issive=1 [ 36.778822][ T29] audit: type=1400 audit(1756893303.964:70): avc: denied { mounton } for pid=2964 comm="syz-executor.0" path="/syzcgroup/unified" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.262916][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 47.262946][ T29] audit: type=1400 audit(1756893314.594:77): avc: denied { read write } for pid=2964 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.300007][ T29] audit: type=1400 audit(1756893314.594:78): avc: denied { open } for pid=2964 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.325167][ T29] audit: type=1400 audit(1756893314.594:79): avc: denied { ioctl } for pid=2964 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.311521][ T32] sched: DL replenish lagged too much Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. 2025/09/03 09:55:34 parsed 1 programs 2025/09/03 09:55:34 executed programs: 0 [ 67.094326][ T29] audit: type=1400 audit(1756893334.424:80): avc: denied { mounton } for pid=3437 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.095859][ T3437] cgroup: Unknown subsys name 'cpuset' [ 78.079459][ T29] audit: type=1400 audit(1756893345.404:81): avc: denied { write } for pid=3881 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.119489][ T29] audit: type=1400 audit(1756893345.404:82): avc: denied { ioctl } for pid=3881 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.311496][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.461320][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 78.469186][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 78.480294][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 78.491863][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59136, setting to 1024 [ 78.503724][ T10] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=1f.31 [ 78.512886][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.524300][ T10] usb 1-1: config 0 descriptor?? [ 78.531037][ T3882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.542014][ T10] smsusb:smsusb_probe: board id=2, interface number 0 [ 78.551951][ T10] smsusb:siano_media_device_register: media controller created [ 78.562540][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 78.568455][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 78.576517][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 78.586339][ T10] ------------[ cut here ]------------ [ 78.592160][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:4790 free_large_kmalloc+0x114/0x180 [ 78.602397][ T10] Modules linked in: [ 78.606656][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.616713][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.626829][ T10] Workqueue: usb_hub_wq hub_event [ 78.632486][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 78.638421][ T10] Code: 00 00 00 48 89 df e8 8b ed 0a 00 e8 26 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 98 96 c4 88 e8 c0 1a f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 6e 8a d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 1a [ 78.659052][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 78.665341][ T10] RAX: 0200000000000000 RBX: ffffea00049a9880 RCX: ffffffff813c723e [ 78.673373][ T10] RDX: 00000000000000ff RSI: ffff888126a62000 RDI: ffffea00049a9880 [ 78.681576][ T10] RBP: ffff888126a62000 R08: 0000000000000007 R09: 0000000000000000 [ 78.689591][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811c602000 [ 78.697884][ T10] R13: ffff88811c600000 R14: dffffc0000000000 R15: ffff88811c6020f0 [ 78.706097][ T10] FS: 0000000000000000(0000) GS:ffff888268ef9000(0000) knlGS:0000000000000000 [ 78.715377][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.722036][ T10] CR2: 0000559eaef45000 CR3: 000000011f96c000 CR4: 00000000003506f0 [ 78.730104][ T10] Call Trace: [ 78.733590][ T10] [ 78.736626][ T10] usb_free_urb.part.0+0xe5/0x100 [ 78.741757][ T10] usb_free_urb+0x1f/0x30 [ 78.746128][ T10] smsusb_term_device+0x108/0x1e0 [ 78.751335][ T10] smsusb_init_device+0xaa0/0xe00 [ 78.756414][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 78.762376][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 78.768330][ T10] ? usb_clear_halt+0x61/0x160 [ 78.773208][ T10] smsusb_probe+0x5d3/0x1090 [ 78.777846][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 78.783100][ T10] ? mark_held_locks+0x49/0x80 [ 78.787913][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.793800][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 78.799462][ T10] usb_probe_interface+0x300/0xa40 [ 78.804743][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 78.810511][ T10] really_probe+0x241/0xa90 [ 78.815253][ T10] __driver_probe_device+0x1de/0x440 [ 78.820658][ T10] driver_probe_device+0x4c/0x1b0 [ 78.826038][ T10] __device_attach_driver+0x1df/0x310 [ 78.831557][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 78.837473][ T10] bus_for_each_drv+0x159/0x1e0 [ 78.842553][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.848049][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.853481][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.859447][ T10] __device_attach+0x1e4/0x4b0 [ 78.864953][ T10] ? __pfx___device_attach+0x10/0x10 [ 78.870937][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 78.877620][ T10] bus_probe_device+0x17f/0x1c0 [ 78.882717][ T10] device_add+0x1148/0x1aa0 [ 78.887337][ T10] ? __pfx_device_add+0x10/0x10 [ 78.892681][ T10] ? mark_held_locks+0x49/0x80 [ 78.898433][ T10] usb_set_configuration+0x1187/0x1e20 [ 78.904620][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 78.911725][ T10] usb_generic_driver_probe+0xb1/0x110 [ 78.917255][ T10] usb_probe_device+0xef/0x3e0 [ 78.922515][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 78.928053][ T10] really_probe+0x241/0xa90 [ 78.932841][ T10] __driver_probe_device+0x1de/0x440 [ 78.938257][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 78.943792][ T10] driver_probe_device+0x4c/0x1b0 [ 78.949335][ T10] __device_attach_driver+0x1df/0x310 [ 78.955423][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 78.961595][ T10] bus_for_each_drv+0x159/0x1e0 [ 78.966607][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.972312][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.977647][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.983814][ T10] __device_attach+0x1e4/0x4b0 [ 78.988755][ T10] ? __pfx___device_attach+0x10/0x10 [ 78.995471][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 79.001527][ T10] bus_probe_device+0x17f/0x1c0 [ 79.006532][ T10] device_add+0x1148/0x1aa0 [ 79.012634][ T10] ? __pfx_device_add+0x10/0x10 [ 79.017638][ T10] ? usb_detect_static_quirks+0x335/0x3e0 [ 79.025909][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 79.032538][ T10] usb_new_device+0xd07/0x1a60 [ 79.037910][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.043511][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 79.048806][ T10] ? mark_held_locks+0x49/0x80 [ 79.053755][ T10] hub_event+0x2fce/0x5060 [ 79.058510][ T10] ? __pfx_hub_event+0x10/0x10 [ 79.063376][ T10] ? assoc_array_apply_edit+0x420/0x6c0 [ 79.069327][ T10] ? rcu_is_watching+0x12/0xc0 [ 79.074728][ T10] process_one_work+0x9cc/0x1b70 [ 79.080436][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 79.085840][ T10] ? __pfx_process_one_work+0x10/0x10 [ 79.091373][ T10] ? assign_work+0x1a0/0x250 [ 79.096219][ T10] worker_thread+0x6c8/0xf10 [ 79.100927][ T10] ? __kthread_parkme+0x19e/0x250 [ 79.106043][ T10] ? __pfx_worker_thread+0x10/0x10 [ 79.111406][ T10] kthread+0x3c5/0x780 [ 79.115506][ T10] ? __pfx_kthread+0x10/0x10 [ 79.120146][ T10] ? rcu_is_watching+0x12/0xc0 [ 79.124982][ T10] ? __pfx_kthread+0x10/0x10 [ 79.129681][ T10] ret_from_fork+0x5b6/0x6c0 [ 79.134348][ T10] ? __pfx_kthread+0x10/0x10 [ 79.139038][ T10] ret_from_fork_asm+0x1a/0x30 [ 79.143984][ T10] [ 79.147299][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.154585][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.164429][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.174839][ T10] Workqueue: usb_hub_wq hub_event [ 79.180618][ T10] Call Trace: [ 79.183916][ T10] [ 79.187086][ T10] dump_stack_lvl+0x3d/0x1f0 [ 79.191803][ T10] vpanic+0x6e8/0x7a0 [ 79.195899][ T10] ? __pfx_vpanic+0x10/0x10 [ 79.200691][ T10] ? free_large_kmalloc+0x114/0x180 [ 79.208080][ T10] panic+0xca/0xd0 [ 79.211999][ T10] ? __pfx_panic+0x10/0x10 [ 79.216553][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 79.221796][ T10] check_panic_on_warn+0xab/0xb0 [ 79.226937][ T10] __warn+0xf6/0x3c0 [ 79.231374][ T10] ? free_large_kmalloc+0x114/0x180 [ 79.237028][ T10] report_bug+0x3c3/0x580 [ 79.241629][ T10] ? free_large_kmalloc+0x114/0x180 [ 79.247623][ T10] handle_bug+0x184/0x210 [ 79.252179][ T10] exc_invalid_op+0x17/0x50 [ 79.256986][ T10] asm_exc_invalid_op+0x1a/0x20 [ 79.262200][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 79.268105][ T10] Code: 00 00 00 48 89 df e8 8b ed 0a 00 e8 26 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 98 96 c4 88 e8 c0 1a f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 6e 8a d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 1a [ 79.288156][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202 [ 79.294237][ T10] RAX: 0200000000000000 RBX: ffffea00049a9880 RCX: ffffffff813c723e [ 79.302295][ T10] RDX: 00000000000000ff RSI: ffff888126a62000 RDI: ffffea00049a9880 [ 79.310530][ T10] RBP: ffff888126a62000 R08: 0000000000000007 R09: 0000000000000000 [ 79.318517][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811c602000 [ 79.326487][ T10] R13: ffff88811c600000 R14: dffffc0000000000 R15: ffff88811c6020f0 [ 79.334649][ T10] ? __phys_addr+0xde/0x180 [ 79.339181][ T10] usb_free_urb.part.0+0xe5/0x100 [ 79.344217][ T10] usb_free_urb+0x1f/0x30 [ 79.348546][ T10] smsusb_term_device+0x108/0x1e0 [ 79.353576][ T10] smsusb_init_device+0xaa0/0xe00 [ 79.358613][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 79.364392][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 79.370071][ T10] ? usb_clear_halt+0x61/0x160 [ 79.374850][ T10] smsusb_probe+0x5d3/0x1090 [ 79.379552][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 79.384663][ T10] ? mark_held_locks+0x49/0x80 [ 79.389524][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.395564][ T10] ? __pm_runtime_set_status+0x13c/0xa80 [ 79.401570][ T10] usb_probe_interface+0x300/0xa40 [ 79.406717][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 79.412371][ T10] really_probe+0x241/0xa90 [ 79.417023][ T10] __driver_probe_device+0x1de/0x440 [ 79.422568][ T10] driver_probe_device+0x4c/0x1b0 [ 79.427607][ T10] __device_attach_driver+0x1df/0x310 [ 79.433008][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 79.438993][ T10] bus_for_each_drv+0x159/0x1e0 [ 79.443957][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.449439][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.454648][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.460748][ T10] __device_attach+0x1e4/0x4b0 [ 79.465696][ T10] ? __pfx___device_attach+0x10/0x10 [ 79.471255][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 79.476581][ T10] bus_probe_device+0x17f/0x1c0 [ 79.481844][ T10] device_add+0x1148/0x1aa0 [ 79.486573][ T10] ? __pfx_device_add+0x10/0x10 [ 79.491437][ T10] ? mark_held_locks+0x49/0x80 [ 79.496217][ T10] usb_set_configuration+0x1187/0x1e20 [ 79.501726][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 79.507994][ T10] usb_generic_driver_probe+0xb1/0x110 [ 79.513560][ T10] usb_probe_device+0xef/0x3e0 [ 79.518334][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 79.523968][ T10] really_probe+0x241/0xa90 [ 79.528518][ T10] __driver_probe_device+0x1de/0x440 [ 79.533903][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 79.539384][ T10] driver_probe_device+0x4c/0x1b0 [ 79.544594][ T10] __device_attach_driver+0x1df/0x310 [ 79.550008][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 79.555938][ T10] bus_for_each_drv+0x159/0x1e0 [ 79.560916][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.566309][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.571693][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.577511][ T10] __device_attach+0x1e4/0x4b0 [ 79.582485][ T10] ? __pfx___device_attach+0x10/0x10 [ 79.587785][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 79.593103][ T10] bus_probe_device+0x17f/0x1c0 [ 79.598050][ T10] device_add+0x1148/0x1aa0 [ 79.602579][ T10] ? __pfx_device_add+0x10/0x10 [ 79.607527][ T10] ? usb_detect_static_quirks+0x335/0x3e0 [ 79.613436][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 79.619375][ T10] usb_new_device+0xd07/0x1a60 [ 79.624250][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 79.629395][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 79.635097][ T10] ? mark_held_locks+0x49/0x80 [ 79.640336][ T10] hub_event+0x2fce/0x5060 [ 79.644846][ T10] ? __pfx_hub_event+0x10/0x10 [ 79.650007][ T10] ? assoc_array_apply_edit+0x420/0x6c0 [ 79.655724][ T10] ? rcu_is_watching+0x12/0xc0 [ 79.660608][ T10] process_one_work+0x9cc/0x1b70 [ 79.665650][ T10] ? __pfx_hcd_resume_work+0x10/0x10 [ 79.671126][ T10] ? __pfx_process_one_work+0x10/0x10 [ 79.676685][ T10] ? assign_work+0x1a0/0x250 [ 79.681375][ T10] worker_thread+0x6c8/0xf10 [ 79.686078][ T10] ? __kthread_parkme+0x19e/0x250 [ 79.691115][ T10] ? __pfx_worker_thread+0x10/0x10 [ 79.696341][ T10] kthread+0x3c5/0x780 [ 79.700455][ T10] ? __pfx_kthread+0x10/0x10 [ 79.705162][ T10] ? rcu_is_watching+0x12/0xc0 [ 79.709961][ T10] ? __pfx_kthread+0x10/0x10 [ 79.714605][ T10] ret_from_fork+0x5b6/0x6c0 [ 79.719441][ T10] ? __pfx_kthread+0x10/0x10 [ 79.724232][ T10] ret_from_fork_asm+0x1a/0x30 [ 79.729127][ T10] [ 79.732539][ T10] Kernel Offset: disabled [ 79.737089][ T10] Rebooting in 86400 seconds..