[ 84.344433][ T40] audit: type=1400 audit(1772409734.884:116): avc: denied { transition } for pid=6132 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.354666][ T40] audit: type=1400 audit(1772409734.884:117): avc: denied { noatsecure } for pid=6132 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.363547][ T40] audit: type=1400 audit(1772409734.894:118): avc: denied { rlimitinh } for pid=6132 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.372166][ T40] audit: type=1400 audit(1772409734.894:119): avc: denied { siginh } for pid=6132 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.808360][ T4186] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:64431' (ED25519) to the list of known hosts. 2026/03/02 00:02:21 parsed 1 programs [ 90.992311][ T40] audit: type=1400 audit(1772409741.534:120): avc: denied { node_bind } for pid=6154 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.335365][ T40] audit: type=1400 audit(1772409743.874:121): avc: denied { read write } for pid=6177 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.344251][ T40] audit: type=1400 audit(1772409743.874:122): avc: denied { open } for pid=6177 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.379221][ T40] audit: type=1400 audit(1772409743.924:123): avc: denied { unlink } for pid=6177 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.746543][ T40] audit: type=1400 audit(1772409744.284:124): avc: denied { relabelto } for pid=6186 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 94.410905][ T6177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.645495][ T6198] chnl_net:caif_netlink_parms(): no params data found [ 96.724098][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.727490][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.730798][ T6198] bridge_slave_0: entered allmulticast mode [ 96.734790][ T6198] bridge_slave_0: entered promiscuous mode [ 96.740127][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.743410][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.746766][ T6198] bridge_slave_1: entered allmulticast mode [ 96.750823][ T6198] bridge_slave_1: entered promiscuous mode [ 96.780286][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.788102][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.810464][ T6198] team0: Port device team_slave_0 added [ 96.814397][ T6198] team0: Port device team_slave_1 added [ 96.837591][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.840756][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.850964][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.857630][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.860021][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.868821][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.892640][ T6198] hsr_slave_0: entered promiscuous mode [ 96.895968][ T6198] hsr_slave_1: entered promiscuous mode [ 97.321363][ T6198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.325711][ T6198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.330398][ T6198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.335388][ T6198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.389524][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.401971][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.408398][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.411695][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.421482][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.424757][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.473316][ T40] audit: type=1400 audit(1772409748.014:125): avc: denied { sys_module } for pid=6198 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.553319][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.574076][ T6198] veth0_vlan: entered promiscuous mode [ 97.587694][ T6198] veth1_vlan: entered promiscuous mode [ 97.609446][ T6198] veth0_macvtap: entered promiscuous mode [ 97.615444][ T6198] veth1_macvtap: entered promiscuous mode [ 97.628860][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.636313][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.645928][ T90] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653439][ T90] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.659023][ T90] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667162][ T90] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.783427][ T1233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848675][ T1233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.916096][ T1233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.983373][ T1233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.439614][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.442906][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.460794][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.464773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.788214][ T40] audit: type=1401 audit(1772409749.324:126): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 99.239559][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.242805][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.245730][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.250450][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.253400][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/02 00:02:30 executed programs: 0 [ 99.823842][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.828075][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.832079][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.836198][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.840953][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.972717][ T6347] chnl_net:caif_netlink_parms(): no params data found [ 100.035890][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.038678][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.041894][ T6347] bridge_slave_0: entered allmulticast mode [ 100.045965][ T6347] bridge_slave_0: entered promiscuous mode [ 100.050906][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.054028][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.058091][ T6347] bridge_slave_1: entered allmulticast mode [ 100.061925][ T6347] bridge_slave_1: entered promiscuous mode [ 100.096873][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.103651][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.131784][ T6347] team0: Port device team_slave_0 added [ 100.136941][ T6347] team0: Port device team_slave_1 added [ 100.162799][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.165970][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.175630][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.180311][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.182580][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.190893][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.213544][ T6347] hsr_slave_0: entered promiscuous mode [ 100.215979][ T6347] hsr_slave_1: entered promiscuous mode [ 100.218252][ T6347] debugfs: 'hsr0' already exists in 'hsr' [ 100.220160][ T6347] Cannot create hsr debugfs directory [ 101.307859][ T1233] bridge_slave_1: left allmulticast mode [ 101.309762][ T1233] bridge_slave_1: left promiscuous mode [ 101.311716][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.315720][ T1233] bridge_slave_0: left allmulticast mode [ 101.317848][ T1233] bridge_slave_0: left promiscuous mode [ 101.319846][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.442730][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.447507][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.451224][ T1233] bond0 (unregistering): Released all slaves [ 101.610364][ T1233] hsr_slave_0: left promiscuous mode [ 101.612575][ T1233] hsr_slave_1: left promiscuous mode [ 101.614673][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.617405][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.620796][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.623409][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.629759][ T1233] veth1_macvtap: left promiscuous mode [ 101.631754][ T1233] veth0_macvtap: left promiscuous mode [ 101.633589][ T1233] veth1_vlan: left promiscuous mode [ 101.635386][ T1233] veth0_vlan: left promiscuous mode [ 101.744654][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 101.752373][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 101.917106][ T63] Bluetooth: hci0: command tx timeout [ 102.252261][ T6347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.258730][ T6347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.263399][ T6347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.270133][ T6347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.340929][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.358501][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.366715][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.369869][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.378559][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.381561][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.791556][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.820840][ T6347] veth0_vlan: entered promiscuous mode [ 102.831502][ T6347] veth1_vlan: entered promiscuous mode [ 102.846539][ T6347] veth0_macvtap: entered promiscuous mode [ 102.863685][ T6347] veth1_macvtap: entered promiscuous mode [ 102.883531][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.891848][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.903727][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.907512][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911825][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.915752][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.972592][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.976173][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.016947][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.019550][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.054239][ T40] audit: type=1400 audit(1772409753.594:127): avc: denied { read write } for pid=6398 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.062537][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.065761][ T40] audit: type=1400 audit(1772409753.594:128): avc: denied { open } for pid=6398 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.068018][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.079574][ T40] audit: type=1400 audit(1772409753.594:129): avc: denied { ioctl } for pid=6398 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.308283][ T4186] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.486778][ T4186] usb 5-1: Using ep0 maxpacket: 32 [ 103.491868][ T4186] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 103.495403][ T4186] usb 5-1: config 0 has no interface number 0 [ 103.498385][ T4186] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 103.502891][ T4186] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 103.507461][ T4186] usb 5-1: config 0 interface 54 has no altsetting 0 [ 103.512110][ T4186] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 103.515974][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.519726][ T4186] usb 5-1: Product: syz [ 103.521508][ T4186] usb 5-1: Manufacturer: syz [ 103.523535][ T4186] usb 5-1: SerialNumber: syz [ 103.529354][ T4186] usb 5-1: config 0 descriptor?? [ 103.533651][ T6399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.537006][ T6399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.545501][ T4186] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 103.558233][ T4186] scsi host6: usb-storage 5-1:0.54 [ 103.996922][ T63] Bluetooth: hci0: command tx timeout [ 104.648966][ T6404] ------------[ cut here ]------------ [ 104.650910][ T6404] URB ffff88802c170700 submitted while active [ 104.652902][ T6404] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#2: usb-storage/6404 [ 104.656273][ T6404] Modules linked in: [ 104.657714][ T6404] CPU: 2 UID: 0 PID: 6404 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 104.660739][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.663988][ T6404] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 104.665876][ T6404] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 78 b8 fa 48 8d 3d c6 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 104.672196][ T6404] RSP: 0018:ffffc900036a76d8 EFLAGS: 00010293 [ 104.674233][ T6404] RAX: 0000000000000000 RBX: ffff88802c170700 RCX: dffffc0000000000 [ 104.676878][ T6404] RDX: ffff88802b5a8000 RSI: ffff88802c170700 RDI: ffffffff90e63960 [ 104.679509][ T6404] RBP: 1ffff920006d4eee R08: 0000000000000002 R09: 0000000000000000 [ 104.682110][ T6404] R10: 0000000000000000 R11: 000000000000760b R12: ffff88802d6f4ee8 [ 104.684844][ T6404] R13: ffff88802d6f4e60 R14: ffffc900036a7790 R15: ffff88802c170700 [ 104.687522][ T6404] FS: 0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 104.690418][ T6404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.692602][ T6404] CR2: 00007ffd36aeed78 CR3: 000000002304e000 CR4: 0000000000352ef0 [ 104.695287][ T6404] Call Trace: [ 104.696477][ T6404] [ 104.697575][ T6404] ? lockdep_init_map_type+0x5c/0x250 [ 104.699375][ T6404] ? lockdep_init_map_type+0x5c/0x250 [ 104.701164][ T6404] ? __init_swait_queue_head+0xca/0x150 [ 104.703002][ T6404] usb_stor_msg_common+0x241/0x560 [ 104.704769][ T6404] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 104.706704][ T6404] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.708750][ T6404] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 104.710668][ T6404] ene_send_scsi_cmd+0x12b/0x610 [ 104.712344][ T6404] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 104.714190][ T6404] ? __pfx_stack_trace_save+0x10/0x10 [ 104.715989][ T6404] ? find_held_lock+0x2b/0x80 [ 104.717682][ T6404] ? __kasan_check_byte+0x13/0x50 [ 104.719387][ T6404] ? __asan_memset+0x23/0x50 [ 104.720950][ T6404] ene_transport+0x4e8/0x3720 [ 104.722546][ T6404] ? unwind_next_frame+0x3be/0x1ea0 [ 104.724331][ T6404] ? lock_release+0x263/0x320 [ 104.725920][ T6404] ? unwind_next_frame+0x3c8/0x1ea0 [ 104.727709][ T6404] ? ret_from_fork_asm+0x1a/0x30 [ 104.729372][ T6404] ? __pfx_ene_transport+0x10/0x10 [ 104.731091][ T6404] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.733139][ T6404] ? arch_stack_walk+0x94/0xf0 [ 104.734766][ T6404] ? ret_from_fork_asm+0x1a/0x30 [ 104.736434][ T6404] ? stack_trace_save+0x8e/0xc0 [ 104.738112][ T6404] ? __pfx_stack_trace_save+0x10/0x10 [ 104.739922][ T6404] ? check_noncircular+0x97/0x160 [ 104.741610][ T6404] usb_stor_invoke_transport+0xe7/0x15c0 [ 104.743500][ T6404] ? lockdep_unlock+0x5a/0xc0 [ 104.745128][ T6404] ? __lock_acquire+0xd73/0x2630 [ 104.746834][ T6404] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 104.748887][ T6404] ? do_raw_spin_lock+0x128/0x260 [ 104.750582][ T6404] ? find_held_lock+0x2b/0x80 [ 104.752174][ T6404] ? mark_held_locks+0x40/0x70 [ 104.753902][ T6404] usb_stor_control_thread+0x5e4/0xae0 [ 104.756212][ T6404] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 104.758733][ T6404] ? rcu_is_watching+0x12/0xc0 [ 104.760752][ T6404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.763213][ T6404] ? lockdep_hardirqs_on+0x78/0x100 [ 104.765413][ T6404] ? __kthread_parkme+0x18c/0x230 [ 104.767596][ T6404] ? kthread+0x13a/0x450 [ 104.769381][ T6404] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 104.771931][ T6404] kthread+0x370/0x450 [ 104.773665][ T6404] ? __pfx_kthread+0x10/0x10 [ 104.775677][ T6404] ret_from_fork+0x754/0xd80 [ 104.777676][ T6404] ? __pfx_ret_from_fork+0x10/0x10 [ 104.779839][ T6404] ? __switch_to+0x7b4/0x1120 [ 104.781839][ T6404] ? __pfx_kthread+0x10/0x10 [ 104.783809][ T6404] ret_from_fork_asm+0x1a/0x30 [ 104.785880][ T6404] [ 104.787277][ T6404] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.790252][ T6404] CPU: 2 UID: 0 PID: 6404 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 104.794006][ T6404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.798124][ T6404] Call Trace: [ 104.799504][ T6404] [ 104.800743][ T6404] dump_stack_lvl+0x100/0x190 [ 104.802766][ T6404] vpanic+0x552/0x970 [ 104.804470][ T6404] ? __pfx_vpanic+0x10/0x10 [ 104.806352][ T6404] panic+0xd1/0xe0 [ 104.807921][ T6404] ? __pfx_panic+0x10/0x10 [ 104.809771][ T6404] ? check_panic_on_warn+0x1f/0x90 [ 104.811919][ T6404] check_panic_on_warn.cold+0x19/0x34 [ 104.814194][ T6404] ? usb_submit_urb+0x15fa/0x1910 [ 104.816292][ T6404] __warn.cold+0x191/0x348 [ 104.818133][ T6404] __report_bug+0x296/0x3d0 [ 104.820030][ T6404] ? usb_submit_urb+0x15fa/0x1910 [ 104.822099][ T6404] ? __pfx___report_bug+0x10/0x10 [ 104.824195][ T6404] ? irqentry_exit+0x180/0x670 [ 104.826181][ T6404] ? lockdep_hardirqs_on+0x78/0x100 [ 104.828278][ T6404] ? usb_submit_urb+0x15fd/0x1910 [ 104.830378][ T6404] report_bug_entry+0xe1/0x290 [ 104.832381][ T6404] ? usb_submit_urb+0x15fd/0x1910 [ 104.834481][ T6404] handle_bug+0x1cd/0x2a0 [ 104.836283][ T6404] exc_invalid_op+0x17/0x50 [ 104.838173][ T6404] asm_exc_invalid_op+0x1a/0x20 [ 104.840195][ T6404] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 104.842496][ T6404] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 78 b8 fa 48 8d 3d c6 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 104.850416][ T6404] RSP: 0018:ffffc900036a76d8 EFLAGS: 00010293 [ 104.852938][ T6404] RAX: 0000000000000000 RBX: ffff88802c170700 RCX: dffffc0000000000 [ 104.856236][ T6404] RDX: ffff88802b5a8000 RSI: ffff88802c170700 RDI: ffffffff90e63960 [ 104.859496][ T6404] RBP: 1ffff920006d4eee R08: 0000000000000002 R09: 0000000000000000 [ 104.862719][ T6404] R10: 0000000000000000 R11: 000000000000760b R12: ffff88802d6f4ee8 [ 104.865961][ T6404] R13: ffff88802d6f4e60 R14: ffffc900036a7790 R15: ffff88802c170700 [ 104.869227][ T6404] ? usb_submit_urb+0x15f3/0x1910 [ 104.871338][ T6404] ? lockdep_init_map_type+0x5c/0x250 [ 104.873544][ T6404] ? lockdep_init_map_type+0x5c/0x250 [ 104.875765][ T6404] ? __init_swait_queue_head+0xca/0x150 [ 104.878030][ T6404] usb_stor_msg_common+0x241/0x560 [ 104.880160][ T6404] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 104.882445][ T6404] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.885040][ T6404] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 104.887388][ T6404] ene_send_scsi_cmd+0x12b/0x610 [ 104.889405][ T6404] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 104.891672][ T6404] ? __pfx_stack_trace_save+0x10/0x10 [ 104.893895][ T6404] ? find_held_lock+0x2b/0x80 [ 104.895995][ T6404] ? __kasan_check_byte+0x13/0x50 [ 104.898060][ T6404] ? __asan_memset+0x23/0x50 [ 104.899976][ T6404] ene_transport+0x4e8/0x3720 [ 104.901947][ T6404] ? unwind_next_frame+0x3be/0x1ea0 [ 104.904115][ T6404] ? lock_release+0x263/0x320 [ 104.906068][ T6404] ? unwind_next_frame+0x3c8/0x1ea0 [ 104.908212][ T6404] ? ret_from_fork_asm+0x1a/0x30 [ 104.910284][ T6404] ? __pfx_ene_transport+0x10/0x10 [ 104.912411][ T6404] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.914964][ T6404] ? arch_stack_walk+0x94/0xf0 [ 104.917000][ T6404] ? ret_from_fork_asm+0x1a/0x30 [ 104.919057][ T6404] ? stack_trace_save+0x8e/0xc0 [ 104.921089][ T6404] ? __pfx_stack_trace_save+0x10/0x10 [ 104.923301][ T6404] ? check_noncircular+0x97/0x160 [ 104.925419][ T6404] usb_stor_invoke_transport+0xe7/0x15c0 [ 104.927765][ T6404] ? lockdep_unlock+0x5a/0xc0 [ 104.929756][ T6404] ? __lock_acquire+0xd73/0x2630 [ 104.931840][ T6404] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 104.934393][ T6404] ? do_raw_spin_lock+0x128/0x260 [ 104.936490][ T6404] ? find_held_lock+0x2b/0x80 [ 104.938435][ T6404] ? mark_held_locks+0x40/0x70 [ 104.940433][ T6404] usb_stor_control_thread+0x5e4/0xae0 [ 104.942657][ T6404] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 104.945157][ T6404] ? rcu_is_watching+0x12/0xc0 [ 104.947118][ T6404] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.949558][ T6404] ? lockdep_hardirqs_on+0x78/0x100 [ 104.951724][ T6404] ? __kthread_parkme+0x18c/0x230 [ 104.953799][ T6404] ? kthread+0x13a/0x450 [ 104.955334][ T6404] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 104.957793][ T6404] kthread+0x370/0x450 [ 104.959480][ T6404] ? __pfx_kthread+0x10/0x10 [ 104.961386][ T6404] ret_from_fork+0x754/0xd80 [ 104.963300][ T6404] ? __pfx_ret_from_fork+0x10/0x10 [ 104.965436][ T6404] ? __switch_to+0x7b4/0x1120 [ 104.967381][ T6404] ? __pfx_kthread+0x10/0x10 [ 104.969292][ T6404] ret_from_fork_asm+0x1a/0x30 [ 104.971282][ T6404] [ 104.973230][ T6404] Kernel Offset: disabled [ 104.975036][ T6404] Rebooting in 86400 seconds..