33875][ T2969] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.653937][ T29] audit: type=1400 audit(1754847617.547:90): avc: denied { read write } for pid=2969 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.678037][ T29] audit: type=1400 audit(1754847617.547:91): avc: denied { open } for pid=2969 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.703212][ T29] audit: type=1400 audit(1754847617.547:92): avc: denied { ioctl } for pid=2969 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.756902][ T2969] syz-executor (2969) used greatest stack depth: 23080 bytes left [ 54.349224][ T29] audit: type=1400 audit(1754847618.237:93): avc: denied { create } for pid=3441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. 2025/08/10 17:40:52 ignoring optional flag "sandboxArg"="0" 2025/08/10 17:40:52 ignoring optional flag "type"="gce" 2025/08/10 17:40:52 parsed 1 programs [ 90.605551][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 90.605569][ T29] audit: type=1400 audit(1754847654.497:99): avc: denied { unlink } for pid=3948 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.693842][ T3948] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.987533][ T29] audit: type=1400 audit(1754847655.877:100): avc: denied { read } for pid=3957 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.017132][ T29] audit: type=1400 audit(1754847655.877:101): avc: denied { open } for pid=3957 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.040527][ T29] audit: type=1400 audit(1754847655.917:102): avc: denied { unmount } for pid=3957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.722137][ T29] audit: type=1401 audit(1754847656.617:103): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/08/10 17:41:08 executed programs: 0 2025/08/10 17:41:18 executed programs: 2 [ 114.816173][ T29] audit: type=1400 audit(1754847678.707:104): avc: denied { read write } for pid=4913 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.854133][ T29] audit: type=1400 audit(1754847678.707:105): avc: denied { open } for pid=4913 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.877556][ T29] audit: type=1400 audit(1754847678.707:106): avc: denied { ioctl } for pid=4913 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.061626][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.211496][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 115.218465][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 115.226659][ T10] usb 1-1: config 0 has no interface number 0 [ 115.232796][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 115.243606][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 115.253453][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 115.264595][ T10] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 115.275141][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 115.287122][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 115.296245][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.304278][ T10] usb 1-1: Product: syz [ 115.308443][ T10] usb 1-1: Manufacturer: syz [ 115.313080][ T10] usb 1-1: SerialNumber: syz [ 115.321318][ T10] usb 1-1: config 0 descriptor?? [ 115.330168][ T10] smsusb:smsusb_probe: board id=15, interface number 6 [ 115.340504][ T10] smsusb:siano_media_device_register: media controller created [ 115.349618][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 115.355588][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 115.363192][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 115.371875][ T10] ------------[ cut here ]------------ [ 115.377323][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:4790 free_large_kmalloc+0x114/0x180 [ 115.385976][ T10] Modules linked in: [ 115.390002][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 115.402026][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.412127][ T10] Workqueue: usb_hub_wq hub_event [ 115.417155][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 115.423034][ T10] Code: 00 00 00 48 89 df e8 1b ec 0a 00 e8 36 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 a0 85 c4 88 e8 c0 18 f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 06 79 d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 18 [ 115.442773][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 115.448866][ T10] RAX: 0200000000000000 RBX: ffffea0004af7880 RCX: ffffffff813c723e [ 115.456870][ T10] RDX: 00000000000000ff RSI: ffff88812bde2000 RDI: ffffea0004af7880 [ 115.464892][ T10] RBP: ffff88812bde2000 R08: 0000000000000007 R09: 0000000000000000 [ 115.472887][ T10] R10: 0000000000000000 R11: ffffffff8125109a R12: ffff88811704b000 [ 115.480865][ T10] R13: ffff88811704c000 R14: dffffc0000000000 R15: ffff88811704b0f0 [ 115.488868][ T10] FS: 0000000000000000(0000) GS:ffff888268efc000(0000) knlGS:0000000000000000 [ 115.498139][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.504765][ T10] CR2: 00007ffec45a3928 CR3: 0000000117158000 CR4: 00000000003506f0 [ 115.512779][ T10] Call Trace: [ 115.516047][ T10] [ 115.518964][ T10] usb_free_urb.part.0+0xe5/0x100 [ 115.524043][ T10] usb_free_urb+0x1f/0x30 [ 115.528390][ T10] smsusb_term_device+0x108/0x1e0 [ 115.533485][ T10] smsusb_init_device+0xaa0/0xe00 [ 115.538548][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 115.544160][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 115.549738][ T10] ? usb_clear_halt+0xb5/0x160 [ 115.554568][ T10] smsusb_probe+0x5d3/0x1090 [ 115.559180][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 115.564415][ T10] ? mark_held_locks+0x49/0x80 [ 115.569187][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 115.575029][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 115.580771][ T10] usb_probe_interface+0x300/0xa40 [ 115.585933][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 115.591602][ T10] really_probe+0x23e/0xa90 [ 115.596104][ T10] __driver_probe_device+0x1de/0x440 [ 115.601434][ T10] driver_probe_device+0x4c/0x1b0 [ 115.606473][ T10] __device_attach_driver+0x1df/0x310 [ 115.611876][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 115.617780][ T10] bus_for_each_drv+0x156/0x1e0 [ 115.622665][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 115.628137][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.633366][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 115.639198][ T10] __device_attach+0x1e4/0x4b0 [ 115.644003][ T10] ? __pfx___device_attach+0x10/0x10 [ 115.649304][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 115.654542][ T10] bus_probe_device+0x17f/0x1c0 [ 115.659413][ T10] device_add+0x1148/0x1aa0 [ 115.663977][ T10] ? __pfx_device_add+0x10/0x10 [ 115.668955][ T10] ? mark_held_locks+0x49/0x80 [ 115.673778][ T10] usb_set_configuration+0x1187/0x1e20 [ 115.679280][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 115.685386][ T10] usb_generic_driver_probe+0xb1/0x110 [ 115.690865][ T10] usb_probe_device+0xef/0x3e0 [ 115.695678][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 115.701066][ T10] really_probe+0x23e/0xa90 [ 115.705634][ T10] __driver_probe_device+0x1de/0x440 [ 115.710940][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 115.716443][ T10] driver_probe_device+0x4c/0x1b0 [ 115.721623][ T10] __device_attach_driver+0x1df/0x310 [ 115.726993][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 115.732928][ T10] bus_for_each_drv+0x156/0x1e0 [ 115.737814][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 115.743222][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.748435][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 115.754305][ T10] __device_attach+0x1e4/0x4b0 [ 115.759090][ T10] ? __pfx___device_attach+0x10/0x10 [ 115.764421][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 115.769633][ T10] bus_probe_device+0x17f/0x1c0 [ 115.774532][ T10] device_add+0x1148/0x1aa0 [ 115.779056][ T10] ? __pfx_device_add+0x10/0x10 [ 115.783957][ T10] ? add_device_randomness+0xb7/0xf0 [ 115.789259][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 115.795195][ T10] usb_new_device+0xd07/0x1a60 [ 115.799980][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 115.805033][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 115.810273][ T10] ? mark_held_locks+0x49/0x80 [ 115.815136][ T10] hub_event+0x2fce/0x5060 [ 115.819590][ T10] ? __pfx_hub_event+0x10/0x10 [ 115.824392][ T10] ? assoc_array_insert+0x1460/0x3970 [ 115.829785][ T10] ? rcu_is_watching+0x12/0xc0 [ 115.834598][ T10] process_one_work+0x9cf/0x1b70 [ 115.839555][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 115.844872][ T10] ? __pfx_process_one_work+0x10/0x10 [ 115.850384][ T10] ? assign_work+0x1a0/0x250 [ 115.855060][ T10] worker_thread+0x6c8/0xf10 [ 115.859689][ T10] ? __kthread_parkme+0x19e/0x250 [ 115.864755][ T10] ? __pfx_worker_thread+0x10/0x10 [ 115.871136][ T10] kthread+0x3c5/0x780 [ 115.875731][ T10] ? __pfx_kthread+0x10/0x10 [ 115.880341][ T10] ? rcu_is_watching+0x12/0xc0 [ 115.885192][ T10] ? __pfx_kthread+0x10/0x10 [ 115.889812][ T10] ret_from_fork+0x5b6/0x6c0 [ 115.894453][ T10] ? __pfx_kthread+0x10/0x10 [ 115.899079][ T10] ret_from_fork_asm+0x1a/0x30 [ 115.903913][ T10] [ 115.907151][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.914543][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 115.926509][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.936556][ T10] Workqueue: usb_hub_wq hub_event [ 115.941673][ T10] Call Trace: [ 115.944947][ T10] [ 115.947860][ T10] dump_stack_lvl+0x3d/0x1f0 [ 115.952458][ T10] vpanic+0x6e8/0x7a0 [ 115.956432][ T10] ? __pfx_vpanic+0x10/0x10 [ 115.960948][ T10] ? free_large_kmalloc+0x114/0x180 [ 115.966150][ T10] panic+0xca/0xd0 [ 115.969865][ T10] ? __pfx_panic+0x10/0x10 [ 115.974375][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 115.979492][ T10] check_panic_on_warn+0xab/0xb0 [ 115.984421][ T10] __warn+0xf6/0x3c0 [ 115.988302][ T10] ? free_large_kmalloc+0x114/0x180 [ 115.993490][ T10] report_bug+0x3c3/0x580 [ 115.997810][ T10] ? free_large_kmalloc+0x114/0x180 [ 116.003107][ T10] handle_bug+0x184/0x210 [ 116.007431][ T10] exc_invalid_op+0x17/0x50 [ 116.012042][ T10] asm_exc_invalid_op+0x1a/0x20 [ 116.016884][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 116.022695][ T10] Code: 00 00 00 48 89 df e8 1b ec 0a 00 e8 36 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 a0 85 c4 88 e8 c0 18 f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 06 79 d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 18 [ 116.042306][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 116.048380][ T10] RAX: 0200000000000000 RBX: ffffea0004af7880 RCX: ffffffff813c723e [ 116.056344][ T10] RDX: 00000000000000ff RSI: ffff88812bde2000 RDI: ffffea0004af7880 [ 116.064308][ T10] RBP: ffff88812bde2000 R08: 0000000000000007 R09: 0000000000000000 [ 116.072272][ T10] R10: 0000000000000000 R11: ffffffff8125109a R12: ffff88811704b000 [ 116.080237][ T10] R13: ffff88811704c000 R14: dffffc0000000000 R15: ffff88811704b0f0 [ 116.088210][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 116.093155][ T10] ? __phys_addr+0xde/0x180 [ 116.097680][ T10] usb_free_urb.part.0+0xe5/0x100 [ 116.102702][ T10] usb_free_urb+0x1f/0x30 [ 116.107025][ T10] smsusb_term_device+0x108/0x1e0 [ 116.112050][ T10] smsusb_init_device+0xaa0/0xe00 [ 116.117175][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 116.122724][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 116.128270][ T10] ? usb_clear_halt+0xb5/0x160 [ 116.133064][ T10] smsusb_probe+0x5d3/0x1090 [ 116.137714][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 116.142863][ T10] ? mark_held_locks+0x49/0x80 [ 116.147680][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.153495][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 116.159146][ T10] usb_probe_interface+0x300/0xa40 [ 116.164270][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 116.169914][ T10] really_probe+0x23e/0xa90 [ 116.174425][ T10] __driver_probe_device+0x1de/0x440 [ 116.179715][ T10] driver_probe_device+0x4c/0x1b0 [ 116.184759][ T10] __device_attach_driver+0x1df/0x310 [ 116.190137][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 116.196082][ T10] bus_for_each_drv+0x156/0x1e0 [ 116.200943][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.206399][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.211599][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.217409][ T10] __device_attach+0x1e4/0x4b0 [ 116.222182][ T10] ? __pfx___device_attach+0x10/0x10 [ 116.227468][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 116.232680][ T10] bus_probe_device+0x17f/0x1c0 [ 116.237534][ T10] device_add+0x1148/0x1aa0 [ 116.242059][ T10] ? __pfx_device_add+0x10/0x10 [ 116.246921][ T10] ? mark_held_locks+0x49/0x80 [ 116.251695][ T10] usb_set_configuration+0x1187/0x1e20 [ 116.257173][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 116.263243][ T10] usb_generic_driver_probe+0xb1/0x110 [ 116.268699][ T10] usb_probe_device+0xef/0x3e0 [ 116.273462][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 116.278846][ T10] really_probe+0x23e/0xa90 [ 116.283353][ T10] __driver_probe_device+0x1de/0x440 [ 116.288641][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 116.294110][ T10] driver_probe_device+0x4c/0x1b0 [ 116.299140][ T10] __device_attach_driver+0x1df/0x310 [ 116.304514][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 116.310403][ T10] bus_for_each_drv+0x156/0x1e0 [ 116.315251][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 116.320624][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.325918][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.331731][ T10] __device_attach+0x1e4/0x4b0 [ 116.336505][ T10] ? __pfx___device_attach+0x10/0x10 [ 116.341792][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 116.347013][ T10] bus_probe_device+0x17f/0x1c0 [ 116.351866][ T10] device_add+0x1148/0x1aa0 [ 116.356381][ T10] ? __pfx_device_add+0x10/0x10 [ 116.361244][ T10] ? add_device_randomness+0xb7/0xf0 [ 116.366532][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 116.372448][ T10] usb_new_device+0xd07/0x1a60 [ 116.377223][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.382335][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 116.387543][ T10] ? mark_held_locks+0x49/0x80 [ 116.392304][ T10] hub_event+0x2fce/0x5060 [ 116.396749][ T10] ? __pfx_hub_event+0x10/0x10 [ 116.401515][ T10] ? assoc_array_insert+0x1460/0x3970 [ 116.406899][ T10] ? rcu_is_watching+0x12/0xc0 [ 116.411694][ T10] process_one_work+0x9cf/0x1b70 [ 116.416847][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 116.422134][ T10] ? __pfx_process_one_work+0x10/0x10 [ 116.427515][ T10] ? assign_work+0x1a0/0x250 [ 116.432107][ T10] worker_thread+0x6c8/0xf10 [ 116.436706][ T10] ? __kthread_parkme+0x19e/0x250 [ 116.441735][ T10] ? __pfx_worker_thread+0x10/0x10 [ 116.446857][ T10] kthread+0x3c5/0x780 [ 116.450930][ T10] ? __pfx_kthread+0x10/0x10 [ 116.455522][ T10] ? rcu_is_watching+0x12/0xc0 [ 116.460289][ T10] ? __pfx_kthread+0x10/0x10 [ 116.464881][ T10] ret_from_fork+0x5b6/0x6c0 [ 116.469465][ T10] ? __pfx_kthread+0x10/0x10 [ 116.474055][ T10] ret_from_fork_asm+0x1a/0x30 [ 116.478837][ T10] [ 116.482096][ T10] Kernel Offset: disabled [ 116.486420][ T10] Rebooting in 86400 seconds..