Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. 2025/12/14 19:06:18 parsed 1 programs [ 55.901497][ T29] audit: type=1400 audit(1765739178.479:62): avc: denied { node_bind } for pid=2965 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.922510][ T29] audit: type=1400 audit(1765739178.479:63): avc: denied { module_request } for pid=2965 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.999957][ T29] audit: type=1400 audit(1765739180.569:64): avc: denied { mounton } for pid=2975 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.024188][ T29] audit: type=1400 audit(1765739180.599:65): avc: denied { mount } for pid=2975 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.027156][ T2975] cgroup: Unknown subsys name 'net' [ 58.054689][ T29] audit: type=1400 audit(1765739180.629:66): avc: denied { unmount } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.233871][ T2975] cgroup: Unknown subsys name 'cpuset' [ 58.242544][ T2975] cgroup: Unknown subsys name 'rlimit' [ 58.463093][ T29] audit: type=1400 audit(1765739181.039:67): avc: denied { setattr } for pid=2975 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.486609][ T29] audit: type=1400 audit(1765739181.039:68): avc: denied { create } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.507182][ T29] audit: type=1400 audit(1765739181.039:69): avc: denied { write } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.527632][ T29] audit: type=1400 audit(1765739181.039:70): avc: denied { read } for pid=2975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.548690][ T29] audit: type=1400 audit(1765739181.079:71): avc: denied { sys_module } for pid=2975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.616527][ T2979] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.657243][ T2975] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.531683][ T2984] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.069168][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 61.069190][ T29] audit: type=1400 audit(1765739183.639:98): avc: denied { create } for pid=3002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.095636][ T29] audit: type=1400 audit(1765739183.669:99): avc: denied { sys_admin } for pid=3002 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.139206][ T29] audit: type=1400 audit(1765739183.709:100): avc: denied { sys_chroot } for pid=3003 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.337778][ T29] audit: type=1400 audit(1765739183.909:101): avc: denied { create } for pid=3012 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.248155][ T29] audit: type=1400 audit(1765739184.819:102): avc: denied { create } for pid=3033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.389130][ T3039] syz-executor (3039) used greatest stack depth: 22728 bytes left 2025/12/14 19:06:37 executed programs: 0 2025/12/14 19:06:49 executed programs: 2 [ 87.173008][ T29] audit: type=1400 audit(1765739209.749:103): avc: denied { read write } for pid=3956 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.209791][ T29] audit: type=1400 audit(1765739209.749:104): avc: denied { open } for pid=3956 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.233635][ T29] audit: type=1400 audit(1765739209.749:105): avc: denied { ioctl } for pid=3956 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.441197][ T2996] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.590991][ T2996] usb 4-1: Using ep0 maxpacket: 16 [ 87.598164][ T2996] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 87.606755][ T2996] usb 4-1: config 231 has no interface number 0 [ 87.613172][ T2996] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 87.623403][ T2996] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 87.633531][ T2996] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.646860][ T2996] usb 4-1: config 231 interface 206 has no altsetting 0 [ 87.656512][ T2996] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 87.665730][ T2996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.674108][ T2996] usb 4-1: Product: syz [ 87.678271][ T2996] usb 4-1: Manufacturer: syz [ 87.682916][ T2996] usb 4-1: SerialNumber: syz [ 87.691975][ T3956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.699270][ T3956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.925074][ T2996] usb 4-1: USB disconnect, device number 2 [ 87.938263][ T29] audit: type=1400 audit(1765739210.509:106): avc: denied { firmware_load } for pid=23 comm="kworker/1:0" path="/lib/firmware/libertas/usb8388_olpc.bin" dev="sda1" ino=432 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 88.351028][ T2996] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 88.502416][ T2996] usb 4-1: not running at top speed; connect to a high speed hub [ 88.511347][ T2996] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 88.519800][ T2996] usb 4-1: config 231 has no interface number 0 [ 88.526215][ T2996] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.539516][ T2996] usb 4-1: config 231 interface 206 has no altsetting 0 [ 88.549807][ T2996] usb 4-1: string descriptor 0 read error: -22 [ 88.556136][ T2996] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 88.565246][ T2996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.690998][ T23] ------------[ cut here ]------------ [ 89.696548][ T23] URB ffff888114e55000 submitted while active [ 89.702941][ T23] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#1: kworker/1:0/23 [ 89.711115][ T23] Modules linked in: [ 89.715214][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.724906][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.735213][ T23] Workqueue: events request_firmware_work_func [ 89.741544][ T23] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 89.747418][ T23] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 97 f5 c5 fc 48 8d 3d 50 45 f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 79 f5 c5 fc 0f 1f [ 89.767311][ T23] RSP: 0018:ffffc9000018f8d0 EFLAGS: 00010293 [ 89.773526][ T23] RAX: 0000000000000000 RBX: ffff888114e55000 RCX: ffffffff8427b986 [ 89.781568][ T23] RDX: ffff8881022857c0 RSI: ffff888114e55000 RDI: ffffffff8aaa3c30 [ 89.789591][ T23] RBP: ffff888114e55000 R08: 0000000000000001 R09: 0000000000000000 [ 89.797808][ T23] R10: 0000000000000000 R11: ffff888102286268 R12: 00000000c0030300 [ 89.805853][ T23] R13: 0000000000000010 R14: ffff8881052ad000 R15: ffff8881052ac000 [ 89.813899][ T23] FS: 0000000000000000(0000) GS:ffff888268cf5000(0000) knlGS:0000000000000000 [ 89.823023][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.829670][ T23] CR2: 0000557c8683f628 CR3: 0000000112ea6000 CR4: 00000000003506f0 [ 89.837842][ T23] Call Trace: [ 89.841212][ T23] [ 89.844217][ T23] ? __netdev_alloc_skb+0x11/0x920 [ 89.849401][ T23] usb_tx_block+0x241/0x2e0 [ 89.853999][ T23] if_usb_prog_firmware+0x570/0x10c0 [ 89.859370][ T23] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 89.865191][ T23] ? __pfx__request_firmware+0x10/0x10 [ 89.870796][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 89.876175][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.882236][ T23] ? __pfx_helper_firmware_cb+0x10/0x10 [ 89.887950][ T23] helper_firmware_cb+0x1f8/0x2e0 [ 89.893161][ T23] request_firmware_work_func+0x13c/0x250 [ 89.899045][ T23] ? __pfx_request_firmware_work_func+0x10/0x10 [ 89.905479][ T23] ? rcu_is_watching+0x12/0xc0 [ 89.910463][ T23] process_one_work+0x9ba/0x1b20 [ 89.915537][ T23] ? __pfx_process_one_work+0x10/0x10 [ 89.921026][ T23] ? assign_work+0x1a0/0x250 [ 89.925650][ T23] worker_thread+0x6c8/0xf10 [ 89.930293][ T23] ? __pfx_worker_thread+0x10/0x10 [ 89.935501][ T23] kthread+0x3c5/0x780 [ 89.939623][ T23] ? __pfx_kthread+0x10/0x10 [ 89.944297][ T23] ? rcu_is_watching+0x12/0xc0 [ 89.949140][ T23] ? __pfx_kthread+0x10/0x10 [ 89.953796][ T23] ret_from_fork+0x74f/0xa30 [ 89.958442][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 89.963673][ T23] ? __switch_to+0x7a5/0x10c0 [ 89.968436][ T23] ? __pfx_kthread+0x10/0x10 [ 89.973136][ T23] ret_from_fork_asm+0x1a/0x30 [ 89.978006][ T23] [ 89.981100][ T23] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.988458][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.998117][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.008188][ T23] Workqueue: events request_firmware_work_func [ 90.014363][ T23] Call Trace: [ 90.017645][ T23] [ 90.020575][ T23] dump_stack_lvl+0x3d/0x1f0 [ 90.025176][ T23] vpanic+0x640/0x6f0 [ 90.029160][ T23] panic+0xca/0xd0 [ 90.032879][ T23] ? __pfx_panic+0x10/0x10 [ 90.037477][ T23] ? check_panic_on_warn+0x1f/0xb0 [ 90.042614][ T23] check_panic_on_warn+0xab/0xb0 [ 90.047584][ T23] __warn+0x108/0x3c0 [ 90.051595][ T23] __report_bug+0x2a0/0x520 [ 90.056125][ T23] ? __pfx___report_bug+0x10/0x10 [ 90.061170][ T23] ? usb_tx_block+0x56/0x2e0 [ 90.065779][ T23] ? debug_object_free+0x295/0x550 [ 90.070906][ T23] report_bug_entry+0xb2/0x220 [ 90.075697][ T23] ? usb_submit_urb+0x15a3/0x1970 [ 90.080784][ T23] handle_bug+0x18a/0x260 [ 90.085154][ T23] exc_invalid_op+0x17/0x50 [ 90.089669][ T23] asm_exc_invalid_op+0x1a/0x20 [ 90.094525][ T23] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 90.100185][ T23] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 97 f5 c5 fc 48 8d 3d 50 45 f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 79 f5 c5 fc 0f 1f [ 90.119808][ T23] RSP: 0018:ffffc9000018f8d0 EFLAGS: 00010293 [ 90.125893][ T23] RAX: 0000000000000000 RBX: ffff888114e55000 RCX: ffffffff8427b986 [ 90.133869][ T23] RDX: ffff8881022857c0 RSI: ffff888114e55000 RDI: ffffffff8aaa3c30 [ 90.142218][ T23] RBP: ffff888114e55000 R08: 0000000000000001 R09: 0000000000000000 [ 90.150381][ T23] R10: 0000000000000000 R11: ffff888102286268 R12: 00000000c0030300 [ 90.158537][ T23] R13: 0000000000000010 R14: ffff8881052ad000 R15: ffff8881052ac000 [ 90.166520][ T23] ? usb_tx_block+0x56/0x2e0 [ 90.171148][ T23] ? __netdev_alloc_skb+0x11/0x920 [ 90.176290][ T23] usb_tx_block+0x241/0x2e0 [ 90.180838][ T23] if_usb_prog_firmware+0x570/0x10c0 [ 90.186257][ T23] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 90.192187][ T23] ? __pfx__request_firmware+0x10/0x10 [ 90.197757][ T23] ? do_raw_spin_unlock+0x172/0x230 [ 90.202971][ T23] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.208900][ T23] ? __pfx_helper_firmware_cb+0x10/0x10 [ 90.214464][ T23] helper_firmware_cb+0x1f8/0x2e0 [ 90.219515][ T23] request_firmware_work_func+0x13c/0x250 [ 90.225355][ T23] ? __pfx_request_firmware_work_func+0x10/0x10 [ 90.231621][ T23] ? rcu_is_watching+0x12/0xc0 [ 90.236495][ T23] process_one_work+0x9ba/0x1b20 [ 90.241472][ T23] ? __pfx_process_one_work+0x10/0x10 [ 90.246869][ T23] ? assign_work+0x1a0/0x250 [ 90.251473][ T23] worker_thread+0x6c8/0xf10 [ 90.256180][ T23] ? __pfx_worker_thread+0x10/0x10 [ 90.261427][ T23] kthread+0x3c5/0x780 [ 90.265511][ T23] ? __pfx_kthread+0x10/0x10 [ 90.270116][ T23] ? rcu_is_watching+0x12/0xc0 [ 90.274896][ T23] ? __pfx_kthread+0x10/0x10 [ 90.279499][ T23] ret_from_fork+0x74f/0xa30 [ 90.284124][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 90.289350][ T23] ? __switch_to+0x7a5/0x10c0 [ 90.294144][ T23] ? __pfx_kthread+0x10/0x10 [ 90.298756][ T23] ret_from_fork_asm+0x1a/0x30 [ 90.303732][ T23] [ 90.307062][ T23] Kernel Offset: disabled [ 90.311470][ T23] Rebooting in 86400 seconds..