Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. 2026/08/03 08:29:51 parsed 1 programs [ 94.220699][ T29] audit: type=1400 audit(1785745793.902:120): avc: denied { unlink } for pid=4016 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 94.342698][ T4016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.459680][ T29] audit: type=1400 audit(1785745796.132:121): avc: denied { create } for pid=4044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 98.214456][ T29] audit: type=1401 audit(1785745797.892:122): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/08/03 08:30:08 executed programs: 0 2026/08/03 08:30:56 executed programs: 10 [ 157.154988][ T29] audit: type=1400 audit(1785745856.832:123): avc: denied { read write } for pid=6782 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.246331][ T29] audit: type=1400 audit(1785745856.832:124): avc: denied { open } for pid=6782 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.274206][ T29] audit: type=1400 audit(1785745856.872:125): avc: denied { ioctl } for pid=6782 comm="syz.2.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.428212][ T725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 157.538747][ T1125] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.586767][ T725] usb 3-1: Using ep0 maxpacket: 16 [ 157.602094][ T725] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.625243][ T725] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 157.642214][ T725] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 157.662217][ T725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.676630][ T725] usb 3-1: Product: syz [ 157.684490][ T725] usb 3-1: Manufacturer: syz [ 157.691732][ T725] usb 3-1: SerialNumber: syz [ 157.716727][ T1125] usb 4-1: Using ep0 maxpacket: 16 [ 157.720639][ T725] em28xx 3-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 157.740465][ T1125] usb 4-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.746695][ T725] em28xx 3-1:246.0: Audio interface 0 found (Vendor Class) [ 157.753541][ T1125] usb 4-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 157.774677][ T28] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 157.790359][ T1125] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 157.800079][ T1125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.816184][ T1125] usb 4-1: Product: syz [ 157.821185][ T1125] usb 4-1: Manufacturer: syz [ 157.825847][ T1125] usb 4-1: SerialNumber: syz [ 157.857293][ T1125] em28xx 4-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 157.869424][ T1125] em28xx 4-1:246.0: Audio interface 0 found (Vendor Class) [ 157.957616][ T28] usb 8-1: Using ep0 maxpacket: 16 [ 157.965372][ T28] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.967125][ T725] em28xx 3-1:246.0: unknown em28xx chip ID (0) [ 157.977901][ T28] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 157.984827][ T725] em28xx 3-1:246.0: Config register raw data: 0xfffffffb [ 157.998870][ T28] usb 8-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 158.004144][ T725] em28xx 3-1:246.0: AC97 chip type couldn't be determined [ 158.012815][ T28] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.020267][ T725] em28xx 3-1:246.0: No AC97 audio processor [ 158.030018][ T28] usb 8-1: Product: syz [ 158.034862][ T725] em28xx 3-1:246.0: We currently don't support analog TV or stream capture on dual tuners. [ 158.039854][ T28] usb 8-1: Manufacturer: syz [ 158.055050][ T28] usb 8-1: SerialNumber: syz [ 158.071793][ T28] em28xx 8-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 158.081988][ T28] em28xx 8-1:246.0: Audio interface 0 found (Vendor Class) [ 158.090904][ T6803] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.107703][ T725] em28xx 3-1:246.0: unknown em28xx chip ID (0) [ 158.115681][ T725] em28xx 3-1:246.0: Config register raw data: 0xfffffffb [ 158.123913][ T725] em28xx 3-1:246.0: AC97 chip type couldn't be determined [ 158.127744][ T1125] em28xx 4-1:246.0: unknown em28xx chip ID (0) [ 158.131608][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 158.138605][ T1125] em28xx 4-1:246.0: Config register raw data: 0xfffffffb [ 158.145736][ T725] em28xx 3-1:246.0: No AC97 audio processor [ 158.160308][ T1125] em28xx 4-1:246.0: AC97 chip type couldn't be determined [ 158.167920][ T1125] em28xx 4-1:246.0: No AC97 audio processor [ 158.175006][ T1125] em28xx 4-1:246.0: We currently don't support analog TV or stream capture on dual tuners. [ 158.246689][ T6803] usb 6-1: Using ep0 maxpacket: 16 [ 158.252526][ T1125] em28xx 4-1:246.0: unknown em28xx chip ID (0) [ 158.260267][ T1125] em28xx 4-1:246.0: Config register raw data: 0xfffffffb [ 158.269909][ T6803] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.284898][ T6803] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 158.296759][ T1125] em28xx 4-1:246.0: AC97 chip type couldn't be determined [ 158.298016][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 158.304424][ T1125] em28xx 4-1:246.0: No AC97 audio processor [ 158.322645][ T6803] usb 6-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 158.331273][ T11] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.345054][ T6803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.354233][ T28] em28xx 8-1:246.0: unknown em28xx chip ID (0) [ 158.356654][ T11] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 158.361223][ T6803] usb 6-1: Product: syz [ 158.377004][ T28] em28xx 8-1:246.0: Config register raw data: 0xfffffffb [ 158.394692][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 158.399868][ T28] em28xx 8-1:246.0: AC97 chip type couldn't be determined [ 158.404435][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.412058][ T6803] usb 6-1: Manufacturer: syz [ 158.436508][ T28] em28xx 8-1:246.0: No AC97 audio processor [ 158.441261][ T725] usb 3-1: USB disconnect, device number 2 [ 158.451830][ T11] usb 2-1: Product: syz [ 158.457958][ T28] em28xx 8-1:246.0: We currently don't support analog TV or stream capture on dual tuners. [ 158.465625][ T11] usb 2-1: Manufacturer: syz [ 158.471630][ T6803] usb 6-1: SerialNumber: syz [ 158.481292][ T725] em28xx 3-1:246.0: Disconnecting em28xx #2 [ 158.488213][ T11] usb 2-1: SerialNumber: syz [ 158.501506][ T725] em28xx 3-1:246.0: Disconnecting em28xx [ 158.522435][ T6803] em28xx 6-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 158.540490][ T11] em28xx 2-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 158.553698][ T6803] em28xx 6-1:246.0: Audio interface 0 found (Vendor Class) [ 158.561288][ T725] em28xx 3-1:246.0: Freeing device [ 158.565517][ T28] em28xx 8-1:246.0: unknown em28xx chip ID (0) [ 158.570431][ T11] em28xx 2-1:246.0: Audio interface 0 found (Vendor Class) [ 158.591892][ T725] em28xx 3-1:246.0: Freeing device [ 158.595888][ T28] em28xx 8-1:246.0: Config register raw data: 0xfffffffb [ 158.629428][ T28] em28xx 8-1:246.0: AC97 chip type couldn't be determined [ 158.651933][ T28] em28xx 8-1:246.0: No AC97 audio processor [ 158.769708][ T6803] em28xx 6-1:246.0: unknown em28xx chip ID (0) [ 158.777093][ T11] em28xx 2-1:246.0: unknown em28xx chip ID (0) [ 158.783865][ T6803] em28xx 6-1:246.0: Config register raw data: 0xfffffffb [ 158.785594][ T6803] em28xx 6-1:246.0: AC97 chip type couldn't be determined [ 158.792907][ T11] em28xx 2-1:246.0: Config register raw data: 0xfffffffb [ 158.823514][ T1125] usb 4-1: USB disconnect, device number 2 [ 158.835244][ T6803] em28xx 6-1:246.0: No AC97 audio processor [ 158.845453][ T11] em28xx 2-1:246.0: AC97 chip type couldn't be determined [ 158.859797][ T1125] em28xx 4-1:246.0: Disconnecting em28xx #4 [ 158.866384][ T1125] em28xx 4-1:246.0: Disconnecting em28xx [ 158.872368][ T1125] non-slab/vmalloc memory [ 158.883971][ T11] em28xx 2-1:246.0: No AC97 audio processor [ 158.892638][ T1125] list_del corruption. prev->next should be ffff888124970250, but was 0000000000000000. (prev=ffff8881131c8250) [ 158.927271][ T1125] ------------[ cut here ]------------ [ 158.933174][ T1125] kernel BUG at lib/list_debug.c:62! [ 158.940170][ T1125] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 158.946788][ T1125] CPU: 1 UID: 0 PID: 1125 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(lazy) [ 158.957320][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.968425][ T1125] Workqueue: usb_hub_wq hub_event [ 158.973604][ T1125] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 158.981189][ T1125] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 59 b1 87 e8 07 92 45 fe 90 <0f> 0b 4c 89 e7 e8 bc 18 22 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 158.996742][ T725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.005435][ T1125] RSP: 0018:ffffc9000345f608 EFLAGS: 00010282 [ 159.005466][ T1125] RAX: 000000000000006d RBX: ffff888124970250 RCX: 0000000000000000 [ 159.005481][ T1125] RDX: 000000000000006d RSI: ffffffff8192e649 RDI: fffff5200068beb2 [ 159.005498][ T1125] RBP: ffff8881131c8250 R08: 0000000000000005 R09: 0000000000000000 [ 159.005512][ T1125] R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881166e8250 [ 159.005529][ T1125] R13: ffff888124970000 R14: ffffffff8a7acd88 R15: ffffed102492e46f [ 159.069961][ T1125] FS: 0000000000000000(0000) GS:ffff888268736000(0000) knlGS:0000000000000000 [ 159.080150][ T1125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.087511][ T1125] CR2: 000033c4e0e4b000 CR3: 00000001224d6000 CR4: 00000000003506f0 [ 159.096080][ T1125] Call Trace: [ 159.099634][ T1125] [ 159.102718][ T1125] em28xx_close_extension+0x10b/0x2b0 [ 159.108230][ T1125] em28xx_usb_disconnect.cold+0x13d/0x253 [ 159.114473][ T1125] usb_unbind_interface+0x1dd/0x9e0 [ 159.119788][ T1125] ? __pfx_usb_unbind_interface+0x10/0x10 [ 159.125599][ T1125] device_remove+0x12a/0x180 [ 159.130383][ T1125] device_release_driver_internal+0x44e/0x620 [ 159.136649][ T1125] bus_remove_device+0x2bc/0x560 [ 159.142078][ T1125] ? __pfx_bus_remove_device+0x10/0x10 [ 159.147812][ T1125] ? __pfx_device_remove_attrs+0x10/0x10 [ 159.153678][ T1125] device_del+0x376/0x9b0 [ 159.159075][ T1125] ? __pfx_device_del+0x10/0x10 [ 159.164139][ T1125] ? kobject_put+0xb9/0x640 [ 159.168785][ T1125] usb_disable_device+0x367/0x810 [ 159.173948][ T1125] usb_disconnect+0x2e2/0x9a0 [ 159.178813][ T1125] hub_event+0x1d0c/0x4af0 [ 159.183434][ T1125] ? __lock_acquire+0x49f/0x1a40 [ 159.188563][ T1125] ? do_raw_spin_unlock+0x145/0x1e0 [ 159.193876][ T1125] ? __pfx_hub_event+0x10/0x10 [ 159.198652][ T1125] ? debug_object_deactivate+0x2e4/0x3b0 [ 159.204403][ T1125] ? rcu_is_watching+0x12/0xc0 [ 159.209268][ T1125] process_one_work+0xa23/0x1940 [ 159.214407][ T1125] ? __pfx_process_one_work+0x10/0x10 [ 159.219898][ T1125] ? __pfx_hub_event+0x10/0x10 [ 159.224720][ T1125] worker_thread+0x5ef/0xe50 [ 159.230072][ T1125] ? __pfx_worker_thread+0x10/0x10 [ 159.235341][ T1125] ? kthread+0x13a/0x450 [ 159.240023][ T1125] ? __pfx_worker_thread+0x10/0x10 [ 159.246119][ T1125] kthread+0x370/0x450 [ 159.252074][ T1125] ? __pfx_kthread+0x10/0x10 [ 159.257417][ T1125] ret_from_fork+0x69a/0xc80 [ 159.263232][ T1125] ? __pfx_ret_from_fork+0x10/0x10 [ 159.269608][ T1125] ? __switch_to+0x7f6/0x10e0 [ 159.275313][ T1125] ? __switch_to_asm+0x39/0x70 [ 159.280913][ T1125] ? __pfx_kthread+0x10/0x10 [ 159.285822][ T1125] ret_from_fork_asm+0x1a/0x30 [ 159.292358][ T1125] [ 159.295843][ T1125] Modules linked in: [ 159.300594][ T1125] ---[ end trace 0000000000000000 ]--- [ 159.302217][ T725] usb 3-1: Using ep0 maxpacket: 16 [ 159.315231][ T725] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.331892][ T725] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 34178, setting to 1024 [ 159.346683][ T725] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 159.359306][ T725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.369673][ T725] usb 3-1: Product: syz [ 159.380877][ T1125] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 159.385756][ T725] usb 3-1: Manufacturer: syz [ 159.393292][ T28] usb 8-1: USB disconnect, device number 2 [ 159.400888][ T1125] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 59 b1 87 e8 07 92 45 fe 90 <0f> 0b 4c 89 e7 e8 bc 18 22 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 159.407566][ T725] usb 3-1: SerialNumber: syz [ 159.424866][ T1125] RSP: 0018:ffffc9000345f608 EFLAGS: 00010282 [ 159.435534][ T28] em28xx 8-1:246.0: Disconnecting em28xx #5 [ 159.442195][ T28] em28xx 8-1:246.0: Disconnecting em28xx [ 159.453815][ T725] em28xx 3-1:246.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.454602][ T1125] RAX: 000000000000006d RBX: ffff888124970250 RCX: 0000000000000000 [ 159.464433][ T725] em28xx 3-1:246.0: Audio interface 0 found (Vendor Class) [ 159.473333][ T1125] RDX: 000000000000006d RSI: ffffffff8192e649 RDI: fffff5200068beb2 [ 159.489234][ T1125] RBP: ffff8881131c8250 R08: 0000000000000005 R09: 0000000000000000 [ 159.497838][ T1125] R10: 0000000080000000 R11: 0000000000000001 R12: ffff8881166e8250 [ 159.506138][ T1125] R13: ffff888124970000 R14: ffffffff8a7acd88 R15: ffffed102492e46f [ 159.514979][ T1125] FS: 0000000000000000(0000) GS:ffff888268736000(0000) knlGS:0000000000000000 [ 159.524259][ T1125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.532588][ T1125] CR2: 0000564d5d7ab338 CR3: 000000012083c000 CR4: 00000000003506f0 [ 159.541750][ T1125] Kernel panic - not syncing: Fatal exception [ 159.548652][ T1125] Kernel Offset: disabled [ 159.553711][ T1125] Rebooting in 86400 seconds..