[ 83.212690][ T40] audit: type=1400 audit(1776579654.939:119): avc: denied { transition } for pid=6127 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.219900][ T40] audit: type=1400 audit(1776579654.939:120): avc: denied { noatsecure } for pid=6127 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.225986][ T40] audit: type=1400 audit(1776579654.939:121): avc: denied { rlimitinh } for pid=6127 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.233207][ T40] audit: type=1400 audit(1776579654.939:122): avc: denied { siginh } for pid=6127 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:4247' (ED25519) to the list of known hosts. [ 88.992649][ T34] cfg80211: failed to load regulatory.db 2026/04/19 06:21:01 parsed 1 programs [ 91.934243][ T40] audit: type=1400 audit(1776579663.659:123): avc: denied { read write } for pid=6177 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.942554][ T40] audit: type=1400 audit(1776579663.659:124): avc: denied { open } for pid=6177 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.978499][ T40] audit: type=1400 audit(1776579663.709:125): avc: denied { unlink } for pid=6177 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.380216][ T40] audit: type=1400 audit(1776579664.109:126): avc: denied { relabelto } for pid=6180 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.261796][ T6177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.349084][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 96.449667][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.452375][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.454907][ T6205] bridge_slave_0: entered allmulticast mode [ 96.458759][ T6205] bridge_slave_0: entered promiscuous mode [ 96.463164][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.465819][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.468752][ T6205] bridge_slave_1: entered allmulticast mode [ 96.472013][ T6205] bridge_slave_1: entered promiscuous mode [ 96.511712][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.516590][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.627905][ T6205] team0: Port device team_slave_0 added [ 96.632922][ T6205] team0: Port device team_slave_1 added [ 96.693328][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.696417][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.707815][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.713895][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.718967][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.729763][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.799582][ T6205] hsr_slave_0: entered promiscuous mode [ 96.802883][ T6205] hsr_slave_1: entered promiscuous mode [ 97.424621][ T6205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.430929][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.434533][ T6205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.457145][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.460909][ T6205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.475038][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.479029][ T6205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.485750][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.554920][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.570355][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.578514][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.581607][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.589994][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.592984][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.658486][ T40] audit: type=1400 audit(1776579669.389:127): avc: denied { sys_module } for pid=6205 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.745476][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.770786][ T6205] veth0_vlan: entered promiscuous mode [ 97.776518][ T6205] veth1_vlan: entered promiscuous mode [ 97.791913][ T6205] veth0_macvtap: entered promiscuous mode [ 97.797176][ T6205] veth1_macvtap: entered promiscuous mode [ 97.807848][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.814910][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.825080][ T346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.829075][ T346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.833353][ T346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.838582][ T346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.943588][ T1248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.011824][ T1248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.095383][ T1248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.172876][ T1248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.702644][ T40] audit: type=1401 audit(1776579670.429:128): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 98.734945][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.738622][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.741978][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.744720][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.748520][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.910933][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.913563][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.934541][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.937256][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/19 06:21:10 executed programs: 0 [ 99.247957][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.252072][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.255416][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.259300][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.262162][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.400709][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 99.475029][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.477567][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.479938][ T6333] bridge_slave_0: entered allmulticast mode [ 99.482618][ T6333] bridge_slave_0: entered promiscuous mode [ 99.487132][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.489493][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.491863][ T6333] bridge_slave_1: entered allmulticast mode [ 99.494752][ T6333] bridge_slave_1: entered promiscuous mode [ 99.538925][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.545055][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.595323][ T6333] team0: Port device team_slave_0 added [ 99.601350][ T6333] team0: Port device team_slave_1 added [ 99.638630][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.640903][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.649076][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.654048][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.656665][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.664656][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.706749][ T6333] hsr_slave_0: entered promiscuous mode [ 99.709215][ T6333] hsr_slave_1: entered promiscuous mode [ 99.711372][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 99.713173][ T6333] Cannot create hsr debugfs directory [ 101.316986][ T5948] Bluetooth: hci0: command tx timeout [ 101.389195][ T1248] bridge_slave_1: left allmulticast mode [ 101.391587][ T1248] bridge_slave_1: left promiscuous mode [ 101.394073][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.399563][ T1248] bridge_slave_0: left allmulticast mode [ 101.401360][ T1248] bridge_slave_0: left promiscuous mode [ 101.403243][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.540091][ T1248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.545251][ T1248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.550254][ T1248] bond0 (unregistering): Released all slaves [ 101.694872][ T1248] hsr_slave_0: left promiscuous mode [ 101.697900][ T1248] hsr_slave_1: left promiscuous mode [ 101.700728][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.703815][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.707726][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.710811][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.719830][ T1248] veth1_macvtap: left promiscuous mode [ 101.722174][ T1248] veth0_macvtap: left promiscuous mode [ 101.724503][ T1248] veth1_vlan: left promiscuous mode [ 101.727134][ T1248] veth0_vlan: left promiscuous mode [ 101.824081][ T1248] team0 (unregistering): Port device team_slave_1 removed [ 101.837644][ T1248] team0 (unregistering): Port device team_slave_0 removed [ 101.901933][ T5645] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.388378][ T6333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.392839][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.395498][ T6333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.404586][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.408445][ T6333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.414261][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.423737][ T6333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.431190][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.485932][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.499249][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.505482][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.508800][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.520002][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.522424][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.863038][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.895036][ T6333] veth0_vlan: entered promiscuous mode [ 102.899929][ T6333] veth1_vlan: entered promiscuous mode [ 102.915212][ T6333] veth0_macvtap: entered promiscuous mode [ 102.920594][ T6333] veth1_macvtap: entered promiscuous mode [ 102.933883][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.946828][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.977417][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.980377][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.017640][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.021042][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.059987][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.062823][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.078677][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.081137][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.114633][ T40] audit: type=1400 audit(1776579674.839:129): avc: denied { map_create } for pid=6381 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.121307][ T40] audit: type=1400 audit(1776579674.839:130): avc: denied { perfmon } for pid=6381 comm="syz.0.16" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.128264][ T40] audit: type=1400 audit(1776579674.839:131): avc: denied { map_read map_write } for pid=6381 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.134309][ T40] audit: type=1400 audit(1776579674.839:132): avc: denied { read write } for pid=6381 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.142502][ T40] audit: type=1400 audit(1776579674.839:133): avc: denied { open } for pid=6381 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.153539][ T40] audit: type=1400 audit(1776579674.849:134): avc: denied { ioctl } for pid=6381 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.377688][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.386289][ T5948] Bluetooth: hci0: command tx timeout [ 103.526119][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 103.530715][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.534370][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.537546][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 103.541189][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 103.544675][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 103.550721][ T29] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 103.553666][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.556242][ T29] usb 5-1: Product: syz [ 103.557603][ T29] usb 5-1: Manufacturer: syz [ 103.559121][ T29] usb 5-1: SerialNumber: syz [ 103.563179][ T29] usb 5-1: config 0 descriptor?? [ 103.568195][ T6382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.575161][ T29] smsusb:smsusb_probe: board id=2, interface number 0 [ 103.583836][ T29] smsusb:siano_media_device_register: media controller created [ 103.589087][ T29] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 103.591586][ T29] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 103.594880][ T29] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 103.599807][ T29] ------------[ cut here ]------------ [ 103.601573][ T29] !PageLargeKmalloc(page) [ 103.601580][ T29] WARNING: mm/slub.c:6471 at free_large_kmalloc+0xbf/0x100, CPU#1: kworker/1:0/29 [ 103.606344][ T29] Modules linked in: [ 103.607863][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 103.610812][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.614113][ T29] Workqueue: usb_hub_wq hub_event [ 103.615818][ T29] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 103.618816][ T29] Code: 28 90 0f 0b 90 80 3d 17 e7 59 0e 00 0f 84 87 32 ba fe 48 8b 74 24 28 48 89 ef e8 cc ef 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 4b 02 f4 8d 5b 5d 41 5c 41 [ 103.625245][ T29] RSP: 0018:ffffc90000686d68 EFLAGS: 00010202 [ 103.628416][ T29] RAX: 00000000000000ff RBX: ffffea00016e9880 RCX: 000000000000002e [ 103.631010][ T29] RDX: 0000000000000000 RSI: ffff88805ba62000 RDI: ffffea00016e9880 [ 103.633536][ T29] RBP: ffff88805ba62000 R08: 0000000000000005 R09: 0000000000000000 [ 103.636103][ T29] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88803a22c000 [ 103.638611][ T29] R13: ffff8880272da000 R14: dffffc0000000000 R15: ffff88803a22c0f0 [ 103.641114][ T29] FS: 0000000000000000(0000) GS:ffff8880d63ef000(0000) knlGS:0000000000000000 [ 103.644548][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.646757][ T29] CR2: 00005567f9847f70 CR3: 000000002e68a000 CR4: 0000000000352ef0 [ 103.650029][ T29] Call Trace: [ 103.651517][ T29] [ 103.652791][ T29] usb_free_urb.part.0+0xf8/0x110 [ 103.654965][ T29] usb_free_urb+0x1f/0x30 [ 103.656905][ T29] smsusb_term_device+0x108/0x200 [ 103.659069][ T29] smsusb_init_device+0xb4e/0xbb0 [ 103.661210][ T29] ? __pfx_smsusb_init_device+0x10/0x10 [ 103.663555][ T29] ? kfree+0x1dd/0x6c0 [ 103.665299][ T29] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.667757][ T29] ? usb_clear_halt+0x61/0x160 [ 103.669777][ T29] smsusb_probe+0xd7f/0xe1f [ 103.671728][ T29] ? __pfx_smsusb_probe+0x10/0x10 [ 103.673872][ T29] ? mark_held_locks+0x40/0x70 [ 103.675918][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.677887][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.679745][ T29] ? __pm_runtime_set_status+0x13c/0x970 [ 103.681476][ T29] usb_probe_interface+0x303/0x8f0 [ 103.683131][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.684882][ T29] really_probe+0x241/0xa60 [ 103.686429][ T29] __driver_probe_device+0x1de/0x400 [ 103.688208][ T29] driver_probe_device+0x4c/0x1b0 [ 103.689813][ T29] __device_attach_driver+0x1df/0x340 [ 103.691531][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 103.693907][ T29] bus_for_each_drv+0x159/0x1e0 [ 103.695532][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.697209][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 103.698673][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.700530][ T29] __device_attach+0x1e4/0x4d0 [ 103.702106][ T29] ? __pfx___device_attach+0x10/0x10 [ 103.703806][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.705646][ T29] device_initial_probe+0xaf/0xd0 [ 103.707451][ T29] bus_probe_device+0x64/0x160 [ 103.709029][ T29] device_add+0x11d9/0x1920 [ 103.710502][ T29] ? __pfx_device_add+0x10/0x10 [ 103.712158][ T29] usb_set_configuration+0xd97/0x1c60 [ 103.714465][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.716775][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 103.718540][ T29] usb_probe_device+0xef/0x400 [ 103.720092][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 103.722126][ T29] really_probe+0x241/0xa60 [ 103.724120][ T29] __driver_probe_device+0x1de/0x400 [ 103.726333][ T29] ? usb_driver_applicable+0x1c7/0x220 [ 103.728583][ T29] driver_probe_device+0x4c/0x1b0 [ 103.730679][ T29] __device_attach_driver+0x1df/0x340 [ 103.732669][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 103.734576][ T29] bus_for_each_drv+0x159/0x1e0 [ 103.736249][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.737955][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 103.739626][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.741487][ T29] __device_attach+0x1e4/0x4d0 [ 103.743082][ T29] ? __pfx___device_attach+0x10/0x10 [ 103.744777][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.746522][ T29] device_initial_probe+0xaf/0xd0 [ 103.748154][ T29] bus_probe_device+0x64/0x160 [ 103.749709][ T29] device_add+0x11d9/0x1920 [ 103.751185][ T29] ? __pfx_device_add+0x10/0x10 [ 103.752767][ T29] ? add_device_randomness+0xb7/0xf0 [ 103.754446][ T29] usb_new_device.cold+0x685/0x115c [ 103.756191][ T29] ? do_raw_spin_lock+0x128/0x260 [ 103.757995][ T29] ? __pfx_usb_new_device+0x10/0x10 [ 103.760068][ T29] ? mark_held_locks+0x40/0x70 [ 103.761965][ T29] hub_event+0x314d/0x4af0 [ 103.763791][ T29] ? __pfx_hub_event+0x10/0x10 [ 103.765696][ T29] ? debug_print_object+0x260/0x2a0 [ 103.767893][ T29] ? rcu_is_watching+0x12/0xc0 [ 103.769818][ T29] process_one_work+0xa0e/0x1980 [ 103.771814][ T29] ? __pfx_process_one_work+0x10/0x10 [ 103.774031][ T29] ? __pfx_hub_event+0x10/0x10 [ 103.775967][ T29] worker_thread+0x5ef/0xe50 [ 103.777927][ T29] ? kthread+0x13a/0x450 [ 103.779697][ T29] ? __pfx_worker_thread+0x10/0x10 [ 103.781722][ T29] kthread+0x370/0x450 [ 103.783389][ T29] ? __pfx_kthread+0x10/0x10 [ 103.785285][ T29] ret_from_fork+0x72b/0xd50 [ 103.787365][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 103.789412][ T29] ? __switch_to+0x800/0x1100 [ 103.791300][ T29] ? __pfx_kthread+0x10/0x10 [ 103.793152][ T29] ret_from_fork_asm+0x1a/0x30 [ 103.795081][ T29] [ 103.796414][ T29] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.799321][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 103.802968][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.806951][ T29] Workqueue: usb_hub_wq hub_event [ 103.808987][ T29] Call Trace: [ 103.810331][ T29] [ 103.811533][ T29] dump_stack_lvl+0x100/0x190 [ 103.813415][ T29] vpanic+0x552/0x970 [ 103.815015][ T29] ? __pfx_vpanic+0x10/0x10 [ 103.816826][ T29] panic+0xd1/0xe0 [ 103.818341][ T29] ? __pfx_panic+0x10/0x10 [ 103.820132][ T29] ? check_panic_on_warn+0x1f/0x90 [ 103.822210][ T29] check_panic_on_warn.cold+0x19/0x34 [ 103.824390][ T29] ? free_large_kmalloc+0xbf/0x100 [ 103.826420][ T29] __warn.cold+0x191/0x328 [ 103.828208][ T29] __report_bug+0x296/0x3d0 [ 103.830016][ T29] ? free_large_kmalloc+0xbf/0x100 [ 103.832061][ T29] ? __pfx___report_bug+0x10/0x10 [ 103.834056][ T29] ? bus_for_each_drv+0x159/0x1e0 [ 103.836070][ T29] ? __device_attach+0x1e4/0x4d0 [ 103.838034][ T29] ? device_initial_probe+0xaf/0xd0 [ 103.840153][ T29] ? bus_probe_device+0x64/0x160 [ 103.842126][ T29] ? device_add+0x11d9/0x1920 [ 103.844022][ T29] ? usb_new_device.cold+0x685/0x115c [ 103.846145][ T29] ? hub_event+0x314d/0x4af0 [ 103.848023][ T29] ? process_one_work+0xa0e/0x1980 [ 103.850089][ T29] ? worker_thread+0x5ef/0xe50 [ 103.852013][ T29] ? kthread+0x370/0x450 [ 103.853708][ T29] ? ret_from_fork+0x72b/0xd50 [ 103.855639][ T29] ? find_held_lock+0x2b/0x80 [ 103.857547][ T29] ? smscore_unregister_device+0x537/0x7f0 [ 103.859886][ T29] ? smscore_unregister_device+0x537/0x7f0 [ 103.862205][ T29] ? free_large_kmalloc+0xbf/0x100 [ 103.864256][ T29] report_bug+0xb2/0x220 [ 103.865954][ T29] ? free_large_kmalloc+0xbf/0x100 [ 103.867990][ T29] handle_bug+0x16a/0x2a0 [ 103.869718][ T29] exc_invalid_op+0x17/0x50 [ 103.871566][ T29] asm_exc_invalid_op+0x1a/0x20 [ 103.873500][ T29] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 103.875782][ T29] Code: 28 90 0f 0b 90 80 3d 17 e7 59 0e 00 0f 84 87 32 ba fe 48 8b 74 24 28 48 89 ef e8 cc ef 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 4b 02 f4 8d 5b 5d 41 5c 41 [ 103.883346][ T29] RSP: 0018:ffffc90000686d68 EFLAGS: 00010202 [ 103.885746][ T29] RAX: 00000000000000ff RBX: ffffea00016e9880 RCX: 000000000000002e [ 103.888877][ T29] RDX: 0000000000000000 RSI: ffff88805ba62000 RDI: ffffea00016e9880 [ 103.892014][ T29] RBP: ffff88805ba62000 R08: 0000000000000005 R09: 0000000000000000 [ 103.895133][ T29] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88803a22c000 [ 103.898233][ T29] R13: ffff8880272da000 R14: dffffc0000000000 R15: ffff88803a22c0f0 [ 103.901389][ T29] usb_free_urb.part.0+0xf8/0x110 [ 103.903431][ T29] usb_free_urb+0x1f/0x30 [ 103.905159][ T29] smsusb_term_device+0x108/0x200 [ 103.907184][ T29] smsusb_init_device+0xb4e/0xbb0 [ 103.909255][ T29] ? __pfx_smsusb_init_device+0x10/0x10 [ 103.911466][ T29] ? kfree+0x1dd/0x6c0 [ 103.913100][ T29] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.915294][ T29] ? usb_clear_halt+0x61/0x160 [ 103.917223][ T29] smsusb_probe+0xd7f/0xe1f [ 103.919096][ T29] ? __pfx_smsusb_probe+0x10/0x10 [ 103.921099][ T29] ? mark_held_locks+0x40/0x70 [ 103.923030][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.925364][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.927680][ T29] ? __pm_runtime_set_status+0x13c/0x970 [ 103.929906][ T29] usb_probe_interface+0x303/0x8f0 [ 103.931949][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.934175][ T29] really_probe+0x241/0xa60 [ 103.935992][ T29] __driver_probe_device+0x1de/0x400 [ 103.938093][ T29] driver_probe_device+0x4c/0x1b0 [ 103.940099][ T29] __device_attach_driver+0x1df/0x340 [ 103.942237][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 103.944595][ T29] bus_for_each_drv+0x159/0x1e0 [ 103.946531][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.948692][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 103.950767][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.953073][ T29] __device_attach+0x1e4/0x4d0 [ 103.954994][ T29] ? __pfx___device_attach+0x10/0x10 [ 103.957078][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.959156][ T29] device_initial_probe+0xaf/0xd0 [ 103.961165][ T29] bus_probe_device+0x64/0x160 [ 103.963099][ T29] device_add+0x11d9/0x1920 [ 103.964910][ T29] ? __pfx_device_add+0x10/0x10 [ 103.966862][ T29] usb_set_configuration+0xd97/0x1c60 [ 103.969052][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.971475][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 103.973607][ T29] usb_probe_device+0xef/0x400 [ 103.975520][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 103.977660][ T29] really_probe+0x241/0xa60 [ 103.979481][ T29] __driver_probe_device+0x1de/0x400 [ 103.981568][ T29] ? usb_driver_applicable+0x1c7/0x220 [ 103.983752][ T29] driver_probe_device+0x4c/0x1b0 [ 103.985790][ T29] __device_attach_driver+0x1df/0x340 [ 103.987968][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 103.990312][ T29] bus_for_each_drv+0x159/0x1e0 [ 103.992271][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.994388][ T29] ? lockdep_hardirqs_on+0x78/0x100 [ 103.996459][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.998778][ T29] __device_attach+0x1e4/0x4d0 [ 104.000676][ T29] ? __pfx___device_attach+0x10/0x10 [ 104.002783][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.004863][ T29] device_initial_probe+0xaf/0xd0 [ 104.006876][ T29] bus_probe_device+0x64/0x160 [ 104.008788][ T29] device_add+0x11d9/0x1920 [ 104.010602][ T29] ? __pfx_device_add+0x10/0x10 [ 104.012557][ T29] ? add_device_randomness+0xb7/0xf0 [ 104.014668][ T29] usb_new_device.cold+0x685/0x115c [ 104.016745][ T29] ? do_raw_spin_lock+0x128/0x260 [ 104.018767][ T29] ? __pfx_usb_new_device+0x10/0x10 [ 104.020824][ T29] ? mark_held_locks+0x40/0x70 [ 104.022739][ T29] hub_event+0x314d/0x4af0 [ 104.024582][ T29] ? __pfx_hub_event+0x10/0x10 [ 104.026479][ T29] ? debug_print_object+0x260/0x2a0 [ 104.028625][ T29] ? rcu_is_watching+0x12/0xc0 [ 104.030532][ T29] process_one_work+0xa0e/0x1980 [ 104.032535][ T29] ? __pfx_process_one_work+0x10/0x10 [ 104.034683][ T29] ? __pfx_hub_event+0x10/0x10 [ 104.036592][ T29] worker_thread+0x5ef/0xe50 [ 104.038470][ T29] ? kthread+0x13a/0x450 [ 104.040163][ T29] ? __pfx_worker_thread+0x10/0x10 [ 104.042190][ T29] kthread+0x370/0x450 [ 104.043830][ T29] ? __pfx_kthread+0x10/0x10 [ 104.045662][ T29] ret_from_fork+0x72b/0xd50 [ 104.047518][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 104.049545][ T29] ? __switch_to+0x800/0x1100 [ 104.051428][ T29] ? __pfx_kthread+0x10/0x10 [ 104.053266][ T29] ret_from_fork_asm+0x1a/0x30 [ 104.055190][ T29] [ 104.057201][ T29] Kernel Offset: disabled [ 104.058932][ T29] Rebooting in 86400 seconds..