Warning: Permanently added '10.128.15.196' (ED25519) to the list of known hosts. executing program [ 41.936376][ T30] audit: type=1400 audit(1742858841.367:80): avc: denied { execmem } for pid=2946 comm="syz-executor922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.956712][ T30] audit: type=1400 audit(1742858841.367:81): avc: denied { read write } for pid=2947 comm="syz-executor922" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.982430][ T30] audit: type=1400 audit(1742858841.367:82): avc: denied { open } for pid=2947 comm="syz-executor922" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.006788][ T30] audit: type=1400 audit(1742858841.377:83): avc: denied { ioctl } for pid=2947 comm="syz-executor922" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.181009][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.333063][ T10] usb 1-1: config 0 has no interfaces? [ 42.341108][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 42.350795][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 42.358883][ T10] usb 1-1: Product: syz [ 42.363364][ T10] usb 1-1: Manufacturer: syz [ 42.371906][ T10] usb 1-1: config 0 descriptor?? [ 42.579294][ T2947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.588107][ T2947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.596902][ T2947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.605761][ T2947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.615052][ T2806] usb 1-1: USB disconnect, device number 2 [ 43.060926][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.212409][ T10] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 43.220823][ T10] usb 1-1: config 0 has no interface number 0 [ 43.227132][ T10] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 43.239005][ T10] usb 1-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 225 [ 43.249295][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 43.258421][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.268500][ T10] usb 1-1: config 0 descriptor?? [ 43.475976][ T10] usb 1-1: string descriptor 0 read error: -71 [ 43.484374][ T10] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected [ 43.493183][ T10] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1 [ 43.503046][ T10] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84 [ 43.511545][ T10] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2 [ 43.521642][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 43.531966][ T10] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88 [ 43.540009][ T10] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6 [ 43.549315][ T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 43.560972][ T10] usb 1-1: USB disconnect, device number 3 [ 43.569810][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 43.582051][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 43.592385][ T10] keyspan 1-1:0.168: device disconnected [ 43.981147][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 44.132529][ T10] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 44.140885][ T10] usb 1-1: config 4 has no interface number 0 [ 44.147403][ T10] usb 1-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 44.159423][ T10] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid maxpacket 225, setting to 64 [ 44.170655][ T10] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 44.184707][ T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 44.194487][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.202825][ T10] usb 1-1: Product: syz [ 44.207043][ T10] usb 1-1: Manufacturer: syz [ 44.211828][ T10] usb 1-1: SerialNumber: syz [ 44.620297][ T10] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 44.628871][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 44.638419][ T10] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 44.645802][ T10] usb 1-1: media controller created [ 44.653351][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 44.687648][ T10] DVB: Unable to find symbol dib7000p_attach() [ 44.694047][ T10] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 44.750823][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 44.757071][ T10] Registered IR keymap rc-empty [ 44.762508][ T10] dvb-usb: could not initialize remote control. [ 44.768948][ T10] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 44.820619][ T10] ------------[ cut here ]------------ [ 44.826586][ T10] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.833268][ T10] WARNING: CPU: 0 PID: 10 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 44.843461][ T10] Modules linked in: [ 44.847585][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc6-syzkaller-ged492c95f13a #0 [ 44.858491][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.869347][ T10] Workqueue: usb_hub_wq hub_event [ 44.874518][ T10] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 44.880396][ T10] Code: 84 3c 02 00 00 e8 e5 7c ee fc 4c 89 ef e8 1d ca d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 65 a2 87 e8 56 86 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 b7 7c ee fc 49 81 c4 c0 05 00 00 e9 [ 44.900608][ T10] RSP: 0018:ffffc900000aef60 EFLAGS: 00010286 [ 44.906788][ T10] RAX: 0000000000000000 RBX: ffff888114974300 RCX: ffffffff813f5e19 [ 44.915042][ T10] RDX: ffff888101699d40 RSI: ffffffff813f5e26 RDI: 0000000000000001 [ 44.923227][ T10] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 44.931404][ T10] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 44.939625][ T10] R13: ffff8881150bf0b0 R14: ffff8881046961a0 R15: ffff88811497437c [ 44.947791][ T10] FS: 0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 [ 44.956836][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.963549][ T10] CR2: 00007fb081020440 CR3: 0000000117d02000 CR4: 00000000003506f0 [ 44.972178][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.980470][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.988718][ T10] Call Trace: [ 44.992198][ T10] <TASK> [ 44.995268][ T10] ? __warn+0xea/0x3c0 [ 44.999473][ T10] ? usb_set_configuration+0x10cb/0x1c50 [ 45.005508][ T10] ? usb_submit_urb+0xe4b/0x1730 [ 45.010524][ T10] ? report_bug+0x3c0/0x580 [ 45.015183][ T10] ? handle_bug+0x54/0xa0 executing program [ 45.019583][ T10] ? exc_invalid_op+0x17/0x50 [ 45.024487][ T10] ? asm_exc_invalid_op+0x1a/0x20 [ 45.029717][ T10] ? __warn_printk+0x199/0x350 [ 45.034728][ T10] ? __warn_printk+0x1a6/0x350 [ 45.039690][ T10] ? usb_submit_urb+0xe4b/0x1730 [ 45.044813][ T10] ? kasan_save_track+0x14/0x30 [ 45.049958][ T10] dib0700_rc_setup+0x45d/0x7b0 [ 45.054986][ T10] dib0700_probe+0x29c/0x390 [ 45.059737][ T10] ? __pfx_dib0700_probe+0x10/0x10 [ 45.064989][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.070944][ T10] ? __pm_runtime_set_status+0x13c/0x9a0 [ 45.076623][ T10] usb_probe_interface+0x300/0x9c0 [ 45.081868][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 45.087582][ T10] really_probe+0x23e/0xa90 [ 45.092301][ T10] __driver_probe_device+0x1de/0x440 [ 45.097732][ T10] driver_probe_device+0x4c/0x1b0 [ 45.103515][ T10] __device_attach_driver+0x1df/0x310 [ 45.108953][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 45.115092][ T10] bus_for_each_drv+0x157/0x1e0 [ 45.120062][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 45.125634][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.130968][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.137392][ T10] __device_attach+0x1e8/0x4b0 [ 45.142385][ T10] ? __pfx___device_attach+0x10/0x10 [ 45.147867][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 45.153382][ T10] bus_probe_device+0x17f/0x1c0 [ 45.158511][ T10] device_add+0x114b/0x1a70 [ 45.163322][ T10] ? __pfx_device_add+0x10/0x10 [ 45.168358][ T10] ? wakeup_sysfs_add+0x51/0x60 [ 45.173560][ T10] usb_set_configuration+0x10cb/0x1c50 [ 45.179399][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 45.185973][ T10] usb_generic_driver_probe+0xb1/0x110 [ 45.191746][ T10] usb_probe_device+0xec/0x3e0 [ 45.196734][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 45.202470][ T10] really_probe+0x23e/0xa90 [ 45.207247][ T10] __driver_probe_device+0x1de/0x440 [ 45.212827][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 45.218525][ T10] driver_probe_device+0x4c/0x1b0 [ 45.223941][ T10] __device_attach_driver+0x1df/0x310 [ 45.229563][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 45.235614][ T10] bus_for_each_drv+0x157/0x1e0 [ 45.240603][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 45.246129][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.251526][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.257471][ T10] __device_attach+0x1e8/0x4b0 [ 45.262339][ T10] ? __pfx___device_attach+0x10/0x10 [ 45.267698][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 45.273267][ T10] bus_probe_device+0x17f/0x1c0 [ 45.278206][ T10] device_add+0x114b/0x1a70 [ 45.282852][ T10] ? __pfx_device_add+0x10/0x10 [ 45.287855][ T10] ? add_device_randomness+0xb8/0xf0 [ 45.293321][ T10] usb_new_device+0xd09/0x1a20 [ 45.298438][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 45.303762][ T10] hub_event+0x2e58/0x4f40 [ 45.308395][ T10] ? __pfx_hub_event+0x10/0x10 [ 45.313316][ T10] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.319026][ T10] ? rcu_is_watching+0x12/0xc0 [ 45.323937][ T10] ? trace_lock_acquire+0x14e/0x1f0 [ 45.329316][ T10] ? process_one_work+0x921/0x1ba0 [ 45.334555][ T10] ? lock_acquire+0x2f/0xb0 [ 45.339127][ T10] ? process_one_work+0x921/0x1ba0 [ 45.344413][ T10] process_one_work+0x9c5/0x1ba0 [ 45.349446][ T10] ? __pfx_hub_event+0x10/0x10 [ 45.354395][ T10] ? __pfx_process_one_work+0x10/0x10 [ 45.359976][ T10] ? assign_work+0x1a0/0x250 [ 45.364729][ T10] worker_thread+0x6c8/0xf00 [ 45.369416][ T10] ? __kthread_parkme+0x148/0x220 [ 45.374670][ T10] ? __pfx_worker_thread+0x10/0x10 [ 45.380063][ T10] kthread+0x3af/0x750 [ 45.384366][ T10] ? __pfx_kthread+0x10/0x10 [ 45.389209][ T10] ? lock_acquire+0x2f/0xb0 [ 45.393919][ T10] ? __pfx_kthread+0x10/0x10 [ 45.398595][ T10] ret_from_fork+0x45/0x80 [ 45.403176][ T10] ? __pfx_kthread+0x10/0x10 [ 45.407848][ T10] ret_from_fork_asm+0x1a/0x30 [ 45.412774][ T10] </TASK> [ 45.415855][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 45.423191][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.14.0-rc6-syzkaller-ged492c95f13a #0 [ 45.433511][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.443598][ T10] Workqueue: usb_hub_wq hub_event [ 45.448681][ T10] Call Trace: [ 45.452170][ T10] <TASK> [ 45.455250][ T10] dump_stack_lvl+0x3d/0x1f0 [ 45.459894][ T10] panic+0x71d/0x800 [ 45.463859][ T10] ? __pfx_panic+0x10/0x10 [ 45.468425][ T10] ? show_trace_log_lvl+0x29d/0x3d0 [ 45.473824][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 45.479067][ T10] ? usb_submit_urb+0xe4b/0x1730 [ 45.484056][ T10] check_panic_on_warn+0xab/0xb0 [ 45.489062][ T10] __warn+0xf6/0x3c0 [ 45.493095][ T10] ? usb_set_configuration+0x10cb/0x1c50 [ 45.498908][ T10] ? usb_submit_urb+0xe4b/0x1730 [ 45.504016][ T10] report_bug+0x3c0/0x580 [ 45.508519][ T10] handle_bug+0x54/0xa0 [ 45.512812][ T10] exc_invalid_op+0x17/0x50 [ 45.517557][ T10] asm_exc_invalid_op+0x1a/0x20 [ 45.522799][ T10] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 45.528616][ T10] Code: 84 3c 02 00 00 e8 e5 7c ee fc 4c 89 ef e8 1d ca d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 65 a2 87 e8 56 86 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 b7 7c ee fc 49 81 c4 c0 05 00 00 e9 [ 45.549960][ T10] RSP: 0018:ffffc900000aef60 EFLAGS: 00010286 [ 45.556854][ T10] RAX: 0000000000000000 RBX: ffff888114974300 RCX: ffffffff813f5e19 [ 45.565128][ T10] RDX: ffff888101699d40 RSI: ffffffff813f5e26 RDI: 0000000000000001 [ 45.573269][ T10] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 45.581304][ T10] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 45.589368][ T10] R13: ffff8881150bf0b0 R14: ffff8881046961a0 R15: ffff88811497437c [ 45.597978][ T10] ? __warn_printk+0x199/0x350 [ 45.602899][ T10] ? __warn_printk+0x1a6/0x350 [ 45.607994][ T10] ? kasan_save_track+0x14/0x30 [ 45.613101][ T10] dib0700_rc_setup+0x45d/0x7b0 [ 45.618095][ T10] dib0700_probe+0x29c/0x390 [ 45.622802][ T10] ? __pfx_dib0700_probe+0x10/0x10 [ 45.628124][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.634010][ T10] ? __pm_runtime_set_status+0x13c/0x9a0 [ 45.639728][ T10] usb_probe_interface+0x300/0x9c0 [ 45.645013][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 45.650751][ T10] really_probe+0x23e/0xa90 [ 45.655306][ T10] __driver_probe_device+0x1de/0x440 [ 45.660631][ T10] driver_probe_device+0x4c/0x1b0 [ 45.665689][ T10] __device_attach_driver+0x1df/0x310 [ 45.671187][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 45.677259][ T10] bus_for_each_drv+0x157/0x1e0 [ 45.682350][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 45.688058][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.693385][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.700193][ T10] __device_attach+0x1e8/0x4b0 [ 45.705097][ T10] ? __pfx___device_attach+0x10/0x10 [ 45.710516][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 45.716016][ T10] bus_probe_device+0x17f/0x1c0 [ 45.720938][ T10] device_add+0x114b/0x1a70 [ 45.725518][ T10] ? __pfx_device_add+0x10/0x10 [ 45.730426][ T10] ? wakeup_sysfs_add+0x51/0x60 [ 45.735321][ T10] usb_set_configuration+0x10cb/0x1c50 [ 45.740840][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 45.747086][ T10] usb_generic_driver_probe+0xb1/0x110 [ 45.752604][ T10] usb_probe_device+0xec/0x3e0 [ 45.757570][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 45.763196][ T10] really_probe+0x23e/0xa90 [ 45.767793][ T10] __driver_probe_device+0x1de/0x440 [ 45.773501][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 45.779214][ T10] driver_probe_device+0x4c/0x1b0 [ 45.784472][ T10] __device_attach_driver+0x1df/0x310 [ 45.789961][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 45.796246][ T10] bus_for_each_drv+0x157/0x1e0 [ 45.801156][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 45.806707][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.811948][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 45.817924][ T10] __device_attach+0x1e8/0x4b0 [ 45.822873][ T10] ? __pfx___device_attach+0x10/0x10 [ 45.829197][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 45.834571][ T10] bus_probe_device+0x17f/0x1c0 [ 45.839653][ T10] device_add+0x114b/0x1a70 [ 45.844444][ T10] ? __pfx_device_add+0x10/0x10 [ 45.849456][ T10] ? add_device_randomness+0xb8/0xf0 [ 45.854813][ T10] usb_new_device+0xd09/0x1a20 [ 45.859649][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 45.864902][ T10] hub_event+0x2e58/0x4f40 [ 45.869390][ T10] ? __pfx_hub_event+0x10/0x10 [ 45.874218][ T10] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.880146][ T10] ? rcu_is_watching+0x12/0xc0 [ 45.885067][ T10] ? trace_lock_acquire+0x14e/0x1f0 [ 45.890318][ T10] ? process_one_work+0x921/0x1ba0 [ 45.895670][ T10] ? lock_acquire+0x2f/0xb0 [ 45.900259][ T10] ? process_one_work+0x921/0x1ba0 [ 45.905521][ T10] process_one_work+0x9c5/0x1ba0 [ 45.910648][ T10] ? __pfx_hub_event+0x10/0x10 [ 45.915563][ T10] ? __pfx_process_one_work+0x10/0x10 [ 45.921031][ T10] ? assign_work+0x1a0/0x250 [ 45.925700][ T10] worker_thread+0x6c8/0xf00 [ 45.930354][ T10] ? __kthread_parkme+0x148/0x220 [ 45.935509][ T10] ? __pfx_worker_thread+0x10/0x10 [ 45.940665][ T10] kthread+0x3af/0x750 [ 45.944837][ T10] ? __pfx_kthread+0x10/0x10 [ 45.949578][ T10] ? lock_acquire+0x2f/0xb0 [ 45.954323][ T10] ? __pfx_kthread+0x10/0x10 [ 45.959083][ T10] ret_from_fork+0x45/0x80 [ 45.963678][ T10] ? __pfx_kthread+0x10/0x10 [ 45.969030][ T10] ret_from_fork_asm+0x1a/0x30 [ 45.973859][ T10] </TASK> [ 45.977340][ T10] Kernel Offset: disabled [ 45.981825][ T10] Rebooting in 86400 seconds..