[ 68.705875][ T29] audit: type=1401 audit(1745027615.646:118): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 68.742513][ T29] audit: type=1400 audit(1745027615.676:119): avc: denied { create } for pid=3484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.991740][ T29] audit: type=1400 audit(1745027638.926:120): avc: denied { transition } for pid=3964 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.014249][ T29] audit: type=1400 audit(1745027638.926:121): avc: denied { noatsecure } for pid=3964 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.033510][ T29] audit: type=1400 audit(1745027638.946:122): avc: denied { rlimitinh } for pid=3964 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.052412][ T29] audit: type=1400 audit(1745027638.946:123): avc: denied { siginh } for pid=3964 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. 2025/04/19 01:54:12 ignoring optional flag "sandboxArg"="0" 2025/04/19 01:54:12 ignoring optional flag "type"="gce" 2025/04/19 01:54:12 parsed 1 programs [ 108.775144][ T29] audit: type=1400 audit(1745027655.716:124): avc: denied { unlink } for pid=3979 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 108.882959][ T3979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.078698][ T29] audit: type=1401 audit(1745027658.016:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/19 01:54:31 executed programs: 0 2025/04/19 01:54:42 executed programs: 2 [ 136.059240][ T29] audit: type=1400 audit(1745027682.996:126): avc: denied { read write } for pid=4984 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.089220][ T29] audit: type=1400 audit(1745027682.996:127): avc: denied { open } for pid=4984 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.112948][ T29] audit: type=1400 audit(1745027682.996:128): avc: denied { ioctl } for pid=4984 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.293473][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.443264][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 136.451328][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.463086][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 136.474186][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 136.488309][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 136.497435][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.505507][ T42] usb 1-1: Product: syz [ 136.509793][ T42] usb 1-1: Manufacturer: syz [ 136.514554][ T42] usb 1-1: SerialNumber: syz [ 136.523272][ T42] usb 1-1: config 0 descriptor?? [ 136.534287][ T42] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 136.543765][ T42] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 136.793748][ T42] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 136.800250][ T42] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 136.807800][ T42] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 136.815143][ T42] em28xx 1-1:0.0: No AC97 audio processor [ 136.820984][ T42] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 136.883604][ T42] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 136.890227][ T42] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 136.897980][ T42] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 136.905013][ T42] em28xx 1-1:0.0: No AC97 audio processor [ 137.117844][ T42] usb 1-1: USB disconnect, device number 2 [ 137.125122][ T42] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 137.130987][ T42] em28xx 1-1:0.0: Disconnecting em28xx [ 137.139405][ T42] em28xx 1-1:0.0: Freeing device [ 137.144651][ T42] em28xx 1-1:0.0: Freeing device [ 137.563822][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.713276][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 137.720106][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 137.731894][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 137.743283][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 137.756703][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 137.766034][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.774305][ T42] usb 1-1: Product: syz [ 137.778538][ T42] usb 1-1: Manufacturer: syz [ 137.783232][ T42] usb 1-1: SerialNumber: syz [ 137.790680][ T42] usb 1-1: config 0 descriptor?? [ 137.799138][ T42] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 137.808707][ T42] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 138.063972][ T42] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 138.073229][ T42] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 138.093211][ T42] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 138.100237][ T42] em28xx 1-1:0.0: No AC97 audio processor [ 138.113161][ T42] non-slab/vmalloc memory [ 138.117885][ T42] list_add corruption. prev->next should be next (ffffffff8a0329a0), but was 0000000000000000. (prev=ffff88811b004250). [ 138.131148][ T42] ------------[ cut here ]------------ [ 138.137435][ T42] kernel BUG at lib/list_debug.c:32! [ 138.142845][ T42] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 138.149410][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary) [ 138.161951][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.172042][ T42] Workqueue: usb_hub_wq hub_event [ 138.177100][ T42] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 138.183712][ T42] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 50 68 87 48 89 ee e8 f6 a0 d8 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 51 68 87 e8 de a0 d8 [ 138.203522][ T42] RSP: 0018:ffffc900002c6e98 EFLAGS: 00010286 [ 138.209702][ T42] RAX: 0000000000000075 RBX: ffff88811a2a0000 RCX: ffffffff815be9f9 [ 138.217777][ T42] RDX: 0000000000000000 RSI: ffffffff815c6886 RDI: 0000000000000005 [ 138.225859][ T42] RBP: ffffffff8a0329a0 R08: 0000000000000005 R09: 0000000000000000 [ 138.233890][ T42] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811a2a0250 [ 138.242085][ T42] R13: ffffffff8a0329a8 R14: ffff88811a2a01a8 R15: ffff88811a2a19e4 [ 138.250090][ T42] FS: 0000000000000000(0000) GS:ffff8882692d3000(0000) knlGS:0000000000000000 [ 138.259279][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.266140][ T42] CR2: 000055e7e1d40ac0 CR3: 00000001162be000 CR4: 00000000003506f0 [ 138.274357][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.282361][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.290793][ T42] Call Trace: [ 138.294121][ T42] [ 138.297158][ T42] em28xx_init_extension+0x48/0x200 [ 138.302411][ T42] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 138.308535][ T42] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 138.314933][ T42] ? rcu_is_watching+0x12/0xc0 [ 138.319736][ T42] ? lockdep_init_map_type+0x5c/0x280 [ 138.325142][ T42] ? lockdep_init_map_type+0x5c/0x280 [ 138.330728][ T42] em28xx_usb_probe+0x1285/0x3770 [ 138.335867][ T42] usb_probe_interface+0x300/0x9c0 [ 138.341025][ T42] ? __pfx_usb_probe_interface+0x10/0x10 [ 138.346796][ T42] really_probe+0x23e/0xa90 [ 138.351366][ T42] __driver_probe_device+0x1de/0x440 [ 138.356886][ T42] driver_probe_device+0x4c/0x1b0 [ 138.362138][ T42] __device_attach_driver+0x1df/0x310 [ 138.367567][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 138.373593][ T42] bus_for_each_drv+0x156/0x1e0 [ 138.378509][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 138.384009][ T42] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.389336][ T42] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.395293][ T42] __device_attach+0x1e4/0x4b0 [ 138.400217][ T42] ? __pfx___device_attach+0x10/0x10 [ 138.406421][ T42] ? do_raw_spin_unlock+0x172/0x230 [ 138.412462][ T42] bus_probe_device+0x17f/0x1c0 [ 138.417495][ T42] device_add+0x1148/0x1a70 [ 138.422063][ T42] ? __pfx_device_add+0x10/0x10 [ 138.426976][ T42] ? mark_held_locks+0x49/0x80 [ 138.432146][ T42] usb_set_configuration+0x1187/0x1e20 [ 138.437653][ T42] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 138.443810][ T42] usb_generic_driver_probe+0xb1/0x110 [ 138.449334][ T42] usb_probe_device+0xec/0x3e0 [ 138.454240][ T42] ? __pfx_usb_probe_device+0x10/0x10 [ 138.459699][ T42] really_probe+0x23e/0xa90 [ 138.464314][ T42] __driver_probe_device+0x1de/0x440 [ 138.469646][ T42] ? usb_driver_applicable+0x1c7/0x220 [ 138.475262][ T42] driver_probe_device+0x4c/0x1b0 [ 138.480370][ T42] __device_attach_driver+0x1df/0x310 [ 138.485825][ T42] ? __pfx___device_attach_driver+0x10/0x10 [ 138.491786][ T42] bus_for_each_drv+0x156/0x1e0 [ 138.496760][ T42] ? __pfx_bus_for_each_drv+0x10/0x10 [ 138.502253][ T42] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.507570][ T42] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.513502][ T42] __device_attach+0x1e4/0x4b0 [ 138.518357][ T42] ? __pfx___device_attach+0x10/0x10 [ 138.523911][ T42] ? do_raw_spin_unlock+0x172/0x230 [ 138.529298][ T42] bus_probe_device+0x17f/0x1c0 [ 138.534309][ T42] device_add+0x1148/0x1a70 [ 138.538871][ T42] ? __pfx_device_add+0x10/0x10 [ 138.543762][ T42] ? add_device_randomness+0xb7/0xf0 [ 138.549071][ T42] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 138.555178][ T42] usb_new_device+0xd07/0x1a20 [ 138.559977][ T42] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.565297][ T42] ? __pfx_usb_new_device+0x10/0x10 [ 138.570610][ T42] ? mark_held_locks+0x49/0x80 [ 138.575401][ T42] hub_event+0x2f85/0x5030 [ 138.579848][ T42] ? __pfx_hub_event+0x10/0x10 [ 138.584630][ T42] ? debug_object_deactivate+0x1ec/0x3a0 [ 138.590296][ T42] ? rcu_is_watching+0x12/0xc0 [ 138.595110][ T42] process_one_work+0x9cc/0x1b70 [ 138.600197][ T42] ? __pfx_hub_event+0x10/0x10 [ 138.605245][ T42] ? __pfx_process_one_work+0x10/0x10 [ 138.610860][ T42] ? assign_work+0x1a0/0x250 [ 138.615497][ T42] worker_thread+0x6c8/0xf10 [ 138.620145][ T42] ? __kthread_parkme+0x19e/0x250 [ 138.625375][ T42] ? __pfx_worker_thread+0x10/0x10 [ 138.630556][ T42] kthread+0x3c2/0x780 [ 138.634666][ T42] ? __pfx_kthread+0x10/0x10 [ 138.639355][ T42] ? __pfx_kthread+0x10/0x10 [ 138.643985][ T42] ? __pfx_kthread+0x10/0x10 [ 138.648605][ T42] ? __pfx_kthread+0x10/0x10 [ 138.653231][ T42] ? rcu_is_watching+0x12/0xc0 [ 138.658122][ T42] ? __pfx_kthread+0x10/0x10 [ 138.662769][ T42] ret_from_fork+0x45/0x80 [ 138.667316][ T42] ? __pfx_kthread+0x10/0x10 [ 138.673438][ T42] ret_from_fork_asm+0x1a/0x30 [ 138.678371][ T42] [ 138.681410][ T42] Modules linked in: [ 138.685474][ T42] ---[ end trace 0000000000000000 ]--- [ 138.691197][ T42] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 138.697915][ T42] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 50 68 87 48 89 ee e8 f6 a0 d8 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 51 68 87 e8 de a0 d8 [ 138.717706][ T42] RSP: 0018:ffffc900002c6e98 EFLAGS: 00010286 [ 138.723860][ T42] RAX: 0000000000000075 RBX: ffff88811a2a0000 RCX: ffffffff815be9f9 [ 138.732051][ T42] RDX: 0000000000000000 RSI: ffffffff815c6886 RDI: 0000000000000005 [ 138.740264][ T42] RBP: ffffffff8a0329a0 R08: 0000000000000005 R09: 0000000000000000 [ 138.748503][ T42] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811a2a0250 [ 138.756625][ T42] R13: ffffffff8a0329a8 R14: ffff88811a2a01a8 R15: ffff88811a2a19e4 [ 138.764700][ T42] FS: 0000000000000000(0000) GS:ffff8882692d3000(0000) knlGS:0000000000000000 [ 138.773785][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.780425][ T42] CR2: 000055e7e1d40ac0 CR3: 00000001162be000 CR4: 00000000003506f0 [ 138.788726][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.796771][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.804897][ T42] Kernel panic - not syncing: Fatal exception [ 138.811297][ T42] Kernel Offset: disabled [ 138.815724][ T42] Rebooting in 86400 seconds..