Warning: Permanently added '[localhost]:7126' (ED25519) to the list of known hosts. 2023/10/30 19:50:12 ignoring optional flag "sandboxArg"="0" 2023/10/30 19:50:12 parsed 1 programs [ 92.312093][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 92.312108][ T37] audit: type=1400 audit(1698695412.614:200): avc: denied { getattr } for pid=5365 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.325525][ T37] audit: type=1400 audit(1698695412.614:201): avc: denied { read } for pid=5365 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.337624][ T37] audit: type=1400 audit(1698695412.614:202): avc: denied { open } for pid=5365 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.369798][ T37] audit: type=1400 audit(1698695412.674:203): avc: denied { mounton } for pid=5378 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/10/30 19:50:12 executed programs: 0 [ 92.383523][ T37] audit: type=1400 audit(1698695412.674:204): avc: denied { mount } for pid=5378 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 92.459414][ T5165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.464989][ T5165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.470219][ T5165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.475474][ T5165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.480001][ T5165] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.483920][ T5165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.496744][ T37] audit: type=1400 audit(1698695412.804:205): avc: denied { mounton } for pid=5384 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.655239][ T5384] chnl_net:caif_netlink_parms(): no params data found [ 92.774534][ T820] cfg80211: failed to load regulatory.db [ 92.808682][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.812062][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.815714][ T5384] bridge_slave_0: entered allmulticast mode [ 92.820680][ T5384] bridge_slave_0: entered promiscuous mode [ 92.829695][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.833121][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.837695][ T5384] bridge_slave_1: entered allmulticast mode [ 92.843092][ T5384] bridge_slave_1: entered promiscuous mode [ 92.914632][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.922679][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.990707][ T5384] team0: Port device team_slave_0 added [ 92.996719][ T5384] team0: Port device team_slave_1 added [ 93.056917][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.060154][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.070919][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.077941][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.081361][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.091975][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.166724][ T5384] hsr_slave_0: entered promiscuous mode [ 93.170007][ T5384] hsr_slave_1: entered promiscuous mode [ 93.888300][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.895730][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.901598][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.909849][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.004129][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.023598][ T5384] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.038652][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.041933][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.056999][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.060361][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.165513][ T37] audit: type=1400 audit(1698695414.474:206): avc: denied { sys_module } for pid=5384 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.291352][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.339286][ T5384] veth0_vlan: entered promiscuous mode [ 94.347938][ T5384] veth1_vlan: entered promiscuous mode [ 94.372387][ T5384] veth0_macvtap: entered promiscuous mode [ 94.384243][ T5384] veth1_macvtap: entered promiscuous mode [ 94.406824][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.420511][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.435531][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439505][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.446741][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.451354][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.527786][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.530885][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.532528][ T4587] Bluetooth: hci0: command 0x0409 tx timeout [ 94.555623][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.558936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577909][ T37] audit: type=1400 audit(1698695414.884:207): avc: denied { mounton } for pid=5384 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.651460][ T37] audit: type=1400 audit(1698695414.954:208): avc: denied { ioctl } for pid=5435 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=759 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.666629][ T37] audit: type=1400 audit(1698695414.954:209): avc: denied { ioctl } for pid=5435 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=759 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.933446][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.302025][ T32] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 95.305871][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.310653][ T32] usb 5-1: config 0 has no interface number 0 [ 95.315228][ T32] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.322361][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 95.326752][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.337277][ T32] usb 5-1: config 0 descriptor?? [ 95.385671][ T32] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 95.390744][ T32] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 95.703815][ T32] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 95.722241][ T32] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 95.742162][ T32] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 95.745692][ T32] em28xx 5-1:0.237: No AC97 audio processor [ 95.749081][ T32] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 95.882002][ T32] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 95.901976][ T32] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 95.921996][ T32] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 95.924782][ T32] em28xx 5-1:0.237: No AC97 audio processor [ 96.175413][ T32] usb 5-1: USB disconnect, device number 2 [ 96.179137][ T32] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 96.181551][ T32] em28xx 5-1:0.237: Disconnecting em28xx [ 96.190269][ T32] em28xx 5-1:0.237: Freeing device [ 96.193572][ T32] em28xx 5-1:0.237: Freeing device [ 96.552731][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.611920][ T4587] Bluetooth: hci0: command 0x041b tx timeout [ 96.984163][ T32] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 96.987819][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.992664][ T32] usb 5-1: config 0 has no interface number 0 [ 96.995684][ T32] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.000848][ T32] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 97.005264][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.011606][ T32] usb 5-1: config 0 descriptor?? [ 97.054807][ T32] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 97.059078][ T32] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 97.392031][ T32] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 97.422253][ T32] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 97.442023][ T32] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 97.445157][ T32] em28xx 5-1:0.237: No AC97 audio processor [ 97.447864][ T32] list_add corruption. prev->next should be next (ffffffff8e0fe6a0), but was 0000000000000000. (prev=ffff888024f0c250). [ 97.455718][ T32] ------------[ cut here ]------------ [ 97.458548][ T32] kernel BUG at lib/list_debug.c:32! [ 97.461375][ T32] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 97.465260][ T32] CPU: 3 PID: 32 Comm: kworker/3:0 Not tainted 6.6.0-syzkaller-gffc253263a13 #0 [ 97.471050][ T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 97.475287][ T32] Workqueue: usb_hub_wq hub_event [ 97.477469][ T32] RIP: 0010:__list_add_valid_or_report+0xb6/0x100 [ 97.480095][ T32] Code: e8 0f e5 3e fd 0f 0b 48 89 d9 48 c7 c7 a0 14 e9 8a e8 fe e4 3e fd 0f 0b 48 89 f1 48 c7 c7 20 15 e9 8a 48 89 de e8 ea e4 3e fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 a0 15 e9 8a e8 d3 e4 3e [ 97.488892][ T32] RSP: 0018:ffffc90000adef28 EFLAGS: 00010282 [ 97.492036][ T32] RAX: 0000000000000075 RBX: ffffffff8e0fe6a0 RCX: 0000000000000000 [ 97.495780][ T32] RDX: 0000000000000000 RSI: ffffffff816a9712 RDI: 0000000000000005 [ 97.499266][ T32] RBP: ffff888022630250 R08: 0000000000000005 R09: 0000000000000000 [ 97.503026][ T32] R10: 0000000080000000 R11: 6464615f7473696c R12: ffff888022630250 [ 97.506558][ T32] R13: ffff888022630000 R14: ffff8880226319d4 R15: ffff888020d7a000 [ 97.510562][ T32] FS: 0000000000000000(0000) GS:ffff88806b900000(0000) knlGS:0000000000000000 [ 97.514693][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.517767][ T32] CR2: 00005588bdde2300 CR3: 000000001a8f7000 CR4: 0000000000350ee0 [ 97.521268][ T32] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.524503][ T32] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.527373][ T32] Call Trace: [ 97.528985][ T32] [ 97.530530][ T32] ? show_regs+0x8f/0xa0 [ 97.532756][ T32] ? die+0x36/0xa0 [ 97.534797][ T32] ? do_trap+0x22b/0x420 [ 97.536696][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.539073][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.541295][ T32] ? do_error_trap+0xf4/0x230 [ 97.543286][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.545577][ T32] ? handle_invalid_op+0x34/0x40 [ 97.547641][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.550247][ T32] ? exc_invalid_op+0x2d/0x40 [ 97.552064][ T32] ? asm_exc_invalid_op+0x1a/0x20 [ 97.554128][ T32] ? vprintk+0x82/0x90 [ 97.556151][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.559273][ T32] ? __list_add_valid_or_report+0xb6/0x100 [ 97.562064][ T32] em28xx_init_extension+0x48/0x1f0 [ 97.564376][ T32] em28xx_init_dev.constprop.0+0x1977/0x3080 [ 97.566721][ T32] ? em28xx_usb_disconnect+0x640/0x640 [ 97.569220][ T32] ? lockdep_init_map_type+0x16d/0x7c0 [ 97.572496][ T32] ? lockdep_init_map_type+0x16d/0x7c0 [ 97.575249][ T32] ? __raw_spin_lock_init+0x3a/0x110 [ 97.577509][ T32] em28xx_usb_probe+0x10d7/0x3730 [ 97.579920][ T32] usb_probe_interface+0x307/0x930 [ 97.582019][ T32] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 97.584510][ T32] really_probe+0x234/0xc90 [ 97.586713][ T32] __driver_probe_device+0x1de/0x4b0 [ 97.589276][ T32] driver_probe_device+0x4c/0x1a0 [ 97.592056][ T32] __device_attach_driver+0x1d4/0x300 [ 97.594950][ T32] ? driver_probe_device+0x1a0/0x1a0 [ 97.598229][ T32] bus_for_each_drv+0x157/0x1d0 [ 97.600897][ T32] ? bus_for_each_dev+0x1d0/0x1d0 [ 97.603634][ T32] ? lockdep_hardirqs_on+0x7d/0x100 [ 97.607085][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 97.610173][ T32] __device_attach+0x1e8/0x4b0 [ 97.612312][ T32] ? device_driver_attach+0x200/0x200 [ 97.614775][ T32] ? do_raw_spin_unlock+0x173/0x230 [ 97.617116][ T32] bus_probe_device+0x17c/0x1c0 [ 97.619487][ T32] device_add+0x117e/0x1aa0 [ 97.621987][ T32] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 97.625341][ T32] ? mark_held_locks+0x9f/0xe0 [ 97.627307][ T32] usb_set_configuration+0x10cb/0x1c40 [ 97.629505][ T32] usb_generic_driver_probe+0xca/0x130 [ 97.631800][ T32] usb_probe_device+0xda/0x2c0 [ 97.633967][ T32] ? usb_driver_release_interface+0x190/0x190 [ 97.637091][ T32] really_probe+0x234/0xc90 [ 97.639207][ T32] __driver_probe_device+0x1de/0x4b0 [ 97.641625][ T32] ? usb_driver_applicable+0x1c4/0x220 [ 97.643993][ T32] driver_probe_device+0x4c/0x1a0 [ 97.646045][ T32] __device_attach_driver+0x1d4/0x300 [ 97.649109][ T32] ? driver_probe_device+0x1a0/0x1a0 [ 97.651838][ T32] bus_for_each_drv+0x157/0x1d0 [ 97.654164][ T32] ? bus_for_each_dev+0x1d0/0x1d0 [ 97.657182][ T32] ? lockdep_hardirqs_on+0x7d/0x100 [ 97.660902][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 97.663776][ T32] __device_attach+0x1e8/0x4b0 [ 97.666255][ T32] ? device_driver_attach+0x200/0x200 [ 97.668904][ T32] ? do_raw_spin_unlock+0x173/0x230 [ 97.671839][ T32] bus_probe_device+0x17c/0x1c0 [ 97.674342][ T32] device_add+0x117e/0x1aa0 [ 97.676647][ T32] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 97.680573][ T32] ? usb_detect_static_quirks+0x335/0x3e0 [ 97.683807][ T32] usb_new_device+0xd80/0x1960 [ 97.685843][ T32] ? hub_disconnect+0x520/0x520 [ 97.688378][ T32] hub_event+0x2dac/0x4e10 [ 97.690928][ T32] ? hub_port_debounce+0x3d0/0x3d0 [ 97.693352][ T32] ? check_irq_usage+0x1471/0x1c70 [ 97.695850][ T32] ? lock_sync+0x190/0x190 [ 97.698685][ T32] ? reacquire_held_locks+0x4b0/0x4b0 [ 97.701669][ T32] process_one_work+0x884/0x15c0 [ 97.704264][ T32] ? hub_port_debounce+0x3d0/0x3d0 [ 97.706923][ T32] ? init_worker_pool+0x770/0x770 [ 97.709546][ T32] ? assign_work+0x1a0/0x240 [ 97.712319][ T32] worker_thread+0x8b9/0x1290 [ 97.715897][ T32] ? process_one_work+0x15c0/0x15c0 [ 97.720743][ T32] kthread+0x33c/0x440 [ 97.723697][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.726873][ T32] ? kthread_complete_and_exit+0x40/0x40 [ 97.729554][ T32] ret_from_fork+0x45/0x80 [ 97.731809][ T32] ? kthread_complete_and_exit+0x40/0x40 [ 97.734593][ T32] ret_from_fork_asm+0x11/0x20 [ 97.736970][ T32] [ 97.739289][ T32] Modules linked in: [ 97.754344][ T32] ---[ end trace 0000000000000000 ]--- [ 97.757688][ T32] RIP: 0010:__list_add_valid_or_report+0xb6/0x100 [ 97.761004][ T32] Code: e8 0f e5 3e fd 0f 0b 48 89 d9 48 c7 c7 a0 14 e9 8a e8 fe e4 3e fd 0f 0b 48 89 f1 48 c7 c7 20 15 e9 8a 48 89 de e8 ea e4 3e fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 a0 15 e9 8a e8 d3 e4 3e [ 97.772700][ T32] RSP: 0018:ffffc90000adef28 EFLAGS: 00010282 [ 97.775653][ T32] RAX: 0000000000000075 RBX: ffffffff8e0fe6a0 RCX: 0000000000000000 [ 97.779755][ T32] RDX: 0000000000000000 RSI: ffffffff816a9712 RDI: 0000000000000005 [ 97.784432][ T32] RBP: ffff888022630250 R08: 0000000000000005 R09: 0000000000000000 [ 97.788546][ T32] R10: 0000000080000000 R11: 6464615f7473696c R12: ffff888022630250 [ 97.792476][ T32] R13: ffff888022630000 R14: ffff8880226319d4 R15: ffff888020d7a000 [ 97.795830][ T32] FS: 0000000000000000(0000) GS:ffff88806b900000(0000) knlGS:0000000000000000 [ 97.800516][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.804251][ T32] CR2: 000056548d6c8008 CR3: 0000000026f79000 CR4: 0000000000350ee0 [ 97.807707][ T32] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.810937][ T32] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.815271][ T32] Kernel panic - not syncing: Fatal exception [ 97.824769][ T32] Kernel Offset: disabled [ 97.827166][ T32] Rebooting in 86400 seconds..