[ 77.289838][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.292870][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:1282' (ED25519) to the list of known hosts. 2024/09/06 04:42:02 ignoring optional flag "sandboxArg"="0" 2024/09/06 04:42:02 parsed 1 programs [ 82.374536][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 82.374551][ T39] audit: type=1400 audit(1725597722.609:125): avc: denied { getattr } for pid=5466 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.386588][ T39] audit: type=1400 audit(1725597722.609:126): avc: denied { read } for pid=5466 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.395811][ T39] audit: type=1400 audit(1725597722.609:127): avc: denied { open } for pid=5466 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.493805][ T39] audit: type=1400 audit(1725597722.729:128): avc: denied { unlink } for pid=5473 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.187584][ T5473] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/09/06 04:42:04 executed programs: 0 [ 84.248209][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.252200][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.255451][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.260136][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.277793][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.290554][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.301911][ T39] audit: type=1400 audit(1725597724.529:129): avc: denied { mounton } for pid=5478 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.450266][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 84.587437][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.590812][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.594622][ T5478] bridge_slave_0: entered allmulticast mode [ 84.598654][ T5478] bridge_slave_0: entered promiscuous mode [ 84.603893][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.606579][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.609680][ T5478] bridge_slave_1: entered allmulticast mode [ 84.615421][ T5478] bridge_slave_1: entered promiscuous mode [ 84.674113][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.683651][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.745560][ T5478] team0: Port device team_slave_0 added [ 84.750360][ T5478] team0: Port device team_slave_1 added [ 84.809670][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.816640][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.827416][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.834107][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.836941][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.847947][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.924271][ T5478] hsr_slave_0: entered promiscuous mode [ 84.927815][ T5478] hsr_slave_1: entered promiscuous mode [ 84.944792][ T39] audit: type=1400 audit(1725597725.179:130): avc: denied { search } for pid=5487 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.953970][ T39] audit: type=1400 audit(1725597725.179:131): avc: denied { read } for pid=5488 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.965161][ T39] audit: type=1400 audit(1725597725.179:132): avc: denied { open } for pid=5488 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.975828][ T39] audit: type=1400 audit(1725597725.179:133): avc: denied { getattr } for pid=5488 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.987953][ T39] audit: type=1400 audit(1725597725.199:134): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.889486][ T5478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.897721][ T5478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.904825][ T5478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.921671][ T5478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.022978][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.046548][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.059090][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.062194][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.067672][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.070623][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.116333][ T5478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.255801][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.304973][ T5478] veth0_vlan: entered promiscuous mode [ 86.320831][ T5478] veth1_vlan: entered promiscuous mode [ 86.325891][ T4776] Bluetooth: hci0: command tx timeout [ 86.350924][ T5478] veth0_macvtap: entered promiscuous mode [ 86.359433][ T5478] veth1_macvtap: entered promiscuous mode [ 86.375972][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.384686][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.390475][ T5478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.395437][ T5478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.398627][ T5478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402693][ T5478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.487668][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.491249][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.526645][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.530007][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.871416][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.057551][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 87.063566][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.083229][ T8] usb 5-1: config 1 has an invalid interface number: 170 but max is 1 [ 87.086574][ T8] usb 5-1: config 1 has an invalid interface number: 234 but max is 1 [ 87.089927][ T8] usb 5-1: config 1 has no interface number 0 [ 87.107967][ T8] usb 5-1: config 1 has no interface number 1 [ 87.111959][ T8] usb 5-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 [ 87.118017][ T8] usb 5-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 87.126059][ T8] usb 5-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 87.131615][ T8] usb 5-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 87.137135][ T8] usb 5-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.143958][ T8] usb 5-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 87.148050][ T8] usb 5-1: config 1 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 87.152747][ T8] usb 5-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 87.157929][ T8] usb 5-1: config 1 interface 170 has no altsetting 0 [ 87.161110][ T8] usb 5-1: config 1 interface 234 has no altsetting 0 [ 87.167671][ T8] usb 5-1: string descriptor 0 read error: -22 [ 87.170084][ T8] usb 5-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 [ 87.173292][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.193694][ T8] ------------[ cut here ]------------ [ 87.197527][ T8] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1025:18 [ 87.211071][ T8] index 1 is out of range for type 'hid_class_descriptor [1]' [ 87.215305][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-syzkaller-gb831f83e40a2 #0 [ 87.219034][ T8] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.224839][ T8] Workqueue: usb_hub_wq hub_event [ 87.227439][ T8] Call Trace: [ 87.228678][ T8] [ 87.229807][ T8] dump_stack_lvl+0x16c/0x1f0 [ 87.231722][ T8] __ubsan_handle_out_of_bounds+0x110/0x150 [ 87.233999][ T8] usbhid_parse+0x94e/0xa20 [ 87.235711][ T8] ? __pfx_usbhid_parse+0x10/0x10 [ 87.237702][ T8] hid_add_device+0x18b/0xa70 [ 87.240862][ T8] ? lockdep_init_map_type+0x16d/0x7d0 [ 87.243097][ T8] ? __pfx_hid_add_device+0x10/0x10 [ 87.244915][ T8] ? lockdep_init_map_type+0x16d/0x7d0 [ 87.247264][ T8] ? __raw_spin_lock_init+0x3a/0x110 [ 87.249728][ T8] usbhid_probe+0xd3b/0x1410 [ 87.252238][ T8] usb_probe_interface+0x309/0x9d0 [ 87.254713][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 87.258055][ T8] really_probe+0x23e/0xa90 [ 87.260713][ T8] __driver_probe_device+0x1de/0x440 [ 87.263368][ T8] driver_probe_device+0x4c/0x1b0 [ 87.266542][ T8] __device_attach_driver+0x1df/0x310 [ 87.269254][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 87.271534][ T8] bus_for_each_drv+0x157/0x1e0 [ 87.273498][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.275794][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.278069][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.280409][ T8] __device_attach+0x1e8/0x4b0 [ 87.282815][ T8] ? __pfx___device_attach+0x10/0x10 [ 87.285427][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 87.288550][ T8] bus_probe_device+0x17f/0x1c0 [ 87.290947][ T8] device_add+0x114b/0x1a70 [ 87.292950][ T8] ? __pfx_device_add+0x10/0x10 [ 87.294873][ T8] ? kfree+0x12a/0x3b0 [ 87.296447][ T8] usb_set_configuration+0x10cb/0x1c50 [ 87.299135][ T8] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 87.301659][ T8] usb_generic_driver_probe+0xb1/0x110 [ 87.303771][ T8] usb_probe_device+0xec/0x3e0 [ 87.305936][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 87.308520][ T8] really_probe+0x23e/0xa90 [ 87.310286][ T8] __driver_probe_device+0x1de/0x440 [ 87.312452][ T8] ? usb_driver_applicable+0x1c7/0x220 [ 87.314777][ T8] driver_probe_device+0x4c/0x1b0 [ 87.316774][ T8] __device_attach_driver+0x1df/0x310 [ 87.319006][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 87.321016][ T8] bus_for_each_drv+0x157/0x1e0 [ 87.322673][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.324657][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.326702][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.328945][ T8] __device_attach+0x1e8/0x4b0 [ 87.330895][ T8] ? __pfx___device_attach+0x10/0x10 [ 87.332941][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 87.334900][ T8] bus_probe_device+0x17f/0x1c0 [ 87.336804][ T8] device_add+0x114b/0x1a70 [ 87.338689][ T8] ? __pfx_device_add+0x10/0x10 [ 87.340769][ T8] ? usb_detect_static_quirks+0x335/0x3e0 [ 87.342951][ T8] usb_new_device+0xd90/0x1a10 [ 87.344792][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 87.347664][ T8] hub_event+0x2d9a/0x4e10 [ 87.350269][ T8] ? __pfx_hub_event+0x10/0x10 [ 87.352291][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 87.354374][ T8] ? __pfx_lock_release+0x10/0x10 [ 87.357215][ T8] process_one_work+0x9c5/0x1b40 [ 87.359141][ T8] ? __pfx_hcd_resume_work+0x10/0x10 [ 87.361179][ T8] ? __pfx_process_one_work+0x10/0x10 [ 87.363238][ T8] ? assign_work+0x1a0/0x250 [ 87.365084][ T8] worker_thread+0x6c8/0xed0 [ 87.366974][ T8] ? __pfx_worker_thread+0x10/0x10 [ 87.368888][ T8] kthread+0x2c1/0x3a0 [ 87.370454][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.372452][ T8] ? __pfx_kthread+0x10/0x10 [ 87.374224][ T8] ret_from_fork+0x45/0x80 [ 87.375986][ T8] ? __pfx_kthread+0x10/0x10 [ 87.377738][ T8] ret_from_fork_asm+0x1a/0x30 [ 87.379561][ T8] [ 87.386496][ T8] ---[ end trace ]--- [ 87.388108][ T8] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.390843][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-syzkaller-gb831f83e40a2 #0 [ 87.394767][ T8] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.399110][ T8] Workqueue: usb_hub_wq hub_event [ 87.401342][ T8] Call Trace: [ 87.403145][ T8] [ 87.404264][ T8] dump_stack_lvl+0x3d/0x1f0 [ 87.406143][ T8] panic+0x6dc/0x7c0 [ 87.407850][ T8] ? __pfx_panic+0x10/0x10 [ 87.409529][ T8] ? __pfx__printk+0x10/0x10 [ 87.411343][ T8] ? check_panic_on_warn+0x1f/0xb0 [ 87.413894][ T8] check_panic_on_warn+0xab/0xb0 [ 87.416812][ T8] __ubsan_handle_out_of_bounds+0x137/0x150 [ 87.419293][ T8] usbhid_parse+0x94e/0xa20 [ 87.420851][ T8] ? __pfx_usbhid_parse+0x10/0x10 [ 87.422567][ T8] hid_add_device+0x18b/0xa70 [ 87.424169][ T8] ? lockdep_init_map_type+0x16d/0x7d0 [ 87.426400][ T8] ? __pfx_hid_add_device+0x10/0x10 [ 87.428638][ T8] ? lockdep_init_map_type+0x16d/0x7d0 [ 87.431832][ T8] ? __raw_spin_lock_init+0x3a/0x110 [ 87.433889][ T8] usbhid_probe+0xd3b/0x1410 [ 87.435835][ T8] usb_probe_interface+0x309/0x9d0 [ 87.439704][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 87.442392][ T8] really_probe+0x23e/0xa90 [ 87.443949][ T8] __driver_probe_device+0x1de/0x440 [ 87.445754][ T8] driver_probe_device+0x4c/0x1b0 [ 87.447464][ T8] __device_attach_driver+0x1df/0x310 [ 87.449379][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 87.452136][ T8] bus_for_each_drv+0x157/0x1e0 [ 87.454574][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.456912][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.459443][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.461761][ T8] __device_attach+0x1e8/0x4b0 [ 87.463769][ T8] ? __pfx___device_attach+0x10/0x10 [ 87.466470][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 87.468407][ T8] bus_probe_device+0x17f/0x1c0 [ 87.470549][ T8] device_add+0x114b/0x1a70 [ 87.472731][ T8] ? __pfx_device_add+0x10/0x10 [ 87.474649][ T8] ? kfree+0x12a/0x3b0 [ 87.476219][ T8] usb_set_configuration+0x10cb/0x1c50 [ 87.478851][ T8] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 87.482096][ T8] usb_generic_driver_probe+0xb1/0x110 [ 87.484129][ T8] usb_probe_device+0xec/0x3e0 [ 87.486415][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 87.488436][ T8] really_probe+0x23e/0xa90 [ 87.491377][ T8] __driver_probe_device+0x1de/0x440 [ 87.493729][ T8] ? usb_driver_applicable+0x1c7/0x220 [ 87.495786][ T8] driver_probe_device+0x4c/0x1b0 [ 87.497704][ T8] __device_attach_driver+0x1df/0x310 [ 87.499735][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 87.501970][ T8] bus_for_each_drv+0x157/0x1e0 [ 87.503846][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 87.505962][ T8] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.507898][ T8] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 87.510433][ T8] __device_attach+0x1e8/0x4b0 [ 87.512255][ T8] ? __pfx___device_attach+0x10/0x10 [ 87.514276][ T8] ? do_raw_spin_unlock+0x172/0x230 [ 87.516245][ T8] bus_probe_device+0x17f/0x1c0 [ 87.518300][ T8] device_add+0x114b/0x1a70 [ 87.520043][ T8] ? __pfx_device_add+0x10/0x10 [ 87.522038][ T8] ? usb_detect_static_quirks+0x335/0x3e0 [ 87.524273][ T8] usb_new_device+0xd90/0x1a10 [ 87.526280][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 87.528034][ T8] hub_event+0x2d9a/0x4e10 [ 87.529710][ T8] ? __pfx_hub_event+0x10/0x10 [ 87.532274][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 87.534553][ T8] ? __pfx_lock_release+0x10/0x10 [ 87.536399][ T8] process_one_work+0x9c5/0x1b40 [ 87.538299][ T8] ? __pfx_hcd_resume_work+0x10/0x10 [ 87.540373][ T8] ? __pfx_process_one_work+0x10/0x10 [ 87.542218][ T8] ? assign_work+0x1a0/0x250 [ 87.543792][ T8] worker_thread+0x6c8/0xed0 [ 87.545386][ T8] ? __pfx_worker_thread+0x10/0x10 [ 87.547116][ T8] kthread+0x2c1/0x3a0 [ 87.548502][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.551118][ T8] ? __pfx_kthread+0x10/0x10 [ 87.553255][ T8] ret_from_fork+0x45/0x80 [ 87.554881][ T8] ? __pfx_kthread+0x10/0x10 [ 87.556660][ T8] ret_from_fork_asm+0x1a/0x30 [ 87.558468][ T8] [ 87.560467][ T8] Kernel Offset: disabled [ 87.562692][ T8] Rebooting in 86400 seconds..