Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. 2025/09/04 20:18:12 ignoring optional flag "type"="gce" 2025/09/04 20:18:12 parsed 1 programs 2025/09/04 20:18:12 executed programs: 0 [ 73.535164][ T29] audit: type=1400 audit(1757017095.243:83): avc: denied { create } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.555924][ T29] audit: type=1400 audit(1757017095.243:84): avc: denied { write } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.577932][ T29] audit: type=1400 audit(1757017095.283:85): avc: denied { read } for pid=3444 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.334714][ T29] audit: type=1400 audit(1757017103.043:86): avc: denied { write } for pid=3893 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.359369][ T3895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.376063][ T29] audit: type=1400 audit(1757017103.043:87): avc: denied { ioctl } for pid=3893 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.402922][ T3895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.579757][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.729537][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 81.736730][ T23] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 81.744867][ T23] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 81.752908][ T23] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 81.761626][ T23] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 81.771754][ T23] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 81.780902][ T23] usb 1-1: config 0 has no interface number 1 [ 81.786979][ T23] usb 1-1: config 0 has no interface number 2 [ 81.793134][ T23] usb 1-1: config 0 interface 3 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 81.806424][ T23] usb 1-1: config 0 interface 7 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 81.819500][ T23] usb 1-1: config 0 interface 3 has no altsetting 0 [ 81.826259][ T23] usb 1-1: config 0 interface 7 has no altsetting 0 [ 81.834873][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=37.b3 [ 81.844066][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.852192][ T23] usb 1-1: Product: syz [ 81.856369][ T23] usb 1-1: Manufacturer: syz [ 81.861041][ T23] usb 1-1: SerialNumber: syz [ 81.868564][ T23] usb 1-1: config 0 descriptor?? [ 82.081811][ T23] smsusb:smsusb_probe: board id=8, interface number 3 [ 82.094758][ T23] smsusb:smsusb_probe: board id=8, interface number 7 [ 82.104055][ T23] smsusb:smsusb_probe: board id=8, interface number 0 [ 82.114480][ T23] smsusb:siano_media_device_register: media controller created [ 82.123563][ T23] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 82.130354][ T23] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 82.137940][ T23] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 82.146786][ T23] ------------[ cut here ]------------ [ 82.152271][ T23] WARNING: CPU: 1 PID: 23 at mm/slub.c:4790 free_large_kmalloc+0x114/0x180 [ 82.161082][ T23] Modules linked in: [ 82.165113][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.174793][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.184885][ T23] Workqueue: usb_hub_wq hub_event [ 82.189970][ T23] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 82.195828][ T23] Code: 00 00 00 48 89 df e8 8b ed 0a 00 e8 26 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 98 96 c4 88 e8 c0 1a f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 6e 8a d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 1a [ 82.215757][ T23] RSP: 0018:ffffc9000018edb8 EFLAGS: 00010202 [ 82.221963][ T23] RAX: 0200000000000000 RBX: ffffea0004a4f880 RCX: ffffffff813c723e [ 82.230210][ T23] RDX: 00000000000000ff RSI: ffff8881293e2000 RDI: ffffea0004a4f880 [ 82.238214][ T23] RBP: ffff8881293e2000 R08: 0000000000000007 R09: 0000000000000000 [ 82.246247][ T23] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811cfe1000 [ 82.254348][ T23] R13: ffff888108ae6000 R14: dffffc0000000000 R15: ffff88811cfe10f0 [ 82.262968][ T23] FS: 0000000000000000(0000) GS:ffff888268ff9000(0000) knlGS:0000000000000000 [ 82.271962][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.278634][ T23] CR2: 000055c940d415f0 CR3: 0000000117100000 CR4: 00000000003506f0 [ 82.286654][ T23] Call Trace: [ 82.289986][ T23] [ 82.292921][ T23] usb_free_urb.part.0+0xe5/0x100 [ 82.297971][ T23] usb_free_urb+0x1f/0x30 [ 82.302349][ T23] smsusb_term_device+0x108/0x1e0 [ 82.307456][ T23] smsusb_init_device+0xaa0/0xe00 [ 82.312646][ T23] ? __pfx_smsusb_init_device+0x10/0x10 [ 82.318230][ T23] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 82.324019][ T23] ? usb_clear_halt+0xb5/0x160 [ 82.328821][ T23] smsusb_probe+0x5d3/0x1090 [ 82.333567][ T23] ? __pfx_smsusb_probe+0x10/0x10 [ 82.338615][ T23] ? mark_held_locks+0x49/0x80 [ 82.343432][ T23] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.349264][ T23] ? __pm_runtime_set_status+0x13c/0xa80 [ 82.354985][ T23] usb_probe_interface+0x300/0xa40 [ 82.360150][ T23] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.365796][ T23] really_probe+0x241/0xa90 [ 82.370375][ T23] __driver_probe_device+0x1de/0x440 [ 82.375695][ T23] driver_probe_device+0x4c/0x1b0 [ 82.380789][ T23] __device_attach_driver+0x1df/0x310 [ 82.386278][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 82.392226][ T23] bus_for_each_drv+0x159/0x1e0 [ 82.397113][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.402561][ T23] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.407786][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.413741][ T23] __device_attach+0x1e4/0x4b0 [ 82.418542][ T23] ? __pfx___device_attach+0x10/0x10 [ 82.424193][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 82.429499][ T23] bus_probe_device+0x17f/0x1c0 [ 82.434464][ T23] device_add+0x1148/0x1aa0 [ 82.439064][ T23] ? __pfx_device_add+0x10/0x10 [ 82.443986][ T23] ? mark_held_locks+0x49/0x80 [ 82.448777][ T23] ? create_intf_ep_devs.isra.0+0x195/0x200 [ 82.454815][ T23] usb_set_configuration+0x1187/0x1e20 [ 82.460408][ T23] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 82.466483][ T23] usb_generic_driver_probe+0xb1/0x110 [ 82.472005][ T23] usb_probe_device+0xef/0x3e0 [ 82.476794][ T23] ? __pfx_usb_probe_device+0x10/0x10 [ 82.482209][ T23] really_probe+0x241/0xa90 [ 82.486745][ T23] __driver_probe_device+0x1de/0x440 [ 82.492073][ T23] ? usb_driver_applicable+0x1c7/0x220 [ 82.497558][ T23] driver_probe_device+0x4c/0x1b0 [ 82.502642][ T23] __device_attach_driver+0x1df/0x310 [ 82.508039][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 82.514072][ T23] bus_for_each_drv+0x159/0x1e0 [ 82.519080][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.524501][ T23] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.529774][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.535582][ T23] __device_attach+0x1e4/0x4b0 [ 82.540383][ T23] ? __pfx___device_attach+0x10/0x10 [ 82.545696][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 82.550961][ T23] bus_probe_device+0x17f/0x1c0 [ 82.556184][ T23] device_add+0x1148/0x1aa0 [ 82.560766][ T23] ? __pfx_device_add+0x10/0x10 [ 82.565641][ T23] ? add_device_randomness+0xb7/0xf0 [ 82.571070][ T23] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 82.577034][ T23] usb_new_device+0xd07/0x1a60 2025/09/04 20:18:24 executed programs: 1 [ 82.581967][ T23] ? do_raw_spin_lock+0x12c/0x2b0 [ 82.587011][ T23] ? __pfx_usb_new_device+0x10/0x10 [ 82.592381][ T23] ? mark_held_locks+0x49/0x80 [ 82.597187][ T23] hub_event+0x2fce/0x5060 [ 82.601722][ T23] ? __pfx_hub_event+0x10/0x10 [ 82.606878][ T23] ? assoc_array_apply_edit+0x420/0x6c0 [ 82.612574][ T23] ? rcu_is_watching+0x12/0xc0 [ 82.617376][ T23] process_one_work+0x9cc/0x1b70 [ 82.622394][ T23] ? __pfx_hcd_resume_work+0x10/0x10 [ 82.627730][ T23] ? __pfx_process_one_work+0x10/0x10 [ 82.633226][ T23] ? assign_work+0x1a0/0x250 [ 82.637860][ T23] worker_thread+0x6c8/0xf10 [ 82.642541][ T23] ? __pfx_worker_thread+0x10/0x10 [ 82.643165][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.647674][ T23] kthread+0x3c5/0x780 [ 82.660121][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.668006][ T23] ? __pfx_kthread+0x10/0x10 [ 82.672652][ T23] ? rcu_is_watching+0x12/0xc0 [ 82.677529][ T23] ? __pfx_kthread+0x10/0x10 [ 82.682217][ T23] ret_from_fork+0x5b6/0x6c0 [ 82.686843][ T23] ? __pfx_kthread+0x10/0x10 [ 82.691490][ T23] ret_from_fork_asm+0x1a/0x30 [ 82.696375][ T23] [ 82.699400][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.706678][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.716304][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.726443][ T23] Workqueue: usb_hub_wq hub_event [ 82.731469][ T23] Call Trace: [ 82.734735][ T23] [ 82.737732][ T23] dump_stack_lvl+0x3d/0x1f0 [ 82.742323][ T23] vpanic+0x6e8/0x7a0 [ 82.746326][ T23] ? __pfx_vpanic+0x10/0x10 [ 82.750842][ T23] ? free_large_kmalloc+0x114/0x180 [ 82.756036][ T23] panic+0xca/0xd0 [ 82.759766][ T23] ? __pfx_panic+0x10/0x10 [ 82.764194][ T23] ? check_panic_on_warn+0x1f/0xb0 [ 82.769402][ T23] check_panic_on_warn+0xab/0xb0 [ 82.774354][ T23] __warn+0xf6/0x3c0 [ 82.778362][ T23] ? free_large_kmalloc+0x114/0x180 [ 82.783577][ T23] report_bug+0x3c3/0x580 [ 82.788079][ T23] ? free_large_kmalloc+0x114/0x180 [ 82.793285][ T23] handle_bug+0x184/0x210 [ 82.797618][ T23] exc_invalid_op+0x17/0x50 [ 82.802127][ T23] asm_exc_invalid_op+0x1a/0x20 [ 82.806967][ T23] RIP: 0010:free_large_kmalloc+0x114/0x180 [ 82.813028][ T23] Code: 00 00 00 48 89 df e8 8b ed 0a 00 e8 26 dd b1 ff 9c 58 f6 c4 02 75 6f fb eb 83 48 c7 c6 98 96 c4 88 e8 c0 1a f1 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 6e 8a d1 88 48 89 df 5b 5d 41 5c 41 5d e9 a4 1a [ 82.832806][ T23] RSP: 0018:ffffc9000018edb8 EFLAGS: 00010202 [ 82.839054][ T23] RAX: 0200000000000000 RBX: ffffea0004a4f880 RCX: ffffffff813c723e [ 82.847034][ T23] RDX: 00000000000000ff RSI: ffff8881293e2000 RDI: ffffea0004a4f880 [ 82.855120][ T23] RBP: ffff8881293e2000 R08: 0000000000000007 R09: 0000000000000000 [ 82.863442][ T23] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88811cfe1000 [ 82.871410][ T23] R13: ffff888108ae6000 R14: dffffc0000000000 R15: ffff88811cfe10f0 [ 82.879417][ T23] ? __phys_addr+0xde/0x180 [ 82.883950][ T23] usb_free_urb.part.0+0xe5/0x100 [ 82.888987][ T23] usb_free_urb+0x1f/0x30 [ 82.893316][ T23] smsusb_term_device+0x108/0x1e0 [ 82.898348][ T23] smsusb_init_device+0xaa0/0xe00 [ 82.903375][ T23] ? __pfx_smsusb_init_device+0x10/0x10 [ 82.908990][ T23] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 82.914542][ T23] ? usb_clear_halt+0xb5/0x160 [ 82.919338][ T23] smsusb_probe+0x5d3/0x1090 [ 82.924007][ T23] ? __pfx_smsusb_probe+0x10/0x10 [ 82.929080][ T23] ? mark_held_locks+0x49/0x80 [ 82.933939][ T23] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 82.940070][ T23] ? __pm_runtime_set_status+0x13c/0xa80 [ 82.945715][ T23] usb_probe_interface+0x300/0xa40 [ 82.950972][ T23] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.956607][ T23] really_probe+0x241/0xa90 [ 82.961114][ T23] __driver_probe_device+0x1de/0x440 [ 82.966406][ T23] driver_probe_device+0x4c/0x1b0 [ 82.971560][ T23] __device_attach_driver+0x1df/0x310 [ 82.976959][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 82.982941][ T23] bus_for_each_drv+0x159/0x1e0 [ 82.987799][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.993192][ T23] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.998393][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.004239][ T23] __device_attach+0x1e4/0x4b0 [ 83.009009][ T23] ? __pfx___device_attach+0x10/0x10 [ 83.014314][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 83.019696][ T23] bus_probe_device+0x17f/0x1c0 [ 83.024546][ T23] device_add+0x1148/0x1aa0 [ 83.029050][ T23] ? __pfx_device_add+0x10/0x10 [ 83.034017][ T23] ? mark_held_locks+0x49/0x80 [ 83.038771][ T23] ? create_intf_ep_devs.isra.0+0x195/0x200 [ 83.044752][ T23] usb_set_configuration+0x1187/0x1e20 [ 83.050233][ T23] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 83.056293][ T23] usb_generic_driver_probe+0xb1/0x110 [ 83.061772][ T23] usb_probe_device+0xef/0x3e0 [ 83.066665][ T23] ? __pfx_usb_probe_device+0x10/0x10 [ 83.072133][ T23] really_probe+0x241/0xa90 [ 83.076638][ T23] __driver_probe_device+0x1de/0x440 [ 83.081926][ T23] ? usb_driver_applicable+0x1c7/0x220 [ 83.087397][ T23] driver_probe_device+0x4c/0x1b0 [ 83.092435][ T23] __device_attach_driver+0x1df/0x310 [ 83.098077][ T23] ? __pfx___device_attach_driver+0x10/0x10 [ 83.103986][ T23] bus_for_each_drv+0x159/0x1e0 [ 83.108922][ T23] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.114311][ T23] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.119773][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.125584][ T23] __device_attach+0x1e4/0x4b0 [ 83.130351][ T23] ? __pfx___device_attach+0x10/0x10 [ 83.135640][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 83.140967][ T23] bus_probe_device+0x17f/0x1c0 [ 83.145833][ T23] device_add+0x1148/0x1aa0 [ 83.150337][ T23] ? __pfx_device_add+0x10/0x10 [ 83.155186][ T23] ? add_device_randomness+0xb7/0xf0 [ 83.161035][ T23] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 83.166943][ T23] usb_new_device+0xd07/0x1a60 [ 83.171804][ T23] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.176825][ T23] ? __pfx_usb_new_device+0x10/0x10 [ 83.182064][ T23] ? mark_held_locks+0x49/0x80 [ 83.186839][ T23] hub_event+0x2fce/0x5060 [ 83.191403][ T23] ? __pfx_hub_event+0x10/0x10 [ 83.196260][ T23] ? assoc_array_apply_edit+0x420/0x6c0 [ 83.201821][ T23] ? rcu_is_watching+0x12/0xc0 [ 83.206620][ T23] process_one_work+0x9cc/0x1b70 [ 83.211657][ T23] ? __pfx_hcd_resume_work+0x10/0x10 [ 83.216948][ T23] ? __pfx_process_one_work+0x10/0x10 [ 83.222331][ T23] ? assign_work+0x1a0/0x250 [ 83.227059][ T23] worker_thread+0x6c8/0xf10 [ 83.231688][ T23] ? __pfx_worker_thread+0x10/0x10 [ 83.236813][ T23] kthread+0x3c5/0x780 [ 83.240921][ T23] ? __pfx_kthread+0x10/0x10 [ 83.245514][ T23] ? rcu_is_watching+0x12/0xc0 [ 83.250287][ T23] ? __pfx_kthread+0x10/0x10 [ 83.255051][ T23] ret_from_fork+0x5b6/0x6c0 [ 83.259634][ T23] ? __pfx_kthread+0x10/0x10 [ 83.264237][ T23] ret_from_fork_asm+0x1a/0x30 [ 83.269060][ T23] [ 83.272384][ T23] Kernel Offset: disabled [ 83.277075][ T23] Rebooting in 86400 seconds..