Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 2025/02/07 07:00:51 ignoring optional flag "sandboxArg"="0" 2025/02/07 07:00:52 parsed 1 programs [ 133.303630][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.310413][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.631406][ T6266] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 139.549839][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.557720][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.623096][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.632517][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.655995][ T6336] chnl_net:caif_netlink_parms(): no params data found [ 141.732427][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.739821][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.747050][ T6336] bridge_slave_0: entered allmulticast mode [ 141.754589][ T6336] bridge_slave_0: entered promiscuous mode [ 141.763115][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.771539][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.779483][ T6336] bridge_slave_1: entered allmulticast mode [ 141.786445][ T6336] bridge_slave_1: entered promiscuous mode [ 141.817235][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.830448][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.866718][ T6336] team0: Port device team_slave_0 added [ 141.875050][ T6336] team0: Port device team_slave_1 added [ 141.903482][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.911050][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.937376][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.950128][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.957116][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.983123][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.028925][ T6336] hsr_slave_0: entered promiscuous mode [ 142.035265][ T6336] hsr_slave_1: entered promiscuous mode [ 142.815691][ T6336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.828181][ T6336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.845175][ T6336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.858293][ T6336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.996703][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.033796][ T6336] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.050302][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.057498][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.077805][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.085078][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.378139][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.442641][ T6336] veth0_vlan: entered promiscuous mode [ 143.460878][ T6336] veth1_vlan: entered promiscuous mode [ 143.513797][ T6336] veth0_macvtap: entered promiscuous mode [ 143.527355][ T6336] veth1_macvtap: entered promiscuous mode [ 143.591744][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.620578][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.657121][ T6336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.679267][ T6336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.688021][ T6336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.719748][ T6336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.182289][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.283486][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.560784][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.578255][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.588160][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.597264][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.605238][ T5870] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.613535][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.354123][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/02/07 07:01:08 executed programs: 0 [ 146.054939][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.074890][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.085850][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.095236][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.103795][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.112627][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.407850][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 146.450830][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.593518][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.603174][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.612054][ T6463] bridge_slave_0: entered allmulticast mode [ 146.622573][ T6463] bridge_slave_0: entered promiscuous mode [ 146.632597][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.642266][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.650281][ T6463] bridge_slave_1: entered allmulticast mode [ 146.657908][ T6463] bridge_slave_1: entered promiscuous mode [ 146.724114][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.745038][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.835666][ T6463] team0: Port device team_slave_0 added [ 146.877944][ T6463] team0: Port device team_slave_1 added [ 146.964656][ T1140] bridge_slave_1: left allmulticast mode [ 146.970716][ T1140] bridge_slave_1: left promiscuous mode [ 146.977571][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.992379][ T1140] bridge_slave_0: left allmulticast mode [ 146.998079][ T1140] bridge_slave_0: left promiscuous mode [ 147.004820][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.511355][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.525764][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.537924][ T1140] bond0 (unregistering): Released all slaves [ 147.557515][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.567492][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.598890][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.615696][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.628965][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.663132][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.704466][ T1140] hsr_slave_0: left promiscuous mode [ 147.711164][ T1140] hsr_slave_1: left promiscuous mode [ 147.717356][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.725836][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.734699][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.742639][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.763393][ T1140] veth1_macvtap: left promiscuous mode [ 147.769251][ T1140] veth0_macvtap: left promiscuous mode [ 147.775010][ T1140] veth1_vlan: left promiscuous mode [ 147.781198][ T1140] veth0_vlan: left promiscuous mode [ 148.178911][ T5146] Bluetooth: hci0: command tx timeout [ 148.257714][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 148.292819][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 148.672292][ T6463] hsr_slave_0: entered promiscuous mode [ 148.683155][ T6463] hsr_slave_1: entered promiscuous mode [ 149.525591][ T6463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.543773][ T6463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.557310][ T6463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.571878][ T6463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.730984][ T6463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.765137][ T6463] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.791991][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.799266][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.813026][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.820299][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.131927][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.210168][ T6463] veth0_vlan: entered promiscuous mode [ 150.227142][ T6463] veth1_vlan: entered promiscuous mode [ 150.248744][ T5146] Bluetooth: hci0: command tx timeout [ 150.286564][ T6463] veth0_macvtap: entered promiscuous mode [ 150.302056][ T6463] veth1_macvtap: entered promiscuous mode [ 150.326993][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.340427][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.363814][ T6463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.373033][ T6463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.382762][ T6463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.391532][ T6463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.510344][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.518214][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.565563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.574821][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.772278][ T29] audit: type=1326 audit(1738911672.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 150.796566][ T29] audit: type=1326 audit(1738911672.883:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 151.538331][ T6578] [ 151.540708][ T6578] ====================================================== [ 151.547729][ T6578] WARNING: possible circular locking dependency detected [ 151.554755][ T6578] 6.14.0-rc1-next-20250207-syzkaller-02219-ged58d103e6da-dirty #0 Not tainted [ 151.563584][ T6578] ------------------------------------------------------ [ 151.570583][ T6578] syz.0.16/6578 is trying to acquire lock: [ 151.576364][ T6578] ffff888012844078 (&hdev->lock){+.+.}-{4:4}, at: l2cap_sock_shutdown+0xa41/0x10c0 [ 151.585793][ T6578] [ 151.585793][ T6578] but task is already holding lock: [ 151.593139][ T6578] ffff888079163518 (&chan->lock/1){+.+.}-{4:4}, at: l2cap_sock_shutdown+0x9c9/0x10c0 [ 151.602619][ T6578] [ 151.602619][ T6578] which lock already depends on the new lock. [ 151.602619][ T6578] [ 151.613006][ T6578] [ 151.613006][ T6578] the existing dependency chain (in reverse order) is: [ 151.622004][ T6578] [ 151.622004][ T6578] -> #2 (&chan->lock/1){+.+.}-{4:4}: [ 151.629468][ T6578] lock_acquire+0x1ed/0x550 [ 151.634494][ T6578] __mutex_lock+0x19c/0x1010 [ 151.639685][ T6578] l2cap_chan_connect+0x7e7/0xeb0 [ 151.645237][ T6578] l2cap_sock_connect+0x5c9/0x800 [ 151.650791][ T6578] __sys_connect+0x288/0x2d0 [ 151.655901][ T6578] __x64_sys_connect+0x7a/0x90 [ 151.661172][ T6578] do_syscall_64+0xf3/0x230 [ 151.666210][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.672736][ T6578] [ 151.672736][ T6578] -> #1 (&conn->chan_lock){+.+.}-{4:4}: [ 151.680461][ T6578] lock_acquire+0x1ed/0x550 [ 151.685478][ T6578] __mutex_lock+0x19c/0x1010 [ 151.690580][ T6578] l2cap_connect_cfm+0x5b4/0x1090 [ 151.696123][ T6578] hci_remote_features_evt+0x68e/0xac0 [ 151.702088][ T6578] hci_event_packet+0xac2/0x1540 [ 151.707531][ T6578] hci_rx_work+0x3f3/0xdb0 [ 151.712453][ T6578] process_scheduled_works+0xa66/0x1840 [ 151.718529][ T6578] worker_thread+0x870/0xd30 [ 151.723630][ T6578] kthread+0x7a9/0x920 [ 151.728220][ T6578] ret_from_fork+0x4b/0x80 [ 151.733151][ T6578] ret_from_fork_asm+0x1a/0x30 [ 151.738440][ T6578] [ 151.738440][ T6578] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 151.745726][ T6578] validate_chain+0x18ef/0x5920 [ 151.751137][ T6578] __lock_acquire+0x1397/0x2100 [ 151.756521][ T6578] lock_acquire+0x1ed/0x550 [ 151.761552][ T6578] __mutex_lock+0x19c/0x1010 [ 151.766666][ T6578] l2cap_sock_shutdown+0xa41/0x10c0 [ 151.772383][ T6578] l2cap_sock_release+0x79/0x1d0 [ 151.777834][ T6578] sock_close+0xbc/0x240 [ 151.782584][ T6578] __fput+0x3e9/0x9f0 [ 151.787076][ T6578] task_work_run+0x24f/0x310 [ 151.792175][ T6578] get_signal+0x15f7/0x1750 [ 151.797188][ T6578] arch_do_signal_or_restart+0x96/0x860 [ 151.803340][ T6578] syscall_exit_to_user_mode+0xce/0x340 [ 151.809399][ T6578] do_syscall_64+0x100/0x230 [ 151.814526][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.820957][ T6578] [ 151.820957][ T6578] other info that might help us debug this: [ 151.820957][ T6578] [ 151.831181][ T6578] Chain exists of: [ 151.831181][ T6578] &hdev->lock --> &conn->chan_lock --> &chan->lock/1 [ 151.831181][ T6578] [ 151.843782][ T6578] Possible unsafe locking scenario: [ 151.843782][ T6578] [ 151.851477][ T6578] CPU0 CPU1 [ 151.856826][ T6578] ---- ---- [ 151.862194][ T6578] lock(&chan->lock/1); [ 151.866434][ T6578] lock(&conn->chan_lock); [ 151.873537][ T6578] lock(&chan->lock/1); [ 151.880299][ T6578] lock(&hdev->lock); [ 151.884357][ T6578] [ 151.884357][ T6578] *** DEADLOCK *** [ 151.884357][ T6578] [ 151.892482][ T6578] 2 locks held by syz.0.16/6578: [ 151.897402][ T6578] #0: ffff888079a38e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 151.907583][ T6578] #1: ffff888079163518 (&chan->lock/1){+.+.}-{4:4}, at: l2cap_sock_shutdown+0x9c9/0x10c0 [ 151.917678][ T6578] [ 151.917678][ T6578] stack backtrace: [ 151.923569][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.0.16 Not tainted 6.14.0-rc1-next-20250207-syzkaller-02219-ged58d103e6da-dirty #0 [ 151.923585][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.923600][ T6578] Call Trace: [ 151.923608][ T6578] [ 151.923615][ T6578] dump_stack_lvl+0x241/0x360 [ 151.923632][ T6578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.923644][ T6578] ? __pfx__printk+0x10/0x10 [ 151.923667][ T6578] print_circular_bug+0x13a/0x1b0 [ 151.923681][ T6578] check_noncircular+0x36a/0x4a0 [ 151.923696][ T6578] ? __pfx_check_noncircular+0x10/0x10 [ 151.923708][ T6578] ? lockdep_lock+0x123/0x2b0 [ 151.923728][ T6578] validate_chain+0x18ef/0x5920 [ 151.923739][ T6578] ? add_lock_to_list+0x1e8/0x2f0 [ 151.923759][ T6578] ? __pfx_validate_chain+0x10/0x10 [ 151.923773][ T6578] ? __pfx_validate_chain+0x10/0x10 [ 151.923792][ T6578] ? __pfx_validate_chain+0x10/0x10 [ 151.923805][ T6578] ? mark_lock+0x9a/0x360 [ 151.923823][ T6578] __lock_acquire+0x1397/0x2100 [ 151.923844][ T6578] lock_acquire+0x1ed/0x550 [ 151.923859][ T6578] ? l2cap_sock_shutdown+0xa41/0x10c0 [ 151.923878][ T6578] ? __pfx_lock_acquire+0x10/0x10 [ 151.923895][ T6578] ? __pfx___might_resched+0x10/0x10 [ 151.923910][ T6578] ? __pfx___mutex_trylock_common+0x10/0x10 [ 151.923926][ T6578] __mutex_lock+0x19c/0x1010 [ 151.923942][ T6578] ? l2cap_sock_shutdown+0xa41/0x10c0 [ 151.923957][ T6578] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.923974][ T6578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.923991][ T6578] ? l2cap_sock_shutdown+0xa41/0x10c0 [ 151.924006][ T6578] ? __pfx___mutex_lock+0x10/0x10 [ 151.924021][ T6578] ? __local_bh_enable_ip+0x168/0x200 [ 151.924035][ T6578] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 151.924052][ T6578] l2cap_sock_shutdown+0xa41/0x10c0 [ 151.924072][ T6578] ? l2cap_sock_release+0x6c/0x1d0 [ 151.924086][ T6578] ? __pfx_lock_release+0x10/0x10 [ 151.924102][ T6578] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 151.924117][ T6578] ? bt_accept_dequeue+0x3ac/0x570 [ 151.924135][ T6578] l2cap_sock_release+0x79/0x1d0 [ 151.924151][ T6578] sock_close+0xbc/0x240 [ 151.924169][ T6578] ? __pfx_sock_close+0x10/0x10 [ 151.924183][ T6578] __fput+0x3e9/0x9f0 [ 151.924202][ T6578] task_work_run+0x24f/0x310 [ 151.924216][ T6578] ? __pfx_task_work_run+0x10/0x10 [ 151.924237][ T6578] get_signal+0x15f7/0x1750 [ 151.924251][ T6578] ? __pfx_task_work_add+0x10/0x10 [ 151.924269][ T6578] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 151.924285][ T6578] ? __pfx_get_signal+0x10/0x10 [ 151.924300][ T6578] arch_do_signal_or_restart+0x96/0x860 [ 151.924316][ T6578] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 151.924329][ T6578] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.924350][ T6578] ? syscall_exit_to_user_mode+0xa3/0x340 [ 151.924366][ T6578] syscall_exit_to_user_mode+0xce/0x340 [ 151.924387][ T6578] do_syscall_64+0x100/0x230 [ 151.924403][ T6578] ? clear_bhb_loop+0x35/0x90 [ 151.924422][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.924446][ T6578] RIP: 0033:0x7f32d118cda9 [ 151.924464][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.924474][ T6578] RSP: 002b:00007f32d1fa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 151.924487][ T6578] RAX: fffffffffffffffc RBX: 00007f32d13a5fa0 RCX: 00007f32d118cda9 [ 151.924496][ T6578] RDX: 000000000000000e RSI: 0000000020000100 RDI: 0000000000000004 [ 151.924503][ T6578] RBP: 00007f32d120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.924511][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.924518][ T6578] R13: 0000000000000000 R14: 00007f32d13a5fa0 R15: 00007ffc760ea6e8 [ 151.924532][ T6578] 2025/02/07 07:01:14 executed programs: 3 [ 152.342043][ T5870] Bluetooth: hci0: command tx timeout [ 152.368288][ T29] audit: type=1326 audit(1738911674.473:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 152.391141][ T29] audit: type=1326 audit(1738911674.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 153.219270][ T29] audit: type=1326 audit(1738911675.333:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 153.242993][ T29] audit: type=1326 audit(1738911675.333:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 154.062519][ T29] audit: type=1326 audit(1738911676.173:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 154.084566][ T29] audit: type=1326 audit(1738911676.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 154.408747][ T5870] Bluetooth: hci0: command 0x0419 tx timeout [ 154.479658][ T29] audit: type=1326 audit(1738911676.593:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 154.501938][ T29] audit: type=1326 audit(1738911676.593:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 156.169928][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 156.169950][ T29] audit: type=1326 audit(1738911678.283:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 156.198328][ T29] audit: type=1326 audit(1738911678.283:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.0.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 157.017460][ T29] audit: type=1326 audit(1738911679.123:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 157.039735][ T29] audit: type=1326 audit(1738911679.123:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.0.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 2025/02/07 07:01:19 executed programs: 10 [ 157.861562][ T29] audit: type=1326 audit(1738911679.973:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 157.884225][ T29] audit: type=1326 audit(1738911679.973:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 158.710426][ T29] audit: type=1326 audit(1738911680.823:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 158.732566][ T29] audit: type=1326 audit(1738911680.823:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 159.559573][ T29] audit: type=1326 audit(1738911681.673:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 159.581802][ T29] audit: type=1326 audit(1738911681.673:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 161.258530][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 161.265069][ T29] audit: type=1326 audit(1738911683.363:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000 [ 161.287186][ T29] audit: type=1326 audit(1738911683.363:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d118cda9 code=0x7ffc0000