[ 71.125026][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.143625][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:37610' (ED25519) to the list of known hosts. 2025/06/21 17:08:16 ignoring optional flag "sandboxArg"="0" 2025/06/21 17:08:17 parsed 1 programs [ 76.846424][ T40] audit: type=1400 audit(1750525699.836:116): avc: denied { unlink } for pid=6252 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.903081][ T6252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.688087][ T5298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.691404][ T5298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.694132][ T5298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.697060][ T5298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.699848][ T5298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.782266][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.785219][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.832133][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.836281][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.399245][ T40] audit: type=1401 audit(1750525703.386:117): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 80.682545][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 80.953819][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.957272][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.960617][ T6409] bridge_slave_0: entered allmulticast mode [ 80.967035][ T6409] bridge_slave_0: entered promiscuous mode [ 80.972694][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.975976][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.978404][ T6409] bridge_slave_1: entered allmulticast mode [ 80.982116][ T6409] bridge_slave_1: entered promiscuous mode [ 81.028017][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.033255][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.084239][ T6409] team0: Port device team_slave_0 added [ 81.087990][ T6409] team0: Port device team_slave_1 added [ 81.144915][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.147629][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.158033][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.164077][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.167019][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.177392][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.353918][ T1024] cfg80211: failed to load regulatory.db [ 81.368663][ T6409] hsr_slave_0: entered promiscuous mode [ 81.370951][ T6409] hsr_slave_1: entered promiscuous mode [ 81.919987][ T6409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.925327][ T6409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.929874][ T6409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.934859][ T6409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.997956][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.012207][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.019541][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.022101][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.029781][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.032116][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.184840][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.209996][ T6409] veth0_vlan: entered promiscuous mode [ 82.218228][ T6409] veth1_vlan: entered promiscuous mode [ 82.239166][ T6409] veth0_macvtap: entered promiscuous mode [ 82.249263][ T6409] veth1_macvtap: entered promiscuous mode [ 82.263969][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.273526][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.280593][ T6409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.284979][ T6409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.288464][ T6409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.291924][ T6409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/06/21 17:08:25 executed programs: 0 [ 82.408017][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.420766][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.433838][ T5993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.437194][ T5993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.441884][ T5993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.446476][ T5993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.451514][ T5993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.454018][ T6492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.454058][ T5993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.458525][ T6492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.461565][ T5298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.466184][ T6492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.472850][ T6500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.473532][ T6492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.478620][ T6492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.490512][ T5298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.496356][ T6495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.500449][ T5298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.511960][ T5298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.518093][ T5298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.524664][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.628927][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.780555][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.929381][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.971832][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 82.991434][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 83.044971][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 83.089281][ T6485] chnl_net:caif_netlink_parms(): no params data found [ 83.258725][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.261748][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.265454][ T6494] bridge_slave_0: entered allmulticast mode [ 83.269388][ T6494] bridge_slave_0: entered promiscuous mode [ 83.274334][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.276768][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.279072][ T6489] bridge_slave_0: entered allmulticast mode [ 83.283422][ T6489] bridge_slave_0: entered promiscuous mode [ 83.302343][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.304629][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.306885][ T6494] bridge_slave_1: entered allmulticast mode [ 83.309607][ T6494] bridge_slave_1: entered promiscuous mode [ 83.312605][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.317457][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.320457][ T6489] bridge_slave_1: entered allmulticast mode [ 83.323963][ T6489] bridge_slave_1: entered promiscuous mode [ 83.498129][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.501205][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.505040][ T6499] bridge_slave_0: entered allmulticast mode [ 83.509005][ T6499] bridge_slave_0: entered promiscuous mode [ 83.517083][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.529252][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.537046][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.569141][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.572256][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.577057][ T6499] bridge_slave_1: entered allmulticast mode [ 83.580921][ T6499] bridge_slave_1: entered promiscuous mode [ 83.668636][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.672434][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.678795][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.681893][ T6485] bridge_slave_0: entered allmulticast mode [ 83.686023][ T6485] bridge_slave_0: entered promiscuous mode [ 83.690539][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.694777][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.697845][ T6485] bridge_slave_1: entered allmulticast mode [ 83.701718][ T6485] bridge_slave_1: entered promiscuous mode [ 83.708225][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.770668][ T6489] team0: Port device team_slave_0 added [ 83.789771][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.795889][ T6494] team0: Port device team_slave_0 added [ 83.799806][ T6494] team0: Port device team_slave_1 added [ 83.846595][ T6489] team0: Port device team_slave_1 added [ 83.908224][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.910974][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.920068][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.924589][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.926853][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.935168][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.971597][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.988678][ T6499] team0: Port device team_slave_0 added [ 83.996350][ T6499] team0: Port device team_slave_1 added [ 83.999471][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.002258][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.013967][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.020685][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.070056][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.072333][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.081096][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.111195][ T6485] team0: Port device team_slave_0 added [ 84.131588][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.133897][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.143799][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.163645][ T6485] team0: Port device team_slave_1 added [ 84.200569][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.202996][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.212245][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.236744][ T6489] hsr_slave_0: entered promiscuous mode [ 84.239445][ T6489] hsr_slave_1: entered promiscuous mode [ 84.241642][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.244199][ T6489] Cannot create hsr debugfs directory [ 84.261824][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.264193][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.273103][ T6485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.281810][ T6494] hsr_slave_0: entered promiscuous mode [ 84.285148][ T6494] hsr_slave_1: entered promiscuous mode [ 84.288281][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.291456][ T6494] Cannot create hsr debugfs directory [ 84.323031][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.325118][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.332363][ T6485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.383512][ T6485] hsr_slave_0: entered promiscuous mode [ 84.386556][ T6485] hsr_slave_1: entered promiscuous mode [ 84.388662][ T6485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.391019][ T6485] Cannot create hsr debugfs directory [ 84.544047][ T6492] Bluetooth: hci3: command tx timeout [ 84.544055][ T5298] Bluetooth: hci0: command tx timeout [ 84.554435][ T5298] Bluetooth: hci2: command tx timeout [ 84.556626][ T5298] Bluetooth: hci1: command tx timeout [ 84.596479][ T6499] hsr_slave_0: entered promiscuous mode [ 84.598770][ T6499] hsr_slave_1: entered promiscuous mode [ 84.600815][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.603965][ T6499] Cannot create hsr debugfs directory [ 84.884080][ T6494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.892756][ T6494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.900363][ T6494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.907215][ T6494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.960272][ T6489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.965544][ T6489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.970205][ T6489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.975405][ T6489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.063596][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.084609][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.091698][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.100521][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.103499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.115457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.117773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.124620][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.135813][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.138735][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.151101][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.153727][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.339197][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.370116][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.390576][ T6489] veth0_vlan: entered promiscuous mode [ 85.404228][ T6489] veth1_vlan: entered promiscuous mode [ 85.422934][ T6494] veth0_vlan: entered promiscuous mode [ 85.431862][ T6494] veth1_vlan: entered promiscuous mode [ 85.449270][ T6489] veth0_macvtap: entered promiscuous mode [ 85.457990][ T6489] veth1_macvtap: entered promiscuous mode [ 85.477249][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.484846][ T6494] veth0_macvtap: entered promiscuous mode [ 85.489902][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.507350][ T6489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.510940][ T6489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.520917][ T6489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.524766][ T6489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.530466][ T6494] veth1_macvtap: entered promiscuous mode [ 85.562769][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.594081][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.609216][ T6494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612097][ T6494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616091][ T6494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.618902][ T6494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.623986][ T46] bridge_slave_1: left allmulticast mode [ 85.625837][ T46] bridge_slave_1: left promiscuous mode [ 85.628261][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.635330][ T46] bridge_slave_0: left allmulticast mode [ 85.637620][ T46] bridge_slave_0: left promiscuous mode [ 85.640010][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.860988][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.866929][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.871891][ T46] bond0 (unregistering): Released all slaves [ 85.915696][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.918163][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.955369][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.958734][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.969012][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.976415][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.988836][ T46] hsr_slave_0: left promiscuous mode [ 85.991340][ T46] hsr_slave_1: left promiscuous mode [ 85.993868][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.997011][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.001235][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.004534][ T40] audit: type=1400 audit(1750525708.996:118): avc: denied { read write } for pid=6642 comm="syz.1.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.011731][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.012057][ T40] audit: type=1400 audit(1750525708.996:119): avc: denied { open } for pid=6642 comm="syz.1.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.022062][ T40] audit: type=1400 audit(1750525708.996:120): avc: denied { ioctl } for pid=6642 comm="syz.1.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.047572][ T46] veth1_macvtap: left promiscuous mode [ 86.049904][ T46] veth0_macvtap: left promiscuous mode [ 86.052334][ T46] veth1_vlan: left promiscuous mode [ 86.055454][ T46] veth0_vlan: left promiscuous mode [ 86.243044][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.393162][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 86.403681][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 86.408863][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 86.413700][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 86.422756][ T34] usb 6-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 86.426719][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.430017][ T34] usb 6-1: Product: syz [ 86.431812][ T34] usb 6-1: Manufacturer: syz [ 86.434241][ T34] usb 6-1: SerialNumber: syz [ 86.445323][ T34] usb 6-1: config 0 descriptor?? [ 86.466487][ T34] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 86.470970][ T34] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 86.551957][ T46] team0 (unregistering): Port device team_slave_1 removed [ 86.601648][ T46] team0 (unregistering): Port device team_slave_0 removed [ 86.623144][ T6492] Bluetooth: hci0: command tx timeout [ 86.624877][ T5298] Bluetooth: hci1: command tx timeout [ 86.624922][ T63] Bluetooth: hci2: command tx timeout [ 86.625022][ T63] Bluetooth: hci3: command tx timeout [ 86.723785][ T34] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 86.726741][ T34] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 86.730012][ T34] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 86.732968][ T34] em28xx 6-1:0.0: No AC97 audio processor [ 86.735852][ T34] em28xx 6-1:0.0: We currently don't support analog TV or stream capture on dual tuners. [ 86.805420][ T34] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 86.809571][ T34] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 86.813536][ T34] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 86.816439][ T34] em28xx 6-1:0.0: No AC97 audio processor [ 87.036619][ T34] usb 6-1: USB disconnect, device number 2 [ 87.038896][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.039328][ T34] em28xx 6-1:0.0: Disconnecting em28xx #1 [ 87.041596][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.043569][ T34] em28xx 6-1:0.0: Disconnecting em28xx [ 87.045903][ T34] em28xx 6-1:0.0: Freeing device [ 87.049595][ T34] em28xx 6-1:0.0: Freeing device [ 87.336363][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.505886][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 87.509673][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 87.514023][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 87.517445][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 87.526811][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 87.530178][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.532708][ T10] usb 7-1: Product: syz [ 87.536655][ T10] usb 7-1: Manufacturer: syz [ 87.538336][ T10] usb 7-1: SerialNumber: syz [ 87.541350][ T10] usb 7-1: config 0 descriptor?? [ 87.549026][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 87.552390][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 87.573083][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.746314][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 87.753600][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 87.758067][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 56, changing to 7 [ 87.762357][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 57832, setting to 1024 [ 87.778218][ T34] usb 6-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=4e.d1 [ 87.782130][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.788248][ T34] usb 6-1: Product: syz [ 87.790116][ T34] usb 6-1: Manufacturer: syz [ 87.792165][ T34] usb 6-1: SerialNumber: syz [ 87.797569][ T34] usb 6-1: config 0 descriptor?? [ 87.802677][ T34] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0265, interface 0, class 0) [ 87.807156][ T34] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 87.813552][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 87.816185][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 87.818904][ T10] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 87.821046][ T10] em28xx 7-1:0.0: No AC97 audio processor [ 87.822852][ T10] non-slab/vmalloc memory [ 87.827473][ T10] list_add corruption. prev->next should be next (ffffffff8fdc0e80), but was ffffffff8af4fa1e. (prev=ffff8880521cc250). [ 87.833380][ T10] ------------[ cut here ]------------ [ 87.835744][ T10] kernel BUG at lib/list_debug.c:32! [ 87.838453][ T10] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 87.843244][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc2-syzkaller-g739a6c93cc75 #0 PREEMPT(full) [ 87.847935][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.852347][ T10] Workqueue: usb_hub_wq hub_event [ 87.854444][ T10] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 87.857178][ T10] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 7a 15 8c 48 89 ee e8 f6 68 b9 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 7b 15 8c e8 de 68 b9 [ 87.865009][ T10] RSP: 0018:ffffc900000d6e88 EFLAGS: 00010282 [ 87.867546][ T10] RAX: 0000000000000075 RBX: ffff888053a44000 RCX: ffffffff819b00b9 [ 87.870858][ T10] RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 [ 87.874181][ T10] RBP: ffffffff8fdc0e80 R08: 0000000000000005 R09: 0000000000000000 [ 87.877432][ T10] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888053a44250 [ 87.880692][ T10] R13: ffffffff8fdc0e88 R14: ffff888053a441a8 R15: ffff888053a45a14 [ 87.884021][ T10] FS: 0000000000000000(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 87.887603][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.890240][ T10] CR2: 00007f58554ad2a0 CR3: 0000000050d45000 CR4: 0000000000352ef0 [ 87.893439][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.896452][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.899002][ T10] Call Trace: [ 87.900065][ T10] [ 87.901084][ T10] em28xx_init_extension+0x48/0x200 [ 87.902733][ T10] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 87.904989][ T10] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 87.907288][ T10] ? rcu_is_watching+0x12/0xc0 [ 87.908799][ T10] ? lockdep_init_map_type+0x5c/0x280 [ 87.910502][ T10] ? lockdep_init_map_type+0x5c/0x280 [ 87.912253][ T10] em28xx_usb_probe+0x1285/0x3770 [ 87.913942][ T10] usb_probe_interface+0x303/0x9c0 [ 87.915618][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 87.917407][ T10] really_probe+0x241/0xa90 [ 87.919246][ T10] __driver_probe_device+0x1de/0x440 [ 87.921205][ T10] driver_probe_device+0x4c/0x1b0 [ 87.922864][ T10] __device_attach_driver+0x1df/0x310 [ 87.924868][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 87.927321][ T10] bus_for_each_drv+0x159/0x1e0 [ 87.928958][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.930803][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.932449][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.934543][ T10] __device_attach+0x1e4/0x4b0 [ 87.936272][ T10] ? __pfx___device_attach+0x10/0x10 [ 87.938005][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 87.940183][ T10] bus_probe_device+0x17f/0x1c0 [ 87.942204][ T10] device_add+0x1148/0x1a70 [ 87.944120][ T10] ? __pfx_device_add+0x10/0x10 [ 87.945985][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 87.948204][ T10] usb_set_configuration+0x1187/0x1e20 [ 87.950495][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 87.952945][ T10] usb_generic_driver_probe+0xb1/0x110 [ 87.955241][ T10] usb_probe_device+0xef/0x3e0 [ 87.957233][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 87.959529][ T10] really_probe+0x241/0xa90 [ 87.961445][ T10] __driver_probe_device+0x1de/0x440 [ 87.963632][ T10] ? usb_driver_applicable+0x1c7/0x220 [ 87.965368][ T10] driver_probe_device+0x4c/0x1b0 [ 87.966943][ T10] __device_attach_driver+0x1df/0x310 [ 87.968627][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 87.971101][ T10] bus_for_each_drv+0x159/0x1e0 [ 87.973164][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.975216][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.977324][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.979666][ T10] __device_attach+0x1e4/0x4b0 [ 87.981559][ T10] ? __pfx___device_attach+0x10/0x10 [ 87.983738][ T10] ? do_raw_spin_unlock+0x172/0x230 [ 87.985797][ T10] bus_probe_device+0x17f/0x1c0 [ 87.987547][ T10] device_add+0x1148/0x1a70 [ 87.989165][ T10] ? __pfx_device_add+0x10/0x10 [ 87.990755][ T10] ? add_device_randomness+0xb7/0xf0 [ 87.992755][ T10] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 87.995262][ T10] usb_new_device+0xd07/0x1a20 [ 87.997261][ T10] ? do_raw_spin_lock+0x12c/0x2b0 [ 87.998968][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 88.001090][ T10] ? mark_held_locks+0x49/0x80 [ 88.003072][ T10] hub_event+0x2eb7/0x4fa0 [ 88.004983][ T10] ? __pfx_hub_event+0x10/0x10 [ 88.006979][ T10] ? interval_tree_remove+0x550/0xee0 [ 88.009015][ T10] ? rcu_is_watching+0x12/0xc0 [ 88.010996][ T10] process_one_work+0x9cc/0x1b70 [ 88.013038][ T10] ? __pfx_process_srcu+0x10/0x10 [ 88.015151][ T10] ? __pfx_process_one_work+0x10/0x10 [ 88.017342][ T10] ? assign_work+0x1a0/0x250 [ 88.019269][ T10] worker_thread+0x6c8/0xf10 [ 88.021161][ T10] ? __kthread_parkme+0x19e/0x250 [ 88.023230][ T10] ? __pfx_worker_thread+0x10/0x10 [ 88.025276][ T10] kthread+0x3c2/0x780 [ 88.026623][ T10] ? __pfx_kthread+0x10/0x10 [ 88.028092][ T10] ? rcu_is_watching+0x12/0xc0 [ 88.029601][ T10] ? __pfx_kthread+0x10/0x10 [ 88.031076][ T10] ret_from_fork+0x5d4/0x6f0 [ 88.032594][ T10] ? __pfx_kthread+0x10/0x10 [ 88.034288][ T10] ret_from_fork_asm+0x1a/0x30 [ 88.035935][ T10] [ 88.037215][ T10] Modules linked in: [ 88.039484][ T10] ---[ end trace 0000000000000000 ]--- [ 88.044086][ T10] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 88.046485][ T10] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 a0 7a 15 8c 48 89 ee e8 f6 68 b9 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 20 7b 15 8c e8 de 68 b9 [ 88.053062][ T10] RSP: 0018:ffffc900000d6e88 EFLAGS: 00010282 [ 88.055478][ T10] RAX: 0000000000000075 RBX: ffff888053a44000 RCX: ffffffff819b00b9 [ 88.057934][ T10] RDX: 0000000000000000 RSI: ffffffff819b7f46 RDI: 0000000000000005 [ 88.060418][ T10] RBP: ffffffff8fdc0e80 R08: 0000000000000005 R09: 0000000000000000 [ 88.063100][ T10] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888053a44250 [ 88.065707][ T10] R13: ffffffff8fdc0e88 R14: ffff888053a441a8 R15: ffff888053a45a14 [ 88.068148][ T10] FS: 0000000000000000(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 88.070941][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.073203][ T10] CR2: 0000001b3125ffff CR3: 0000000025550000 CR4: 0000000000352ef0 [ 88.074018][ T6499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.076422][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.081099][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.082681][ T6499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.083636][ T10] Kernel panic - not syncing: Fatal exception [ 88.086020][ T10] Kernel Offset: disabled