[ 77.412821][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.415940][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:12274' (ED25519) to the list of known hosts. 2024/08/05 21:48:29 ignoring optional flag "sandboxArg"="0" 2024/08/05 21:48:29 parsed 1 programs [ 78.583091][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 78.583106][ T39] audit: type=1400 audit(1722894509.701:121): avc: denied { getattr } for pid=5452 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.595314][ T39] audit: type=1400 audit(1722894509.701:122): avc: denied { read } for pid=5452 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.603648][ T39] audit: type=1400 audit(1722894509.701:123): avc: denied { open } for pid=5452 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2024/08/05 21:48:29 executed programs: 0 [ 78.655452][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.661151][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.666277][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.670974][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.676049][ T5352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.679940][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.689725][ T39] audit: type=1400 audit(1722894509.811:124): avc: denied { mounton } for pid=5466 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.835105][ T5466] chnl_net:caif_netlink_parms(): no params data found [ 78.952711][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.955487][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.958342][ T5466] bridge_slave_0: entered allmulticast mode [ 78.962398][ T5466] bridge_slave_0: entered promiscuous mode [ 78.968626][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972014][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.975350][ T5466] bridge_slave_1: entered allmulticast mode [ 78.979748][ T5466] bridge_slave_1: entered promiscuous mode [ 79.039434][ T5466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.047143][ T5466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.114233][ T5466] team0: Port device team_slave_0 added [ 79.121015][ T5466] team0: Port device team_slave_1 added [ 79.176995][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.180707][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.191264][ T5466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.197991][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.201104][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.212033][ T5466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.273795][ T5466] hsr_slave_0: entered promiscuous mode [ 79.276660][ T5466] hsr_slave_1: entered promiscuous mode [ 79.448060][ T39] audit: type=1400 audit(1722894510.571:125): avc: denied { search } for pid=5477 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.458145][ T39] audit: type=1400 audit(1722894510.571:126): avc: denied { read } for pid=5478 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.468905][ T39] audit: type=1400 audit(1722894510.571:127): avc: denied { open } for pid=5478 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.479397][ T39] audit: type=1400 audit(1722894510.571:128): avc: denied { getattr } for pid=5478 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.489946][ T39] audit: type=1400 audit(1722894510.581:129): avc: denied { write } for pid=5477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.499648][ T39] audit: type=1400 audit(1722894510.581:130): avc: denied { add_name } for pid=5477 comm="dhcpcd-run-hook" name="resolv.conf.lapb9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.920140][ T5466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.949609][ T5466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.960683][ T5466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.967277][ T5466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.046031][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.064330][ T5466] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.074781][ T831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.078358][ T831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.089821][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.093002][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.124637][ T5466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.129651][ T5466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.263092][ T5466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.304819][ T5466] veth0_vlan: entered promiscuous mode [ 80.314057][ T5466] veth1_vlan: entered promiscuous mode [ 80.342639][ T5466] veth0_macvtap: entered promiscuous mode [ 80.348148][ T5466] veth1_macvtap: entered promiscuous mode [ 80.364893][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.375945][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.385211][ T5466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.390853][ T5466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.395072][ T5466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.401516][ T5466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.479892][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.483267][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.513545][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.530635][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.779853][ T5352] Bluetooth: hci0: command tx timeout [ 80.860516][ T833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.061781][ T833] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 81.065280][ T833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.069710][ T833] usb 5-1: config 0 has no interface number 0 [ 81.072100][ T833] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.076681][ T833] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 81.096455][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.104383][ T833] usb 5-1: config 0 descriptor?? [ 81.113363][ T833] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 81.118256][ T833] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 81.380523][ T833] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 81.386320][ T833] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 81.392960][ T833] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 81.396265][ T833] em28xx 5-1:0.237: No AC97 audio processor [ 81.410074][ T833] em28xx 5-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 81.478890][ T833] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 81.482055][ T833] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 81.485428][ T833] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 81.488612][ T833] em28xx 5-1:0.237: No AC97 audio processor [ 81.703198][ T833] usb 5-1: USB disconnect, device number 2 [ 81.706953][ T833] em28xx 5-1:0.237: Disconnecting em28xx #1 [ 81.710037][ T833] em28xx 5-1:0.237: Disconnecting em28xx [ 81.717667][ T833] em28xx 5-1:0.237: Freeing device [ 81.722247][ T833] em28xx 5-1:0.237: Freeing device [ 82.267477][ T833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.463145][ T833] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 82.469281][ T833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.473776][ T833] usb 5-1: config 0 has no interface number 0 [ 82.476539][ T833] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.483088][ T833] usb 5-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 82.487009][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.493049][ T833] usb 5-1: config 0 descriptor?? [ 82.500237][ T833] em28xx 5-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 82.504335][ T833] em28xx 5-1:0.237: Audio interface 237 found (Vendor Class) [ 82.770228][ T833] em28xx 5-1:0.237: unknown em28xx chip ID (0) [ 82.773746][ T833] em28xx 5-1:0.237: Config register raw data: 0xfffffffb [ 82.777256][ T833] em28xx 5-1:0.237: AC97 chip type couldn't be determined [ 82.780709][ T833] em28xx 5-1:0.237: No AC97 audio processor [ 82.783563][ T833] list_add corruption. prev->next should be next (ffffffff8f497f80), but was ffff88816ccd1630. (prev=ffff88801ba90250). [ 82.808870][ T833] ------------[ cut here ]------------ [ 82.812202][ T833] kernel BUG at lib/list_debug.c:32! [ 82.814622][ T833] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 82.820844][ T833] CPU: 3 UID: 0 PID: 833 Comm: kworker/3:2 Not tainted 6.11.0-rc2-syzkaller-gc813111d19e6 #0 [ 82.825205][ T833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.829978][ T833] Workqueue: usb_hub_wq hub_event [ 82.832112][ T833] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 82.834638][ T833] Code: e1 fc 90 0f 0b 48 89 d9 48 c7 c7 80 86 b0 8b e8 d8 d1 e1 fc 90 0f 0b 48 89 f1 48 c7 c7 00 87 b0 8b 48 89 de e8 c3 d1 e1 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 80 87 b0 8b e8 ab d1 e1 [ 82.842281][ T833] RSP: 0018:ffffc90004116f00 EFLAGS: 00010282 [ 82.844947][ T833] RAX: 0000000000000075 RBX: ffffffff8f497f80 RCX: ffffffff816b02e9 [ 82.848611][ T833] RDX: 0000000000000000 RSI: ffffffff816b96c6 RDI: 0000000000000005 [ 82.852279][ T833] RBP: ffff888025c1c250 R08: 0000000000000005 R09: 0000000000000000 [ 82.855891][ T833] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888025c1c250 [ 82.859480][ T833] R13: ffff888025c1c000 R14: ffff888025c1da04 R15: ffff8880249ce000 [ 82.863232][ T833] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 82.867054][ T833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.867429][ T5352] Bluetooth: hci0: command tx timeout [ 82.869639][ T833] CR2: 00007f341ef98000 CR3: 000000002cbe6000 CR4: 0000000000350ef0 [ 82.869649][ T833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.869657][ T833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.869666][ T833] Call Trace: [ 82.869674][ T833] [ 82.884609][ T833] ? show_regs+0x8c/0xa0 [ 82.886274][ T833] ? die+0x36/0xa0 [ 82.887706][ T833] ? do_trap+0x232/0x430 [ 82.889407][ T833] ? __list_add_valid_or_report+0xbe/0x100 [ 82.891733][ T833] ? __list_add_valid_or_report+0xbe/0x100 [ 82.894126][ T833] ? do_error_trap+0xf4/0x230 [ 82.896445][ T833] ? __list_add_valid_or_report+0xbe/0x100 [ 82.898978][ T833] ? handle_invalid_op+0x34/0x40 [ 82.901147][ T833] ? __list_add_valid_or_report+0xbe/0x100 [ 82.903626][ T833] ? exc_invalid_op+0x2e/0x50 [ 82.905732][ T833] ? asm_exc_invalid_op+0x1a/0x20 [ 82.907979][ T833] ? __wake_up_klogd.part.0+0x99/0xf0 [ 82.922786][ T833] ? vprintk+0x86/0xa0 [ 82.924618][ T833] ? __list_add_valid_or_report+0xbe/0x100 [ 82.927199][ T833] em28xx_init_extension+0x48/0x200 [ 82.933394][ T833] em28xx_init_dev.constprop.0+0x197b/0x3090 [ 82.935984][ T833] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 82.938718][ T833] ? lockdep_init_map_type+0x16d/0x7d0 [ 82.941064][ T833] ? rcu_is_watching+0x12/0xc0 [ 82.952036][ T833] ? lockdep_init_map_type+0x16d/0x7d0 [ 82.954486][ T833] ? __raw_spin_lock_init+0x3a/0x110 [ 82.956840][ T833] em28xx_usb_probe+0x10db/0x3730 [ 82.959088][ T833] usb_probe_interface+0x309/0x9d0 [ 82.961364][ T833] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.977973][ T833] really_probe+0x23e/0xa90 [ 82.979561][ T833] __driver_probe_device+0x1de/0x440 [ 82.981579][ T833] driver_probe_device+0x4c/0x1b0 [ 82.983506][ T833] __device_attach_driver+0x1df/0x310 [ 82.985514][ T833] ? __pfx___device_attach_driver+0x10/0x10 [ 82.987793][ T833] bus_for_each_drv+0x157/0x1e0 [ 82.989609][ T833] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.008058][ T833] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.010400][ T833] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.013037][ T833] __device_attach+0x1e8/0x4b0 [ 83.015252][ T833] ? __pfx___device_attach+0x10/0x10 [ 83.017596][ T833] ? do_raw_spin_unlock+0x172/0x230 [ 83.021948][ T833] bus_probe_device+0x17f/0x1c0 [ 83.039615][ T833] device_add+0x114b/0x1a70 [ 83.041655][ T833] ? __pfx_device_add+0x10/0x10 [ 83.043886][ T833] ? preempt_schedule_thunk+0x1a/0x30 [ 83.059302][ T833] usb_set_configuration+0x10cb/0x1c50 [ 83.061832][ T833] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 83.064707][ T833] usb_generic_driver_probe+0xb1/0x110 [ 83.067306][ T833] usb_probe_device+0xec/0x3e0 [ 83.069418][ T833] ? __pfx_usb_probe_device+0x10/0x10 [ 83.071828][ T833] really_probe+0x23e/0xa90 [ 83.073869][ T833] __driver_probe_device+0x1de/0x440 [ 83.076776][ T833] ? usb_driver_applicable+0x1c7/0x220 [ 83.079287][ T833] driver_probe_device+0x4c/0x1b0 [ 83.081907][ T833] __device_attach_driver+0x1df/0x310 [ 83.084957][ T833] ? __pfx___device_attach_driver+0x10/0x10 [ 83.087974][ T833] bus_for_each_drv+0x157/0x1e0 [ 83.090189][ T833] ? __pfx_bus_for_each_drv+0x10/0x10 [ 83.093175][ T833] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.095648][ T833] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.098374][ T833] __device_attach+0x1e8/0x4b0 [ 83.100450][ T833] ? __pfx___device_attach+0x10/0x10 [ 83.102825][ T833] ? do_raw_spin_unlock+0x172/0x230 [ 83.105351][ T833] bus_probe_device+0x17f/0x1c0 [ 83.107940][ T833] device_add+0x114b/0x1a70 [ 83.110936][ T833] ? __pfx_device_add+0x10/0x10 [ 83.114941][ T833] ? usb_detect_static_quirks+0x335/0x3e0 [ 83.118871][ T833] usb_new_device+0xd90/0x1a10 [ 83.121848][ T833] ? __pfx_usb_new_device+0x10/0x10 [ 83.125338][ T833] hub_event+0x2db0/0x4e20 [ 83.128026][ T833] ? __pfx_hub_event+0x10/0x10 [ 83.132356][ T833] ? __pfx_lock_acquire+0x10/0x10 [ 83.137866][ T833] ? __pfx_lock_release+0x10/0x10 [ 83.140946][ T833] process_one_work+0x9c5/0x1b40 [ 83.143637][ T833] ? __pfx_hub_event+0x10/0x10 [ 83.145783][ T833] ? __pfx_process_one_work+0x10/0x10 [ 83.148034][ T833] ? assign_work+0x1a0/0x250 [ 83.150005][ T833] worker_thread+0x6c8/0xf20 [ 83.152243][ T833] ? __kthread_parkme+0x148/0x220 [ 83.155269][ T833] ? __pfx_worker_thread+0x10/0x10 [ 83.158474][ T833] kthread+0x2c1/0x3a0 [ 83.160927][ T833] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.164042][ T833] ? __pfx_kthread+0x10/0x10 [ 83.166583][ T833] ret_from_fork+0x45/0x80 [ 83.168680][ T833] ? __pfx_kthread+0x10/0x10 [ 83.170815][ T833] ret_from_fork_asm+0x1a/0x30 [ 83.173473][ T833] [ 83.174830][ T833] Modules linked in: [ 83.186372][ T833] ---[ end trace 0000000000000000 ]--- [ 83.190228][ T833] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 83.193345][ T833] Code: e1 fc 90 0f 0b 48 89 d9 48 c7 c7 80 86 b0 8b e8 d8 d1 e1 fc 90 0f 0b 48 89 f1 48 c7 c7 00 87 b0 8b 48 89 de e8 c3 d1 e1 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 80 87 b0 8b e8 ab d1 e1 [ 83.203278][ T833] RSP: 0018:ffffc90004116f00 EFLAGS: 00010282 [ 83.206001][ T833] RAX: 0000000000000075 RBX: ffffffff8f497f80 RCX: ffffffff816b02e9 [ 83.211608][ T833] RDX: 0000000000000000 RSI: ffffffff816b96c6 RDI: 0000000000000005 [ 83.215257][ T833] RBP: ffff888025c1c250 R08: 0000000000000005 R09: 0000000000000000 [ 83.219380][ T833] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888025c1c250 [ 83.223672][ T833] R13: ffff888025c1c000 R14: ffff888025c1da04 R15: ffff8880249ce000 [ 83.227235][ T833] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 83.230969][ T833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.233601][ T833] CR2: 00007f341ef98000 CR3: 000000002cbe6000 CR4: 0000000000350ef0 [ 83.236824][ T833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.240794][ T833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.244450][ T833] Kernel panic - not syncing: Fatal exception [ 83.252437][ T833] Kernel Offset: disabled [ 83.254334][ T833] Rebooting in 86400 seconds..