T29] audit: type=1400 audit(1726329989.648:77): avc: denied { write } for pid=2632 comm="sh" path="pipe:[1560]" dev="pipefs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.076109][ T29] audit: type=1400 audit(1726329989.648:78): avc: denied { rlimitinh } for pid=2632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.094950][ T29] audit: type=1400 audit(1726329989.648:79): avc: denied { siginh } for pid=2632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.128918][ T2630] sshd (2630) used greatest stack depth: 24144 bytes left [ 38.438709][ T2635] sftp-server (2635) used greatest stack depth: 24032 bytes left [ 38.470112][ T2633] sshd (2633) used greatest stack depth: 23616 bytes left Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. executing program [ 48.509736][ T29] audit: type=1400 audit(1726330007.138:80): avc: denied { execmem } for pid=2649 comm="syz-executor310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.529485][ T29] audit: type=1400 audit(1726330007.138:81): avc: denied { read write } for pid=2650 comm="syz-executor310" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.553390][ T29] audit: type=1400 audit(1726330007.138:82): avc: denied { open } for pid=2650 comm="syz-executor310" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.577175][ T29] audit: type=1400 audit(1726330007.138:83): avc: denied { ioctl } for pid=2650 comm="syz-executor310" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.789070][ T643] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 48.981492][ T643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.990317][ T643] usb 1-1: not running at top speed; connect to a high speed hub [ 48.999639][ T643] usb 1-1: config 129 has an invalid interface number: 50 but max is 0 [ 49.007924][ T643] usb 1-1: config 129 has no interface number 0 [ 49.014313][ T643] usb 1-1: config 129 interface 50 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 49.026291][ T643] usb 1-1: config 129 interface 50 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 49.037785][ T643] usb 1-1: config 129 interface 50 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.051162][ T643] usb 1-1: config 129 interface 50 has no altsetting 0 [ 49.060882][ T643] usb 1-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=a7.f4 [ 49.070003][ T643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.078002][ T643] usb 1-1: Product: syz [ 49.082215][ T643] usb 1-1: Manufacturer: syz [ 49.086842][ T643] usb 1-1: SerialNumber: syz [ 49.097204][ T2650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.628893][ T8] ------------[ cut here ]------------ [ 50.634497][ T8] URB ffff88811345e600 submitted while active [ 50.641380][ T8] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 50.650951][ T8] Modules linked in: [ 50.654936][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 50.665617][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.675791][ T8] Workqueue: events request_firmware_work_func [ 50.682071][ T8] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 50.687805][ T8] Code: fe eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 ae c6 fc fc c6 05 e6 26 ee 05 01 90 48 c7 c7 a0 60 a0 87 48 89 de e8 a7 c7 c2 fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 50.707547][ T8] RSP: 0018:ffffc9000008f9b8 EFLAGS: 00010282 [ 50.713726][ T8] RAX: 0000000000000000 RBX: ffff88811345e600 RCX: ffffffff811a9639 [ 50.721829][ T8] RDX: ffff8881016957c0 RSI: ffffffff811a9646 RDI: 0000000000000001 [ 50.729901][ T8] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 50.737928][ T8] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000c0060200 [ 50.745987][ T8] R13: 0000000000000010 R14: ffff88810629e000 R15: ffff8881072fa000 [ 50.754051][ T8] FS: 0000000000000000(0000) GS:ffff8881f5800000(0000) knlGS:0000000000000000 [ 50.763079][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.769740][ T8] CR2: 000055af4445d1a0 CR3: 0000000122148000 CR4: 00000000003506f0 [ 50.777753][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.785859][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.793917][ T8] Call Trace: [ 50.797230][ T8] [ 50.800264][ T8] ? show_regs+0x8c/0xa0 [ 50.804633][ T8] ? __warn+0xe5/0x3c0 [ 50.808748][ T8] ? usb_submit_urb+0x14da/0x1730 [ 50.813904][ T8] ? report_bug+0x3c0/0x580 [ 50.818499][ T8] ? handle_bug+0x3d/0x70 [ 50.822964][ T8] ? exc_invalid_op+0x17/0x50 [ 50.827726][ T8] ? asm_exc_invalid_op+0x1a/0x20 [ 50.832874][ T8] ? __warn_printk+0x199/0x350 [ 50.837714][ T8] ? __warn_printk+0x1a6/0x350 [ 50.842586][ T8] ? usb_submit_urb+0x14da/0x1730 [ 50.847778][ T8] ? usb_submit_urb+0x14d9/0x1730 [ 50.852916][ T8] usb_tx_block+0x241/0x2e0 [ 50.857544][ T8] if_usb_prog_firmware+0x569/0x1030 [ 50.863032][ T8] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 50.868885][ T8] ? __pfx__request_firmware+0x10/0x10 [ 50.874425][ T8] ? __pfx_helper_firmware_cb+0x10/0x10 [ 50.880096][ T8] helper_firmware_cb+0x1f8/0x2a0 [ 50.885201][ T8] request_firmware_work_func+0x13a/0x250 [ 50.891076][ T8] ? __pfx_request_firmware_work_func+0x10/0x10 [ 50.897432][ T8] process_one_work+0x9c5/0x1b40 [ 50.902510][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 50.907717][ T8] ? __pfx_process_one_work+0x10/0x10 [ 50.913299][ T8] ? assign_work+0x1a0/0x250 [ 50.917985][ T8] worker_thread+0x6c8/0xed0 [ 50.922697][ T8] ? __pfx_worker_thread+0x10/0x10 [ 50.927889][ T8] kthread+0x2c1/0x3a0 [ 50.932047][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.937333][ T8] ? __pfx_kthread+0x10/0x10 [ 50.942027][ T8] ret_from_fork+0x45/0x80 [ 50.946543][ T8] ? __pfx_kthread+0x10/0x10 [ 50.951228][ T8] ret_from_fork_asm+0x1a/0x30 [ 50.956092][ T8] [ 50.959189][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.966491][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc7-syzkaller-00152-g68d4209158f4 #0 [ 50.977005][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.987071][ T8] Workqueue: events request_firmware_work_func [ 50.993262][ T8] Call Trace: [ 50.996551][ T8] [ 50.999501][ T8] dump_stack_lvl+0x3d/0x1f0 [ 51.004112][ T8] panic+0x6dc/0x7c0 [ 51.008041][ T8] ? __pfx_panic+0x10/0x10 [ 51.012479][ T8] ? show_trace_log_lvl+0x363/0x500 [ 51.017716][ T8] ? check_panic_on_warn+0x1f/0xb0 [ 51.022852][ T8] ? usb_submit_urb+0x14da/0x1730 [ 51.027909][ T8] check_panic_on_warn+0xab/0xb0 [ 51.032872][ T8] __warn+0xf1/0x3c0 [ 51.036790][ T8] ? usb_submit_urb+0x14da/0x1730 [ 51.041839][ T8] report_bug+0x3c0/0x580 [ 51.046183][ T8] handle_bug+0x3d/0x70 [ 51.050391][ T8] exc_invalid_op+0x17/0x50 [ 51.054929][ T8] asm_exc_invalid_op+0x1a/0x20 [ 51.059800][ T8] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 51.065456][ T8] Code: fe eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 ae c6 fc fc c6 05 e6 26 ee 05 01 90 48 c7 c7 a0 60 a0 87 48 89 de e8 a7 c7 c2 fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 51.085163][ T8] RSP: 0018:ffffc9000008f9b8 EFLAGS: 00010282 [ 51.091281][ T8] RAX: 0000000000000000 RBX: ffff88811345e600 RCX: ffffffff811a9639 [ 51.099275][ T8] RDX: ffff8881016957c0 RSI: ffffffff811a9646 RDI: 0000000000000001 [ 51.107264][ T8] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 51.115243][ T8] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000c0060200 [ 51.123234][ T8] R13: 0000000000000010 R14: ffff88810629e000 R15: ffff8881072fa000 [ 51.131227][ T8] ? __warn_printk+0x199/0x350 [ 51.136015][ T8] ? __warn_printk+0x1a6/0x350 [ 51.140811][ T8] ? usb_submit_urb+0x14d9/0x1730 [ 51.145865][ T8] usb_tx_block+0x241/0x2e0 [ 51.150387][ T8] if_usb_prog_firmware+0x569/0x1030 [ 51.155704][ T8] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 51.161451][ T8] ? __pfx__request_firmware+0x10/0x10 [ 51.166963][ T8] ? __pfx_helper_firmware_cb+0x10/0x10 [ 51.172546][ T8] helper_firmware_cb+0x1f8/0x2a0 [ 51.177601][ T8] request_firmware_work_func+0x13a/0x250 [ 51.183373][ T8] ? __pfx_request_firmware_work_func+0x10/0x10 [ 51.189652][ T8] process_one_work+0x9c5/0x1b40 [ 51.194629][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 51.199676][ T8] ? __pfx_process_one_work+0x10/0x10 [ 51.205081][ T8] ? assign_work+0x1a0/0x250 [ 51.209698][ T8] worker_thread+0x6c8/0xed0 [ 51.214329][ T8] ? __pfx_worker_thread+0x10/0x10 [ 51.219466][ T8] kthread+0x2c1/0x3a0 [ 51.223550][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 51.228775][ T8] ? __pfx_kthread+0x10/0x10 [ 51.233387][ T8] ret_from_fork+0x45/0x80 [ 51.237828][ T8] ? __pfx_kthread+0x10/0x10 [ 51.242433][ T8] ret_from_fork_asm+0x1a/0x30 [ 51.247233][ T8] [ 51.250569][ T8] Kernel Offset: disabled [ 51.254935][ T8] Rebooting in 86400 seconds..