Warning: Permanently added '[localhost]:34220' (ED25519) to the list of known hosts. 2025/10/05 00:44:31 ignoring optional flag "type"="qemu" 2025/10/05 00:44:32 parsed 1 programs [ 75.094240][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 75.094256][ T40] audit: type=1400 audit(1759625072.037:98): avc: denied { getattr } for pid=6045 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2025/10/05 00:44:32 executed programs: 0 [ 75.179368][ T40] audit: type=1400 audit(1759625072.117:99): avc: denied { create } for pid=6057 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.189663][ T40] audit: type=1400 audit(1759625072.127:100): avc: denied { ioctl } for pid=6057 comm="syz-executor.0" path="socket:[5019]" dev="sockfs" ino=5019 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.194925][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.205097][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.208771][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.213706][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.217476][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.338736][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 75.432156][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.435684][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.438604][ T6057] bridge_slave_0: entered allmulticast mode [ 75.441825][ T6057] bridge_slave_0: entered promiscuous mode [ 75.445836][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.448753][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.453328][ T6057] bridge_slave_1: entered allmulticast mode [ 75.456388][ T6057] bridge_slave_1: entered promiscuous mode [ 75.492888][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.497851][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.543672][ T6057] team0: Port device team_slave_0 added [ 75.550390][ T6057] team0: Port device team_slave_1 added [ 75.597642][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.601255][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.613470][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.619289][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.623425][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.637010][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.694959][ T6057] hsr_slave_0: entered promiscuous mode [ 75.697348][ T6057] hsr_slave_1: entered promiscuous mode [ 75.817832][ T40] audit: type=1400 audit(1759625072.757:101): avc: denied { search } for pid=6066 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.825530][ T40] audit: type=1400 audit(1759625072.757:102): avc: denied { search } for pid=6066 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.834540][ T40] audit: type=1400 audit(1759625072.757:103): avc: denied { search } for pid=6066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.845597][ T40] audit: type=1400 audit(1759625072.757:104): avc: denied { search } for pid=6066 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.855304][ T40] audit: type=1400 audit(1759625072.757:105): avc: denied { read open } for pid=6067 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.864565][ T40] audit: type=1400 audit(1759625072.757:106): avc: denied { getattr } for pid=6067 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.875150][ T40] audit: type=1400 audit(1759625072.777:107): avc: denied { add_name } for pid=6066 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.395441][ T6057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.401289][ T6057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.408069][ T6057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.418614][ T6057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.484950][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.499844][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.506869][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.509967][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.520696][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.523703][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.693287][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.724049][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.726461][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.736045][ T6057] veth0_vlan: entered promiscuous mode [ 76.744947][ T6057] veth1_vlan: entered promiscuous mode [ 76.766360][ T6057] veth0_macvtap: entered promiscuous mode [ 76.772206][ T6057] veth1_macvtap: entered promiscuous mode [ 76.787700][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.796804][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.807935][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.813496][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.820083][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.823099][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.134222][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.280662][ T64] Bluetooth: hci0: command tx timeout [ 77.313990][ T53] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 77.316861][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.320392][ T53] usb 5-1: config 0 has no interface number 0 [ 77.322536][ T53] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.326352][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 77.337640][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.346575][ T53] usb 5-1: config 0 descriptor?? [ 77.360103][ T53] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 77.363743][ T53] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 77.609992][ T53] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 77.613530][ T53] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 77.618260][ T53] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 77.621570][ T53] em28xx 5-1:0.237: No AC97 audio processor [ 77.624131][ T53] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 77.680393][ T53] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 77.684060][ T53] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 77.687704][ T53] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 77.691038][ T53] em28xx 5-1:0.237: No AC97 audio processor [ 77.906162][ T53] usb 5-1: USB disconnect, device number 2 [ 77.911215][ T53] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 77.913744][ T53] em28xx 5-1:0.237: Disconnecting em28xx [ 77.920289][ T53] em28xx 5-1:0.237: Freeing device [ 77.922605][ T53] em28xx 5-1:0.237: Freeing device [ 78.389951][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.541124][ T53] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 78.543600][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.547321][ T53] usb 5-1: config 0 has no interface number 0 [ 78.549259][ T53] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.553585][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 78.556980][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.561048][ T53] usb 5-1: config 0 descriptor?? [ 78.564898][ T53] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 78.567751][ T53] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 78.820061][ T53] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 78.822893][ T53] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 78.825744][ T53] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 78.828070][ T53] em28xx 5-1:0.237: No AC97 audio processor [ 78.830026][ T53] non-slab/vmalloc memory [ 78.831553][ T53] list_add corruption. prev->next should be next (ffffffff8f933880), but was 0000000000000000. (prev=ffff8880269dc250). [ 78.835981][ T53] ------------[ cut here ]------------ [ 78.837999][ T53] kernel BUG at lib/list_debug.c:32! [ 78.839928][ T53] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 78.842500][ T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 78.846724][ T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.850374][ T53] Workqueue: usb_hub_wq hub_event [ 78.852204][ T53] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 78.854608][ T53] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 43 d0 8b 48 89 ee e8 d6 2d f0 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 43 d0 8b e8 be 2d f0 [ 78.861789][ T53] RSP: 0018:ffffc90000a6ee88 EFLAGS: 00010282 [ 78.863716][ T53] RAX: 0000000000000075 RBX: ffff88802e750000 RCX: ffffffff8199c7a9 [ 78.866260][ T53] RDX: 0000000000000000 RSI: ffffffff819a42d6 RDI: 0000000000000005 [ 78.868779][ T53] RBP: ffffffff8f933880 R08: 0000000000000005 R09: 0000000000000000 [ 78.871491][ T53] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802e750250 [ 78.874567][ T53] R13: ffffffff8f933888 R14: ffff88802e7501a8 R15: ffff88802e751a34 [ 78.878201][ T53] FS: 0000000000000000(0000) GS:ffff8880d6f67000(0000) knlGS:0000000000000000 [ 78.881144][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.883299][ T53] CR2: 00007ff0ac998000 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 78.885936][ T53] Call Trace: [ 78.887291][ T53] [ 78.889000][ T53] em28xx_init_extension+0x48/0x200 [ 78.891885][ T53] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 78.894870][ T53] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 78.896847][ T53] ? lockdep_init_map_type+0x5c/0x280 [ 78.898547][ T53] ? lockdep_init_map_type+0x5c/0x280 [ 78.900212][ T53] em28xx_usb_probe+0x1285/0x3770 [ 78.901744][ T53] usb_probe_interface+0x303/0xa40 [ 78.903376][ T53] ? __pfx_usb_probe_interface+0x10/0x10 [ 78.905146][ T53] really_probe+0x23e/0xa90 [ 78.906653][ T53] __driver_probe_device+0x1de/0x440 [ 78.908371][ T53] driver_probe_device+0x4c/0x1b0 [ 78.909993][ T53] __device_attach_driver+0x1df/0x310 [ 78.911763][ T53] ? __pfx___device_attach_driver+0x10/0x10 [ 78.913740][ T53] bus_for_each_drv+0x156/0x1e0 [ 78.915612][ T53] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.917644][ T53] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.919696][ T53] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.921685][ T53] __device_attach+0x1e4/0x4b0 [ 78.923032][ T53] ? __pfx___device_attach+0x10/0x10 [ 78.924486][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 78.926002][ T53] bus_probe_device+0x17f/0x1c0 [ 78.927499][ T53] device_add+0x1148/0x1aa0 [ 78.928937][ T53] ? __pfx_device_add+0x10/0x10 [ 78.930492][ T53] ? preempt_schedule_thunk+0x16/0x30 [ 78.932214][ T53] usb_set_configuration+0x1187/0x1e20 [ 78.933995][ T53] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 78.936102][ T53] usb_generic_driver_probe+0xb1/0x110 [ 78.938200][ T53] usb_probe_device+0xec/0x3e0 [ 78.940028][ T53] ? __pfx_usb_probe_device+0x10/0x10 [ 78.942122][ T53] really_probe+0x23e/0xa90 [ 78.943682][ T53] __driver_probe_device+0x1de/0x440 [ 78.945401][ T53] ? usb_driver_applicable+0x1c7/0x220 [ 78.947130][ T53] driver_probe_device+0x4c/0x1b0 [ 78.948711][ T53] __device_attach_driver+0x1df/0x310 [ 78.950399][ T53] ? __pfx___device_attach_driver+0x10/0x10 [ 78.952236][ T53] bus_for_each_drv+0x156/0x1e0 [ 78.953763][ T53] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.955520][ T53] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.957255][ T53] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.959352][ T53] __device_attach+0x1e4/0x4b0 [ 78.961178][ T53] ? __pfx___device_attach+0x10/0x10 [ 78.963078][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 78.965043][ T53] bus_probe_device+0x17f/0x1c0 [ 78.966689][ T53] device_add+0x1148/0x1aa0 [ 78.968131][ T53] ? __pfx_device_add+0x10/0x10 [ 78.969667][ T53] ? usb_detect_static_quirks+0x335/0x3e0 [ 78.971457][ T53] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 78.973488][ T53] usb_new_device+0xd07/0x1a60 [ 78.975218][ T53] ? do_raw_spin_lock+0x12c/0x2b0 [ 78.977055][ T53] ? __pfx_usb_new_device+0x10/0x10 [ 78.979025][ T53] ? mark_held_locks+0x49/0x80 [ 78.980796][ T53] hub_event+0x2f34/0x4fe0 [ 78.982424][ T53] ? __pfx_hub_event+0x10/0x10 [ 78.983963][ T53] ? interval_tree_remove+0x480/0xee0 [ 78.985704][ T53] ? rcu_is_watching+0x12/0xc0 [ 78.987403][ T53] process_one_work+0x9cc/0x1b70 [ 78.989036][ T53] ? __pfx_hub_event+0x10/0x10 [ 78.990638][ T53] ? __pfx_process_one_work+0x10/0x10 [ 78.992451][ T53] ? assign_work+0x1a0/0x250 [ 78.994390][ T53] worker_thread+0x6c8/0xf10 [ 78.996416][ T53] ? __kthread_parkme+0x19e/0x250 [ 78.998689][ T53] ? __pfx_worker_thread+0x10/0x10 [ 79.001426][ T53] kthread+0x3c5/0x780 [ 79.003512][ T53] ? __pfx_kthread+0x10/0x10 [ 79.005532][ T53] ? rcu_is_watching+0x12/0xc0 [ 79.007813][ T53] ? __pfx_kthread+0x10/0x10 [ 79.009723][ T53] ret_from_fork+0x56d/0x730 [ 79.011643][ T53] ? __pfx_kthread+0x10/0x10 [ 79.013534][ T53] ret_from_fork_asm+0x1a/0x30 [ 79.015310][ T53] [ 79.016329][ T53] Modules linked in: [ 79.018399][ T53] ---[ end trace 0000000000000000 ]--- [ 79.020761][ T53] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 79.023375][ T53] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 43 d0 8b 48 89 ee e8 d6 2d f0 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 43 d0 8b e8 be 2d f0 [ 79.031011][ T53] RSP: 0018:ffffc90000a6ee88 EFLAGS: 00010282 [ 79.033321][ T53] RAX: 0000000000000075 RBX: ffff88802e750000 RCX: ffffffff8199c7a9 [ 79.036201][ T53] RDX: 0000000000000000 RSI: ffffffff819a42d6 RDI: 0000000000000005 [ 79.038785][ T53] RBP: ffffffff8f933880 R08: 0000000000000005 R09: 0000000000000000 [ 79.041502][ T53] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802e750250 [ 79.044736][ T53] R13: ffffffff8f933888 R14: ffff88802e7501a8 R15: ffff88802e751a34 [ 79.047516][ T53] FS: 0000000000000000(0000) GS:ffff8880d6f67000(0000) knlGS:0000000000000000 [ 79.050303][ T53] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.052315][ T53] CR2: 00007ff0ac998000 CR3: 000000000df80000 CR4: 0000000000352ef0 [ 79.054764][ T53] Kernel panic - not syncing: Fatal exception [ 79.057376][ T53] Kernel Offset: disabled [ 79.058711][ T53] Rebooting in 86400 seconds..