Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. 2025/12/14 21:18:31 parsed 1 programs [ 48.756912][ T29] audit: type=1400 audit(1765747111.552:62): avc: denied { node_bind } for pid=2969 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.778106][ T29] audit: type=1400 audit(1765747111.552:63): avc: denied { module_request } for pid=2969 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.654504][ T29] audit: type=1400 audit(1765747114.452:64): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.678560][ T29] audit: type=1400 audit(1765747114.472:65): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.683321][ T2979] cgroup: Unknown subsys name 'net' [ 51.708141][ T29] audit: type=1400 audit(1765747114.502:66): avc: denied { unmount } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.853437][ T2979] cgroup: Unknown subsys name 'cpuset' [ 51.862876][ T2979] cgroup: Unknown subsys name 'rlimit' [ 52.063862][ T29] audit: type=1400 audit(1765747114.862:67): avc: denied { setattr } for pid=2979 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.087307][ T29] audit: type=1400 audit(1765747114.862:68): avc: denied { create } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.107883][ T29] audit: type=1400 audit(1765747114.862:69): avc: denied { write } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.128338][ T29] audit: type=1400 audit(1765747114.862:70): avc: denied { read } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.149304][ T29] audit: type=1400 audit(1765747114.912:71): avc: denied { sys_module } for pid=2979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.246615][ T2983] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.293505][ T2979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.924386][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 53.924407][ T29] audit: type=1400 audit(1765747116.722:80): avc: denied { execmem } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.033996][ T29] audit: type=1400 audit(1765747116.832:81): avc: denied { read } for pid=2986 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.065482][ T29] audit: type=1400 audit(1765747116.832:82): avc: denied { open } for pid=2986 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.088946][ T29] audit: type=1400 audit(1765747116.832:83): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.110479][ T29] audit: type=1400 audit(1765747116.862:84): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.EbRz2h/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.134809][ T29] audit: type=1400 audit(1765747116.862:85): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.156923][ T29] audit: type=1400 audit(1765747116.862:86): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.EbRz2h/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.182150][ T29] audit: type=1400 audit(1765747116.862:87): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.204005][ T29] audit: type=1400 audit(1765747116.862:88): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.EbRz2h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.230624][ T29] audit: type=1400 audit(1765747116.862:89): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.EbRz2h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 54.265072][ T2986] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.395561][ T3032] syz-executor (3032) used greatest stack depth: 22792 bytes left 2025/12/14 21:18:54 executed programs: 0 2025/12/14 21:19:08 executed programs: 2 [ 85.909235][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 85.909258][ T29] audit: type=1400 audit(1765747148.702:103): avc: denied { read write } for pid=3963 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.941314][ T29] audit: type=1400 audit(1765747148.702:104): avc: denied { open } for pid=3963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.964936][ T29] audit: type=1400 audit(1765747148.702:105): avc: denied { ioctl } for pid=3963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.181214][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.330955][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 86.338588][ T10] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 86.347157][ T10] usb 4-1: config 231 has no interface number 0 [ 86.353537][ T10] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 86.363701][ T10] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 86.373885][ T10] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.387157][ T10] usb 4-1: config 231 interface 206 has no altsetting 0 [ 86.396443][ T10] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 86.405593][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.413643][ T10] usb 4-1: Product: syz [ 86.417815][ T10] usb 4-1: Manufacturer: syz [ 86.422509][ T10] usb 4-1: SerialNumber: syz [ 86.432327][ T3963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.439843][ T3963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.667730][ T10] usb 4-1: USB disconnect, device number 2 [ 86.674570][ T29] audit: type=1400 audit(1765747149.472:106): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/libertas/usb8388_olpc.bin" dev="sda1" ino=432 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 87.170962][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.342014][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 87.350770][ T10] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 87.359250][ T10] usb 4-1: config 231 has no interface number 0 [ 87.365613][ T10] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.378901][ T10] usb 4-1: config 231 interface 206 has no altsetting 0 [ 87.388750][ T10] usb 4-1: string descriptor 0 read error: -22 [ 87.395079][ T10] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 87.404234][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.530959][ T9] ------------[ cut here ]------------ [ 88.536521][ T9] URB ffff888114f2e000 submitted while active [ 88.542667][ T9] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#0: kworker/0:0/9 [ 88.550656][ T9] Modules linked in: [ 88.554763][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.564412][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.574551][ T9] Workqueue: events request_firmware_work_func [ 88.580867][ T9] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 88.586589][ T9] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 97 f5 c5 fc 48 8d 3d 50 45 f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 79 f5 c5 fc 0f 1f [ 88.606402][ T9] RSP: 0018:ffffc9000009f8d0 EFLAGS: 00010293 [ 88.612606][ T9] RAX: 0000000000000000 RBX: ffff888114f2e000 RCX: ffffffff8427b986 [ 88.620622][ T9] RDX: ffff888101ab0000 RSI: ffff888114f2e000 RDI: ffffffff8aaa3c30 [ 88.628712][ T9] RBP: ffff888114f2e000 R08: 0000000000000001 R09: 0000000000000000 [ 88.636784][ T9] R10: 0000000000000000 R11: ffff888101ab0aa8 R12: 00000000c0030300 [ 88.644826][ T9] R13: 0000000000000010 R14: ffff8881056e5000 R15: ffff8881056e6000 [ 88.652887][ T9] FS: 0000000000000000(0000) GS:ffff888268bf5000(0000) knlGS:0000000000000000 [ 88.662013][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.668648][ T9] CR2: 0000001b30524220 CR3: 000000012a01a000 CR4: 00000000003506f0 [ 88.676691][ T9] Call Trace: [ 88.680016][ T9] [ 88.683016][ T9] ? __netdev_alloc_skb+0x11/0x920 [ 88.688222][ T9] usb_tx_block+0x241/0x2e0 [ 88.692840][ T9] if_usb_prog_firmware+0x570/0x10c0 [ 88.698210][ T9] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 88.704070][ T9] ? __pfx__request_firmware+0x10/0x10 [ 88.709601][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 88.714900][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.720906][ T9] ? __pfx_helper_firmware_cb+0x10/0x10 [ 88.726508][ T9] helper_firmware_cb+0x1f8/0x2e0 [ 88.731631][ T9] request_firmware_work_func+0x13c/0x250 [ 88.737585][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 88.744042][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.748893][ T9] process_one_work+0x9ba/0x1b20 [ 88.753935][ T9] ? __pfx_process_one_work+0x10/0x10 [ 88.759377][ T9] ? assign_work+0x1a0/0x250 [ 88.764057][ T9] worker_thread+0x6c8/0xf10 [ 88.768724][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.773920][ T9] kthread+0x3c5/0x780 [ 88.778060][ T9] ? __pfx_kthread+0x10/0x10 [ 88.782766][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.787601][ T9] ? __pfx_kthread+0x10/0x10 [ 88.792269][ T9] ret_from_fork+0x74f/0xa30 [ 88.796931][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 88.802143][ T9] ? __switch_to+0x7a5/0x10c0 [ 88.806899][ T9] ? __pfx_kthread+0x10/0x10 [ 88.811566][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.816431][ T9] [ 88.819476][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.826770][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.836322][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.846387][ T9] Workqueue: events request_firmware_work_func [ 88.852590][ T9] Call Trace: [ 88.855875][ T9] [ 88.858816][ T9] dump_stack_lvl+0x3d/0x1f0 [ 88.863431][ T9] vpanic+0x640/0x6f0 [ 88.867432][ T9] panic+0xca/0xd0 [ 88.871171][ T9] ? __pfx_panic+0x10/0x10 [ 88.875606][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 88.880739][ T9] check_panic_on_warn+0xab/0xb0 [ 88.885720][ T9] __warn+0x108/0x3c0 [ 88.889724][ T9] __report_bug+0x2a0/0x520 [ 88.894244][ T9] ? __pfx___report_bug+0x10/0x10 [ 88.899286][ T9] ? usb_tx_block+0x56/0x2e0 [ 88.903908][ T9] ? debug_object_free+0x295/0x550 [ 88.909048][ T9] report_bug_entry+0xb2/0x220 [ 88.913855][ T9] ? usb_submit_urb+0x15a3/0x1970 [ 88.918939][ T9] handle_bug+0x18a/0x260 [ 88.923304][ T9] exc_invalid_op+0x17/0x50 [ 88.927878][ T9] asm_exc_invalid_op+0x1a/0x20 [ 88.932762][ T9] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 88.938435][ T9] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 97 f5 c5 fc 48 8d 3d 50 45 f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 79 f5 c5 fc 0f 1f [ 88.958063][ T9] RSP: 0018:ffffc9000009f8d0 EFLAGS: 00010293 [ 88.964154][ T9] RAX: 0000000000000000 RBX: ffff888114f2e000 RCX: ffffffff8427b986 [ 88.972147][ T9] RDX: ffff888101ab0000 RSI: ffff888114f2e000 RDI: ffffffff8aaa3c30 [ 88.980297][ T9] RBP: ffff888114f2e000 R08: 0000000000000001 R09: 0000000000000000 [ 88.988298][ T9] R10: 0000000000000000 R11: ffff888101ab0aa8 R12: 00000000c0030300 [ 88.996285][ T9] R13: 0000000000000010 R14: ffff8881056e5000 R15: ffff8881056e6000 [ 89.004290][ T9] ? usb_tx_block+0x56/0x2e0 [ 89.008947][ T9] ? __netdev_alloc_skb+0x11/0x920 [ 89.014101][ T9] usb_tx_block+0x241/0x2e0 [ 89.018646][ T9] if_usb_prog_firmware+0x570/0x10c0 [ 89.023986][ T9] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 89.029762][ T9] ? __pfx__request_firmware+0x10/0x10 [ 89.035266][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 89.040508][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.046642][ T9] ? __pfx_helper_firmware_cb+0x10/0x10 [ 89.052226][ T9] helper_firmware_cb+0x1f8/0x2e0 [ 89.057296][ T9] request_firmware_work_func+0x13c/0x250 [ 89.063055][ T9] ? __pfx_request_firmware_work_func+0x10/0x10 [ 89.069334][ T9] ? rcu_is_watching+0x12/0xc0 [ 89.074136][ T9] process_one_work+0x9ba/0x1b20 [ 89.079123][ T9] ? __pfx_process_one_work+0x10/0x10 [ 89.084528][ T9] ? assign_work+0x1a0/0x250 [ 89.089144][ T9] worker_thread+0x6c8/0xf10 [ 89.093781][ T9] ? __pfx_worker_thread+0x10/0x10 [ 89.098923][ T9] kthread+0x3c5/0x780 [ 89.103034][ T9] ? __pfx_kthread+0x10/0x10 [ 89.107655][ T9] ? rcu_is_watching+0x12/0xc0 [ 89.112456][ T9] ? __pfx_kthread+0x10/0x10 [ 89.117097][ T9] ret_from_fork+0x74f/0xa30 [ 89.121722][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 89.126941][ T9] ? __switch_to+0x7a5/0x10c0 [ 89.131658][ T9] ? __pfx_kthread+0x10/0x10 [ 89.136280][ T9] ret_from_fork_asm+0x1a/0x30 [ 89.141094][ T9] [ 89.144362][ T9] Kernel Offset: disabled [ 89.148700][ T9] Rebooting in 86400 seconds..