Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. 2025/07/08 16:43:20 ignoring optional flag "sandboxArg"="0" 2025/07/08 16:43:20 ignoring optional flag "type"="gce" 2025/07/08 16:43:20 parsed 1 programs [ 92.012817][ T29] audit: type=1400 audit(1751993002.315:99): avc: denied { unlink } for pid=3994 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.139506][ T3994] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.387092][ T29] audit: type=1400 audit(1751993003.675:100): avc: denied { read } for pid=4009 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.408734][ T29] audit: type=1400 audit(1751993003.675:101): avc: denied { open } for pid=4009 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.495773][ T29] audit: type=1400 audit(1751993003.745:102): avc: denied { unmount } for pid=4010 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.535344][ T29] audit: type=1401 audit(1751993004.835:103): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/07/08 16:43:36 executed programs: 0 2025/07/08 16:44:22 executed programs: 10 [ 151.931658][ T29] audit: type=1400 audit(1751993062.225:104): avc: denied { read write } for pid=6809 comm="syz.4.19" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.955528][ T29] audit: type=1400 audit(1751993062.225:105): avc: denied { open } for pid=6809 comm="syz.4.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.979167][ T29] audit: type=1400 audit(1751993062.225:106): avc: denied { ioctl } for pid=6809 comm="syz.4.19" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.161445][ T3017] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.281715][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.331450][ T3017] usb 5-1: Using ep0 maxpacket: 16 [ 152.346935][ T3017] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.358917][ T3017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 152.363246][ T1128] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.370167][ T3017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 152.404193][ T3017] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 152.413357][ T3017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.421511][ T3017] usb 5-1: Product: syz [ 152.425713][ T3017] usb 5-1: Manufacturer: syz [ 152.430335][ T3017] usb 5-1: SerialNumber: syz [ 152.440056][ T3017] usb 5-1: config 0 descriptor?? [ 152.455701][ T3017] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 152.455943][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 152.465050][ T3017] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 152.494730][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.506308][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 152.517374][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 152.531683][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 152.540844][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.549197][ T10] usb 3-1: Product: syz [ 152.553672][ T10] usb 3-1: Manufacturer: syz [ 152.558294][ T10] usb 3-1: SerialNumber: syz [ 152.568936][ T10] usb 3-1: config 0 descriptor?? [ 152.578281][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 152.587601][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 152.594750][ T1128] usb 2-1: Using ep0 maxpacket: 16 [ 152.605647][ T1128] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.617310][ T1128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 152.628361][ T1128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 152.631345][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.641871][ T1128] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 152.656205][ T1128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.664300][ T1128] usb 2-1: Product: syz [ 152.668496][ T1128] usb 2-1: Manufacturer: syz [ 152.673132][ T1128] usb 2-1: SerialNumber: syz [ 152.680832][ T1128] usb 2-1: config 0 descriptor?? [ 152.689637][ T1128] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 152.698932][ T1128] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 152.711993][ T3017] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 152.718788][ T3017] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 152.726400][ T3017] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 152.733444][ T3017] em28xx 5-1:0.0: No AC97 audio processor [ 152.740156][ T3017] em28xx 5-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 152.791323][ T6836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.798950][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 152.805458][ T3017] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 152.811985][ T3017] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 152.819434][ T3017] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 152.826915][ T3017] em28xx 5-1:0.0: No AC97 audio processor [ 152.831787][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 152.832878][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.839676][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 152.850098][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 152.850133][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 152.858093][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 152.886202][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 152.892692][ T10] em28xx 3-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 152.961741][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 152.967901][ T1128] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 152.975127][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 152.982101][ T1128] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 152.989533][ T1128] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 152.996529][ T1128] em28xx 2-1:0.0: No AC97 audio processor [ 153.002451][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 153.009426][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 153.016140][ T1128] em28xx 2-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 153.080384][ T3017] usb 5-1: USB disconnect, device number 2 [ 153.088105][ T3017] em28xx 5-1:0.0: Disconnecting em28xx #3 [ 153.093911][ T3017] em28xx 5-1:0.0: Disconnecting em28xx [ 153.099499][ T6836] usb 4-1: Using ep0 maxpacket: 16 [ 153.108991][ T3017] em28xx 5-1:0.0: Freeing device [ 153.114084][ T3017] em28xx 5-1:0.0: Freeing device [ 153.130545][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 153.139753][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.147795][ T23] usb 1-1: Product: syz [ 153.151990][ T23] usb 1-1: Manufacturer: syz [ 153.156602][ T23] usb 1-1: SerialNumber: syz [ 153.172076][ T23] usb 1-1: config 0 descriptor?? [ 153.195549][ T6836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.207341][ T6836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 153.218570][ T6836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 153.238542][ T10] usb 3-1: USB disconnect, device number 2 [ 153.239684][ T23] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 153.249863][ T10] em28xx 3-1:0.0: Disconnecting em28xx #4 [ 153.255010][ T23] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 153.259906][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 153.273931][ T1128] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 153.274943][ T6836] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 153.287805][ T1128] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 153.289063][ T6836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.301671][ T1128] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 153.303845][ T6836] usb 4-1: Product: syz [ 153.310774][ T1128] em28xx 2-1:0.0: No AC97 audio processor [ 153.314967][ T6836] usb 4-1: Manufacturer: syz [ 153.325426][ T6836] usb 4-1: SerialNumber: syz [ 153.325990][ T10] non-slab/vmalloc memory [ 153.335139][ T10] list_del corruption. prev->next should be ffff888113e98250, but was ffffffff849b11ae. (prev=ffff88811c444250) [ 153.338242][ T6836] usb 4-1: config 0 descriptor?? [ 153.347596][ T10] ------------[ cut here ]------------ [ 153.357944][ T10] kernel BUG at lib/list_debug.c:62! [ 153.363650][ T10] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 153.369937][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc4-syzkaller-00311-gd1b07cc0868f #0 PREEMPT(voluntary) [ 153.382399][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.392461][ T10] Workqueue: usb_hub_wq hub_event [ 153.397512][ T10] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 153.404644][ T10] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 08 69 87 e8 27 de d2 fe 90 <0f> 0b 4c 89 e7 e8 7c 5c 34 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 153.424266][ T10] RSP: 0018:ffffc900000af678 EFLAGS: 00010282 [ 153.430332][ T10] RAX: 000000000000006d RBX: ffff888113e98250 RCX: ffffffff815cfcd9 [ 153.438313][ T10] RDX: 0000000000000000 RSI: ffffffff815d7b66 RDI: 0000000000000005 [ 153.446298][ T10] RBP: ffff88811c444250 R08: 0000000000000005 R09: 0000000000000000 [ 153.454275][ T10] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811c248250 [ 153.462254][ T10] R13: ffff888113e98000 R14: ffffffff8a06bf08 R15: ffffed10227d3441 [ 153.470235][ T10] FS: 0000000000000000(0000) GS:ffff888269162000(0000) knlGS:0000000000000000 [ 153.479348][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.485934][ T10] CR2: 000055bff8782c40 CR3: 000000011811a000 CR4: 00000000003506f0 [ 153.493911][ T10] Call Trace: [ 153.497193][ T10] [ 153.500175][ T10] em28xx_close_extension+0x10b/0x2b0 [ 153.505627][ T10] em28xx_usb_disconnect+0x19d/0x610 [ 153.510946][ T10] usb_unbind_interface+0x1dd/0x9a0 [ 153.516160][ T10] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 153.521810][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 153.527532][ T10] device_remove+0x125/0x170 [ 153.532127][ T10] device_release_driver_internal+0x44b/0x620 [ 153.538209][ T10] bus_remove_device+0x22f/0x420 [ 153.543151][ T10] device_del+0x396/0x9f0 [ 153.547484][ T10] ? __pfx_device_del+0x10/0x10 [ 153.552340][ T10] ? kobject_put+0x210/0x5a0 [ 153.556942][ T10] usb_disable_device+0x355/0x7d0 [ 153.561981][ T10] usb_disconnect+0x2e1/0x9c0 [ 153.566675][ T10] hub_event+0x1aa0/0x5030 [ 153.571110][ T10] ? __lock_acquire+0xb8a/0x1c90 [ 153.576055][ T10] ? __pfx_hub_event+0x10/0x10 [ 153.580823][ T10] ? assoc_array_gc+0xb40/0x15b0 [ 153.585776][ T10] ? rcu_is_watching+0x12/0xc0 [ 153.590559][ T10] process_one_work+0x9cc/0x1b70 [ 153.595504][ T10] ? __pfx_hub_event+0x10/0x10 [ 153.600281][ T10] ? __pfx_process_one_work+0x10/0x10 [ 153.605662][ T10] ? assign_work+0x1a0/0x250 [ 153.610350][ T10] worker_thread+0x6c8/0xf10 [ 153.615039][ T10] ? __kthread_parkme+0x19e/0x250 [ 153.620072][ T10] ? __pfx_worker_thread+0x10/0x10 [ 153.625189][ T10] kthread+0x3c2/0x780 [ 153.629263][ T10] ? __pfx_kthread+0x10/0x10 [ 153.633857][ T10] ? rcu_is_watching+0x12/0xc0 [ 153.638633][ T10] ? __pfx_kthread+0x10/0x10 [ 153.643226][ T10] ret_from_fork+0x5b3/0x6c0 [ 153.647830][ T10] ? __pfx_kthread+0x10/0x10 [ 153.652431][ T10] ret_from_fork_asm+0x1a/0x30 [ 153.657210][ T10] [ 153.660224][ T10] Modules linked in: [ 153.664345][ T10] ---[ end trace 0000000000000000 ]--- [ 153.669816][ T10] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 153.677109][ T10] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 20 08 69 87 e8 27 de d2 fe 90 <0f> 0b 4c 89 e7 e8 7c 5c 34 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 153.686591][ T6836] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 153.696758][ T10] RSP: 0018:ffffc900000af678 EFLAGS: 00010282 [ 153.696783][ T10] RAX: 000000000000006d RBX: ffff888113e98250 RCX: ffffffff815cfcd9 [ 153.696798][ T10] RDX: 0000000000000000 RSI: ffffffff815d7b66 RDI: 0000000000000005 [ 153.696810][ T10] RBP: ffff88811c444250 R08: 0000000000000005 R09: 0000000000000000 [ 153.696824][ T10] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811c248250 [ 153.696837][ T10] R13: ffff888113e98000 R14: ffffffff8a06bf08 R15: ffffed10227d3441 [ 153.696853][ T10] FS: 0000000000000000(0000) GS:ffff888269162000(0000) knlGS:0000000000000000 [ 153.696876][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.706085][ T6836] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 153.712138][ T10] CR2: 000055bff8782c40 CR3: 000000011811a000 CR4: 00000000003506f0 [ 153.712158][ T10] Kernel panic - not syncing: Fatal exception [ 153.720308][ T10] Kernel Offset: disabled