825][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.455121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.462383][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.469634][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.476887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.484609][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.492663][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.499971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.507222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.514989][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.522244][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.529486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.537220][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 90.544540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.551815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.559112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.566389][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.573664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.581499][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.588967][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.596264][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.603711][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.610982][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.618558][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.625874][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.633118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.641265][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 90.648771][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.656032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.663273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.670889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.678224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.685674][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.693228][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 90.700546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.707818][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.715427][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 90.722643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.730199][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 90.738964][ T10] ------------[ cut here ]------------ [ 90.744542][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:4753 free_large_kmalloc+0x120/0x1a0 [ 90.753356][ T10] Modules linked in: [ 90.757423][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc2-syzkaller-00053-gcf16f408364e #0 PREEMPT(voluntary) [ 90.769837][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.779993][ T10] Workqueue: usb_hub_wq hub_event [ 90.785052][ T10] RIP: 0010:free_large_kmalloc+0x120/0x1a0 [ 90.791340][ T10] Code: ff ff ff e8 f2 f7 b2 ff 89 ea be 06 00 00 00 48 89 df e8 13 cb 0a 00 e8 1e f6 b2 ff 9c 58 f6 c4 02 75 75 fb e9 65 ff ff ff 90 <0f> 0b 90 48 c7 c6 3f 50 af 88 48 89 df 5b 5d 41 5c 41 5d e9 a8 53 [ 90.811042][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 90.817134][ T10] RAX: 0200000000000000 RBX: ffffea0004cd7880 RCX: ffffffff813c559e [ 90.825182][ T10] RDX: 0000000000000000 RSI: ffff8881335e2000 RDI: ffffea0004cd7880 [ 90.833266][ T10] RBP: ffff8881335e2000 R08: 0000000000000007 R09: 0000000000000000 [ 90.841317][ T10] R10: 0000000000000000 R11: ffffffff81da9493 R12: ffff88811ddb4000 [ 90.849366][ T10] R13: ffff88811ddb0000 R14: dffffc0000000000 R15: ffff88811ddb40f0 [ 90.857453][ T10] FS: 0000000000000000(0000) GS:ffff888269164000(0000) knlGS:0000000000000000 [ 90.866460][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.873152][ T10] CR2: 0000557a90e55d28 CR3: 00000001169ba000 CR4: 00000000003506f0 [ 90.881238][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.889318][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.897353][ T10] Call Trace: [ 90.900805][ T10] [ 90.903802][ T10] usb_free_urb.part.0+0xe5/0x100 [ 90.908973][ T10] usb_free_urb+0x1f/0x30 [ 90.913387][ T10] smsusb_term_device+0x108/0x1e0 [ 90.918538][ T10] smsusb_init_device+0xaa0/0xe00 [ 90.923648][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 90.929330][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 90.934943][ T10] ? usb_clear_halt+0x61/0x160 [ 90.939833][ T10] smsusb_probe+0x5d3/0x1090 [ 90.944523][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 90.949639][ T10] ? mark_held_locks+0x49/0x80 [ 90.954448][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.960352][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 90.966137][ T10] usb_probe_interface+0x300/0x9c0 [ 90.971338][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 90.977028][ T10] really_probe+0x241/0xa90 [ 90.981710][ T10] __driver_probe_device+0x1de/0x440 [ 90.987055][ T10] driver_probe_device+0x4c/0x1b0 [ 90.992183][ T10] __device_attach_driver+0x1df/0x310 [ 90.997610][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 91.003581][ T10] bus_for_each_drv+0x159/0x1e0 [ 91.008537][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.013951][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.019260][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.025131][ T10] __device_attach+0x1e4/0x4b0 [ 91.030003][ T10] ? __pfx___device_attach+0x10/0x10 [ 91.035806][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 91.041117][ T10] bus_probe_device+0x17f/0x1c0 [ 91.046027][ T10] device_add+0x1148/0x1a70 [ 91.051328][ T10] ? __pfx_device_add+0x10/0x10 [ 91.056272][ T10] ? mark_held_locks+0x49/0x80 [ 91.061233][ T10] usb_set_configuration+0x1187/0x1e20 [ 91.066765][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 91.072947][ T10] usb_generic_driver_probe+0xb1/0x110 [ 91.078497][ T10] usb_probe_device+0xec/0x3e0 [ 91.083290][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 91.088747][ T10] really_probe+0x241/0xa90 [ 91.093420][ T10] __driver_probe_device+0x1de/0x440 [ 91.098802][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 91.104317][ T10] driver_probe_device+0x4c/0x1b0 [ 91.109436][ T10] __device_attach_driver+0x1df/0x310 [ 91.114863][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 91.120835][ T10] bus_for_each_drv+0x159/0x1e0 [ 91.125756][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.131245][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.136608][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.142543][ T10] __device_attach+0x1e4/0x4b0 [ 91.147456][ T10] ? __pfx___device_attach+0x10/0x10 [ 91.152870][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 91.158139][ T10] bus_probe_device+0x17f/0x1c0 [ 91.163094][ T10] device_add+0x1148/0x1a70 [ 91.167672][ T10] ? __pfx_device_add+0x10/0x10 [ 91.172618][ T10] ? add_device_randomness+0xb7/0xf0 [ 91.177956][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 91.183951][ T10] usb_new_device+0xd07/0x1a20 [ 91.188885][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 91.193996][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 91.199306][ T10] ? mark_held_locks+0x49/0x80 [ 91.204160][ T10] hub_event+0x2f85/0x5030 [ 91.208731][ T10] ? __pfx_hub_event+0x10/0x10 [ 91.213547][ T10] ? assoc_array_gc+0xe00/0x15b0 [ 91.218582][ T10] ? rcu_is_watching+0x12/0xc0 [ 91.223758][ T10] process_one_work+0x9cc/0x1b70 [ 91.228791][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 91.234129][ T10] ? __pfx_process_one_work+0x10/0x10 [ 91.239618][ T10] ? assign_work+0x1a0/0x250 [ 91.244304][ T10] worker_thread+0x6c8/0xf10 [ 91.249005][ T10] ? __kthread_parkme+0x19e/0x250 [ 91.254116][ T10] ? __pfx_worker_thread+0x10/0x10 [ 91.259327][ T10] kthread+0x3c5/0x780 [ 91.263467][ T10] ? __pfx_kthread+0x10/0x10 [ 91.268199][ T10] ? rcu_is_watching+0x12/0xc0 [ 91.273152][ T10] ? __pfx_kthread+0x10/0x10 [ 91.277802][ T10] ret_from_fork+0x5b3/0x6c0 [ 91.282484][ T10] ? __pfx_kthread+0x10/0x10 [ 91.287229][ T10] ret_from_fork_asm+0x1a/0x30 [ 91.292106][ T10] [ 91.295181][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.302479][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc2-syzkaller-00053-gcf16f408364e #0 PREEMPT(voluntary) [ 91.314826][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.324909][ T10] Workqueue: usb_hub_wq hub_event [ 91.329970][ T10] Call Trace: [ 91.333436][ T10] [ 91.336384][ T10] dump_stack_lvl+0x3d/0x1f0 [ 91.341036][ T10] panic+0x71c/0x800 [ 91.345043][ T10] ? __pfx_panic+0x10/0x10 [ 91.349487][ T10] ? show_trace_log_lvl+0x29b/0x3e0 [ 91.355178][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 91.360315][ T10] ? free_large_kmalloc+0x120/0x1a0 [ 91.365538][ T10] check_panic_on_warn+0xab/0xb0 [ 91.370502][ T10] __warn+0xf6/0x3c0 [ 91.374425][ T10] ? free_large_kmalloc+0x120/0x1a0 [ 91.379651][ T10] report_bug+0x3c3/0x580 [ 91.384104][ T10] ? free_large_kmalloc+0x120/0x1a0 [ 91.389375][ T10] handle_bug+0x184/0x210 [ 91.393727][ T10] exc_invalid_op+0x17/0x50 [ 91.398252][ T10] asm_exc_invalid_op+0x1a/0x20 [ 91.403134][ T10] RIP: 0010:free_large_kmalloc+0x120/0x1a0 [ 91.408971][ T10] Code: ff ff ff e8 f2 f7 b2 ff 89 ea be 06 00 00 00 48 89 df e8 13 cb 0a 00 e8 1e f6 b2 ff 9c 58 f6 c4 02 75 75 fb e9 65 ff ff ff 90 <0f> 0b 90 48 c7 c6 3f 50 af 88 48 89 df 5b 5d 41 5c 41 5d e9 a8 53 [ 91.428621][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 91.434801][ T10] RAX: 0200000000000000 RBX: ffffea0004cd7880 RCX: ffffffff813c559e [ 91.442807][ T10] RDX: 0000000000000000 RSI: ffff8881335e2000 RDI: ffffea0004cd7880 [ 91.450802][ T10] RBP: ffff8881335e2000 R08: 0000000000000007 R09: 0000000000000000 [ 91.458795][ T10] R10: 0000000000000000 R11: ffffffff81da9493 R12: ffff88811ddb4000 [ 91.466799][ T10] R13: ffff88811ddb0000 R14: dffffc0000000000 R15: ffff88811ddb40f0 [ 91.474801][ T10] ? kasan_save_stack+0x33/0x60 [ 91.479700][ T10] ? __phys_addr+0xde/0x180 [ 91.484235][ T10] ? free_large_kmalloc+0x11/0x1a0 [ 91.489369][ T10] usb_free_urb.part.0+0xe5/0x100 [ 91.494876][ T10] usb_free_urb+0x1f/0x30 [ 91.499419][ T10] smsusb_term_device+0x108/0x1e0 [ 91.504525][ T10] smsusb_init_device+0xaa0/0xe00 [ 91.509586][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 91.515164][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 91.520756][ T10] ? usb_clear_halt+0x61/0x160 [ 91.525556][ T10] smsusb_probe+0x5d3/0x1090 [ 91.530266][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 91.535315][ T10] ? mark_held_locks+0x49/0x80 [ 91.540190][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.546036][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 91.551721][ T10] usb_probe_interface+0x300/0x9c0 [ 91.556869][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 91.562531][ T10] really_probe+0x241/0xa90 [ 91.567065][ T10] __driver_probe_device+0x1de/0x440 [ 91.572384][ T10] driver_probe_device+0x4c/0x1b0 [ 91.577450][ T10] __device_attach_driver+0x1df/0x310 [ 91.582872][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 91.588793][ T10] bus_for_each_drv+0x159/0x1e0 [ 91.593681][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.599264][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.604494][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.610362][ T10] __device_attach+0x1e4/0x4b0 [ 91.615156][ T10] ? __pfx___device_attach+0x10/0x10 [ 91.620642][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 91.625874][ T10] bus_probe_device+0x17f/0x1c0 [ 91.630756][ T10] device_add+0x1148/0x1a70 [ 91.635289][ T10] ? __pfx_device_add+0x10/0x10 [ 91.640171][ T10] ? mark_held_locks+0x49/0x80 [ 91.644973][ T10] usb_set_configuration+0x1187/0x1e20 [ 91.650475][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 91.656576][ T10] usb_generic_driver_probe+0xb1/0x110 [ 91.662071][ T10] usb_probe_device+0xec/0x3e0 [ 91.666856][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 91.672251][ T10] really_probe+0x241/0xa90 [ 91.676791][ T10] __driver_probe_device+0x1de/0x440 [ 91.682193][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 91.687853][ T10] driver_probe_device+0x4c/0x1b0 [ 91.692906][ T10] __device_attach_driver+0x1df/0x310 [ 91.698504][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 91.704428][ T10] bus_for_each_drv+0x159/0x1e0 [ 91.709340][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 91.714754][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.719985][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.725826][ T10] __device_attach+0x1e4/0x4b0 [ 91.730620][ T10] ? __pfx___device_attach+0x10/0x10 [ 91.735934][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 91.741426][ T10] bus_probe_device+0x17f/0x1c0 [ 91.746351][ T10] device_add+0x1148/0x1a70 [ 91.750890][ T10] ? __pfx_device_add+0x10/0x10 [ 91.755776][ T10] ? add_device_randomness+0xb7/0xf0 [ 91.761176][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 91.767200][ T10] usb_new_device+0xd07/0x1a20 [ 91.771989][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 91.777050][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 91.782274][ T10] ? mark_held_locks+0x49/0x80 [ 91.787058][ T10] hub_event+0x2f85/0x5030 [ 91.791520][ T10] ? __pfx_hub_event+0x10/0x10 [ 91.796304][ T10] ? assoc_array_gc+0xe00/0x15b0 [ 91.801376][ T10] ? rcu_is_watching+0x12/0xc0 [ 91.806346][ T10] process_one_work+0x9cc/0x1b70 [ 91.811317][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 91.816621][ T10] ? __pfx_process_one_work+0x10/0x10 [ 91.822026][ T10] ? assign_work+0x1a0/0x250 [ 91.826641][ T10] worker_thread+0x6c8/0xf10 [ 91.831284][ T10] ? __kthread_parkme+0x19e/0x250 [ 91.836368][ T10] ? __pfx_worker_thread+0x10/0x10 [ 91.841507][ T10] kthread+0x3c5/0x780 [ 91.845598][ T10] ? __pfx_kthread+0x10/0x10 [ 91.850210][ T10] ? rcu_is_watching+0x12/0xc0 [ 91.855001][ T10] ? __pfx_kthread+0x10/0x10 [ 91.859614][ T10] ret_from_fork+0x5b3/0x6c0 [ 91.864244][ T10] ? __pfx_kthread+0x10/0x10 [ 91.868859][ T10] ret_from_fork_asm+0x1a/0x30 [ 91.873666][ T10] [ 91.876993][ T10] Kernel Offset: disabled [ 91.881335][ T10] Rebooting in 86400 seconds..