Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. executing program [ 164.864641][ T29] audit: type=1400 audit(1722342381.380:80): avc: denied { execmem } for pid=2643 comm="syz-executor177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.888892][ T29] audit: type=1400 audit(1722342381.380:81): avc: denied { read write } for pid=2644 comm="syz-executor177" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.912722][ T29] audit: type=1400 audit(1722342381.380:82): avc: denied { open } for pid=2644 comm="syz-executor177" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.936427][ T29] audit: type=1400 audit(1722342381.380:83): avc: denied { ioctl } for pid=2644 comm="syz-executor177" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.142016][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.321863][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 165.329011][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.338484][ T43] usb 1-1: config 237 has an invalid interface number: 143 but max is 0 [ 165.346993][ T43] usb 1-1: config 237 has no interface number 0 [ 165.353350][ T43] usb 1-1: config 237 interface 143 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 165.364530][ T43] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 165.375411][ T43] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 165.386314][ T43] usb 1-1: config 237 interface 143 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 165.397579][ T43] usb 1-1: config 237 interface 143 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 165.408463][ T43] usb 1-1: config 237 interface 143 altsetting 9 has an invalid endpoint descriptor of length 2, skipping [ 165.419782][ T43] usb 1-1: config 237 interface 143 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 165.433027][ T43] usb 1-1: config 237 interface 143 has no altsetting 0 [ 165.442402][ T43] usb 1-1: New USB device found, idVendor=14b2, idProduct=3300, bcdDevice=32.e0 [ 165.451451][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.459559][ T43] usb 1-1: Product: syz [ 165.463738][ T43] usb 1-1: Manufacturer: syz [ 165.468309][ T43] usb 1-1: SerialNumber: syz [ 165.681120][ T43] r8712u: register rtl8712_netdev_ops to netdev_ops [ 165.687861][ T43] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 166.382248][ T43] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 166.388871][ T43] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 166.396425][ T43] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 166.492674][ T29] audit: type=1400 audit(1722342383.010:84): avc: denied { read } for pid=2580 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 166.871587][ T2580] ------------[ cut here ]------------ [ 166.877251][ T2580] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 166.883497][ T2580] WARNING: CPU: 0 PID: 2580 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 166.893154][ T2580] Modules linked in: [ 166.897071][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: dhcpcd Not tainted 6.10.0-syzkaller-g1722389b0d86 #0 [ 166.906566][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 166.916655][ T2580] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 166.922246][ T2580] Code: 84 3c 02 00 00 e8 a5 eb fe fc 4c 89 ef e8 2d 21 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 17 a0 87 e8 96 dc c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 77 eb fe fc 49 81 c4 c0 05 00 00 e9 [ 166.942252][ T2580] RSP: 0018:ffffc90001647678 EFLAGS: 00010282 [ 166.948314][ T2580] RAX: 0000000000000000 RBX: ffff8881022faf00 RCX: ffffffff81194ce9 [ 166.956329][ T2580] RDX: ffff88810e380000 RSI: ffffffff81194cf6 RDI: 0000000000000001 [ 166.964339][ T2580] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 166.972345][ T2580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 166.980324][ T2580] R13: ffff8881056880a8 R14: ffff88810d743de0 R15: ffff8881022faf7c [ 166.988332][ T2580] FS: 00007f695c468740(0000) GS:ffff8881f6200000(0000) knlGS:0000000000000000 [ 166.997327][ T2580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.003940][ T2580] CR2: 0000556f3a0e1068 CR3: 000000010c712000 CR4: 00000000003506f0 [ 167.011950][ T2580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.019905][ T2580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.027904][ T2580] Call Trace: [ 167.031189][ T2580] [ 167.034153][ T2580] ? show_regs+0x8c/0xa0 [ 167.038603][ T2580] ? __warn+0xe5/0x3c0 [ 167.042701][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 167.047656][ T2580] ? report_bug+0x3c0/0x580 [ 167.052209][ T2580] ? handle_bug+0x3d/0x70 [ 167.056548][ T2580] ? exc_invalid_op+0x17/0x50 [ 167.061247][ T2580] ? asm_exc_invalid_op+0x1a/0x20 [ 167.066309][ T2580] ? __warn_printk+0x199/0x350 [ 167.071096][ T2580] ? __warn_printk+0x1a6/0x350 [ 167.075892][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 167.080850][ T2580] ? usb_submit_urb+0xe4a/0x1730 [ 167.085839][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.091791][ T2580] r8712_usb_write_mem+0x2e4/0x3f0 [ 167.096906][ T2580] rtl8712_dl_fw+0x7ab/0xfe0 [ 167.101489][ T2580] ? __pfx_rtl8712_dl_fw+0x10/0x10 [ 167.106635][ T2580] rtl871x_hal_init+0xb3/0x190 [ 167.111424][ T2580] netdev_open+0xea/0x800 [ 167.115796][ T2580] ? __pfx_netdev_open+0x10/0x10 [ 167.120745][ T2580] __dev_open+0x2d4/0x4e0 [ 167.125119][ T2580] ? __pfx___dev_open+0x10/0x10 [ 167.130083][ T2580] ? __local_bh_enable_ip+0xa4/0x120 [ 167.135409][ T2580] __dev_change_flags+0x561/0x720 [ 167.140451][ T2580] ? __pfx___dev_change_flags+0x10/0x10 [ 167.146058][ T2580] dev_change_flags+0x8f/0x160 [ 167.150840][ T2580] devinet_ioctl+0x127a/0x1f10 [ 167.155737][ T2580] ? __pfx_devinet_ioctl+0x10/0x10 [ 167.160865][ T2580] ? _copy_from_user+0x5d/0xf0 [ 167.165679][ T2580] inet_ioctl+0x3aa/0x3f0 [ 167.170024][ T2580] ? __pfx_inet_ioctl+0x10/0x10 [ 167.174913][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.180816][ T2580] sock_do_ioctl+0x116/0x280 [ 167.185446][ T2580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 167.190570][ T2580] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 167.197119][ T2580] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 167.204012][ T2580] ? __pfx_lock_release+0x10/0x10 [ 167.209035][ T2580] sock_ioctl+0x22e/0x6c0 [ 167.213403][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 167.218268][ T2580] ? selinux_file_ioctl+0x180/0x270 [ 167.223500][ T2580] ? selinux_file_ioctl+0xb4/0x270 [ 167.228624][ T2580] ? __pfx___sys_socket+0x10/0x10 [ 167.233679][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 167.238544][ T2580] __x64_sys_ioctl+0x193/0x220 [ 167.243345][ T2580] do_syscall_64+0xcd/0x250 [ 167.247957][ T2580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.253895][ T2580] RIP: 0033:0x7f695c536d49 [ 167.258329][ T2580] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 167.278080][ T2580] RSP: 002b:00007ffe09093c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.286966][ T2580] RAX: ffffffffffffffda RBX: 00007f695c4686c0 RCX: 00007f695c536d49 [ 167.294982][ T2580] RDX: 00007ffe090a3e08 RSI: 0000000000008914 RDI: 0000000000000005 [ 167.303013][ T2580] RBP: 00007ffe090b3fc8 R08: 00007ffe090a3dc8 R09: 00007ffe090a3d78 [ 167.311069][ T2580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.319078][ T2580] R13: 00007ffe090a3e08 R14: 0000000000000028 R15: 0000000000008914 [ 167.327111][ T2580] [ 167.330134][ T2580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.337397][ T2580] CPU: 0 UID: 0 PID: 2580 Comm: dhcpcd Not tainted 6.10.0-syzkaller-g1722389b0d86 #0 [ 167.346927][ T2580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 167.356970][ T2580] Call Trace: [ 167.360266][ T2580] [ 167.363185][ T2580] dump_stack_lvl+0x3d/0x1f0 [ 167.367859][ T2580] panic+0x6f5/0x7a0 [ 167.371748][ T2580] ? __pfx_panic+0x10/0x10 [ 167.376241][ T2580] ? show_trace_log_lvl+0x363/0x500 [ 167.381515][ T2580] ? check_panic_on_warn+0x1f/0xb0 [ 167.386632][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 167.391568][ T2580] check_panic_on_warn+0xab/0xb0 [ 167.396589][ T2580] __warn+0xf1/0x3c0 [ 167.400474][ T2580] ? usb_submit_urb+0xe4b/0x1730 [ 167.405423][ T2580] report_bug+0x3c0/0x580 [ 167.409746][ T2580] handle_bug+0x3d/0x70 [ 167.413893][ T2580] exc_invalid_op+0x17/0x50 [ 167.418428][ T2580] asm_exc_invalid_op+0x1a/0x20 [ 167.423282][ T2580] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 167.428826][ T2580] Code: 84 3c 02 00 00 e8 a5 eb fe fc 4c 89 ef e8 2d 21 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 17 a0 87 e8 96 dc c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 77 eb fe fc 49 81 c4 c0 05 00 00 e9 [ 167.448513][ T2580] RSP: 0018:ffffc90001647678 EFLAGS: 00010282 [ 167.454567][ T2580] RAX: 0000000000000000 RBX: ffff8881022faf00 RCX: ffffffff81194ce9 [ 167.462529][ T2580] RDX: ffff88810e380000 RSI: ffffffff81194cf6 RDI: 0000000000000001 [ 167.470487][ T2580] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 167.478447][ T2580] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 167.486402][ T2580] R13: ffff8881056880a8 R14: ffff88810d743de0 R15: ffff8881022faf7c [ 167.494366][ T2580] ? __warn_printk+0x199/0x350 [ 167.499122][ T2580] ? __warn_printk+0x1a6/0x350 [ 167.503873][ T2580] ? usb_submit_urb+0xe4a/0x1730 [ 167.508826][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.514735][ T2580] r8712_usb_write_mem+0x2e4/0x3f0 [ 167.519838][ T2580] rtl8712_dl_fw+0x7ab/0xfe0 [ 167.524421][ T2580] ? __pfx_rtl8712_dl_fw+0x10/0x10 [ 167.529525][ T2580] rtl871x_hal_init+0xb3/0x190 [ 167.534280][ T2580] netdev_open+0xea/0x800 [ 167.538597][ T2580] ? __pfx_netdev_open+0x10/0x10 [ 167.543524][ T2580] __dev_open+0x2d4/0x4e0 [ 167.547846][ T2580] ? __pfx___dev_open+0x10/0x10 [ 167.552688][ T2580] ? __local_bh_enable_ip+0xa4/0x120 [ 167.558020][ T2580] __dev_change_flags+0x561/0x720 [ 167.563038][ T2580] ? __pfx___dev_change_flags+0x10/0x10 [ 167.568578][ T2580] dev_change_flags+0x8f/0x160 [ 167.573357][ T2580] devinet_ioctl+0x127a/0x1f10 [ 167.578203][ T2580] ? __pfx_devinet_ioctl+0x10/0x10 [ 167.583307][ T2580] ? _copy_from_user+0x5d/0xf0 [ 167.588062][ T2580] inet_ioctl+0x3aa/0x3f0 [ 167.592381][ T2580] ? __pfx_inet_ioctl+0x10/0x10 [ 167.597216][ T2580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.603101][ T2580] sock_do_ioctl+0x116/0x280 [ 167.607682][ T2580] ? __pfx_sock_do_ioctl+0x10/0x10 [ 167.612786][ T2580] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 167.619290][ T2580] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 167.626229][ T2580] ? __pfx_lock_release+0x10/0x10 [ 167.631253][ T2580] sock_ioctl+0x22e/0x6c0 [ 167.635580][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 167.640423][ T2580] ? selinux_file_ioctl+0x180/0x270 [ 167.645616][ T2580] ? selinux_file_ioctl+0xb4/0x270 [ 167.650744][ T2580] ? __pfx___sys_socket+0x10/0x10 [ 167.655762][ T2580] ? __pfx_sock_ioctl+0x10/0x10 [ 167.660866][ T2580] __x64_sys_ioctl+0x193/0x220 [ 167.665618][ T2580] do_syscall_64+0xcd/0x250 [ 167.670122][ T2580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.676007][ T2580] RIP: 0033:0x7f695c536d49 [ 167.680410][ T2580] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 167.700015][ T2580] RSP: 002b:00007ffe09093c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.708417][ T2580] RAX: ffffffffffffffda RBX: 00007f695c4686c0 RCX: 00007f695c536d49 [ 167.716377][ T2580] RDX: 00007ffe090a3e08 RSI: 0000000000008914 RDI: 0000000000000005 [ 167.724334][ T2580] RBP: 00007ffe090b3fc8 R08: 00007ffe090a3dc8 R09: 00007ffe090a3d78 [ 167.732290][ T2580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.740242][ T2580] R13: 00007ffe090a3e08 R14: 0000000000000028 R15: 0000000000008914 [ 167.748213][ T2580] [ 167.751476][ T2580] Kernel Offset: disabled [ 167.755822][ T2580] Rebooting in 86400 seconds..