syzkaller login: [ 24.626229][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 24.626252][ T29] audit: type=1400 audit(1732428122.498:73): avc: denied { read } for pid=2928 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=402 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.655908][ T29] audit: type=1400 audit(1732428122.498:74): avc: denied { open } for pid=2928 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=402 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.882864][ T29] audit: type=1400 audit(1732428124.748:75): avc: denied { transition } for pid=2946 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.904946][ T29] audit: type=1400 audit(1732428124.748:76): avc: denied { noatsecure } for pid=2946 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.924105][ T29] audit: type=1400 audit(1732428124.748:77): avc: denied { write } for pid=2946 comm="sh" path="pipe:[1394]" dev="pipefs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.946307][ T29] audit: type=1400 audit(1732428124.748:78): avc: denied { rlimitinh } for pid=2946 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.966247][ T29] audit: type=1400 audit(1732428124.748:79): avc: denied { siginh } for pid=2946 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.677351][ T2947] sshd (2947) used greatest stack depth: 23712 bytes left [ 34.315090][ T2951] sshd (2951) used greatest stack depth: 23152 bytes left Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. executing program [ 41.061493][ T29] audit: type=1400 audit(1732428138.928:80): avc: denied { execmem } for pid=2962 comm="syz-executor761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.083859][ T29] audit: type=1400 audit(1732428138.938:81): avc: denied { read write } for pid=2963 comm="syz-executor761" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.107760][ T29] audit: type=1400 audit(1732428138.938:82): avc: denied { open } for pid=2963 comm="syz-executor761" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.131489][ T29] audit: type=1400 audit(1732428138.938:83): avc: denied { ioctl } for pid=2963 comm="syz-executor761" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.303964][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.466500][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 41.475681][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.487385][ T24] usb 1-1: config 0 descriptor?? [ 42.095162][ T24] ------------[ cut here ]------------ [ 42.100914][ T24] WARNING: CPU: 1 PID: 24 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.112631][ T24] Modules linked in: [ 42.116669][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 42.127442][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.137807][ T24] Workqueue: usb_hub_wq hub_event [ 42.142861][ T24] RIP: 0010:ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.149462][ T24] Code: 77 fc ff ff e8 ec ee a9 fd be 08 00 00 00 bd f3 ff ff ff 48 c7 c7 e0 cd 80 87 e8 26 42 fe ff e9 5c fd ff ff e8 cc ee a9 fd 90 <0f> 0b 90 bd ea ff ff ff e9 49 fd ff ff e8 59 78 02 fe e9 e7 fb ff [ 42.169206][ T24] RSP: 0018:ffffc9000019ef48 EFLAGS: 00010293 [ 42.175383][ T24] RAX: 0000000000000000 RBX: ffff888122290e20 RCX: ffffffff83ac02ba [ 42.183401][ T24] RDX: ffff888102288000 RSI: ffffffff83ac0444 RDI: 0000000000000005 [ 42.191472][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000000c [ 42.199548][ T24] R10: 0000000000000000 R11: ffffffff81ae4b84 R12: ffffc9000019f058 [ 42.207614][ T24] R13: 1ffff92000033deb R14: ffff888122290e50 R15: ffffc9000019f05c [ 42.215663][ T24] FS: 0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000 [ 42.224693][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.231319][ T24] CR2: 00005557ac287160 CR3: 00000001178f8000 CR4: 00000000003506f0 [ 42.239393][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.247472][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.255550][ T24] Call Trace: [ 42.258870][ T24] [ 42.261821][ T24] ? __warn+0xea/0x3d0 [ 42.266016][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.271985][ T24] ? report_bug+0x3c0/0x580 [ 42.276609][ T24] ? handle_bug+0x54/0xa0 [ 42.280993][ T24] ? exc_invalid_op+0x17/0x50 [ 42.285778][ T24] ? asm_exc_invalid_op+0x1a/0x20 [ 42.290888][ T24] ? kasan_save_track+0x14/0x30 executing program [ 42.295866][ T24] ? ath6kl_bmi_get_target_info+0x36a/0x5b0 [ 42.301837][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 42.307887][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.313918][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 42.320100][ T24] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 42.326510][ T24] ath6kl_core_init+0x1a0/0x11a0 [ 42.331505][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 42.337075][ T24] ? __pfx_ath6kl_core_init+0x10/0x10 [ 42.342501][ T24] ? ath6kl_core_create+0x84f/0xad0 [ 42.347799][ T24] ath6kl_usb_probe+0xcd2/0x1450 [ 42.352811][ T24] usb_probe_interface+0x300/0x9c0 [ 42.358014][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 42.363788][ T24] really_probe+0x23e/0xa90 [ 42.368378][ T24] __driver_probe_device+0x1de/0x440 [ 42.373771][ T24] driver_probe_device+0x4c/0x1b0 [ 42.378851][ T24] __device_attach_driver+0x1df/0x310 [ 42.384305][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 42.390245][ T24] bus_for_each_drv+0x157/0x1e0 [ 42.395205][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 42.400637][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 42.405932][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 42.411796][ T24] __device_attach+0x1e8/0x4b0 [ 42.416666][ T24] ? __pfx___device_attach+0x10/0x10 [ 42.422000][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 42.427285][ T24] bus_probe_device+0x17f/0x1c0 [ 42.432183][ T24] device_add+0x114b/0x1a70 [ 42.436899][ T24] ? __pfx_device_add+0x10/0x10 [ 42.441806][ T24] ? mark_held_locks+0x9f/0xe0 [ 42.446687][ T24] usb_set_configuration+0x10cb/0x1c50 [ 42.452213][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 42.458401][ T24] usb_generic_driver_probe+0xb1/0x110 [ 42.463962][ T24] usb_probe_device+0xec/0x3e0 [ 42.468784][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 42.474242][ T24] really_probe+0x23e/0xa90 [ 42.478803][ T24] __driver_probe_device+0x1de/0x440 [ 42.484177][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 42.489729][ T24] driver_probe_device+0x4c/0x1b0 [ 42.494853][ T24] __device_attach_driver+0x1df/0x310 [ 42.500302][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 42.506297][ T24] bus_for_each_drv+0x157/0x1e0 [ 42.511221][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 42.516712][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 42.521967][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 42.527870][ T24] __device_attach+0x1e8/0x4b0 [ 42.533224][ T24] ? __pfx___device_attach+0x10/0x10 [ 42.538626][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 42.543902][ T24] bus_probe_device+0x17f/0x1c0 [ 42.548874][ T24] device_add+0x114b/0x1a70 [ 42.553406][ T24] ? __pfx_device_add+0x10/0x10 [ 42.558348][ T24] ? usb_detect_static_quirks+0x335/0x3e0 [ 42.564191][ T24] usb_new_device+0xd90/0x1a10 [ 42.569016][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 42.574313][ T24] hub_event+0x2e58/0x4f40 [ 42.578799][ T24] ? __pfx_hub_event+0x10/0x10 [ 42.583604][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 42.589345][ T24] ? rcu_is_watching+0x12/0xc0 [ 42.594179][ T24] ? trace_lock_acquire+0x14a/0x1d0 [ 42.599401][ T24] ? process_one_work+0x921/0x1ba0 [ 42.604633][ T24] ? lock_acquire+0x2f/0xb0 [ 42.609196][ T24] ? process_one_work+0x921/0x1ba0 [ 42.614420][ T24] process_one_work+0x9c5/0x1ba0 [ 42.619437][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 42.624830][ T24] ? __pfx_process_one_work+0x10/0x10 [ 42.630283][ T24] ? assign_work+0x1a0/0x250 [ 42.634970][ T24] worker_thread+0x6c8/0xf00 [ 42.639658][ T24] ? __pfx_worker_thread+0x10/0x10 [ 42.644973][ T24] kthread+0x2c1/0x3a0 [ 42.649093][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 42.654379][ T24] ? __pfx_kthread+0x10/0x10 [ 42.659014][ T24] ret_from_fork+0x45/0x80 [ 42.663460][ T24] ? __pfx_kthread+0x10/0x10 [ 42.668167][ T24] ret_from_fork_asm+0x1a/0x30 [ 42.673005][ T24] [ 42.676096][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 42.683430][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 42.694032][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.704097][ T24] Workqueue: usb_hub_wq hub_event [ 42.709142][ T24] Call Trace: [ 42.712429][ T24] [ 42.715368][ T24] dump_stack_lvl+0x3d/0x1f0 [ 42.720005][ T24] panic+0x71d/0x800 [ 42.723946][ T24] ? __pfx_panic+0x10/0x10 [ 42.728385][ T24] ? show_trace_log_lvl+0x29d/0x3d0 [ 42.734165][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 42.739306][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.745228][ T24] check_panic_on_warn+0xab/0xb0 [ 42.750196][ T24] __warn+0xf6/0x3d0 [ 42.754116][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.760036][ T24] report_bug+0x3c0/0x580 [ 42.764416][ T24] handle_bug+0x54/0xa0 [ 42.768605][ T24] exc_invalid_op+0x17/0x50 [ 42.773130][ T24] asm_exc_invalid_op+0x1a/0x20 [ 42.778014][ T24] RIP: 0010:ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 42.784548][ T24] Code: 77 fc ff ff e8 ec ee a9 fd be 08 00 00 00 bd f3 ff ff ff 48 c7 c7 e0 cd 80 87 e8 26 42 fe ff e9 5c fd ff ff e8 cc ee a9 fd 90 <0f> 0b 90 bd ea ff ff ff e9 49 fd ff ff e8 59 78 02 fe e9 e7 fb ff [ 42.804272][ T24] RSP: 0018:ffffc9000019ef48 EFLAGS: 00010293 [ 42.810354][ T24] RAX: 0000000000000000 RBX: ffff888122290e20 RCX: ffffffff83ac02ba [ 42.818344][ T24] RDX: ffff888102288000 RSI: ffffffff83ac0444 RDI: 0000000000000005 [ 42.826345][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000000c [ 42.834332][ T24] R10: 0000000000000000 R11: ffffffff81ae4b84 R12: ffffc9000019f058 [ 42.842317][ T24] R13: 1ffff92000033deb R14: ffff888122290e50 R15: ffffc9000019f05c [ 42.850323][ T24] ? kasan_save_track+0x14/0x30 [ 42.855208][ T24] ? ath6kl_bmi_get_target_info+0x36a/0x5b0 [ 42.861123][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 42.867045][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 42.872985][ T24] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 42.879259][ T24] ath6kl_core_init+0x1a0/0x11a0 [ 42.884217][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 42.889704][ T24] ? __pfx_ath6kl_core_init+0x10/0x10 [ 42.895095][ T24] ? ath6kl_core_create+0x84f/0xad0 [ 42.900314][ T24] ath6kl_usb_probe+0xcd2/0x1450 [ 42.905299][ T24] usb_probe_interface+0x300/0x9c0 [ 42.910448][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 42.916111][ T24] really_probe+0x23e/0xa90 [ 42.920643][ T24] __driver_probe_device+0x1de/0x440 [ 42.925952][ T24] driver_probe_device+0x4c/0x1b0 [ 42.930998][ T24] __device_attach_driver+0x1df/0x310 [ 42.936399][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 42.942312][ T24] bus_for_each_drv+0x157/0x1e0 [ 42.947197][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 42.952633][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 42.957861][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 42.963712][ T24] __device_attach+0x1e8/0x4b0 [ 42.968537][ T24] ? __pfx___device_attach+0x10/0x10 [ 42.973859][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 42.979085][ T24] bus_probe_device+0x17f/0x1c0 [ 42.983974][ T24] device_add+0x114b/0x1a70 [ 42.988562][ T24] ? __pfx_device_add+0x10/0x10 [ 42.993434][ T24] ? mark_held_locks+0x9f/0xe0 [ 42.998233][ T24] usb_set_configuration+0x10cb/0x1c50 [ 43.003738][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 43.009837][ T24] usb_generic_driver_probe+0xb1/0x110 [ 43.015346][ T24] usb_probe_device+0xec/0x3e0 [ 43.020124][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 43.025588][ T24] really_probe+0x23e/0xa90 [ 43.030123][ T24] __driver_probe_device+0x1de/0x440 [ 43.035431][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 43.040987][ T24] driver_probe_device+0x4c/0x1b0 [ 43.046082][ T24] __device_attach_driver+0x1df/0x310 [ 43.051488][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 43.057434][ T24] bus_for_each_drv+0x157/0x1e0 [ 43.062323][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 43.067731][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 43.072960][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.078795][ T24] __device_attach+0x1e8/0x4b0 [ 43.083584][ T24] ? __pfx___device_attach+0x10/0x10 [ 43.088925][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 43.094148][ T24] bus_probe_device+0x17f/0x1c0 [ 43.099021][ T24] device_add+0x114b/0x1a70 [ 43.103565][ T24] ? __pfx_device_add+0x10/0x10 [ 43.108477][ T24] ? usb_detect_static_quirks+0x335/0x3e0 [ 43.114240][ T24] usb_new_device+0xd90/0x1a10 [ 43.119045][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 43.124294][ T24] hub_event+0x2e58/0x4f40 [ 43.128767][ T24] ? __pfx_hub_event+0x10/0x10 [ 43.133565][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 43.139244][ T24] ? rcu_is_watching+0x12/0xc0 [ 43.144030][ T24] ? trace_lock_acquire+0x14a/0x1d0 [ 43.149251][ T24] ? process_one_work+0x921/0x1ba0 [ 43.154392][ T24] ? lock_acquire+0x2f/0xb0 [ 43.158921][ T24] ? process_one_work+0x921/0x1ba0 [ 43.164064][ T24] process_one_work+0x9c5/0x1ba0 [ 43.169044][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 43.174363][ T24] ? __pfx_process_one_work+0x10/0x10 [ 43.179784][ T24] ? assign_work+0x1a0/0x250 [ 43.184402][ T24] worker_thread+0x6c8/0xf00 [ 43.189032][ T24] ? __pfx_worker_thread+0x10/0x10 [ 43.194188][ T24] kthread+0x2c1/0x3a0 [ 43.198274][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 43.203489][ T24] ? __pfx_kthread+0x10/0x10 [ 43.208115][ T24] ret_from_fork+0x45/0x80 [ 43.212562][ T24] ? __pfx_kthread+0x10/0x10 [ 43.217182][ T24] ret_from_fork_asm+0x1a/0x30 [ 43.221979][ T24] [ 43.225367][ T24] Kernel Offset: disabled [ 43.229732][ T24] Rebooting in 86400 seconds..