Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2024/09/20 03:48:42 ignoring optional flag "sandboxArg"="0" 2024/09/20 03:48:43 parsed 1 programs [ 127.938753][ T29] audit: type=1400 audit(1726804127.937:138): avc: denied { unlink } for pid=5866 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 129.882678][ T5866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.295653][ T29] audit: type=1401 audit(1726804132.287:139): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 133.242538][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.250525][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.714765][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.746124][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.750750][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.758811][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.829268][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.886729][ T4609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.898754][ T4609] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.914729][ T4609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.577125][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 134.681355][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.689546][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.698024][ T5931] bridge_slave_0: entered allmulticast mode [ 134.705427][ T5931] bridge_slave_0: entered promiscuous mode [ 134.714274][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.722663][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.735854][ T5931] bridge_slave_1: entered allmulticast mode [ 134.743681][ T5931] bridge_slave_1: entered promiscuous mode [ 134.811353][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.826318][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.858800][ T5931] team0: Port device team_slave_0 added [ 134.868994][ T5931] team0: Port device team_slave_1 added [ 134.899066][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.906554][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.933919][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.947154][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.954159][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.982362][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.031210][ T5931] hsr_slave_0: entered promiscuous mode [ 135.037778][ T5931] hsr_slave_1: entered promiscuous mode [ 135.154253][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 135.164546][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 135.174704][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 135.185579][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.208699][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.215915][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.223322][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.230670][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.282193][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.299562][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.308329][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.327433][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.342186][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.349419][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.364640][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.371846][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.537391][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.576774][ T5931] veth0_vlan: entered promiscuous mode [ 135.589673][ T5931] veth1_vlan: entered promiscuous mode [ 135.617810][ T5931] veth0_macvtap: entered promiscuous mode [ 135.628086][ T5931] veth1_macvtap: entered promiscuous mode [ 135.644223][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.661481][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.674189][ T5931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.683919][ T5931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.693652][ T5931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.702592][ T5931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/09/20 03:48:55 executed programs: 0 [ 135.959791][ T4609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.972158][ T4609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.988858][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.997666][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.011956][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.019943][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.028332][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.039254][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.039915][ T5968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.046789][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.058006][ T5968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.068230][ T5968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.077488][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.078055][ T5969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.093530][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.102537][ T5969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.138485][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.146050][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.201563][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.208489][ T5969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.218968][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.228458][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.240471][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.248963][ T5969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.257793][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.267874][ T4609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.282689][ T4609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.299806][ T4609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.319280][ T4609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.336158][ T4609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.823429][ T2417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.860746][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 137.016541][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 137.039467][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 137.131378][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 137.162041][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.169424][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.176952][ T5958] bridge_slave_0: entered allmulticast mode [ 137.183852][ T5958] bridge_slave_0: entered promiscuous mode [ 137.192254][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.199747][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.207256][ T5958] bridge_slave_1: entered allmulticast mode [ 137.214491][ T5958] bridge_slave_1: entered promiscuous mode [ 137.229963][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 137.355046][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.390927][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.400215][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.408087][ T5960] bridge_slave_0: entered allmulticast mode [ 137.415344][ T5960] bridge_slave_0: entered promiscuous mode [ 137.438872][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.480518][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.489904][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.500141][ T5960] bridge_slave_1: entered allmulticast mode [ 137.509748][ T5960] bridge_slave_1: entered promiscuous mode [ 137.527227][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.534476][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.548427][ T5971] bridge_slave_0: entered allmulticast mode [ 137.555336][ T5971] bridge_slave_0: entered promiscuous mode [ 137.581281][ T5958] team0: Port device team_slave_0 added [ 137.634021][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.641650][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.649265][ T5971] bridge_slave_1: entered allmulticast mode [ 137.657042][ T5971] bridge_slave_1: entered promiscuous mode [ 137.674541][ T5958] team0: Port device team_slave_1 added [ 137.693240][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.701406][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.709656][ T5959] bridge_slave_0: entered allmulticast mode [ 137.717138][ T5959] bridge_slave_0: entered promiscuous mode [ 137.744606][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.784040][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.791726][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.804362][ T5959] bridge_slave_1: entered allmulticast mode [ 137.811980][ T5959] bridge_slave_1: entered promiscuous mode [ 137.840048][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.858207][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.869493][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.879312][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.905431][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.919022][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.926076][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.952230][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.979569][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.994381][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.004082][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.011970][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.019560][ T5970] bridge_slave_0: entered allmulticast mode [ 138.027213][ T5970] bridge_slave_0: entered promiscuous mode [ 138.052016][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.099875][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.107647][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.114876][ T5970] bridge_slave_1: entered allmulticast mode [ 138.122492][ T5970] bridge_slave_1: entered promiscuous mode [ 138.151799][ T5960] team0: Port device team_slave_0 added [ 138.159588][ T4609] Bluetooth: hci2: command tx timeout [ 138.165907][ T5925] Bluetooth: hci1: command tx timeout [ 138.183455][ T5971] team0: Port device team_slave_0 added [ 138.220007][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.238833][ T4609] Bluetooth: hci0: command tx timeout [ 138.239986][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.244953][ T5960] team0: Port device team_slave_1 added [ 138.256019][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.286839][ T2417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.315753][ T4609] Bluetooth: hci3: command tx timeout [ 138.324723][ T5971] team0: Port device team_slave_1 added [ 138.348733][ T5959] team0: Port device team_slave_0 added [ 138.358134][ T5959] team0: Port device team_slave_1 added [ 138.387367][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.396891][ T4609] Bluetooth: hci4: command tx timeout [ 138.445122][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.452428][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.479391][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.506576][ T5958] hsr_slave_0: entered promiscuous mode [ 138.513069][ T5958] hsr_slave_1: entered promiscuous mode [ 138.520178][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.528984][ T5958] Cannot create hsr debugfs directory [ 138.535260][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.544251][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.574681][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.586993][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.594209][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.624874][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.639606][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.646773][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.673369][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.689569][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.700939][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.727881][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.754894][ T5970] team0: Port device team_slave_0 added [ 138.764550][ T5970] team0: Port device team_slave_1 added [ 138.771897][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.779252][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.806287][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.834901][ T2417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.954167][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.961462][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.988742][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.001778][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.009025][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.036182][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.062487][ T5971] hsr_slave_0: entered promiscuous mode [ 139.069297][ T5971] hsr_slave_1: entered promiscuous mode [ 139.075941][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.083712][ T5971] Cannot create hsr debugfs directory [ 139.154738][ T5960] hsr_slave_0: entered promiscuous mode [ 139.163512][ T5960] hsr_slave_1: entered promiscuous mode [ 139.170088][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.177877][ T5960] Cannot create hsr debugfs directory [ 139.196649][ T5959] hsr_slave_0: entered promiscuous mode [ 139.203373][ T5959] hsr_slave_1: entered promiscuous mode [ 139.210776][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.218650][ T5959] Cannot create hsr debugfs directory [ 139.254896][ T2417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.349739][ T5970] hsr_slave_0: entered promiscuous mode [ 139.358291][ T5970] hsr_slave_1: entered promiscuous mode [ 139.364574][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.372742][ T5970] Cannot create hsr debugfs directory [ 139.809246][ T2417] bridge_slave_1: left allmulticast mode [ 139.814938][ T2417] bridge_slave_1: left promiscuous mode [ 139.826244][ T2417] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.847149][ T2417] bridge_slave_0: left allmulticast mode [ 139.852923][ T2417] bridge_slave_0: left promiscuous mode [ 139.859142][ T2417] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.235721][ T4609] Bluetooth: hci1: command tx timeout [ 140.235789][ T5925] Bluetooth: hci2: command tx timeout [ 140.317224][ T5925] Bluetooth: hci0: command tx timeout [ 140.401884][ T5925] Bluetooth: hci3: command tx timeout [ 140.478854][ T5925] Bluetooth: hci4: command tx timeout [ 140.586417][ T2417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.602443][ T2417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.614376][ T2417] bond0 (unregistering): Released all slaves [ 141.110914][ T2417] hsr_slave_0: left promiscuous mode [ 141.117916][ T2417] hsr_slave_1: left promiscuous mode [ 141.140614][ T2417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.148196][ T2417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.156760][ T2417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.164313][ T2417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.192112][ T2417] veth1_macvtap: left promiscuous mode [ 141.198426][ T2417] veth0_macvtap: left promiscuous mode [ 141.204903][ T2417] veth1_vlan: left promiscuous mode [ 141.211279][ T2417] veth0_vlan: left promiscuous mode [ 141.912615][ T2417] team0 (unregistering): Port device team_slave_1 removed [ 141.968047][ T2417] team0 (unregistering): Port device team_slave_0 removed [ 142.315754][ T5925] Bluetooth: hci2: command tx timeout [ 142.321247][ T5925] Bluetooth: hci1: command tx timeout [ 142.395807][ T5925] Bluetooth: hci0: command tx timeout [ 142.475741][ T5925] Bluetooth: hci3: command tx timeout [ 142.566771][ T5925] Bluetooth: hci4: command tx timeout [ 143.173239][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.191424][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.208469][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.224878][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.544706][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.598449][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.621342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.628513][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.660517][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.667746][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.769840][ T5970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.803153][ T5970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.824654][ T5970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.849855][ T5970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.913985][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.026149][ T5971] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.054966][ T5971] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.091523][ T5971] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.112270][ T5971] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.282010][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.302270][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.346572][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.362716][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.395807][ T5925] Bluetooth: hci2: command tx timeout [ 144.406274][ T5925] Bluetooth: hci1: command tx timeout [ 144.424714][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.441180][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.476259][ T5925] Bluetooth: hci0: command tx timeout [ 144.556745][ T5925] Bluetooth: hci3: command tx timeout [ 144.612757][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.636474][ T5925] Bluetooth: hci4: command tx timeout [ 144.717014][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.736869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.744052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.764499][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.771833][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.818148][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.875188][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.900587][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.938644][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.964069][ T5960] veth0_vlan: entered promiscuous mode [ 145.044642][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.077538][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.084675][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.134089][ T5960] veth1_vlan: entered promiscuous mode [ 145.164878][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.172191][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.308272][ T5960] veth0_macvtap: entered promiscuous mode [ 145.340055][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.364430][ T5960] veth1_macvtap: entered promiscuous mode [ 145.429142][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.474370][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.518669][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.549228][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.581488][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.618694][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.626021][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.651142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.659108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.741704][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.748953][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.807214][ T5960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.843934][ T5960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.853680][ T5960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.881818][ T5960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.962873][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.970158][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.004875][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.067502][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.211402][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.301813][ T5971] veth0_vlan: entered promiscuous mode [ 146.372495][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.386260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.426763][ T5971] veth1_vlan: entered promiscuous mode [ 146.568113][ T5971] veth0_macvtap: entered promiscuous mode [ 146.617110][ T5971] veth1_macvtap: entered promiscuous mode [ 146.627670][ T2417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.664242][ T2417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/20 03:49:06 executed programs: 10 [ 146.778350][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.792835][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.851167][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.894476][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.896398][ T29] audit: type=1400 audit(1726804146.887:140): avc: denied { bind } for pid=6118 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.915560][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.985237][ T29] audit: type=1400 audit(1726804146.897:141): avc: denied { listen } for pid=6118 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.017005][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.038012][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.050504][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.082688][ T29] audit: type=1400 audit(1726804147.007:142): avc: denied { read } for pid=6123 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1445 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.123334][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.171638][ T29] audit: type=1400 audit(1726804147.007:143): avc: denied { open } for pid=6123 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1445 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.189945][ T5971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.230101][ T29] audit: type=1400 audit(1726804147.007:144): avc: denied { getattr } for pid=6123 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1445 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.235651][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.286054][ T5971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.295059][ T5971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.341590][ T29] audit: type=1400 audit(1726804147.057:145): avc: denied { create } for pid=6103 comm="dhcpcd-run-hook" name="resolv.conf.eth8.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.374064][ T5971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.382178][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.398861][ T29] audit: type=1400 audit(1726804147.057:146): avc: denied { write } for pid=6103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth8.link" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.426420][ T29] audit: type=1400 audit(1726804147.057:147): avc: denied { append } for pid=6103 comm="dhcpcd-run-hook" name="resolv.conf.eth8.link" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.454889][ T29] audit: type=1400 audit(1726804147.307:148): avc: denied { unlink } for pid=6129 comm="rm" name="resolv.conf.eth8.link" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.465302][ T5970] veth0_vlan: entered promiscuous mode [ 147.507403][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.525795][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.582813][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.583066][ T5970] veth1_vlan: entered promiscuous mode [ 147.619357][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.619566][ T5970] veth0_macvtap: entered promiscuous mode [ 147.657946][ T5970] veth1_macvtap: entered promiscuous mode [ 147.683931][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.694913][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.707788][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.718899][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.741558][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.745700][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.822175][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.887991][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.908599][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.921089][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 147.936956][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.948559][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.960414][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.982337][ T5959] veth0_vlan: entered promiscuous mode [ 148.063723][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.074541][ T5959] veth1_vlan: entered promiscuous mode [ 148.146897][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.167927][ T5970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.177608][ T5970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.188595][ T5970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.203799][ T5970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.227479][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.264040][ T5958] veth0_vlan: entered promiscuous mode [ 148.287210][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.379602][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.380032][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.402590][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.427916][ T5959] veth0_macvtap: entered promiscuous mode [ 148.438159][ T5959] veth1_macvtap: entered promiscuous mode [ 148.465032][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.488789][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.507836][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.555860][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.582095][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.600285][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.623467][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.644955][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.694820][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.713298][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.800761][ T5958] veth1_vlan: entered promiscuous mode [ 148.833977][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.857094][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.903072][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.906222][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 148.911306][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.955953][ T5925] Bluetooth: hci2: command tx timeout [ 148.979849][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.031810][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.068356][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.073582][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.150173][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.176513][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.187491][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.246475][ T29] audit: type=1400 audit(1726804149.227:149): avc: denied { mount } for pid=5971 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.332049][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.369346][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.386051][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.394918][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.485604][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.505760][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.531964][ T5958] veth0_macvtap: entered promiscuous mode [ 149.589814][ T5925] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.662670][ T5925] BUG: sleeping function called from invalid context at net/core/sock.c:3613 [ 149.672125][ T5925] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5925, name: kworker/u9:3 [ 149.681809][ T5925] preempt_count: 1, expected: 0 [ 149.686769][ T5925] RCU nest depth: 0, expected: 0 [ 149.691758][ T5925] 6 locks held by kworker/u9:3/5925: [ 149.697176][ T5925] #0: ffff88803055e148 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 149.707961][ T5925] #1: ffffc900038e7d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 149.719677][ T5925] #2: ffff88807faf4078 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x118/0xa10 [ 149.730212][ T5925] #3: ffffffff8ff3dde8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x336/0xa10 [ 149.741379][ T5925] #4: ffff888078ba6420 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x2d1/0xc10 [ 149.751156][ T5925] #5: ffff8880619c9258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3ee/0xc10 [ 149.763371][ T5958] veth1_macvtap: entered promiscuous mode [ 149.763394][ T5925] Preemption disabled at: [ 149.769343][ T5925] [<0000000000000000>] 0x0 [ 149.770083][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 149.773723][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: kworker/u9:3 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0-dirty #0 [ 149.798784][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 149.808886][ T5925] Workqueue: hci4 hci_rx_work [ 149.813642][ T5925] Call Trace: [ 149.817044][ T5925] [ 149.820151][ T5925] dump_stack_lvl+0x16c/0x1f0 [ 149.824919][ T5925] __might_resched+0x3c0/0x5e0 [ 149.829830][ T5925] ? __pfx_lock_release+0x10/0x10 [ 149.834910][ T5925] ? __pfx___might_resched+0x10/0x10 [ 149.840344][ T5925] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.845769][ T5925] lock_sock_nested+0x4b/0xf0 [ 149.850483][ T5925] ? sco_connect_cfm+0x3ee/0xc10 [ 149.855460][ T5925] sco_connect_cfm+0x3ee/0xc10 [ 149.860375][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 149.865722][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 149.871054][ T5925] hci_sync_conn_complete_evt+0x3a1/0xa10 [ 149.876817][ T5925] hci_event_packet+0x9eb/0x1180 [ 149.881795][ T5925] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 149.888260][ T5925] ? __pfx_hci_event_packet+0x10/0x10 [ 149.893800][ T5925] ? mark_held_locks+0x9f/0xe0 [ 149.898632][ T5925] ? kcov_remote_start+0x3cf/0x6e0 [ 149.903805][ T5925] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.909071][ T5925] hci_rx_work+0x2c6/0x1610 [ 149.913649][ T5925] process_one_work+0x9c5/0x1ba0 [ 149.918646][ T5925] ? __pfx_lock_acquire+0x10/0x10 [ 149.923746][ T5925] ? __pfx_process_one_work+0x10/0x10 [ 149.929271][ T5925] ? assign_work+0x1a0/0x250 [ 149.933911][ T5925] worker_thread+0x6c8/0xf00 [ 149.938543][ T5925] ? __kthread_parkme+0x148/0x220 [ 149.943607][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 149.948822][ T5925] kthread+0x2c1/0x3a0 [ 149.953018][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.958284][ T5925] ? __pfx_kthread+0x10/0x10 [ 149.962934][ T5925] ret_from_fork+0x45/0x80 [ 149.967407][ T5925] ? __pfx_kthread+0x10/0x10 [ 149.972036][ T5925] ret_from_fork_asm+0x1a/0x30 [ 149.976869][ T5925] [ 149.980770][ T5925] ================================================================== [ 149.989059][ T5925] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2dfe/0x3ce0 [ 149.996961][ T5925] Read of size 8 at addr ffff8880619c91d8 by task kworker/u9:3/5925 [ 150.004994][ T5925] [ 150.007381][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: kworker/u9:3 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0-dirty #0 [ 150.019936][ T5925] Tainted: [W]=WARN [ 150.023780][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.033895][ T5925] Workqueue: hci4 hci_rx_work [ 150.038912][ T5925] Call Trace: [ 150.042343][ T5925] [ 150.045402][ T5925] dump_stack_lvl+0x116/0x1f0 [ 150.048966][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.050126][ T5925] print_report+0xc3/0x620 [ 150.065098][ T5925] ? __virt_addr_valid+0x5e/0x590 [ 150.070449][ T5925] ? __phys_addr+0xc6/0x150 [ 150.075010][ T5925] kasan_report+0xd9/0x110 [ 150.079509][ T5925] ? __lock_acquire+0x2dfe/0x3ce0 [ 150.084619][ T5925] ? __lock_acquire+0x2dfe/0x3ce0 [ 150.089723][ T5925] __lock_acquire+0x2dfe/0x3ce0 [ 150.094650][ T5925] ? __pfx_mark_lock+0x10/0x10 [ 150.099526][ T5925] ? __pfx___lock_acquire+0x10/0x10 [ 150.104818][ T5925] ? irqentry_exit+0x3b/0x90 [ 150.109474][ T5925] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.114738][ T5925] lock_acquire+0x1b1/0x560 [ 150.119319][ T5925] ? lock_sock_nested+0x5f/0xf0 [ 150.124316][ T5925] ? __pfx_lock_acquire+0x10/0x10 [ 150.129434][ T5925] ? dump_stack_lvl+0x1a3/0x1f0 [ 150.134370][ T5925] ? add_taint+0x5f/0xd0 [ 150.138697][ T5925] ? __might_resched+0x3cc/0x5e0 [ 150.141577][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.143839][ T5925] ? __pfx_lock_release+0x10/0x10 [ 150.158712][ T5925] ? __pfx___might_resched+0x10/0x10 [ 150.164067][ T5925] _raw_spin_lock_bh+0x33/0x40 [ 150.168995][ T5925] ? lock_sock_nested+0x5f/0xf0 [ 150.173936][ T5925] lock_sock_nested+0x5f/0xf0 [ 150.178695][ T5925] ? sco_connect_cfm+0x3ee/0xc10 [ 150.183694][ T5925] sco_connect_cfm+0x3ee/0xc10 [ 150.188534][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 150.193918][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 150.199261][ T5925] hci_sync_conn_complete_evt+0x3a1/0xa10 [ 150.205040][ T5925] hci_event_packet+0x9eb/0x1180 [ 150.210051][ T5925] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 150.216360][ T5925] ? __pfx_hci_event_packet+0x10/0x10 [ 150.221881][ T5925] ? mark_held_locks+0x9f/0xe0 [ 150.226720][ T5925] ? kcov_remote_start+0x3cf/0x6e0 [ 150.232181][ T5925] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.237441][ T5925] hci_rx_work+0x2c6/0x1610 [ 150.242022][ T5925] process_one_work+0x9c5/0x1ba0 [ 150.247035][ T5925] ? __pfx_lock_acquire+0x10/0x10 [ 150.251677][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 150.252116][ T5925] ? __pfx_process_one_work+0x10/0x10 [ 150.266873][ T5925] ? assign_work+0x1a0/0x250 [ 150.271623][ T5925] worker_thread+0x6c8/0xf00 [ 150.271696][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.276238][ T5925] ? __kthread_parkme+0x148/0x220 [ 150.276281][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 150.276312][ T5925] kthread+0x2c1/0x3a0 [ 150.276347][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.276390][ T5925] ? __pfx_kthread+0x10/0x10 [ 150.276430][ T5925] ret_from_fork+0x45/0x80 [ 150.276479][ T5925] ? __pfx_kthread+0x10/0x10 [ 150.276518][ T5925] ret_from_fork_asm+0x1a/0x30 [ 150.276572][ T5925] [ 150.276583][ T5925] [ 150.276590][ T5925] Allocated by task 6201: [ 150.276604][ T5925] kasan_save_stack+0x33/0x60 [ 150.276644][ T5925] kasan_save_track+0x14/0x30 [ 150.276684][ T5925] __kasan_kmalloc+0xaa/0xb0 [ 150.276723][ T5925] __kmalloc_noprof+0x1e8/0x400 [ 150.276767][ T5925] sk_prot_alloc+0x1a8/0x2a0 [ 150.276809][ T5925] sk_alloc+0x36/0xb90 [ 150.276838][ T5925] bt_sock_alloc+0x3b/0x3a0 [ 150.276875][ T5925] sco_sock_create+0xe3/0x3c0 [ 150.276909][ T5925] bt_sock_create+0x182/0x350 [ 150.276945][ T5925] __sock_create+0x32e/0x800 [ 150.276991][ T5925] __sys_socket+0x14f/0x260 [ 150.277035][ T5925] __x64_sys_socket+0x72/0xb0 [ 150.277089][ T5925] do_syscall_64+0xcd/0x250 [ 150.277132][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.277170][ T5925] [ 150.277177][ T5925] Freed by task 6199: [ 150.277190][ T5925] kasan_save_stack+0x33/0x60 [ 150.326539][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.329162][ T5925] kasan_save_track+0x14/0x30 [ 150.331505][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.335819][ T5925] kasan_save_free_info+0x3b/0x60 [ 150.335853][ T5925] __kasan_slab_free+0x51/0x70 [ 150.335894][ T5925] kfree+0x158/0x4b0 [ 150.335927][ T5925] __sk_destruct+0x5eb/0x720 [ 150.335954][ T5925] sk_destruct+0xc2/0xf0 [ 150.335981][ T5925] __sk_free+0xf4/0x3e0 [ 150.336008][ T5925] sk_free+0x6a/0x90 [ 150.336037][ T5925] sco_sock_kill+0x11a/0x1c0 [ 150.415698][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 150.423283][ T5925] sco_sock_release+0x154/0x2d0 [ 150.423332][ T5925] __sock_release+0xb0/0x270 [ 150.445577][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.448321][ T5925] sock_close+0x1c/0x30 [ 150.452223][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.456796][ T5925] __fput+0x3f6/0xb60 [ 150.456834][ T5925] task_work_run+0x14e/0x250 [ 150.526140][ T5925] syscall_exit_to_user_mode+0x27b/0x2a0 [ 150.532023][ T5925] do_syscall_64+0xda/0x250 [ 150.534824][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.536581][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.536630][ T5925] [ 150.536637][ T5925] The buggy address belongs to the object at ffff8880619c9000 [ 150.536637][ T5925] which belongs to the cache kmalloc-2k of size 2048 [ 150.564279][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 150.568985][ T5925] The buggy address is located 472 bytes inside of [ 150.568985][ T5925] freed 2048-byte region [ffff8880619c9000, ffff8880619c9800) [ 150.569021][ T5925] [ 150.569049][ T5925] The buggy address belongs to the physical page: [ 150.600970][ T5925] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x619c8 [ 150.609975][ T5925] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 150.618609][ T5925] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 150.626214][ T5925] page_type: 0xfdffffff(slab) [ 150.630950][ T5925] raw: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 150.639587][ T5925] raw: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 150.648234][ T5925] head: 00fff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 150.657045][ T5925] head: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 150.657471][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.665754][ T5925] head: 00fff00000000003 ffffea0001867201 ffffffffffffffff 0000000000000000 [ 150.665788][ T5925] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 150.665805][ T5925] page dumped because: kasan: bad access detected [ 150.665831][ T5925] page_owner tracks the page as allocated [ 150.665841][ T5925] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5960, tgid 5960 (syz-executor), ts 136643035015, free_ts 136178369977 [ 150.724051][ T5925] post_alloc_hook+0x2d1/0x350 [ 150.728879][ T5925] get_page_from_freelist+0x1351/0x2e50 [ 150.734509][ T5925] __alloc_pages_noprof+0x22b/0x23f0 [ 150.739865][ T5925] alloc_pages_mpol_noprof+0x275/0x610 [ 150.745380][ T5925] new_slab+0x28c/0x3f0 [ 150.749597][ T5925] ___slab_alloc+0xd7d/0x17a0 [ 150.754338][ T5925] __slab_alloc.constprop.0+0x56/0xb0 [ 150.755709][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 150.759831][ T5925] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 150.775404][ T5925] kmalloc_reserve+0xef/0x2c0 [ 150.780157][ T5925] pskb_expand_head+0x243/0x1260 [ 150.785245][ T5925] netlink_trim+0x1ef/0x250 [ 150.789807][ T5925] netlink_broadcast_filtered+0xc7/0xef0 [ 150.795595][ T5925] nlmsg_notify+0x9e/0x220 [ 150.800097][ T5925] rtnetlink_event+0x177/0x1f0 [ 150.804915][ T5925] notifier_call_chain+0xb9/0x410 [ 150.810010][ T5925] call_netdevice_notifiers_info+0xbe/0x140 [ 150.815966][ T5925] page last free pid 5915 tgid 5915 stack trace: [ 150.822336][ T5925] free_unref_folios+0x9e9/0x1390 [ 150.827439][ T5925] folios_put_refs+0x560/0x760 [ 150.832279][ T5925] free_pages_and_swap_cache+0x36d/0x510 [ 150.837980][ T5925] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 150.844017][ T5925] tlb_finish_mmu+0x168/0x7b0 [ 150.848764][ T5925] exit_mmap+0x3d1/0xb20 [ 150.853112][ T5925] __mmput+0x12a/0x480 [ 150.857233][ T5925] mmput+0x62/0x70 [ 150.861002][ T5925] do_exit+0x9bf/0x2bb0 [ 150.865313][ T5925] do_group_exit+0xd3/0x2a0 [ 150.869897][ T5925] get_signal+0x2737/0x28b0 [ 150.874465][ T5925] arch_do_signal_or_restart+0x90/0x7e0 [ 150.880162][ T5925] syscall_exit_to_user_mode+0x150/0x2a0 [ 150.885947][ T5925] do_syscall_64+0xda/0x250 [ 150.890516][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.895695][ T4609] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 150.896442][ T5925] [ 150.896450][ T5925] Memory state around the buggy address: [ 150.913665][ T5925] ffff8880619c9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.921885][ T5925] ffff8880619c9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.929997][ T5925] >ffff8880619c9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.938278][ T5925] ^ [ 150.945255][ T5925] ffff8880619c9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.953378][ T5925] ffff8880619c9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.961511][ T5925] ================================================================== [ 150.969703][ T5925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.977119][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: kworker/u9:3 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0-dirty #0 [ 150.989949][ T5925] Tainted: [W]=WARN [ 150.993787][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 151.003976][ T5925] Workqueue: hci4 hci_rx_work [ 151.008910][ T5925] Call Trace: [ 151.012237][ T5925] [ 151.015219][ T5925] dump_stack_lvl+0x3d/0x1f0 [ 151.019895][ T5925] panic+0x71d/0x800 [ 151.023854][ T5925] ? __pfx_panic+0x10/0x10 [ 151.028353][ T5925] ? rcu_is_watching+0x12/0xc0 [ 151.033179][ T5925] ? __pfx_lock_release+0x10/0x10 [ 151.038286][ T5925] ? check_panic_on_warn+0x1f/0xb0 [ 151.043562][ T5925] check_panic_on_warn+0xab/0xb0 [ 151.048573][ T5925] end_report+0x117/0x180 [ 151.052973][ T5925] kasan_report+0xe9/0x110 [ 151.057460][ T5925] ? __lock_acquire+0x2dfe/0x3ce0 [ 151.062560][ T5925] ? __lock_acquire+0x2dfe/0x3ce0 [ 151.067660][ T5925] __lock_acquire+0x2dfe/0x3ce0 [ 151.072600][ T5925] ? __pfx_mark_lock+0x10/0x10 [ 151.077452][ T5925] ? __pfx___lock_acquire+0x10/0x10 [ 151.082737][ T5925] ? irqentry_exit+0x3b/0x90 [ 151.087389][ T5925] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.092658][ T5925] lock_acquire+0x1b1/0x560 [ 151.097280][ T5925] ? lock_sock_nested+0x5f/0xf0 [ 151.102192][ T5925] ? __pfx_lock_acquire+0x10/0x10 [ 151.107314][ T5925] ? dump_stack_lvl+0x1a3/0x1f0 [ 151.112238][ T5925] ? add_taint+0x5f/0xd0 [ 151.116563][ T5925] ? __might_resched+0x3cc/0x5e0 [ 151.121557][ T5925] ? __pfx_lock_release+0x10/0x10 [ 151.126655][ T5925] ? __pfx___might_resched+0x10/0x10 [ 151.132001][ T5925] _raw_spin_lock_bh+0x33/0x40 [ 151.136918][ T5925] ? lock_sock_nested+0x5f/0xf0 [ 151.141904][ T5925] lock_sock_nested+0x5f/0xf0 [ 151.146622][ T5925] ? sco_connect_cfm+0x3ee/0xc10 [ 151.151697][ T5925] sco_connect_cfm+0x3ee/0xc10 [ 151.156492][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 151.161822][ T5925] ? __pfx_sco_connect_cfm+0x10/0x10 [ 151.167133][ T5925] hci_sync_conn_complete_evt+0x3a1/0xa10 [ 151.172884][ T5925] hci_event_packet+0x9eb/0x1180 [ 151.177856][ T5925] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 151.184124][ T5925] ? __pfx_hci_event_packet+0x10/0x10 [ 151.189563][ T5925] ? mark_held_locks+0x9f/0xe0 [ 151.194390][ T5925] ? kcov_remote_start+0x3cf/0x6e0 [ 151.199638][ T5925] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.204965][ T5925] hci_rx_work+0x2c6/0x1610 [ 151.209509][ T5925] process_one_work+0x9c5/0x1ba0 [ 151.214492][ T5925] ? __pfx_lock_acquire+0x10/0x10 [ 151.219553][ T5925] ? __pfx_process_one_work+0x10/0x10 [ 151.224965][ T5925] ? assign_work+0x1a0/0x250 [ 151.229591][ T5925] worker_thread+0x6c8/0xf00 [ 151.234203][ T5925] ? __kthread_parkme+0x148/0x220 [ 151.239625][ T5925] ? __pfx_worker_thread+0x10/0x10 [ 151.245189][ T5925] kthread+0x2c1/0x3a0 [ 151.249294][ T5925] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.254537][ T5925] ? __pfx_kthread+0x10/0x10 [ 151.259242][ T5925] ret_from_fork+0x45/0x80 [ 151.263724][ T5925] ? __pfx_kthread+0x10/0x10 [ 151.268366][ T5925] ret_from_fork_asm+0x1a/0x30 [ 151.273210][ T5925] [ 151.276656][ T5925] Kernel Offset: disabled [ 151.281093][ T5925] Rebooting in 86400 seconds..