[ 25.332303][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.349115][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 34.414075][ T25] kauditd_printk_skb: 37 callbacks suppressed [ 34.414091][ T25] audit: type=1400 audit(1667203193.749:73): avc: denied { transition } for pid=3389 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.443439][ T25] audit: type=1400 audit(1667203193.769:74): avc: denied { write } for pid=3389 comm="sh" path="pipe:[1895]" dev="pipefs" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.0.151' (ECDSA) to the list of known hosts. executing program [ 43.633493][ T25] audit: type=1400 audit(1667203202.969:75): avc: denied { execmem } for pid=3596 comm="syz-executor338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.654851][ T25] audit: type=1400 audit(1667203202.979:76): avc: denied { read write } for pid=3596 comm="syz-executor338" name="raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.678701][ T25] audit: type=1400 audit(1667203202.979:77): avc: denied { open } for pid=3596 comm="syz-executor338" path="/dev/raw-gadget" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.702528][ T25] audit: type=1400 audit(1667203202.979:78): avc: denied { ioctl } for pid=3596 comm="syz-executor338" path="/dev/raw-gadget" dev="devtmpfs" ino=731 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.904445][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.144435][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 44.304549][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.384585][ T21] usb 1-1: config 0 has an invalid interface number: 85 but max is 1 [ 44.392674][ T21] usb 1-1: config 0 has an invalid interface number: 155 but max is 1 [ 44.401072][ T21] usb 1-1: config 0 has no interface number 0 [ 44.407260][ T21] usb 1-1: config 0 has no interface number 1 [ 44.413342][ T21] usb 1-1: config 0 interface 85 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.424077][ T21] usb 1-1: config 0 interface 85 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.434654][ T21] usb 1-1: config 0 interface 85 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.445191][ T21] usb 1-1: config 0 interface 85 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.460607][ T21] usb 1-1: config 0 interface 85 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 44.470856][ T21] usb 1-1: config 0 interface 85 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 44.484002][ T21] usb 1-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.495214][ T21] usb 1-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.508035][ T21] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 44.522988][ T21] usb 1-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.542117][ T21] usb 1-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 44.553347][ T21] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 44.571872][ T21] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 44.824531][ T21] usb 1-1: string descriptor 0 read error: -22 [ 44.830737][ T21] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 44.839807][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.848914][ T21] usb 1-1: config 0 descriptor?? [ 44.886641][ T21] ------------[ cut here ]------------ [ 44.892128][ T21] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.898437][ T21] WARNING: CPU: 1 PID: 21 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed2/0x1880 [ 44.907854][ T21] Modules linked in: [ 44.911738][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0 [ 44.921656][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 44.931750][ T21] Workqueue: usb_hub_wq hub_event [ 44.936813][ T21] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 44.942472][ T21] Code: 7c 24 18 e8 00 75 ea fb 48 8b 7c 24 18 e8 86 21 02 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 ac 90 8a e8 aa 18 b8 03 <0f> 0b e9 58 f8 ff ff e8 d2 74 ea fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 44.962130][ T21] RSP: 0018:ffffc900003cedc0 EFLAGS: 00010286 [ 44.968214][ T21] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 44.976208][ T21] RDX: ffff8880128d6000 RSI: ffffffff816142b8 RDI: fffff52000079daa [ 44.984180][ T21] RBP: ffff888016f83000 R08: 0000000000000005 R09: 0000000000000000 [ 44.992171][ T21] R10: 0000000080000000 R11: 3a312d3120627375 R12: 0000000000000001 [ 45.000194][ T21] R13: ffff88801c988480 R14: 0000000000000002 R15: ffff88801d04fc00 [ 45.008197][ T21] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 45.017182][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.023768][ T21] CR2: 000055bb04d225d0 CR3: 0000000023660000 CR4: 00000000003506e0 [ 45.031765][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.039764][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.047749][ T21] Call Trace: [ 45.051026][ T21] [ 45.053945][ T21] ? __init_swait_queue_head+0xc6/0x150 [ 45.059538][ T21] usb_start_wait_urb+0x101/0x4b0 [ 45.064595][ T21] ? usb_api_blocking_completion+0xa0/0xa0 [ 45.070422][ T21] ? __kasan_kmalloc+0x9f/0xb0 [ 45.075227][ T21] ? memset+0x20/0x40 [ 45.079221][ T21] usb_bulk_msg+0x226/0x550 [ 45.083710][ T21] shark_write_val+0x222