Warning: Permanently added '[localhost]:25053' (ED25519) to the list of known hosts. 2024/06/10 21:50:15 ignoring optional flag "sandboxArg"="0" 2024/06/10 21:50:15 parsed 1 programs [ 75.031168][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 75.031180][ T39] audit: type=1400 audit(1718056215.361:207): avc: denied { getattr } for pid=5402 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.042043][ T39] audit: type=1400 audit(1718056215.371:208): avc: denied { read } for pid=5402 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.049941][ T39] audit: type=1400 audit(1718056215.371:209): avc: denied { open } for pid=5402 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.068724][ T39] audit: type=1400 audit(1718056215.401:210): avc: denied { mounton } for pid=5414 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 75.078252][ T39] audit: type=1400 audit(1718056215.401:211): avc: denied { mount } for pid=5414 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 75.086692][ T39] audit: type=1400 audit(1718056215.401:212): avc: denied { setattr } for pid=5414 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.094612][ T39] audit: type=1400 audit(1718056215.411:213): avc: denied { read write } for pid=5414 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.103527][ T39] audit: type=1400 audit(1718056215.411:214): avc: denied { open } for pid=5414 comm="syz-executor" path="/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.126600][ T39] audit: type=1400 audit(1718056215.461:215): avc: denied { unlink } for pid=5414 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.482006][ T39] audit: type=1400 audit(1718056215.811:216): avc: denied { relabelto } for pid=5421 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.389324][ T5414] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/10 21:50:16 executed programs: 0 [ 76.450990][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.455348][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.459616][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.464207][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.468092][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.471677][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.600276][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 76.717593][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.720921][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.724348][ T5428] bridge_slave_0: entered allmulticast mode [ 76.728449][ T5428] bridge_slave_0: entered promiscuous mode [ 76.734213][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.737531][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.740781][ T5428] bridge_slave_1: entered allmulticast mode [ 76.744905][ T5428] bridge_slave_1: entered promiscuous mode [ 76.815838][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.823668][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.890653][ T5428] team0: Port device team_slave_0 added [ 76.898662][ T5428] team0: Port device team_slave_1 added [ 76.949288][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.951733][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.967353][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.974548][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.977611][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.989095][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.057609][ T5428] hsr_slave_0: entered promiscuous mode [ 77.061934][ T5428] hsr_slave_1: entered promiscuous mode [ 77.150366][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.153644][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.616844][ T5428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.622015][ T5428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.630232][ T5428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.643152][ T5428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.708668][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.726021][ T5428] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.735080][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.738014][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.755652][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.758911][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.792653][ T5428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.930269][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.970677][ T5428] veth0_vlan: entered promiscuous mode [ 77.977729][ T5428] veth1_vlan: entered promiscuous mode [ 78.007659][ T5428] veth0_macvtap: entered promiscuous mode [ 78.015957][ T5428] veth1_macvtap: entered promiscuous mode [ 78.033207][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.046225][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.052758][ T5428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057476][ T5428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.060694][ T5428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.064023][ T5428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.129997][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.133373][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.152557][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.158852][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.493948][ T825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.504968][ T4636] Bluetooth: hci0: command tx timeout [ 78.697541][ T825] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 78.700860][ T825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.706191][ T825] usb 5-1: config 0 has no interface number 0 [ 78.708797][ T825] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.713376][ T825] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 78.717171][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.723377][ T825] usb 5-1: config 0 descriptor?? [ 78.736190][ T825] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 78.740259][ T825] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 78.994412][ T825] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 78.997434][ T825] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 79.002106][ T825] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 79.004752][ T825] em28xx 5-1:0.108: No AC97 audio processor [ 79.007004][ T825] em28xx 5-1:0.108: We currently don't support analog TV or stream capture on dual tuners. [ 79.074335][ T825] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 79.076969][ T825] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 79.080315][ T825] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 79.082944][ T825] em28xx 5-1:0.108: No AC97 audio processor [ 79.293544][ T825] usb 5-1: USB disconnect, device number 2 [ 79.296611][ T825] em28xx 5-1:0.108: Disconnecting em28xx #1 [ 79.299120][ T825] em28xx 5-1:0.108: Disconnecting em28xx [ 79.311543][ T825] em28xx 5-1:0.108: Freeing device [ 79.313679][ T825] em28xx 5-1:0.108: Freeing device [ 79.854959][ T825] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.066219][ T825] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 80.070293][ T825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.075499][ T825] usb 5-1: config 0 has no interface number 0 [ 80.078360][ T825] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.083256][ T825] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 80.086670][ T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.091855][ T825] usb 5-1: config 0 descriptor?? [ 80.102295][ T825] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 80.106510][ T825] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 80.375125][ T825] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 80.378760][ T825] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 80.382474][ T825] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 80.386167][ T825] em28xx 5-1:0.108: No AC97 audio processor [ 80.389098][ T825] list_add corruption. prev->next should be next (ffffffff8f20bba0), but was 0000000000000000. (prev=ffff8880260dc250). [ 80.395774][ T825] ------------[ cut here ]------------ [ 80.398160][ T825] kernel BUG at lib/list_debug.c:32! [ 80.400448][ T825] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 80.404945][ T825] CPU: 2 PID: 825 Comm: kworker/2:3 Not tainted 6.10.0-rc3-syzkaller-g83a7eefedc9b #0 [ 80.409594][ T825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 80.413925][ T825] Workqueue: usb_hub_wq hub_event [ 80.416181][ T825] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 80.418974][ T825] Code: e4 fc 90 0f 0b 48 89 d9 48 c7 c7 40 02 90 8b e8 88 99 e4 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 02 90 8b 48 89 de e8 73 99 e4 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 03 90 8b e8 5b 99 e4 [ 80.427698][ T825] RSP: 0018:ffffc90004ccef00 EFLAGS: 00010282 [ 80.430571][ T825] RAX: 0000000000000075 RBX: ffffffff8f20bba0 RCX: ffffffff816e69b9 [ 80.434072][ T825] RDX: 0000000000000000 RSI: ffffffff816ef706 RDI: 0000000000000005 [ 80.437487][ T825] RBP: ffff88802a408250 R08: 0000000000000005 R09: 0000000000000000 [ 80.440875][ T825] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802a408250 [ 80.444429][ T825] R13: ffff88802a408000 R14: ffff88802a409a04 R15: ffff88803af78000 [ 80.447837][ T825] FS: 0000000000000000(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000 [ 80.451859][ T825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.454727][ T825] CR2: 00007f4d8052fff8 CR3: 000000001a204000 CR4: 0000000000350ef0 [ 80.458207][ T825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.461671][ T825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.465136][ T825] Call Trace: [ 80.466575][ T825] [ 80.467875][ T825] ? show_regs+0x8c/0xa0 [ 80.469747][ T825] ? die+0x36/0xa0 [ 80.471364][ T825] ? do_trap+0x232/0x430 [ 80.473224][ T825] ? __list_add_valid_or_report+0xbe/0x100 [ 80.475850][ T825] ? __list_add_valid_or_report+0xbe/0x100 [ 80.478438][ T825] ? do_error_trap+0xf4/0x230 [ 80.480485][ T825] ? __list_add_valid_or_report+0xbe/0x100 [ 80.483019][ T825] ? handle_invalid_op+0x34/0x40 [ 80.485196][ T825] ? __list_add_valid_or_report+0xbe/0x100 [ 80.487707][ T825] ? exc_invalid_op+0x2e/0x50 [ 80.489806][ T825] ? asm_exc_invalid_op+0x1a/0x20 [ 80.491901][ T825] ? __wake_up_klogd.part.0+0x99/0xf0 [ 80.494275][ T825] ? vprintk+0x86/0xa0 [ 80.496046][ T825] ? __list_add_valid_or_report+0xbe/0x100 [ 80.498575][ T825] em28xx_init_extension+0x48/0x200 [ 80.500834][ T825] em28xx_init_dev.constprop.0+0x197b/0x3090 [ 80.503467][ T825] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 80.506168][ T825] ? lockdep_init_map_type+0x16d/0x7d0 [ 80.508455][ T825] ? rcu_is_watching+0x12/0xc0 [ 80.510369][ T825] ? lockdep_init_map_type+0x16d/0x7d0 [ 80.512567][ T825] ? __raw_spin_lock_init+0x3a/0x110 [ 80.514888][ T825] em28xx_usb_probe+0x10db/0x3730 [ 80.517009][ T825] usb_probe_interface+0x309/0x9d0 [ 80.519078][ T825] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.521426][ T825] really_probe+0x23e/0xa90 [ 80.523450][ T825] __driver_probe_device+0x1de/0x440 [ 80.525585][ T825] driver_probe_device+0x4c/0x1b0 [ 80.527930][ T825] __device_attach_driver+0x1df/0x310 [ 80.530518][ T825] ? __pfx___device_attach_driver+0x10/0x10 [ 80.533259][ T825] bus_for_each_drv+0x157/0x1e0 [ 80.535334][ T825] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.537539][ T825] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.539662][ T825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.542139][ T825] __device_attach+0x1e8/0x4b0 [ 80.544399][ T825] ? __pfx___device_attach+0x10/0x10 [ 80.546657][ T825] ? do_raw_spin_unlock+0x172/0x230 [ 80.548636][ T825] bus_probe_device+0x17f/0x1c0 [ 80.550438][ T825] device_add+0x114b/0x1a70 [ 80.552074][ T825] ? __pfx_device_add+0x10/0x10 [ 80.553918][ T825] ? mark_held_locks+0x9f/0xe0 [ 80.555667][ T825] usb_set_configuration+0x10cb/0x1c50 [ 80.558003][ T825] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 80.560705][ T825] usb_generic_driver_probe+0xb1/0x110 [ 80.563117][ T825] usb_probe_device+0xec/0x3e0 [ 80.565234][ T825] ? __pfx_usb_probe_device+0x10/0x10 [ 80.567783][ T825] really_probe+0x23e/0xa90 [ 80.569864][ T825] __driver_probe_device+0x1de/0x440 [ 80.572332][ T825] ? usb_driver_applicable+0x1c7/0x220 [ 80.575073][ T825] driver_probe_device+0x4c/0x1b0 [ 80.577514][ T825] __device_attach_driver+0x1df/0x310 [ 80.579709][ T825] ? __pfx___device_attach_driver+0x10/0x10 [ 80.581801][ T825] bus_for_each_drv+0x157/0x1e0 [ 80.583647][ T825] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.583886][ T4636] Bluetooth: hci0: command tx timeout [ 80.585527][ T825] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.590148][ T825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.592406][ T825] __device_attach+0x1e8/0x4b0 [ 80.594202][ T825] ? __pfx___device_attach+0x10/0x10 [ 80.596308][ T825] ? do_raw_spin_unlock+0x172/0x230 [ 80.598258][ T825] bus_probe_device+0x17f/0x1c0 [ 80.600341][ T825] device_add+0x114b/0x1a70 [ 80.602572][ T825] ? __pfx_device_add+0x10/0x10 [ 80.604636][ T825] ? usb_detect_static_quirks+0x335/0x3e0 [ 80.606749][ T825] usb_new_device+0xd90/0x1a10 [ 80.608591][ T825] ? __pfx_usb_new_device+0x10/0x10 [ 80.610780][ T825] hub_event+0x2db0/0x4e20 [ 80.612793][ T825] ? __pfx_hub_event+0x10/0x10 [ 80.614922][ T825] ? __pfx_lock_acquire+0x10/0x10 [ 80.616740][ T825] ? __pfx_lock_release+0x10/0x10 [ 80.619006][ T825] process_one_work+0x9fb/0x1b60 [ 80.621361][ T825] ? __pfx_hub_event+0x10/0x10 [ 80.623641][ T825] ? __pfx_process_one_work+0x10/0x10 [ 80.626209][ T825] ? assign_work+0x1a0/0x250 [ 80.628395][ T825] worker_thread+0x6c8/0xf70 [ 80.630434][ T825] ? __kthread_parkme+0x148/0x220 [ 80.632750][ T825] ? __pfx_worker_thread+0x10/0x10 [ 80.635172][ T825] kthread+0x2c1/0x3a0 [ 80.637116][ T825] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.639448][ T825] ? __pfx_kthread+0x10/0x10 [ 80.641463][ T825] ret_from_fork+0x45/0x80 [ 80.643295][ T825] ? __pfx_kthread+0x10/0x10 [ 80.645276][ T825] ret_from_fork_asm+0x1a/0x30 [ 80.647381][ T825] [ 80.648754][ T825] Modules linked in: [ 80.651773][ T825] ---[ end trace 0000000000000000 ]--- [ 80.654688][ T825] RIP: 0010:__list_add_valid_or_report+0xbe/0x100 [ 80.657403][ T825] Code: e4 fc 90 0f 0b 48 89 d9 48 c7 c7 40 02 90 8b e8 88 99 e4 fc 90 0f 0b 48 89 f1 48 c7 c7 c0 02 90 8b 48 89 de e8 73 99 e4 fc 90 <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 40 03 90 8b e8 5b 99 e4 [ 80.664832][ T825] RSP: 0018:ffffc90004ccef00 EFLAGS: 00010282 [ 80.666936][ T825] RAX: 0000000000000075 RBX: ffffffff8f20bba0 RCX: ffffffff816e69b9 [ 80.669961][ T825] RDX: 0000000000000000 RSI: ffffffff816ef706 RDI: 0000000000000005 [ 80.673421][ T825] RBP: ffff88802a408250 R08: 0000000000000005 R09: 0000000000000000 [ 80.676435][ T825] R10: 0000000080000000 R11: 0000000000000006 R12: ffff88802a408250 [ 80.679237][ T825] R13: ffff88802a408000 R14: ffff88802a409a04 R15: ffff88803af78000 [ 80.681908][ T825] FS: 0000000000000000(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000 [ 80.685278][ T825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.687768][ T825] CR2: 00007f4d8052fff8 CR3: 000000001a204000 CR4: 0000000000350ef0 [ 80.691641][ T825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.695005][ T825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.697819][ T825] Kernel panic - not syncing: Fatal exception [ 80.700654][ T825] Kernel Offset: disabled [ 80.702195][ T825] Rebooting in 86400 seconds..