[ **] A start job is running for dev-ttyS0.device (1min 28s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (1min 29s / 1min 30s)[ TIME ] Timed out waiting for device dev-ttyS0.device. [DEPEND] Dependency failed for Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts. 2021/08/16 14:31:46 parsed 1 programs 2021/08/16 14:31:46 executed programs: 0 [ 699.428058][ T22] audit: type=1400 audit(1629124306.266:8): avc: denied { execmem } for pid=344 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 699.435383][ T347] cgroup1: Unknown subsys name 'perf_event' [ 699.457290][ T347] cgroup1: Unknown subsys name 'net_cls' [ 699.497016][ T354] cgroup1: Unknown subsys name 'perf_event' [ 699.497775][ T355] cgroup1: Unknown subsys name 'perf_event' [ 699.503997][ T355] cgroup1: Unknown subsys name 'net_cls' [ 699.513075][ T354] cgroup1: Unknown subsys name 'net_cls' [ 699.527695][ T358] cgroup1: Unknown subsys name 'perf_event' [ 699.533156][ T357] cgroup1: Unknown subsys name 'perf_event' [ 699.534328][ T358] cgroup1: Unknown subsys name 'net_cls' [ 699.540775][ T356] cgroup1: Unknown subsys name 'perf_event' [ 699.552021][ T357] cgroup1: Unknown subsys name 'net_cls' [ 699.558353][ T356] cgroup1: Unknown subsys name 'net_cls' [ 699.626366][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.633533][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.641347][ T347] device bridge_slave_0 entered promiscuous mode [ 699.672304][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.679506][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.687261][ T347] device bridge_slave_1 entered promiscuous mode [ 699.791090][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.798200][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.805553][ T358] device bridge_slave_0 entered promiscuous mode [ 699.812817][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.819995][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.827394][ T358] device bridge_slave_1 entered promiscuous mode [ 699.850439][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.857841][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.865276][ T356] device bridge_slave_0 entered promiscuous mode [ 699.877429][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.884580][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.892336][ T356] device bridge_slave_1 entered promiscuous mode [ 699.933002][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.940127][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.947810][ T355] device bridge_slave_0 entered promiscuous mode [ 699.967935][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.974992][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.982529][ T354] device bridge_slave_0 entered promiscuous mode [ 699.992831][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.999909][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.007401][ T354] device bridge_slave_1 entered promiscuous mode [ 700.014108][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.021240][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.028844][ T355] device bridge_slave_1 entered promiscuous mode [ 700.076515][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.083653][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.091890][ T357] device bridge_slave_0 entered promiscuous mode [ 700.099321][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.106502][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.113910][ T357] device bridge_slave_1 entered promiscuous mode [ 700.246429][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.253751][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.261262][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.268332][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.299690][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.306952][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.314264][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.321286][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.332049][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.339095][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.346487][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.353480][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.378096][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.385125][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.392379][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.399404][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.422473][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.429517][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.436813][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.443813][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.480131][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.487171][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.494513][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.501554][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.510760][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.518319][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.525470][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.532897][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.540368][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.547580][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.554729][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.562000][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.569349][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.576702][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.583847][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.591172][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.599067][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.606597][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.625766][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.633169][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.659077][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.666637][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.674031][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.682972][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.691475][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.698512][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.727655][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.735986][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.744098][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.751132][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.758571][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.766967][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.775809][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.782848][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.790366][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 700.798523][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.806548][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.814528][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.822546][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.830927][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.839182][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.846219][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.853512][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.861610][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.869141][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.877536][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.886793][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.893880][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.901322][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.908752][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.946201][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.954672][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.964106][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.973320][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 700.981559][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.989716][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.998449][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.006746][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.013795][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.021199][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.029386][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.037630][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.045997][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.054090][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.061124][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.068657][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 701.077069][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.085181][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.092342][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.099678][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.108192][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.116390][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.123398][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.130755][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 701.139123][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.147319][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.154325][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.161717][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 701.169812][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.186194][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 701.194212][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.202501][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 701.211069][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.225779][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.234138][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.242930][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.251426][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.277460][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.287134][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.295260][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.304236][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 701.311734][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.319322][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.327902][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.336134][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.343139][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.371699][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.380413][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.388457][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.396587][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 701.404560][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.412547][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 701.420967][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 701.429670][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.436702][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.463582][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.471810][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.479849][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.489047][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 701.497673][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.541301][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.551408][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.560022][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.568451][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.577174][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.595312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.620933][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.629315][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.637604][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.646154][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.654502][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.663146][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.671593][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.679992][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.688351][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.696762][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.720592][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.733273][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.735171][ T88] Bluetooth: hci1: sending frame failed (-49) [ 701.750426][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.759420][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.768257][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 701.776923][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.795659][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 701.803527][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.847357][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.851355][ T88] Bluetooth: hci2: sending frame failed (-49) [ 701.859002][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.884473][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 701.893427][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 701.904340][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.913282][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.943622][ T407] Bluetooth: hci5: sending frame failed (-49) [ 703.666223][ T101] Bluetooth: hci0: command 0x1003 tx timeout [ 703.672466][ T407] Bluetooth: hci0: sending frame failed (-49) [ 703.825942][ T101] Bluetooth: hci1: command 0x1003 tx timeout [ 703.832181][ T407] Bluetooth: hci1: sending frame failed (-49) [ 703.905808][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 703.911963][ T407] Bluetooth: hci4: sending frame failed (-49) [ 703.918332][ T67] Bluetooth: hci3: command 0x1003 tx timeout [ 703.924373][ T407] Bluetooth: hci3: sending frame failed (-49) [ 703.930786][ T67] Bluetooth: hci2: command 0x1003 tx timeout [ 703.936977][ T407] Bluetooth: hci2: sending frame failed (-49) [ 703.985597][ T382] Bluetooth: hci5: command 0x1003 tx timeout [ 703.991667][ T407] Bluetooth: hci5: sending frame failed (-49) [ 705.745362][ T382] Bluetooth: hci0: command 0x1001 tx timeout [ 705.751380][ T407] Bluetooth: hci0: sending frame failed (-49) [ 705.905645][ T382] Bluetooth: hci1: command 0x1001 tx timeout [ 705.911657][ T407] Bluetooth: hci1: sending frame failed (-49) [ 705.985323][ T101] Bluetooth: hci2: command 0x1001 tx timeout [ 705.991367][ T407] Bluetooth: hci2: sending frame failed (-49) [ 705.997984][ T101] Bluetooth: hci3: command 0x1001 tx timeout [ 706.003990][ T407] Bluetooth: hci3: sending frame failed (-49) [ 706.010398][ T101] Bluetooth: hci4: command 0x1001 tx timeout [ 706.016493][ T407] Bluetooth: hci4: sending frame failed (-49) [ 706.065319][ T67] Bluetooth: hci5: command 0x1001 tx timeout [ 706.071329][ T407] Bluetooth: hci5: sending frame failed (-49) [ 707.824980][ T101] Bluetooth: hci0: command 0x1009 tx timeout [ 707.984980][ T101] Bluetooth: hci1: command 0x1009 tx timeout [ 708.065065][ T67] Bluetooth: hci4: command 0x1009 tx timeout [ 708.071065][ T67] Bluetooth: hci3: command 0x1009 tx timeout [ 708.077193][ T67] Bluetooth: hci2: command 0x1009 tx timeout [ 708.144995][ T382] Bluetooth: hci5: command 0x1009 tx timeout 2021/08/16 14:31:58 executed programs: 6 [ 712.082510][ T396] Bluetooth: hci1: Frame reassembly failed (-84) [ 712.082930][ T152] Bluetooth: hci0: Frame reassembly failed (-84) [ 712.101453][ T152] Bluetooth: hci3: Frame reassembly failed (-84) [ 712.111985][ T152] Bluetooth: hci4: Frame reassembly failed (-84) [ 714.144253][ T67] Bluetooth: hci5: command 0x1003 tx timeout [ 714.150586][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 714.150654][ T407] Bluetooth: hci5: sending frame failed (-49) [ 714.156854][ T67] Bluetooth: hci2: command 0x1003 tx timeout [ 714.163519][ T407] Bluetooth: hci4: sending frame failed (-49) [ 714.169024][ T434] Bluetooth: hci2: sending frame failed (-49) [ 714.180903][ T67] Bluetooth: hci3: command 0x1003 tx timeout [ 714.186915][ T67] Bluetooth: hci0: command 0x1003 tx timeout [ 714.186943][ T434] Bluetooth: hci3: sending frame failed (-49) [ 714.192983][ T67] Bluetooth: hci1: command 0x1003 tx timeout [ 714.193209][ T407] Bluetooth: hci0: sending frame failed (-49) [ 714.199184][ T434] Bluetooth: hci1: sending frame failed (-49) [ 716.224123][ T67] Bluetooth: hci0: command 0x1001 tx timeout [ 716.224127][ T364] Bluetooth: hci1: command 0x1001 tx timeout [ 716.224405][ T434] Bluetooth: hci1: sending frame failed (-49) [ 716.230150][ T435] Bluetooth: hci0: sending frame failed (-49) [ 716.236242][ T364] Bluetooth: hci3: command 0x1001 tx timeout [ 716.242471][ T67] Bluetooth: hci2: command 0x1001 tx timeout [ 716.249592][ T364] Bluetooth: hci4: command 0x1001 tx timeout [ 716.254464][ T435] Bluetooth: hci3: sending frame failed (-49) [ 716.260835][ T434] Bluetooth: hci4: sending frame failed (-49) [ 716.266396][ T435] Bluetooth: hci2: sending frame failed (-49) [ 716.273049][ T364] Bluetooth: hci5: command 0x1001 tx timeout [ 716.290759][ T435] Bluetooth: hci5: sending frame failed (-49) [ 718.303871][ T67] Bluetooth: hci5: command 0x1009 tx timeout [ 718.303894][ T364] Bluetooth: hci4: command 0x1009 tx timeout [ 718.310059][ T67] Bluetooth: hci2: command 0x1009 tx timeout [ 718.316240][ T364] Bluetooth: hci1: command 0x1009 tx timeout [ 718.323262][ T67] Bluetooth: hci3: command 0x1009 tx timeout [ 718.334160][ T67] Bluetooth: hci0: command 0x1009 tx timeout 2021/08/16 14:32:09 executed programs: 12 [ 722.341996][ T152] Bluetooth: hci0: Frame reassembly failed (-84) [ 722.342010][ T426] Bluetooth: hci1: Frame reassembly failed (-84) [ 722.355485][ T152] Bluetooth: hci2: Frame reassembly failed (-84) [ 722.356014][ T7] Bluetooth: hci3: Frame reassembly failed (-84) [ 722.368351][ T449] Bluetooth: hci2: Frame reassembly failed (-84) [ 722.383459][ T408] Bluetooth: hci4: sending frame failed (-49) [ 724.383172][ T382] Bluetooth: hci3: command 0x1003 tx timeout [ 724.389404][ T382] Bluetooth: hci2: command 0x1003 tx timeout [ 724.389448][ T435] Bluetooth: hci3: sending frame failed (-49) [ 724.396454][ T382] Bluetooth: hci1: command 0x1003 tx timeout [ 724.401646][ T434] Bluetooth: hci2: sending frame failed (-49) [ 724.408345][ T413] Bluetooth: hci1: sending frame failed (-49) [ 724.419815][ T382] Bluetooth: hci0: command 0x1003 tx timeout [ 724.425895][ T413] Bluetooth: hci0: sending frame failed (-49) [ 724.463191][ T364] Bluetooth: hci5: command 0x1003 tx timeout [ 724.469210][ T364] Bluetooth: hci4: command 0x1003 tx timeout [ 724.469331][ T413] Bluetooth: hci5: sending frame failed (-49) [ 724.476137][ T434] Bluetooth: hci4: sending frame failed (-49) [ 726.463000][ T382] Bluetooth: hci0: command 0x1001 tx timeout [ 726.463004][ T364] Bluetooth: hci2: command 0x1001 tx timeout [ 726.463055][ T434] Bluetooth: hci2: sending frame failed (-49) [ 726.469016][ T413] Bluetooth: hci0: sending frame failed (-49) [ 726.475151][ T364] Bluetooth: hci3: command 0x1001 tx timeout [ 726.482127][ T382] Bluetooth: hci1: command 0x1001 tx timeout [ 726.488296][ T413] Bluetooth: hci3: sending frame failed (-49) [ 726.493536][ T434] Bluetooth: hci1: sending frame failed (-49) [ 726.542997][ T382] Bluetooth: hci5: command 0x1001 tx timeout [ 726.543012][ T364] Bluetooth: hci4: command 0x1001 tx timeout [ 726.549028][ T434] Bluetooth: hci5: sending frame failed (-49) [ 726.555701][ T413] Bluetooth: hci4: sending frame failed (-49) [ 728.542757][ T364] Bluetooth: hci3: command 0x1009 tx timeout [ 728.542762][ T382] Bluetooth: hci1: command 0x1009 tx timeout [ 728.542781][ T382] Bluetooth: hci0: command 0x1009 tx timeout [ 728.548766][ T364] Bluetooth: hci2: command 0x1009 tx timeout [ 728.622765][ T364] Bluetooth: hci4: command 0x1009 tx timeout [ 728.633050][ T382] Bluetooth: hci5: command 0x1009 tx timeout 2021/08/16 14:32:19 executed programs: 18 [ 732.569912][ T454] Bluetooth: hci0: Frame reassembly failed (-84) [ 732.577405][ T396] Bluetooth: hci4: Frame reassembly failed (-84) [ 732.583816][ T408] ================================================================== [ 732.591873][ T408] BUG: KASAN: use-after-free in skb_dequeue+0xad/0x180 [ 732.598708][ T408] Read of size 8 at addr ffff8881e08bfc80 by task kworker/u5:6/408 [ 732.606834][ T408] [ 732.609153][ T408] CPU: 0 PID: 408 Comm: kworker/u5:6 Not tainted 5.4.125-syzkaller-00008-ga8f2bcabf9c5 #0 [ 732.612584][ T426] Bluetooth: hci5: Frame reassembly failed (-84) [ 732.619011][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.619025][ T408] Workqueue: hci4 hci_rx_work [ 732.619035][ T408] Call Trace: [ 732.643462][ T408] dump_stack+0x1d8/0x24e [ 732.647785][ T408] ? show_regs_print_info+0x12/0x12 [ 732.652977][ T408] ? printk+0xcf/0x114 [ 732.657033][ T408] print_address_description+0x9b/0x650 [ 732.662568][ T408] ? devkmsg_release+0x11c/0x11c [ 732.667531][ T408] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 732.672997][ T408] __kasan_report+0x182/0x260 [ 732.677665][ T408] ? skb_dequeue+0xad/0x180 [ 732.682275][ T408] kasan_report+0x30/0x60 [ 732.686602][ T408] skb_dequeue+0xad/0x180 [ 732.690947][ T408] hci_rx_work+0x620/0x780 [ 732.695356][ T408] process_one_work+0x679/0x1030 [ 732.700276][ T408] worker_thread+0xa6f/0x1400 [ 732.704936][ T408] ? _raw_spin_lock+0x1b0/0x1b0 [ 732.709763][ T408] kthread+0x30f/0x330 [ 732.713807][ T408] ? process_one_work+0x1030/0x1030 [ 732.718993][ T408] ? kthread_destroy_worker+0x280/0x280 [ 732.724543][ T408] ret_from_fork+0x1f/0x30 [ 732.728927][ T408] [ 732.731228][ T408] Allocated by task 466: [ 732.735447][ T408] __kasan_kmalloc+0x137/0x1e0 [ 732.740183][ T408] kmem_cache_alloc+0x115/0x290 [ 732.745008][ T408] __alloc_skb+0x75/0x4d0 [ 732.749305][ T408] h4_recv_buf+0x274/0xd00 [ 732.753687][ T408] h4_recv+0xf4/0x1b0 [ 732.757658][ T408] hci_uart_tty_receive+0x275/0x460 [ 732.762843][ T408] tty_ioctl+0xd48/0x1710 [ 732.767141][ T408] do_vfs_ioctl+0x76a/0x1720 [ 732.771705][ T408] __x64_sys_ioctl+0xd4/0x110 [ 732.776887][ T408] do_syscall_64+0xcb/0x1e0 [ 732.781458][ T408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 732.787315][ T408] [ 732.789613][ T408] Freed by task 408: [ 732.793479][ T408] __kasan_slab_free+0x18a/0x240 [ 732.798392][ T408] slab_free_freelist_hook+0x7b/0x150 [ 732.803763][ T408] kmem_cache_free+0xb8/0x5f0 [ 732.808422][ T408] hci_event_packet+0xa284/0x22220 [ 732.813511][ T408] hci_rx_work+0x287/0x780 [ 732.818086][ T408] process_one_work+0x679/0x1030 [ 732.823081][ T408] worker_thread+0xa6f/0x1400 [ 732.827749][ T408] kthread+0x30f/0x330 [ 732.831807][ T408] ret_from_fork+0x1f/0x30 [ 732.836201][ T408] [ 732.838504][ T408] The buggy address belongs to the object at ffff8881e08bfc80 [ 732.838504][ T408] which belongs to the cache skbuff_head_cache of size 240 [ 732.853046][ T408] The buggy address is located 0 bytes inside of [ 732.853046][ T408] 240-byte region [ffff8881e08bfc80, ffff8881e08bfd70) [ 732.866116][ T408] The buggy address belongs to the page: [ 732.871721][ T408] page:ffffea0007822fc0 refcount:1 mapcount:0 mapping:ffff8881f1dde280 index:0x0 [ 732.880794][ T408] flags: 0x8000000000000200(slab) [ 732.885791][ T408] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881f1dde280 [ 732.894363][ T408] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 732.902932][ T408] page dumped because: kasan: bad access detected [ 732.909486][ T408] page_owner tracks the page as allocated [ 732.915173][ T408] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY) [ 732.927123][ T408] prep_new_page+0x19a/0x380 [ 732.931711][ T408] get_page_from_freelist+0x550/0x8b0 [ 732.937051][ T408] __alloc_pages_nodemask+0x3a2/0x880 [ 732.942395][ T408] alloc_slab_page+0x39/0x3e0 [ 732.947044][ T408] new_slab+0x97/0x460 [ 732.951089][ T408] ___slab_alloc+0x330/0x4c0 [ 732.955655][ T408] kmem_cache_alloc+0x18b/0x290 [ 732.960491][ T408] __alloc_skb+0x75/0x4d0 [ 732.964973][ T408] hci_req_add_ev+0xa4/0x3c0 [ 732.969534][ T408] hci_init1_req+0x134/0x270 [ 732.974103][ T408] __hci_req_sync+0x174/0x8a0 [ 732.978804][ T408] hci_dev_do_open+0xafe/0x1670 [ 732.983632][ T408] hci_power_on+0x155/0x580 [ 732.988113][ T408] process_one_work+0x679/0x1030 [ 732.993116][ T408] worker_thread+0xa6f/0x1400 [ 732.997821][ T408] kthread+0x30f/0x330 [ 733.001862][ T408] page last free stack trace: [ 733.006532][ T408] free_pcp_prepare+0x1a9/0x270 [ 733.011371][ T408] __free_pages+0x9c/0x250 [ 733.015764][ T408] inode_doinit_with_dentry+0xb34/0x11d0 [ 733.021366][ T408] security_d_instantiate+0xa5/0x100 [ 733.026632][ T408] d_instantiate+0x51/0x90 [ 733.031032][ T408] debugfs_create_dir+0x1bc/0x3f0 [ 733.036203][ T408] hci_register_dev+0x297/0x710 [ 733.041028][ T408] hci_uart_tty_ioctl+0x89e/0xa10 [ 733.046212][ T408] tty_ioctl+0xf68/0x1710 [ 733.050517][ T408] do_vfs_ioctl+0x76a/0x1720 [ 733.055169][ T408] __x64_sys_ioctl+0xd4/0x110 [ 733.059836][ T408] do_syscall_64+0xcb/0x1e0 [ 733.064308][ T408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 733.070184][ T408] [ 733.072481][ T408] Memory state around the buggy address: [ 733.078080][ T408] ffff8881e08bfb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 733.086123][ T408] ffff8881e08bfc00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 733.094161][ T408] >ffff8881e08bfc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 733.102190][ T408] ^ [ 733.106230][ T408] ffff8881e08bfd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 733.114354][ T408] ffff8881e08bfd80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 733.122406][ T408] ================================================================== [ 733.130527][ T408] Disabling lock debugging due to kernel taint [ 733.136660][ T408] kasan: CONFIG_KASAN_INLINE enabled [ 733.141920][ T408] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 733.150061][ T408] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 733.156983][ T408] CPU: 0 PID: 408 Comm: kworker/u5:6 Tainted: G B 5.4.125-syzkaller-00008-ga8f2bcabf9c5 #0 [ 733.168323][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.178363][ T408] Workqueue: hci4 hci_rx_work [ 733.183024][ T408] RIP: 0010:skb_dequeue+0xe8/0x180 [ 733.188136][ T408] Code: 80 3c 38 00 74 05 e8 87 8f 1e fe 49 8b 5c 24 08 4d 8d 6e 08 ba 10 00 00 00 4c 89 e7 31 f6 e8 3f 62 1e fe 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 d9 8f 1e fe 49 89 5e 08 48 89 d8 [ 733.207738][ T408] RSP: 0018:ffff8881e1adfc50 EFLAGS: 00010002 [ 733.213788][ T408] RAX: 0000000000000001 RBX: ffff8881e08bfc80 RCX: 0000000000000000 [ 733.222082][ T408] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8881e08bfc90 [ 733.230025][ T408] RBP: 1ffff1103bed0172 R08: dffffc0000000000 R09: ffff8881e08bfc80 [ 733.237966][ T408] R10: ffffed103c117f92 R11: 00000000000000fb R12: ffff8881e08bfc80 [ 733.245907][ T408] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 733.253860][ T408] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 733.262762][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.269318][ T408] CR2: 00000000005198f0 CR3: 00000001e6370000 CR4: 00000000001406f0 [ 733.277525][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 733.285476][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 733.293525][ T408] Call Trace: [ 733.296798][ T408] hci_rx_work+0x620/0x780 [ 733.301246][ T408] process_one_work+0x679/0x1030 [ 733.306255][ T408] worker_thread+0xa6f/0x1400 [ 733.310909][ T408] ? _raw_spin_lock+0x1b0/0x1b0 [ 733.315744][ T408] kthread+0x30f/0x330 [ 733.319791][ T408] ? process_one_work+0x1030/0x1030 [ 733.324966][ T408] ? kthread_destroy_worker+0x280/0x280 [ 733.330489][ T408] ret_from_fork+0x1f/0x30 [ 733.334871][ T408] Modules linked in: [ 733.338766][ T408] ---[ end trace 29535e1e0975b2a5 ]--- [ 733.344373][ T408] RIP: 0010:skb_dequeue+0xe8/0x180 [ 733.349465][ T408] Code: 80 3c 38 00 74 05 e8 87 8f 1e fe 49 8b 5c 24 08 4d 8d 6e 08 ba 10 00 00 00 4c 89 e7 31 f6 e8 3f 62 1e fe 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 d9 8f 1e fe 49 89 5e 08 48 89 d8 [ 733.369053][ T408] RSP: 0018:ffff8881e1adfc50 EFLAGS: 00010002 [ 733.375100][ T408] RAX: 0000000000000001 RBX: ffff8881e08bfc80 RCX: 0000000000000000 [ 733.383221][ T408] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff8881e08bfc90 [ 733.391177][ T408] RBP: 1ffff1103bed0172 R08: dffffc0000000000 R09: ffff8881e08bfc80 [ 733.399444][ T408] R10: ffffed103c117f92 R11: 00000000000000fb R12: ffff8881e08bfc80 [ 733.407523][ T408] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 733.415484][ T408] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 733.424391][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.431034][ T408] CR2: 00000000005198f0 CR3: 00000001e6370000 CR4: 00000000001406f0 [ 733.438980][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 733.446943][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 733.454892][ T408] Kernel panic - not syncing: Fatal exception [ 733.462409][ T408] Kernel Offset: disabled [ 733.466735][ T408] Rebooting in 86400 seconds..