Warning: Permanently added '[localhost]:14583' (ED25519) to the list of known hosts. 2024/03/18 21:02:30 ignoring optional flag "sandboxArg"="0" 2024/03/18 21:02:30 parsed 1 programs [ 73.539284][ T38] kauditd_printk_skb: 45 callbacks suppressed [ 73.539300][ T38] audit: type=1400 audit(1710795750.293:201): avc: denied { getattr } for pid=5403 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.554000][ T38] audit: type=1400 audit(1710795750.293:202): avc: denied { read } for pid=5403 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.562856][ T38] audit: type=1400 audit(1710795750.293:203): avc: denied { open } for pid=5403 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.573905][ T38] audit: type=1400 audit(1710795750.303:204): avc: denied { read } for pid=5403 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.584641][ T38] audit: type=1400 audit(1710795750.303:205): avc: denied { open } for pid=5403 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2024/03/18 21:02:30 executed programs: 0 [ 73.595222][ T38] audit: type=1400 audit(1710795750.333:206): avc: denied { mounton } for pid=5413 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.606475][ T38] audit: type=1400 audit(1710795750.333:207): avc: denied { mount } for pid=5413 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.616988][ T38] audit: type=1400 audit(1710795750.333:208): avc: denied { setattr } for pid=5413 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.650207][ T4629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.653810][ T4629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.657253][ T4629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.661161][ T4629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.665922][ T4629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.669492][ T4629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.680848][ T38] audit: type=1400 audit(1710795750.433:209): avc: denied { mounton } for pid=5420 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.797233][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 73.878640][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.881666][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.885325][ T5420] bridge_slave_0: entered allmulticast mode [ 73.888815][ T5420] bridge_slave_0: entered promiscuous mode [ 73.893151][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.895940][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.899296][ T5420] bridge_slave_1: entered allmulticast mode [ 73.903504][ T5420] bridge_slave_1: entered promiscuous mode [ 73.950811][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.956421][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.999734][ T5420] team0: Port device team_slave_0 added [ 74.008445][ T5420] team0: Port device team_slave_1 added [ 74.060490][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.063131][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.075802][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.082032][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.085131][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.097695][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.160594][ T5420] hsr_slave_0: entered promiscuous mode [ 74.164218][ T5420] hsr_slave_1: entered promiscuous mode [ 74.753850][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.758863][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.764322][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.769006][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.844180][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.858075][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.867662][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.871036][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.885500][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.888784][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.960320][ T38] audit: type=1400 audit(1710795751.713:210): avc: denied { sys_module } for pid=5420 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.056201][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.097955][ T5420] veth0_vlan: entered promiscuous mode [ 75.107651][ T5420] veth1_vlan: entered promiscuous mode [ 75.144555][ T5420] veth0_macvtap: entered promiscuous mode [ 75.151387][ T5420] veth1_macvtap: entered promiscuous mode [ 75.168963][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.180547][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.187800][ T5420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.191093][ T5420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.195087][ T5420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.199599][ T5420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.248676][ T2676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.253079][ T2676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.287080][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.290254][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.601933][ T826] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.734097][ T4629] Bluetooth: hci0: command tx timeout [ 76.034290][ T826] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 76.039373][ T826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.045071][ T826] usb 5-1: config 0 has no interface number 0 [ 76.047954][ T826] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.053548][ T826] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 76.057627][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.065151][ T826] usb 5-1: config 0 descriptor?? [ 76.135121][ T826] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 76.140013][ T826] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 76.482031][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 76.502032][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 76.522338][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 76.525615][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 76.528258][ T826] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 76.682929][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 76.711944][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 76.731899][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 76.734702][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 76.988112][ T826] usb 5-1: USB disconnect, device number 2 [ 76.993928][ T826] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 76.997047][ T826] em28xx 5-1:0.237: Disconnecting em28xx [ 77.003636][ T826] em28xx 5-1:0.237: Freeing device [ 77.005919][ T826] em28xx 5-1:0.237: Freeing device [ 77.019046][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.024195][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.383459][ T826] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.782350][ T826] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 77.786258][ T826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.790937][ T826] usb 5-1: config 0 has no interface number 0 [ 77.793967][ T826] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.799480][ T826] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 77.804521][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.810968][ T826] usb 5-1: config 0 descriptor?? [ 77.811926][ T4629] Bluetooth: hci0: command tx timeout [ 77.854591][ T826] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 77.858870][ T826] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 78.172230][ T826] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 78.191984][ T826] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 78.212440][ T826] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 78.216003][ T826] em28xx 5-1:0.237: No AC97 audio processor [ 78.218783][ T826] list_add corruption. prev->next should be next (ffffffff8ede8880), but was 0000000000000000. (prev=ffff888011adc250). [ 78.226398][ T826] ------------[ cut here ]------------ [ 78.228990][ T826] kernel BUG at lib/list_debug.c:32! [ 78.231608][ T826] invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 78.236713][ T826] CPU: 1 PID: 826 Comm: kworker/1:2 Not tainted 6.8.0-syzkaller-gbf3a69c6861f #0 [ 78.241403][ T826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 78.245739][ T826] Workqueue: usb_hub_wq hub_event [ 78.247652][ T826] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 78.250515][ T826] Code: ec fc 90 0f 0b 48 89 d9 48 c7 c7 a0 d3 6e 8b e8 18 83 ec fc 90 0f 0b 48 89 f1 48 c7 c7 20 d4 6e 8b 48 89 de e8 03 83 ec fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 a0 d4 6e 8b e8 eb 82 ec [ 78.258794][ T826] RSP: 0018:ffffc9000451ef08 EFLAGS: 00010286 [ 78.261250][ T826] RAX: 0000000000000075 RBX: ffffffff8ede8880 RCX: ffffffff816df3c9 [ 78.264417][ T826] RDX: 0000000000000000 RSI: ffffffff816e7bb6 RDI: 0000000000000005 [ 78.268068][ T826] RBP: ffff88802b3cc250 R08: 0000000000000005 R09: 0000000000000000 [ 78.271637][ T826] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802b3cc250 [ 78.275267][ T826] R13: ffff88802b3cc000 R14: ffff88802b3cda04 R15: ffff88802412d000 [ 78.278789][ T826] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 78.282923][ T826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.286010][ T826] CR2: 000055cbac915300 CR3: 000000002b40a000 CR4: 0000000000350ef0 [ 78.289681][ T826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.293286][ T826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.296871][ T826] Call Trace: [ 78.298253][ T826] [ 78.299487][ T826] ? show_regs+0x8c/0xa0 [ 78.301219][ T826] ? die+0x36/0xa0 [ 78.302805][ T826] ? do_trap+0x232/0x430 [ 78.304542][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 78.307242][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 78.310243][ T826] ? do_error_trap+0xf4/0x230 [ 78.312683][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 78.315708][ T826] ? handle_invalid_op+0x34/0x40 [ 78.318156][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 78.320982][ T826] ? exc_invalid_op+0x2e/0x50 [ 78.323252][ T826] ? asm_exc_invalid_op+0x1a/0x20 [ 78.325279][ T826] ? __wake_up_klogd.part.0+0x99/0xf0 [ 78.327679][ T826] ? vprintk+0x86/0xa0 [ 78.329549][ T826] ? __list_add_valid_or_report+0xbe/0x100 [ 78.332193][ T826] ? __list_add_valid_or_report+0xbd/0x100 [ 78.334944][ T826] em28xx_init_extension+0x48/0x200 [ 78.337393][ T826] em28xx_init_dev.constprop.0+0x197b/0x3090 [ 78.340156][ T826] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 78.343050][ T826] ? lockdep_init_map_type+0x16d/0x7d0 [ 78.346236][ T826] ? lockdep_init_map_type+0x16d/0x7d0 [ 78.348824][ T826] ? __raw_spin_lock_init+0x3a/0x110 [ 78.351502][ T826] em28xx_usb_probe+0x10db/0x3730 [ 78.353784][ T826] usb_probe_interface+0x309/0x940 [ 78.356033][ T826] ? __pfx_usb_probe_interface+0x10/0x10 [ 78.358297][ T826] really_probe+0x23a/0xcb0 [ 78.360140][ T826] __driver_probe_device+0x1de/0x4b0 [ 78.362157][ T826] driver_probe_device+0x4c/0x1b0 [ 78.364224][ T826] __device_attach_driver+0x1df/0x310 [ 78.366431][ T826] ? __pfx___device_attach_driver+0x10/0x10 [ 78.368828][ T826] bus_for_each_drv+0x157/0x1e0 [ 78.371331][ T826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.373791][ T826] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.376029][ T826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.378850][ T826] __device_attach+0x1e8/0x4b0 [ 78.380822][ T826] ? __pfx___device_attach+0x10/0x10 [ 78.384035][ T826] ? do_raw_spin_unlock+0x172/0x230 [ 78.387090][ T826] bus_probe_device+0x17f/0x1c0 [ 78.389947][ T826] device_add+0x1188/0x1ab0 [ 78.392648][ T826] ? __pfx_device_add+0x10/0x10 [ 78.395483][ T826] ? preempt_schedule_thunk+0x1a/0x30 [ 78.398397][ T826] usb_set_configuration+0x10cb/0x1c50 [ 78.400948][ T826] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 78.403992][ T826] usb_generic_driver_probe+0xb1/0x110 [ 78.406914][ T826] usb_probe_device+0xec/0x360 [ 78.409456][ T826] ? __pfx_usb_probe_device+0x10/0x10 [ 78.412014][ T826] really_probe+0x23a/0xcb0 [ 78.413892][ T826] __driver_probe_device+0x1de/0x4b0 [ 78.416044][ T826] ? usb_driver_applicable+0x1c7/0x220 [ 78.418260][ T826] driver_probe_device+0x4c/0x1b0 [ 78.420308][ T826] __device_attach_driver+0x1df/0x310 [ 78.422500][ T826] ? __pfx___device_attach_driver+0x10/0x10 [ 78.424704][ T826] bus_for_each_drv+0x157/0x1e0 [ 78.426611][ T826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.429118][ T826] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.432202][ T826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.435157][ T826] __device_attach+0x1e8/0x4b0 [ 78.437659][ T826] ? __pfx___device_attach+0x10/0x10 [ 78.440474][ T826] ? do_raw_spin_unlock+0x172/0x230 [ 78.443235][ T826] bus_probe_device+0x17f/0x1c0 [ 78.445483][ T826] device_add+0x1188/0x1ab0 [ 78.447726][ T826] ? __pfx_device_add+0x10/0x10 [ 78.449936][ T826] ? usb_detect_static_quirks+0x335/0x3e0 [ 78.452707][ T826] usb_new_device+0xd90/0x1a10 [ 78.455473][ T826] ? __pfx_usb_new_device+0x10/0x10 [ 78.458946][ T826] hub_event+0x2db0/0x4e20 [ 78.461405][ T826] ? __pfx_hub_event+0x10/0x10 [ 78.463298][ T826] ? __pfx_lock_acquire+0x10/0x10 [ 78.465228][ T826] ? __pfx_lock_release+0x10/0x10 [ 78.468107][ T826] process_one_work+0x9a9/0x1a60 [ 78.471300][ T826] ? __pfx_hub_event+0x10/0x10 [ 78.474447][ T826] ? __pfx_process_one_work+0x10/0x10 [ 78.478006][ T826] ? assign_work+0x1a0/0x250 [ 78.482001][ T826] worker_thread+0x6c8/0xf70 [ 78.486029][ T826] ? __kthread_parkme+0x148/0x220 [ 78.488464][ T826] ? __pfx_worker_thread+0x10/0x10 [ 78.491526][ T826] kthread+0x2c1/0x3a0 [ 78.493764][ T826] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.496745][ T826] ? __pfx_kthread+0x10/0x10 [ 78.499004][ T826] ret_from_fork+0x45/0x80 [ 78.501162][ T826] ? __pfx_kthread+0x10/0x10 [ 78.503465][ T826] ret_from_fork_asm+0x1a/0x30 [ 78.506069][ T826] [ 78.507939][ T826] Modules linked in: [ 78.518144][ T826] ---[ end trace 0000000000000000 ]--- [ 78.520825][ T826] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 78.524156][ T826] Code: ec fc 90 0f 0b 48 89 d9 48 c7 c7 a0 d3 6e 8b e8 18 83 ec fc 90 0f 0b 48 89 f1 48 c7 c7 20 d4 6e 8b 48 89 de e8 03 83 ec fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 a0 d4 6e 8b e8 eb 82 ec [ 78.533788][ T826] RSP: 0018:ffffc9000451ef08 EFLAGS: 00010286 [ 78.536636][ T826] RAX: 0000000000000075 RBX: ffffffff8ede8880 RCX: ffffffff816df3c9 [ 78.540285][ T826] RDX: 0000000000000000 RSI: ffffffff816e7bb6 RDI: 0000000000000005 [ 78.544293][ T826] RBP: ffff88802b3cc250 R08: 0000000000000005 R09: 0000000000000000 [ 78.548107][ T826] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802b3cc250 [ 78.552511][ T826] R13: ffff88802b3cc000 R14: ffff88802b3cda04 R15: ffff88802412d000 [ 78.556149][ T826] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 78.560466][ T826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.563937][ T826] CR2: 000055cbac915300 CR3: 000000002b40a000 CR4: 0000000000350ef0 [ 78.567591][ T826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.570745][ T826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.574041][ T826] Kernel panic - not syncing: Fatal exception [ 78.577227][ T826] Kernel Offset: disabled [ 78.580118][ T826] Rebooting in 86400 seconds..