Warning: Permanently added '10.128.10.38' (ED25519) to the list of known hosts. 2025/04/29 03:34:55 ignoring optional flag "sandboxArg"="0" 2025/04/29 03:34:55 ignoring optional flag "type"="gce" 2025/04/29 03:34:56 parsed 1 programs [ 101.242591][ T29] audit: type=1400 audit(1745897699.024:124): avc: denied { unlink } for pid=3981 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 101.392469][ T3981] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.302003][ T29] audit: type=1401 audit(1745897702.064:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/29 03:35:14 executed programs: 0 2025/04/29 03:35:56 executed programs: 10 [ 158.436372][ T29] audit: type=1400 audit(1745897756.214:126): avc: denied { read write } for pid=6794 comm="syz.3.18" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.459781][ T29] audit: type=1400 audit(1745897756.214:127): avc: denied { open } for pid=6794 comm="syz.3.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.483493][ T29] audit: type=1400 audit(1745897756.214:128): avc: denied { ioctl } for pid=6794 comm="syz.3.18" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.684975][ T1117] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.731128][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 158.861540][ T1117] usb 4-1: Using ep0 maxpacket: 16 [ 158.874996][ T1117] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.884785][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 158.887194][ T1117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 158.902898][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 158.903654][ T1117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 158.914676][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 158.914722][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 158.937441][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 158.937481][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.937509][ T42] usb 2-1: Product: syz [ 158.937531][ T42] usb 2-1: Manufacturer: syz [ 158.937554][ T42] usb 2-1: SerialNumber: syz [ 158.943640][ T42] usb 2-1: config 0 descriptor?? [ 158.977728][ T1117] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 158.994501][ T1117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.997671][ T42] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.002642][ T1117] usb 4-1: Product: syz [ 159.002668][ T1117] usb 4-1: Manufacturer: syz [ 159.012099][ T42] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 159.016212][ T1117] usb 4-1: SerialNumber: syz [ 159.068568][ T1117] usb 4-1: config 0 descriptor?? [ 159.086804][ T1117] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.096737][ T1117] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 159.104476][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 159.241862][ T42] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 159.248686][ T42] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 159.257301][ T42] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 159.264432][ T42] em28xx 2-1:0.0: No AC97 audio processor [ 159.270263][ T42] em28xx 2-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 159.280439][ T4072] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.281283][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 159.295823][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.307450][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 159.318467][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 159.331657][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 159.340720][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.342035][ T42] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 159.348830][ T10] usb 5-1: Product: syz [ 159.356842][ T42] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 159.358906][ T10] usb 5-1: Manufacturer: syz [ 159.367120][ T42] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 159.370408][ T10] usb 5-1: SerialNumber: syz [ 159.377476][ T42] em28xx 2-1:0.0: No AC97 audio processor [ 159.382481][ T1117] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 159.387807][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 159.394232][ T1117] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 159.408976][ T1117] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 159.416021][ T1117] em28xx 4-1:0.0: No AC97 audio processor [ 159.422088][ T1117] em28xx 4-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 159.491422][ T1117] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 159.498055][ T1117] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 159.508159][ T10] usb 5-1: config 0 descriptor?? [ 159.513764][ T1117] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 159.520795][ T1117] em28xx 4-1:0.0: No AC97 audio processor [ 159.605259][ T4072] usb 3-1: Using ep0 maxpacket: 16 [ 159.618266][ T4072] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.629891][ T4072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 159.633592][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.640955][ T4072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 159.650139][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 159.673383][ T42] usb 2-1: USB disconnect, device number 2 [ 159.680737][ T42] em28xx 2-1:0.0: Disconnecting em28xx #2 [ 159.686642][ T42] em28xx 2-1:0.0: Disconnecting em28xx [ 159.692463][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 159.700308][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.712385][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 159.723542][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 159.765163][ T42] em28xx 2-1:0.0: Freeing device [ 159.770278][ T42] em28xx 2-1:0.0: Freeing device [ 159.779045][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 159.788267][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.796452][ T23] usb 1-1: Product: syz [ 159.800668][ T23] usb 1-1: Manufacturer: syz [ 159.805707][ T23] usb 1-1: SerialNumber: syz [ 159.810848][ T4072] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 159.820345][ T4072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.828829][ T4072] usb 3-1: Product: syz [ 159.833327][ T4072] usb 3-1: Manufacturer: syz [ 159.837962][ T4072] usb 3-1: SerialNumber: syz [ 159.852480][ T1117] usb 4-1: USB disconnect, device number 2 [ 159.858237][ T23] usb 1-1: config 0 descriptor?? [ 159.860651][ T1117] em28xx 4-1:0.0: Disconnecting em28xx #3 [ 159.869366][ T1117] em28xx 4-1:0.0: Disconnecting em28xx [ 159.876772][ T4072] usb 3-1: config 0 descriptor?? [ 159.890696][ T23] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.891740][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 159.900031][ T23] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 159.907783][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 159.926661][ T4072] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 159.931047][ T1117] non-slab/vmalloc memory [ 159.936606][ T4072] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 159.940460][ T1117] list_del corruption. prev->next should be ffff88811fedc250, but was 0000000000000000. (prev=ffff8881309fc250) [ 159.960058][ T1117] ------------[ cut here ]------------ [ 159.966199][ T1117] kernel BUG at lib/list_debug.c:62! [ 159.971620][ T1117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 159.977933][ T1117] CPU: 0 UID: 0 PID: 1117 Comm: kworker/0:2 Not tainted 6.15.0-rc4-syzkaller-g615dca38c2ea #0 PREEMPT(voluntary) [ 159.989960][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.000069][ T1117] Workqueue: usb_hub_wq hub_event [ 160.005254][ T1117] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 160.012334][ T1117] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 00 56 68 87 e8 97 77 d8 fe 90 <0f> 0b 4c 89 e7 e8 cc 11 39 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 160.032011][ T1117] RSP: 0018:ffffc90001c3f678 EFLAGS: 00010282 [ 160.038136][ T1117] RAX: 000000000000006d RBX: ffff88811fedc250 RCX: ffffffff815c09d9 [ 160.046156][ T1117] RDX: 0000000000000000 RSI: ffffffff815c8866 RDI: 0000000000000005 [ 160.054169][ T1117] RBP: ffff8881309fc250 R08: 0000000000000005 R09: 0000000000000000 [ 160.062169][ T1117] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888118ed8250 [ 160.070185][ T1117] R13: ffff88811fedc000 R14: ffffffff8a04ecc8 R15: ffffed1023fdbc41 [ 160.078189][ T1117] FS: 0000000000000000(0000) GS:ffff8882691c4000(0000) knlGS:0000000000000000 [ 160.087138][ T1117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.093762][ T1117] CR2: 00007ff6f0b0bca0 CR3: 0000000112610000 CR4: 00000000003506f0 [ 160.101767][ T1117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.109784][ T1117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.117798][ T1117] Call Trace: [ 160.121107][ T1117] [ 160.124068][ T1117] em28xx_close_extension+0x10b/0x2b0 [ 160.129514][ T1117] em28xx_usb_disconnect+0x19d/0x610 [ 160.134848][ T1117] usb_unbind_interface+0x1da/0x9a0 [ 160.140102][ T1117] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 160.145882][ T1117] ? __pfx_usb_unbind_interface+0x10/0x10 [ 160.151650][ T1117] device_remove+0x122/0x170 [ 160.156293][ T1117] device_release_driver_internal+0x44b/0x620 [ 160.161046][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.162381][ T1117] bus_remove_device+0x22f/0x420 [ 160.174836][ T1117] device_del+0x396/0x9f0 [ 160.179226][ T1117] ? __pfx_device_del+0x10/0x10 [ 160.184124][ T1117] ? kobject_put+0x210/0x5a0 [ 160.188763][ T1117] usb_disable_device+0x355/0x7d0 [ 160.193844][ T1117] usb_disconnect+0x2e1/0x920 [ 160.198571][ T1117] hub_event+0x1aa0/0x5030 [ 160.203068][ T1117] ? __lock_acquire+0xaa4/0x1ba0 [ 160.208057][ T1117] ? __pfx_hub_event+0x10/0x10 [ 160.212883][ T1117] ? debug_object_deactivate+0x1ec/0x3a0 [ 160.218671][ T1117] ? rcu_is_watching+0x12/0xc0 [ 160.223489][ T1117] process_one_work+0x9cc/0x1b70 [ 160.228483][ T1117] ? __pfx_hub_event+0x10/0x10 [ 160.233295][ T1117] ? __pfx_process_one_work+0x10/0x10 [ 160.238722][ T1117] ? assign_work+0x1a0/0x250 [ 160.243385][ T1117] worker_thread+0x6c8/0xf10 [ 160.248214][ T1117] ? __kthread_parkme+0x19e/0x250 [ 160.253380][ T1117] ? __pfx_worker_thread+0x10/0x10 [ 160.258524][ T1117] kthread+0x3c2/0x780 [ 160.262647][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.267272][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.271924][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.276579][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.281222][ T1117] ? rcu_is_watching+0x12/0xc0 [ 160.286090][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.290738][ T1117] ret_from_fork+0x45/0x80 [ 160.295215][ T1117] ? __pfx_kthread+0x10/0x10 [ 160.299875][ T1117] ret_from_fork_asm+0x1a/0x30 [ 160.304673][ T1117] [ 160.307734][ T1117] Modules linked in: [ 160.311048][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 160.311805][ T1117] ---[ end trace 0000000000000000 ]--- [ 160.322299][ T1117] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200 [ 160.322628][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.329362][ T1117] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 00 56 68 87 e8 97 77 d8 fe 90 <0f> 0b 4c 89 e7 e8 cc 11 39 ff 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 160.329394][ T1117] RSP: 0018:ffffc90001c3f678 EFLAGS: 00010282 [ 160.341204][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 160.360756][ T1117] RAX: 000000000000006d RBX: ffff88811fedc250 RCX: ffffffff815c09d9 [ 160.360780][ T1117] RDX: 0000000000000000 RSI: ffffffff815c8866 RDI: 0000000000000005 [ 160.366868][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 160.377872][ T1117] RBP: ffff8881309fc250 R08: 0000000000000005 R09: 0000000000000000 [ 160.377895][ T1117] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888118ed8250 [ 160.404864][ T29] audit: type=1400 audit(1745897758.174:129): avc: denied { remove_name } for pid=2823 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.405093][ T1117] R13: ffff88811fedc000 R14: ffffffff8a04ecc8 R15: ffffed1023fdbc41 [ 160.413430][ T29] audit: type=1400 audit(1745897758.174:130): avc: denied { rename } for pid=2823 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.421394][ T1117] FS: 0000000000000000(0000) GS:ffff8882691c4000(0000) knlGS:0000000000000000 [ 160.444040][ T29] audit: type=1400 audit(1745897758.174:131): avc: denied { create } for pid=2823 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.451970][ T1117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.475784][ T23] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 160.483528][ T1117] CR2: 00007ff6f0b0bca0 CR3: 0000000112610000 CR4: 00000000003506f0 [ 160.483553][ T1117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.505746][ T23] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 160.510905][ T1117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.518535][ T23] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 160.524894][ T1117] Kernel panic - not syncing: Fatal exception [ 160.525249][ T1117] Kernel Offset: disabled