[ 73.420894][ T42] audit: type=1400 audit(1785295932.274:207): avc: denied { transition } for pid=5969 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.436613][ T42] audit: type=1400 audit(1785295932.284:208): avc: denied { noatsecure } for pid=5969 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.442776][ T42] audit: type=1400 audit(1785295932.284:209): avc: denied { rlimitinh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.448673][ T42] audit: type=1400 audit(1785295932.284:210): avc: denied { siginh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.032321][ T42] audit: type=1400 audit(1785295936.884:211): avc: denied { write } for pid=5976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.090758][ T42] audit: type=1400 audit(1785295936.944:212): avc: denied { write } for pid=5979 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.196678][ T42] audit: type=1400 audit(1785295937.044:213): avc: denied { write } for pid=5982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.258725][ T42] audit: type=1400 audit(1785295937.114:214): avc: denied { write } for pid=5985 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:25211' (ED25519) to the list of known hosts. [ 78.886246][ T42] audit: type=1400 audit(1785295937.734:215): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.927193][ T42] audit: type=1400 audit(1785295937.774:216): avc: denied { write } for pid=6004 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.043926][ T42] audit: type=1400 audit(1785295937.894:217): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.091164][ T42] audit: type=1400 audit(1785295937.944:218): avc: denied { write } for pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/07/29 03:32:18 parsed 1 programs [ 81.614209][ T1044] cfg80211: failed to load regulatory.db [ 82.491628][ T42] audit: type=1400 audit(1785295941.344:219): avc: denied { read write } for pid=6017 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.499808][ T42] audit: type=1400 audit(1785295941.344:220): avc: denied { open } for pid=6017 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.548630][ T42] audit: type=1400 audit(1785295941.404:221): avc: denied { unlink } for pid=6017 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.861488][ T42] audit: type=1400 audit(1785295941.714:222): avc: denied { relabelto } for pid=6020 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 83.593680][ T6017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.663618][ T42] audit: type=1400 audit(1785295944.514:223): avc: denied { sys_module } for pid=6033 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.924495][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.927374][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.929954][ T6033] bridge_slave_0: entered allmulticast mode [ 85.932704][ T6033] bridge_slave_0: entered promiscuous mode [ 85.936185][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.938645][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.941506][ T6033] bridge_slave_1: entered allmulticast mode [ 85.945090][ T6033] bridge_slave_1: entered promiscuous mode [ 85.963676][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.968734][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.987618][ T6033] team0: Port device team_slave_0 added [ 85.991744][ T6033] team0: Port device team_slave_1 added [ 86.005209][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.007604][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.015709][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.019791][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.022010][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.030193][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.054215][ T6033] hsr_slave_0: entered promiscuous mode [ 86.056669][ T6033] hsr_slave_1: entered promiscuous mode [ 86.162276][ T42] audit: type=1400 audit(1785295945.014:224): avc: denied { write } for pid=6049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.210946][ T42] audit: type=1400 audit(1785295945.064:225): avc: denied { write } for pid=6052 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.286619][ T42] audit: type=1400 audit(1785295945.144:226): avc: denied { write } for pid=6055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.329912][ T42] audit: type=1400 audit(1785295945.184:227): avc: denied { write } for pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.389997][ T42] audit: type=1400 audit(1785295945.244:228): avc: denied { write } for pid=6060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.432127][ T42] audit: type=1400 audit(1785295945.284:229): avc: denied { write } for pid=6063 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.486500][ T42] audit: type=1400 audit(1785295945.334:230): avc: denied { write } for pid=6065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.521251][ T6033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.534386][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.537310][ T6033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.541085][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.544025][ T6033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.550678][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.552080][ T42] audit: type=1400 audit(1785295945.404:231): avc: denied { write } for pid=6068 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.553519][ T6033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.565768][ T6033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.581072][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.583353][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.585740][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.588102][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.620573][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.633691][ T42] audit: type=1400 audit(1785295945.484:232): avc: denied { write } for pid=6076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.634595][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.646004][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.650233][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.659555][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.661897][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.669004][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.671814][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.909214][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.929182][ T6033] veth0_vlan: entered promiscuous mode [ 86.934415][ T6033] veth1_vlan: entered promiscuous mode [ 86.958189][ T6033] veth0_macvtap: entered promiscuous mode [ 86.963522][ T6033] veth1_macvtap: entered promiscuous mode [ 86.973362][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.980413][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.988035][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.991551][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.994998][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.998998][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.084420][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.177233][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.259752][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.322410][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.207675][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.212020][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.215122][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.219302][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.222232][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.391259][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.393813][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.422760][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.425437][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/29 03:32:27 executed programs: 0 [ 88.728625][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.732546][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.735874][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.740060][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.743283][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.107907][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.110861][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.113389][ T6196] bridge_slave_0: entered allmulticast mode [ 89.119461][ T6196] bridge_slave_0: entered promiscuous mode [ 89.124093][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.127286][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.130446][ T6196] bridge_slave_1: entered allmulticast mode [ 89.134386][ T6196] bridge_slave_1: entered promiscuous mode [ 89.157294][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.161650][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.177219][ T6196] team0: Port device team_slave_0 added [ 89.180532][ T6196] team0: Port device team_slave_1 added [ 89.198149][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.200675][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.208903][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.213480][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.215716][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.223891][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.248175][ T6196] hsr_slave_0: entered promiscuous mode [ 89.250430][ T6196] hsr_slave_1: entered promiscuous mode [ 89.252562][ T6196] debugfs: 'hsr0' already exists in 'hsr' [ 89.254407][ T6196] Cannot create hsr debugfs directory [ 89.848063][ T13] bridge_slave_1: left allmulticast mode [ 89.849956][ T13] bridge_slave_1: left promiscuous mode [ 89.851974][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.858367][ T13] bridge_slave_0: left allmulticast mode [ 89.860139][ T13] bridge_slave_0: left promiscuous mode [ 89.862448][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.946288][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.956379][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.961493][ T13] bond0 (unregistering): Released all slaves [ 90.093048][ T13] hsr_slave_0: left promiscuous mode [ 90.095486][ T13] hsr_slave_1: left promiscuous mode [ 90.098507][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.101217][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.104181][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.107174][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.114760][ T13] veth1_macvtap: left promiscuous mode [ 90.117460][ T13] veth0_macvtap: left promiscuous mode [ 90.119681][ T13] veth1_vlan: left promiscuous mode [ 90.121927][ T13] veth0_vlan: left promiscuous mode [ 90.287298][ T13] team0 (unregistering): Port device team_slave_1 removed [ 90.295296][ T13] team0 (unregistering): Port device team_slave_0 removed [ 90.387498][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.708882][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 90.708894][ T42] audit: type=1400 audit(1785295949.564:257): avc: denied { write } for pid=6233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.761485][ T42] audit: type=1400 audit(1785295949.614:258): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.781748][ T6196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.787383][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.790378][ T6196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.795056][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.799687][ T6196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.805691][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.806837][ T5095] Bluetooth: hci0: command tx timeout [ 90.808419][ T6196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.813347][ T6196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.850783][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.859994][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.865109][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.867908][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.875166][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.877869][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.351175][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.390759][ T6196] veth0_vlan: entered promiscuous mode [ 91.395849][ T6196] veth1_vlan: entered promiscuous mode [ 91.440546][ T6196] veth0_macvtap: entered promiscuous mode [ 91.446574][ T6196] veth1_macvtap: entered promiscuous mode [ 91.456549][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.462455][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.469747][ T5924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473592][ T5924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.478866][ T5924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482774][ T5924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.532763][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.535265][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.548756][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.551313][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.586314][ T42] audit: type=1400 audit(1785295950.434:259): avc: denied { read write } for pid=6255 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.593973][ T42] audit: type=1400 audit(1785295950.444:260): avc: denied { open } for pid=6255 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.601751][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.602966][ T42] audit: type=1400 audit(1785295950.444:261): avc: denied { ioctl } for pid=6255 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.608553][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.847585][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.996600][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 92.002835][ T5891] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 92.007335][ T5891] usb 5-1: config 0 has no interface number 0 [ 92.009906][ T5891] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 92.014040][ T5891] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 92.018187][ T5891] usb 5-1: config 0 interface 54 has no altsetting 0 [ 92.023084][ T5891] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 92.026939][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.030227][ T5891] usb 5-1: Product: syz [ 92.031992][ T5891] usb 5-1: Manufacturer: syz [ 92.033947][ T5891] usb 5-1: SerialNumber: syz [ 92.038812][ T5891] usb 5-1: config 0 descriptor?? [ 92.042641][ T6256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.045658][ T6256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.055637][ T5891] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 92.065496][ T5891] scsi host6: usb-storage 5-1:0.54 [ 92.886647][ T5095] Bluetooth: hci0: command tx timeout [ 93.141626][ T6261] ------------[ cut here ]------------ [ 93.144171][ T6261] URB ffff888022e06100 submitted while active [ 93.146141][ T6261] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#2: usb-storage/6261 [ 93.150420][ T6261] Modules linked in: [ 93.152241][ T6261] CPU: 2 UID: 0 PID: 6261 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 93.156109][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.160342][ T6261] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 93.162671][ T6261] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 de 71 89 fa 48 8d 3d 27 e9 ae 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 93.170575][ T6261] RSP: 0018:ffffc9000663f6d8 EFLAGS: 00010293 [ 93.172850][ T6261] RAX: 0000000000000000 RBX: ffff888022e06100 RCX: dffffc0000000000 [ 93.175166][ T6261] RDX: ffff88802ad8ca80 RSI: ffff888022e06100 RDI: ffffffff912fd790 [ 93.177535][ T6261] RBP: 1ffff92000cc7eee R08: 0000000000000002 R09: 0000000000000000 [ 93.179927][ T6261] R10: 0000000000000000 R11: 000000000000758b R12: ffff8880348fcfc0 [ 93.182405][ T6261] R13: ffff8880348fcf38 R14: ffffc9000663f790 R15: ffff888022e06100 [ 93.184921][ T6261] FS: 0000000000000000(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 93.187776][ T6261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.189967][ T6261] CR2: 000055e1b7d81ae8 CR3: 00000000368f9000 CR4: 0000000000352ef0 [ 93.192454][ T6261] Call Trace: [ 93.193530][ T6261] [ 93.194570][ T6261] ? lockdep_init_map_type+0x5c/0x250 [ 93.196731][ T6261] ? lockdep_init_map_type+0x5c/0x250 [ 93.198456][ T6261] ? __init_swait_queue_head+0xca/0x150 [ 93.200198][ T6261] usb_stor_msg_common+0x241/0x560 [ 93.201822][ T6261] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 93.203594][ T6261] ? lock_release+0x24d/0x310 [ 93.205149][ T6261] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.207228][ T6261] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 93.209071][ T6261] ene_send_scsi_cmd+0x12b/0x610 [ 93.210677][ T6261] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 93.212397][ T6261] ? unwind_next_frame+0x3be/0x2090 [ 93.214044][ T6261] ? rcu_is_watching+0x12/0xc0 [ 93.215585][ T6261] ? __kasan_check_byte+0x13/0x50 [ 93.217200][ T6261] ? __asan_memset+0x23/0x50 [ 93.218683][ T6261] ene_transport+0x2f00/0x3860 [ 93.220104][ T6261] ? unwind_next_frame+0x3c8/0x2090 [ 93.221664][ T6261] ? ret_from_fork_asm+0x1a/0x30 [ 93.223116][ T6261] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.224951][ T6261] ? arch_stack_walk+0x94/0xf0 [ 93.226719][ T6261] ? __pfx_ene_transport+0x10/0x10 [ 93.228754][ T6261] ? ret_from_fork_asm+0x1a/0x30 [ 93.230782][ T6261] ? stack_trace_save+0x8e/0xc0 [ 93.232824][ T6261] ? __pfx_stack_trace_save+0x10/0x10 [ 93.234987][ T6261] ? check_noncircular+0x97/0x160 [ 93.237154][ T6261] ? add_lock_to_list+0x99/0x110 [ 93.239159][ T6261] usb_stor_invoke_transport+0xe7/0x15c0 [ 93.241488][ T6261] ? lockdep_unlock+0x5a/0xc0 [ 93.243355][ T6261] ? __lock_acquire+0xd5b/0x1a40 [ 93.245329][ T6261] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 93.247925][ T6261] ? do_raw_spin_lock+0x128/0x260 [ 93.249991][ T6261] ? find_held_lock+0x2b/0x80 [ 93.251493][ T6261] ? mark_held_locks+0x40/0x70 [ 93.253033][ T6261] usb_stor_control_thread+0x5e4/0xae0 [ 93.254784][ T6261] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.256747][ T6261] ? rcu_is_watching+0x12/0xc0 [ 93.258347][ T6261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.260841][ T6261] ? lockdep_hardirqs_on+0x78/0x100 [ 93.262795][ T6261] ? __kthread_parkme+0x18c/0x230 [ 93.264455][ T6261] ? kthread+0x13a/0x450 [ 93.265815][ T6261] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.267779][ T6261] kthread+0x370/0x450 [ 93.269119][ T6261] ? __pfx_kthread+0x10/0x10 [ 93.270587][ T6261] ret_from_fork+0x72b/0xd50 [ 93.272060][ T6261] ? __pfx_ret_from_fork+0x10/0x10 [ 93.273702][ T6261] ? __switch_to+0x800/0x10f0 [ 93.275221][ T6261] ? __pfx_kthread+0x10/0x10 [ 93.276775][ T6261] ret_from_fork_asm+0x1a/0x30 [ 93.278546][ T6261] [ 93.279836][ T6261] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.282874][ T6261] CPU: 2 UID: 0 PID: 6261 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 93.286733][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.290849][ T6261] Call Trace: [ 93.292246][ T6261] [ 93.293500][ T6261] dump_stack_lvl+0x100/0x190 [ 93.295468][ T6261] vpanic+0x552/0x970 [ 93.297144][ T6261] ? __pfx_vpanic+0x10/0x10 [ 93.299076][ T6261] panic+0xd1/0xe0 [ 93.300699][ T6261] ? __pfx_panic+0x10/0x10 [ 93.302361][ T6261] ? check_panic_on_warn+0x1f/0x90 [ 93.303972][ T6261] check_panic_on_warn.cold+0x19/0x34 [ 93.305674][ T6261] ? usb_submit_urb+0x1689/0x19b0 [ 93.307278][ T6261] __warn.cold+0x191/0x318 [ 93.308740][ T6261] __report_bug+0x30f/0x440 [ 93.310191][ T6261] ? usb_submit_urb+0x1689/0x19b0 [ 93.311776][ T6261] ? __pfx___report_bug+0x10/0x10 [ 93.313388][ T6261] report_bug_entry+0xe1/0x290 [ 93.314921][ T6261] ? usb_submit_urb+0x168c/0x19b0 [ 93.316511][ T6261] handle_bug+0x1cd/0x2a0 [ 93.317880][ T6261] exc_invalid_op+0x17/0x50 [ 93.319731][ T6261] asm_exc_invalid_op+0x1a/0x20 [ 93.321796][ T6261] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 93.324092][ T6261] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 de 71 89 fa 48 8d 3d 27 e9 ae 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 93.331920][ T6261] RSP: 0018:ffffc9000663f6d8 EFLAGS: 00010293 [ 93.334241][ T6261] RAX: 0000000000000000 RBX: ffff888022e06100 RCX: dffffc0000000000 [ 93.336732][ T6261] RDX: ffff88802ad8ca80 RSI: ffff888022e06100 RDI: ffffffff912fd790 [ 93.339278][ T6261] RBP: 1ffff92000cc7eee R08: 0000000000000002 R09: 0000000000000000 [ 93.342037][ T6261] R10: 0000000000000000 R11: 000000000000758b R12: ffff8880348fcfc0 [ 93.344571][ T6261] R13: ffff8880348fcf38 R14: ffffc9000663f790 R15: ffff888022e06100 [ 93.347050][ T6261] ? usb_submit_urb+0x1682/0x19b0 [ 93.348819][ T6261] ? lockdep_init_map_type+0x5c/0x250 [ 93.351076][ T6261] ? lockdep_init_map_type+0x5c/0x250 [ 93.352818][ T6261] ? __init_swait_queue_head+0xca/0x150 [ 93.354631][ T6261] usb_stor_msg_common+0x241/0x560 [ 93.356229][ T6261] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 93.357987][ T6261] ? lock_release+0x24d/0x310 [ 93.359559][ T6261] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.361527][ T6261] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 93.363321][ T6261] ene_send_scsi_cmd+0x12b/0x610 [ 93.364910][ T6261] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 93.366713][ T6261] ? unwind_next_frame+0x3be/0x2090 [ 93.368404][ T6261] ? rcu_is_watching+0x12/0xc0 [ 93.369977][ T6261] ? __kasan_check_byte+0x13/0x50 [ 93.371575][ T6261] ? __asan_memset+0x23/0x50 [ 93.373047][ T6261] ene_transport+0x2f00/0x3860 [ 93.374591][ T6261] ? unwind_next_frame+0x3c8/0x2090 [ 93.376222][ T6261] ? ret_from_fork_asm+0x1a/0x30 [ 93.377799][ T6261] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 93.379773][ T6261] ? arch_stack_walk+0x94/0xf0 [ 93.381175][ T6261] ? __pfx_ene_transport+0x10/0x10 [ 93.382802][ T6261] ? ret_from_fork_asm+0x1a/0x30 [ 93.384446][ T6261] ? stack_trace_save+0x8e/0xc0 [ 93.385986][ T6261] ? __pfx_stack_trace_save+0x10/0x10 [ 93.387632][ T6261] ? check_noncircular+0x97/0x160 [ 93.389404][ T6261] ? add_lock_to_list+0x99/0x110 [ 93.390961][ T6261] usb_stor_invoke_transport+0xe7/0x15c0 [ 93.392724][ T6261] ? lockdep_unlock+0x5a/0xc0 [ 93.394220][ T6261] ? __lock_acquire+0xd5b/0x1a40 [ 93.395819][ T6261] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 93.397757][ T6261] ? do_raw_spin_lock+0x128/0x260 [ 93.399398][ T6261] ? find_held_lock+0x2b/0x80 [ 93.400902][ T6261] ? mark_held_locks+0x40/0x70 [ 93.402418][ T6261] usb_stor_control_thread+0x5e4/0xae0 [ 93.404139][ T6261] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.406055][ T6261] ? rcu_is_watching+0x12/0xc0 [ 93.407584][ T6261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.409529][ T6261] ? lockdep_hardirqs_on+0x78/0x100 [ 93.411230][ T6261] ? __kthread_parkme+0x18c/0x230 [ 93.412828][ T6261] ? kthread+0x13a/0x450 [ 93.414381][ T6261] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.416625][ T6261] kthread+0x370/0x450 [ 93.417929][ T6261] ? __pfx_kthread+0x10/0x10 [ 93.419434][ T6261] ret_from_fork+0x72b/0xd50 [ 93.420922][ T6261] ? __pfx_ret_from_fork+0x10/0x10 [ 93.422540][ T6261] ? __switch_to+0x800/0x10f0 [ 93.424028][ T6261] ? __pfx_kthread+0x10/0x10 [ 93.425536][ T6261] ret_from_fork_asm+0x1a/0x30 [ 93.427082][ T6261] [ 93.432256][ T6261] Kernel Offset: disabled [ 93.433668][ T6261] Rebooting in 86400 seconds..