Warning: Permanently added '[localhost]:58741' (ED25519) to the list of known hosts. [ 81.441352][ T9] cfg80211: failed to load regulatory.db 2025/11/30 04:34:09 parsed 1 programs [ 85.052921][ T40] audit: type=1400 audit(1764477252.212:117): avc: denied { unlink } for pid=6169 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 85.994107][ T6169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.907242][ T6175] chnl_net:caif_netlink_parms(): no params data found [ 87.986840][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.990246][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.993309][ T6175] bridge_slave_0: entered allmulticast mode [ 87.997315][ T6175] bridge_slave_0: entered promiscuous mode [ 88.001514][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.003920][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.006187][ T6175] bridge_slave_1: entered allmulticast mode [ 88.008784][ T6175] bridge_slave_1: entered promiscuous mode [ 88.041413][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.046420][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.078874][ T6175] team0: Port device team_slave_0 added [ 88.082224][ T6175] team0: Port device team_slave_1 added [ 88.113580][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.115797][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.124144][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.128370][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.130735][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.138712][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.178118][ T6175] hsr_slave_0: entered promiscuous mode [ 88.180338][ T6175] hsr_slave_1: entered promiscuous mode [ 88.707611][ T6175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.714302][ T6175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.722161][ T6175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.726829][ T6175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.744379][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.746773][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.749581][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.752334][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.795995][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.811328][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.815250][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.828295][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.839165][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.842309][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.851599][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.854639][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.005032][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.042031][ T6175] veth0_vlan: entered promiscuous mode [ 89.049893][ T6175] veth1_vlan: entered promiscuous mode [ 89.067958][ T6175] veth0_macvtap: entered promiscuous mode [ 89.075703][ T6175] veth1_macvtap: entered promiscuous mode [ 89.084590][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.094245][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.102174][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.105469][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.109687][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.113701][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198695][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.266686][ T40] audit: type=1401 audit(1764477256.422:118): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 89.297067][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.410658][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.476556][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.498736][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.502821][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.522992][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.525996][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.946411][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.951307][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.956542][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.959620][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.962847][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/30 04:34:18 executed programs: 0 [ 91.770729][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.774185][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.777009][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.780022][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.783490][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.916952][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 92.011831][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.015337][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.018659][ T6329] bridge_slave_0: entered allmulticast mode [ 92.023456][ T6329] bridge_slave_0: entered promiscuous mode [ 92.028288][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.031499][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.034545][ T6329] bridge_slave_1: entered allmulticast mode [ 92.038429][ T6329] bridge_slave_1: entered promiscuous mode [ 92.094967][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.102458][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.161236][ T6329] team0: Port device team_slave_0 added [ 92.166458][ T6329] team0: Port device team_slave_1 added [ 92.222891][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.225828][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.236694][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.242769][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.245648][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.256338][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.327151][ T6329] hsr_slave_0: entered promiscuous mode [ 92.332297][ T6329] hsr_slave_1: entered promiscuous mode [ 92.335640][ T6329] debugfs: 'hsr0' already exists in 'hsr' [ 92.338114][ T6329] Cannot create hsr debugfs directory [ 92.766455][ T46] bridge_slave_1: left allmulticast mode [ 92.768951][ T46] bridge_slave_1: left promiscuous mode [ 92.772303][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.778154][ T46] bridge_slave_0: left allmulticast mode [ 92.780814][ T46] bridge_slave_0: left promiscuous mode [ 92.782853][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.018237][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.024296][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.029392][ T46] bond0 (unregistering): Released all slaves [ 93.206841][ T46] hsr_slave_0: left promiscuous mode [ 93.209780][ T46] hsr_slave_1: left promiscuous mode [ 93.212915][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.216053][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.220279][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.223631][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.243522][ T46] veth1_macvtap: left promiscuous mode [ 93.245337][ T46] veth0_macvtap: left promiscuous mode [ 93.247154][ T46] veth1_vlan: left promiscuous mode [ 93.248862][ T46] veth0_vlan: left promiscuous mode [ 93.756822][ T46] team0 (unregistering): Port device team_slave_1 removed [ 93.795556][ T46] team0 (unregistering): Port device team_slave_0 removed [ 93.840743][ T64] Bluetooth: hci0: command tx timeout [ 94.309531][ T6329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.314277][ T6329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.318681][ T6329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.325650][ T6329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.383905][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.393434][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.398960][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.402013][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.411623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.414611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.551876][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.575957][ T6329] veth0_vlan: entered promiscuous mode [ 94.582307][ T6329] veth1_vlan: entered promiscuous mode [ 94.599332][ T6329] veth0_macvtap: entered promiscuous mode [ 94.608988][ T6329] veth1_macvtap: entered promiscuous mode [ 94.983563][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.992465][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.000982][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005244][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.008196][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.018476][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060259][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.063857][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.088632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.093707][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.143256][ T40] audit: type=1400 audit(1764477262.302:119): avc: denied { map_create } for pid=6359 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.152888][ T40] audit: type=1400 audit(1764477262.302:120): avc: denied { perfmon } for pid=6359 comm="syz.0.16" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.160202][ T40] audit: type=1400 audit(1764477262.302:121): avc: denied { map_read map_write } for pid=6359 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.168435][ T40] audit: type=1400 audit(1764477262.302:122): avc: denied { read write } for pid=6359 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.177817][ T40] audit: type=1400 audit(1764477262.302:123): avc: denied { open } for pid=6359 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.186095][ T40] audit: type=1400 audit(1764477262.302:124): avc: denied { ioctl } for pid=6359 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.390715][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.570672][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 95.576914][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.581003][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.585106][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 95.593558][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 95.598081][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 95.610270][ T24] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 95.614334][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.616875][ T24] usb 5-1: Product: syz [ 95.618235][ T24] usb 5-1: Manufacturer: syz [ 95.619714][ T24] usb 5-1: SerialNumber: syz [ 95.625047][ T24] usb 5-1: config 0 descriptor?? [ 95.628119][ T6360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.636288][ T24] smsusb:smsusb_probe: board id=2, interface number 0 [ 95.641188][ T24] smsusb:siano_media_device_register: media controller created [ 95.644646][ T24] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 95.646550][ T24] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 95.648937][ T24] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 95.652276][ T24] ------------[ cut here ]------------ [ 95.654024][ T24] WARNING: CPU: 2 PID: 24 at mm/slub.c:6760 free_large_kmalloc+0x114/0x180 [ 95.656720][ T24] Modules linked in: [ 95.658036][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 95.661061][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.664310][ T24] Workqueue: usb_hub_wq hub_event [ 95.665949][ T24] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 95.667993][ T24] Code: 00 00 00 48 89 df e8 db 43 14 00 e8 16 41 ab ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 60 86 b4 8d e8 a0 5e ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 03 86 a1 8d 48 89 df 5b 5d 41 5c 41 5d e9 84 5e [ 95.674506][ T24] RSP: 0018:ffffc9000062eda0 EFLAGS: 00010202 [ 95.676602][ T24] RAX: 00fff00000000000 RBX: ffffea0001165880 RCX: ffffffff816dd2ee [ 95.679627][ T24] RDX: 00000000000000ff RSI: ffff888045962000 RDI: ffffea0001165880 [ 95.682860][ T24] RBP: ffff888045962000 R08: 0000000000000007 R09: 0000000000000000 [ 95.686728][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ba4d000 [ 95.689514][ T24] R13: ffff88802ba4f000 R14: dffffc0000000000 R15: ffff88802ba4d0f0 [ 95.692174][ T24] FS: 0000000000000000(0000) GS:ffff8880d6c05000(0000) knlGS:0000000000000000 [ 95.695000][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.697179][ T24] CR2: 00007fffb3cb6290 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 95.699684][ T24] Call Trace: [ 95.700934][ T24] [ 95.701913][ T24] usb_free_urb.part.0+0xe5/0x100 [ 95.703516][ T24] usb_free_urb+0x1f/0x30 [ 95.704905][ T24] smsusb_term_device+0x108/0x1e0 [ 95.706515][ T24] smsusb_init_device+0xaa0/0xe00 [ 95.708109][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 95.709901][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 95.711868][ T24] ? usb_clear_halt+0x61/0x160 [ 95.713434][ T24] smsusb_probe+0x5d3/0x1090 [ 95.714987][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 95.716642][ T24] ? mark_held_locks+0x49/0x80 [ 95.718195][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.720013][ T24] ? __pm_runtime_set_status+0x13c/0xa80 [ 95.722049][ T24] usb_probe_interface+0x303/0xa40 [ 95.723790][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 95.725619][ T24] really_probe+0x241/0xa90 [ 95.727091][ T24] __driver_probe_device+0x1de/0x440 [ 95.728749][ T24] driver_probe_device+0x4c/0x1b0 [ 95.730417][ T24] __device_attach_driver+0x1df/0x310 [ 95.732208][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 95.734112][ T24] bus_for_each_drv+0x159/0x1e0 [ 95.735659][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.737351][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.738985][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.741055][ T24] __device_attach+0x1e4/0x4b0 [ 95.742775][ T24] ? __pfx___device_attach+0x10/0x10 [ 95.744513][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 95.746224][ T24] bus_probe_device+0x17f/0x1c0 [ 95.747900][ T24] device_add+0x1148/0x1aa0 [ 95.749450][ T24] ? __pfx_device_add+0x10/0x10 [ 95.751254][ T24] ? preempt_schedule_thunk+0x16/0x30 [ 95.752979][ T24] usb_set_configuration+0x1187/0x1e20 [ 95.754738][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 95.756690][ T24] usb_generic_driver_probe+0xb1/0x110 [ 95.758430][ T24] usb_probe_device+0xef/0x3e0 [ 95.759959][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 95.761845][ T24] really_probe+0x241/0xa90 [ 95.763295][ T24] __driver_probe_device+0x1de/0x440 [ 95.764959][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 95.766668][ T24] driver_probe_device+0x4c/0x1b0 [ 95.768269][ T24] __device_attach_driver+0x1df/0x310 [ 95.769937][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 95.771962][ T24] bus_for_each_drv+0x159/0x1e0 [ 95.773510][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.775280][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.777096][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.779024][ T24] __device_attach+0x1e4/0x4b0 [ 95.781251][ T24] ? __pfx___device_attach+0x10/0x10 [ 95.783040][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 95.785002][ T24] bus_probe_device+0x17f/0x1c0 [ 95.786901][ T24] device_add+0x1148/0x1aa0 [ 95.788458][ T24] ? __pfx_device_add+0x10/0x10 [ 95.790034][ T24] ? add_device_randomness+0xb7/0xf0 [ 95.791864][ T24] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 95.793805][ T24] usb_new_device+0xd07/0x1a60 [ 95.795366][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 95.796990][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 95.798685][ T24] ? mark_held_locks+0x49/0x80 [ 95.800403][ T24] hub_event+0x2f34/0x4fe0 [ 95.802113][ T24] ? __pfx_hub_event+0x10/0x10 [ 95.803812][ T24] ? interval_tree_remove+0x800/0xee0 [ 95.805519][ T24] ? rcu_is_watching+0x12/0xc0 [ 95.807079][ T24] process_one_work+0x9cf/0x1b70 [ 95.808705][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 95.810475][ T24] ? __pfx_process_one_work+0x10/0x10 [ 95.812255][ T24] ? assign_work+0x1a0/0x250 [ 95.813756][ T24] worker_thread+0x6c8/0xf10 [ 95.815248][ T24] ? __pfx_worker_thread+0x10/0x10 [ 95.816905][ T24] kthread+0x3c5/0x780 [ 95.818347][ T24] ? __pfx_kthread+0x10/0x10 [ 95.820157][ T24] ? rcu_is_watching+0x12/0xc0 [ 95.821827][ T24] ? __pfx_kthread+0x10/0x10 [ 95.823352][ T24] ret_from_fork+0x675/0x7d0 [ 95.825054][ T24] ? __pfx_kthread+0x10/0x10 [ 95.826528][ T24] ret_from_fork_asm+0x1a/0x30 [ 95.828356][ T24] [ 95.829705][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.832619][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 95.835537][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.838912][ T24] Workqueue: usb_hub_wq hub_event [ 95.840565][ T24] Call Trace: [ 95.841666][ T24] [ 95.842644][ T24] dump_stack_lvl+0x3d/0x1f0 [ 95.844155][ T24] vpanic+0x640/0x6f0 [ 95.845434][ T24] ? free_large_kmalloc+0x114/0x180 [ 95.847088][ T24] panic+0xca/0xd0 [ 95.848420][ T24] ? __pfx_panic+0x10/0x10 [ 95.850314][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 95.852484][ T24] check_panic_on_warn+0xab/0xb0 [ 95.854561][ T24] __warn+0xf6/0x3c0 [ 95.856207][ T24] ? free_large_kmalloc+0x114/0x180 [ 95.858379][ T24] report_bug+0x3c3/0x580 [ 95.860213][ T24] ? free_large_kmalloc+0x114/0x180 [ 95.862407][ T24] handle_bug+0x184/0x210 [ 95.864221][ T24] exc_invalid_op+0x17/0x50 [ 95.866135][ T24] asm_exc_invalid_op+0x1a/0x20 [ 95.868171][ T24] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 95.870626][ T24] Code: 00 00 00 48 89 df e8 db 43 14 00 e8 16 41 ab ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 60 86 b4 8d e8 a0 5e ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 03 86 a1 8d 48 89 df 5b 5d 41 5c 41 5d e9 84 5e [ 95.877878][ T24] RSP: 0018:ffffc9000062eda0 EFLAGS: 00010202 [ 95.879770][ T24] RAX: 00fff00000000000 RBX: ffffea0001165880 RCX: ffffffff816dd2ee [ 95.882281][ T24] RDX: 00000000000000ff RSI: ffff888045962000 RDI: ffffea0001165880 [ 95.884908][ T24] RBP: ffff888045962000 R08: 0000000000000007 R09: 0000000000000000 [ 95.887431][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802ba4d000 [ 95.889927][ T24] R13: ffff88802ba4f000 R14: dffffc0000000000 R15: ffff88802ba4d0f0 [ 95.892473][ T24] ? __phys_addr+0xde/0x180 [ 95.894042][ T24] usb_free_urb.part.0+0xe5/0x100 [ 95.896068][ T24] usb_free_urb+0x1f/0x30 [ 95.897518][ T24] smsusb_term_device+0x108/0x1e0 [ 95.899252][ T24] smsusb_init_device+0xaa0/0xe00 [ 95.900940][ T24] ? __pfx_smsusb_init_device+0x10/0x10 [ 95.902754][ T24] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 95.904546][ T24] ? usb_clear_halt+0x61/0x160 [ 95.906113][ T24] smsusb_probe+0x5d3/0x1090 [ 95.907587][ T24] ? __pfx_smsusb_probe+0x10/0x10 [ 95.909182][ T24] ? mark_held_locks+0x49/0x80 [ 95.910728][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 95.912961][ T24] ? __pm_runtime_set_status+0x13c/0xa80 [ 95.915393][ T24] usb_probe_interface+0x303/0xa40 [ 95.917593][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 95.919964][ T24] really_probe+0x241/0xa90 [ 95.921946][ T24] __driver_probe_device+0x1de/0x440 [ 95.924178][ T24] driver_probe_device+0x4c/0x1b0 [ 95.926331][ T24] __device_attach_driver+0x1df/0x310 [ 95.928581][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 95.931110][ T24] bus_for_each_drv+0x159/0x1e0 [ 95.933175][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.935421][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.937592][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.940046][ T24] __device_attach+0x1e4/0x4b0 [ 95.942112][ T24] ? __pfx___device_attach+0x10/0x10 [ 95.944344][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 95.946372][ T24] bus_probe_device+0x17f/0x1c0 [ 95.947941][ T24] device_add+0x1148/0x1aa0 [ 95.949392][ T24] ? __pfx_device_add+0x10/0x10 [ 95.950996][ T24] ? preempt_schedule_thunk+0x16/0x30 [ 95.952705][ T24] usb_set_configuration+0x1187/0x1e20 [ 95.954488][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 95.956403][ T24] usb_generic_driver_probe+0xb1/0x110 [ 95.958161][ T24] usb_probe_device+0xef/0x3e0 [ 95.959680][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 95.961384][ T24] really_probe+0x241/0xa90 [ 95.962870][ T24] __driver_probe_device+0x1de/0x440 [ 95.964903][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 95.967254][ T24] driver_probe_device+0x4c/0x1b0 [ 95.969362][ T24] __device_attach_driver+0x1df/0x310 [ 95.971600][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 95.974099][ T24] bus_for_each_drv+0x159/0x1e0 [ 95.975884][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 95.977580][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.979227][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.981089][ T24] __device_attach+0x1e4/0x4b0 [ 95.982681][ T24] ? __pfx___device_attach+0x10/0x10 [ 95.984899][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 95.987062][ T24] bus_probe_device+0x17f/0x1c0 [ 95.989139][ T24] device_add+0x1148/0x1aa0 [ 95.991055][ T24] ? __pfx_device_add+0x10/0x10 [ 95.993122][ T24] ? add_device_randomness+0xb7/0xf0 [ 95.995364][ T24] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 95.997864][ T24] usb_new_device+0xd07/0x1a60 [ 95.999879][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 96.002036][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 96.004191][ T24] ? mark_held_locks+0x49/0x80 [ 96.006260][ T24] hub_event+0x2f34/0x4fe0 [ 96.008130][ T24] ? __pfx_hub_event+0x10/0x10 [ 96.010189][ T24] ? interval_tree_remove+0x800/0xee0 [ 96.012455][ T24] ? rcu_is_watching+0x12/0xc0 [ 96.014176][ T24] process_one_work+0x9cf/0x1b70 [ 96.015750][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 96.017414][ T24] ? __pfx_process_one_work+0x10/0x10 [ 96.019124][ T24] ? assign_work+0x1a0/0x250 [ 96.020619][ T24] worker_thread+0x6c8/0xf10 [ 96.022115][ T24] ? __pfx_worker_thread+0x10/0x10 [ 96.023729][ T24] kthread+0x3c5/0x780 [ 96.025028][ T24] ? __pfx_kthread+0x10/0x10 [ 96.026540][ T24] ? rcu_is_watching+0x12/0xc0 [ 96.028057][ T24] ? __pfx_kthread+0x10/0x10 [ 96.029522][ T24] ret_from_fork+0x675/0x7d0 [ 96.031036][ T24] ? __pfx_kthread+0x10/0x10 [ 96.032498][ T24] ret_from_fork_asm+0x1a/0x30 [ 96.034038][ T24] [ 96.035601][ T24] Kernel Offset: disabled [ 96.036966][ T24] Rebooting in 86400 seconds..