[ 82.549016][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 82.549037][ T40] audit: type=1400 audit(1776580806.078:117): avc: denied { transition } for pid=6134 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.561291][ T40] audit: type=1400 audit(1776580806.088:118): avc: denied { noatsecure } for pid=6134 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.569653][ T40] audit: type=1400 audit(1776580806.098:119): avc: denied { rlimitinh } for pid=6134 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.577504][ T40] audit: type=1400 audit(1776580806.098:120): avc: denied { siginh } for pid=6134 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.561471][ T837] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:35088' (ED25519) to the list of known hosts. 2026/04/19 06:40:13 parsed 1 programs [ 92.483272][ T40] audit: type=1400 audit(1776580816.018:121): avc: denied { read write } for pid=6183 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.492453][ T40] audit: type=1400 audit(1776580816.018:122): avc: denied { open } for pid=6183 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.522828][ T40] audit: type=1400 audit(1776580816.058:123): avc: denied { unlink } for pid=6183 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.855029][ T40] audit: type=1400 audit(1776580816.388:124): avc: denied { relabelto } for pid=6186 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.548367][ T6183] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.375954][ T40] audit: type=1401 audit(1776580818.908:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 96.752292][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.755649][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.777187][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.781524][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.129665][ T40] audit: type=1400 audit(1776580820.658:126): avc: denied { sys_admin } for pid=6240 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.229537][ T40] audit: type=1400 audit(1776580820.758:127): avc: denied { sys_chroot } for pid=6241 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.397867][ T6246] chnl_net:caif_netlink_parms(): no params data found [ 97.469799][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.472260][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.474696][ T6246] bridge_slave_0: entered allmulticast mode [ 97.477419][ T6246] bridge_slave_0: entered promiscuous mode [ 97.481483][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.483903][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.486249][ T6246] bridge_slave_1: entered allmulticast mode [ 97.489083][ T6246] bridge_slave_1: entered promiscuous mode [ 97.535217][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.541365][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.580216][ T6246] team0: Port device team_slave_0 added [ 97.583566][ T6246] team0: Port device team_slave_1 added [ 97.618078][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.621316][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.630100][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.635540][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.638326][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.648616][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.688133][ T6246] hsr_slave_0: entered promiscuous mode [ 97.691704][ T6246] hsr_slave_1: entered promiscuous mode [ 98.309798][ T6246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.314138][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.317021][ T6246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.321852][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.324875][ T6246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.331041][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.333897][ T6246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.338251][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.410345][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.427362][ T6246] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.437874][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.440745][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.451263][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.454408][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.519219][ T40] audit: type=1400 audit(1776580822.048:128): avc: denied { sys_module } for pid=6246 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.615077][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.658290][ T6246] veth0_vlan: entered promiscuous mode [ 98.668238][ T6246] veth1_vlan: entered promiscuous mode [ 98.685314][ T6246] veth0_macvtap: entered promiscuous mode [ 98.689504][ T6246] veth1_macvtap: entered promiscuous mode [ 98.698891][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.709629][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.717215][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.721010][ T87] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.727813][ T87] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.732323][ T87] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815316][ T6029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.820970][ T6029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.830787][ T6029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.834496][ T6029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.835450][ T87] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.838205][ T6029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.948648][ T87] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.047611][ T87] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.152209][ T87] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/19 06:40:22 executed programs: 0 [ 99.426860][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.433119][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.436324][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.443310][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.447944][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.573763][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 99.669926][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.672379][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.674810][ T6341] bridge_slave_0: entered allmulticast mode [ 99.677549][ T6341] bridge_slave_0: entered promiscuous mode [ 99.681554][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.683980][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.686313][ T6341] bridge_slave_1: entered allmulticast mode [ 99.688926][ T6341] bridge_slave_1: entered promiscuous mode [ 99.729905][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.736942][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.776076][ T6341] team0: Port device team_slave_0 added [ 99.781352][ T6341] team0: Port device team_slave_1 added [ 99.830228][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.833208][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.843738][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.850753][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.853694][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.864459][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.933647][ T6341] hsr_slave_0: entered promiscuous mode [ 99.936870][ T6341] hsr_slave_1: entered promiscuous mode [ 99.941862][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 99.944339][ T6341] Cannot create hsr debugfs directory [ 101.503383][ T87] bridge_slave_1: left allmulticast mode [ 101.505902][ T87] bridge_slave_1: left promiscuous mode [ 101.508404][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.514065][ T87] bridge_slave_0: left allmulticast mode [ 101.516539][ T87] bridge_slave_0: left promiscuous mode [ 101.519172][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.520155][ T6029] Bluetooth: hci0: command tx timeout [ 101.713300][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.719109][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.724349][ T87] bond0 (unregistering): Released all slaves [ 101.865748][ T87] hsr_slave_0: left promiscuous mode [ 101.868286][ T87] hsr_slave_1: left promiscuous mode [ 101.871143][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.873637][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.876417][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.878899][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.887093][ T87] veth1_macvtap: left promiscuous mode [ 101.888962][ T87] veth0_macvtap: left promiscuous mode [ 101.892406][ T87] veth1_vlan: left promiscuous mode [ 101.894344][ T87] veth0_vlan: left promiscuous mode [ 102.017774][ T87] team0 (unregistering): Port device team_slave_1 removed [ 102.025885][ T87] team0 (unregistering): Port device team_slave_0 removed [ 102.124279][ T5647] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.507189][ T6341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.514432][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.518053][ T6341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.523418][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.527012][ T6341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.534678][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.538390][ T6341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.545921][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.614607][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.628770][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.634416][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.637722][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.657342][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.660292][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.857829][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.903928][ T6341] veth0_vlan: entered promiscuous mode [ 102.912342][ T6341] veth1_vlan: entered promiscuous mode [ 102.950558][ T6341] veth0_macvtap: entered promiscuous mode [ 102.955553][ T6341] veth1_macvtap: entered promiscuous mode [ 102.966848][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.973676][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.981286][ T220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.985039][ T220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.990435][ T220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.993959][ T220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.045435][ T687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.049394][ T687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.065598][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.068943][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.116086][ T40] audit: type=1400 audit(1776580826.648:129): avc: denied { read write } for pid=6387 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.126335][ T40] audit: type=1400 audit(1776580826.648:130): avc: denied { open } for pid=6387 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.133900][ T40] audit: type=1400 audit(1776580826.648:131): avc: denied { ioctl } for pid=6387 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.359772][ T5963] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.521415][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 103.527584][ T5963] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 103.531829][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 103.535788][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 103.540800][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 103.544969][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 103.548824][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.556805][ T5963] usb 5-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 103.560704][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.563980][ T5963] usb 5-1: Product: syz [ 103.565764][ T5963] usb 5-1: Manufacturer: syz [ 103.567797][ T5963] usb 5-1: SerialNumber: syz [ 103.575093][ T5963] usb 5-1: config 0 descriptor?? [ 103.579285][ T6388] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.609709][ T6029] Bluetooth: hci0: command tx timeout [ 103.790983][ T5963] smsusb:smsusb_probe: board id=8, interface number 0 [ 103.797174][ T5963] smsusb:siano_media_device_register: media controller created [ 103.801685][ T5963] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 103.803685][ T5963] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 103.806299][ T5963] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 103.810474][ T5963] ------------[ cut here ]------------ [ 103.812431][ T5963] !PageLargeKmalloc(page) [ 103.812438][ T5963] WARNING: mm/slub.c:6471 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:2/5963 [ 103.816993][ T5963] Modules linked in: [ 103.818642][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 103.822220][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.825749][ T5963] Workqueue: usb_hub_wq hub_event [ 103.827640][ T5963] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 103.829880][ T5963] Code: 28 90 0f 0b 90 80 3d 17 e7 59 0e 00 0f 84 87 32 ba fe 48 8b 74 24 28 48 89 ef e8 cc ef 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 4b 02 f4 8d 5b 5d 41 5c 41 [ 103.837061][ T5963] RSP: 0018:ffffc900027aed68 EFLAGS: 00010202 [ 103.839772][ T5963] RAX: 00000000000000ff RBX: ffffea00015a9880 RCX: 000000000000002e [ 103.842745][ T5963] RDX: 0000000000000000 RSI: ffff888056a62000 RDI: ffffea00015a9880 [ 103.845341][ T5963] RBP: ffff888056a62000 R08: 0000000000000005 R09: 0000000000000000 [ 103.848088][ T5963] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88802f370000 [ 103.850737][ T5963] R13: ffff888056c1d000 R14: dffffc0000000000 R15: ffff88802f3700f0 [ 103.853831][ T5963] FS: 0000000000000000(0000) GS:ffff8880d62ef000(0000) knlGS:0000000000000000 [ 103.856912][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.859400][ T5963] CR2: 0000001b2ff5ffff CR3: 000000002ecca000 CR4: 0000000000352ef0 [ 103.862097][ T5963] Call Trace: [ 103.863278][ T5963] [ 103.864384][ T5963] usb_free_urb.part.0+0xf8/0x110 [ 103.866465][ T5963] usb_free_urb+0x1f/0x30 [ 103.868215][ T5963] smsusb_term_device+0x108/0x200 [ 103.870363][ T5963] smsusb_init_device+0xb4e/0xbb0 [ 103.872019][ T5963] ? __pfx_smsusb_init_device+0x10/0x10 [ 103.873808][ T5963] ? kfree+0x1dd/0x6c0 [ 103.875160][ T5963] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.876919][ T5963] ? usb_clear_halt+0x61/0x160 [ 103.878489][ T5963] smsusb_probe+0xd7f/0xe1f [ 103.880189][ T5963] ? __pfx_smsusb_probe+0x10/0x10 [ 103.881849][ T5963] ? mark_held_locks+0x40/0x70 [ 103.883447][ T5963] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.885361][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.887220][ T5963] ? __pm_runtime_set_status+0x13c/0x970 [ 103.889096][ T5963] usb_probe_interface+0x303/0x8f0 [ 103.890851][ T5963] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.892695][ T5963] really_probe+0x241/0xa60 [ 103.894159][ T5963] __driver_probe_device+0x1de/0x400 [ 103.895862][ T5963] driver_probe_device+0x4c/0x1b0 [ 103.897409][ T5963] __device_attach_driver+0x1df/0x340 [ 103.899096][ T5963] ? __pfx___device_attach_driver+0x10/0x10 [ 103.901383][ T5963] bus_for_each_drv+0x159/0x1e0 [ 103.902983][ T5963] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.904939][ T5963] ? lockdep_hardirqs_on+0x78/0x100 [ 103.906622][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.908587][ T5963] __device_attach+0x1e4/0x4d0 [ 103.910281][ T5963] ? __pfx___device_attach+0x10/0x10 [ 103.912340][ T5963] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.914276][ T5963] device_initial_probe+0xaf/0xd0 [ 103.915888][ T5963] bus_probe_device+0x64/0x160 [ 103.917610][ T5963] device_add+0x11d9/0x1920 [ 103.919626][ T5963] ? __pfx_device_add+0x10/0x10 [ 103.921542][ T5963] ? usb_cache_string+0x20/0x140 [ 103.923549][ T5963] ? kfree+0x223/0x6c0 [ 103.925187][ T5963] usb_set_configuration+0xd97/0x1c60 [ 103.927315][ T5963] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.929863][ T5963] usb_generic_driver_probe+0xa1/0xe0 [ 103.931758][ T5963] usb_probe_device+0xef/0x400 [ 103.933316][ T5963] ? __pfx_usb_probe_device+0x10/0x10 [ 103.935048][ T5963] really_probe+0x241/0xa60 [ 103.936519][ T5963] __driver_probe_device+0x1de/0x400 [ 103.938233][ T5963] ? usb_driver_applicable+0x1c7/0x220 [ 103.940228][ T5963] driver_probe_device+0x4c/0x1b0 [ 103.942204][ T5963] __device_attach_driver+0x1df/0x340 [ 103.944370][ T5963] ? __pfx___device_attach_driver+0x10/0x10 [ 103.946712][ T5963] bus_for_each_drv+0x159/0x1e0 [ 103.948668][ T5963] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.950944][ T5963] ? lockdep_hardirqs_on+0x78/0x100 [ 103.952987][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.955304][ T5963] __device_attach+0x1e4/0x4d0 [ 103.957204][ T5963] ? __pfx___device_attach+0x10/0x10 [ 103.959430][ T5963] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.961464][ T5963] device_initial_probe+0xaf/0xd0 [ 103.963504][ T5963] bus_probe_device+0x64/0x160 [ 103.965424][ T5963] device_add+0x11d9/0x1920 [ 103.967249][ T5963] ? __pfx_device_add+0x10/0x10 [ 103.969216][ T5963] ? add_device_randomness+0xb7/0xf0 [ 103.971465][ T5963] usb_new_device.cold+0x685/0x115c [ 103.973528][ T5963] ? do_raw_spin_lock+0x128/0x260 [ 103.975562][ T5963] ? __pfx_usb_new_device+0x10/0x10 [ 103.977698][ T5963] ? mark_held_locks+0x40/0x70 [ 103.979658][ T5963] hub_event+0x314d/0x4af0 [ 103.981387][ T5963] ? __pfx_hub_event+0x10/0x10 [ 103.983273][ T5963] ? debug_print_object+0x260/0x2a0 [ 103.984971][ T5963] ? rcu_is_watching+0x12/0xc0 [ 103.986545][ T5963] process_one_work+0xa0e/0x1980 [ 103.988163][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 103.989974][ T5963] ? __pfx_hub_event+0x10/0x10 [ 103.991542][ T5963] worker_thread+0x5ef/0xe50 [ 103.993033][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 103.994694][ T5963] ? kthread+0x13a/0x450 [ 103.996063][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 103.997736][ T5963] kthread+0x370/0x450 [ 103.999069][ T5963] ? __pfx_kthread+0x10/0x10 [ 104.000748][ T5963] ret_from_fork+0x72b/0xd50 [ 104.002266][ T5963] ? __pfx_ret_from_fork+0x10/0x10 [ 104.004191][ T5963] ? __switch_to+0x800/0x1100 [ 104.005726][ T5963] ? __pfx_kthread+0x10/0x10 [ 104.007231][ T5963] ret_from_fork_asm+0x1a/0x30 [ 104.008811][ T5963] [ 104.010141][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.012524][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 104.015470][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.018667][ T5963] Workqueue: usb_hub_wq hub_event [ 104.020425][ T5963] Call Trace: [ 104.021614][ T5963] [ 104.022647][ T5963] dump_stack_lvl+0x100/0x190 [ 104.024131][ T5963] vpanic+0x552/0x970 [ 104.025356][ T5963] ? __pfx_vpanic+0x10/0x10 [ 104.026779][ T5963] panic+0xd1/0xe0 [ 104.028064][ T5963] ? __pfx_panic+0x10/0x10 [ 104.029676][ T5963] ? check_panic_on_warn+0x1f/0x90 [ 104.031478][ T5963] check_panic_on_warn.cold+0x19/0x34 [ 104.033428][ T5963] ? free_large_kmalloc+0xbf/0x100 [ 104.035204][ T5963] __warn.cold+0x191/0x328 [ 104.036579][ T5963] __report_bug+0x296/0x3d0 [ 104.038217][ T5963] ? free_large_kmalloc+0xbf/0x100 [ 104.040176][ T5963] ? __pfx___report_bug+0x10/0x10 [ 104.041987][ T5963] ? bus_for_each_drv+0x159/0x1e0 [ 104.043635][ T5963] ? __device_attach+0x1e4/0x4d0 [ 104.045213][ T5963] ? device_initial_probe+0xaf/0xd0 [ 104.046904][ T5963] ? bus_probe_device+0x64/0x160 [ 104.048518][ T5963] ? device_add+0x11d9/0x1920 [ 104.050024][ T5963] ? usb_new_device.cold+0x685/0x115c [ 104.051758][ T5963] ? hub_event+0x314d/0x4af0 [ 104.053277][ T5963] ? process_one_work+0xa0e/0x1980 [ 104.054926][ T5963] ? worker_thread+0x5ef/0xe50 [ 104.056460][ T5963] ? kthread+0x370/0x450 [ 104.057836][ T5963] ? ret_from_fork+0x72b/0xd50 [ 104.059392][ T5963] ? find_held_lock+0x2b/0x80 [ 104.060922][ T5963] ? smscore_unregister_device+0x537/0x7f0 [ 104.062817][ T5963] ? smscore_unregister_device+0x537/0x7f0 [ 104.064676][ T5963] ? free_large_kmalloc+0xbf/0x100 [ 104.066335][ T5963] report_bug+0xb2/0x220 [ 104.067729][ T5963] ? free_large_kmalloc+0xbf/0x100 [ 104.069364][ T5963] handle_bug+0x16a/0x2a0 [ 104.070783][ T5963] exc_invalid_op+0x17/0x50 [ 104.072253][ T5963] asm_exc_invalid_op+0x1a/0x20 [ 104.073845][ T5963] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 104.075678][ T5963] Code: 28 90 0f 0b 90 80 3d 17 e7 59 0e 00 0f 84 87 32 ba fe 48 8b 74 24 28 48 89 ef e8 cc ef 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 4b 02 f4 8d 5b 5d 41 5c 41 [ 104.081593][ T5963] RSP: 0018:ffffc900027aed68 EFLAGS: 00010202 [ 104.083556][ T5963] RAX: 00000000000000ff RBX: ffffea00015a9880 RCX: 000000000000002e [ 104.086053][ T5963] RDX: 0000000000000000 RSI: ffff888056a62000 RDI: ffffea00015a9880 [ 104.088698][ T5963] RBP: ffff888056a62000 R08: 0000000000000005 R09: 0000000000000000 [ 104.091259][ T5963] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88802f370000 [ 104.093747][ T5963] R13: ffff888056c1d000 R14: dffffc0000000000 R15: ffff88802f3700f0 [ 104.096258][ T5963] usb_free_urb.part.0+0xf8/0x110 [ 104.097891][ T5963] usb_free_urb+0x1f/0x30 [ 104.099290][ T5963] smsusb_term_device+0x108/0x200 [ 104.100912][ T5963] smsusb_init_device+0xb4e/0xbb0 [ 104.102507][ T5963] ? __pfx_smsusb_init_device+0x10/0x10 [ 104.104249][ T5963] ? kfree+0x1dd/0x6c0 [ 104.105589][ T5963] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 104.107365][ T5963] ? usb_clear_halt+0x61/0x160 [ 104.108924][ T5963] smsusb_probe+0xd7f/0xe1f [ 104.110405][ T5963] ? __pfx_smsusb_probe+0x10/0x10 [ 104.112026][ T5963] ? mark_held_locks+0x40/0x70 [ 104.113571][ T5963] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.115468][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.117329][ T5963] ? __pm_runtime_set_status+0x13c/0x970 [ 104.119139][ T5963] usb_probe_interface+0x303/0x8f0 [ 104.120782][ T5963] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.122592][ T5963] really_probe+0x241/0xa60 [ 104.124061][ T5963] __driver_probe_device+0x1de/0x400 [ 104.125748][ T5963] driver_probe_device+0x4c/0x1b0 [ 104.127364][ T5963] __device_attach_driver+0x1df/0x340 [ 104.129140][ T5963] ? __pfx___device_attach_driver+0x10/0x10 [ 104.131046][ T5963] bus_for_each_drv+0x159/0x1e0 [ 104.132576][ T5963] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.134297][ T5963] ? lockdep_hardirqs_on+0x78/0x100 [ 104.136000][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.137803][ T5963] __device_attach+0x1e4/0x4d0 [ 104.139280][ T5963] ? __pfx___device_attach+0x10/0x10 [ 104.141282][ T5963] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.142987][ T5963] device_initial_probe+0xaf/0xd0 [ 104.144779][ T5963] bus_probe_device+0x64/0x160 [ 104.146505][ T5963] device_add+0x11d9/0x1920 [ 104.148050][ T5963] ? __pfx_device_add+0x10/0x10 [ 104.149754][ T5963] ? usb_cache_string+0x20/0x140 [ 104.151364][ T5963] ? kfree+0x223/0x6c0 [ 104.152713][ T5963] usb_set_configuration+0xd97/0x1c60 [ 104.154473][ T5963] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 104.156445][ T5963] usb_generic_driver_probe+0xa1/0xe0 [ 104.158193][ T5963] usb_probe_device+0xef/0x400 [ 104.159763][ T5963] ? __pfx_usb_probe_device+0x10/0x10 [ 104.161777][ T5963] really_probe+0x241/0xa60 [ 104.163299][ T5963] __driver_probe_device+0x1de/0x400 [ 104.165016][ T5963] ? usb_driver_applicable+0x1c7/0x220 [ 104.166773][ T5963] driver_probe_device+0x4c/0x1b0 [ 104.168414][ T5963] __device_attach_driver+0x1df/0x340 [ 104.170113][ T5963] ? __pfx___device_attach_driver+0x10/0x10 [ 104.172020][ T5963] bus_for_each_drv+0x159/0x1e0 [ 104.173585][ T5963] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.175345][ T5963] ? lockdep_hardirqs_on+0x78/0x100 [ 104.177022][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.178939][ T5963] __device_attach+0x1e4/0x4d0 [ 104.180550][ T5963] ? __pfx___device_attach+0x10/0x10 [ 104.182199][ T5963] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.183912][ T5963] device_initial_probe+0xaf/0xd0 [ 104.185524][ T5963] bus_probe_device+0x64/0x160 [ 104.187094][ T5963] device_add+0x11d9/0x1920 [ 104.188583][ T5963] ? __pfx_device_add+0x10/0x10 [ 104.190134][ T5963] ? add_device_randomness+0xb7/0xf0 [ 104.191843][ T5963] usb_new_device.cold+0x685/0x115c [ 104.193524][ T5963] ? do_raw_spin_lock+0x128/0x260 [ 104.195152][ T5963] ? __pfx_usb_new_device+0x10/0x10 [ 104.196812][ T5963] ? mark_held_locks+0x40/0x70 [ 104.198463][ T5963] hub_event+0x314d/0x4af0 [ 104.199934][ T5963] ? __pfx_hub_event+0x10/0x10 [ 104.201473][ T5963] ? debug_print_object+0x260/0x2a0 [ 104.203178][ T5963] ? rcu_is_watching+0x12/0xc0 [ 104.204745][ T5963] process_one_work+0xa0e/0x1980 [ 104.206359][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 104.208114][ T5963] ? __pfx_hub_event+0x10/0x10 [ 104.209650][ T5963] worker_thread+0x5ef/0xe50 [ 104.211154][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 104.212792][ T5963] ? kthread+0x13a/0x450 [ 104.214149][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 104.215785][ T5963] kthread+0x370/0x450 [ 104.217089][ T5963] ? __pfx_kthread+0x10/0x10 [ 104.218615][ T5963] ret_from_fork+0x72b/0xd50 [ 104.220126][ T5963] ? __pfx_ret_from_fork+0x10/0x10 [ 104.221764][ T5963] ? __switch_to+0x800/0x1100 [ 104.223300][ T5963] ? __pfx_kthread+0x10/0x10 [ 104.224782][ T5963] ret_from_fork_asm+0x1a/0x30 [ 104.226358][ T5963] [ 104.228070][ T5963] Kernel Offset: disabled [ 104.229450][ T5963] Rebooting in 86400 seconds..