[ 56.866079][ T2983] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.496132][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 71.496163][ T29] audit: type=1400 audit(1767105682.766:96): avc: denied { mount } for pid=2990 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.524694][ T29] audit: type=1400 audit(1767105682.766:97): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/root/syzkaller.ddamc2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.698925][ T2990] syz-executor (2990) used greatest stack depth: 22952 bytes left [ 71.714149][ T29] audit: type=1400 audit(1767105682.976:98): avc: denied { create } for pid=3443 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.197863][ T29] audit: type=1400 audit(1767105683.466:99): avc: denied { create } for pid=3453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.221704][ T29] audit: type=1400 audit(1767105683.486:100): avc: denied { sys_admin } for pid=3453 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.278316][ T29] audit: type=1400 audit(1767105683.546:101): avc: denied { sys_chroot } for pid=3454 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 74.415426][ T29] audit: type=1401 audit(1767105685.686:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. 2025/12/30 14:42:07 parsed 1 programs [ 118.965900][ T29] audit: type=1400 audit(1767105730.236:103): avc: denied { unlink } for pid=3989 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 119.093605][ T3989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 122.338495][ T29] audit: type=1401 audit(1767105733.606:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/12/30 14:42:29 executed programs: 0 2025/12/30 14:42:43 executed programs: 2 [ 152.607995][ T29] audit: type=1400 audit(1767105763.876:105): avc: denied { read write } for pid=4973 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.650703][ T29] audit: type=1400 audit(1767105763.876:106): avc: denied { open } for pid=4973 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.674208][ T29] audit: type=1400 audit(1767105763.876:107): avc: denied { ioctl } for pid=4973 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.872368][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.022021][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 153.029492][ T9] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 153.038147][ T9] usb 4-1: config 231 has no interface number 0 [ 153.044739][ T9] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 153.055020][ T9] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 153.065343][ T9] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.078652][ T9] usb 4-1: config 231 interface 206 has no altsetting 0 [ 153.088043][ T9] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 153.097169][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.105219][ T9] usb 4-1: Product: syz [ 153.109384][ T9] usb 4-1: Manufacturer: syz [ 153.114033][ T9] usb 4-1: SerialNumber: syz [ 153.123177][ T4974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.130536][ T4974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.353660][ T9] usb 4-1: USB disconnect, device number 2 [ 153.411717][ T29] audit: type=1400 audit(1767105764.676:108): avc: denied { firmware_load } for pid=1121 comm="kworker/0:2" path="/lib/firmware/libertas/usb8388_olpc.bin" dev="sda1" ino=432 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 153.862056][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 154.013672][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 154.022853][ T9] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 154.031415][ T9] usb 4-1: config 231 has no interface number 0 [ 154.037903][ T9] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.051236][ T9] usb 4-1: config 231 interface 206 has no altsetting 0 [ 154.061312][ T9] usb 4-1: string descriptor 0 read error: -22 [ 154.067655][ T9] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 154.076751][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.192027][ T1121] ------------[ cut here ]------------ [ 155.197559][ T1121] URB ffff888114ad0000 submitted while active [ 155.203789][ T1121] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15a0/0x1970, CPU#0: kworker/0:2/1121 [ 155.214364][ T1121] Modules linked in: [ 155.218471][ T1121] CPU: 0 UID: 0 PID: 1121 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.228750][ T1121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.238981][ T1121] Workqueue: events request_firmware_work_func [ 155.245261][ T1121] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 155.250998][ T1121] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 d6 c5 fc 48 8d 3d 40 2a f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 d6 c5 fc 0f 1f [ 155.270968][ T1121] RSP: 0018:ffffc90001bbf8d0 EFLAGS: 00010293 [ 155.277423][ T1121] RAX: 0000000000000000 RBX: ffff888114ad0000 RCX: ffffffff8427db26 [ 155.285534][ T1121] RDX: ffff88810ebf1d40 RSI: ffff888114ad0000 RDI: ffffffff8aaa42c0 [ 155.293974][ T1121] RBP: ffff888114ad0000 R08: 0000000000000001 R09: 0000000000000000 [ 155.302088][ T1121] R10: 0000000000000000 R11: ffff88810ebf27e8 R12: 00000000c0030300 [ 155.310226][ T1121] R13: 0000000000000010 R14: ffff88810c6e8000 R15: ffff888105a96000 [ 155.318319][ T1121] FS: 0000000000000000(0000) GS:ffff888268bf4000(0000) knlGS:0000000000000000 [ 155.327368][ T1121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.334084][ T1121] CR2: 0000555c062f40b8 CR3: 000000011cb2c000 CR4: 00000000003506f0 [ 155.342199][ T1121] Call Trace: [ 155.345557][ T1121] [ 155.348594][ T1121] ? __netdev_alloc_skb+0xf1/0x920 [ 155.353922][ T1121] usb_tx_block+0x241/0x2e0 [ 155.358533][ T1121] if_usb_prog_firmware+0x570/0x10c0 [ 155.363965][ T1121] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 155.369994][ T1121] ? __pfx__request_firmware+0x10/0x10 [ 155.375873][ T1121] ? do_raw_spin_unlock+0x172/0x230 [ 155.381415][ T1121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.387573][ T1121] ? __pfx_helper_firmware_cb+0x10/0x10 [ 155.393309][ T1121] helper_firmware_cb+0x1f8/0x2e0 [ 155.398395][ T1121] request_firmware_work_func+0x13c/0x250 [ 155.404337][ T1121] ? __pfx_request_firmware_work_func+0x10/0x10 [ 155.410799][ T1121] ? rcu_is_watching+0x12/0xc0 [ 155.415878][ T1121] process_one_work+0x9ba/0x1b20 [ 155.421159][ T1121] ? __pfx_process_one_work+0x10/0x10 [ 155.426697][ T1121] ? assign_work+0x1a0/0x250 [ 155.431356][ T1121] worker_thread+0x6c8/0xf10 [ 155.436152][ T1121] ? __kthread_parkme+0x19e/0x250 [ 155.441781][ T1121] ? __pfx_worker_thread+0x10/0x10 [ 155.447036][ T1121] kthread+0x3c5/0x780 [ 155.451176][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.455888][ T1121] ? rcu_is_watching+0x12/0xc0 [ 155.460834][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.465533][ T1121] ret_from_fork+0x74f/0xa30 [ 155.470206][ T1121] ? __pfx_ret_from_fork+0x10/0x10 [ 155.475438][ T1121] ? __switch_to+0x7a5/0x10c0 [ 155.480214][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.484942][ T1121] ret_from_fork_asm+0x1a/0x30 [ 155.489910][ T1121] [ 155.493047][ T1121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.500373][ T1121] CPU: 0 UID: 0 PID: 1121 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.510229][ T1121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.520314][ T1121] Workqueue: events request_firmware_work_func [ 155.526631][ T1121] Call Trace: [ 155.529946][ T1121] [ 155.532915][ T1121] dump_stack_lvl+0x3d/0x1f0 [ 155.537539][ T1121] vpanic+0x640/0x6f0 [ 155.541544][ T1121] ? usb_submit_urb+0x15a0/0x1970 [ 155.546627][ T1121] panic+0xca/0xd0 [ 155.550377][ T1121] ? __pfx_panic+0x10/0x10 [ 155.554845][ T1121] ? check_panic_on_warn+0x1f/0xb0 [ 155.560007][ T1121] check_panic_on_warn+0xab/0xb0 [ 155.565187][ T1121] __warn+0x108/0x3c0 [ 155.569224][ T1121] __report_bug+0x2a0/0x520 [ 155.573753][ T1121] ? usb_submit_urb+0x15a0/0x1970 [ 155.578956][ T1121] ? __pfx___report_bug+0x10/0x10 [ 155.584033][ T1121] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.589286][ T1121] ? usb_tx_block+0x56/0x2e0 [ 155.593934][ T1121] ? usb_submit_urb+0x15a3/0x1970 [ 155.599023][ T1121] report_bug_entry+0xe1/0x290 [ 155.603820][ T1121] ? usb_submit_urb+0x15a3/0x1970 [ 155.609501][ T1121] handle_bug+0x18a/0x260 [ 155.613889][ T1121] exc_invalid_op+0x17/0x50 [ 155.618448][ T1121] asm_exc_invalid_op+0x1a/0x20 [ 155.623344][ T1121] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 155.629040][ T1121] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 d6 c5 fc 48 8d 3d 40 2a f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 d6 c5 fc 0f 1f [ 155.648700][ T1121] RSP: 0018:ffffc90001bbf8d0 EFLAGS: 00010293 [ 155.654824][ T1121] RAX: 0000000000000000 RBX: ffff888114ad0000 RCX: ffffffff8427db26 [ 155.662841][ T1121] RDX: ffff88810ebf1d40 RSI: ffff888114ad0000 RDI: ffffffff8aaa42c0 [ 155.671017][ T1121] RBP: ffff888114ad0000 R08: 0000000000000001 R09: 0000000000000000 [ 155.679192][ T1121] R10: 0000000000000000 R11: ffff88810ebf27e8 R12: 00000000c0030300 [ 155.687204][ T1121] R13: 0000000000000010 R14: ffff88810c6e8000 R15: ffff888105a96000 [ 155.695216][ T1121] ? usb_tx_block+0x56/0x2e0 [ 155.699869][ T1121] ? __netdev_alloc_skb+0xf1/0x920 [ 155.705037][ T1121] usb_tx_block+0x241/0x2e0 [ 155.709888][ T1121] if_usb_prog_firmware+0x570/0x10c0 [ 155.715245][ T1121] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 155.721034][ T1121] ? __pfx__request_firmware+0x10/0x10 [ 155.726541][ T1121] ? do_raw_spin_unlock+0x172/0x230 [ 155.731965][ T1121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.737837][ T1121] ? __pfx_helper_firmware_cb+0x10/0x10 [ 155.743523][ T1121] helper_firmware_cb+0x1f8/0x2e0 [ 155.748602][ T1121] request_firmware_work_func+0x13c/0x250 [ 155.754633][ T1121] ? __pfx_request_firmware_work_func+0x10/0x10 [ 155.761121][ T1121] ? rcu_is_watching+0x12/0xc0 [ 155.765964][ T1121] process_one_work+0x9ba/0x1b20 [ 155.771063][ T1121] ? __pfx_process_one_work+0x10/0x10 [ 155.776490][ T1121] ? assign_work+0x1a0/0x250 [ 155.781120][ T1121] worker_thread+0x6c8/0xf10 [ 155.785758][ T1121] ? __kthread_parkme+0x19e/0x250 [ 155.790840][ T1121] ? __pfx_worker_thread+0x10/0x10 [ 155.796006][ T1121] kthread+0x3c5/0x780 [ 155.800115][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.804965][ T1121] ? rcu_is_watching+0x12/0xc0 [ 155.809779][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.814427][ T1121] ret_from_fork+0x74f/0xa30 [ 155.819083][ T1121] ? __pfx_ret_from_fork+0x10/0x10 [ 155.824256][ T1121] ? __switch_to+0x7a5/0x10c0 [ 155.829016][ T1121] ? __pfx_kthread+0x10/0x10 [ 155.833654][ T1121] ret_from_fork_asm+0x1a/0x30 [ 155.838501][ T1121] [ 155.842169][ T1121] Kernel Offset: disabled [ 155.846535][ T1121] Rebooting in 86400 seconds..