[ 49.806112][ T29] audit: type=1400 audit(1772518339.900:70): avc: denied { module_request } for pid=2970 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.828523][ T29] audit: type=1400 audit(1772518339.930:71): avc: denied { sys_module } for pid=2970 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.892618][ T2977] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.991986][ T2970] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.636841][ T2979] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.305068][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 52.305096][ T29] audit: type=1401 audit(1772518342.480:96): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 52.603376][ T29] audit: type=1400 audit(1772518342.780:97): avc: denied { create } for pid=3007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.747560][ T29] audit: type=1400 audit(1772518342.920:98): avc: denied { create } for pid=3012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.319940][ T3030] syz-executor (3030) used greatest stack depth: 23000 bytes left Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. 2026/03/03 06:13:11 ignoring optional flag "type"="gce" 2026/03/03 06:13:11 parsed 1 programs [ 103.793472][ T29] audit: type=1400 audit(1772518393.970:99): avc: denied { unlink } for pid=3959 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 103.892710][ T3959] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.321396][ T29] audit: type=1401 audit(1772518397.500:100): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/03 06:13:29 executed programs: 0 2026/03/03 06:13:41 executed programs: 2 [ 131.353451][ T29] audit: type=1400 audit(1772518421.530:101): avc: denied { read write } for pid=4923 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.378312][ T29] audit: type=1400 audit(1772518421.530:102): avc: denied { open } for pid=4923 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.418381][ T29] audit: type=1400 audit(1772518421.530:103): avc: denied { ioctl } for pid=4923 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.618215][ T2813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.767998][ T2813] usb 1-1: Using ep0 maxpacket: 16 [ 131.775537][ T2813] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.787269][ T2813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 131.798298][ T2813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 131.811572][ T2813] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 131.820761][ T2813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.828835][ T2813] usb 1-1: Product: syz [ 131.833014][ T2813] usb 1-1: Manufacturer: syz [ 131.837936][ T2813] usb 1-1: SerialNumber: syz [ 131.845914][ T2813] usb 1-1: config 0 descriptor?? [ 131.858253][ T2813] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 131.867616][ T2813] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 132.118395][ T2813] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.124797][ T2813] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 132.132342][ T2813] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 132.139771][ T2813] em28xx 1-1:0.0: No AC97 audio processor [ 132.145524][ T2813] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 132.208409][ T2813] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.214903][ T2813] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 132.222314][ T2813] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 132.229345][ T2813] em28xx 1-1:0.0: No AC97 audio processor [ 132.444204][ T2813] usb 1-1: USB disconnect, device number 2 [ 132.452207][ T2813] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 132.458299][ T2813] em28xx 1-1:0.0: Disconnecting em28xx [ 132.479513][ T2813] em28xx 1-1:0.0: Freeing device [ 132.484576][ T2813] em28xx 1-1:0.0: Freeing device [ 132.888468][ T2813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.037986][ T2813] usb 1-1: Using ep0 maxpacket: 16 [ 133.044801][ T2813] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 133.056397][ T2813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 133.067415][ T2813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 133.080988][ T2813] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 133.090124][ T2813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.098213][ T2813] usb 1-1: Product: syz [ 133.102408][ T2813] usb 1-1: Manufacturer: syz [ 133.107001][ T2813] usb 1-1: SerialNumber: syz [ 133.114263][ T2813] usb 1-1: config 0 descriptor?? [ 133.122506][ T2813] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 133.132155][ T2813] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 133.378513][ T2813] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 133.384943][ T2813] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 133.392304][ T2813] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 133.399321][ T2813] em28xx 1-1:0.0: No AC97 audio processor [ 133.405142][ T2813] non-slab/vmalloc memory [ 133.409725][ T2813] list_add corruption. prev->next should be next (ffffffff8a757d00), but was 0000000000000000. (prev=ffff888123e84250). [ 133.422602][ T2813] ------------[ cut here ]------------ [ 133.428119][ T2813] kernel BUG at lib/list_debug.c:32! [ 133.433453][ T2813] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 133.439797][ T2813] CPU: 1 UID: 0 PID: 2813 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 133.449257][ T2813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.459312][ T2813] Workqueue: usb_hub_wq hub_event [ 133.464350][ T2813] RIP: 0010:__list_add_valid_or_report+0xfb/0x130 [ 133.470778][ T2813] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 3d 49 8b 55 00 4c 89 e9 48 89 de 48 c7 c7 60 a6 af 87 e8 b6 1a 51 fe 90 <0f> 0b 4c 89 e7 e8 bb b4 44 ff e9 3a ff ff ff 4c 89 ef e8 ae b4 44 [ 133.490384][ T2813] RSP: 0018:ffffc90005b6ee30 EFLAGS: 00010282 [ 133.496540][ T2813] RAX: 0000000000000075 RBX: ffffffff8a757d00 RCX: 0000000000000000 [ 133.504509][ T2813] RDX: 0000000000000075 RSI: ffffffff819172f9 RDI: fffff52000b6ddb7 [ 133.512575][ T2813] RBP: ffff888114d44250 R08: 0000000000000005 R09: 0000000000000000 [ 133.520649][ T2813] R10: 0000000080000000 R11: 0000000000000001 R12: ffffffff8a757d08 [ 133.528717][ T2813] R13: ffff888123e84250 R14: ffff888116ff4800 R15: ffff88810177cee0 [ 133.536790][ T2813] FS: 0000000000000000(0000) GS:ffff8882687d3000(0000) knlGS:0000000000000000 [ 133.545753][ T2813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.552445][ T2813] CR2: 00007ffd59ac2f94 CR3: 0000000116d54000 CR4: 00000000003506f0 [ 133.560613][ T2813] Call Trace: [ 133.563904][ T2813] [ 133.566865][ T2813] em28xx_init_extension+0x48/0x200 [ 133.572099][ T2813] ? em28xx_audio_setup+0x2e2/0x360 [ 133.577326][ T2813] em28xx_init_dev.isra.0+0xac3/0x17c4 [ 133.582790][ T2813] ? _dev_info+0xef/0x127 [ 133.587136][ T2813] ? __pfx_em28xx_init_dev.isra.0+0x10/0x10 [ 133.593040][ T2813] ? trace_kmalloc+0x101/0x130 [ 133.597840][ T2813] ? __kasan_kmalloc+0x8f/0xa0 [ 133.602607][ T2813] ? lockdep_init_map_type+0x5c/0x250 [ 133.607999][ T2813] ? lockdep_init_map_type+0x5c/0x250 [ 133.613408][ T2813] em28xx_usb_probe.cold+0xc3b/0x24ab [ 133.618822][ T2813] usb_probe_interface+0x303/0x8f0 [ 133.624085][ T2813] ? __pfx_usb_probe_interface+0x10/0x10 [ 133.629760][ T2813] really_probe+0x241/0xa60 [ 133.634288][ T2813] __driver_probe_device+0x1de/0x400 [ 133.639775][ T2813] driver_probe_device+0x4c/0x1b0 [ 133.644828][ T2813] __device_attach_driver+0x1ff/0x3e0 [ 133.650201][ T2813] ? __pfx___device_attach_driver+0x10/0x10 [ 133.656128][ T2813] bus_for_each_drv+0x159/0x1e0 [ 133.660999][ T2813] ? __pfx_bus_for_each_drv+0x10/0x10 [ 133.666401][ T2813] ? lockdep_hardirqs_on+0x78/0x100 [ 133.671642][ T2813] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.677487][ T2813] __device_attach+0x1e4/0x4d0 [ 133.682447][ T2813] ? __pfx___device_attach+0x10/0x10 [ 133.687947][ T2813] ? do_raw_spin_unlock+0x145/0x1e0 [ 133.693243][ T2813] device_initial_probe+0xaf/0xd0 [ 133.698282][ T2813] bus_probe_device+0x64/0x160 [ 133.703077][ T2813] device_add+0x11d9/0x1950 [ 133.707599][ T2813] ? __pfx_device_add+0x10/0x10 [ 133.712487][ T2813] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 133.718405][ T2813] usb_set_configuration+0xd97/0x1c60 [ 133.723793][ T2813] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 133.729867][ T2813] usb_generic_driver_probe+0xa1/0xe0 [ 133.735289][ T2813] usb_probe_device+0xef/0x400 [ 133.740069][ T2813] ? __pfx_usb_probe_device+0x10/0x10 [ 133.745454][ T2813] really_probe+0x241/0xa60 [ 133.749960][ T2813] __driver_probe_device+0x1de/0x400 [ 133.755256][ T2813] ? usb_driver_applicable+0x1c7/0x220 [ 133.760724][ T2813] driver_probe_device+0x4c/0x1b0 [ 133.765751][ T2813] __device_attach_driver+0x1ff/0x3e0 [ 133.771125][ T2813] ? __pfx___device_attach_driver+0x10/0x10 [ 133.777018][ T2813] bus_for_each_drv+0x159/0x1e0 [ 133.781980][ T2813] ? __pfx_bus_for_each_drv+0x10/0x10 [ 133.787371][ T2813] ? lockdep_hardirqs_on+0x78/0x100 [ 133.792679][ T2813] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 133.798506][ T2813] __device_attach+0x1e4/0x4d0 [ 133.803306][ T2813] ? __pfx___device_attach+0x10/0x10 [ 133.808591][ T2813] ? do_raw_spin_unlock+0x145/0x1e0 [ 133.813812][ T2813] device_initial_probe+0xaf/0xd0 [ 133.818903][ T2813] bus_probe_device+0x64/0x160 [ 133.823702][ T2813] device_add+0x11d9/0x1950 [ 133.828249][ T2813] ? __pfx_device_add+0x10/0x10 [ 133.833128][ T2813] ? add_device_randomness+0xb7/0xf0 [ 133.838549][ T2813] usb_new_device.cold+0x685/0x115c [ 133.843865][ T2813] ? do_raw_spin_lock+0x128/0x260 [ 133.848908][ T2813] ? __pfx_usb_new_device+0x10/0x10 [ 133.854133][ T2813] ? mark_held_locks+0x40/0x70 [ 133.858925][ T2813] hub_event+0x314d/0x4af0 [ 133.863372][ T2813] ? __pfx_hub_event+0x10/0x10 [ 133.868153][ T2813] ? debug_object_deactivate+0x2e4/0x3b0 [ 133.873848][ T2813] ? rcu_is_watching+0x12/0xc0 [ 133.879071][ T2813] process_one_work+0x9d7/0x1920 [ 133.884139][ T2813] ? __pfx_process_one_work+0x10/0x10 [ 133.889615][ T2813] ? __pfx_hub_event+0x10/0x10 [ 133.894416][ T2813] worker_thread+0x5da/0xe40 [ 133.899021][ T2813] ? __pfx_worker_thread+0x10/0x10 [ 133.904237][ T2813] ? kthread+0x13a/0x450 [ 133.908490][ T2813] ? __pfx_worker_thread+0x10/0x10 [ 133.913618][ T2813] kthread+0x370/0x450 [ 133.917715][ T2813] ? __pfx_kthread+0x10/0x10 [ 133.922318][ T2813] ret_from_fork+0x6c3/0xcb0 [ 133.926930][ T2813] ? __pfx_ret_from_fork+0x10/0x10 [ 133.932067][ T2813] ? __switch_to+0x7aa/0x1120 [ 133.936762][ T2813] ? __pfx_kthread+0x10/0x10 [ 133.941364][ T2813] ret_from_fork_asm+0x1a/0x30 [ 133.946246][ T2813] [ 133.949277][ T2813] Modules linked in: [ 133.953345][ T2813] ---[ end trace 0000000000000000 ]--- [ 133.971179][ T2813] RIP: 0010:__list_add_valid_or_report+0xfb/0x130 [ 133.978160][ T2813] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 3d 49 8b 55 00 4c 89 e9 48 89 de 48 c7 c7 60 a6 af 87 e8 b6 1a 51 fe 90 <0f> 0b 4c 89 e7 e8 bb b4 44 ff e9 3a ff ff ff 4c 89 ef e8 ae b4 44 [ 133.998638][ T2813] RSP: 0018:ffffc90005b6ee30 EFLAGS: 00010282 [ 134.004847][ T2813] RAX: 0000000000000075 RBX: ffffffff8a757d00 RCX: 0000000000000000 [ 134.014267][ T2813] RDX: 0000000000000075 RSI: ffffffff819172f9 RDI: fffff52000b6ddb7 [ 134.022321][ T2813] RBP: ffff888114d44250 R08: 0000000000000005 R09: 0000000000000000 [ 134.030438][ T2813] R10: 0000000080000000 R11: 0000000000000001 R12: ffffffff8a757d08 [ 134.038685][ T2813] R13: ffff888123e84250 R14: ffff888116ff4800 R15: ffff88810177cee0 [ 134.046682][ T2813] FS: 0000000000000000(0000) GS:ffff8882687d3000(0000) knlGS:0000000000000000 [ 134.055648][ T2813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.062307][ T2813] CR2: 00007ffd59ac6090 CR3: 0000000101bee000 CR4: 00000000003506f0 [ 134.070601][ T2813] Kernel panic - not syncing: Fatal exception [ 134.077148][ T2813] Kernel Offset: disabled [ 134.081480][ T2813] Rebooting in 86400 seconds..