[ 71.219002][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222054][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:52950' (ED25519) to the list of known hosts. 2025/10/27 01:51:38 parsed 1 programs [ 79.296269][ T40] audit: type=1400 audit(1761529901.036:118): avc: denied { unlink } for pid=6207 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.262157][ T6207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.463974][ T71] cfg80211: failed to load regulatory.db [ 82.163813][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.166677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.205399][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.207877][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.398317][ T40] audit: type=1401 audit(1761529904.136:119): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 82.603030][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.605967][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.608560][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.611260][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.613659][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.724105][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 83.025170][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.027713][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.030136][ T6267] bridge_slave_0: entered allmulticast mode [ 83.032858][ T6267] bridge_slave_0: entered promiscuous mode [ 83.045198][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.047580][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.050062][ T6267] bridge_slave_1: entered allmulticast mode [ 83.052815][ T6267] bridge_slave_1: entered promiscuous mode [ 83.099561][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.127595][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.174872][ T6267] team0: Port device team_slave_0 added [ 83.180376][ T6267] team0: Port device team_slave_1 added [ 83.269513][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.272003][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.283775][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.293643][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.296942][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.307736][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.382195][ T6267] hsr_slave_0: entered promiscuous mode [ 83.386173][ T6267] hsr_slave_1: entered promiscuous mode [ 84.015995][ T6267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.022401][ T6267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.029250][ T6267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.035282][ T6267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.100962][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.116649][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.124067][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.127038][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.138547][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.141508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.267523][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.297577][ T6267] veth0_vlan: entered promiscuous mode [ 84.305972][ T6267] veth1_vlan: entered promiscuous mode [ 84.326907][ T6267] veth0_macvtap: entered promiscuous mode [ 84.332243][ T6267] veth1_macvtap: entered promiscuous mode [ 84.345758][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.353051][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.361214][ T216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.363979][ T216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.374824][ T216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378347][ T216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/27 01:51:46 executed programs: 0 [ 84.501967][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.506619][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.511052][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.513901][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.518217][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.519993][ T6361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.527170][ T6361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.532083][ T6361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.532569][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.536937][ T6365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.538420][ T6361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.538700][ T6361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.539251][ T6361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.539368][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.539740][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.539987][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.548952][ T5295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.551463][ T6361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.553813][ T5295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.569098][ T5295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.819642][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 84.962147][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 84.969403][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 85.035496][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.088247][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.091205][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094060][ T6359] bridge_slave_0: entered allmulticast mode [ 85.099409][ T6359] bridge_slave_0: entered promiscuous mode [ 85.105141][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.107877][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.110089][ T6359] bridge_slave_1: entered allmulticast mode [ 85.112593][ T6359] bridge_slave_1: entered promiscuous mode [ 85.158006][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.163189][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 85.237873][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.297129][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.300316][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.303430][ T6356] bridge_slave_0: entered allmulticast mode [ 85.307873][ T6356] bridge_slave_0: entered promiscuous mode [ 85.319510][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.348183][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.354591][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.357239][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.359651][ T6356] bridge_slave_1: entered allmulticast mode [ 85.362334][ T6356] bridge_slave_1: entered promiscuous mode [ 85.521756][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.525095][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.528194][ T6357] bridge_slave_0: entered allmulticast mode [ 85.532156][ T6357] bridge_slave_0: entered promiscuous mode [ 85.539547][ T6359] team0: Port device team_slave_0 added [ 85.543089][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.546843][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.549862][ T6354] bridge_slave_0: entered allmulticast mode [ 85.553757][ T6354] bridge_slave_0: entered promiscuous mode [ 85.557700][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.560010][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.562168][ T6354] bridge_slave_1: entered allmulticast mode [ 85.565621][ T6354] bridge_slave_1: entered promiscuous mode [ 85.588548][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.592453][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.595803][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.598980][ T6357] bridge_slave_1: entered allmulticast mode [ 85.603502][ T6357] bridge_slave_1: entered promiscuous mode [ 85.634383][ T6359] team0: Port device team_slave_1 added [ 85.678694][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.721806][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.724876][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.735361][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.740571][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.759440][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.763397][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.765834][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.773703][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.782294][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.802129][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.857170][ T6356] team0: Port device team_slave_0 added [ 85.874412][ T6357] team0: Port device team_slave_0 added [ 85.878040][ T6357] team0: Port device team_slave_1 added [ 85.909301][ T6356] team0: Port device team_slave_1 added [ 85.941481][ T6359] hsr_slave_0: entered promiscuous mode [ 85.943925][ T6359] hsr_slave_1: entered promiscuous mode [ 85.947454][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 85.949486][ T6359] Cannot create hsr debugfs directory [ 85.952801][ T6354] team0: Port device team_slave_0 added [ 85.956761][ T6354] team0: Port device team_slave_1 added [ 85.977363][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.979990][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.989836][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.012454][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.015533][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.023719][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.027935][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.030186][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.038406][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.067905][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.070192][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.078826][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.120494][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.122913][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.131472][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.155757][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.158741][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.171113][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.272747][ T6354] hsr_slave_0: entered promiscuous mode [ 86.278263][ T6354] hsr_slave_1: entered promiscuous mode [ 86.281180][ T6354] debugfs: 'hsr0' already exists in 'hsr' [ 86.283272][ T6354] Cannot create hsr debugfs directory [ 86.311008][ T6356] hsr_slave_0: entered promiscuous mode [ 86.314343][ T6356] hsr_slave_1: entered promiscuous mode [ 86.317267][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 86.319413][ T6356] Cannot create hsr debugfs directory [ 86.332577][ T6357] hsr_slave_0: entered promiscuous mode [ 86.334897][ T6357] hsr_slave_1: entered promiscuous mode [ 86.337115][ T6357] debugfs: 'hsr0' already exists in 'hsr' [ 86.338959][ T6357] Cannot create hsr debugfs directory [ 86.575660][ T6361] Bluetooth: hci1: command tx timeout [ 86.575666][ T5953] Bluetooth: hci3: command tx timeout [ 86.577801][ T6361] Bluetooth: hci0: command tx timeout [ 86.579768][ T5295] Bluetooth: hci2: command tx timeout [ 86.699719][ T6359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.710659][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.720179][ T6359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.726444][ T6359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.732805][ T6359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.792859][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.802606][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.807662][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.810028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.816742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.819536][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.928717][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.951484][ T6359] veth0_vlan: entered promiscuous mode [ 86.957407][ T6359] veth1_vlan: entered promiscuous mode [ 86.973619][ T6359] veth0_macvtap: entered promiscuous mode [ 86.978834][ T6359] veth1_macvtap: entered promiscuous mode [ 87.000395][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.007041][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.015937][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020538][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.023867][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.030442][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.069083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.072391][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.093310][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.097096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.131073][ T40] audit: type=1400 audit(1761529908.866:120): avc: denied { read write } for pid=6450 comm="syz.3.20" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.149650][ T40] audit: type=1400 audit(1761529908.866:121): avc: denied { open } for pid=6450 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.155249][ T6357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.163982][ T40] audit: type=1400 audit(1761529908.866:122): avc: denied { ioctl } for pid=6450 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.165951][ T6357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.181459][ T6357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.187704][ T6357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.255142][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.269988][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.276106][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.278475][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.284626][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.287567][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.374428][ T6446] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.403383][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.436744][ T6357] veth0_vlan: entered promiscuous mode [ 87.442343][ T6357] veth1_vlan: entered promiscuous mode [ 87.458439][ T6357] veth0_macvtap: entered promiscuous mode [ 87.462813][ T6357] veth1_macvtap: entered promiscuous mode [ 87.471441][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.479407][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.485698][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.497227][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.499999][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.502840][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.531047][ T6446] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 87.535210][ T6446] usb 8-1: config 0 has no interface number 0 [ 87.537847][ T6446] usb 8-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.541910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.542427][ T6446] usb 8-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 87.550217][ T6446] usb 8-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.550425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.558256][ T6446] usb 8-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 87.562025][ T6446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.566198][ T6446] usb 8-1: Product: syz [ 87.567924][ T6446] usb 8-1: Manufacturer: syz [ 87.569081][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.569731][ T6446] usb 8-1: SerialNumber: syz [ 87.572276][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.578171][ T6446] usb 8-1: config 0 descriptor?? [ 87.589583][ T6446] em28xx 8-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 87.598400][ T6446] em28xx 8-1:0.244: Audio interface 244 found (Vendor Class) [ 87.844742][ T6477] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.848322][ T6446] em28xx 8-1:0.244: unknown em28xx chip ID (0) [ 87.852879][ T6446] em28xx 8-1:0.244: Config register raw data: 0xfffffffb [ 87.856182][ T6446] em28xx 8-1:0.244: AC97 chip type couldn't be determined [ 87.859089][ T6446] em28xx 8-1:0.244: No AC97 audio processor [ 87.861430][ T6446] em28xx 8-1:0.244: We currently don't support analog TV or stream capture on dual tuners. [ 87.931540][ T6446] em28xx 8-1:0.244: unknown em28xx chip ID (0) [ 87.934419][ T6446] em28xx 8-1:0.244: Config register raw data: 0xfffffffb [ 87.937705][ T6446] em28xx 8-1:0.244: AC97 chip type couldn't be determined [ 87.940582][ T6446] em28xx 8-1:0.244: No AC97 audio processor [ 87.951445][ T81] bridge_slave_1: left allmulticast mode [ 87.953812][ T81] bridge_slave_1: left promiscuous mode [ 87.956887][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.962583][ T81] bridge_slave_0: left allmulticast mode [ 87.965967][ T81] bridge_slave_0: left promiscuous mode [ 87.968644][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.009392][ T6477] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 88.012681][ T6477] usb 7-1: config 0 has no interface number 0 [ 88.015739][ T6477] usb 7-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.020414][ T6477] usb 7-1: config 0 interface 244 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 88.026863][ T6477] usb 7-1: config 0 interface 244 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.033041][ T6477] usb 7-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=57.6a [ 88.036338][ T6477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.039213][ T6477] usb 7-1: Product: syz [ 88.040644][ T6477] usb 7-1: Manufacturer: syz [ 88.042419][ T6477] usb 7-1: SerialNumber: syz [ 88.046317][ T6477] usb 7-1: config 0 descriptor?? [ 88.051665][ T6477] em28xx 7-1:0.244: New device syz syz @ 480 Mbps (2040:026d, interface 244, class 244) [ 88.055155][ T6477] em28xx 7-1:0.244: Audio interface 244 found (Vendor Class) [ 88.165215][ T6446] usb 8-1: USB disconnect, device number 2 [ 88.169289][ T6446] em28xx 8-1:0.244: Disconnecting em28xx #1 [ 88.171697][ T6446] em28xx 8-1:0.244: Disconnecting em28xx [ 88.176843][ T6446] em28xx 8-1:0.244: Freeing device [ 88.178514][ T6446] em28xx 8-1:0.244: Freeing device [ 88.243337][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.247942][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.253470][ T81] bond0 (unregistering): Released all slaves [ 88.305104][ T6477] em28xx 7-1:0.244: unknown em28xx chip ID (0) [ 88.309091][ T6477] em28xx 7-1:0.244: Config register raw data: 0xfffffffb [ 88.314728][ T6477] em28xx 7-1:0.244: AC97 chip type couldn't be determined [ 88.317148][ T6477] em28xx 7-1:0.244: No AC97 audio processor [ 88.319576][ T6477] non-slab/vmalloc memory [ 88.322440][ T6477] list_add corruption. prev->next should be next (ffffffff8fb54760), but was 00000011da503406. (prev=ffff88804e304250). [ 88.328076][ T6477] ------------[ cut here ]------------ [ 88.330001][ T6477] kernel BUG at lib/list_debug.c:32! [ 88.332181][ T6477] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 88.335683][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 88.340105][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.343945][ T6477] Workqueue: usb_hub_wq hub_event [ 88.345994][ T6477] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 88.348258][ T6477] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 70 f0 8b 48 89 ee e8 c6 09 ef fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 70 f0 8b e8 ae 09 ef [ 88.355513][ T6477] RSP: 0018:ffffc9000369ee78 EFLAGS: 00010282 [ 88.357996][ T6477] RAX: 0000000000000075 RBX: ffff888032810000 RCX: ffffffff819b7199 [ 88.360848][ T6477] RDX: 0000000000000000 RSI: ffffffff819becc6 RDI: 0000000000000005 [ 88.363957][ T6477] RBP: ffffffff8fb54760 R08: 0000000000000005 R09: 0000000000000000 [ 88.366957][ T6477] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888032810250 [ 88.369970][ T6477] R13: ffffffff8fb54768 R14: ffff8880328101a8 R15: ffff888032811a34 [ 88.373051][ T6477] FS: 0000000000000000(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000 [ 88.376338][ T6477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.378991][ T6477] CR2: 000055555d11a808 CR3: 0000000051a57000 CR4: 0000000000352ef0 [ 88.382117][ T6477] Call Trace: [ 88.383432][ T6477] [ 88.384380][ T6477] em28xx_init_extension+0x48/0x200 [ 88.386209][ T6477] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 88.388617][ T6477] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 88.391123][ T6477] ? lockdep_init_map_type+0x5c/0x280 [ 88.393360][ T6477] ? lockdep_init_map_type+0x5c/0x280 [ 88.395530][ T6477] em28xx_usb_probe+0x1285/0x3770 [ 88.397524][ T6477] usb_probe_interface+0x303/0xa40 [ 88.399584][ T6477] ? __pfx_usb_probe_interface+0x10/0x10 [ 88.401803][ T6477] really_probe+0x241/0xa90 [ 88.403600][ T6477] __driver_probe_device+0x1de/0x440 [ 88.405680][ T6477] driver_probe_device+0x4c/0x1b0 [ 88.407696][ T6477] __device_attach_driver+0x1df/0x310 [ 88.409850][ T6477] ? __pfx___device_attach_driver+0x10/0x10 [ 88.412172][ T6477] bus_for_each_drv+0x159/0x1e0 [ 88.414107][ T6477] ? __pfx_bus_for_each_drv+0x10/0x10 [ 88.416218][ T6477] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.418313][ T6477] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.420543][ T6477] __device_attach+0x1e4/0x4b0 [ 88.422036][ T6477] ? __pfx___device_attach+0x10/0x10 [ 88.423958][ T6477] ? do_raw_spin_unlock+0x172/0x230 [ 88.426008][ T6477] bus_probe_device+0x17f/0x1c0 [ 88.427955][ T6477] device_add+0x1148/0x1aa0 [ 88.429756][ T6477] ? __pfx_device_add+0x10/0x10 [ 88.431614][ T6477] ? preempt_schedule_thunk+0x16/0x30 [ 88.433256][ T6477] usb_set_configuration+0x1187/0x1e20 [ 88.434924][ T6477] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 88.437100][ T6477] usb_generic_driver_probe+0xb1/0x110 [ 88.439236][ T6477] usb_probe_device+0xef/0x3e0 [ 88.441103][ T6477] ? __pfx_usb_probe_device+0x10/0x10 [ 88.443073][ T6477] really_probe+0x241/0xa90 [ 88.444827][ T6477] __driver_probe_device+0x1de/0x440 [ 88.446671][ T6477] ? usb_driver_applicable+0x1c7/0x220 [ 88.448426][ T6477] driver_probe_device+0x4c/0x1b0 [ 88.450040][ T6477] __device_attach_driver+0x1df/0x310 [ 88.452083][ T6477] ? __pfx___device_attach_driver+0x10/0x10 [ 88.454432][ T6477] bus_for_each_drv+0x159/0x1e0 [ 88.456385][ T6477] ? __pfx_bus_for_each_drv+0x10/0x10 [ 88.458555][ T6477] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.460337][ T6477] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.462430][ T6477] __device_attach+0x1e4/0x4b0 [ 88.464201][ T6477] ? __pfx___device_attach+0x10/0x10 [ 88.466315][ T6477] ? do_raw_spin_unlock+0x172/0x230 [ 88.468341][ T6477] bus_probe_device+0x17f/0x1c0 [ 88.470275][ T6477] device_add+0x1148/0x1aa0 [ 88.472043][ T6477] ? __pfx_device_add+0x10/0x10 [ 88.473972][ T6477] ? add_device_randomness+0xb7/0xf0 [ 88.476050][ T6477] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 88.478425][ T6477] usb_new_device+0xd07/0x1a60 [ 88.480347][ T6477] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.482332][ T6477] ? __pfx_usb_new_device+0x10/0x10 [ 88.484396][ T6477] ? mark_held_locks+0x49/0x80 [ 88.486321][ T6477] hub_event+0x2f34/0x4fe0 [ 88.488134][ T6477] ? __pfx_hub_event+0x10/0x10 [ 88.490025][ T6477] ? assoc_array_insert+0x810/0x3970 [ 88.492100][ T6477] ? rcu_is_watching+0x12/0xc0 [ 88.493772][ T6477] process_one_work+0x9cf/0x1b70 [ 88.495309][ T6477] ? __pfx_hcd_resume_work+0x10/0x10 [ 88.496978][ T6477] ? __pfx_process_one_work+0x10/0x10 [ 88.498902][ T6477] ? assign_work+0x1a0/0x250 [ 88.500385][ T6477] worker_thread+0x6c8/0xf10 [ 88.502155][ T6477] ? __kthread_parkme+0x19e/0x250 [ 88.504060][ T6477] ? __pfx_worker_thread+0x10/0x10 [ 88.506095][ T6477] kthread+0x3c5/0x780 [ 88.507417][ T6477] ? __pfx_kthread+0x10/0x10 [ 88.508973][ T6477] ? rcu_is_watching+0x12/0xc0 [ 88.510916][ T6477] ? __pfx_kthread+0x10/0x10 [ 88.512452][ T6477] ret_from_fork+0x675/0x7d0 [ 88.514012][ T6477] ? __pfx_kthread+0x10/0x10 [ 88.515687][ T6477] ret_from_fork_asm+0x1a/0x30 [ 88.517250][ T6477] [ 88.518426][ T6477] Modules linked in: [ 88.520252][ T6477] ---[ end trace 0000000000000000 ]--- [ 88.523350][ T6477] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 88.526706][ T6477] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 40 70 f0 8b 48 89 ee e8 c6 09 ef fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 c0 70 f0 8b e8 ae 09 ef [ 88.533138][ T6477] RSP: 0018:ffffc9000369ee78 EFLAGS: 00010282 [ 88.535291][ T6477] RAX: 0000000000000075 RBX: ffff888032810000 RCX: ffffffff819b7199 [ 88.538092][ T6477] RDX: 0000000000000000 RSI: ffffffff819becc6 RDI: 0000000000000005 [ 88.541177][ T6477] RBP: ffffffff8fb54760 R08: 0000000000000005 R09: 0000000000000000 [ 88.544589][ T6477] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888032810250 [ 88.547820][ T6477] R13: ffffffff8fb54768 R14: ffff8880328101a8 R15: ffff888032811a34 [ 88.550948][ T6477] FS: 0000000000000000(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000 [ 88.554720][ T6477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.557319][ T6477] CR2: 000055555d11a808 CR3: 0000000051a57000 CR4: 0000000000352ef0 [ 88.560557][ T6477] Kernel panic - not syncing: Fatal exception [ 88.563517][ T6477] Kernel Offset: disabled [ 88.565233][ T6477] Rebooting in 86400 seconds..