Warning: Permanently added '[localhost]:12804' (ED25519) to the list of known hosts. 2024/03/19 05:27:10 ignoring optional flag "sandboxArg"="0" 2024/03/19 05:27:10 parsed 1 programs [ 72.895203][ T38] kauditd_printk_skb: 45 callbacks suppressed [ 72.895220][ T38] audit: type=1400 audit(1710826030.324:207): avc: denied { getattr } for pid=5378 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.911638][ T38] audit: type=1400 audit(1710826030.334:208): avc: denied { read } for pid=5378 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.923035][ T38] audit: type=1400 audit(1710826030.334:209): avc: denied { open } for pid=5378 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.942315][ T38] audit: type=1400 audit(1710826030.364:210): avc: denied { mounton } for pid=5386 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.953928][ T38] audit: type=1400 audit(1710826030.364:211): avc: denied { mount } for pid=5386 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.963664][ T38] audit: type=1400 audit(1710826030.374:212): avc: denied { setattr } for pid=5386 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.975355][ T38] audit: type=1400 audit(1710826030.384:213): avc: denied { read write } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.987540][ T38] audit: type=1400 audit(1710826030.384:214): avc: denied { open } for pid=5386 comm="syz-executor" path="/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.999596][ T38] audit: type=1400 audit(1710826030.424:215): avc: denied { unlink } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.612825][ T38] audit: type=1400 audit(1710826031.034:216): avc: denied { relabelto } for pid=5399 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.707351][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/19 05:27:12 executed programs: 0 [ 74.761910][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.766327][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.770576][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.775283][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.778609][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.782826][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.925842][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 75.031032][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.033691][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.038628][ T5420] bridge_slave_0: entered allmulticast mode [ 75.042675][ T5420] bridge_slave_0: entered promiscuous mode [ 75.048371][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.051651][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.055350][ T5420] bridge_slave_1: entered allmulticast mode [ 75.058589][ T5420] bridge_slave_1: entered promiscuous mode [ 75.103834][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.109303][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.159571][ T5420] team0: Port device team_slave_0 added [ 75.166489][ T5420] team0: Port device team_slave_1 added [ 75.217208][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.219775][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.230662][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.237464][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.240283][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.249553][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.300664][ T5420] hsr_slave_0: entered promiscuous mode [ 75.304849][ T5420] hsr_slave_1: entered promiscuous mode [ 75.841980][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.851966][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.858621][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.865887][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.886098][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.889516][ T5420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.892735][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.895420][ T5420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.905732][ T816] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.910349][ T816] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.966125][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.983509][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.996578][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.999227][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.003021][ T5209] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.006036][ T5209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.041164][ T5420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.158995][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.192909][ T5420] veth0_vlan: entered promiscuous mode [ 76.203160][ T5420] veth1_vlan: entered promiscuous mode [ 76.229506][ T5420] veth0_macvtap: entered promiscuous mode [ 76.236074][ T5420] veth1_macvtap: entered promiscuous mode [ 76.247252][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.260586][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.267963][ T5420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.271705][ T5420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276993][ T5420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.280906][ T5420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.335427][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.339101][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.356390][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.359576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.693847][ T1267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.865756][ T64] Bluetooth: hci0: command tx timeout [ 76.949483][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.953111][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.956245][ T1267] usb 5-1: Using ep0 maxpacket: 8 [ 77.094164][ T1267] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 77.097970][ T1267] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 77.102051][ T1267] usb 5-1: config 0 has no interface number 0 [ 77.105863][ T1267] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 77.109818][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 77.113861][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 29939, setting to 1024 [ 77.118467][ T1267] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 77.122958][ T1267] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xBD, skipping [ 77.126924][ T1267] usb 5-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 77.131291][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x8 has an invalid bInterval 244, changing to 11 [ 77.136280][ T1267] usb 5-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.141100][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 77.146085][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x2 has an invalid bInterval 31, changing to 7 [ 77.151068][ T1267] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.156875][ T1267] usb 5-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 77.161820][ T1267] usb 5-1: config 0 interface 119 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 77.374047][ T1267] usb 5-1: New USB device found, idVendor=cace, idProduct=0300, bcdDevice=31.25 [ 77.377437][ T1267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.380608][ T1267] usb 5-1: Product: syz [ 77.382232][ T1267] usb 5-1: Manufacturer: syz [ 77.384257][ T1267] usb 5-1: SerialNumber: syz [ 77.389990][ T1267] usb 5-1: config 0 descriptor?? [ 77.404417][ T5469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.598629][ T1267] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 78.535069][ T1267] usb 5-1: device descriptor read/64, error -71 [ 78.804022][ T1267] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 78.954506][ T64] Bluetooth: hci0: command tx timeout [ 79.184176][ T5538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.222198][ T972] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 79.224752][ T972] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 79.226902][ T972] ------------[ cut here ]------------ [ 79.228895][ T972] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 79.231345][ T972] WARNING: CPU: 1 PID: 972 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730 [ 79.235005][ T972] Modules linked in: [ 79.237136][ T972] CPU: 1 PID: 972 Comm: kworker/1:2 Not tainted 6.8.0-syzkaller-gb3603fcb79b1 #0 [ 79.241930][ T972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 79.245849][ T972] Workqueue: events request_firmware_work_func [ 79.248211][ T972] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 79.250387][ T972] Code: 84 3c 02 00 00 e8 25 a4 db fa 4c 89 ef e8 4d 52 e4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 00 49 c7 8b e8 26 19 9e fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 f7 a3 db fa 49 81 c4 c8 05 00 00 e9 [ 79.257708][ T972] RSP: 0018:ffffc90000fe7b58 EFLAGS: 00010282 [ 79.259916][ T972] RAX: 0000000000000000 RBX: ffff88802b5bfc00 RCX: ffffffff814fe149 [ 79.263020][ T972] RDX: ffff888021c42440 RSI: ffffffff814fe156 RDI: 0000000000000001 [ 79.265945][ T972] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 79.268853][ T972] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000003 [ 79.271775][ T972] R13: ffff8880198330a8 R14: ffff88802009fd60 R15: ffff88802b5bfc7c [ 79.274872][ T972] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 79.278331][ T972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.281177][ T972] CR2: 00007f5102d35d00 CR3: 00000000255a6000 CR4: 0000000000350ef0 [ 79.284444][ T972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.287692][ T972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.290494][ T972] Call Trace: [ 79.291944][ T972] [ 79.293282][ T972] ? show_regs+0x8c/0xa0 [ 79.295060][ T972] ? __warn+0xe5/0x3c0 [ 79.296540][ T972] ? usb_submit_urb+0xe4b/0x1730 [ 79.298443][ T972] ? report_bug+0x3c0/0x580 [ 79.300445][ T972] ? handle_bug+0x3d/0x70 [ 79.302036][ T972] ? exc_invalid_op+0x17/0x50 [ 79.304133][ T972] ? asm_exc_invalid_op+0x1a/0x20 [ 79.306300][ T972] ? __warn_printk+0x199/0x350 [ 79.308099][ T972] ? __warn_printk+0x1a6/0x350 [ 79.310041][ T972] ? usb_submit_urb+0xe4b/0x1730 [ 79.311917][ T972] ? usb_submit_urb+0xe4a/0x1730 [ 79.314072][ T972] ? _raw_spin_unlock_irq+0x21/0x50 [ 79.315948][ T972] carl9170_usb_send_rx_irq_urb.constprop.0+0x273/0x340 [ 79.318518][ T972] carl9170_usb_firmware_step2+0x175/0x330 [ 79.320874][ T972] ? __pfx_carl9170_usb_firmware_step2+0x10/0x10 [ 79.323459][ T972] request_firmware_work_func+0x13a/0x250 [ 79.325746][ T972] ? __pfx_request_firmware_work_func+0x10/0x10 [ 79.328031][ T972] process_one_work+0x9a9/0x1ac0 [ 79.329845][ T972] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 79.332036][ T972] ? __pfx_process_one_work+0x10/0x10 [ 79.334048][ T972] ? assign_work+0x1a0/0x250 [ 79.335731][ T972] worker_thread+0x6c8/0xf70 [ 79.337404][ T972] ? __kthread_parkme+0x148/0x220 [ 79.339254][ T972] ? __pfx_worker_thread+0x10/0x10 [ 79.341113][ T972] kthread+0x2c1/0x3a0 [ 79.342589][ T972] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.344628][ T972] ? __pfx_kthread+0x10/0x10 [ 79.346334][ T972] ret_from_fork+0x45/0x80 [ 79.348042][ T972] ? __pfx_kthread+0x10/0x10 [ 79.349821][ T972] ret_from_fork_asm+0x1a/0x30 [ 79.351692][ T972] [ 79.352842][ T972] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.355594][ T972] CPU: 1 PID: 972 Comm: kworker/1:2 Not tainted 6.8.0-syzkaller-gb3603fcb79b1 #0 [ 79.358904][ T972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 79.362590][ T972] Workqueue: events request_firmware_work_func [ 79.365006][ T972] Call Trace: [ 79.366273][ T972] [ 79.367362][ T972] dump_stack_lvl+0x3d/0x1f0 [ 79.369091][ T972] panic+0x6f5/0x7a0 [ 79.370547][ T972] ? __pfx_panic+0x10/0x10 [ 79.372200][ T972] ? show_trace_log_lvl+0x363/0x500 [ 79.374170][ T972] ? check_panic_on_warn+0x1f/0xb0 [ 79.376076][ T972] ? usb_submit_urb+0xe4b/0x1730 [ 79.377899][ T972] check_panic_on_warn+0xab/0xb0 [ 79.379757][ T972] __warn+0xf1/0x3c0 [ 79.381236][ T972] ? usb_submit_urb+0xe4b/0x1730 [ 79.383107][ T972] report_bug+0x3c0/0x580 [ 79.384762][ T972] handle_bug+0x3d/0x70 [ 79.386300][ T972] exc_invalid_op+0x17/0x50 [ 79.387958][ T972] asm_exc_invalid_op+0x1a/0x20 [ 79.389795][ T972] RIP: 0010:usb_submit_urb+0xe4b/0x1730 [ 79.391847][ T972] Code: 84 3c 02 00 00 e8 25 a4 db fa 4c 89 ef e8 4d 52 e4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 00 49 c7 8b e8 26 19 9e fa 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 f7 a3 db fa 49 81 c4 c8 05 00 00 e9 [ 79.399748][ T972] RSP: 0018:ffffc90000fe7b58 EFLAGS: 00010282 [ 79.402413][ T972] RAX: 0000000000000000 RBX: ffff88802b5bfc00 RCX: ffffffff814fe149 [ 79.405831][ T972] RDX: ffff888021c42440 RSI: ffffffff814fe156 RDI: 0000000000000001 [ 79.409435][ T972] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 79.412870][ T972] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000003 [ 79.415824][ T972] R13: ffff8880198330a8 R14: ffff88802009fd60 R15: ffff88802b5bfc7c [ 79.418919][ T972] ? __warn_printk+0x199/0x350 [ 79.420679][ T972] ? __warn_printk+0x1a6/0x350 [ 79.422406][ T972] ? usb_submit_urb+0xe4a/0x1730 [ 79.424239][ T972] ? _raw_spin_unlock_irq+0x21/0x50 [ 79.426126][ T972] carl9170_usb_send_rx_irq_urb.constprop.0+0x273/0x340 [ 79.428633][ T972] carl9170_usb_firmware_step2+0x175/0x330 [ 79.431219][ T972] ? __pfx_carl9170_usb_firmware_step2+0x10/0x10 [ 79.433965][ T972] request_firmware_work_func+0x13a/0x250 [ 79.436139][ T972] ? __pfx_request_firmware_work_func+0x10/0x10 [ 79.438383][ T972] process_one_work+0x9a9/0x1ac0 [ 79.440174][ T972] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 79.442252][ T972] ? __pfx_process_one_work+0x10/0x10 [ 79.444276][ T972] ? assign_work+0x1a0/0x250 [ 79.445975][ T972] worker_thread+0x6c8/0xf70 [ 79.447862][ T972] ? __kthread_parkme+0x148/0x220 [ 79.449788][ T972] ? __pfx_worker_thread+0x10/0x10 [ 79.451762][ T972] kthread+0x2c1/0x3a0 [ 79.453357][ T972] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.455451][ T972] ? __pfx_kthread+0x10/0x10 [ 79.457254][ T972] ret_from_fork+0x45/0x80 [ 79.459316][ T972] ? __pfx_kthread+0x10/0x10 [ 79.461417][ T972] ret_from_fork_asm+0x1a/0x30 [ 79.463183][ T972] [ 79.465389][ T972] Kernel Offset: disabled [ 79.467006][ T972] Rebooting in 86400 seconds..