Warning: Permanently added '[localhost]:7090' (ED25519) to the list of known hosts. 2025/05/03 02:13:51 ignoring optional flag "sandboxArg"="0" 2025/05/03 02:13:51 ignoring optional flag "type"="qemu" 2025/05/03 02:13:52 parsed 1 programs [ 64.946050][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 64.946062][ T40] audit: type=1400 audit(1746238432.092:125): avc: denied { getattr } for pid=6043 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.955513][ T40] audit: type=1400 audit(1746238432.092:126): avc: denied { read } for pid=6043 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.964057][ T40] audit: type=1400 audit(1746238432.092:127): avc: denied { open } for pid=6043 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.035011][ T40] audit: type=1400 audit(1746238432.182:128): avc: denied { unlink } for pid=6049 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.984506][ T6049] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/05/03 02:13:53 executed programs: 0 [ 66.026180][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.028914][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.031619][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.035498][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.038171][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.043930][ T40] audit: type=1400 audit(1746238433.192:129): avc: denied { mounton } for pid=6055 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.154525][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 66.274305][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.277450][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.280500][ T6055] bridge_slave_0: entered allmulticast mode [ 66.286392][ T6055] bridge_slave_0: entered promiscuous mode [ 66.290804][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.294007][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.297037][ T6055] bridge_slave_1: entered allmulticast mode [ 66.300853][ T6055] bridge_slave_1: entered promiscuous mode [ 66.349147][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.355737][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.416024][ T6055] team0: Port device team_slave_0 added [ 66.420774][ T6055] team0: Port device team_slave_1 added [ 66.474130][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.477060][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.489889][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.497183][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.500009][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.510221][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.536987][ T40] audit: type=1400 audit(1746238433.682:130): avc: denied { search } for pid=6064 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.544369][ T40] audit: type=1400 audit(1746238433.682:131): avc: denied { read } for pid=6065 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.551396][ T40] audit: type=1400 audit(1746238433.682:132): avc: denied { open } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.559298][ T40] audit: type=1400 audit(1746238433.682:133): avc: denied { getattr } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.567092][ T40] audit: type=1400 audit(1746238433.692:134): avc: denied { write } for pid=6064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.584851][ T6055] hsr_slave_0: entered promiscuous mode [ 66.587903][ T6055] hsr_slave_1: entered promiscuous mode [ 67.085382][ T6055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.097929][ T6055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.101990][ T6055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.105974][ T6055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.118298][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.120471][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.122894][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.125394][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.155417][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.165133][ T1227] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.168015][ T1227] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177795][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.184853][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.187029][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.194778][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.196891][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.297907][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.322049][ T6055] veth0_vlan: entered promiscuous mode [ 67.327378][ T6055] veth1_vlan: entered promiscuous mode [ 67.340798][ T6055] veth0_macvtap: entered promiscuous mode [ 67.345187][ T6055] veth1_macvtap: entered promiscuous mode [ 67.353457][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.359718][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.369834][ T6055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372679][ T6055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.375835][ T6055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.378694][ T6055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.411338][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.415745][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.431058][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.434243][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.703414][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.866764][ T57] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 67.869974][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.874105][ T57] usb 5-1: config 0 has no interface number 0 [ 67.876391][ T57] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.880442][ T57] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 67.884612][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.889477][ T57] usb 5-1: config 0 descriptor?? [ 67.895537][ T57] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 67.899491][ T57] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 68.054107][ T5939] Bluetooth: hci0: command tx timeout [ 68.153065][ T57] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 68.155349][ T57] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 68.157892][ T57] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 68.160230][ T57] em28xx 5-1:0.108: No AC97 audio processor [ 68.162163][ T57] em28xx 5-1:0.108: We currently don't support analog TV or stream capture on dual tuners. [ 68.223456][ T57] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 68.225944][ T57] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 68.228732][ T57] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 68.231328][ T57] em28xx 5-1:0.108: No AC97 audio processor [ 68.444877][ T57] usb 5-1: USB disconnect, device number 2 [ 68.448514][ T57] em28xx 5-1:0.108: Disconnecting em28xx #1 [ 68.451023][ T57] em28xx 5-1:0.108: Disconnecting em28xx [ 68.458503][ T57] em28xx 5-1:0.108: Freeing device [ 68.460606][ T57] em28xx 5-1:0.108: Freeing device [ 68.942900][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.095486][ T57] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 69.098639][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.102454][ T57] usb 5-1: config 0 has no interface number 0 [ 69.104973][ T57] usb 5-1: config 0 interface 108 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.109048][ T57] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=2f.86 [ 69.111834][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.115488][ T57] usb 5-1: config 0 descriptor?? [ 69.120709][ T57] em28xx 5-1:0.108: New device @ 480 Mbps (2040:8265, interface 108, class 108) [ 69.123592][ T57] em28xx 5-1:0.108: Audio interface 108 found (Vendor Class) [ 69.383259][ T57] em28xx 5-1:0.108: unknown em28xx chip ID (0) [ 69.386529][ T57] em28xx 5-1:0.108: Config register raw data: 0xfffffffb [ 69.389851][ T57] em28xx 5-1:0.108: AC97 chip type couldn't be determined [ 69.393117][ T57] em28xx 5-1:0.108: No AC97 audio processor [ 69.395600][ T57] non-slab/vmalloc memory [ 69.397616][ T57] list_add corruption. prev->next should be next (ffffffff8fb9cc60), but was ffffffff82207a5a. (prev=ffff8880423ac250). [ 69.402785][ T57] ------------[ cut here ]------------ [ 69.404736][ T57] kernel BUG at lib/list_debug.c:32! [ 69.406880][ T57] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 69.410400][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted 6.15.0-rc4-syzkaller-gb6a218ff8b88 #0 PREEMPT(full) [ 69.415454][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.419454][ T57] Workqueue: usb_hub_wq hub_event [ 69.421336][ T57] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 69.423515][ T57] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 e0 84 f4 8b 48 89 ee e8 26 4d c4 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 60 85 f4 8b e8 0e 4d c4 [ 69.429272][ T57] RSP: 0018:ffffc90000aeee90 EFLAGS: 00010282 [ 69.431247][ T57] RAX: 0000000000000075 RBX: ffff88802bbc0000 RCX: ffffffff819a90e9 [ 69.434418][ T57] RDX: 0000000000000000 RSI: ffffffff819b0f76 RDI: 0000000000000005 [ 69.437644][ T57] RBP: ffffffff8fb9cc60 R08: 0000000000000005 R09: 0000000000000000 [ 69.440877][ T57] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802bbc0250 [ 69.444049][ T57] R13: ffffffff8fb9cc68 R14: ffff88802bbc01a8 R15: ffff88802bbc1a14 [ 69.447341][ T57] FS: 0000000000000000(0000) GS:ffff8880d6ae1000(0000) knlGS:0000000000000000 [ 69.451042][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.453784][ T57] CR2: 00007fe0d8198000 CR3: 00000000207d0000 CR4: 0000000000352ef0 [ 69.457077][ T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.460206][ T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.462840][ T57] Call Trace: [ 69.464146][ T57] [ 69.465366][ T57] em28xx_init_extension+0x48/0x200 [ 69.467059][ T57] em28xx_init_dev.constprop.0+0x1a10/0x3170 [ 69.468947][ T57] ? __pfx_em28xx_init_dev.constprop.0+0x10/0x10 [ 69.470864][ T57] ? lockdep_init_map_type+0x5c/0x280 [ 69.472505][ T57] ? lockdep_init_map_type+0x5c/0x280 [ 69.474525][ T57] em28xx_usb_probe+0x1285/0x3770 [ 69.476554][ T57] usb_probe_interface+0x300/0x9c0 [ 69.478407][ T57] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.480597][ T57] really_probe+0x23e/0xa90 [ 69.482012][ T57] __driver_probe_device+0x1de/0x440 [ 69.483654][ T57] driver_probe_device+0x4c/0x1b0 [ 69.485479][ T57] __device_attach_driver+0x1df/0x310 [ 69.487345][ T57] ? __pfx___device_attach_driver+0x10/0x10 [ 69.489258][ T57] bus_for_each_drv+0x156/0x1e0 [ 69.490727][ T57] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.492446][ T57] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.494074][ T57] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.496003][ T57] __device_attach+0x1e4/0x4b0 [ 69.497757][ T57] ? __pfx___device_attach+0x10/0x10 [ 69.499387][ T57] ? do_raw_spin_unlock+0x172/0x230 [ 69.501116][ T57] bus_probe_device+0x17f/0x1c0 [ 69.502594][ T57] device_add+0x1148/0x1a70 [ 69.504002][ T57] ? __pfx_device_add+0x10/0x10 [ 69.505491][ T57] ? mark_held_locks+0x49/0x80 [ 69.507310][ T57] usb_set_configuration+0x1187/0x1e20 [ 69.509371][ T57] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 69.511257][ T57] usb_generic_driver_probe+0xb1/0x110 [ 69.512917][ T57] usb_probe_device+0xec/0x3e0 [ 69.514364][ T57] ? __pfx_usb_probe_device+0x10/0x10 [ 69.515983][ T57] really_probe+0x23e/0xa90 [ 69.517427][ T57] __driver_probe_device+0x1de/0x440 [ 69.519014][ T57] ? usb_driver_applicable+0x1c7/0x220 [ 69.520705][ T57] driver_probe_device+0x4c/0x1b0 [ 69.522626][ T57] __device_attach_driver+0x1df/0x310 [ 69.524740][ T57] ? __pfx___device_attach_driver+0x10/0x10 [ 69.527075][ T57] bus_for_each_drv+0x156/0x1e0 [ 69.529005][ T57] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.531120][ T57] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.533194][ T57] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 69.535413][ T57] __device_attach+0x1e4/0x4b0 [ 69.537057][ T57] ? __pfx___device_attach+0x10/0x10 [ 69.538962][ T57] ? do_raw_spin_unlock+0x172/0x230 [ 69.541044][ T57] bus_probe_device+0x17f/0x1c0 [ 69.542533][ T57] device_add+0x1148/0x1a70 [ 69.543900][ T57] ? __pfx_device_add+0x10/0x10 [ 69.545377][ T57] ? usb_detect_static_quirks+0x335/0x3e0 [ 69.547197][ T57] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 69.549570][ T57] usb_new_device+0xd07/0x1a20 [ 69.551481][ T57] ? do_raw_spin_lock+0x12c/0x2b0 [ 69.553543][ T57] ? __pfx_usb_new_device+0x10/0x10 [ 69.555598][ T57] ? mark_held_locks+0x49/0x80 [ 69.557556][ T57] hub_event+0x2eb7/0x4fa0 [ 69.559350][ T57] ? __pfx_hub_event+0x10/0x10 [ 69.561286][ T57] ? debug_object_deactivate+0x1ec/0x3a0 [ 69.563472][ T57] ? rcu_is_watching+0x12/0xc0 [ 69.565444][ T57] process_one_work+0x9cc/0x1b70 [ 69.567442][ T57] ? __pfx_hub_event+0x10/0x10 [ 69.569395][ T57] ? __pfx_process_one_work+0x10/0x10 [ 69.571500][ T57] ? assign_work+0x1a0/0x250 [ 69.573362][ T57] worker_thread+0x6c8/0xf10 [ 69.575189][ T57] ? __kthread_parkme+0x19e/0x250 [ 69.577179][ T57] ? __pfx_worker_thread+0x10/0x10 [ 69.579019][ T57] kthread+0x3c2/0x780 [ 69.580645][ T57] ? __pfx_kthread+0x10/0x10 [ 69.582509][ T57] ? __pfx_kthread+0x10/0x10 [ 69.584483][ T57] ? __pfx_kthread+0x10/0x10 [ 69.586364][ T57] ? __pfx_kthread+0x10/0x10 [ 69.588255][ T57] ? rcu_is_watching+0x12/0xc0 [ 69.590183][ T57] ? __pfx_kthread+0x10/0x10 [ 69.592033][ T57] ret_from_fork+0x45/0x80 [ 69.593795][ T57] ? __pfx_kthread+0x10/0x10 [ 69.595674][ T57] ret_from_fork_asm+0x1a/0x30 [ 69.597606][ T57] [ 69.598880][ T57] Modules linked in: [ 69.600809][ T57] ---[ end trace 0000000000000000 ]--- [ 69.603459][ T57] RIP: 0010:__list_add_valid_or_report+0x12b/0x190 [ 69.606033][ T57] Code: 00 00 00 00 fc ff df 48 89 f2 48 c1 ea 03 80 3c 02 00 75 5a 48 8b 16 48 89 f1 48 c7 c7 e0 84 f4 8b 48 89 ee e8 26 4d c4 fc 90 <0f> 0b 48 89 f2 48 89 e9 4c 89 e6 48 c7 c7 60 85 f4 8b e8 0e 4d c4 [ 69.613708][ T57] RSP: 0018:ffffc90000aeee90 EFLAGS: 00010282 [ 69.616138][ T57] RAX: 0000000000000075 RBX: ffff88802bbc0000 RCX: ffffffff819a90e9 [ 69.619246][ T57] RDX: 0000000000000000 RSI: ffffffff819b0f76 RDI: 0000000000000005 [ 69.622051][ T57] RBP: ffffffff8fb9cc60 R08: 0000000000000005 R09: 0000000000000000 [ 69.625148][ T57] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88802bbc0250 [ 69.628267][ T57] R13: ffffffff8fb9cc68 R14: ffff88802bbc01a8 R15: ffff88802bbc1a14 [ 69.631367][ T57] FS: 0000000000000000(0000) GS:ffff8880d6ae1000(0000) knlGS:0000000000000000 [ 69.634970][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.637624][ T57] CR2: 00007fe0d8198000 CR3: 00000000207d0000 CR4: 0000000000352ef0 [ 69.640777][ T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.643987][ T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.647132][ T57] Kernel panic - not syncing: Fatal exception [ 69.650193][ T57] Kernel Offset: disabled [ 69.651835][ T57] Rebooting in 86400 seconds..