[ 143.864320][ T40] audit: type=1400 audit(1775786010.194:116): avc: denied { transition } for pid=6143 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.873810][ T40] audit: type=1400 audit(1775786010.194:117): avc: denied { noatsecure } for pid=6143 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.882021][ T40] audit: type=1400 audit(1775786010.194:118): avc: denied { rlimitinh } for pid=6143 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 143.890642][ T40] audit: type=1400 audit(1775786010.194:119): avc: denied { siginh } for pid=6143 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:28337' (ED25519) to the list of known hosts. 2026/04/10 01:53:37 parsed 1 programs [ 151.538709][ T40] audit: type=1400 audit(1775786017.864:120): avc: denied { node_bind } for pid=6171 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 153.854447][ T40] audit: type=1400 audit(1775786020.184:121): avc: denied { read write } for pid=6192 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 153.865881][ T40] audit: type=1400 audit(1775786020.184:122): avc: denied { open } for pid=6192 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 153.942255][ T40] audit: type=1400 audit(1775786020.274:123): avc: denied { unlink } for pid=6192 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 154.285526][ T40] audit: type=1400 audit(1775786020.614:124): avc: denied { relabelto } for pid=6195 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 155.255499][ T6192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 157.739715][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.742617][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.769180][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.771929][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.136478][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 158.170379][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.175492][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.189802][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.195184][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.198094][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.314804][ T40] audit: type=1401 audit(1775786024.644:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 158.351921][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.354982][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.358334][ T6217] bridge_slave_0: entered allmulticast mode [ 158.372179][ T6217] bridge_slave_0: entered promiscuous mode [ 158.378055][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.381576][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.384748][ T6217] bridge_slave_1: entered allmulticast mode [ 158.388732][ T6217] bridge_slave_1: entered promiscuous mode [ 158.655515][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.663636][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.807054][ T6217] team0: Port device team_slave_0 added [ 158.811864][ T6217] team0: Port device team_slave_1 added [ 158.874669][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.876994][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.887910][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.937922][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.941227][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.956729][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.179908][ T6217] hsr_slave_0: entered promiscuous mode [ 159.183554][ T6217] hsr_slave_1: entered promiscuous mode [ 159.571447][ T6217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.577753][ T6217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.584659][ T6217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.591769][ T6217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.647337][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.658825][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.665863][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.669148][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.676801][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.679806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.739521][ T40] audit: type=1400 audit(1775786026.064:126): avc: denied { sys_module } for pid=6217 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.808422][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.837450][ T6217] veth0_vlan: entered promiscuous mode [ 159.844791][ T6217] veth1_vlan: entered promiscuous mode [ 159.866763][ T6217] veth0_macvtap: entered promiscuous mode [ 159.873216][ T6217] veth1_macvtap: entered promiscuous mode [ 159.885686][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.905960][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.916174][ T106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.919128][ T106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.925093][ T106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.928043][ T106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 01:53:46 executed programs: 0 [ 160.140054][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.145026][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.148263][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.151631][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.154531][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.167554][ T6009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.186142][ T6301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.191284][ T6301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.195708][ T6303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.196390][ T6301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.199448][ T6303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.207203][ T6303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.207304][ T6301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.213579][ T6301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.213635][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.215198][ T6304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.218425][ T6301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.227956][ T6301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.244035][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.247677][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.477031][ T6293] chnl_net:caif_netlink_parms(): no params data found [ 160.644869][ T6302] chnl_net:caif_netlink_parms(): no params data found [ 160.677795][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.680979][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.683624][ T6293] bridge_slave_0: entered allmulticast mode [ 160.687294][ T6293] bridge_slave_0: entered promiscuous mode [ 160.694362][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.697687][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.701371][ T6293] bridge_slave_1: entered allmulticast mode [ 160.705630][ T6293] bridge_slave_1: entered promiscuous mode [ 160.808401][ T6293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.815639][ T6293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.831886][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 160.843916][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 160.934134][ T6293] team0: Port device team_slave_0 added [ 160.953684][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.956122][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.958622][ T6302] bridge_slave_0: entered allmulticast mode [ 160.962721][ T6302] bridge_slave_0: entered promiscuous mode [ 160.991265][ T6293] team0: Port device team_slave_1 added [ 160.993860][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.996341][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.998773][ T6302] bridge_slave_1: entered allmulticast mode [ 161.003454][ T6302] bridge_slave_1: entered promiscuous mode [ 161.140510][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.143035][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.153513][ T6293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.177575][ T6302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.182975][ T6302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.203223][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.205763][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.208565][ T6296] bridge_slave_0: entered allmulticast mode [ 161.212586][ T6296] bridge_slave_0: entered promiscuous mode [ 161.218381][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.221660][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.232660][ T6293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.253937][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.256383][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.258935][ T6298] bridge_slave_0: entered allmulticast mode [ 161.262829][ T6298] bridge_slave_0: entered promiscuous mode [ 161.289482][ T6302] team0: Port device team_slave_0 added [ 161.292061][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.294482][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.297276][ T6296] bridge_slave_1: entered allmulticast mode [ 161.300436][ T6296] bridge_slave_1: entered promiscuous mode [ 161.313086][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.316145][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.321250][ T6298] bridge_slave_1: entered allmulticast mode [ 161.325707][ T6298] bridge_slave_1: entered promiscuous mode [ 161.356665][ T6302] team0: Port device team_slave_1 added [ 161.400179][ T73] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.458245][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.464588][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.513921][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.527724][ T73] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.538788][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.557430][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.561163][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.569574][ T6302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.574322][ T6302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.576736][ T6302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.585701][ T6302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.621453][ T6293] hsr_slave_0: entered promiscuous mode [ 161.624765][ T6293] hsr_slave_1: entered promiscuous mode [ 161.627949][ T6293] debugfs: 'hsr0' already exists in 'hsr' [ 161.630315][ T6293] Cannot create hsr debugfs directory [ 161.716545][ T6298] team0: Port device team_slave_0 added [ 161.719600][ T6296] team0: Port device team_slave_0 added [ 161.723320][ T6296] team0: Port device team_slave_1 added [ 161.753296][ T6298] team0: Port device team_slave_1 added [ 161.830238][ T6302] hsr_slave_0: entered promiscuous mode [ 161.834157][ T6302] hsr_slave_1: entered promiscuous mode [ 161.837496][ T6302] debugfs: 'hsr0' already exists in 'hsr' [ 161.839993][ T6302] Cannot create hsr debugfs directory [ 161.868397][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.871018][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.878887][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.884327][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.887017][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.896575][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.908164][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.910581][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.919669][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.925042][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.927673][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.936203][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.116546][ T6298] hsr_slave_0: entered promiscuous mode [ 162.119136][ T6298] hsr_slave_1: entered promiscuous mode [ 162.121421][ T6298] debugfs: 'hsr0' already exists in 'hsr' [ 162.123328][ T6298] Cannot create hsr debugfs directory [ 162.142949][ T6296] hsr_slave_0: entered promiscuous mode [ 162.145327][ T6296] hsr_slave_1: entered promiscuous mode [ 162.147544][ T6296] debugfs: 'hsr0' already exists in 'hsr' [ 162.149483][ T6296] Cannot create hsr debugfs directory [ 162.189674][ T6009] Bluetooth: hci0: command tx timeout [ 162.269638][ T6009] Bluetooth: hci1: command tx timeout [ 162.279442][ T6009] Bluetooth: hci3: command tx timeout [ 162.281011][ T6301] Bluetooth: hci2: command tx timeout [ 162.677072][ T6293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.689838][ T6293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.703543][ T6293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.714191][ T6293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.749394][ T6302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.758581][ T6302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.771268][ T6302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.778034][ T6302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.816378][ T6293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.829000][ T73] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.852357][ T6293] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.859854][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.862685][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.871710][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.874602][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.897001][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.912157][ T6302] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.924058][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.926690][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.932765][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.935104][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.023904][ T6293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.048493][ T6293] veth0_vlan: entered promiscuous mode [ 163.054808][ T6293] veth1_vlan: entered promiscuous mode [ 163.072158][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.091986][ T6293] veth0_macvtap: entered promiscuous mode [ 163.098521][ T6293] veth1_macvtap: entered promiscuous mode [ 163.121989][ T6293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.131393][ T6293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.143470][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.147095][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.151985][ T6302] veth0_vlan: entered promiscuous mode [ 163.154495][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.158213][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.183697][ T6302] veth1_vlan: entered promiscuous mode [ 163.224976][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.227598][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.232298][ T6302] veth0_macvtap: entered promiscuous mode [ 163.238268][ T6302] veth1_macvtap: entered promiscuous mode [ 163.265317][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.273028][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.273457][ T6302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.275824][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.286811][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.306051][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.308727][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.315279][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.332529][ T40] audit: type=1400 audit(1775786029.664:127): avc: denied { read write } for pid=6399 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.344514][ T40] audit: type=1400 audit(1775786029.664:128): avc: denied { open } for pid=6399 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.352825][ T40] audit: type=1400 audit(1775786029.664:129): avc: denied { ioctl } for pid=6399 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 163.377593][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.384254][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.402964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.405771][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.570112][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.689543][ T6401] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 163.738402][ T59] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 163.747946][ T59] usb 5-1: config 0 has no interface number 0 [ 163.751278][ T59] usb 5-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.755931][ T59] usb 5-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 163.761986][ T59] usb 5-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.771646][ T59] usb 5-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 163.774681][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.777894][ T59] usb 5-1: Product: syz [ 163.780605][ T59] usb 5-1: Manufacturer: syz [ 163.783068][ T59] usb 5-1: SerialNumber: syz [ 163.788900][ T59] usb 5-1: config 0 descriptor?? [ 163.796750][ T59] em28xx 5-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 163.800917][ T59] em28xx 5-1:0.244: Audio interface 244 found (Vendor Class) [ 163.850682][ T6401] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 163.853430][ T6401] usb 8-1: config 0 has no interface number 0 [ 163.855645][ T6401] usb 8-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.859628][ T6401] usb 8-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 163.863168][ T6401] usb 8-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.869485][ T6401] usb 8-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 163.872575][ T6401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.875177][ T6401] usb 8-1: Product: syz [ 163.876543][ T6401] usb 8-1: Manufacturer: syz [ 163.878008][ T6401] usb 8-1: SerialNumber: syz [ 163.883972][ T6401] usb 8-1: config 0 descriptor?? [ 163.888593][ T6401] em28xx 8-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 163.891782][ T6401] em28xx 8-1:0.244: Audio interface 244 found (Vendor Class) [ 164.059976][ T59] em28xx 5-1:0.244: unknown em28xx chip ID (0) [ 164.062572][ T59] em28xx 5-1:0.244: Config register raw data: 0xfffffffb [ 164.066019][ T59] em28xx 5-1:0.244: AC97 chip type couldn't be determined [ 164.068353][ T59] em28xx 5-1:0.244: No AC97 audio processor [ 164.070786][ T59] em28xx 5-1:0.244: We currently don't support analog TV or stream capture on dual tuners. [ 164.110837][ T73] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.129802][ T59] em28xx 5-1:0.244: unknown em28xx chip ID (0) [ 164.132129][ T59] em28xx 5-1:0.244: Config register raw data: 0xfffffffb [ 164.134785][ T59] em28xx 5-1:0.244: AC97 chip type couldn't be determined [ 164.137141][ T59] em28xx 5-1:0.244: No AC97 audio processor [ 164.149713][ T6401] em28xx 8-1:0.244: unknown em28xx chip ID (0) [ 164.152355][ T6401] em28xx 8-1:0.244: Config register raw data: 0xfffffffb [ 164.155021][ T6401] em28xx 8-1:0.244: AC97 chip type couldn't be determined [ 164.157434][ T6401] em28xx 8-1:0.244: No AC97 audio processor [ 164.159712][ T6401] em28xx 8-1:0.244: We currently don't support analog TV or stream capture on dual tuners. [ 164.230557][ T6401] em28xx 8-1:0.244: unknown em28xx chip ID (0) [ 164.233656][ T6401] em28xx 8-1:0.244: Config register raw data: 0xfffffffb [ 164.236488][ T6401] em28xx 8-1:0.244: AC97 chip type couldn't be determined [ 164.239242][ T6401] em28xx 8-1:0.244: No AC97 audio processor [ 164.269552][ T6301] Bluetooth: hci0: command tx timeout [ 164.293434][ T73] bridge_slave_1: left allmulticast mode [ 164.299370][ T73] bridge_slave_1: left promiscuous mode [ 164.301850][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.308761][ T73] bridge_slave_0: left allmulticast mode [ 164.312314][ T73] bridge_slave_0: left promiscuous mode [ 164.314757][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.349816][ T6301] Bluetooth: hci2: command tx timeout [ 164.359626][ T6301] Bluetooth: hci3: command tx timeout [ 164.359812][ T6009] Bluetooth: hci1: command tx timeout [ 164.363123][ T59] usb 5-1: USB disconnect, device number 2 [ 164.366520][ T59] em28xx 5-1:0.244: Disconnecting em28xx #2 [ 164.368540][ T59] em28xx 5-1:0.244: Disconnecting em28xx [ 164.374120][ T59] em28xx 5-1:0.244: Freeing device [ 164.375865][ T59] em28xx 5-1:0.244: Freeing device [ 164.476107][ T6401] usb 8-1: USB disconnect, device number 2 [ 164.480751][ T6401] em28xx 8-1:0.244: Disconnecting em28xx #3 [ 164.482722][ T6401] em28xx 8-1:0.244: Disconnecting em28xx [ 164.484525][ T6401] non-slab/vmalloc memory [ 164.486740][ T6401] list_del corruption. prev->next should be ffff888026dac250, but was ffffffff82b90e17. (prev=ffff88801306c250) [ 164.491142][ T6401] ------------[ cut here ]------------ [ 164.492875][ T6401] kernel BUG at lib/list_debug.c:62! [ 164.494720][ T6401] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 164.497736][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 164.501703][ T6401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.505017][ T6401] Workqueue: usb_hub_wq hub_event [ 164.506674][ T6401] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 164.508896][ T6401] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 40 23 1b 8c e8 c7 0a 23 fc 90 <0f> 0b 4c 89 e7 e8 6c 2e 51 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 164.516774][ T6401] RSP: 0018:ffffc900016ff5f8 EFLAGS: 00010282 [ 164.519352][ T6401] RAX: 000000000000006d RBX: ffff888026dac250 RCX: 0000000000000000 [ 164.523019][ T6401] RDX: 000000000000006d RSI: ffffffff81e7c669 RDI: fffff520002dfeb0 [ 164.526797][ T6401] RBP: ffff88801306c250 R08: 0000000000000005 R09: 0000000000000000 [ 164.530286][ T6401] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802d728250 [ 164.533543][ T6401] R13: ffff888026dac000 R14: ffffffff90080468 R15: ffffed1004db5c6f [ 164.536844][ T6401] FS: 0000000000000000(0000) GS:ffff8880d6338000(0000) knlGS:0000000000000000 [ 164.540567][ T6401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.543048][ T6401] CR2: 00007ffe85622000 CR3: 00000000208f9000 CR4: 0000000000352ef0 [ 164.545795][ T6401] Call Trace: [ 164.547009][ T6401] [ 164.548051][ T6401] em28xx_close_extension+0x10b/0x2b0 [ 164.549861][ T6401] em28xx_usb_disconnect.cold+0x13d/0x253 [ 164.551694][ T6401] usb_unbind_interface+0x1dd/0x9e0 [ 164.553642][ T6401] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 164.555587][ T6401] ? __pfx_usb_unbind_interface+0x10/0x10 [ 164.557509][ T6401] device_remove+0x12a/0x180 [ 164.559410][ T6401] device_release_driver_internal+0x44e/0x620 [ 164.561744][ T6401] bus_remove_device+0x2bc/0x560 [ 164.563743][ T6401] ? __pfx_bus_remove_device+0x10/0x10 [ 164.566087][ T6401] ? __pfx_device_remove_attrs+0x10/0x10 [ 164.568444][ T6401] ? up_write+0x290/0x4f0 [ 164.570052][ T6401] device_del+0x376/0x9b0 [ 164.571490][ T6401] ? __pfx_device_del+0x10/0x10 [ 164.573142][ T6401] ? kobject_put+0xb9/0x640 [ 164.574676][ T6401] usb_disable_device+0x367/0x810 [ 164.576353][ T6401] usb_disconnect+0x2e2/0x9a0 [ 164.577900][ T6401] hub_event+0x1d0c/0x4af0 [ 164.579439][ T6401] ? __lock_acquire+0x4a5/0x2630 [ 164.581153][ T6401] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.583041][ T6401] ? __pfx_hub_event+0x10/0x10 [ 164.584810][ T6401] ? debug_object_deactivate+0x2e4/0x3b0 [ 164.586785][ T6401] ? rcu_is_watching+0x12/0xc0 [ 164.588377][ T6401] process_one_work+0xa23/0x19a0 [ 164.590040][ T6401] ? __pfx_process_one_work+0x10/0x10 [ 164.591831][ T6401] ? __pfx_hub_event+0x10/0x10 [ 164.593433][ T6401] worker_thread+0x5ef/0xe50 [ 164.595043][ T6401] ? __pfx_worker_thread+0x10/0x10 [ 164.596877][ T6401] ? kthread+0x13a/0x450 [ 164.598602][ T6401] ? __pfx_worker_thread+0x10/0x10 [ 164.600777][ T6401] kthread+0x370/0x450 [ 164.602403][ T6401] ? __pfx_kthread+0x10/0x10 [ 164.604344][ T6401] ret_from_fork+0x754/0xd80 [ 164.606196][ T6401] ? __pfx_ret_from_fork+0x10/0x10 [ 164.608400][ T6401] ? __switch_to+0x7b4/0x1120 [ 164.610518][ T6401] ? __pfx_kthread+0x10/0x10 [ 164.612704][ T6401] ret_from_fork_asm+0x1a/0x30 [ 164.614844][ T6401] [ 164.616195][ T6401] Modules linked in: [ 164.618285][ T6401] ---[ end trace 0000000000000000 ]--- [ 164.620809][ T6401] RIP: 0010:__list_del_entry_valid_or_report+0x14a/0x1d0 [ 164.623535][ T6401] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 40 23 1b 8c e8 c7 0a 23 fc 90 <0f> 0b 4c 89 e7 e8 6c 2e 51 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff [ 164.630789][ T6401] RSP: 0018:ffffc900016ff5f8 EFLAGS: 00010282 [ 164.632952][ T6401] RAX: 000000000000006d RBX: ffff888026dac250 RCX: 0000000000000000 [ 164.635756][ T6401] RDX: 000000000000006d RSI: ffffffff81e7c669 RDI: fffff520002dfeb0 [ 164.638671][ T6401] RBP: ffff88801306c250 R08: 0000000000000005 R09: 0000000000000000 [ 164.644381][ T6401] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802d728250 [ 164.647611][ T6401] R13: ffff888026dac000 R14: ffffffff90080468 R15: ffffed1004db5c6f [ 164.650798][ T6401] FS: 0000000000000000(0000) GS:ffff8880d6338000(0000) knlGS:0000000000000000 [ 164.653964][ T6401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.656779][ T6401] CR2: 00007f59ad207dac CR3: 000000002f637000 CR4: 0000000000352ef0 [ 164.660378][ T6401] Kernel panic - not syncing: Fatal exception [ 164.663286][ T6401] Kernel Offset: disabled [ 164.665257][ T6401] Rebooting in 86400 seconds..