Warning: Permanently added '[localhost]:36508' (ED25519) to the list of known hosts. 2024/05/27 21:28:37 ignoring optional flag "sandboxArg"="0" 2024/05/27 21:28:37 parsed 1 programs [ 79.739910][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 79.739926][ T39] audit: type=1400 audit(1716845317.325:201): avc: denied { getattr } for pid=5378 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.752763][ T39] audit: type=1400 audit(1716845317.325:202): avc: denied { read } for pid=5378 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.761745][ T39] audit: type=1400 audit(1716845317.325:203): avc: denied { open } for pid=5378 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.771730][ T39] audit: type=1400 audit(1716845317.335:204): avc: denied { read } for pid=5378 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2024/05/27 21:28:37 executed programs: 0 [ 79.781364][ T39] audit: type=1400 audit(1716845317.335:205): avc: denied { open } for pid=5378 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.791819][ T39] audit: type=1400 audit(1716845317.355:206): avc: denied { mounton } for pid=5398 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 79.801162][ T39] audit: type=1400 audit(1716845317.355:207): avc: denied { mount } for pid=5398 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 79.809006][ T39] audit: type=1400 audit(1716845317.355:208): avc: denied { setattr } for pid=5398 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.821601][ T5208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.825595][ T5208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.828433][ T5208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.831965][ T5208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.835419][ T5208] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.837966][ T5208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.852648][ T39] audit: type=1400 audit(1716845317.435:209): avc: denied { mounton } for pid=5405 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.950748][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 80.051633][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.054174][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.056679][ T5405] bridge_slave_0: entered allmulticast mode [ 80.059858][ T5405] bridge_slave_0: entered promiscuous mode [ 80.065905][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.069133][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.071559][ T5405] bridge_slave_1: entered allmulticast mode [ 80.075876][ T5405] bridge_slave_1: entered promiscuous mode [ 80.120804][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.128289][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.172956][ T5405] team0: Port device team_slave_0 added [ 80.178642][ T5405] team0: Port device team_slave_1 added [ 80.225299][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.227757][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.236572][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.241366][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.244838][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.253966][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.305888][ T5405] hsr_slave_0: entered promiscuous mode [ 80.308528][ T5405] hsr_slave_1: entered promiscuous mode [ 80.967848][ T5405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.976437][ T5405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.982725][ T5405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.988643][ T5405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.062462][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.073575][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.079563][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.082251][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.091769][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.094580][ T830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.138849][ T39] audit: type=1400 audit(1716845318.725:210): avc: denied { sys_module } for pid=5405 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.205484][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.237390][ T5405] veth0_vlan: entered promiscuous mode [ 81.246442][ T5405] veth1_vlan: entered promiscuous mode [ 81.260286][ T5405] veth0_macvtap: entered promiscuous mode [ 81.267191][ T5405] veth1_macvtap: entered promiscuous mode [ 81.277925][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.284354][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.290049][ T5405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293415][ T5405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.296310][ T5405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.299182][ T5405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.340955][ T604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.347283][ T604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.363713][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.367214][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.663089][ T826] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.845389][ T826] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 81.848406][ T826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.851766][ T826] usb 5-1: config 0 has no interface number 0 [ 81.854300][ T826] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.857968][ T826] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 81.860955][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.866698][ T826] usb 5-1: config 0 descriptor?? [ 81.872020][ T826] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 81.876151][ T826] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 81.914329][ T5208] Bluetooth: hci0: command tx timeout [ 82.149507][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 82.152255][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 82.155198][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 82.157537][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 82.159546][ T826] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 82.234735][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 82.237250][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 82.239955][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 82.242509][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 82.451009][ T826] usb 5-1: USB disconnect, device number 2 [ 82.455615][ T826] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 82.457686][ T826] em28xx 5-1:0.237: Disconnecting em28xx [ 82.464502][ T826] em28xx 5-1:0.237: Freeing device [ 82.466440][ T826] em28xx 5-1:0.237: Freeing device [ 82.973510][ T826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.157903][ T826] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 83.160897][ T826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.164755][ T826] usb 5-1: config 0 has no interface number 0 [ 83.167183][ T826] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.171786][ T826] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 83.175807][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.181420][ T826] usb 5-1: config 0 descriptor?? [ 83.188670][ T826] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 83.193422][ T826] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 83.453052][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 83.455939][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 83.459370][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 83.462497][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 83.465987][ T826] list_add corruption. prev->next should be next (ffffffff8f20b440), but was ffffffff81328c55. (prev=ffff88801e2f4250). [ 83.471170][ T826] ------------[ cut here ]------------ [ 83.473147][ T826] kernel BUG at lib/list_debug.c:32! [ 83.475481][ T826] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 83.479892][ T826] CPU: 1 PID: 826 Comm: kworker/1:2 Not tainted 6.10.0-rc1-syzkaller-g2bfcfd584ff5 #0 [ 83.483888][ T826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 83.488104][ T826] Workqueue: usb_hub_wq hub_event [ 83.490246][ T826] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 83.492968][ T826] Code: e4 fc 90 0f 0b 48 89 d9 48 c7 c7 40 01 90 8b e8 38 a8 e4 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 01 90 8b 48 89 de e8 23 a8 e4 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 02 90 8b e8 0b a8 e4 [ 83.500978][ T826] RSP: 0018:ffffc900044a6f00 EFLAGS: 00010282 [ 83.503532][ T826] RAX: 0000000000000075 RBX: ffffffff8f20b440 RCX: ffffffff816e5959 [ 83.506847][ T826] RDX: 0000000000000000 RSI: ffffffff816ee6a6 RDI: 0000000000000005 [ 83.510139][ T826] RBP: ffff88802b778250 R08: 0000000000000005 R09: 0000000000000000 [ 83.513462][ T826] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802b778250 [ 83.516793][ T826] R13: ffff88802b778000 R14: ffff88802b779a04 R15: ffff88802b87e000 [ 83.520107][ T826] FS: 0000000000000000(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 [ 83.523850][ T826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.526640][ T826] CR2: 00007fa106398000 CR3: 000000001dbee000 CR4: 0000000000350ef0 [ 83.529958][ T826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.533279][ T826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.536552][ T826] Call Trace: [ 83.537930][ T826] [ 83.539172][ T826] ? show_regs+0x8c/0xa0 [ 83.540933][ T826] ? die+0x36/0xa0 [ 83.542492][ T826] ? do_trap+0x232/0x430 [ 83.544251][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 83.546674][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 83.549138][ T826] ? do_error_trap+0xf4/0x230 [ 83.551148][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 83.553595][ T826] ? handle_invalid_op+0x34/0x40 [ 83.555695][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 83.558158][ T826] ? exc_invalid_op+0x2e/0x50 [ 83.560152][ T826] ? asm_exc_invalid_op+0x1a/0x20 [ 83.562286][ T826] ? __wake_up_klogd.part.0+0x99/0xf0 [ 83.564546][ T826] ? vprintk+0x86/0xa0 [ 83.566268][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 83.568721][ T826] em28xx_init_extension+0x48/0x200 [ 83.570916][ T826] em28xx_init_dev.constprop.0+0x197b/0x3090 [ 83.573434][ T826] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 83.576117][ T826] ? lockdep_init_map_type+0x16d/0x7d0 [ 83.578386][ T826] ? rcu_is_watching+0x12/0xc0 [ 83.580409][ T826] ? lockdep_init_map_type+0x16d/0x7d0 [ 83.582696][ T826] ? __raw_spin_lock_init+0x3a/0x110 [ 83.584925][ T826] em28xx_usb_probe+0x10db/0x3730 [ 83.587062][ T826] usb_probe_interface+0x309/0x9d0 [ 83.589224][ T826] ? __pfx_usb_probe_interface+0x10/0x10 [ 83.591531][ T826] really_probe+0x23e/0xa90 [ 83.593447][ T826] __driver_probe_device+0x1de/0x440 [ 83.595664][ T826] driver_probe_device+0x4c/0x1b0 [ 83.597791][ T826] __device_attach_driver+0x1df/0x310 [ 83.600044][ T826] ? __pfx___device_attach_driver+0x10/0x10 [ 83.602533][ T826] bus_for_each_drv+0x157/0x1e0 [ 83.604585][ T826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.606847][ T826] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.609030][ T826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.611483][ T826] __device_attach+0x1e8/0x4b0 [ 83.613521][ T826] ? __pfx___device_attach+0x10/0x10 [ 83.615764][ T826] ? do_raw_spin_unlock+0x172/0x230 [ 83.617801][ T826] bus_probe_device+0x17f/0x1c0 [ 83.619738][ T826] device_add+0x114b/0x1a70 [ 83.621666][ T826] ? __pfx_device_add+0x10/0x10 [ 83.623719][ T826] ? preempt_schedule_thunk+0x1a/0x30 [ 83.625957][ T826] usb_set_configuration+0x10cb/0x1c50 [ 83.628241][ T826] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 83.630810][ T826] usb_generic_driver_probe+0xb1/0x110 [ 83.633106][ T826] usb_probe_device+0xec/0x3e0 [ 83.635138][ T826] ? __pfx_usb_probe_device+0x10/0x10 [ 83.637386][ T826] really_probe+0x23e/0xa90 [ 83.639316][ T826] __driver_probe_device+0x1de/0x440 [ 83.641538][ T826] ? usb_driver_applicable+0x1c7/0x220 [ 83.643836][ T826] driver_probe_device+0x4c/0x1b0 [ 83.645961][ T826] __device_attach_driver+0x1df/0x310 [ 83.648212][ T826] ? __pfx___device_attach_driver+0x10/0x10 [ 83.650695][ T826] bus_for_each_drv+0x157/0x1e0 [ 83.652747][ T826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.654998][ T826] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.657124][ T826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.659577][ T826] __device_attach+0x1e8/0x4b0 [ 83.661603][ T826] ? __pfx___device_attach+0x10/0x10 [ 83.663807][ T826] ? do_raw_spin_unlock+0x172/0x230 [ 83.665960][ T826] bus_probe_device+0x17f/0x1c0 [ 83.668006][ T826] device_add+0x114b/0x1a70 [ 83.669926][ T826] ? __pfx_device_add+0x10/0x10 [ 83.671999][ T826] ? usb_detect_static_quirks+0x335/0x3e0 [ 83.674387][ T826] usb_new_device+0xd90/0x1a10 [ 83.676373][ T826] ? __pfx_usb_new_device+0x10/0x10 [ 83.678572][ T826] hub_event+0x2db0/0x4e20 [ 83.680468][ T826] ? __pfx_hub_event+0x10/0x10 [ 83.682492][ T826] ? __pfx_lock_acquire+0x10/0x10 [ 83.684634][ T826] ? __pfx_lock_release+0x10/0x10 [ 83.686771][ T826] process_one_work+0x9fb/0x1b60 [ 83.688854][ T826] ? __pfx_hub_event+0x10/0x10 [ 83.690897][ T826] ? __pfx_process_one_work+0x10/0x10 [ 83.693154][ T826] ? assign_work+0x1a0/0x250 [ 83.695115][ T826] worker_thread+0x6c8/0xf70 [ 83.697058][ T826] ? __kthread_parkme+0x148/0x220 [ 83.699134][ T826] ? __pfx_worker_thread+0x10/0x10 [ 83.700904][ T826] kthread+0x2c1/0x3a0 [ 83.702373][ T826] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.704189][ T826] ? __pfx_kthread+0x10/0x10 [ 83.705773][ T826] ret_from_fork+0x45/0x80 [ 83.707403][ T826] ? __pfx_kthread+0x10/0x10 [ 83.709153][ T826] ret_from_fork_asm+0x1a/0x30 [ 83.710836][ T826] [ 83.711811][ T826] Modules linked in: [ 83.713491][ T826] ---[ end trace 0000000000000000 ]--- [ 83.715909][ T826] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 83.719144][ T826] Code: e4 fc 90 0f 0b 48 89 d9 48 c7 c7 40 01 90 8b e8 38 a8 e4 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 01 90 8b 48 89 de e8 23 a8 e4 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 02 90 8b e8 0b a8 e4 [ 83.725853][ T826] RSP: 0018:ffffc900044a6f00 EFLAGS: 00010282 [ 83.727919][ T826] RAX: 0000000000000075 RBX: ffffffff8f20b440 RCX: ffffffff816e5959 [ 83.730693][ T826] RDX: 0000000000000000 RSI: ffffffff816ee6a6 RDI: 0000000000000005 [ 83.733923][ T826] RBP: ffff88802b778250 R08: 0000000000000005 R09: 0000000000000000 [ 83.736656][ T826] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802b778250 [ 83.739340][ T826] R13: ffff88802b778000 R14: ffff88802b779a04 R15: ffff88802b87e000 [ 83.742225][ T826] FS: 0000000000000000(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 [ 83.745655][ T826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.748100][ T826] CR2: 00007fa106398000 CR3: 000000001dbee000 CR4: 0000000000350ef0 [ 83.751637][ T826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.755058][ T826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.757774][ T826] Kernel panic - not syncing: Fatal exception [ 83.760479][ T826] Kernel Offset: disabled [ 83.761939][ T826] Rebooting in 86400 seconds..