[ 70.051502][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 70.051542][ T40] audit: type=1400 audit(1777710641.116:186): avc: denied { transition } for pid=5826 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.064689][ T40] audit: type=1400 audit(1777710641.116:187): avc: denied { noatsecure } for pid=5826 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.074016][ T40] audit: type=1400 audit(1777710641.126:188): avc: denied { rlimitinh } for pid=5826 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.083115][ T40] audit: type=1400 audit(1777710641.126:189): avc: denied { siginh } for pid=5826 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:26309' (ED25519) to the list of known hosts. [ 74.005181][ T40] audit: type=1400 audit(1777710645.066:190): avc: denied { execute } for pid=5843 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.012422][ T40] audit: type=1400 audit(1777710645.076:191): avc: denied { execute_no_trans } for pid=5843 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/05/02 08:30:45 ignoring optional flag "sandbox_arg"="0" 2026/05/02 08:30:45 ignoring optional flag "type"="qemu" 2026/05/02 08:30:45 parsed 1 programs [ 74.329094][ T40] audit: type=1400 audit(1777710645.396:192): avc: denied { read } for pid=5843 comm="syz-execprog" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.339537][ T40] audit: type=1400 audit(1777710645.396:193): avc: denied { open } for pid=5843 comm="syz-execprog" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.350010][ T40] audit: type=1400 audit(1777710645.406:194): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.351310][ T5850] cgroup: Unknown subsys name 'net' [ 74.359914][ T40] audit: type=1400 audit(1777710645.416:195): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.364403][ T5850] cgroup: Unknown subsys name 'cpuset' [ 74.374454][ T5850] cgroup: Unknown subsys name 'rlimit' 2026/05/02 08:30:45 executed programs: 0 [ 75.469520][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 75.469530][ T40] audit: type=1400 audit(1777710646.536:199): avc: denied { write } for pid=5862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.491477][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.497288][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.500961][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.504335][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.507694][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.514766][ T40] audit: type=1400 audit(1777710646.576:200): avc: denied { write } for pid=5867 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.946226][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.949647][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.952992][ T5855] bridge_slave_0: entered allmulticast mode [ 75.957296][ T5855] bridge_slave_0: entered promiscuous mode [ 75.962343][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.966245][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.969615][ T5855] bridge_slave_1: entered allmulticast mode [ 75.973667][ T5855] bridge_slave_1: entered promiscuous mode [ 76.028706][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.035899][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.073422][ T5855] team0: Port device team_slave_0 added [ 76.077608][ T5855] team0: Port device team_slave_1 added [ 76.080511][ T40] audit: type=1400 audit(1777710647.146:201): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.115163][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.117625][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.126295][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.132654][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.136077][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.148094][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.152678][ T40] audit: type=1400 audit(1777710647.226:202): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.226731][ T5855] hsr_slave_0: entered promiscuous mode [ 76.229099][ T5855] hsr_slave_1: entered promiscuous mode [ 76.322871][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.325371][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.327888][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.330223][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.343209][ T40] audit: type=1400 audit(1777710647.406:203): avc: denied { write } for pid=5890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.361517][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.373699][ T239] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.377236][ T239] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.388443][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.396506][ T40] audit: type=1400 audit(1777710647.466:204): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.396737][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.409143][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.419605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.422609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.582288][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.767518][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.770004][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.849181][ T5855] veth0_vlan: entered promiscuous mode [ 76.858185][ T5855] veth1_vlan: entered promiscuous mode [ 76.880891][ T5855] veth0_macvtap: entered promiscuous mode [ 76.884967][ T5855] veth1_macvtap: entered promiscuous mode [ 76.893950][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.900317][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.956887][ T40] audit: type=1400 audit(1777710648.026:205): avc: denied { write } for pid=5921 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.964677][ T40] audit: type=1400 audit(1777710648.026:206): avc: denied { ioctl } for pid=5921 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.205136][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.368036][ T54] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 77.372145][ T54] usb 5-1: config 0 has no interface number 0 [ 77.375102][ T54] usb 5-1: config 0 interface 130 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.379809][ T54] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=f3.4a [ 77.383661][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.390383][ T54] usb 5-1: config 0 descriptor?? [ 77.399697][ T54] em28xx 5-1:0.130: New device @ 480 Mbps (2040:8265, interface 130, class 130) [ 77.404203][ T54] em28xx 5-1:0.130: Audio interface 130 found (Vendor Class) [ 77.566034][ T5743] Bluetooth: hci0: command tx timeout [ 77.656104][ T54] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 77.659372][ T54] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 77.662873][ T54] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 77.666088][ T54] em28xx 5-1:0.130: No AC97 audio processor [ 77.668735][ T54] em28xx 5-1:0.130: We currently don't support analog TV or stream capture on dual tuners. [ 77.726153][ T54] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 77.729403][ T54] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 77.732939][ T54] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 77.736265][ T54] em28xx 5-1:0.130: No AC97 audio processor [ 77.949982][ T54] usb 5-1: USB disconnect, device number 2 [ 77.954136][ T54] em28xx 5-1:0.130: Disconnecting em28xx #1 [ 77.956933][ T54] em28xx 5-1:0.130: Disconnecting em28xx [ 77.963027][ T54] em28xx 5-1:0.130: Freeing device [ 77.965519][ T54] em28xx 5-1:0.130: Freeing device [ 78.447492][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.606989][ T54] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 78.610643][ T54] usb 5-1: config 0 has no interface number 0 [ 78.613418][ T54] usb 5-1: config 0 interface 130 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.618250][ T54] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=f3.4a [ 78.622020][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.628058][ T54] usb 5-1: config 0 descriptor?? [ 78.635297][ T54] em28xx 5-1:0.130: New device @ 480 Mbps (2040:8265, interface 130, class 130) [ 78.638251][ T54] em28xx 5-1:0.130: Audio interface 130 found (Vendor Class) [ 78.885432][ T54] em28xx 5-1:0.130: unknown em28xx chip ID (0) [ 78.888340][ T54] em28xx 5-1:0.130: Config register raw data: 0xfffffffb [ 78.891140][ T54] em28xx 5-1:0.130: AC97 chip type couldn't be determined [ 78.893770][ T54] em28xx 5-1:0.130: No AC97 audio processor [ 78.895884][ T54] non-slab/vmalloc memory [ 78.897678][ T54] list_add corruption. prev->next should be next (ffffffff90077b00), but was ffffffff828ca828. (prev=ffff888027d20250). [ 78.902452][ T54] ------------[ cut here ]------------ [ 78.904434][ T54] kernel BUG at lib/list_debug.c:32! [ 78.907227][ T54] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 78.911985][ T54] CPU: 3 UID: 0 PID: 54 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 78.916005][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.920383][ T54] Workqueue: usb_hub_wq hub_event [ 78.922614][ T54] RIP: 0010:__list_add_valid_or_report+0xfb/0x130 [ 78.925503][ T54] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 3d 49 8b 55 00 4c 89 e9 48 89 de 48 c7 c7 40 38 1c 8c e8 96 46 20 fc 90 <0f> 0b 4c 89 e7 e8 9b 3a 74 fd e9 3a ff ff ff 4c 89 ef e8 8e 3a 74 [ 78.933707][ T54] RSP: 0018:ffffc90000a7ee20 EFLAGS: 00010282 [ 78.936339][ T54] RAX: 0000000000000075 RBX: ffffffff90077b00 RCX: 0000000000000000 [ 78.939756][ T54] RDX: 0000000000000075 RSI: ffffffff81e73029 RDI: fffff5200014fdb5 [ 78.943180][ T54] RBP: ffff888033c88250 R08: 0000000000000005 R09: 0000000000000000 [ 78.946625][ T54] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff90077b08 [ 78.950113][ T54] R13: ffff888027d20250 R14: ffff88802ea79000 R15: ffff88802cd3a800 [ 78.953534][ T54] FS: 0000000000000000(0000) GS:ffff8880d6676000(0000) knlGS:0000000000000000 [ 78.957357][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.960239][ T54] CR2: 000055f53d4dccf8 CR3: 000000002ef92000 CR4: 0000000000352ef0 [ 78.963682][ T54] Call Trace: [ 78.965136][ T54] [ 78.966438][ T54] em28xx_init_extension+0x48/0x200 [ 78.968844][ T54] ? em28xx_audio_setup+0x115/0x370 [ 78.971149][ T54] em28xx_init_dev.isra.0+0xb49/0x1829 [ 78.973602][ T54] ? _dev_info+0xef/0x127 [ 78.975504][ T54] ? __pfx_em28xx_init_dev.isra.0+0x10/0x10 [ 78.978087][ T54] ? trace_kmalloc+0xe3/0x110 [ 78.980202][ T54] ? __kasan_kmalloc+0xaa/0xb0 [ 78.982299][ T54] ? lockdep_init_map_type+0x5c/0x250 [ 78.984662][ T54] ? lockdep_init_map_type+0x5c/0x250 [ 78.987003][ T54] em28xx_usb_probe.cold+0xca7/0x25f6 [ 78.989369][ T54] usb_probe_interface+0x303/0x8f0 [ 78.991611][ T54] ? __pfx_usb_probe_interface+0x10/0x10 [ 78.994080][ T54] really_probe+0x241/0xa60 [ 78.996132][ T54] __driver_probe_device+0x22e/0x480 [ 78.998438][ T54] driver_probe_device+0x4c/0x1b0 [ 79.000655][ T54] __device_attach_driver+0x1df/0x340 [ 79.003008][ T54] ? __pfx___device_attach_driver+0x10/0x10 [ 79.005588][ T54] bus_for_each_drv+0x159/0x1e0 [ 79.007767][ T54] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.010102][ T54] ? lockdep_hardirqs_on+0x78/0x100 [ 79.012416][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.014929][ T54] __device_attach+0x1e4/0x4d0 [ 79.017059][ T54] ? __pfx___device_attach+0x10/0x10 [ 79.019337][ T54] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.021607][ T54] device_initial_probe+0xaf/0xd0 [ 79.023820][ T54] bus_probe_device+0x64/0x160 [ 79.025925][ T54] device_add+0x1210/0x1950 [ 79.027990][ T54] ? __pfx_device_add+0x10/0x10 [ 79.030136][ T54] usb_set_configuration+0xd97/0x1c60 [ 79.032540][ T54] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 79.035201][ T54] usb_generic_driver_probe+0xa1/0xe0 [ 79.037607][ T54] usb_probe_device+0xef/0x400 [ 79.039737][ T54] ? __pfx_usb_probe_device+0x10/0x10 [ 79.042102][ T54] really_probe+0x241/0xa60 [ 79.044119][ T54] __driver_probe_device+0x22e/0x480 [ 79.046449][ T54] ? usb_driver_applicable+0x1c7/0x220 [ 79.048850][ T54] driver_probe_device+0x4c/0x1b0 [ 79.051080][ T54] __device_attach_driver+0x1df/0x340 [ 79.053514][ T54] ? __pfx___device_attach_driver+0x10/0x10 [ 79.056089][ T54] bus_for_each_drv+0x159/0x1e0 [ 79.058210][ T54] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.060576][ T54] ? lockdep_hardirqs_on+0x78/0x100 [ 79.062891][ T54] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.065410][ T54] __device_attach+0x1e4/0x4d0 [ 79.067506][ T54] ? __pfx___device_attach+0x10/0x10 [ 79.069865][ T54] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.072179][ T54] device_initial_probe+0xaf/0xd0 [ 79.074456][ T54] bus_probe_device+0x64/0x160 [ 79.076602][ T54] device_add+0x1210/0x1950 [ 79.078609][ T54] ? __pfx_device_add+0x10/0x10 [ 79.080749][ T54] ? usb_detect_static_quirks+0x335/0x3e0 [ 79.083213][ T54] usb_new_device.cold+0x685/0x115c [ 79.085506][ T54] ? do_raw_spin_lock+0x128/0x260 [ 79.087714][ T54] ? __pfx_usb_new_device+0x10/0x10 [ 79.089980][ T54] ? mark_held_locks+0x40/0x70 [ 79.092117][ T54] hub_event+0x314d/0x4af0 [ 79.094114][ T54] ? __pfx_hub_event+0x10/0x10 [ 79.096222][ T54] ? assoc_array_gc+0xf40/0x15d0 [ 79.098413][ T54] ? rcu_is_watching+0x12/0xc0 [ 79.100565][ T54] process_one_work+0xa0e/0x1980 [ 79.102800][ T54] ? __pfx_process_one_work+0x10/0x10 [ 79.105204][ T54] ? __pfx_hub_event+0x10/0x10 [ 79.107327][ T54] worker_thread+0x5ef/0xe50 [ 79.109470][ T54] ? __pfx_worker_thread+0x10/0x10 [ 79.111737][ T54] ? kthread+0x13a/0x450 [ 79.113700][ T54] ? __pfx_worker_thread+0x10/0x10 [ 79.116058][ T54] kthread+0x370/0x450 [ 79.117959][ T54] ? __pfx_kthread+0x10/0x10 [ 79.120101][ T54] ret_from_fork+0x72b/0xd50 [ 79.122245][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 79.124568][ T54] ? __switch_to+0x800/0x1100 [ 79.126738][ T54] ? __pfx_kthread+0x10/0x10 [ 79.128879][ T54] ret_from_fork_asm+0x1a/0x30 [ 79.131065][ T54] [ 79.132510][ T54] Modules linked in: [ 79.134542][ T54] ---[ end trace 0000000000000000 ]--- [ 79.138665][ T54] RIP: 0010:__list_add_valid_or_report+0xfb/0x130 [ 79.141655][ T54] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 3d 49 8b 55 00 4c 89 e9 48 89 de 48 c7 c7 40 38 1c 8c e8 96 46 20 fc 90 <0f> 0b 4c 89 e7 e8 9b 3a 74 fd e9 3a ff ff ff 4c 89 ef e8 8e 3a 74 [ 79.150415][ T54] RSP: 0018:ffffc90000a7ee20 EFLAGS: 00010282 [ 79.153221][ T54] RAX: 0000000000000075 RBX: ffffffff90077b00 RCX: 0000000000000000 [ 79.156892][ T54] RDX: 0000000000000075 RSI: ffffffff81e73029 RDI: fffff5200014fdb5 [ 79.160483][ T54] RBP: ffff888033c88250 R08: 0000000000000005 R09: 0000000000000000 [ 79.164043][ T54] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff90077b08 [ 79.167718][ T54] R13: ffff888027d20250 R14: ffff88802ea79000 R15: ffff88802cd3a800 [ 79.171296][ T54] FS: 0000000000000000(0000) GS:ffff8880d6676000(0000) knlGS:0000000000000000 [ 79.175433][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.178443][ T54] CR2: 000055f53d4dccf8 CR3: 000000002ef92000 CR4: 0000000000352ef0 [ 79.182053][ T54] Kernel panic - not syncing: Fatal exception [ 79.185515][ T54] Kernel Offset: disabled [ 79.187548][ T54] Rebooting in 86400 seconds..