Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. 2025/12/30 14:20:56 parsed 1 programs [ 117.576411][ T29] audit: type=1400 audit(1767104459.127:101): avc: denied { unlink } for pid=3992 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 117.722739][ T3992] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.881353][ T29] audit: type=1401 audit(1767104463.437:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/12/30 14:21:18 executed programs: 0 2025/12/30 14:21:32 executed programs: 2 [ 150.691685][ T29] audit: type=1400 audit(1767104492.247:103): avc: denied { read write } for pid=4976 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.718930][ T29] audit: type=1400 audit(1767104492.247:104): avc: denied { open } for pid=4976 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.742189][ T29] audit: type=1400 audit(1767104492.247:105): avc: denied { ioctl } for pid=4976 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.929086][ T1121] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.078966][ T1121] usb 4-1: Using ep0 maxpacket: 16 [ 151.086355][ T1121] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 151.094909][ T1121] usb 4-1: config 231 has no interface number 0 [ 151.101289][ T1121] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 151.111445][ T1121] usb 4-1: config 231 interface 206 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 151.121580][ T1121] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.134860][ T1121] usb 4-1: config 231 interface 206 has no altsetting 0 [ 151.143942][ T1121] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 151.153083][ T1121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.161148][ T1121] usb 4-1: Product: syz [ 151.165321][ T1121] usb 4-1: Manufacturer: syz [ 151.169996][ T1121] usb 4-1: SerialNumber: syz [ 151.183314][ T4977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.190809][ T4977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.413488][ T1121] usb 4-1: USB disconnect, device number 2 [ 151.431512][ T29] audit: type=1400 audit(1767104492.987:106): avc: denied { firmware_load } for pid=38 comm="kworker/1:1" path="/lib/firmware/libertas/usb8388_olpc.bin" dev="sda1" ino=432 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 151.919297][ T1121] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 152.070242][ T1121] usb 4-1: not running at top speed; connect to a high speed hub [ 152.079468][ T1121] usb 4-1: config 231 has an invalid interface number: 206 but max is 0 [ 152.087835][ T1121] usb 4-1: config 231 has no interface number 0 [ 152.094232][ T1121] usb 4-1: config 231 interface 206 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.107560][ T1121] usb 4-1: config 231 interface 206 has no altsetting 0 [ 152.117119][ T1121] usb 4-1: string descriptor 0 read error: -22 [ 152.123544][ T1121] usb 4-1: New USB device found, idVendor=05a3, idProduct=8388, bcdDevice=b1.ad [ 152.132675][ T1121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.248894][ T38] ------------[ cut here ]------------ [ 153.254473][ T38] URB ffff888106b96100 submitted while active [ 153.260683][ T38] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15a0/0x1970, CPU#1: kworker/1:1/38 [ 153.271006][ T38] Modules linked in: [ 153.275101][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.284828][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.294972][ T38] Workqueue: events request_firmware_work_func [ 153.301278][ T38] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 153.307013][ T38] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 d6 c5 fc 48 8d 3d 40 2a f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 d6 c5 fc 0f 1f [ 153.326745][ T38] RSP: 0018:ffffc900002878d0 EFLAGS: 00010293 [ 153.332908][ T38] RAX: 0000000000000000 RBX: ffff888106b96100 RCX: ffffffff8427db26 [ 153.341003][ T38] RDX: ffff888103e857c0 RSI: ffff888106b96100 RDI: ffffffff8aaa42c0 [ 153.349098][ T38] RBP: ffff888106b96100 R08: 0000000000000001 R09: 0000000000000000 [ 153.357115][ T38] R10: 0000000000000000 R11: ffff888103e86268 R12: 00000000c0030300 [ 153.365184][ T38] R13: 0000000000000010 R14: ffff888103eef000 R15: ffff888103eee000 [ 153.373731][ T38] FS: 0000000000000000(0000) GS:ffff888268cf4000(0000) knlGS:0000000000000000 [ 153.382793][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.389512][ T38] CR2: 000056254755bcf8 CR3: 000000011c504000 CR4: 00000000003506f0 [ 153.397534][ T38] Call Trace: [ 153.400919][ T38] [ 153.403920][ T38] ? __netdev_alloc_skb+0xf1/0x920 [ 153.409165][ T38] usb_tx_block+0x241/0x2e0 [ 153.413758][ T38] if_usb_prog_firmware+0x570/0x10c0 [ 153.419176][ T38] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 153.424994][ T38] ? __pfx__request_firmware+0x10/0x10 [ 153.430563][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 153.435836][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.441758][ T38] ? __pfx_helper_firmware_cb+0x10/0x10 [ 153.447419][ T38] helper_firmware_cb+0x1f8/0x2e0 [ 153.452649][ T38] request_firmware_work_func+0x13c/0x250 [ 153.458489][ T38] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.464892][ T38] ? rcu_is_watching+0x12/0xc0 [ 153.469770][ T38] process_one_work+0x9ba/0x1b20 [ 153.474833][ T38] ? __pfx_process_one_work+0x10/0x10 [ 153.480423][ T38] ? assign_work+0x1a0/0x250 [ 153.485103][ T38] worker_thread+0x6c8/0xf10 [ 153.489916][ T38] ? __kthread_parkme+0x19e/0x250 [ 153.495025][ T38] ? __pfx_worker_thread+0x10/0x10 [ 153.500287][ T38] kthread+0x3c5/0x780 [ 153.504561][ T38] ? __pfx_kthread+0x10/0x10 [ 153.509287][ T38] ? rcu_is_watching+0x12/0xc0 [ 153.514156][ T38] ? __pfx_kthread+0x10/0x10 [ 153.518858][ T38] ret_from_fork+0x74f/0xa30 [ 153.523569][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 153.528900][ T38] ? __switch_to+0x7a5/0x10c0 [ 153.533708][ T38] ? __pfx_kthread+0x10/0x10 [ 153.538354][ T38] ret_from_fork_asm+0x1a/0x30 [ 153.543270][ T38] [ 153.546467][ T38] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.553785][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.563448][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.573521][ T38] Workqueue: events request_firmware_work_func [ 153.579726][ T38] Call Trace: [ 153.583038][ T38] [ 153.586012][ T38] dump_stack_lvl+0x3d/0x1f0 [ 153.590659][ T38] vpanic+0x640/0x6f0 [ 153.594660][ T38] ? usb_submit_urb+0x15a0/0x1970 [ 153.599731][ T38] panic+0xca/0xd0 [ 153.603492][ T38] ? __pfx_panic+0x10/0x10 [ 153.607937][ T38] ? check_panic_on_warn+0x1f/0xb0 [ 153.613076][ T38] check_panic_on_warn+0xab/0xb0 [ 153.618034][ T38] __warn+0x108/0x3c0 [ 153.622050][ T38] __report_bug+0x2a0/0x520 [ 153.626577][ T38] ? usb_submit_urb+0x15a0/0x1970 [ 153.631637][ T38] ? __pfx___report_bug+0x10/0x10 [ 153.636707][ T38] ? usb_tx_block+0x56/0x2e0 [ 153.641370][ T38] ? debug_object_free+0x295/0x550 [ 153.646508][ T38] report_bug_entry+0xe1/0x290 [ 153.651295][ T38] ? usb_submit_urb+0x15a3/0x1970 [ 153.656366][ T38] handle_bug+0x18a/0x260 [ 153.660904][ T38] exc_invalid_op+0x17/0x50 [ 153.665448][ T38] asm_exc_invalid_op+0x1a/0x20 [ 153.670319][ T38] RIP: 0010:usb_submit_urb+0x15a3/0x1970 [ 153.675995][ T38] Code: 4b 03 00 00 48 8b 04 24 48 8b 90 b0 00 00 00 eb 91 bb ed ff ff ff e9 07 f3 ff ff e8 f7 d6 c5 fc 48 8d 3d 40 2a f0 05 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 e9 f2 ff ff e8 d9 d6 c5 fc 0f 1f [ 153.695639][ T38] RSP: 0018:ffffc900002878d0 EFLAGS: 00010293 [ 153.701752][ T38] RAX: 0000000000000000 RBX: ffff888106b96100 RCX: ffffffff8427db26 [ 153.709763][ T38] RDX: ffff888103e857c0 RSI: ffff888106b96100 RDI: ffffffff8aaa42c0 [ 153.717772][ T38] RBP: ffff888106b96100 R08: 0000000000000001 R09: 0000000000000000 [ 153.725779][ T38] R10: 0000000000000000 R11: ffff888103e86268 R12: 00000000c0030300 [ 153.733814][ T38] R13: 0000000000000010 R14: ffff888103eef000 R15: ffff888103eee000 [ 153.741846][ T38] ? usb_tx_block+0x56/0x2e0 [ 153.746494][ T38] ? __netdev_alloc_skb+0xf1/0x920 [ 153.751659][ T38] usb_tx_block+0x241/0x2e0 [ 153.756214][ T38] if_usb_prog_firmware+0x570/0x10c0 [ 153.761589][ T38] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 153.767545][ T38] ? __pfx__request_firmware+0x10/0x10 [ 153.773082][ T38] ? do_raw_spin_unlock+0x172/0x230 [ 153.778330][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.784171][ T38] ? __pfx_helper_firmware_cb+0x10/0x10 [ 153.789761][ T38] helper_firmware_cb+0x1f8/0x2e0 [ 153.794848][ T38] request_firmware_work_func+0x13c/0x250 [ 153.800625][ T38] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.806910][ T38] ? rcu_is_watching+0x12/0xc0 [ 153.811731][ T38] process_one_work+0x9ba/0x1b20 [ 153.816719][ T38] ? __pfx_process_one_work+0x10/0x10 [ 153.822136][ T38] ? assign_work+0x1a0/0x250 [ 153.826765][ T38] worker_thread+0x6c8/0xf10 [ 153.831445][ T38] ? __kthread_parkme+0x19e/0x250 [ 153.836519][ T38] ? __pfx_worker_thread+0x10/0x10 [ 153.841667][ T38] kthread+0x3c5/0x780 [ 153.845768][ T38] ? __pfx_kthread+0x10/0x10 [ 153.850436][ T38] ? rcu_is_watching+0x12/0xc0 [ 153.855244][ T38] ? __pfx_kthread+0x10/0x10 [ 153.859865][ T38] ret_from_fork+0x74f/0xa30 [ 153.864493][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 153.869650][ T38] ? __switch_to+0x7a5/0x10c0 [ 153.874372][ T38] ? __pfx_kthread+0x10/0x10 [ 153.879008][ T38] ret_from_fork_asm+0x1a/0x30 [ 153.883846][ T38] [ 153.887458][ T38] Kernel Offset: disabled [ 153.891802][ T38] Rebooting in 86400 seconds..