Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts. 2025/04/19 00:00:23 ignoring optional flag "sandboxArg"="0" 2025/04/19 00:00:23 ignoring optional flag "type"="gce" 2025/04/19 00:00:23 parsed 1 programs [ 104.195397][ T29] audit: type=1400 audit(1745020826.705:124): avc: denied { unlink } for pid=3980 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 104.311630][ T3980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.155207][ T29] audit: type=1401 audit(1745020828.665:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/19 00:00:42 executed programs: 0 2025/04/19 00:00:54 executed programs: 2 [ 131.813840][ T29] audit: type=1400 audit(1745020854.325:126): avc: denied { read write } for pid=4993 comm="syz.0.15" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.841402][ T29] audit: type=1400 audit(1745020854.325:127): avc: denied { open } for pid=4993 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.865005][ T29] audit: type=1400 audit(1745020854.325:128): avc: denied { ioctl } for pid=4993 comm="syz.0.15" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.051474][ T1077] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.201278][ T1077] usb 1-1: Using ep0 maxpacket: 16 [ 132.208826][ T1077] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.220518][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 132.231582][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 132.245665][ T1077] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 132.254807][ T1077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.262900][ T1077] usb 1-1: Product: syz [ 132.267169][ T1077] usb 1-1: Manufacturer: syz [ 132.271862][ T1077] usb 1-1: SerialNumber: syz [ 132.280353][ T1077] usb 1-1: config 0 descriptor?? [ 132.290678][ T1077] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 132.300179][ T1077] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 132.542104][ T1077] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.548822][ T1077] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 132.556758][ T1077] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 132.563875][ T1077] em28xx 1-1:0.0: No AC97 audio processor [ 132.569795][ T1077] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 132.631748][ T1077] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.638290][ T1077] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 132.646512][ T1077] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 132.653635][ T1077] em28xx 1-1:0.0: No AC97 audio processor [ 132.866388][ T1077] usb 1-1: USB disconnect, device number 2 [ 132.873872][ T1077] em28xx 1-1:0.0: Disconnecting em28xx #1 [ 132.879622][ T1077] em28xx 1-1:0.0: Disconnecting em28xx [ 132.887692][ T1077] em28xx 1-1:0.0: Freeing device [ 132.892800][ T1077] em28xx 1-1:0.0: Freeing device [ 133.311876][ T1077] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.461287][ T1077] usb 1-1: Using ep0 maxpacket: 16 [ 133.468199][ T1077] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 133.479777][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 133.490833][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 133.504662][ T1077] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 133.513807][ T1077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.521910][ T1077] usb 1-1: Product: syz [ 133.526217][ T1077] usb 1-1: Manufacturer: syz [ 133.530949][ T1077] usb 1-1: SerialNumber: syz [ 133.538503][ T1077] usb 1-1: config 0 descriptor?? [ 133.546687][ T1077] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 133.556163][ T1077] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 133.801693][ T1077] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 133.808226][ T1077] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 133.815787][ T1077] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 133.822840][ T1077] em28xx 1-1:0.0: No AC97 audio processor [ 133.828618][ T1077] non-slab/vmalloc memory [ 133.833233][ T1077] list_add corruption. prev->next should be next (ffffffff8a0329a0), but was ffffffff84936684. (prev=ffff88810ff18250). [ 133.846164][ T1077] ------------[ cut here ]------------ [ 133.851751][ T1077] kernel BUG at lib/list_debug.c:32! [ 133.857124][ T1077] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 133.863387][ T1077] CPU: 0 UID: 0 PID: 1077 Comm: kworker/0:2 Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary) [ 133.875998][ T1077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.886302][ T1077] Workqueue: usb_hub_wq hub_event [ 133.891379][ T1077] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 133.897945][ T1077] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 50 68 87 48 89 ee e8 f6 a0 d8 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 51 68 87 e8 de a0 d8 [ 133.917590][ T1077] RSP: 0018:ffffc90001b3ee98 EFLAGS: 00010286 [ 133.923845][ T1077] RAX: 0000000000000075 RBX: ffff88811d5a0000 RCX: ffffffff815be9f9 [ 133.931847][ T1077] RDX: 0000000000000000 RSI: ffffffff815c6886 RDI: 0000000000000005 [ 133.939919][ T1077] RBP: ffffffff8a0329a0 R08: 0000000000000005 R09: 0000000000000000 [ 133.947910][ T1077] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88811d5a0250 [ 133.955895][ T1077] R13: ffffffff8a0329a8 R14: ffff88811d5a01a8 R15: ffff88811d5a19e4 [ 133.963883][ T1077] FS: 0000000000000000(0000) GS:ffff8882691d3000(0000) knlGS:0000000000000000 [ 133.972870][ T1077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.979472][ T1077] CR2: 0000001b2f75ffff CR3: 00000001164ce000 CR4: 00000000003506f0 [ 133.987470][ T1077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.995603][ T1077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.003690][ T1077] Call Trace: [ 134.007084][ T1077] [ 134.010045][ T1077] em28xx_init_extension+0x48/0x200 [ 134.015464][ T1077] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 134.021486][ T1077] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 134.027844][ T1077] ? rcu_is_watching+0x12/0xc0 [ 134.032661][ T1077] ? lockdep_init_map_type+0x5c/0x280 [ 134.038144][ T1077] ? lockdep_init_map_type+0x5c/0x280 [ 134.043550][ T1077] em28xx_usb_probe+0x1285/0x3770 [ 134.048710][ T1077] usb_probe_interface+0x300/0x9c0 [ 134.053885][ T1077] ? __pfx_usb_probe_interface+0x10/0x10 [ 134.059551][ T1077] really_probe+0x23e/0xa90 [ 134.064086][ T1077] __driver_probe_device+0x1de/0x440 [ 134.069395][ T1077] driver_probe_device+0x4c/0x1b0 [ 134.074462][ T1077] __device_attach_driver+0x1df/0x310 [ 134.079862][ T1077] ? __pfx___device_attach_driver+0x10/0x10 [ 134.085864][ T1077] bus_for_each_drv+0x156/0x1e0 [ 134.090827][ T1077] ? __pfx_bus_for_each_drv+0x10/0x10 [ 134.096321][ T1077] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.101555][ T1077] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.107399][ T1077] __device_attach+0x1e4/0x4b0 [ 134.112261][ T1077] ? __pfx___device_attach+0x10/0x10 [ 134.117591][ T1077] ? do_raw_spin_unlock+0x172/0x230 [ 134.122837][ T1077] bus_probe_device+0x17f/0x1c0 [ 134.127733][ T1077] device_add+0x1148/0x1a70 [ 134.132281][ T1077] ? __pfx_device_add+0x10/0x10 [ 134.137171][ T1077] ? mark_held_locks+0x49/0x80 [ 134.142010][ T1077] usb_set_configuration+0x1187/0x1e20 [ 134.147586][ T1077] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 134.153716][ T1077] usb_generic_driver_probe+0xb1/0x110 [ 134.159311][ T1077] usb_probe_device+0xec/0x3e0 [ 134.164117][ T1077] ? __pfx_usb_probe_device+0x10/0x10 [ 134.169510][ T1077] really_probe+0x23e/0xa90 [ 134.174061][ T1077] __driver_probe_device+0x1de/0x440 [ 134.179373][ T1077] ? usb_driver_applicable+0x1c7/0x220 [ 134.185002][ T1077] driver_probe_device+0x4c/0x1b0 [ 134.190079][ T1077] __device_attach_driver+0x1df/0x310 [ 134.195514][ T1077] ? __pfx___device_attach_driver+0x10/0x10 [ 134.201470][ T1077] bus_for_each_drv+0x156/0x1e0 [ 134.206386][ T1077] ? __pfx_bus_for_each_drv+0x10/0x10 [ 134.211792][ T1077] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.217024][ T1077] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.222855][ T1077] __device_attach+0x1e4/0x4b0 [ 134.227645][ T1077] ? __pfx___device_attach+0x10/0x10 [ 134.233062][ T1077] ? do_raw_spin_unlock+0x172/0x230 [ 134.238306][ T1077] bus_probe_device+0x17f/0x1c0 [ 134.243177][ T1077] device_add+0x1148/0x1a70 [ 134.247831][ T1077] ? __pfx_device_add+0x10/0x10 [ 134.252791][ T1077] ? add_device_randomness+0xb7/0xf0 [ 134.258123][ T1077] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 134.264188][ T1077] usb_new_device+0xd07/0x1a20 [ 134.269088][ T1077] ? do_raw_spin_lock+0x12c/0x2b0 [ 134.274345][ T1077] ? __pfx_usb_new_device+0x10/0x10 [ 134.279566][ T1077] ? mark_held_locks+0x49/0x80 [ 134.284562][ T1077] hub_event+0x2f85/0x5030 [ 134.289019][ T1077] ? __pfx_hub_event+0x10/0x10 [ 134.293820][ T1077] ? debug_object_deactivate+0x1ec/0x3a0 [ 134.299497][ T1077] ? rcu_is_watching+0x12/0xc0 [ 134.304318][ T1077] process_one_work+0x9cc/0x1b70 [ 134.309321][ T1077] ? __pfx_hub_event+0x10/0x10 [ 134.314150][ T1077] ? __pfx_process_one_work+0x10/0x10 [ 134.319560][ T1077] ? assign_work+0x1a0/0x250 [ 134.324182][ T1077] worker_thread+0x6c8/0xf10 [ 134.328844][ T1077] ? __kthread_parkme+0x19e/0x250 [ 134.333914][ T1077] ? __pfx_worker_thread+0x10/0x10 [ 134.339081][ T1077] kthread+0x3c2/0x780 [ 134.343219][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.347847][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.352468][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.357266][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.361881][ T1077] ? rcu_is_watching+0x12/0xc0 [ 134.366771][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.371426][ T1077] ret_from_fork+0x45/0x80 [ 134.375873][ T1077] ? __pfx_kthread+0x10/0x10 [ 134.380496][ T1077] ret_from_fork_asm+0x1a/0x30 [ 134.385289][ T1077] [ 134.388341][ T1077] Modules linked in: [ 134.392375][ T1077] ---[ end trace 0000000000000000 ]--- [ 134.397870][ T1077] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 134.404475][ T1077] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 50 68 87 48 89 ee e8 f6 a0 d8 fe 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 51 68 87 e8 de a0 d8 [ 134.424268][ T1077] RSP: 0018:ffffc90001b3ee98 EFLAGS: 00010286 [ 134.430384][ T1077] RAX: 0000000000000075 RBX: ffff88811d5a0000 RCX: ffffffff815be9f9 [ 134.438427][ T1077] RDX: 0000000000000000 RSI: ffffffff815c6886 RDI: 0000000000000005 [ 134.446542][ T1077] RBP: ffffffff8a0329a0 R08: 0000000000000005 R09: 0000000000000000 [ 134.454573][ T1077] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88811d5a0250 [ 134.462624][ T1077] R13: ffffffff8a0329a8 R14: ffff88811d5a01a8 R15: ffff88811d5a19e4 [ 134.470636][ T1077] FS: 0000000000000000(0000) GS:ffff8882691d3000(0000) knlGS:0000000000000000 [ 134.479833][ T1077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.486504][ T1077] CR2: 0000001b2f75ffff CR3: 00000001164ce000 CR4: 00000000003506f0 [ 134.494633][ T1077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.502685][ T1077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.510680][ T1077] Kernel panic - not syncing: Fatal exception [ 134.517126][ T1077] Kernel Offset: disabled [ 134.521474][ T1077] Rebooting in 86400 seconds..