Warning: Permanently added '[localhost]:23971' (ED25519) to the list of known hosts. 2024/10/06 09:45:54 ignoring optional flag "sandboxArg"="0" 2024/10/06 09:45:54 ignoring optional flag "type"="qemu" 2024/10/06 09:45:54 parsed 1 programs [ 58.157324][ T39] audit: type=1400 audit(1728207954.492:121): avc: denied { getattr } for pid=5450 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.164487][ T39] audit: type=1400 audit(1728207954.492:122): avc: denied { read } for pid=5450 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.172159][ T39] audit: type=1400 audit(1728207954.492:123): avc: denied { open } for pid=5450 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.174465][ T5456] cgroup: Unknown subsys name 'net' [ 58.180228][ T39] audit: type=1400 audit(1728207954.512:124): avc: denied { mounton } for pid=5456 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 58.183689][ T5456] cgroup: Unknown subsys name 'cpuset' [ 58.192040][ T5456] cgroup: Unknown subsys name 'rlimit' 2024/10/06 09:45:54 executed programs: 0 [ 59.293815][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.297231][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.300527][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.304020][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.307026][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.310027][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.318440][ T39] audit: type=1400 audit(1728207955.652:125): avc: denied { mounton } for pid=5461 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 59.382620][ T5461] chnl_net:caif_netlink_parms(): no params data found [ 59.445082][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.447612][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.450279][ T5461] bridge_slave_0: entered allmulticast mode [ 59.453085][ T5461] bridge_slave_0: entered promiscuous mode [ 59.456934][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.459532][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.462102][ T5461] bridge_slave_1: entered allmulticast mode [ 59.465189][ T5461] bridge_slave_1: entered promiscuous mode [ 59.485000][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.489542][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.509123][ T5461] team0: Port device team_slave_0 added [ 59.513366][ T5461] team0: Port device team_slave_1 added [ 59.533520][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.535464][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.542430][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.546188][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.548071][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.555399][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.579695][ T5461] hsr_slave_0: entered promiscuous mode [ 59.581970][ T5461] hsr_slave_1: entered promiscuous mode [ 59.636386][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.638303][ T5461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.640520][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.642322][ T5461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.667553][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.673529][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.676275][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.686532][ T5461] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.692330][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.694175][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.700544][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.702438][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.732335][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.952436][ T5461] veth0_vlan: entered promiscuous mode [ 59.957968][ T5461] veth1_vlan: entered promiscuous mode [ 59.974557][ T5461] veth0_macvtap: entered promiscuous mode [ 59.979020][ T5461] veth1_macvtap: entered promiscuous mode [ 59.990475][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.998242][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.036251][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.038446][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.054356][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.057102][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.063764][ T39] audit: type=1400 audit(1728207956.402:126): avc: denied { mounton } for pid=5461 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.091035][ T39] audit: type=1400 audit(1728207956.432:127): avc: denied { write } for pid=5481 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.097594][ T39] audit: type=1400 audit(1728207956.432:128): avc: denied { ioctl } for pid=5481 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=761 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.338585][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.505488][ T9] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 60.508974][ T9] usb 5-1: config 0 has no interface number 0 [ 60.511407][ T9] usb 5-1: config 0 interface 130 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 60.515600][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=f3.4a [ 60.519009][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.524903][ T9] usb 5-1: config 0 descriptor?? [ 60.530265][ T9] em28xx 5-1:0.130: New device @ 480 Mbps (2040:8265, interface 130, class 130) [ 60.533424][ T9] em28xx 5-1:0.130: Audio interface 130 found (Vendor Class) [ 60.798996][ T9] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 60.801714][ T9] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 60.804677][ T9] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 60.807351][ T9] em28xx 5-1:0.130: No AC97 audio processor [ 60.810333][ T9] em28xx 5-1:0.130: We currently don't support analog TV or stream capture on dual tuners. [ 60.878747][ T9] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 60.881675][ T9] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 60.884726][ T9] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 60.887428][ T9] em28xx 5-1:0.130: No AC97 audio processor [ 61.095146][ T9] usb 5-1: USB disconnect, device number 2 [ 61.097449][ T9] em28xx 5-1:0.130: Disconnecting em28xx #1 [ 61.099122][ T9] em28xx 5-1:0.130: Disconnecting em28xx [ 61.104214][ T9] em28xx 5-1:0.130: Freeing device [ 61.105663][ T9] em28xx 5-1:0.130: Freeing device [ 61.316314][ T39] audit: type=1400 audit(1728207957.652:129): avc: denied { search } for pid=5488 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.322185][ T39] audit: type=1400 audit(1728207957.662:130): avc: denied { read } for pid=5489 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.369482][ T66] Bluetooth: hci0: command tx timeout [ 61.608566][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.780991][ T9] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 61.783607][ T9] usb 5-1: config 0 has no interface number 0 [ 61.785394][ T9] usb 5-1: config 0 interface 130 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.788417][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=f3.4a [ 61.790836][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.794677][ T9] usb 5-1: config 0 descriptor?? [ 61.802549][ T9] em28xx 5-1:0.130: New device @ 480 Mbps (2040:8265, interface 130, class 130) [ 61.805189][ T9] em28xx 5-1:0.130: Audio interface 130 found (Vendor Class) [ 62.058854][ T9] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 62.060837][ T9] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 62.062931][ T9] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 62.064838][ T9] em28xx 5-1:0.130: No AC97 audio processor [ 62.066411][ T9] list_add corruption. prev->next should be next (ffffffff8f95afc0), but was ffffffff81eec3a3. (prev=ffff8880271d4250). [ 62.070452][ T9] ------------[ cut here ]------------ [ 62.071931][ T9] kernel BUG at lib/list_debug.c:32! [ 62.073404][ T9] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 62.076288][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc1-syzkaller-g8f602276d390 #0 [ 62.079605][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.082485][ T9] Workqueue: usb_hub_wq hub_event [ 62.083879][ T9] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 62.085849][ T9] Code: d8 fc 90 0f 0b 48 89 d9 48 c7 c7 40 a2 d1 8b e8 a8 91 d8 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 a2 d1 8b 48 89 de e8 93 91 d8 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 a3 d1 8b e8 7b 91 d8 [ 62.090953][ T9] RSP: 0018:ffffc900000c6f00 EFLAGS: 00010282 [ 62.092529][ T9] RAX: 0000000000000075 RBX: ffffffff8f95afc0 RCX: ffffffff816d4599 [ 62.094548][ T9] RDX: 0000000000000000 RSI: ffffffff816dee96 RDI: 0000000000000005 [ 62.096928][ T9] RBP: ffff88803049c250 R08: 0000000000000005 R09: 0000000000000000 [ 62.098980][ T9] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88803049c250 [ 62.101039][ T9] R13: ffff88803049c000 R14: ffff88803049da04 R15: ffff888031231800 [ 62.103130][ T9] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 62.106349][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.108241][ T9] CR2: 00007efda4d8d090 CR3: 0000000029548000 CR4: 0000000000352ef0 [ 62.110305][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.112368][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.114366][ T9] Call Trace: [ 62.115202][ T9] [ 62.115979][ T9] ? die+0x31/0x80 [ 62.117033][ T9] ? do_trap+0x232/0x430 [ 62.118152][ T9] ? __list_add_valid_or_report+0xbe/0x100 [ 62.119682][ T9] ? __list_add_valid_or_report+0xbe/0x100 [ 62.121231][ T9] ? do_error_trap+0xf4/0x230 [ 62.122471][ T9] ? __list_add_valid_or_report+0xbe/0x100 [ 62.124011][ T9] ? handle_invalid_op+0x34/0x40 [ 62.125332][ T9] ? __list_add_valid_or_report+0xbe/0x100 [ 62.126880][ T9] ? exc_invalid_op+0x2e/0x50 [ 62.128341][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 62.130168][ T9] ? __wake_up_klogd.part.0+0x99/0xf0 [ 62.132113][ T9] ? vprintk+0x86/0xa0 [ 62.133625][ T9] ? __list_add_valid_or_report+0xbe/0x100 [ 62.135731][ T9] em28xx_init_extension+0x48/0x200 [ 62.137579][ T9] em28xx_init_dev.constprop.0+0x197b/0x3090 [ 62.139732][ T9] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 62.141826][ T9] ? lockdep_init_map_type+0x16d/0x7d0 [ 62.143625][ T9] ? rcu_is_watching+0x12/0xc0 [ 62.145215][ T9] ? lockdep_init_map_type+0x16d/0x7d0 [ 62.146996][ T9] ? __raw_spin_lock_init+0x3a/0x110 [ 62.148748][ T9] em28xx_usb_probe+0x1262/0x3720 [ 62.150424][ T9] usb_probe_interface+0x309/0x9d0 [ 62.152149][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 62.153991][ T9] really_probe+0x23e/0xa90 [ 62.155485][ T9] __driver_probe_device+0x1de/0x440 [ 62.157217][ T9] driver_probe_device+0x4c/0x1b0 [ 62.158836][ T9] __device_attach_driver+0x1df/0x310 [ 62.160572][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 62.162513][ T9] bus_for_each_drv+0x157/0x1e0 [ 62.164129][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.165893][ T9] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.167600][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.169504][ T9] __device_attach+0x1e8/0x4b0 [ 62.171092][ T9] ? __pfx___device_attach+0x10/0x10 [ 62.172827][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 62.174538][ T9] bus_probe_device+0x17f/0x1c0 [ 62.176146][ T9] device_add+0x114b/0x1a70 [ 62.177638][ T9] ? __pfx_device_add+0x10/0x10 [ 62.179237][ T9] ? mark_held_locks+0x9f/0xe0 [ 62.180789][ T9] usb_set_configuration+0x10cb/0x1c50 [ 62.182565][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 62.184591][ T9] usb_generic_driver_probe+0xb1/0x110 [ 62.186395][ T9] usb_probe_device+0xec/0x3e0 [ 62.187961][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 62.189720][ T9] really_probe+0x23e/0xa90 [ 62.191221][ T9] __driver_probe_device+0x1de/0x440 [ 62.192966][ T9] ? usb_driver_applicable+0x1c7/0x220 [ 62.194742][ T9] driver_probe_device+0x4c/0x1b0 [ 62.196415][ T9] __device_attach_driver+0x1df/0x310 [ 62.198188][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 62.200144][ T9] bus_for_each_drv+0x157/0x1e0 [ 62.201744][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.203508][ T9] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.205237][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.207162][ T9] __device_attach+0x1e8/0x4b0 [ 62.208779][ T9] ? __pfx___device_attach+0x10/0x10 [ 62.210544][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 62.212275][ T9] bus_probe_device+0x17f/0x1c0 [ 62.213852][ T9] device_add+0x114b/0x1a70 [ 62.215354][ T9] ? __pfx_device_add+0x10/0x10 [ 62.216978][ T9] ? usb_detect_static_quirks+0x335/0x3e0 [ 62.218873][ T9] usb_new_device+0xd90/0x1a10 [ 62.220444][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 62.222239][ T9] hub_event+0x2d9a/0x4e10 [ 62.223708][ T9] ? __pfx_hub_event+0x10/0x10 [ 62.225342][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.227188][ T9] ? rcu_is_watching+0x12/0xc0 [ 62.228788][ T9] ? trace_lock_acquire+0x14a/0x1d0 [ 62.230506][ T9] ? process_one_work+0x921/0x1ba0 [ 62.232013][ T9] ? lock_acquire+0x2f/0xb0 [ 62.233348][ T9] ? process_one_work+0x921/0x1ba0 [ 62.234844][ T9] process_one_work+0x9c5/0x1ba0 [ 62.236483][ T9] ? __pfx_hub_event+0x10/0x10 [ 62.238042][ T9] ? __pfx_process_one_work+0x10/0x10 [ 62.239799][ T9] ? assign_work+0x1a0/0x250 [ 62.241351][ T9] worker_thread+0x6c8/0xf00 [ 62.242874][ T9] ? __kthread_parkme+0x148/0x220 [ 62.244564][ T9] ? __pfx_worker_thread+0x10/0x10 [ 62.246231][ T9] kthread+0x2c1/0x3a0 [ 62.247586][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.249291][ T9] ? __pfx_kthread+0x10/0x10 [ 62.250791][ T9] ret_from_fork+0x45/0x80 [ 62.252214][ T9] ? __pfx_kthread+0x10/0x10 [ 62.253704][ T9] ret_from_fork_asm+0x1a/0x30 [ 62.255289][ T9] [ 62.256325][ T9] Modules linked in: [ 62.257928][ T9] ---[ end trace 0000000000000000 ]--- [ 62.261438][ T9] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 62.263533][ T9] Code: d8 fc 90 0f 0b 48 89 d9 48 c7 c7 40 a2 d1 8b e8 a8 91 d8 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 a2 d1 8b 48 89 de e8 93 91 d8 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 a3 d1 8b e8 7b 91 d8 [ 62.269859][ T9] RSP: 0018:ffffc900000c6f00 EFLAGS: 00010282 [ 62.271852][ T9] RAX: 0000000000000075 RBX: ffffffff8f95afc0 RCX: ffffffff816d4599 [ 62.274428][ T9] RDX: 0000000000000000 RSI: ffffffff816dee96 RDI: 0000000000000005 [ 62.276903][ T9] RBP: ffff88803049c250 R08: 0000000000000005 R09: 0000000000000000 [ 62.279609][ T9] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88803049c250 [ 62.282219][ T9] R13: ffff88803049c000 R14: ffff88803049da04 R15: ffff888031231800 [ 62.284775][ T9] FS: 0000000000000000(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 62.287625][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.289862][ T9] CR2: 00007efda4d8d090 CR3: 0000000029548000 CR4: 0000000000352ef0 [ 62.292379][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.294928][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.297443][ T9] Kernel panic - not syncing: Fatal exception [ 62.299920][ T9] Kernel Offset: disabled [ 62.301316][ T9] Rebooting in 86400 seconds..