Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2025/09/19 22:48:33 ignoring optional flag "type"="gce" 2025/09/19 22:48:33 parsed 1 programs [ 89.124403][ T29] audit: type=1400 audit(1758322115.615:99): avc: denied { unlink } for pid=3952 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 89.207781][ T3952] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.400210][ T29] audit: type=1400 audit(1758322116.885:100): avc: denied { read } for pid=3965 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.421955][ T29] audit: type=1400 audit(1758322116.885:101): avc: denied { open } for pid=3965 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.570079][ T29] audit: type=1400 audit(1758322117.055:102): avc: denied { unmount } for pid=3966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.149263][ T29] audit: type=1401 audit(1758322118.625:103): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/09/19 22:48:48 executed programs: 0 2025/09/19 22:49:31 executed programs: 10 [ 145.443436][ T29] audit: type=1400 audit(1758322171.925:104): avc: denied { read write } for pid=6697 comm="syz.1.16" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.467139][ T29] audit: type=1400 audit(1758322171.925:105): avc: denied { open } for pid=6697 comm="syz.1.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.490491][ T29] audit: type=1400 audit(1758322171.925:106): avc: denied { ioctl } for pid=6697 comm="syz.1.16" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.698168][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.793176][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.873487][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 145.881168][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.893186][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 145.904510][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 145.939608][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 145.948754][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.956876][ T9] usb 2-1: Product: syz [ 145.961039][ T9] usb 2-1: Manufacturer: syz [ 145.965655][ T9] usb 2-1: SerialNumber: syz [ 145.970442][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 145.977430][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.989346][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 146.000751][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 146.016706][ T9] usb 2-1: config 0 descriptor?? [ 146.036131][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 146.045335][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.053386][ T10] usb 1-1: Product: syz [ 146.057551][ T10] usb 1-1: Manufacturer: syz [ 146.062142][ T10] usb 1-1: SerialNumber: syz [ 146.067531][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 146.076933][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 146.084429][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.095308][ T10] usb 1-1: config 0 descriptor?? [ 146.102855][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 146.112692][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 146.153344][ T1115] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.237086][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 146.244106][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.255695][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 146.266859][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 146.278121][ T6725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.287730][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 146.293743][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 146.297436][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.303708][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 146.310850][ T23] usb 3-1: Product: syz [ 146.318736][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 146.321818][ T23] usb 3-1: Manufacturer: syz [ 146.321836][ T23] usb 3-1: SerialNumber: syz [ 146.321878][ T1115] usb 5-1: Using ep0 maxpacket: 16 [ 146.328996][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 146.336621][ T1115] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.339569][ T9] em28xx 2-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 146.343266][ T1115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 146.381346][ T1115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 146.393496][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 146.393524][ T23] usb 3-1: config 0 descriptor?? [ 146.399985][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 146.413500][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 146.416509][ T23] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 146.420511][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 146.420864][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 146.429767][ T23] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 146.430686][ T1115] usb 5-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 146.436586][ T10] em28xx 1-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 146.442119][ T1115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.450748][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 146.458571][ T1115] usb 5-1: Product: syz [ 146.469861][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 146.476828][ T1115] usb 5-1: Manufacturer: syz [ 146.483423][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 146.487578][ T1115] usb 5-1: SerialNumber: syz [ 146.514100][ T1115] usb 5-1: config 0 descriptor?? [ 146.523252][ T6725] usb 4-1: Using ep0 maxpacket: 16 [ 146.533473][ T1115] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 146.542793][ T1115] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 146.552186][ T6725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.563938][ T6725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 146.574930][ T6725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 146.595453][ T6725] usb 4-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 146.595546][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 146.604646][ T6725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.618622][ T6725] usb 4-1: Product: syz [ 146.622799][ T6725] usb 4-1: Manufacturer: syz [ 146.627436][ T6725] usb 4-1: SerialNumber: syz [ 146.643788][ T6725] usb 4-1: config 0 descriptor?? [ 146.654220][ T6725] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 146.663531][ T6725] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 146.711678][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 146.719062][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 146.726165][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 146.733526][ T23] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 146.740031][ T23] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 146.747841][ T23] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 146.754867][ T23] em28xx 3-1:0.0: No AC97 audio processor [ 146.775210][ T1115] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 146.787621][ T1115] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 146.803670][ T23] em28xx 3-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 146.814156][ T1115] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 146.821112][ T1115] em28xx 5-1:0.0: No AC97 audio processor [ 146.829851][ T1115] em28xx 5-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 146.839690][ T9] usb 2-1: USB disconnect, device number 2 [ 146.841144][ T9] em28xx 2-1:0.0: Disconnecting em28xx #2 [ 146.851938][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 146.903535][ T23] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 146.910078][ T23] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 146.923518][ T23] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 146.930550][ T23] em28xx 3-1:0.0: No AC97 audio processor [ 146.936727][ T1115] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 146.942848][ T6725] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 146.951646][ T1115] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 146.959527][ T6725] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 146.962366][ T9] em28xx 2-1:0.0: Freeing device [ 146.971418][ T9] em28xx 2-1:0.0: Freeing device [ 146.978109][ T6725] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 146.985634][ T6725] em28xx 4-1:0.0: No AC97 audio processor [ 146.990507][ T10] usb 1-1: USB disconnect, device number 2 [ 146.998618][ T1115] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 147.007246][ T1115] em28xx 5-1:0.0: No AC97 audio processor [ 147.028277][ T10] em28xx 1-1:0.0: Disconnecting em28xx #4 [ 147.034137][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 147.053795][ T10] non-slab/vmalloc memory [ 147.058344][ T10] list_del corruption. next->prev should be ffff888137efc250, but was 0000000000000000. (next=ffff8881140f4250) [ 147.070619][ T10] ------------[ cut here ]------------ [ 147.076160][ T10] kernel BUG at lib/list_debug.c:65! [ 147.081484][ T10] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 147.087731][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.097359][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.107406][ T10] Workqueue: usb_hub_wq hub_event [ 147.112461][ T10] RIP: 0010:__list_del_entry_valid_or_report+0x1b3/0x200 [ 147.119493][ T10] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 4b 49 8b 54 24 08 4c 89 e1 48 89 de 48 c7 c7 c0 6b 89 87 e8 ae 67 ce fe 90 <0f> 0b e8 66 a7 4d ff e9 6b fe ff ff 48 89 df e8 59 a7 4d ff e9 7d [ 147.139115][ T10] RSP: 0018:ffffc900000af678 EFLAGS: 00010282 [ 147.145202][ T10] RAX: 000000000000006d RBX: ffff888137efc250 RCX: ffffffff815cfe99 [ 147.153175][ T10] RDX: 0000000000000000 RSI: ffffffff815d7d36 RDI: 0000000000000005 [ 147.161139][ T10] RBP: ffff8881140f4258 R08: 0000000000000005 R09: 0000000000000000 [ 147.169127][ T10] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8881140f4250 [ 147.177185][ T10] R13: ffff888137efc000 R14: ffffffff8a2921e8 R15: ffffed1026fdfc45 [ 147.185150][ T10] FS: 0000000000000000(0000) GS:ffff888268ef4000(0000) knlGS:0000000000000000 [ 147.194073][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.200651][ T10] CR2: 0000559f2f250068 CR3: 0000000102acc000 CR4: 00000000003506f0 [ 147.208615][ T10] Call Trace: [ 147.211888][ T10] [ 147.214818][ T10] em28xx_close_extension+0x10b/0x2b0 [ 147.220232][ T10] em28xx_usb_disconnect+0x19d/0x610 [ 147.225527][ T10] usb_unbind_interface+0x1da/0x9e0 [ 147.230718][ T10] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 147.236344][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 147.242141][ T10] device_remove+0x122/0x170 [ 147.246731][ T10] device_release_driver_internal+0x44b/0x620 [ 147.252798][ T10] bus_remove_device+0x22f/0x420 [ 147.257728][ T10] device_del+0x396/0x9f0 [ 147.262056][ T10] ? __pfx_device_del+0x10/0x10 [ 147.266901][ T10] ? kobject_put+0x210/0x5a0 [ 147.271491][ T10] usb_disable_device+0x355/0x7d0 [ 147.276516][ T10] usb_disconnect+0x2e1/0x9c0 [ 147.281190][ T10] hub_event+0x1aa2/0x5060 [ 147.285707][ T10] ? __lock_acquire+0xb97/0x1ce0 [ 147.290635][ T10] ? __pfx_hub_event+0x10/0x10 [ 147.295396][ T10] ? interval_tree_remove+0x850/0xee0 [ 147.300779][ T10] ? rcu_is_watching+0x12/0xc0 [ 147.305542][ T10] process_one_work+0x9cf/0x1b70 [ 147.310479][ T10] ? __pfx_hub_event+0x10/0x10 [ 147.315239][ T10] ? __pfx_process_one_work+0x10/0x10 [ 147.320612][ T10] ? assign_work+0x1a0/0x250 [ 147.325200][ T10] worker_thread+0x6c8/0xf10 [ 147.329789][ T10] ? __kthread_parkme+0x19e/0x250 [ 147.334802][ T10] ? __pfx_worker_thread+0x10/0x10 [ 147.339910][ T10] kthread+0x3c5/0x780 [ 147.343980][ T10] ? __pfx_kthread+0x10/0x10 [ 147.348572][ T10] ? rcu_is_watching+0x12/0xc0 [ 147.353331][ T10] ? __pfx_kthread+0x10/0x10 [ 147.357928][ T10] ret_from_fork+0x56d/0x700 [ 147.362510][ T10] ? __pfx_kthread+0x10/0x10 [ 147.367090][ T10] ret_from_fork_asm+0x1a/0x30 [ 147.371857][ T10] [ 147.374860][ T10] Modules linked in: [ 147.378894][ T10] ---[ end trace 0000000000000000 ]--- [ 147.384371][ T10] RIP: 0010:__list_del_entry_valid_or_report+0x1b3/0x200 [ 147.391413][ T10] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 4b 49 8b 54 24 08 4c 89 e1 48 89 de 48 c7 c7 c0 6b 89 87 e8 ae 67 ce fe 90 <0f> 0b e8 66 a7 4d ff e9 6b fe ff ff 48 89 df e8 59 a7 4d ff e9 7d [ 147.411045][ T10] RSP: 0018:ffffc900000af678 EFLAGS: 00010282 [ 147.417130][ T10] RAX: 000000000000006d RBX: ffff888137efc250 RCX: ffffffff815cfe99 [ 147.425113][ T10] RDX: 0000000000000000 RSI: ffffffff815d7d36 RDI: 0000000000000005 [ 147.433143][ T10] RBP: ffff8881140f4258 R08: 0000000000000005 R09: 0000000000000000 [ 147.441109][ T10] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8881140f4250 [ 147.449089][ T10] R13: ffff888137efc000 R14: ffffffff8a2921e8 R15: ffffed1026fdfc45 [ 147.457072][ T10] FS: 0000000000000000(0000) GS:ffff888268ef4000(0000) knlGS:0000000000000000 [ 147.466094][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.472679][ T10] CR2: 0000559f2f250068 CR3: 0000000102acc000 CR4: 00000000003506f0 [ 147.480666][ T10] Kernel panic - not syncing: Fatal exception [ 147.486834][ T10] Kernel Offset: disabled [ 147.491147][ T10] Rebooting in 86400 seconds..