Warning: Permanently added '[localhost]:43831' (ED25519) to the list of known hosts. 2025/07/30 16:11:25 ignoring optional flag "sandboxArg"="0" 2025/07/30 16:11:25 ignoring optional flag "type"="qemu" 2025/07/30 16:11:25 parsed 1 programs [ 58.178623][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 58.178634][ T40] audit: type=1400 audit(1753891885.618:103): avc: denied { getattr } for pid=6074 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.305540][ T40] audit: type=1400 audit(1753891885.748:104): avc: denied { unlink } for pid=6080 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.235150][ T6080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/07/30 16:11:26 executed programs: 0 [ 59.269011][ T40] audit: type=1400 audit(1753891886.708:105): avc: denied { create } for pid=6087 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.277059][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.280939][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.285239][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.289550][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.292940][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.423311][ T6087] chnl_net:caif_netlink_parms(): no params data found [ 59.485359][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.488194][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.491001][ T6087] bridge_slave_0: entered allmulticast mode [ 59.495373][ T6087] bridge_slave_0: entered promiscuous mode [ 59.499903][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.502597][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.506561][ T6087] bridge_slave_1: entered allmulticast mode [ 59.509688][ T6087] bridge_slave_1: entered promiscuous mode [ 59.554435][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.561777][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.613890][ T6087] team0: Port device team_slave_0 added [ 59.618554][ T6087] team0: Port device team_slave_1 added [ 59.648739][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.650994][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.659184][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.663492][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.665768][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.673824][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.712902][ T6087] hsr_slave_0: entered promiscuous mode [ 59.715651][ T6087] hsr_slave_1: entered promiscuous mode [ 59.810072][ T40] audit: type=1400 audit(1753891887.248:106): avc: denied { search } for pid=6097 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.816952][ T40] audit: type=1400 audit(1753891887.248:107): avc: denied { search } for pid=6097 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.823906][ T40] audit: type=1400 audit(1753891887.248:108): avc: denied { search } for pid=6097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.830990][ T40] audit: type=1400 audit(1753891887.248:109): avc: denied { search } for pid=6097 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.838252][ T40] audit: type=1400 audit(1753891887.248:110): avc: denied { read open } for pid=6099 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.847461][ T40] audit: type=1400 audit(1753891887.248:111): avc: denied { getattr } for pid=6099 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.855217][ T40] audit: type=1400 audit(1753891887.258:112): avc: denied { add_name } for pid=6097 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.188647][ T6087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.196720][ T6087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.202700][ T6087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.210876][ T6087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.225787][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.228068][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.230501][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.232744][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.261079][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.274595][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278467][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.293777][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.299883][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.302214][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.307378][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.310407][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.412458][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.439442][ T6087] veth0_vlan: entered promiscuous mode [ 60.444474][ T6087] veth1_vlan: entered promiscuous mode [ 60.459297][ T6087] veth0_macvtap: entered promiscuous mode [ 60.463052][ T6087] veth1_macvtap: entered promiscuous mode [ 60.474892][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.482796][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.488806][ T6087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491616][ T6087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.494744][ T6087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.497477][ T6087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.531708][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.535435][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.549031][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.552321][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.823646][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.995556][ T59] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 60.998249][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.001431][ T59] usb 5-1: config 0 has no interface number 0 [ 61.003434][ T59] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.007050][ T59] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 61.009932][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.015773][ T59] usb 5-1: config 0 descriptor?? [ 61.026324][ T59] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 61.030055][ T59] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 61.294098][ T59] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 61.296340][ T59] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 61.298779][ T59] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 61.301034][ T59] em28xx 5-1:0.108: No AC97 audio processor [ 61.302981][ T59] em28xx 5-1:0.108: We currently don't support analog TV or stream capture on dual tuners. [ 61.355118][ T5933] Bluetooth: hci0: command tx timeout [ 61.364048][ T59] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 61.366443][ T59] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 61.368978][ T59] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 61.371294][ T59] em28xx 5-1:0.108: No AC97 audio processor [ 61.580534][ T59] usb 5-1: USB disconnect, device number 2 [ 61.583142][ T59] em28xx 5-1:0.108: Disconnecting em28xx #1 [ 61.585467][ T59] em28xx 5-1:0.108: Disconnecting em28xx [ 61.589609][ T59] em28xx 5-1:0.108: Freeing device [ 61.591327][ T59] em28xx 5-1:0.108: Freeing device [ 62.063759][ T59] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.215670][ T59] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 62.219114][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.223311][ T59] usb 5-1: config 0 has no interface number 0 [ 62.226020][ T59] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.230577][ T59] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 62.234390][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.239155][ T59] usb 5-1: config 0 descriptor?? [ 62.243234][ T59] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 62.246213][ T59] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 62.494100][ T59] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 62.496501][ T59] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 62.499059][ T59] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 62.501366][ T59] em28xx 5-1:0.108: No AC97 audio processor [ 62.503295][ T59] non-slab/vmalloc memory [ 62.505186][ T59] list_add corruption. prev->next should be next (ffffffff8fdbeae0), but was ffffffff81000130. (prev=ffff8880373d8250). [ 62.509487][ T59] ------------[ cut here ]------------ [ 62.511337][ T59] kernel BUG at lib/list_debug.c:32! [ 62.513060][ T59] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 62.515197][ T59] CPU: 3 UID: 0 PID: 59 Comm: kworker/3:1 Not tainted 6.16.0-syzkaller-g4b290aae788e #0 PREEMPT(full) [ 62.519131][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.523576][ T59] Workqueue: usb_hub_wq hub_event [ 62.525577][ T59] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 62.528172][ T59] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 80 ef 15 8c 48 89 ee e8 d6 3f b2 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 00 f0 15 8c e8 be 3f b2 [ 62.535710][ T59] RSP: 0018:ffffc90000acee88 EFLAGS: 00010282 [ 62.538118][ T59] RAX: 0000000000000075 RBX: ffff888039b90000 RCX: ffffffff819a6d19 [ 62.541219][ T59] RDX: 0000000000000000 RSI: ffffffff819aeba6 RDI: 0000000000000005 [ 62.544359][ T59] RBP: ffffffff8fdbeae0 R08: 0000000000000005 R09: 0000000000000000 [ 62.547480][ T59] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888039b90250 [ 62.550582][ T59] R13: ffffffff8fdbeae8 R14: ffff888039b901a8 R15: ffff888039b91a34 [ 62.553708][ T59] FS: 0000000000000000(0000) GS:ffff8880d6a22000(0000) knlGS:0000000000000000 [ 62.557200][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.559803][ T59] CR2: 00007f6f1f198000 CR3: 000000003231f000 CR4: 0000000000352ef0 [ 62.563036][ T59] Call Trace: [ 62.564378][ T59] [ 62.565560][ T59] em28xx_init_extension+0x48/0x200 [ 62.567620][ T59] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 62.569986][ T59] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 62.572478][ T59] ? rcu_is_watching+0x12/0xc0 [ 62.574380][ T59] ? lockdep_init_map_type+0x5c/0x280 [ 62.576496][ T59] ? lockdep_init_map_type+0x5c/0x280 [ 62.578618][ T59] em28xx_usb_probe+0x1285/0x3770 [ 62.580608][ T59] usb_probe_interface+0x303/0xa40 [ 62.582645][ T59] ? __pfx_usb_probe_interface+0x10/0x10 [ 62.584874][ T59] really_probe+0x23e/0xa90 [ 62.586683][ T59] __driver_probe_device+0x1de/0x440 [ 62.588763][ T59] driver_probe_device+0x4c/0x1b0 [ 62.590752][ T59] __device_attach_driver+0x1df/0x310 [ 62.592885][ T59] ? __pfx___device_attach_driver+0x10/0x10 [ 62.595238][ T59] bus_for_each_drv+0x156/0x1e0 [ 62.597176][ T59] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.599300][ T59] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.601367][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.603698][ T59] __device_attach+0x1e4/0x4b0 [ 62.605598][ T59] ? __pfx___device_attach+0x10/0x10 [ 62.607691][ T59] ? do_raw_spin_unlock+0x172/0x230 [ 62.609751][ T59] bus_probe_device+0x17f/0x1c0 [ 62.611680][ T59] device_add+0x1148/0x1a70 [ 62.613486][ T59] ? __pfx_device_add+0x10/0x10 [ 62.615422][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 62.617548][ T59] usb_set_configuration+0x1187/0x1e20 [ 62.619706][ T59] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 62.622110][ T59] usb_generic_driver_probe+0xb1/0x110 [ 62.624282][ T59] usb_probe_device+0xef/0x3e0 [ 62.626198][ T59] ? __pfx_usb_probe_device+0x10/0x10 [ 62.628312][ T59] really_probe+0x23e/0xa90 [ 62.630126][ T59] __driver_probe_device+0x1de/0x440 [ 62.632208][ T59] ? usb_driver_applicable+0x1c7/0x220 [ 62.634367][ T59] driver_probe_device+0x4c/0x1b0 [ 62.636355][ T59] __device_attach_driver+0x1df/0x310 [ 62.638481][ T59] ? __pfx___device_attach_driver+0x10/0x10 [ 62.640811][ T59] bus_for_each_drv+0x156/0x1e0 [ 62.642750][ T59] ? __pfx_bus_for_each_drv+0x10/0x10 [ 62.644883][ T59] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.646963][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.649257][ T59] __device_attach+0x1e4/0x4b0 [ 62.651172][ T59] ? __pfx___device_attach+0x10/0x10 [ 62.653260][ T59] ? do_raw_spin_unlock+0x172/0x230 [ 62.655342][ T59] bus_probe_device+0x17f/0x1c0 [ 62.657272][ T59] device_add+0x1148/0x1a70 [ 62.659090][ T59] ? __pfx_device_add+0x10/0x10 [ 62.661014][ T59] ? usb_detect_static_quirks+0x335/0x3e0 [ 62.663286][ T59] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 62.665621][ T59] usb_new_device+0xd07/0x1a60 [ 62.667529][ T59] ? do_raw_spin_lock+0x12c/0x2b0 [ 62.669517][ T59] ? __pfx_usb_new_device+0x10/0x10 [ 62.671574][ T59] ? mark_held_locks+0x49/0x80 [ 62.673468][ T59] hub_event+0x2f34/0x4fe0 [ 62.675325][ T59] ? __pfx_hub_event+0x10/0x10 [ 62.677212][ T59] ? assoc_array_delete+0x7e0/0xd10 [ 62.679282][ T59] ? rcu_is_watching+0x12/0xc0 [ 62.681178][ T59] process_one_work+0x9cf/0x1b70 [ 62.683222][ T59] ? __pfx_hub_event+0x10/0x10 [ 62.685112][ T59] ? __pfx_process_one_work+0x10/0x10 [ 62.687238][ T59] ? assign_work+0x1a0/0x250 [ 62.689070][ T59] worker_thread+0x6c8/0xf10 [ 62.690957][ T59] ? __kthread_parkme+0x19e/0x250 [ 62.692564][ T59] ? __pfx_worker_thread+0x10/0x10 [ 62.694206][ T59] kthread+0x3c2/0x780 [ 62.695516][ T59] ? __pfx_kthread+0x10/0x10 [ 62.696985][ T59] ? rcu_is_watching+0x12/0xc0 [ 62.698600][ T59] ? __pfx_kthread+0x10/0x10 [ 62.700067][ T59] ret_from_fork+0x5d7/0x6f0 [ 62.701554][ T59] ? __pfx_kthread+0x10/0x10 [ 62.703080][ T59] ret_from_fork_asm+0x1a/0x30 [ 62.704616][ T59] [ 62.705619][ T59] Modules linked in: [ 62.707063][ T59] ---[ end trace 0000000000000000 ]--- [ 62.709083][ T59] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 62.711263][ T59] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 80 ef 15 8c 48 89 ee e8 d6 3f b2 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 00 f0 15 8c e8 be 3f b2 [ 62.717324][ T59] RSP: 0018:ffffc90000acee88 EFLAGS: 00010282 [ 62.719251][ T59] RAX: 0000000000000075 RBX: ffff888039b90000 RCX: ffffffff819a6d19 [ 62.721739][ T59] RDX: 0000000000000000 RSI: ffffffff819aeba6 RDI: 0000000000000005 [ 62.724314][ T59] RBP: ffffffff8fdbeae0 R08: 0000000000000005 R09: 0000000000000000 [ 62.726812][ T59] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888039b90250 [ 62.729278][ T59] R13: ffffffff8fdbeae8 R14: ffff888039b901a8 R15: ffff888039b91a34 [ 62.731777][ T59] FS: 0000000000000000(0000) GS:ffff8880d6a22000(0000) knlGS:0000000000000000 [ 62.734646][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.736726][ T59] CR2: 00007f6f1f198000 CR3: 000000003231f000 CR4: 0000000000352ef0 [ 62.739249][ T59] Kernel panic - not syncing: Fatal exception [ 62.741730][ T59] Kernel Offset: disabled [ 62.743139][ T59] Rebooting in 86400 seconds..