[ 72.801142][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 72.801154][ T40] audit: type=1400 audit(1772937202.396:117): avc: denied { transition } for pid=6132 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.812623][ T40] audit: type=1400 audit(1772937202.396:118): avc: denied { noatsecure } for pid=6132 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.820901][ T40] audit: type=1400 audit(1772937202.406:119): avc: denied { rlimitinh } for pid=6132 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.829508][ T40] audit: type=1400 audit(1772937202.406:120): avc: denied { siginh } for pid=6132 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.327368][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.329508][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:46257' (ED25519) to the list of known hosts. 2026/03/08 02:33:28 parsed 1 programs [ 80.713539][ T40] audit: type=1400 audit(1772937210.316:121): avc: denied { read write } for pid=6170 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.722636][ T40] audit: type=1400 audit(1772937210.316:122): avc: denied { open } for pid=6170 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.813353][ T40] audit: type=1400 audit(1772937210.416:123): avc: denied { unlink } for pid=6170 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 81.114574][ T40] audit: type=1400 audit(1772937210.716:124): avc: denied { relabelto } for pid=6184 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 81.777779][ T6170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.546797][ T5290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.549755][ T5290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.555227][ T5290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.558112][ T5290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.561110][ T5290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.489372][ T40] audit: type=1401 audit(1772937214.086:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 84.597111][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.600064][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.631613][ T675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.635237][ T675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.817598][ T6233] chnl_net:caif_netlink_parms(): no params data found [ 84.919266][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.923074][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.926252][ T6233] bridge_slave_0: entered allmulticast mode [ 84.930298][ T6233] bridge_slave_0: entered promiscuous mode [ 84.935184][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.938409][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.941603][ T6233] bridge_slave_1: entered allmulticast mode [ 84.945839][ T6233] bridge_slave_1: entered promiscuous mode [ 84.983047][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.987489][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.001757][ T6233] team0: Port device team_slave_0 added [ 85.004984][ T6233] team0: Port device team_slave_1 added [ 85.020200][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.023500][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.031756][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.036111][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.038359][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.046795][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.077164][ T6233] hsr_slave_0: entered promiscuous mode [ 85.079752][ T6233] hsr_slave_1: entered promiscuous mode [ 85.639033][ T6233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.643184][ T6233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.649285][ T6233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.656172][ T6233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.712670][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.721362][ T6233] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.729698][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.732205][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.739654][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.742198][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.779420][ T40] audit: type=1400 audit(1772937215.376:126): avc: denied { sys_module } for pid=6233 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.841174][ T6233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.875160][ T6233] veth0_vlan: entered promiscuous mode [ 85.879952][ T6233] veth1_vlan: entered promiscuous mode [ 85.895685][ T6233] veth0_macvtap: entered promiscuous mode [ 85.899753][ T6233] veth1_macvtap: entered promiscuous mode [ 85.909285][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.914385][ T6233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.919512][ T1160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.926354][ T1160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.929975][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.934181][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.006421][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.098539][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.181519][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.255511][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.563968][ T841] cfg80211: failed to load regulatory.db 2026/03/08 02:33:36 executed programs: 0 [ 86.872439][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.875519][ T5973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.879206][ T5973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.883274][ T5973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.886830][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.968490][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 87.008462][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.010983][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.013916][ T6342] bridge_slave_0: entered allmulticast mode [ 87.016734][ T6342] bridge_slave_0: entered promiscuous mode [ 87.019870][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.022605][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.025054][ T6342] bridge_slave_1: entered allmulticast mode [ 87.027779][ T6342] bridge_slave_1: entered promiscuous mode [ 87.044891][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.049485][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.065913][ T6342] team0: Port device team_slave_0 added [ 87.069107][ T6342] team0: Port device team_slave_1 added [ 87.084269][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.086638][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.097105][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.102817][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.105259][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.114102][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.153481][ T6342] hsr_slave_0: entered promiscuous mode [ 87.156702][ T6342] hsr_slave_1: entered promiscuous mode [ 87.159675][ T6342] debugfs: 'hsr0' already exists in 'hsr' [ 87.162168][ T6342] Cannot create hsr debugfs directory [ 88.951907][ T5290] Bluetooth: hci0: command tx timeout [ 89.072037][ T13] bridge_slave_1: left allmulticast mode [ 89.074472][ T13] bridge_slave_1: left promiscuous mode [ 89.077111][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.083984][ T13] bridge_slave_0: left allmulticast mode [ 89.086075][ T13] bridge_slave_0: left promiscuous mode [ 89.088466][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.213038][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.216873][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.221810][ T13] bond0 (unregistering): Released all slaves [ 89.325534][ T13] hsr_slave_0: left promiscuous mode [ 89.328628][ T13] hsr_slave_1: left promiscuous mode [ 89.333119][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.336270][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.341200][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.344523][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.351694][ T13] veth1_macvtap: left promiscuous mode [ 89.354242][ T13] veth0_macvtap: left promiscuous mode [ 89.356676][ T13] veth1_vlan: left promiscuous mode [ 89.359027][ T13] veth0_vlan: left promiscuous mode [ 89.460432][ T13] team0 (unregistering): Port device team_slave_1 removed [ 89.478540][ T13] team0 (unregistering): Port device team_slave_0 removed [ 89.944947][ T6342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.949200][ T6342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.953094][ T6342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.957077][ T6342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.001258][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.013034][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.017618][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.020282][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.028133][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.030478][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.137963][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.253662][ T6342] veth0_vlan: entered promiscuous mode [ 90.261305][ T6342] veth1_vlan: entered promiscuous mode [ 90.282032][ T6342] veth0_macvtap: entered promiscuous mode [ 90.287396][ T6342] veth1_macvtap: entered promiscuous mode [ 90.297930][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.305986][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.314809][ T675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.323744][ T675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.327503][ T675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331800][ T675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.386853][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.390282][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.407926][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.411450][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.435168][ T40] audit: type=1400 audit(1772937220.036:127): avc: denied { read write } for pid=6384 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.438762][ T6386] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 90.439150][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.439508][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.443662][ T40] audit: type=1400 audit(1772937220.036:128): avc: denied { open } for pid=6384 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.445182][ T6386] CPU: 3 UID: 0 PID: 6386 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 90.445196][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.445203][ T6386] Call Trace: [ 90.445207][ T6386] [ 90.445211][ T6386] dump_stack_lvl+0x100/0x190 [ 90.445231][ T6386] sysfs_warn_dup.cold+0x1c/0x28 [ 90.445246][ T6386] sysfs_create_dir_ns+0x24b/0x2b0 [ 90.445261][ T6386] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.445276][ T6386] ? find_held_lock+0x2b/0x80 [ 90.445289][ T6386] ? kobject_add_internal+0x25f/0x930 [ 90.445303][ T6386] ? kobject_add_internal+0x25f/0x930 [ 90.445317][ T6386] ? do_raw_spin_unlock+0x145/0x1e0 [ 90.445329][ T6386] kobject_add_internal+0x2c8/0x930 [ 90.445344][ T6386] kobject_init_and_add+0x121/0x180 [ 90.445359][ T6386] ? __pfx_kobject_init_and_add+0x10/0x10 [ 90.445379][ T6386] lookup_or_create_module_kobject+0xf3/0x1a0 [ 90.445395][ T6386] module_add_driver+0x23a/0x420 [ 90.445412][ T6386] bus_add_driver+0x34a/0x5b0 [ 90.445425][ T6386] driver_register+0x1e2/0x360 [ 90.445438][ T6386] ? rcu_is_watching+0x12/0xc0 [ 90.445451][ T6386] usb_gadget_register_driver_owner+0x132/0x210 [ 90.445467][ T6386] raw_ioctl+0x1a85/0x2b80 [ 90.445484][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 90.445496][ T6386] ? selinux_file_ioctl+0x139/0x290 [ 90.445512][ T6386] ? selinux_file_ioctl+0xb4/0x290 [ 90.445525][ T6386] ? __pfx_raw_ioctl+0x10/0x10 [ 90.445539][ T6386] __x64_sys_ioctl+0x18e/0x210 [ 90.445555][ T6386] do_syscall_64+0x106/0xf80 [ 90.445566][ T6386] ? clear_bhb_loop+0x40/0x90 [ 90.445578][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.445588][ T6386] RIP: 0033:0x7f7ac2d9abcb [ 90.445598][ T6386] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 90.445608][ T6386] RSP: 002b:00007f7ac3b78f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.445618][ T6386] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7ac2d9abcb [ 90.445624][ T6386] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 90.445630][ T6386] RBP: 00007f7ac3b79fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 90.445636][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.445641][ T6386] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.445653][ T6386] [ 90.445664][ T6386] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 90.447878][ T40] audit: type=1400 audit(1772937220.036:129): avc: denied { ioctl } for pid=6384 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.450330][ T6386] Adding module 'raw_gadget' to sysfs failed (-17), the system may be unstable. [ 90.681816][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.831983][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 90.837324][ T10] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 90.840899][ T10] usb 5-1: config 0 has no interface number 0 [ 90.843977][ T10] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 90.848257][ T10] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 90.852593][ T10] usb 5-1: config 0 interface 54 has no altsetting 0 [ 90.857149][ T10] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 90.860489][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.864030][ T10] usb 5-1: Product: syz [ 90.865872][ T10] usb 5-1: Manufacturer: syz [ 90.867579][ T10] usb 5-1: SerialNumber: syz [ 90.873299][ T10] usb 5-1: config 0 descriptor?? [ 90.876994][ T6386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.880266][ T6386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.031855][ T5290] Bluetooth: hci0: command tx timeout [ 91.087762][ T10] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 91.106845][ T10] scsi host6: usb-storage 5-1:0.54 [ 91.203747][ T10] ums_eneub6250 5-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 91.209529][ T10] usb 5-1: USB disconnect, device number 2 [ 91.599885][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.604478][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.831963][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.981871][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 91.986259][ T5955] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 91.989590][ T5955] usb 5-1: config 0 has no interface number 0 [ 91.991641][ T5955] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 91.994986][ T5955] usb 5-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 91.998130][ T5955] usb 5-1: config 0 interface 54 has no altsetting 0 [ 92.003146][ T5955] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 92.006775][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.009999][ T5955] usb 5-1: Product: syz [ 92.011602][ T5955] usb 5-1: Manufacturer: syz [ 92.013207][ T5955] usb 5-1: SerialNumber: syz [ 92.016263][ T5955] usb 5-1: config 0 descriptor?? [ 92.018699][ T6393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.021133][ T6393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.025611][ T5955] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 92.030587][ T5955] scsi host6: usb-storage 5-1:0.54 [ 93.122454][ T5290] Bluetooth: hci0: command tx timeout [ 93.126013][ T6397] ------------[ cut here ]------------ [ 93.127901][ T6397] URB ffff88802dd29e00 submitted while active [ 93.129919][ T6397] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#2: usb-storage/6397 [ 93.133324][ T6397] Modules linked in: [ 93.134727][ T6397] CPU: 2 UID: 0 PID: 6397 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 93.137769][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.141079][ T6397] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 93.142991][ T6397] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 3a b8 fa 48 8d 3d a6 b8 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 93.149408][ T6397] RSP: 0018:ffffc90003ea76d8 EFLAGS: 00010293 [ 93.151388][ T6397] RAX: 0000000000000000 RBX: ffff88802dd29e00 RCX: dffffc0000000000 [ 93.154187][ T6397] RDX: ffff88802c0524c0 RSI: ffff88802dd29e00 RDI: ffffffff90e63840 [ 93.156809][ T6397] RBP: 1ffff920007d4eee R08: 0000000000000002 R09: 0000000000000000 [ 93.159411][ T6397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032874ee8 [ 93.162087][ T6397] R13: ffff888032874e60 R14: ffffc90003ea7790 R15: ffff88802dd29e00 [ 93.164701][ T6397] FS: 0000000000000000(0000) GS:ffff8880d6547000(0000) knlGS:0000000000000000 [ 93.167641][ T6397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.169844][ T6397] CR2: 000055a1577f39d8 CR3: 000000002f3b7000 CR4: 0000000000352ef0 [ 93.172526][ T6397] Call Trace: [ 93.173675][ T6397] [ 93.174711][ T6397] ? lockdep_init_map_type+0x5c/0x250 [ 93.176501][ T6397] ? lockdep_init_map_type+0x5c/0x250 [ 93.178300][ T6397] ? __init_swait_queue_head+0xca/0x150 [ 93.180165][ T6397] usb_stor_msg_common+0x241/0x560 [ 93.181924][ T6397] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 93.183806][ T6397] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 93.185704][ T6397] ene_send_scsi_cmd+0x12b/0x610 [ 93.187385][ T6397] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 93.189215][ T6397] ? find_held_lock+0x2b/0x80 [ 93.190814][ T6397] ? finish_task_switch.isra.0+0x200/0xb80 [ 93.192856][ T6397] ? finish_task_switch.isra.0+0x200/0xb80 [ 93.194806][ T6397] ? __asan_memset+0x23/0x50 [ 93.196367][ T6397] ene_transport+0x4e8/0x3720 [ 93.197969][ T6397] ? trace_sched_exit_tp+0x13a/0x180 [ 93.199741][ T6397] ? look_up_lock_class+0x55/0x120 [ 93.201455][ T6397] ? register_lock_class+0x40/0x560 [ 93.203286][ T6397] ? __pfx_ene_transport+0x10/0x10 [ 93.205005][ T6397] ? __lock_acquire+0x4a5/0x2630 [ 93.206671][ T6397] ? find_held_lock+0x2b/0x80 [ 93.208262][ T6397] ? lock_acquire+0x1cf/0x380 [ 93.209927][ T6397] ? rcu_is_watching+0x12/0xc0 [ 93.211549][ T6397] usb_stor_invoke_transport+0xe7/0x15c0 [ 93.213484][ T6397] ? __lock_acquire+0x4a5/0x2630 [ 93.215161][ T6397] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 93.217260][ T6397] ? __pfx___mutex_lock+0x10/0x10 [ 93.218954][ T6397] ? __wait_for_common+0x1f3/0x4c0 [ 93.220707][ T6397] ? do_raw_spin_lock+0x128/0x260 [ 93.222454][ T6397] ? find_held_lock+0x2b/0x80 [ 93.224047][ T6397] ? mark_held_locks+0x40/0x70 [ 93.225664][ T6397] usb_stor_control_thread+0x5e4/0xae0 [ 93.227517][ T6397] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.229505][ T6397] ? rcu_is_watching+0x12/0xc0 [ 93.231125][ T6397] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.233098][ T6397] ? lockdep_hardirqs_on+0x78/0x100 [ 93.234838][ T6397] ? __kthread_parkme+0x18c/0x230 [ 93.236533][ T6397] ? kthread+0x13a/0x450 [ 93.237973][ T6397] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.239970][ T6397] kthread+0x370/0x450 [ 93.241352][ T6397] ? __pfx_kthread+0x10/0x10 [ 93.242953][ T6397] ret_from_fork+0x754/0xd80 [ 93.244509][ T6397] ? __pfx_ret_from_fork+0x10/0x10 [ 93.246221][ T6397] ? __switch_to+0x7b4/0x1120 [ 93.247973][ T6397] ? __pfx_kthread+0x10/0x10 [ 93.249509][ T6397] ret_from_fork_asm+0x1a/0x30 [ 93.251085][ T6397] [ 93.252340][ T6397] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.254696][ T6397] CPU: 2 UID: 0 PID: 6397 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 93.257688][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.260921][ T6397] Call Trace: [ 93.262020][ T6397] [ 93.263001][ T6397] dump_stack_lvl+0x100/0x190 [ 93.264544][ T6397] vpanic+0x552/0x970 [ 93.265853][ T6397] ? __pfx_vpanic+0x10/0x10 [ 93.267359][ T6397] panic+0xd1/0xe0 [ 93.268588][ T6397] ? __pfx_panic+0x10/0x10 [ 93.270048][ T6397] ? check_panic_on_warn+0x1f/0x90 [ 93.271723][ T6397] check_panic_on_warn.cold+0x19/0x34 [ 93.273463][ T6397] ? usb_submit_urb+0x15fa/0x1910 [ 93.275110][ T6397] __warn.cold+0x191/0x348 [ 93.276572][ T6397] __report_bug+0x296/0x3d0 [ 93.278062][ T6397] ? usb_submit_urb+0x15fa/0x1910 [ 93.279725][ T6397] ? __pfx___report_bug+0x10/0x10 [ 93.281361][ T6397] ? irqentry_exit+0x180/0x670 [ 93.282930][ T6397] ? lockdep_hardirqs_on+0x78/0x100 [ 93.284627][ T6397] ? usb_submit_urb+0x15fd/0x1910 [ 93.286269][ T6397] report_bug_entry+0xe1/0x290 [ 93.287840][ T6397] ? usb_submit_urb+0x15fd/0x1910 [ 93.289494][ T6397] handle_bug+0x1cd/0x2a0 [ 93.290912][ T6397] exc_invalid_op+0x17/0x50 [ 93.292400][ T6397] asm_exc_invalid_op+0x1a/0x20 [ 93.293981][ T6397] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 93.295815][ T6397] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 cd 3a b8 fa 48 8d 3d a6 b8 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 93.301954][ T6397] RSP: 0018:ffffc90003ea76d8 EFLAGS: 00010293 [ 93.303929][ T6397] RAX: 0000000000000000 RBX: ffff88802dd29e00 RCX: dffffc0000000000 [ 93.306465][ T6397] RDX: ffff88802c0524c0 RSI: ffff88802dd29e00 RDI: ffffffff90e63840 [ 93.309010][ T6397] RBP: 1ffff920007d4eee R08: 0000000000000002 R09: 0000000000000000 [ 93.311578][ T6397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032874ee8 [ 93.314114][ T6397] R13: ffff888032874e60 R14: ffffc90003ea7790 R15: ffff88802dd29e00 [ 93.316658][ T6397] ? usb_submit_urb+0x15f3/0x1910 [ 93.318307][ T6397] ? lockdep_init_map_type+0x5c/0x250 [ 93.320131][ T6397] ? lockdep_init_map_type+0x5c/0x250 [ 93.321870][ T6397] ? __init_swait_queue_head+0xca/0x150 [ 93.323671][ T6397] usb_stor_msg_common+0x241/0x560 [ 93.325340][ T6397] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 93.327175][ T6397] usb_stor_bulk_transfer_buf+0x17c/0x420 [ 93.329018][ T6397] ene_send_scsi_cmd+0x12b/0x610 [ 93.330654][ T6397] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 93.332419][ T6397] ? find_held_lock+0x2b/0x80 [ 93.333959][ T6397] ? finish_task_switch.isra.0+0x200/0xb80 [ 93.335859][ T6397] ? finish_task_switch.isra.0+0x200/0xb80 [ 93.337753][ T6397] ? __asan_memset+0x23/0x50 [ 93.339277][ T6397] ene_transport+0x4e8/0x3720 [ 93.340814][ T6397] ? trace_sched_exit_tp+0x13a/0x180 [ 93.342531][ T6397] ? look_up_lock_class+0x55/0x120 [ 93.344194][ T6397] ? register_lock_class+0x40/0x560 [ 93.345875][ T6397] ? __pfx_ene_transport+0x10/0x10 [ 93.347548][ T6397] ? __lock_acquire+0x4a5/0x2630 [ 93.349189][ T6397] ? find_held_lock+0x2b/0x80 [ 93.350732][ T6397] ? lock_acquire+0x1cf/0x380 [ 93.352275][ T6397] ? rcu_is_watching+0x12/0xc0 [ 93.353832][ T6397] usb_stor_invoke_transport+0xe7/0x15c0 [ 93.355656][ T6397] ? __lock_acquire+0x4a5/0x2630 [ 93.357283][ T6397] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 93.359273][ T6397] ? __pfx___mutex_lock+0x10/0x10 [ 93.360905][ T6397] ? __wait_for_common+0x1f3/0x4c0 [ 93.362568][ T6397] ? do_raw_spin_lock+0x128/0x260 [ 93.364225][ T6397] ? find_held_lock+0x2b/0x80 [ 93.365762][ T6397] ? mark_held_locks+0x40/0x70 [ 93.367343][ T6397] usb_stor_control_thread+0x5e4/0xae0 [ 93.369118][ T6397] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.371076][ T6397] ? rcu_is_watching+0x12/0xc0 [ 93.372636][ T6397] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.374512][ T6397] ? lockdep_hardirqs_on+0x78/0x100 [ 93.376204][ T6397] ? __kthread_parkme+0x18c/0x230 [ 93.377851][ T6397] ? kthread+0x13a/0x450 [ 93.379239][ T6397] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 93.381183][ T6397] kthread+0x370/0x450 [ 93.382517][ T6397] ? __pfx_kthread+0x10/0x10 [ 93.384028][ T6397] ret_from_fork+0x754/0xd80 [ 93.385530][ T6397] ? __pfx_ret_from_fork+0x10/0x10 [ 93.387192][ T6397] ? __switch_to+0x7b4/0x1120 [ 93.388716][ T6397] ? __pfx_kthread+0x10/0x10 [ 93.390232][ T6397] ret_from_fork_asm+0x1a/0x30 [ 93.391797][ T6397] [ 93.393475][ T6397] Kernel Offset: disabled [ 93.394892][ T6397] Rebooting in 86400 seconds..