syzkaller login: [ 20.811807][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 20.811826][ T29] audit: type=1400 audit(1731772273.743:73): avc: denied { read } for pid=2926 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=400 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.841469][ T29] audit: type=1400 audit(1731772273.743:74): avc: denied { open } for pid=2926 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=400 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.379199][ T29] audit: type=1400 audit(1731772279.313:75): avc: denied { transition } for pid=2944 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.401186][ T29] audit: type=1400 audit(1731772279.313:76): avc: denied { noatsecure } for pid=2944 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.420287][ T29] audit: type=1400 audit(1731772279.313:77): avc: denied { write } for pid=2944 comm="sh" path="pipe:[2315]" dev="pipefs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.442964][ T29] audit: type=1400 audit(1731772279.313:78): avc: denied { rlimitinh } for pid=2944 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.461738][ T29] audit: type=1400 audit(1731772279.313:79): avc: denied { siginh } for pid=2944 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.267254][ T2954] sshd (2954) used greatest stack depth: 23264 bytes left Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. executing program [ 37.994287][ T29] audit: type=1400 audit(1731772290.923:80): avc: denied { execmem } for pid=2960 comm="syz-executor254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.014020][ T29] audit: type=1400 audit(1731772290.933:81): avc: denied { read write } for pid=2961 comm="syz-executor254" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.038080][ T29] audit: type=1400 audit(1731772290.933:82): avc: denied { open } for pid=2961 comm="syz-executor254" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.061778][ T29] audit: type=1400 audit(1731772290.933:83): avc: denied { ioctl } for pid=2961 comm="syz-executor254" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.234921][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.396972][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 38.406343][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.418013][ T24] usb 1-1: config 0 descriptor?? [ 39.025795][ T24] ------------[ cut here ]------------ [ 39.031362][ T24] WARNING: CPU: 1 PID: 24 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.043004][ T24] Modules linked in: [ 39.047010][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 39.057646][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 39.067768][ T24] Workqueue: usb_hub_wq hub_event [ 39.072792][ T24] RIP: 0010:ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.079363][ T24] Code: 77 fc ff ff e8 ec ee a9 fd be 08 00 00 00 bd f3 ff ff ff 48 c7 c7 e0 cd 80 87 e8 26 42 fe ff e9 5c fd ff ff e8 cc ee a9 fd 90 <0f> 0b 90 bd ea ff ff ff e9 49 fd ff ff e8 59 78 02 fe e9 e7 fb ff [ 39.099069][ T24] RSP: 0018:ffffc9000019ef48 EFLAGS: 00010293 [ 39.105201][ T24] RAX: 0000000000000000 RBX: ffff888118800e20 RCX: ffffffff83ac02ba [ 39.113168][ T24] RDX: ffff888102288000 RSI: ffffffff83ac0444 RDI: 0000000000000005 [ 39.121191][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000000c [ 39.129221][ T24] R10: 0000000000000000 R11: ffffffff81ae4b84 R12: ffffc9000019f058 [ 39.137237][ T24] R13: 1ffff92000033deb R14: ffff888118800e50 R15: ffffc9000019f05c [ 39.145255][ T24] FS: 0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000 [ 39.154186][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.160831][ T24] CR2: 00005623e331e850 CR3: 00000001233ea000 CR4: 00000000003506f0 [ 39.168850][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.176861][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.184873][ T24] Call Trace: [ 39.188149][ T24] [ 39.191073][ T24] ? __warn+0xea/0x3d0 [ 39.195196][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.201123][ T24] ? report_bug+0x3c0/0x580 [ 39.205680][ T24] ? handle_bug+0x54/0xa0 [ 39.210032][ T24] ? exc_invalid_op+0x17/0x50 [ 39.215227][ T24] ? asm_exc_invalid_op+0x1a/0x20 [ 39.220279][ T24] ? kasan_save_track+0x14/0x30 executing program [ 39.225177][ T24] ? ath6kl_bmi_get_target_info+0x36a/0x5b0 [ 39.231109][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 39.237081][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.243347][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 39.249368][ T24] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 39.255703][ T24] ath6kl_core_init+0x1a0/0x11a0 [ 39.260674][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 39.266219][ T24] ? __pfx_ath6kl_core_init+0x10/0x10 [ 39.271616][ T24] ? ath6kl_core_create+0x84f/0xad0 [ 39.276876][ T24] ath6kl_usb_probe+0xcd2/0x1450 [ 39.281844][ T24] usb_probe_interface+0x300/0x9c0 [ 39.287020][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 39.292675][ T24] really_probe+0x23e/0xa90 [ 39.297227][ T24] __driver_probe_device+0x1de/0x440 [ 39.302542][ T24] driver_probe_device+0x4c/0x1b0 [ 39.307636][ T24] __device_attach_driver+0x1df/0x310 [ 39.313037][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 39.319007][ T24] bus_for_each_drv+0x157/0x1e0 [ 39.323888][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 39.329338][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 39.334564][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 39.340432][ T24] __device_attach+0x1e8/0x4b0 [ 39.345244][ T24] ? __pfx___device_attach+0x10/0x10 [ 39.350530][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 39.355778][ T24] bus_probe_device+0x17f/0x1c0 [ 39.360648][ T24] device_add+0x114b/0x1a70 [ 39.365211][ T24] ? __pfx_device_add+0x10/0x10 [ 39.370087][ T24] ? mark_held_locks+0x9f/0xe0 [ 39.374924][ T24] usb_set_configuration+0x10cb/0x1c50 [ 39.380417][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 39.386537][ T24] usb_generic_driver_probe+0xb1/0x110 [ 39.392020][ T24] usb_probe_device+0xec/0x3e0 [ 39.396834][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 39.402223][ T24] really_probe+0x23e/0xa90 [ 39.406776][ T24] __driver_probe_device+0x1de/0x440 [ 39.412080][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 39.417585][ T24] driver_probe_device+0x4c/0x1b0 [ 39.422633][ T24] __device_attach_driver+0x1df/0x310 [ 39.428060][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 39.433973][ T24] bus_for_each_drv+0x157/0x1e0 [ 39.438891][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 39.444289][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 39.449533][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 39.455393][ T24] __device_attach+0x1e8/0x4b0 [ 39.460155][ T24] ? __pfx___device_attach+0x10/0x10 [ 39.465505][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 39.470728][ T24] bus_probe_device+0x17f/0x1c0 [ 39.475625][ T24] device_add+0x114b/0x1a70 [ 39.480171][ T24] ? __pfx_device_add+0x10/0x10 [ 39.485079][ T24] ? usb_detect_static_quirks+0x335/0x3e0 [ 39.490828][ T24] usb_new_device+0xd90/0x1a10 [ 39.495650][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 39.500882][ T24] hub_event+0x2e58/0x4f40 [ 39.505386][ T24] ? __pfx_hub_event+0x10/0x10 [ 39.510167][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 39.515854][ T24] ? rcu_is_watching+0x12/0xc0 [ 39.520632][ T24] ? trace_lock_acquire+0x14a/0x1d0 [ 39.525872][ T24] ? process_one_work+0x921/0x1ba0 [ 39.531023][ T24] ? lock_acquire+0x2f/0xb0 [ 39.535596][ T24] ? process_one_work+0x921/0x1ba0 [ 39.540734][ T24] process_one_work+0x9c5/0x1ba0 [ 39.545747][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 39.551059][ T24] ? __pfx_process_one_work+0x10/0x10 [ 39.556490][ T24] ? assign_work+0x1a0/0x250 [ 39.561102][ T24] worker_thread+0x6c8/0xf00 [ 39.565755][ T24] ? __pfx_worker_thread+0x10/0x10 [ 39.570887][ T24] kthread+0x2c1/0x3a0 [ 39.575015][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.580236][ T24] ? __pfx_kthread+0x10/0x10 [ 39.584869][ T24] ret_from_fork+0x45/0x80 [ 39.589312][ T24] ? __pfx_kthread+0x10/0x10 [ 39.593894][ T24] ret_from_fork_asm+0x1a/0x30 [ 39.598727][ T24] [ 39.601754][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 39.609022][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.12.0-rc6-syzkaller-00153-g237d4e0f4113 #0 [ 39.619609][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 39.629651][ T24] Workqueue: usb_hub_wq hub_event [ 39.634676][ T24] Call Trace: [ 39.637957][ T24] [ 39.640891][ T24] dump_stack_lvl+0x3d/0x1f0 [ 39.645477][ T24] panic+0x71d/0x800 [ 39.649364][ T24] ? __pfx_panic+0x10/0x10 [ 39.653770][ T24] ? show_trace_log_lvl+0x29d/0x3d0 [ 39.658975][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 39.664079][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.669976][ T24] check_panic_on_warn+0xab/0xb0 [ 39.674911][ T24] __warn+0xf6/0x3d0 [ 39.678807][ T24] ? ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.684704][ T24] report_bug+0x3c0/0x580 [ 39.689032][ T24] handle_bug+0x54/0xa0 [ 39.693174][ T24] exc_invalid_op+0x17/0x50 [ 39.697665][ T24] asm_exc_invalid_op+0x1a/0x20 [ 39.702511][ T24] RIP: 0010:ath6kl_bmi_get_target_info+0x4f5/0x5b0 [ 39.709005][ T24] Code: 77 fc ff ff e8 ec ee a9 fd be 08 00 00 00 bd f3 ff ff ff 48 c7 c7 e0 cd 80 87 e8 26 42 fe ff e9 5c fd ff ff e8 cc ee a9 fd 90 <0f> 0b 90 bd ea ff ff ff e9 49 fd ff ff e8 59 78 02 fe e9 e7 fb ff [ 39.728695][ T24] RSP: 0018:ffffc9000019ef48 EFLAGS: 00010293 [ 39.734755][ T24] RAX: 0000000000000000 RBX: ffff888118800e20 RCX: ffffffff83ac02ba [ 39.742730][ T24] RDX: ffff888102288000 RSI: ffffffff83ac0444 RDI: 0000000000000005 [ 39.750699][ T24] RBP: 0000000000000000 R08: 0000000000000005 R09: 000000000000000c [ 39.758667][ T24] R10: 0000000000000000 R11: ffffffff81ae4b84 R12: ffffc9000019f058 [ 39.766630][ T24] R13: 1ffff92000033deb R14: ffff888118800e50 R15: ffffc9000019f05c [ 39.774601][ T24] ? kasan_save_track+0x14/0x30 [ 39.779457][ T24] ? ath6kl_bmi_get_target_info+0x36a/0x5b0 [ 39.785348][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 39.791238][ T24] ? ath6kl_bmi_get_target_info+0x4f4/0x5b0 [ 39.797125][ T24] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 39.803364][ T24] ath6kl_core_init+0x1a0/0x11a0 [ 39.808317][ T24] ? lockdep_init_map_type+0x16d/0x7d0 [ 39.813802][ T24] ? __pfx_ath6kl_core_init+0x10/0x10 [ 39.819171][ T24] ? ath6kl_core_create+0x84f/0xad0 [ 39.824367][ T24] ath6kl_usb_probe+0xcd2/0x1450 [ 39.829305][ T24] usb_probe_interface+0x300/0x9c0 [ 39.834410][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 39.840037][ T24] really_probe+0x23e/0xa90 [ 39.844554][ T24] __driver_probe_device+0x1de/0x440 [ 39.849844][ T24] driver_probe_device+0x4c/0x1b0 [ 39.854884][ T24] __device_attach_driver+0x1df/0x310 [ 39.860271][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 39.866166][ T24] bus_for_each_drv+0x157/0x1e0 [ 39.871026][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 39.876411][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 39.881642][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 39.887453][ T24] __device_attach+0x1e8/0x4b0 [ 39.892220][ T24] ? __pfx___device_attach+0x10/0x10 [ 39.897510][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 39.902708][ T24] bus_probe_device+0x17f/0x1c0 [ 39.907557][ T24] device_add+0x114b/0x1a70 [ 39.912065][ T24] ? __pfx_device_add+0x10/0x10 [ 39.916909][ T24] ? mark_held_locks+0x9f/0xe0 [ 39.921676][ T24] usb_set_configuration+0x10cb/0x1c50 [ 39.927161][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 39.933223][ T24] usb_generic_driver_probe+0xb1/0x110 [ 39.938678][ T24] usb_probe_device+0xec/0x3e0 [ 39.943434][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 39.948796][ T24] really_probe+0x23e/0xa90 [ 39.953293][ T24] __driver_probe_device+0x1de/0x440 [ 39.958571][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 39.964025][ T24] driver_probe_device+0x4c/0x1b0 [ 39.969050][ T24] __device_attach_driver+0x1df/0x310 [ 39.974438][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 39.980341][ T24] bus_for_each_drv+0x157/0x1e0 [ 39.985216][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 39.990589][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 39.995787][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 40.001594][ T24] __device_attach+0x1e8/0x4b0 [ 40.006355][ T24] ? __pfx___device_attach+0x10/0x10 [ 40.011649][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 40.016844][ T24] bus_probe_device+0x17f/0x1c0 [ 40.021714][ T24] device_add+0x114b/0x1a70 [ 40.026233][ T24] ? __pfx_device_add+0x10/0x10 [ 40.031086][ T24] ? usb_detect_static_quirks+0x335/0x3e0 [ 40.036829][ T24] usb_new_device+0xd90/0x1a10 [ 40.041607][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 40.046805][ T24] hub_event+0x2e58/0x4f40 [ 40.051229][ T24] ? __pfx_hub_event+0x10/0x10 [ 40.055992][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 40.061626][ T24] ? rcu_is_watching+0x12/0xc0 [ 40.066382][ T24] ? trace_lock_acquire+0x14a/0x1d0 [ 40.071571][ T24] ? process_one_work+0x921/0x1ba0 [ 40.076695][ T24] ? lock_acquire+0x2f/0xb0 [ 40.081197][ T24] ? process_one_work+0x921/0x1ba0 [ 40.086308][ T24] process_one_work+0x9c5/0x1ba0 [ 40.091247][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 40.096527][ T24] ? __pfx_process_one_work+0x10/0x10 [ 40.101906][ T24] ? assign_work+0x1a0/0x250 [ 40.106497][ T24] worker_thread+0x6c8/0xf00 [ 40.111116][ T24] ? __pfx_worker_thread+0x10/0x10 [ 40.116226][ T24] kthread+0x2c1/0x3a0 [ 40.120282][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 40.125488][ T24] ? __pfx_kthread+0x10/0x10 [ 40.130066][ T24] ret_from_fork+0x45/0x80 [ 40.134478][ T24] ? __pfx_kthread+0x10/0x10 [ 40.139056][ T24] ret_from_fork_asm+0x1a/0x30 [ 40.143823][ T24] [ 40.147062][ T24] Kernel Offset: disabled [ 40.151408][ T24] Rebooting in 86400 seconds..