[ 90.695392][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:43033' (ED25519) to the list of known hosts.
2025/09/11 02:14:33 parsed 1 programs
[ 97.956821][ T40] audit: type=1400 audit(1757556876.234:115): avc: denied { unlink } for pid=6200 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 99.310576][ T6200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 101.847012][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.851112][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.855271][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.859348][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.862919][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.229303][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.232324][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.249634][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.252166][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.481499][ T40] audit: type=1401 audit(1757556881.754:116): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 103.900767][ T6279] chnl_net:caif_netlink_parms(): no params data found
[ 104.014121][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.016938][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.019778][ T6279] bridge_slave_0: entered allmulticast mode
[ 104.023117][ T6279] bridge_slave_0: entered promiscuous mode
[ 104.027835][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.031048][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.034145][ T6279] bridge_slave_1: entered allmulticast mode
[ 104.037996][ T6279] bridge_slave_1: entered promiscuous mode
[ 104.076666][ T6279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.085196][ T6279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.125244][ T6279] team0: Port device team_slave_0 added
[ 104.128470][ T6279] team0: Port device team_slave_1 added
[ 104.163024][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.167733][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.178750][ T6279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.237795][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.240371][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.249837][ T6279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.293051][ T6279] hsr_slave_0: entered promiscuous mode
[ 104.295390][ T6279] hsr_slave_1: entered promiscuous mode
[ 104.830068][ T6279] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.834547][ T6279] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.838701][ T6279] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.843056][ T6279] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.883276][ T6279] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.894530][ T6279] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.899744][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.902378][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.911837][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.915289][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.032877][ T6279] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.069693][ T6279] veth0_vlan: entered promiscuous mode
[ 105.077711][ T6279] veth1_vlan: entered promiscuous mode
[ 105.097179][ T6279] veth0_macvtap: entered promiscuous mode
[ 105.100679][ T6279] veth1_macvtap: entered promiscuous mode
[ 105.111504][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.118081][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.123391][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.126387][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.132050][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.135382][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/09/11 02:14:43 executed programs: 0
[ 105.202828][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.208641][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.211805][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.219398][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.222742][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 105.239183][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.332338][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.358454][ T6334] chnl_net:caif_netlink_parms(): no params data found
[ 105.419888][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.464694][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.466987][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.469358][ T6334] bridge_slave_0: entered allmulticast mode
[ 105.473080][ T6334] bridge_slave_0: entered promiscuous mode
[ 105.478078][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.480378][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.482936][ T6334] bridge_slave_1: entered allmulticast mode
[ 105.487868][ T6334] bridge_slave_1: entered promiscuous mode
[ 105.498315][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.559151][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 105.565182][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.613317][ T6334] team0: Port device team_slave_0 added
[ 105.618413][ T6334] team0: Port device team_slave_1 added
[ 105.660466][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.663344][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.671831][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.676873][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.679091][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.689539][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.725014][ T6334] hsr_slave_0: entered promiscuous mode
[ 105.727208][ T6334] hsr_slave_1: entered promiscuous mode
[ 105.729250][ T6334] debugfs: 'hsr0' already exists in 'hsr'
[ 105.731070][ T6334] Cannot create hsr debugfs directory
[ 107.254445][ T63] Bluetooth: hci0: command tx timeout
[ 108.673683][ T12] bridge_slave_1: left allmulticast mode
[ 108.676568][ T12] bridge_slave_1: left promiscuous mode
[ 108.679402][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.685804][ T12] bridge_slave_0: left allmulticast mode
[ 108.688145][ T12] bridge_slave_0: left promiscuous mode
[ 108.690708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.917487][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 108.922007][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 108.925745][ T12] bond0 (unregistering): Released all slaves
[ 109.073331][ T12] hsr_slave_0: left promiscuous mode
[ 109.077890][ T12] hsr_slave_1: left promiscuous mode
[ 109.080952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 109.084518][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 109.088497][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 109.091808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 109.118125][ T12] veth1_macvtap: left promiscuous mode
[ 109.120541][ T12] veth0_macvtap: left promiscuous mode
[ 109.123237][ T12] veth1_vlan: left promiscuous mode
[ 109.125875][ T12] veth0_vlan: left promiscuous mode
[ 109.334073][ T63] Bluetooth: hci0: command tx timeout
[ 109.490398][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 109.529113][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 110.251608][ T6334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.256606][ T6334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.260890][ T6334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.268939][ T6334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.316739][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.325993][ T6334] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.331962][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.334988][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.341830][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.344263][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.448754][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.474001][ T6334] veth0_vlan: entered promiscuous mode
[ 110.478896][ T6334] veth1_vlan: entered promiscuous mode
[ 110.492945][ T6334] veth0_macvtap: entered promiscuous mode
[ 110.497771][ T6334] veth1_macvtap: entered promiscuous mode
[ 110.506190][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.511783][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.517958][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.521436][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.526986][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.529860][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.563920][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.566549][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.583274][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.585965][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/11 02:14:48 executed programs: 2
[ 110.606152][ T40] audit: type=1400 audit(1757556888.884:117): avc: denied { read write } for pid=6414 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 110.617061][ T40] audit: type=1400 audit(1757556888.884:118): avc: denied { open } for pid=6414 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 110.625132][ T40] audit: type=1400 audit(1757556888.884:119): avc: denied { ioctl } for pid=6414 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 110.853575][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 111.016427][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 111.021728][ T54] usb 5-1: config 131 interface 0 altsetting 67 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 111.025494][ T54] usb 5-1: config 131 interface 0 has no altsetting 0
[ 111.029560][ T54] usb 5-1: New USB device found, idVendor=2040, idProduct=200a, bcdDevice=27.2a
[ 111.032717][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 111.035291][ T54] usb 5-1: Product: syz
[ 111.036634][ T54] usb 5-1: Manufacturer: syz
[ 111.038096][ T54] usb 5-1: SerialNumber: syz
[ 111.246786][ T54] smsusb:smsusb_probe: board id=9, interface number 0
[ 111.253370][ T54] smsusb:siano_media_device_register: media controller created
[ 111.257004][ T54] usb 5-1: BOGUS urb xfer, pipe 3 != type 1
[ 111.258892][ T54] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[ 111.261292][ T54] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[ 111.264608][ T54] ------------[ cut here ]------------
[ 111.266344][ T54] WARNING: CPU: 3 PID: 54 at mm/slub.c:4805 free_large_kmalloc+0x114/0x180
[ 111.269031][ T54] Modules linked in:
[ 111.270458][ T54] CPU: 3 UID: 0 PID: 54 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full)
[ 111.274645][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 111.277967][ T54] Workqueue: usb_hub_wq hub_event
[ 111.279566][ T54] RIP: 0010:free_large_kmalloc+0x114/0x180
[ 111.281400][ T54] Code: 00 00 00 48 89 df e8 ab cc 13 00 e8 36 d6 ac ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 90 c0 c9 8d e8 f0 9f ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 14 e6 e3 8d 48 89 df 5b 5d 41 5c 41 5d e9 d4 9f
[ 111.287534][ T54] RSP: 0018:ffffc90000a7edb0 EFLAGS: 00010202
[ 111.289437][ T54] RAX: 00fff00000000000 RBX: ffffea0001459880 RCX: ffffffff816cb6ee
[ 111.291948][ T54] RDX: 00000000000000ff RSI: ffff888051662000 RDI: ffffea0001459880
[ 111.294564][ T54] RBP: ffff888051662000 R08: 0000000000000007 R09: 0000000000000000
[ 111.297037][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805005f000
[ 111.299497][ T54] R13: ffff88803612c000 R14: dffffc0000000000 R15: ffff88805005f0f0
[ 111.301951][ T54] FS: 0000000000000000(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000
[ 111.304783][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 111.306871][ T54] CR2: 00007fff0b2ef000 CR3: 0000000026919000 CR4: 0000000000352ef0
[ 111.309339][ T54] Call Trace:
[ 111.310435][ T54]
[ 111.311386][ T54] usb_free_urb.part.0+0xe5/0x100
[ 111.312965][ T54] usb_free_urb+0x1f/0x30
[ 111.314402][ T54] smsusb_term_device+0x108/0x1e0
[ 111.316007][ T54] smsusb_init_device+0xaa0/0xe00
[ 111.317586][ T54] ? __pfx_smsusb_init_device+0x10/0x10
[ 111.319347][ T54] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 111.321088][ T54] ? usb_clear_halt+0xb5/0x160
[ 111.322590][ T54] smsusb_probe+0x5d3/0x1090
[ 111.324276][ T54] ? __pfx_smsusb_probe+0x10/0x10
[ 111.325880][ T54] ? mark_held_locks+0x49/0x80
[ 111.327459][ T54] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 111.329290][ T54] ? __pm_runtime_set_status+0x13c/0xa80
[ 111.331090][ T54] usb_probe_interface+0x303/0xa40
[ 111.332838][ T54] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.334727][ T54] really_probe+0x241/0xa90
[ 111.336186][ T54] __driver_probe_device+0x1de/0x440
[ 111.337863][ T54] driver_probe_device+0x4c/0x1b0
[ 111.339463][ T54] __device_attach_driver+0x1df/0x310
[ 111.341178][ T54] ? __pfx___device_attach_driver+0x10/0x10
[ 111.343041][ T54] bus_for_each_drv+0x159/0x1e0
[ 111.344634][ T54] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.346352][ T54] ? lockdep_hardirqs_on+0x7c/0x110
[ 111.348011][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 111.349845][ T54] __device_attach+0x1e4/0x4b0
[ 111.351384][ T54] ? __pfx___device_attach+0x10/0x10
[ 111.353040][ T54] ? do_raw_spin_unlock+0x172/0x230
[ 111.354740][ T54] bus_probe_device+0x17f/0x1c0
[ 111.356322][ T54] device_add+0x1148/0x1aa0
[ 111.357865][ T54] ? __pfx_device_add+0x10/0x10
[ 111.359463][ T54] ? mark_held_locks+0x49/0x80
[ 111.361049][ T54] usb_set_configuration+0x1187/0x1e20
[ 111.362804][ T54] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 111.364795][ T54] usb_generic_driver_probe+0xb1/0x110
[ 111.366555][ T54] usb_probe_device+0xec/0x3e0
[ 111.368090][ T54] ? __pfx_usb_probe_device+0x10/0x10
[ 111.369789][ T54] really_probe+0x241/0xa90
[ 111.371275][ T54] __driver_probe_device+0x1de/0x440
[ 111.372941][ T54] ? usb_driver_applicable+0x1c7/0x220
[ 111.374765][ T54] driver_probe_device+0x4c/0x1b0
[ 111.376565][ T54] __device_attach_driver+0x1df/0x310
[ 111.378385][ T54] ? __pfx___device_attach_driver+0x10/0x10
[ 111.380264][ T54] bus_for_each_drv+0x159/0x1e0
[ 111.381847][ T54] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.383630][ T54] ? lockdep_hardirqs_on+0x7c/0x110
[ 111.385437][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 111.387418][ T54] __device_attach+0x1e4/0x4b0
[ 111.389118][ T54] ? __pfx___device_attach+0x10/0x10
[ 111.391023][ T54] ? do_raw_spin_unlock+0x172/0x230
[ 111.392876][ T54] bus_probe_device+0x17f/0x1c0
[ 111.394848][ T54] device_add+0x1148/0x1aa0
[ 111.396442][ T54] ? __pfx_device_add+0x10/0x10
[ 111.398250][ T54] ? add_device_randomness+0xb7/0xf0
[ 111.400166][ T54] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 111.402559][ T54] usb_new_device+0xd07/0x1a60
[ 111.404614][ T54] ? do_raw_spin_lock+0x12c/0x2b0
[ 111.406320][ T54] ? __pfx_usb_new_device+0x10/0x10
[ 111.408162][ T54] ? mark_held_locks+0x49/0x80
[ 111.409906][ T54] hub_event+0x2f34/0x4fe0
[ 111.411703][ T54] ? __pfx_hub_event+0x10/0x10
[ 111.413427][ T54] ? assoc_array_gc+0x1440/0x15b0
[ 111.415456][ T54] ? rcu_is_watching+0x12/0xc0
[ 111.416852][ T63] Bluetooth: hci0: command tx timeout
[ 111.417156][ T54] process_one_work+0x9cc/0x1b70
[ 111.421018][ T54] ? __pfx_hcd_resume_work+0x10/0x10
[ 111.422862][ T54] ? __pfx_process_one_work+0x10/0x10
[ 111.424863][ T54] ? assign_work+0x1a0/0x250
[ 111.426550][ T54] worker_thread+0x6c8/0xf10
[ 111.428234][ T54] ? __pfx_worker_thread+0x10/0x10
[ 111.430280][ T54] kthread+0x3c2/0x780
[ 111.431828][ T54] ? __pfx_kthread+0x10/0x10
[ 111.433513][ T54] ? rcu_is_watching+0x12/0xc0
[ 111.435371][ T54] ? __pfx_kthread+0x10/0x10
[ 111.437223][ T54] ret_from_fork+0x5d4/0x6f0
[ 111.438841][ T54] ? __pfx_kthread+0x10/0x10
[ 111.440652][ T54] ret_from_fork_asm+0x1a/0x30
[ 111.442366][ T54]
[ 111.443556][ T54] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 111.446331][ T54] CPU: 3 UID: 0 PID: 54 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full)
[ 111.449690][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 111.453617][ T54] Workqueue: usb_hub_wq hub_event
[ 111.455415][ T54] Call Trace:
[ 111.456655][ T54]
[ 111.457787][ T54] dump_stack_lvl+0x3d/0x1f0
[ 111.459493][ T54] vpanic+0x6e8/0x7a0
[ 111.461414][ T54] ? __pfx_vpanic+0x10/0x10
[ 111.463406][ T54] ? free_large_kmalloc+0x114/0x180
[ 111.465777][ T54] panic+0xca/0xd0
[ 111.467177][ T54] ? __pfx_panic+0x10/0x10
[ 111.468849][ T54] ? check_panic_on_warn+0x1f/0xb0
[ 111.471154][ T54] check_panic_on_warn+0xab/0xb0
[ 111.473213][ T54] __warn+0xf6/0x3c0
[ 111.474703][ T54] ? free_large_kmalloc+0x114/0x180
[ 111.476689][ T54] report_bug+0x3c3/0x580
[ 111.478299][ T54] ? free_large_kmalloc+0x114/0x180
[ 111.480359][ T54] handle_bug+0x184/0x210
[ 111.481940][ T54] exc_invalid_op+0x17/0x50
[ 111.483622][ T54] asm_exc_invalid_op+0x1a/0x20
[ 111.485448][ T54] RIP: 0010:free_large_kmalloc+0x114/0x180
[ 111.487710][ T54] Code: 00 00 00 48 89 df e8 ab cc 13 00 e8 36 d6 ac ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 90 c0 c9 8d e8 f0 9f ed ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 14 e6 e3 8d 48 89 df 5b 5d 41 5c 41 5d e9 d4 9f
[ 111.495308][ T54] RSP: 0018:ffffc90000a7edb0 EFLAGS: 00010202
[ 111.497540][ T54] RAX: 00fff00000000000 RBX: ffffea0001459880 RCX: ffffffff816cb6ee
[ 111.500641][ T54] RDX: 00000000000000ff RSI: ffff888051662000 RDI: ffffea0001459880
[ 111.503530][ T54] RBP: ffff888051662000 R08: 0000000000000007 R09: 0000000000000000
[ 111.506419][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805005f000
[ 111.509348][ T54] R13: ffff88803612c000 R14: dffffc0000000000 R15: ffff88805005f0f0
[ 111.512857][ T54] ? __phys_addr+0xde/0x180
[ 111.514540][ T54] usb_free_urb.part.0+0xe5/0x100
[ 111.516417][ T54] usb_free_urb+0x1f/0x30
[ 111.518094][ T54] smsusb_term_device+0x108/0x1e0
[ 111.520020][ T54] smsusb_init_device+0xaa0/0xe00
[ 111.521913][ T54] ? __pfx_smsusb_init_device+0x10/0x10
[ 111.524044][ T54] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 111.526125][ T54] ? usb_clear_halt+0xb5/0x160
[ 111.527949][ T54] smsusb_probe+0x5d3/0x1090
[ 111.529768][ T54] ? __pfx_smsusb_probe+0x10/0x10
[ 111.531846][ T54] ? mark_held_locks+0x49/0x80
[ 111.533666][ T54] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 111.535841][ T54] ? __pm_runtime_set_status+0x13c/0xa80
[ 111.537931][ T54] usb_probe_interface+0x303/0xa40
[ 111.539889][ T54] ? __pfx_usb_probe_interface+0x10/0x10
[ 111.542080][ T54] really_probe+0x241/0xa90
[ 111.543804][ T54] __driver_probe_device+0x1de/0x440
[ 111.545770][ T54] driver_probe_device+0x4c/0x1b0
[ 111.547679][ T54] __device_attach_driver+0x1df/0x310
[ 111.549717][ T54] ? __pfx___device_attach_driver+0x10/0x10
[ 111.551986][ T54] bus_for_each_drv+0x159/0x1e0
[ 111.553761][ T54] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.555781][ T54] ? lockdep_hardirqs_on+0x7c/0x110
[ 111.557735][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 111.559939][ T54] __device_attach+0x1e4/0x4b0
[ 111.561754][ T54] ? __pfx___device_attach+0x10/0x10
[ 111.563774][ T54] ? do_raw_spin_unlock+0x172/0x230
[ 111.565736][ T54] bus_probe_device+0x17f/0x1c0
[ 111.567568][ T54] device_add+0x1148/0x1aa0
[ 111.569291][ T54] ? __pfx_device_add+0x10/0x10
[ 111.571144][ T54] ? mark_held_locks+0x49/0x80
[ 111.572985][ T54] usb_set_configuration+0x1187/0x1e20
[ 111.575051][ T54] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 111.577307][ T54] usb_generic_driver_probe+0xb1/0x110
[ 111.579323][ T54] usb_probe_device+0xec/0x3e0
[ 111.581202][ T54] ? __pfx_usb_probe_device+0x10/0x10
[ 111.583269][ T54] really_probe+0x241/0xa90
[ 111.585053][ T54] __driver_probe_device+0x1de/0x440
[ 111.587118][ T54] ? usb_driver_applicable+0x1c7/0x220
[ 111.589210][ T54] driver_probe_device+0x4c/0x1b0
[ 111.591150][ T54] __device_attach_driver+0x1df/0x310
[ 111.593198][ T54] ? __pfx___device_attach_driver+0x10/0x10
[ 111.595476][ T54] bus_for_each_drv+0x159/0x1e0
[ 111.597333][ T54] ? __pfx_bus_for_each_drv+0x10/0x10
[ 111.599353][ T54] ? lockdep_hardirqs_on+0x7c/0x110
[ 111.601342][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 111.603578][ T54] __device_attach+0x1e4/0x4b0
[ 111.605375][ T54] ? __pfx___device_attach+0x10/0x10
[ 111.607337][ T54] ? do_raw_spin_unlock+0x172/0x230
[ 111.609300][ T54] bus_probe_device+0x17f/0x1c0
[ 111.611212][ T54] device_add+0x1148/0x1aa0
[ 111.612969][ T54] ? __pfx_device_add+0x10/0x10
[ 111.614832][ T54] ? add_device_randomness+0xb7/0xf0
[ 111.616842][ T54] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 111.619107][ T54] usb_new_device+0xd07/0x1a60
[ 111.620967][ T54] ? do_raw_spin_lock+0x12c/0x2b0
[ 111.622906][ T54] ? __pfx_usb_new_device+0x10/0x10
[ 111.624840][ T54] ? mark_held_locks+0x49/0x80
[ 111.626725][ T54] hub_event+0x2f34/0x4fe0
[ 111.628471][ T54] ? __pfx_hub_event+0x10/0x10
[ 111.630455][ T54] ? assoc_array_gc+0x1440/0x15b0
[ 111.632429][ T54] ? rcu_is_watching+0x12/0xc0
[ 111.634263][ T54] process_one_work+0x9cc/0x1b70
[ 111.636182][ T54] ? __pfx_hcd_resume_work+0x10/0x10
[ 111.638245][ T54] ? __pfx_process_one_work+0x10/0x10
[ 111.640422][ T54] ? assign_work+0x1a0/0x250
[ 111.642227][ T54] worker_thread+0x6c8/0xf10
[ 111.644136][ T54] ? __pfx_worker_thread+0x10/0x10
[ 111.646134][ T54] kthread+0x3c2/0x780
[ 111.647738][ T54] ? __pfx_kthread+0x10/0x10
[ 111.649623][ T54] ? rcu_is_watching+0x12/0xc0
[ 111.651678][ T54] ? __pfx_kthread+0x10/0x10
[ 111.653583][ T54] ret_from_fork+0x5d4/0x6f0
[ 111.655418][ T54] ? __pfx_kthread+0x10/0x10
[ 111.657307][ T54] ret_from_fork_asm+0x1a/0x30
[ 111.659636][ T54]
[ 111.661985][ T54] Kernel Offset: disabled
[ 111.664163][ T54] Rebooting in 86400 seconds..