Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 44.591746][ T29] audit: type=1400 audit(1726424550.557:80): avc: denied { execmem } for pid=2645 comm="syz-executor741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.627978][ T29] audit: type=1400 audit(1726424550.577:81): avc: denied { read write } for pid=2653 comm="syz-executor741" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.652129][ T29] audit: type=1400 audit(1726424550.577:82): avc: denied { open } for pid=2653 comm="syz-executor741" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.676086][ T29] audit: type=1400 audit(1726424550.577:83): avc: denied { ioctl } for pid=2653 comm="syz-executor741" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.888895][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.898025][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 44.908652][ T2072] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.916243][ T37] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 44.923831][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 45.098668][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 45.104058][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 45.108679][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 45.114434][ T2072] usb 1-1: Using ep0 maxpacket: 16 [ 45.115105][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.119640][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 45.131213][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 45.139494][ T2072] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.147351][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 45.158751][ T2072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 45.173935][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 45.181002][ T2072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 45.181292][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.190191][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.201269][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 45.212684][ T8] usb 5-1: Product: syz [ 45.212710][ T8] usb 5-1: Manufacturer: syz [ 45.212736][ T8] usb 5-1: SerialNumber: syz [ 45.220725][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 45.241565][ T8] usb 5-1: config 0 descriptor?? [ 45.260362][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.261818][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 45.273266][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 45.284741][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 45.284788][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 45.295738][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 45.313709][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 45.319914][ T37] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 45.329032][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.329069][ T42] usb 4-1: Product: syz [ 45.338103][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.347099][ T42] usb 4-1: Manufacturer: syz [ 45.347125][ T42] usb 4-1: SerialNumber: syz [ 45.355140][ T37] usb 2-1: Product: syz [ 45.366205][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 45.367397][ T37] usb 2-1: Manufacturer: syz [ 45.371999][ T8] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 45.376552][ T37] usb 2-1: SerialNumber: syz [ 45.389175][ T42] usb 4-1: config 0 descriptor?? [ 45.405188][ T2072] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 45.414501][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 45.420526][ T2072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.429840][ T42] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 45.437926][ T2072] usb 1-1: Product: syz [ 45.437972][ T2072] usb 1-1: Manufacturer: syz [ 45.454286][ T2072] usb 1-1: SerialNumber: syz [ 45.460898][ T37] usb 2-1: config 0 descriptor?? [ 45.468831][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 45.477907][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.485976][ T24] usb 3-1: Product: syz [ 45.490219][ T24] usb 3-1: Manufacturer: syz [ 45.494830][ T24] usb 3-1: SerialNumber: syz executing program [ 45.501911][ T37] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 45.511205][ T37] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 45.523678][ T24] usb 3-1: config 0 descriptor?? [ 45.540474][ T2072] usb 1-1: config 0 descriptor?? [ 45.552988][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 45.562351][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 45.578204][ T2072] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 45.587578][ T2072] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) executing program [ 45.599945][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 45.614214][ T8] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 45.629332][ T8] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 45.636383][ T8] em28xx 5-1:0.0: No AC97 audio processor [ 45.643695][ T8] em28xx 5-1:0.0: We currently don't support analog TV or stream capture on dual tuners. executing program [ 45.689234][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 45.696835][ T42] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 45.708269][ T42] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 45.715507][ T42] em28xx 4-1:0.0: No AC97 audio processor [ 45.722386][ T42] em28xx 4-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 45.732498][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 45.739925][ T8] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 45.747312][ T8] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 45.749305][ T37] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 45.754317][ T8] em28xx 5-1:0.0: No AC97 audio processor [ 45.767894][ T37] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 45.779062][ T37] em28xx 2-1:0.0: AC97 chip type couldn't be determined executing program [ 45.786094][ T37] em28xx 2-1:0.0: No AC97 audio processor [ 45.792655][ T37] em28xx 2-1:0.0: We currently don't support analog TV or stream capture on dual tuners. executing program [ 45.839188][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 45.847458][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 45.865478][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 45.867203][ T42] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 45.872543][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 45.880076][ T42] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 45.886782][ T37] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 45.897348][ T2072] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 45.904119][ T2072] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 45.911300][ T37] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 45.918831][ T2072] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 45.925927][ T2072] em28xx 1-1:0.0: No AC97 audio processor [ 45.931988][ T37] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 45.938986][ T37] em28xx 2-1:0.0: No AC97 audio processor [ 45.944922][ T24] em28xx 3-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 45.955075][ T2072] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 45.995284][ T42] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 46.002314][ T42] em28xx 4-1:0.0: No AC97 audio processor [ 46.116746][ T8] usb 5-1: USB disconnect, device number 2 [ 46.124579][ T8] em28xx 5-1:0.0: Disconnecting em28xx #5 [ 46.130427][ T8] em28xx 5-1:0.0: Disconnecting em28xx [ 46.141811][ T8] em28xx 5-1:0.0: Freeing device [ 46.146883][ T8] em28xx 5-1:0.0: Freeing device [ 46.169188][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 46.175479][ T2072] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 46.182219][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 46.189406][ T2072] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 46.196653][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 46.203660][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 46.210099][ T2072] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 46.217053][ T2072] em28xx 1-1:0.0: No AC97 audio processor [ 46.300431][ T42] usb 4-1: USB disconnect, device number 2 [ 46.307741][ T42] em28xx 4-1:0.0: Disconnecting em28xx #6 [ 46.314086][ T42] em28xx 4-1:0.0: Disconnecting em28xx [ 46.322439][ T42] list_del corruption. next->prev should be ffff888112424250, but was 0000000000000000. (next=ffff888112acc250) [ 46.335387][ T42] ------------[ cut here ]------------ [ 46.337453][ T37] usb 2-1: USB disconnect, device number 2 [ 46.341424][ T42] kernel BUG at lib/list_debug.c:65! [ 46.349896][ T37] em28xx 2-1:0.0: Disconnecting em28xx #7 [ 46.352187][ T42] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 46.357708][ T37] em28xx 2-1:0.0: Disconnecting em28xx [ 46.364632][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/0:2 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 46.364673][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.390816][ T42] Workqueue: usb_hub_wq hub_event [ 46.395908][ T42] RIP: 0010:__list_del_entry_valid_or_report+0x141/0x1c0 [ 46.403400][ T42] Code: e1 fe 90 0f 0b 48 89 c2 48 c7 c7 a0 9e 46 87 e8 05 b1 e1 fe 90 0f 0b 48 89 d1 48 c7 c7 20 9f 46 87 48 89 c2 e8 f0 b0 e1 fe 90 <0f> 0b 48 89 34 24 e8 d4 2e 57 ff 48 8b 34 24 e9 d5 fe ff ff 48 89 [ 46.423129][ T42] RSP: 0018:ffffc900004d76f0 EFLAGS: 00010282 [ 46.429221][ T42] RAX: 000000000000006d RBX: ffffffff89df37a0 RCX: ffffffff813560b9 [ 46.437222][ T42] RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005 [ 46.445209][ T42] RBP: ffff888112424250 R08: 0000000000000005 R09: 0000000000000000 [ 46.453204][ T42] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 46.461193][ T42] R13: ffff888112424000 R14: ffffffff89e0d908 R15: ffff888121f0c000 [ 46.469185][ T42] FS: 0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 [ 46.478135][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.484754][ T42] CR2: 000055853d6842e0 CR3: 0000000111614000 CR4: 00000000003506f0 [ 46.492768][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.496041][ T24] usb 3-1: USB disconnect, device number 2 [ 46.500752][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.500776][ T42] Call Trace: [ 46.500788][ T42] [ 46.500800][ T42] ? show_regs+0x8c/0xa0 [ 46.507899][ T24] em28xx 3-1:0.0: Disconnecting em28xx #8 [ 46.514575][ T42] ? die+0x36/0xa0 [ 46.514626][ T42] ? do_trap+0x232/0x430 [ 46.517927][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 46.520824][ T42] ? __list_del_entry_valid_or_report+0x141/0x1c0 [ 46.550707][ T42] ? __list_del_entry_valid_or_report+0x141/0x1c0 [ 46.557169][ T42] ? do_error_trap+0xf4/0x230 [ 46.561866][ T42] ? __list_del_entry_valid_or_report+0x141/0x1c0 [ 46.568309][ T42] ? handle_invalid_op+0x34/0x40 [ 46.573265][ T42] ? __list_del_entry_valid_or_report+0x141/0x1c0 [ 46.579711][ T42] ? exc_invalid_op+0x2e/0x50 [ 46.584422][ T42] ? asm_exc_invalid_op+0x1a/0x20 [ 46.589489][ T42] ? __wake_up_klogd.part.0+0x99/0xf0 [ 46.594901][ T42] ? vprintk+0x86/0xa0 [ 46.598978][ T42] ? __list_del_entry_valid_or_report+0x141/0x1c0 [ 46.605433][ T42] em28xx_close_extension+0x10e/0x2b0 [ 46.610830][ T42] em28xx_usb_disconnect+0x19d/0x610 [ 46.616131][ T42] usb_unbind_interface+0x1e8/0x970 [ 46.621359][ T42] ? kernfs_find_ns+0x2ee/0x3f0 [ 46.626224][ T42] ? __pfx_usb_unbind_interface+0x10/0x10 [ 46.631965][ T42] device_remove+0x122/0x170 [ 46.636594][ T42] device_release_driver_internal+0x44a/0x610 [ 46.642682][ T42] bus_remove_device+0x22f/0x420 [ 46.647655][ T42] device_del+0x396/0x9f0 [ 46.651999][ T42] ? __pfx_device_del+0x10/0x10 [ 46.656860][ T42] ? kobject_put+0x210/0x5a0 [ 46.661490][ T42] usb_disable_device+0x36c/0x7f0 [ 46.666540][ T42] usb_disconnect+0x2e1/0x920 [ 46.671242][ T42] hub_event+0x1bed/0x4f40 [ 46.675694][ T42] ? __pfx_hub_event+0x10/0x10 [ 46.680502][ T42] ? __pfx_lock_acquire+0x10/0x10 [ 46.685544][ T42] ? __pfx_lock_release+0x10/0x10 [ 46.690587][ T42] process_one_work+0x9c5/0x1b40 [ 46.695547][ T42] ? __pfx_hub_event+0x10/0x10 [ 46.700329][ T42] ? __pfx_process_one_work+0x10/0x10 [ 46.705723][ T42] ? assign_work+0x1a0/0x250 [ 46.710328][ T42] worker_thread+0x6c8/0xed0 [ 46.714938][ T42] ? __kthread_parkme+0x148/0x220 [ 46.719969][ T42] ? __pfx_worker_thread+0x10/0x10 [ 46.725097][ T42] kthread+0x2c1/0x3a0 [ 46.729173][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 46.734393][ T42] ? __pfx_kthread+0x10/0x10 [ 46.738991][ T42] ret_from_fork+0x45/0x80 [ 46.743427][ T42] ? __pfx_kthread+0x10/0x10 [ 46.748024][ T42] ret_from_fork_asm+0x1a/0x30 [ 46.752814][ T42] [ 46.755829][ T42] Modules linked in: [ 46.759802][ T42] ---[ end trace 0000000000000000 ]--- [ 46.765283][ T42] RIP: 0010:__list_del_entry_valid_or_report+0x141/0x1c0 [ 46.772772][ T42] Code: e1 fe 90 0f 0b 48 89 c2 48 c7 c7 a0 9e 46 87 e8 05 b1 e1 fe 90 0f 0b 48 89 d1 48 c7 c7 20 9f 46 87 48 89 c2 e8 f0 b0 e1 fe 90 <0f> 0b 48 89 34 24 e8 d4 2e 57 ff 48 8b 34 24 e9 d5 fe ff ff 48 89 [ 46.792913][ T42] RSP: 0018:ffffc900004d76f0 EFLAGS: 00010282 [ 46.799527][ T42] RAX: 000000000000006d RBX: ffffffff89df37a0 RCX: ffffffff813560b9 [ 46.807510][ T42] RDX: 0000000000000000 RSI: ffffffff8135f4f6 RDI: 0000000000000005 [ 46.815574][ T42] RBP: ffff888112424250 R08: 0000000000000005 R09: 0000000000000000 [ 46.823578][ T42] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 46.831574][ T42] R13: ffff888112424000 R14: ffffffff89e0d908 R15: ffff888121f0c000 [ 46.839581][ T42] FS: 0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 [ 46.848519][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.855172][ T42] CR2: 000055853d6842e0 CR3: 0000000111614000 CR4: 00000000003506f0 [ 46.863172][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.871184][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.879198][ T42] Kernel panic - not syncing: Fatal exception [ 46.885670][ T42] Kernel Offset: disabled [ 46.890043][ T42] Rebooting in 86400 seconds..