[ 39.578959][ T2968] cgroup: Unknown subsys name 'cpuset'
[ 39.587459][ T2968] cgroup: Unknown subsys name 'rlimit'
[ 39.700161][ T29] audit: type=1400 audit(1763214848.860:69): avc: denied { mounton } for pid=2968 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 39.725403][ T29] audit: type=1400 audit(1763214848.860:70): avc: denied { mount } for pid=2968 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 50.094933][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 50.094953][ T29] audit: type=1400 audit(1763214859.250:79): avc: denied { mounton } for pid=2973 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 50.143039][ T29] audit: type=1400 audit(1763214859.300:80): avc: denied { read write } for pid=2973 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 50.167324][ T29] audit: type=1400 audit(1763214859.300:81): avc: denied { open } for pid=2973 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 50.196436][ T29] audit: type=1400 audit(1763214859.300:82): avc: denied { ioctl } for pid=2973 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 50.241023][ T2973] syz-executor.0 (2973) used greatest stack depth: 23320 bytes left
Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts.
2025/11/15 13:54:39 ignoring optional flag "type"="gce"
2025/11/15 13:54:40 parsed 1 programs
2025/11/15 13:54:40 executed programs: 0
[ 73.728654][ T29] audit: type=1400 audit(1763214882.890:83): avc: denied { create } for pid=3451 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.751247][ T29] audit: type=1400 audit(1763214882.890:84): avc: denied { write } for pid=3451 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.772113][ T29] audit: type=1400 audit(1763214882.910:85): avc: denied { read } for pid=3451 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 81.490643][ T29] audit: type=1400 audit(1763214890.650:86): avc: denied { write } for pid=3900 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 81.514376][ T29] audit: type=1400 audit(1763214890.650:87): avc: denied { ioctl } for pid=3900 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 81.544814][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 81.554582][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 81.726604][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 81.876421][ T10] usb 1-1: Using ep0 maxpacket: 32
[ 81.883813][ T10] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[ 81.892014][ T10] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[ 81.900063][ T10] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 81.908818][ T10] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 81.918939][ T10] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[ 81.927931][ T10] usb 1-1: config 0 has no interface number 1
[ 81.934057][ T10] usb 1-1: config 0 has no interface number 2
[ 81.940267][ T10] usb 1-1: config 0 interface 3 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[ 81.953454][ T10] usb 1-1: config 0 interface 7 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 81.966475][ T10] usb 1-1: config 0 interface 3 has no altsetting 0
[ 81.973178][ T10] usb 1-1: config 0 interface 7 has no altsetting 0
[ 81.982152][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=37.b3
[ 81.991347][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 81.999477][ T10] usb 1-1: Product: syz
[ 82.003663][ T10] usb 1-1: Manufacturer: syz
[ 82.008317][ T10] usb 1-1: SerialNumber: syz
[ 82.016067][ T10] usb 1-1: config 0 descriptor??
[ 82.229737][ T10] smsusb:smsusb_probe: board id=8, interface number 3
[ 82.239306][ T10] smsusb:smsusb_probe: board id=8, interface number 7
[ 82.248499][ T10] smsusb:smsusb_probe: board id=8, interface number 0
[ 82.259641][ T10] smsusb:siano_media_device_register: media controller created
[ 82.268882][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1
[ 82.274891][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[ 82.283402][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[ 82.292322][ T10] ------------[ cut here ]------------
[ 82.297852][ T10] WARNING: CPU: 0 PID: 10 at mm/slub.c:6748 free_large_kmalloc+0x114/0x180
[ 82.306543][ T10] Modules linked in:
[ 82.310580][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary)
[ 82.320369][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 82.330516][ T10] Workqueue: usb_hub_wq hub_event
[ 82.335575][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180
[ 82.341483][ T10] Code: 00 00 00 48 89 df e8 3b 70 0b 00 e8 56 72 b0 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 28 df d3 88 e8 90 f1 f0 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 db a6 c7 88 48 89 df 5b 5d 41 5c 41 5d e9 74 f1
[ 82.361365][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202
[ 82.367476][ T10] RAX: 0200000000000000 RBX: ffffea00049d7880 RCX: ffffffff813ca8fe
[ 82.375469][ T10] RDX: 00000000000000ff RSI: ffff8881275e2000 RDI: ffffea00049d7880
[ 82.383703][ T10] RBP: ffff8881275e2000 R08: 0000000000000007 R09: 0000000000000000
[ 82.391759][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811d149000
[ 82.399788][ T10] R13: ffff88811d148000 R14: dffffc0000000000 R15: ffff88811d1490f0
[ 82.407811][ T10] FS: 0000000000000000(0000) GS:ffff888268ea0000(0000) knlGS:0000000000000000
[ 82.416861][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 82.423606][ T10] CR2: 00005611af4db318 CR3: 0000000116c8a000 CR4: 00000000003506f0
[ 82.431638][ T10] Call Trace:
[ 82.434945][ T10]
[ 82.437955][ T10] usb_free_urb.part.0+0xe5/0x100
[ 82.443041][ T10] usb_free_urb+0x1f/0x30
[ 82.447501][ T10] smsusb_term_device+0x108/0x1e0
[ 82.452681][ T10] smsusb_init_device+0xaa0/0xe00
[ 82.457910][ T10] ? __pfx_smsusb_init_device+0x10/0x10
[ 82.463497][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 82.469109][ T10] ? usb_clear_halt+0xb5/0x160
[ 82.473909][ T10] smsusb_probe+0x5d3/0x1090
[ 82.478576][ T10] ? __pfx_smsusb_probe+0x10/0x10
[ 82.483801][ T10] ? mark_held_locks+0x49/0x80
[ 82.488621][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 82.494489][ T10] ? __pm_runtime_set_status+0x13c/0xa80
[ 82.500277][ T10] usb_probe_interface+0x303/0xa40
[ 82.505421][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 82.511147][ T10] really_probe+0x241/0xa90
[ 82.515678][ T10] __driver_probe_device+0x1de/0x440
[ 82.521026][ T10] driver_probe_device+0x4c/0x1b0
[ 82.526167][ T10] __device_attach_driver+0x1df/0x310
[ 82.531589][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 82.537553][ T10] bus_for_each_drv+0x159/0x1e0
[ 82.542430][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 82.547859][ T10] ? lockdep_hardirqs_on+0x7c/0x110
[ 82.553096][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 82.559147][ T10] __device_attach+0x1e4/0x4b0
[ 82.563940][ T10] ? __pfx___device_attach+0x10/0x10
[ 82.569539][ T10] ? do_raw_spin_unlock+0x172/0x230
[ 82.574945][ T10] bus_probe_device+0x17f/0x1c0
[ 82.579856][ T10] device_add+0x1148/0x1aa0
[ 82.584472][ T10] ? __pfx_device_add+0x10/0x10
[ 82.589373][ T10] ? mark_held_locks+0x49/0x80
[ 82.594167][ T10] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 82.600220][ T10] usb_set_configuration+0x1187/0x1e20
[ 82.605722][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 82.611882][ T10] usb_generic_driver_probe+0xb1/0x110
[ 82.617426][ T10] usb_probe_device+0xef/0x3e0
[ 82.622205][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 82.627719][ T10] really_probe+0x241/0xa90
[ 82.632246][ T10] __driver_probe_device+0x1de/0x440
[ 82.637593][ T10] ? usb_driver_applicable+0x1c7/0x220
[ 82.643097][ T10] driver_probe_device+0x4c/0x1b0
[ 82.648198][ T10] __device_attach_driver+0x1df/0x310
[ 82.653599][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 82.659634][ T10] bus_for_each_drv+0x159/0x1e0
[ 82.664520][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 82.670040][ T10] ? lockdep_hardirqs_on+0x7c/0x110
[ 82.675319][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80
2025/11/15 13:54:51 executed programs: 1
[ 82.681261][ T10] __device_attach+0x1e4/0x4b0
[ 82.686063][ T10] ? __pfx___device_attach+0x10/0x10
[ 82.691436][ T10] ? do_raw_spin_unlock+0x172/0x230
[ 82.696718][ T10] bus_probe_device+0x17f/0x1c0
[ 82.701587][ T10] device_add+0x1148/0x1aa0
[ 82.706097][ T10] ? __pfx_device_add+0x10/0x10
[ 82.710988][ T10] ? add_device_randomness+0xb7/0xf0
[ 82.716370][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 82.722285][ T10] usb_new_device+0xd07/0x1a60
[ 82.727142][ T10] ? do_raw_spin_lock+0x12c/0x2b0
[ 82.732290][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 82.737596][ T10] ? mark_held_locks+0x49/0x80
[ 82.742414][ T10] hub_event+0x2fce/0x5060
[ 82.746974][ T10] ? __pfx_hub_event+0x10/0x10
[ 82.751863][ T10] ? mpi_powm+0x1570/0x1bf0
[ 82.756873][ T10] ? rcu_is_watching+0x12/0xc0
[ 82.761696][ T10] process_one_work+0x9cf/0x1b70
[ 82.766754][ T10] ? __pfx_hcd_resume_work+0x10/0x10
[ 82.772166][ T10] ? __pfx_process_one_work+0x10/0x10
[ 82.777679][ T10] ? assign_work+0x1a0/0x250
[ 82.782315][ T10] worker_thread+0x6c8/0xf10
[ 82.786147][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 82.787019][ T10] ? __kthread_parkme+0x19e/0x250
[ 82.797091][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 82.800431][ T10] ? __pfx_worker_thread+0x10/0x10
[ 82.813229][ T10] kthread+0x3c5/0x780
[ 82.817362][ T10] ? __pfx_kthread+0x10/0x10
[ 82.821981][ T10] ? rcu_is_watching+0x12/0xc0
[ 82.826912][ T10] ? __pfx_kthread+0x10/0x10
[ 82.831702][ T10] ret_from_fork+0x56d/0x700
[ 82.836361][ T10] ? __pfx_kthread+0x10/0x10
[ 82.840990][ T10] ret_from_fork_asm+0x1a/0x30
[ 82.845793][ T10]
[ 82.848870][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 82.856163][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary)
[ 82.865884][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 82.876121][ T10] Workqueue: usb_hub_wq hub_event
[ 82.881158][ T10] Call Trace:
[ 82.884438][ T10]
[ 82.887371][ T10] dump_stack_lvl+0x3d/0x1f0
[ 82.892064][ T10] vpanic+0x640/0x6f0
[ 82.896067][ T10] ? free_large_kmalloc+0x114/0x180
[ 82.901279][ T10] panic+0xca/0xd0
[ 82.905098][ T10] ? __pfx_panic+0x10/0x10
[ 82.909898][ T10] ? check_panic_on_warn+0x1f/0xb0
[ 82.915022][ T10] check_panic_on_warn+0xab/0xb0
[ 82.920325][ T10] __warn+0xf6/0x3c0
[ 82.924312][ T10] ? free_large_kmalloc+0x114/0x180
[ 82.929617][ T10] report_bug+0x3c3/0x580
[ 82.933961][ T10] ? free_large_kmalloc+0x114/0x180
[ 82.939176][ T10] handle_bug+0x184/0x210
[ 82.943503][ T10] exc_invalid_op+0x17/0x50
[ 82.948006][ T10] asm_exc_invalid_op+0x1a/0x20
[ 82.952905][ T10] RIP: 0010:free_large_kmalloc+0x114/0x180
[ 82.958719][ T10] Code: 00 00 00 48 89 df e8 3b 70 0b 00 e8 56 72 b0 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 28 df d3 88 e8 90 f1 f0 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 db a6 c7 88 48 89 df 5b 5d 41 5c 41 5d e9 74 f1
[ 82.978327][ T10] RSP: 0018:ffffc900000aedb8 EFLAGS: 00010202
[ 82.984392][ T10] RAX: 0200000000000000 RBX: ffffea00049d7880 RCX: ffffffff813ca8fe
[ 82.992518][ T10] RDX: 00000000000000ff RSI: ffff8881275e2000 RDI: ffffea00049d7880
[ 83.000497][ T10] RBP: ffff8881275e2000 R08: 0000000000000007 R09: 0000000000000000
[ 83.008562][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811d149000
[ 83.016523][ T10] R13: ffff88811d148000 R14: dffffc0000000000 R15: ffff88811d1490f0
[ 83.024503][ T10] ? __phys_addr+0xde/0x180
[ 83.029070][ T10] usb_free_urb.part.0+0xe5/0x100
[ 83.034093][ T10] usb_free_urb+0x1f/0x30
[ 83.038464][ T10] smsusb_term_device+0x108/0x1e0
[ 83.043496][ T10] smsusb_init_device+0xaa0/0xe00
[ 83.048523][ T10] ? __pfx_smsusb_init_device+0x10/0x10
[ 83.054070][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 83.059716][ T10] ? usb_clear_halt+0xb5/0x160
[ 83.064484][ T10] smsusb_probe+0x5d3/0x1090
[ 83.069079][ T10] ? __pfx_smsusb_probe+0x10/0x10
[ 83.074109][ T10] ? mark_held_locks+0x49/0x80
[ 83.078884][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 83.084710][ T10] ? __pm_runtime_set_status+0x13c/0xa80
[ 83.090346][ T10] usb_probe_interface+0x303/0xa40
[ 83.095548][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 83.101199][ T10] really_probe+0x241/0xa90
[ 83.105709][ T10] __driver_probe_device+0x1de/0x440
[ 83.110994][ T10] driver_probe_device+0x4c/0x1b0
[ 83.116045][ T10] __device_attach_driver+0x1df/0x310
[ 83.121417][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 83.127307][ T10] bus_for_each_drv+0x159/0x1e0
[ 83.132265][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 83.137731][ T10] ? lockdep_hardirqs_on+0x7c/0x110
[ 83.142929][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 83.148736][ T10] __device_attach+0x1e4/0x4b0
[ 83.153501][ T10] ? __pfx___device_attach+0x10/0x10
[ 83.158917][ T10] ? do_raw_spin_unlock+0x172/0x230
[ 83.164233][ T10] bus_probe_device+0x17f/0x1c0
[ 83.169118][ T10] device_add+0x1148/0x1aa0
[ 83.173715][ T10] ? __pfx_device_add+0x10/0x10
[ 83.178567][ T10] ? mark_held_locks+0x49/0x80
[ 83.183444][ T10] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 83.189367][ T10] usb_set_configuration+0x1187/0x1e20
[ 83.194860][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 83.200946][ T10] usb_generic_driver_probe+0xb1/0x110
[ 83.206429][ T10] usb_probe_device+0xef/0x3e0
[ 83.211322][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 83.216704][ T10] really_probe+0x241/0xa90
[ 83.221224][ T10] __driver_probe_device+0x1de/0x440
[ 83.226509][ T10] ? usb_driver_applicable+0x1c7/0x220
[ 83.231968][ T10] driver_probe_device+0x4c/0x1b0
[ 83.237025][ T10] __device_attach_driver+0x1df/0x310
[ 83.242402][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 83.248293][ T10] bus_for_each_drv+0x159/0x1e0
[ 83.253152][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 83.258543][ T10] ? lockdep_hardirqs_on+0x7c/0x110
[ 83.263842][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 83.269746][ T10] __device_attach+0x1e4/0x4b0
[ 83.274533][ T10] ? __pfx___device_attach+0x10/0x10
[ 83.279863][ T10] ? do_raw_spin_unlock+0x172/0x230
[ 83.285074][ T10] bus_probe_device+0x17f/0x1c0
[ 83.289958][ T10] device_add+0x1148/0x1aa0
[ 83.294494][ T10] ? __pfx_device_add+0x10/0x10
[ 83.299355][ T10] ? add_device_randomness+0xb7/0xf0
[ 83.304641][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 83.310625][ T10] usb_new_device+0xd07/0x1a60
[ 83.315486][ T10] ? do_raw_spin_lock+0x12c/0x2b0
[ 83.320507][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 83.325700][ T10] ? mark_held_locks+0x49/0x80
[ 83.330477][ T10] hub_event+0x2fce/0x5060
[ 83.334910][ T10] ? __pfx_hub_event+0x10/0x10
[ 83.339675][ T10] ? mpi_powm+0x1570/0x1bf0
[ 83.344199][ T10] ? rcu_is_watching+0x12/0xc0
[ 83.348967][ T10] process_one_work+0x9cf/0x1b70
[ 83.353929][ T10] ? __pfx_hcd_resume_work+0x10/0x10
[ 83.359221][ T10] ? __pfx_process_one_work+0x10/0x10
[ 83.364609][ T10] ? assign_work+0x1a0/0x250
[ 83.369212][ T10] worker_thread+0x6c8/0xf10
[ 83.373838][ T10] ? __kthread_parkme+0x19e/0x250
[ 83.379018][ T10] ? __pfx_worker_thread+0x10/0x10
[ 83.384262][ T10] kthread+0x3c5/0x780
[ 83.388348][ T10] ? __pfx_kthread+0x10/0x10
[ 83.393070][ T10] ? rcu_is_watching+0x12/0xc0
[ 83.397855][ T10] ? __pfx_kthread+0x10/0x10
[ 83.402463][ T10] ret_from_fork+0x56d/0x700
[ 83.407057][ T10] ? __pfx_kthread+0x10/0x10
[ 83.411677][ T10] ret_from_fork_asm+0x1a/0x30
[ 83.416469][ T10]
[ 83.419734][ T10] Kernel Offset: disabled
[ 83.424053][ T10] Rebooting in 86400 seconds..