Warning: Permanently added '[localhost]:55569' (ED25519) to the list of known hosts. 2023/11/14 19:18:38 ignoring optional flag "sandboxArg"="0" 2023/11/14 19:18:38 parsed 1 programs [ 73.113262][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 73.113277][ T37] audit: type=1400 audit(1699989518.833:200): avc: denied { getattr } for pid=5370 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.130128][ T37] audit: type=1400 audit(1699989518.833:201): avc: denied { read } for pid=5370 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.141822][ T37] audit: type=1400 audit(1699989518.833:202): avc: denied { open } for pid=5370 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.165461][ T37] audit: type=1400 audit(1699989518.893:203): avc: denied { mounton } for pid=5394 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.176159][ T37] audit: type=1400 audit(1699989518.893:204): avc: denied { mount } for pid=5394 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/11/14 19:18:38 executed programs: 0 [ 73.258123][ T4612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.262144][ T4612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.266992][ T4612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.272017][ T4612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.288429][ T4612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.293134][ T4612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.302653][ T37] audit: type=1400 audit(1699989519.023:205): avc: denied { mounton } for pid=5405 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.478022][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 73.588351][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.591063][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.593794][ T5405] bridge_slave_0: entered allmulticast mode [ 73.596924][ T5405] bridge_slave_0: entered promiscuous mode [ 73.602228][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.605730][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.609015][ T5405] bridge_slave_1: entered allmulticast mode [ 73.612485][ T5405] bridge_slave_1: entered promiscuous mode [ 73.656672][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.663431][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.722649][ T5405] team0: Port device team_slave_0 added [ 73.728816][ T5405] team0: Port device team_slave_1 added [ 73.793739][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.796628][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.807711][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.813390][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.815936][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.827534][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.922323][ T5405] hsr_slave_0: entered promiscuous mode [ 73.925795][ T5405] hsr_slave_1: entered promiscuous mode [ 74.620183][ T5405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.627382][ T5405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.634134][ T5405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.641204][ T5405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.716982][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.735714][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.750181][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.754204][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.768829][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.772282][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.860419][ T37] audit: type=1400 audit(1699989520.583:206): avc: denied { sys_module } for pid=5405 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.963716][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.010650][ T5405] veth0_vlan: entered promiscuous mode [ 75.021891][ T5405] veth1_vlan: entered promiscuous mode [ 75.062385][ T5405] veth0_macvtap: entered promiscuous mode [ 75.075121][ T5405] veth1_macvtap: entered promiscuous mode [ 75.092561][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.103352][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.111304][ T5405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.115775][ T5405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119119][ T5405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122571][ T5405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174518][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.178468][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.201335][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.205245][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.210942][ T37] audit: type=1400 audit(1699989520.933:207): avc: denied { mounton } for pid=5405 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.242872][ T37] audit: type=1400 audit(1699989520.963:208): avc: denied { ioctl } for pid=5460 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.257336][ T37] audit: type=1400 audit(1699989520.963:209): avc: denied { ioctl } for pid=5460 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.324213][ T4612] Bluetooth: hci0: command 0x0409 tx timeout [ 75.523752][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.981847][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 76.090156][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 76.094210][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=193 [ 76.099745][ T36] usb 5-1: SerialNumber: syz [ 76.123605][ T36] usb 5-1: config 0 descriptor?? [ 76.144964][ T5461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.170113][ T36] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 76.603662][ T4652] ------------[ cut here ]------------ [ 76.606498][ T4652] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.609760][ T4652] WARNING: CPU: 2 PID: 4652 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe47/0x1730 [ 76.614278][ T4652] Modules linked in: [ 76.616282][ T4652] CPU: 2 PID: 4652 Comm: acpid Not tainted 6.7.0-rc1-syzkaller-g9bacdd8996c7 #0 [ 76.622635][ T4652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 76.627437][ T4652] RIP: 0010:usb_submit_urb+0xe47/0x1730 [ 76.630036][ T4652] Code: 84 3c 02 00 00 e8 29 e3 06 fb 4c 89 ef e8 31 04 ef fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 00 d2 85 8b e8 fa 01 cd fa 90 <0f> 0b 90 90 e9 ed f8 ff ff e8 fb e2 06 fb 49 81 c4 c0 05 00 00 e9 [ 76.639031][ T4652] RSP: 0018:ffffc9000350f838 EFLAGS: 00010286 [ 76.641960][ T4652] RAX: 0000000000000000 RBX: ffff88801885a000 RCX: ffffffff814ca799 [ 76.645826][ T4652] RDX: ffff888027f55580 RSI: ffffffff814ca7a6 RDI: 0000000000000001 [ 76.649824][ T4652] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 76.653330][ T4652] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000003 [ 76.656663][ T4652] R13: ffff88802e9740a8 R14: ffff8880224e3ac0 R15: ffff88801885a07c [ 76.659648][ T4652] FS: 00007f69b848d740(0000) GS:ffff88806b800000(0000) knlGS:0000000000000000 [ 76.663197][ T4652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.666400][ T4652] CR2: 00007fe549d4f440 CR3: 0000000023cea000 CR4: 0000000000350ef0 [ 76.670548][ T4652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.674930][ T4652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.678540][ T4652] Call Trace: [ 76.680107][ T4652] [ 76.681507][ T4652] ? show_regs+0x8f/0xa0 [ 76.683699][ T4652] ? __warn+0xe6/0x390 [ 76.685596][ T4652] ? usb_submit_urb+0xe47/0x1730 [ 76.687923][ T4652] ? report_bug+0x3bc/0x580 [ 76.690038][ T4652] ? handle_bug+0x3d/0x70 [ 76.692057][ T4652] ? exc_invalid_op+0x17/0x40 [ 76.694378][ T4652] ? asm_exc_invalid_op+0x1a/0x20 [ 76.696727][ T4652] ? __warn_printk+0x199/0x350 [ 76.698794][ T4652] ? __warn_printk+0x1a6/0x350 [ 76.700776][ T4652] ? usb_submit_urb+0xe47/0x1730 [ 76.703204][ T4652] ? usb_submit_urb+0xe46/0x1730 [ 76.705510][ T4652] ? _raw_spin_unlock+0x1/0x40 [ 76.707747][ T4652] bcm5974_start_traffic+0xb8/0x170 [ 76.710203][ T4652] bcm5974_open+0x9e/0x160 [ 76.712337][ T4652] input_open_device+0x1c9/0x310 [ 76.714799][ T4652] ? bcm5974_resume+0xc0/0xc0 [ 76.716988][ T4652] mousedev_open_device+0xdc/0x140 [ 76.719153][ T4652] mousedev_open+0x2fc/0x580 [ 76.721013][ T4652] ? mousedev_connect+0x330/0x330 [ 76.723464][ T4652] chrdev_open+0x26d/0x6e0 [ 76.725534][ T4652] ? __unregister_chrdev+0x100/0x100 [ 76.728111][ T4652] ? fsnotify_perm.part.0+0x247/0x5c0 [ 76.730717][ T4652] do_dentry_open+0x8d6/0x18c0 [ 76.733173][ T4652] ? __unregister_chrdev+0x100/0x100 [ 76.735426][ T4652] ? may_open+0x1f2/0x400 [ 76.737214][ T4652] path_openat+0x1e5a/0x2c50 [ 76.739443][ T4652] ? path_lookupat+0x770/0x770 [ 76.741702][ T4652] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.744651][ T4652] do_filp_open+0x1de/0x430 [ 76.746834][ T4652] ? may_open_dev+0xf0/0xf0 [ 76.748995][ T4652] ? _raw_spin_unlock+0x28/0x40 [ 76.751725][ T4652] ? alloc_fd+0x2da/0x6c0 [ 76.754604][ T4652] do_sys_openat2+0x176/0x1e0 [ 76.756970][ T4652] ? build_open_flags+0x690/0x690 [ 76.759133][ T4652] ? sigprocmask+0xf1/0x330 [ 76.761051][ T4652] __x64_sys_openat+0x175/0x210 [ 76.763303][ T4652] ? __ia32_sys_open+0x1e0/0x1e0 [ 76.765364][ T4652] ? ksys_read+0x1a7/0x250 [ 76.767234][ T4652] ? syscall_enter_from_user_mode+0x7f/0x120 [ 76.769696][ T4652] do_syscall_64+0x40/0x110 [ 76.771596][ T4652] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.774311][ T4652] RIP: 0033:0x7f69b85579a4 [ 76.776343][ T4652] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 76.785513][ T4652] RSP: 002b:00007ffec395da00 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.789417][ T4652] RAX: ffffffffffffffda RBX: 00007ffec395dce8 RCX: 00007f69b85579a4 [ 76.793142][ T4652] RDX: 0000000000080800 RSI: 00007ffec395dbe8 RDI: 00000000ffffff9c [ 76.796785][ T4652] RBP: 00007ffec395dbe8 R08: 00000000000000f4 R09: 00007ffec395dbe8 [ 76.800601][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 76.804647][ T4652] R13: 0000000000000020 R14: 00007ffec395dce8 R15: 00007ffec395dbe8 [ 76.808603][ T4652] [ 76.810031][ T4652] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.812926][ T5455] usb 5-1: USB disconnect, device number 2 [ 76.815375][ T4652] CPU: 2 PID: 4652 Comm: acpid Not tainted 6.7.0-rc1-syzkaller-g9bacdd8996c7 #0 [ 76.819276][ T4652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 76.823937][ T4652] Call Trace: [ 76.825745][ T4652] [ 76.827381][ T4652] dump_stack_lvl+0xd9/0x1b0 [ 76.830001][ T4652] panic+0x6dc/0x790 [ 76.831996][ T4652] ? panic_smp_self_stop+0xa0/0xa0 [ 76.834376][ T4652] ? show_trace_log_lvl+0x363/0x4f0 [ 76.836808][ T4652] ? check_panic_on_warn+0x1f/0xb0 [ 76.839200][ T4652] ? usb_submit_urb+0xe47/0x1730 [ 76.841543][ T4652] check_panic_on_warn+0xab/0xb0 [ 76.843921][ T4652] __warn+0xf2/0x390 [ 76.845765][ T4652] ? usb_submit_urb+0xe47/0x1730 [ 76.848307][ T4652] report_bug+0x3bc/0x580 [ 76.850432][ T4652] handle_bug+0x3d/0x70 [ 76.852360][ T4652] exc_invalid_op+0x17/0x40 [ 76.854511][ T4652] asm_exc_invalid_op+0x1a/0x20 [ 76.856772][ T4652] RIP: 0010:usb_submit_urb+0xe47/0x1730 [ 76.859566][ T4652] Code: 84 3c 02 00 00 e8 29 e3 06 fb 4c 89 ef e8 31 04 ef fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 00 d2 85 8b e8 fa 01 cd fa 90 <0f> 0b 90 90 e9 ed f8 ff ff e8 fb e2 06 fb 49 81 c4 c0 05 00 00 e9 [ 76.869327][ T4652] RSP: 0018:ffffc9000350f838 EFLAGS: 00010286 [ 76.872142][ T4652] RAX: 0000000000000000 RBX: ffff88801885a000 RCX: ffffffff814ca799 [ 76.875815][ T4652] RDX: ffff888027f55580 RSI: ffffffff814ca7a6 RDI: 0000000000000001 [ 76.880743][ T4652] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 76.884499][ T4652] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000003 [ 76.887700][ T4652] R13: ffff88802e9740a8 R14: ffff8880224e3ac0 R15: ffff88801885a07c [ 76.890965][ T4652] ? __warn_printk+0x199/0x350 [ 76.892920][ T4652] ? __warn_printk+0x1a6/0x350 [ 76.895167][ T4652] ? usb_submit_urb+0xe46/0x1730 [ 76.897476][ T4652] ? _raw_spin_unlock+0x1/0x40 [ 76.899737][ T4652] bcm5974_start_traffic+0xb8/0x170 [ 76.902296][ T4652] bcm5974_open+0x9e/0x160 [ 76.904591][ T4652] input_open_device+0x1c9/0x310 [ 76.907240][ T4652] ? bcm5974_resume+0xc0/0xc0 [ 76.909776][ T4652] mousedev_open_device+0xdc/0x140 [ 76.912021][ T4652] mousedev_open+0x2fc/0x580 [ 76.914214][ T4652] ? mousedev_connect+0x330/0x330 [ 76.916529][ T4652] chrdev_open+0x26d/0x6e0 [ 76.918738][ T4652] ? __unregister_chrdev+0x100/0x100 [ 76.921599][ T4652] ? fsnotify_perm.part.0+0x247/0x5c0 [ 76.924221][ T4652] do_dentry_open+0x8d6/0x18c0 [ 76.926301][ T4652] ? __unregister_chrdev+0x100/0x100 [ 76.928484][ T4652] ? may_open+0x1f2/0x400 [ 76.930297][ T4652] path_openat+0x1e5a/0x2c50 [ 76.932259][ T4652] ? path_lookupat+0x770/0x770 [ 76.934299][ T4652] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 76.936931][ T4652] do_filp_open+0x1de/0x430 [ 76.939421][ T4652] ? may_open_dev+0xf0/0xf0 [ 76.942434][ T4652] ? _raw_spin_unlock+0x28/0x40 [ 76.944906][ T4652] ? alloc_fd+0x2da/0x6c0 [ 76.946799][ T4652] do_sys_openat2+0x176/0x1e0 [ 76.948856][ T4652] ? build_open_flags+0x690/0x690 [ 76.951225][ T4652] ? sigprocmask+0xf1/0x330 [ 76.953348][ T4652] __x64_sys_openat+0x175/0x210 [ 76.956341][ T4652] ? __ia32_sys_open+0x1e0/0x1e0 [ 76.959132][ T4652] ? ksys_read+0x1a7/0x250 [ 76.961020][ T4652] ? syscall_enter_from_user_mode+0x7f/0x120 [ 76.963984][ T4652] do_syscall_64+0x40/0x110 [ 76.966226][ T4652] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 76.969196][ T4652] RIP: 0033:0x7f69b85579a4 [ 76.971548][ T4652] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 76.981957][ T4652] RSP: 002b:00007ffec395da00 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.985627][ T4652] RAX: ffffffffffffffda RBX: 00007ffec395dce8 RCX: 00007f69b85579a4 [ 76.989002][ T4652] RDX: 0000000000080800 RSI: 00007ffec395dbe8 RDI: 00000000ffffff9c [ 76.992030][ T4652] RBP: 00007ffec395dbe8 R08: 00000000000000f4 R09: 00007ffec395dbe8 [ 76.995136][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 76.998767][ T4652] R13: 0000000000000020 R14: 00007ffec395dce8 R15: 00007ffec395dbe8 [ 77.002096][ T4652] [ 77.004234][ T4652] Kernel Offset: disabled [ 77.005979][ T4652] Rebooting in 86400 seconds..