Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. 2025/08/13 09:56:31 ignoring optional flag "sandboxArg"="0" 2025/08/13 09:56:32 parsed 1 programs [ 102.098429][ T29] audit: type=1400 audit(1755078994.141:101): avc: denied { unlink } for pid=3966 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 102.189555][ T3966] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.559364][ T29] audit: type=1400 audit(1755078995.601:102): avc: denied { read } for pid=3972 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.600520][ T29] audit: type=1400 audit(1755078995.601:103): avc: denied { open } for pid=3972 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.624308][ T29] audit: type=1400 audit(1755078995.641:104): avc: denied { unmount } for pid=3972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.725717][ T29] audit: type=1401 audit(1755078996.771:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/08/13 09:56:48 executed programs: 0 2025/08/13 09:56:59 executed programs: 2 [ 127.558241][ T29] audit: type=1400 audit(1755079019.601:106): avc: denied { read write } for pid=4944 comm="syz.3.16" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.581709][ T29] audit: type=1400 audit(1755079019.601:107): avc: denied { open } for pid=4944 comm="syz.3.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.605746][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.619883][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.626498][ T29] audit: type=1400 audit(1755079019.601:108): avc: denied { ioctl } for pid=4944 comm="syz.3.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.793600][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.947691][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.956888][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.964904][ T10] usb 4-1: Product: syz [ 127.969072][ T10] usb 4-1: Manufacturer: syz [ 127.973721][ T10] usb 4-1: SerialNumber: syz [ 127.985736][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.005791][ T29] audit: type=1400 audit(1755079020.051:109): avc: denied { firmware_load } for pid=2984 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 128.039028][ T2984] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.440541][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.449407][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.675377][ T10] usb 4-1: USB disconnect, device number 2 [ 129.053484][ T2984] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 129.060945][ T2984] ath9k_htc: Failed to initialize the device [ 129.068376][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 129.189859][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.200728][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.211208][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.221440][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.513392][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.663394][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 129.669987][ T10] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 129.678165][ T10] usb 4-1: config 0 has no interface number 0 [ 129.684371][ T10] usb 4-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 129.694480][ T10] usb 4-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.704531][ T10] usb 4-1: config 0 interface 54 has no altsetting 0 [ 129.712861][ T10] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 129.722044][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.730154][ T10] usb 4-1: Product: syz [ 129.734375][ T10] usb 4-1: Manufacturer: syz [ 129.738982][ T10] usb 4-1: SerialNumber: syz [ 129.746018][ T10] usb 4-1: config 0 descriptor?? [ 129.754928][ T10] ums_eneub6250 4-1:0.54: USB Mass Storage device detected [ 129.766923][ T10] scsi host1: usb-storage 4-1:0.54 [ 130.815080][ T4958] ------------[ cut here ]------------ [ 130.820808][ T4958] URB ffff88810837fc00 submitted while active [ 130.827373][ T4958] WARNING: CPU: 1 PID: 4958 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1519/0x1770 [ 130.837083][ T4958] Modules linked in: [ 130.841121][ T4958] CPU: 1 UID: 0 PID: 4958 Comm: usb-storage Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 130.853337][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.863435][ T4958] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 130.869111][ T4958] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 2f d5 d4 fc c6 05 d2 78 e6 05 01 90 48 c7 c7 80 dc e5 87 48 89 de e8 b8 8d 97 fc 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 130.888875][ T4958] RSP: 0018:ffffc900005a76e8 EFLAGS: 00010282 [ 130.895016][ T4958] RAX: 0000000000000000 RBX: ffff88810837fc00 RCX: ffffffff8140b9a8 [ 130.903008][ T4958] RDX: ffff888114121d00 RSI: ffffffff8140b9b5 RDI: 0000000000000001 [ 130.911027][ T4958] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 130.919139][ T4958] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811b49ce80 [ 130.927203][ T4958] R13: ffff88811b49cdf8 R14: ffffc900005a77a8 R15: ffff88810837fc00 [ 130.935248][ T4958] FS: 0000000000000000(0000) GS:ffff888268ffc000(0000) knlGS:0000000000000000 [ 130.944318][ T4958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.950930][ T4958] CR2: 00007ffd11fd9628 CR3: 000000012499c000 CR4: 00000000003506f0 [ 130.958965][ T4958] Call Trace: [ 130.962263][ T4958] [ 130.965252][ T4958] ? lockdep_init_map_type+0x5c/0x280 [ 130.970654][ T4958] ? lockdep_init_map_type+0x5c/0x280 [ 130.976109][ T4958] ? __init_swait_queue_head+0xca/0x150 [ 130.981817][ T4958] usb_stor_msg_common+0x23f/0x560 [ 130.987008][ T4958] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 130.992685][ T4958] ? unwind_next_frame+0x3fe/0x20a0 [ 130.998020][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.002980][ T4958] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 131.008767][ T4958] ? arch_stack_walk+0x94/0x100 [ 131.013674][ T4958] ene_send_scsi_cmd+0x130/0x610 [ 131.018645][ T4958] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 131.024180][ T4958] ? __kasan_check_byte+0x13/0x50 [ 131.029232][ T4958] ? __asan_memset+0x23/0x50 [ 131.033907][ T4958] ene_transport+0x13fd/0x37f0 [ 131.038697][ T4958] ? lock_release+0x201/0x2f0 [ 131.043433][ T4958] ? unwind_next_frame+0x3fe/0x20a0 [ 131.048658][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.053679][ T4958] ? __pfx_ene_transport+0x10/0x10 [ 131.058814][ T4958] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 131.065039][ T4958] ? arch_stack_walk+0x94/0x100 [ 131.069914][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.074913][ T4958] ? stack_trace_save+0x8e/0xc0 [ 131.079794][ T4958] ? __pfx_stack_trace_save+0x10/0x10 [ 131.085246][ T4958] ? check_path.constprop.0+0x24/0x50 [ 131.090665][ T4958] usb_stor_invoke_transport+0xeb/0x1570 [ 131.096377][ T4958] ? lockdep_unlock+0x64/0xe0 [ 131.101082][ T4958] ? __lock_acquire+0x107f/0x1ce0 [ 131.106150][ T4958] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 131.112418][ T4958] ? __pfx___mutex_lock+0x10/0x10 [ 131.117508][ T4958] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.122557][ T4958] ? find_held_lock+0x2b/0x80 [ 131.127321][ T4958] ? mark_held_locks+0x49/0x80 [ 131.132107][ T4958] usb_stor_control_thread+0x5eb/0xb00 [ 131.137622][ T4958] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.143663][ T4958] ? rcu_is_watching+0x12/0xc0 [ 131.148452][ T4958] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.154310][ T4958] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.159539][ T4958] ? __kthread_parkme+0x19e/0x250 [ 131.164611][ T4958] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.170609][ T4958] kthread+0x3c5/0x780 [ 131.174724][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.179371][ T4958] ? rcu_is_watching+0x12/0xc0 [ 131.184230][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.188851][ T4958] ret_from_fork+0x5b6/0x6c0 [ 131.193506][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.198159][ T4958] ret_from_fork_asm+0x1a/0x30 [ 131.202967][ T4958] [ 131.206055][ T4958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.213348][ T4958] CPU: 1 UID: 0 PID: 4958 Comm: usb-storage Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 131.225540][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.235619][ T4958] Call Trace: [ 131.238910][ T4958] [ 131.241848][ T4958] dump_stack_lvl+0x3d/0x1f0 [ 131.246470][ T4958] vpanic+0x6e8/0x7a0 [ 131.250472][ T4958] ? __pfx_vpanic+0x10/0x10 [ 131.254999][ T4958] ? usb_submit_urb+0x1519/0x1770 [ 131.260031][ T4958] panic+0xca/0xd0 [ 131.263764][ T4958] ? __pfx_panic+0x10/0x10 [ 131.268189][ T4958] ? check_panic_on_warn+0x1f/0xb0 [ 131.273324][ T4958] check_panic_on_warn+0xab/0xb0 [ 131.278280][ T4958] __warn+0xf6/0x3c0 [ 131.282190][ T4958] ? usb_submit_urb+0x1519/0x1770 [ 131.287228][ T4958] report_bug+0x3c3/0x580 [ 131.291562][ T4958] ? usb_submit_urb+0x1519/0x1770 [ 131.296596][ T4958] handle_bug+0x184/0x210 [ 131.300944][ T4958] exc_invalid_op+0x17/0x50 [ 131.305458][ T4958] asm_exc_invalid_op+0x1a/0x20 [ 131.310319][ T4958] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 131.315963][ T4958] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 2f d5 d4 fc c6 05 d2 78 e6 05 01 90 48 c7 c7 80 dc e5 87 48 89 de e8 b8 8d 97 fc 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 131.335578][ T4958] RSP: 0018:ffffc900005a76e8 EFLAGS: 00010282 [ 131.341662][ T4958] RAX: 0000000000000000 RBX: ffff88810837fc00 RCX: ffffffff8140b9a8 [ 131.349637][ T4958] RDX: ffff888114121d00 RSI: ffffffff8140b9b5 RDI: 0000000000000001 [ 131.357625][ T4958] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 131.365603][ T4958] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88811b49ce80 [ 131.373670][ T4958] R13: ffff88811b49cdf8 R14: ffffc900005a77a8 R15: ffff88810837fc00 [ 131.381658][ T4958] ? __warn_printk+0x198/0x350 [ 131.386487][ T4958] ? __warn_printk+0x1a5/0x350 [ 131.391268][ T4958] ? usb_submit_urb+0x1518/0x1770 [ 131.396363][ T4958] ? lockdep_init_map_type+0x5c/0x280 [ 131.401883][ T4958] ? lockdep_init_map_type+0x5c/0x280 [ 131.407281][ T4958] ? __init_swait_queue_head+0xca/0x150 [ 131.412848][ T4958] usb_stor_msg_common+0x23f/0x560 [ 131.417964][ T4958] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 131.423630][ T4958] ? unwind_next_frame+0x3fe/0x20a0 [ 131.428863][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.433828][ T4958] usb_stor_bulk_transfer_buf+0x17c/0x410 [ 131.439560][ T4958] ? arch_stack_walk+0x94/0x100 [ 131.444418][ T4958] ene_send_scsi_cmd+0x130/0x610 [ 131.449362][ T4958] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 131.454832][ T4958] ? __kasan_check_byte+0x13/0x50 [ 131.459868][ T4958] ? __asan_memset+0x23/0x50 [ 131.464479][ T4958] ene_transport+0x13fd/0x37f0 [ 131.469262][ T4958] ? lock_release+0x201/0x2f0 [ 131.473954][ T4958] ? unwind_next_frame+0x3fe/0x20a0 [ 131.479172][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.484128][ T4958] ? __pfx_ene_transport+0x10/0x10 [ 131.489253][ T4958] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 131.495495][ T4958] ? arch_stack_walk+0x94/0x100 [ 131.500341][ T4958] ? ret_from_fork_asm+0x1a/0x30 [ 131.505331][ T4958] ? stack_trace_save+0x8e/0xc0 [ 131.510212][ T4958] ? __pfx_stack_trace_save+0x10/0x10 [ 131.516637][ T4958] ? check_path.constprop.0+0x24/0x50 [ 131.522025][ T4958] usb_stor_invoke_transport+0xeb/0x1570 [ 131.527832][ T4958] ? lockdep_unlock+0x64/0xe0 [ 131.532537][ T4958] ? __lock_acquire+0x107f/0x1ce0 [ 131.537567][ T4958] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 131.543824][ T4958] ? __pfx___mutex_lock+0x10/0x10 [ 131.548868][ T4958] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.553891][ T4958] ? find_held_lock+0x2b/0x80 [ 131.558581][ T4958] ? mark_held_locks+0x49/0x80 [ 131.563343][ T4958] usb_stor_control_thread+0x5eb/0xb00 [ 131.568822][ T4958] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.574804][ T4958] ? rcu_is_watching+0x12/0xc0 [ 131.579570][ T4958] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.585386][ T4958] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.590590][ T4958] ? __kthread_parkme+0x19e/0x250 [ 131.595634][ T4958] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.601622][ T4958] kthread+0x3c5/0x780 [ 131.605711][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.610319][ T4958] ? rcu_is_watching+0x12/0xc0 [ 131.615120][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.619702][ T4958] ret_from_fork+0x5b6/0x6c0 [ 131.624308][ T4958] ? __pfx_kthread+0x10/0x10 [ 131.628916][ T4958] ret_from_fork_asm+0x1a/0x30 [ 131.633715][ T4958] [ 131.636951][ T4958] Kernel Offset: disabled [ 131.641264][ T4958] Rebooting in 86400 seconds..