Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. executing program [ 152.312763][ T29] audit: type=1400 audit(1722316568.787:80): avc: denied { execmem } for pid=2643 comm="syz-executor860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.337997][ T29] audit: type=1400 audit(1722316568.787:81): avc: denied { read write } for pid=2644 comm="syz-executor860" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.362003][ T29] audit: type=1400 audit(1722316568.787:82): avc: denied { open } for pid=2644 comm="syz-executor860" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.385734][ T29] audit: type=1400 audit(1722316568.787:83): avc: denied { ioctl } for pid=2644 comm="syz-executor860" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.581516][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.761323][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 152.768337][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.777761][ T42] usb 1-1: config 237 has an invalid interface number: 143 but max is 0 [ 152.786239][ T42] usb 1-1: config 237 has no interface number 0 [ 152.792586][ T42] usb 1-1: config 237 interface 143 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 152.803649][ T42] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 152.814546][ T42] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 152.825456][ T42] usb 1-1: config 237 interface 143 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 152.836534][ T42] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 152.847430][ T42] usb 1-1: config 237 interface 143 altsetting 9 has an invalid endpoint descriptor of length 2, skipping [ 152.858750][ T42] usb 1-1: config 237 interface 143 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 152.872006][ T42] usb 1-1: config 237 interface 143 has no altsetting 0 [ 152.881207][ T42] usb 1-1: New USB device found, idVendor=14b2, idProduct=3300, bcdDevice=32.e0 [ 152.890264][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.898393][ T42] usb 1-1: Product: syz [ 152.902607][ T42] usb 1-1: Manufacturer: syz [ 152.907184][ T42] usb 1-1: SerialNumber: syz [ 153.120522][ T42] r8712u: register rtl8712_netdev_ops to netdev_ops [ 153.127279][ T42] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 153.821528][ T42] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 153.828155][ T42] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 153.835680][ T42] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 153.951720][ T29] audit: type=1400 audit(1722316570.427:84): avc: denied { read } for pid=2580 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 154.330116][ T2580] ------------[ cut here ]------------ [ 154.335734][ T2580] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 154.341988][ T2580] WARNING: CPU: 0 PID: 2580 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 154.351707][ T2580] Modules linked in: [ 154.355642][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: dhcpcd Not tainted 6.10.0-syzkaller-g1722389b0d86 #0 [ 154.365152][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.375260][ T2580] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 154.380815][ T2580] Code: 84 3c 02 00 00 e8 a5 eb fe fc 4c 89 ef e8 2d 21 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 17 a0 87 e8 96 dc c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 77 eb fe fc 49 81 c4 c0 05 00 00 e9 [ 154.400464][ T2580] RSP: 0018:ffffc9000171f678 EFLAGS: 00010282 [ 154.406579][ T2580] RAX: 0000000000000000 RBX: ffff888112320a00 RCX: ffffffff81194ce9 [ 154.414692][ T2580] RDX: ffff88810db6d700 RSI: ffffffff81194cf6 RDI: 0000000000000001 [ 154.422701][ T2580] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 154.430666][ T2580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 154.438672][ T2580] R13: ffff8881052b20a8 R14: ffff888111dbae00 R15: ffff888112320a7c [ 154.446690][ T2580] FS: 00007f48eac83740(0000) GS:ffff8881f6200000(0000) knlGS:0000000000000000 [ 154.455683][ T2580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.462320][ T2580] CR2: 000055f8664a4068 CR3: 000000010c3cc000 CR4: 00000000003506f0 [ 154.470285][ T2580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.478294][ T2580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.486315][ T2580] Call Trace: [ 154.489586][ T2580] [ 154.492544][ T2580] ? show_regs+0x8c/0xa0 [ 154.496821][ T2580] ? __warn+0xe5/0x3c0 [ 154.501059][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 154.506035][ T2580] ? report_bug+0x3c0/0x580 [ 154.510555][ T2580] ? handle_bug+0x3d/0x70 [ 154.514922][ T2580] ? exc_invalid_op+0x17/0x50 [ 154.519613][ T2580] ? asm_exc_invalid_op+0x1a/0x20 [ 154.524684][ T2580] ? __warn_printk+0x199/0x350 [ 154.529461][ T2580] ? __warn_printk+0x1a6/0x350 [ 154.534353][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 154.539309][ T2580] ? usb_submit_urb+0xe4a/0x1730 [ 154.544297][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.550209][ T2580] r8712_usb_write_mem+0x2e4/0x3f0 [ 154.555372][ T2580] rtl8712_dl_fw+0x7ab/0xfe0 [ 154.559979][ T2580] ? __pfx_rtl8712_dl_fw+0x10/0x10 [ 154.565136][ T2580] rtl871x_hal_init+0xb3/0x190 [ 154.569924][ T2580] netdev_open+0xea/0x800 [ 154.574375][ T2580] ? __pfx_netdev_open+0x10/0x10 [ 154.579326][ T2580] __dev_open+0x2d4/0x4e0 [ 154.583700][ T2580] ? __pfx___dev_open+0x10/0x10 [ 154.588568][ T2580] ? __local_bh_enable_ip+0xa4/0x120 [ 154.593961][ T2580] __dev_change_flags+0x561/0x720 [ 154.599098][ T2580] ? __pfx___dev_change_flags+0x10/0x10 [ 154.604685][ T2580] dev_change_flags+0x8f/0x160 [ 154.609470][ T2580] devinet_ioctl+0x127a/0x1f10 [ 154.614279][ T2580] ? __pfx_devinet_ioctl+0x10/0x10 [ 154.619419][ T2580] ? _copy_from_user+0x5d/0xf0 [ 154.624310][ T2580] inet_ioctl+0x3aa/0x3f0 [ 154.628652][ T2580] ? __pfx_inet_ioctl+0x10/0x10 [ 154.633538][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.639449][ T2580] sock_do_ioctl+0x116/0x280 [ 154.644083][ T2580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.649218][ T2580] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 154.655767][ T2580] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.662664][ T2580] ? __pfx_lock_release+0x10/0x10 [ 154.667685][ T2580] sock_ioctl+0x22e/0x6c0 [ 154.672046][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 154.676919][ T2580] ? selinux_file_ioctl+0x180/0x270 [ 154.682158][ T2580] ? selinux_file_ioctl+0xb4/0x270 [ 154.687288][ T2580] ? __pfx___sys_socket+0x10/0x10 [ 154.692349][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 154.697217][ T2580] __x64_sys_ioctl+0x193/0x220 [ 154.702020][ T2580] do_syscall_64+0xcd/0x250 [ 154.706548][ T2580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.712491][ T2580] RIP: 0033:0x7f48ead51d49 [ 154.716938][ T2580] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 154.736595][ T2580] RSP: 002b:00007fff9a80ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.745067][ T2580] RAX: ffffffffffffffda RBX: 00007f48eac836c0 RCX: 00007f48ead51d49 [ 154.753170][ T2580] RDX: 00007fff9a81b088 RSI: 0000000000008914 RDI: 0000000000000005 [ 154.761273][ T2580] RBP: 00007fff9a82b248 R08: 00007fff9a81b048 R09: 00007fff9a81aff8 [ 154.769253][ T2580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.777279][ T2580] R13: 00007fff9a81b088 R14: 0000000000000028 R15: 0000000000008914 [ 154.785286][ T2580] [ 154.788323][ T2580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.795589][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: dhcpcd Not tainted 6.10.0-syzkaller-g1722389b0d86 #0 [ 154.805046][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.815092][ T2580] Call Trace: [ 154.818362][ T2580] [ 154.821303][ T2580] dump_stack_lvl+0x3d/0x1f0 [ 154.825897][ T2580] panic+0x6f5/0x7a0 [ 154.829782][ T2580] ? __pfx_panic+0x10/0x10 [ 154.834186][ T2580] ? show_trace_log_lvl+0x363/0x500 [ 154.839387][ T2580] ? check_panic_on_warn+0x1f/0xb0 [ 154.844492][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 154.849428][ T2580] check_panic_on_warn+0xab/0xb0 [ 154.854362][ T2580] __warn+0xf1/0x3c0 [ 154.858278][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 154.863218][ T2580] report_bug+0x3c0/0x580 [ 154.867547][ T2580] handle_bug+0x3d/0x70 [ 154.871691][ T2580] exc_invalid_op+0x17/0x50 [ 154.876181][ T2580] asm_exc_invalid_op+0x1a/0x20 [ 154.881024][ T2580] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 154.886567][ T2580] Code: 84 3c 02 00 00 e8 a5 eb fe fc 4c 89 ef e8 2d 21 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 17 a0 87 e8 96 dc c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 77 eb fe fc 49 81 c4 c0 05 00 00 e9 [ 154.906223][ T2580] RSP: 0018:ffffc9000171f678 EFLAGS: 00010282 [ 154.912281][ T2580] RAX: 0000000000000000 RBX: ffff888112320a00 RCX: ffffffff81194ce9 [ 154.920238][ T2580] RDX: ffff88810db6d700 RSI: ffffffff81194cf6 RDI: 0000000000000001 [ 154.928200][ T2580] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 154.936162][ T2580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 154.944128][ T2580] R13: ffff8881052b20a8 R14: ffff888111dbae00 R15: ffff888112320a7c [ 154.952188][ T2580] ? __warn_printk+0x199/0x350 [ 154.956949][ T2580] ? __warn_printk+0x1a6/0x350 [ 154.961706][ T2580] ? usb_submit_urb+0xe4a/0x1730 [ 154.966648][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.972531][ T2580] r8712_usb_write_mem+0x2e4/0x3f0 [ 154.977634][ T2580] rtl8712_dl_fw+0x7ab/0xfe0 [ 154.982218][ T2580] ? __pfx_rtl8712_dl_fw+0x10/0x10 [ 154.987442][ T2580] rtl871x_hal_init+0xb3/0x190 [ 154.992208][ T2580] netdev_open+0xea/0x800 [ 154.996525][ T2580] ? __pfx_netdev_open+0x10/0x10 [ 155.001451][ T2580] __dev_open+0x2d4/0x4e0 [ 155.005773][ T2580] ? __pfx___dev_open+0x10/0x10 [ 155.010640][ T2580] ? __local_bh_enable_ip+0xa4/0x120 [ 155.015924][ T2580] __dev_change_flags+0x561/0x720 [ 155.020956][ T2580] ? __pfx___dev_change_flags+0x10/0x10 [ 155.026500][ T2580] dev_change_flags+0x8f/0x160 [ 155.031270][ T2580] devinet_ioctl+0x127a/0x1f10 [ 155.036028][ T2580] ? __pfx_devinet_ioctl+0x10/0x10 [ 155.041135][ T2580] ? _copy_from_user+0x5d/0xf0 [ 155.045918][ T2580] inet_ioctl+0x3aa/0x3f0 [ 155.050264][ T2580] ? __pfx_inet_ioctl+0x10/0x10 [ 155.055108][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.061014][ T2580] sock_do_ioctl+0x116/0x280 [ 155.065601][ T2580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 155.070712][ T2580] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 155.077242][ T2580] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.084118][ T2580] ? __pfx_lock_release+0x10/0x10 [ 155.089139][ T2580] sock_ioctl+0x22e/0x6c0 [ 155.093464][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 155.098308][ T2580] ? selinux_file_ioctl+0x180/0x270 [ 155.103500][ T2580] ? selinux_file_ioctl+0xb4/0x270 [ 155.108605][ T2580] ? __pfx___sys_socket+0x10/0x10 [ 155.113710][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 155.118573][ T2580] __x64_sys_ioctl+0x193/0x220 [ 155.123331][ T2580] do_syscall_64+0xcd/0x250 [ 155.127861][ T2580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.133771][ T2580] RIP: 0033:0x7f48ead51d49 [ 155.138177][ T2580] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 155.157777][ T2580] RSP: 002b:00007fff9a80ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.166188][ T2580] RAX: ffffffffffffffda RBX: 00007f48eac836c0 RCX: 00007f48ead51d49 [ 155.174152][ T2580] RDX: 00007fff9a81b088 RSI: 0000000000008914 RDI: 0000000000000005 [ 155.182121][ T2580] RBP: 00007fff9a82b248 R08: 00007fff9a81b048 R09: 00007fff9a81aff8 [ 155.190081][ T2580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.198041][ T2580] R13: 00007fff9a81b088 R14: 0000000000000028 R15: 0000000000008914 [ 155.206019][ T2580] [ 155.209285][ T2580] Kernel Offset: disabled [ 155.213638][ T2580] Rebooting in 86400 seconds..