Warning: Permanently added '[localhost]:34293' (ED25519) to the list of known hosts. 2025/05/06 12:22:40 ignoring optional flag "sandboxArg"="0" 2025/05/06 12:22:40 ignoring optional flag "type"="qemu" 2025/05/06 12:22:40 parsed 1 programs [ 65.312864][ T40] audit: type=1400 audit(1746534160.369:132): avc: denied { getattr } for pid=6042 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.320566][ T40] audit: type=1400 audit(1746534160.369:133): avc: denied { read } for pid=6042 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.327396][ T40] audit: type=1400 audit(1746534160.369:134): avc: denied { open } for pid=6042 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.391894][ T40] audit: type=1400 audit(1746534160.449:135): avc: denied { unlink } for pid=6048 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.526946][ T6048] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/05/06 12:22:41 executed programs: 0 [ 66.571305][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.575492][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.588627][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.591144][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.599198][ T6072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.610492][ T6073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.615008][ T6073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.618631][ T6073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.621196][ T6078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.622690][ T6079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.623056][ T6073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.623339][ T6073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.623796][ T6073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.626073][ T6078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.626688][ T6073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.627052][ T6080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.627637][ T6081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.627828][ T6081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.637866][ T40] audit: type=1400 audit(1746534161.689:136): avc: denied { mounton } for pid=6074 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.641437][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.647508][ T6080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.976525][ T6066] chnl_net:caif_netlink_parms(): no params data found [ 66.981261][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 66.989578][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 67.026269][ T6076] chnl_net:caif_netlink_parms(): no params data found [ 67.281998][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.285237][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.290144][ T6067] bridge_slave_0: entered allmulticast mode [ 67.293252][ T6067] bridge_slave_0: entered promiscuous mode [ 67.300616][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.303617][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.306735][ T6066] bridge_slave_0: entered allmulticast mode [ 67.310784][ T6066] bridge_slave_0: entered promiscuous mode [ 67.330693][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.333968][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.336974][ T6067] bridge_slave_1: entered allmulticast mode [ 67.339916][ T6067] bridge_slave_1: entered promiscuous mode [ 67.393591][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.396726][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.400051][ T6066] bridge_slave_1: entered allmulticast mode [ 67.403954][ T6066] bridge_slave_1: entered promiscuous mode [ 67.489976][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.493447][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.496508][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.499936][ T6074] bridge_slave_0: entered allmulticast mode [ 67.503831][ T6074] bridge_slave_0: entered promiscuous mode [ 67.531080][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.534191][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.537365][ T6076] bridge_slave_0: entered allmulticast mode [ 67.540619][ T6076] bridge_slave_0: entered promiscuous mode [ 67.545267][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.548525][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.551052][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.553389][ T6074] bridge_slave_1: entered allmulticast mode [ 67.556108][ T6074] bridge_slave_1: entered promiscuous mode [ 67.560060][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.563807][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.566223][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.568723][ T6076] bridge_slave_1: entered allmulticast mode [ 67.571483][ T6076] bridge_slave_1: entered promiscuous mode [ 67.620454][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.657283][ T6067] team0: Port device team_slave_0 added [ 67.661353][ T6067] team0: Port device team_slave_1 added [ 67.764422][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.771097][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.776566][ T6066] team0: Port device team_slave_0 added [ 67.781525][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.785229][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.788302][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.796837][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.801260][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.803680][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.812968][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.848802][ T6066] team0: Port device team_slave_1 added [ 67.853265][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.881825][ T6074] team0: Port device team_slave_0 added [ 67.934581][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.939202][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.952477][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.989567][ T6076] team0: Port device team_slave_0 added [ 67.994762][ T6074] team0: Port device team_slave_1 added [ 68.013654][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.016633][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.027823][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.064282][ T6076] team0: Port device team_slave_1 added [ 68.156758][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.159832][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.172844][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.212836][ T6067] hsr_slave_0: entered promiscuous mode [ 68.216259][ T6067] hsr_slave_1: entered promiscuous mode [ 68.247257][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.250881][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.261783][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.294356][ T6066] hsr_slave_0: entered promiscuous mode [ 68.296982][ T6066] hsr_slave_1: entered promiscuous mode [ 68.299439][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.302906][ T6066] Cannot create hsr debugfs directory [ 68.306588][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.309118][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.320331][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.360650][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.363703][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.374906][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.524702][ T6076] hsr_slave_0: entered promiscuous mode [ 68.529519][ T6076] hsr_slave_1: entered promiscuous mode [ 68.532443][ T6076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.535958][ T6076] Cannot create hsr debugfs directory [ 68.568017][ T6074] hsr_slave_0: entered promiscuous mode [ 68.570903][ T6074] hsr_slave_1: entered promiscuous mode [ 68.574354][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.580673][ T6074] Cannot create hsr debugfs directory [ 68.668936][ T6072] Bluetooth: hci2: command tx timeout [ 68.670747][ T6080] Bluetooth: hci0: command tx timeout [ 68.671275][ T5287] Bluetooth: hci1: command tx timeout [ 68.748516][ T6080] Bluetooth: hci3: command tx timeout [ 69.010376][ T6066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.051534][ T6066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.058839][ T6066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.065204][ T6066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.177963][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.225022][ T6066] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.233827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.237049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.246567][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.249834][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.442688][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.490743][ T6066] veth0_vlan: entered promiscuous mode [ 69.516253][ T6076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.523521][ T6076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.531428][ T6066] veth1_vlan: entered promiscuous mode [ 69.537871][ T6076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.559727][ T6076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.618210][ T6067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.625616][ T6067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.640744][ T6066] veth0_macvtap: entered promiscuous mode [ 69.645399][ T6067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.653003][ T6066] veth1_macvtap: entered promiscuous mode [ 69.659472][ T6067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.717310][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.741039][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.750942][ T6074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.757957][ T6074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.771779][ T6066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.775615][ T6066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.780515][ T6066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.784557][ T6066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.796667][ T6074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.811014][ T6074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.867556][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.912659][ T213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.915738][ T213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.918950][ T6076] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.933285][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.952709][ T213] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.955303][ T213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.962222][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.965316][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.983720][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.986980][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.999903][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.013133][ T213] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016665][ T213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.023104][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.026233][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.072808][ T40] audit: type=1400 audit(1746534165.129:137): avc: denied { setopt } for pid=6196 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.083288][ T40] audit: type=1400 audit(1746534165.129:138): avc: denied { connect } for pid=6196 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.114396][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.155068][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.189994][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.192952][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.198812][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.202082][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.283052][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.328854][ T6076] veth0_vlan: entered promiscuous mode [ 70.344011][ T6076] veth1_vlan: entered promiscuous mode [ 70.376217][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.401410][ T6076] veth0_macvtap: entered promiscuous mode [ 70.412146][ T6076] veth1_macvtap: entered promiscuous mode [ 70.451492][ T6067] veth0_vlan: entered promiscuous mode [ 70.455051][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.460023][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.465185][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.472251][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.476723][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.481144][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.488930][ T6076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.492533][ T6076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.496143][ T6076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.499426][ T6076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.512270][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.519944][ T6067] veth1_vlan: entered promiscuous mode [ 70.583465][ T6067] veth0_macvtap: entered promiscuous mode [ 70.591202][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.594640][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.605229][ T6067] veth1_macvtap: entered promiscuous mode [ 70.638102][ T6074] veth0_vlan: entered promiscuous mode [ 70.640192][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.643237][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.644701][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.650109][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.653714][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.657102][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.662066][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.668991][ T6074] veth1_vlan: entered promiscuous mode [ 70.676643][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.681830][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.685919][ T6067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.691265][ T6067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.697073][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.713995][ T6067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.721911][ T6067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.725692][ T6067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.730797][ T6067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.748326][ T6072] Bluetooth: hci0: command tx timeout [ 70.750930][ T6072] Bluetooth: hci1: command tx timeout [ 70.757994][ T5287] Bluetooth: hci2: command tx timeout [ 70.775109][ T6074] veth0_macvtap: entered promiscuous mode [ 70.786575][ T6074] veth1_macvtap: entered promiscuous mode [ 70.819147][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.823098][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.827476][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.828173][ T6080] Bluetooth: hci3: command tx timeout [ 70.835203][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.839893][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.844386][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851242][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.865340][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.868905][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.871959][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.875338][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.879056][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.883562][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.889443][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.899478][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.902120][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.903949][ T6074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.907540][ T6074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.911594][ T6074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.915535][ T6074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.941303][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.943997][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.994912][ T213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.997614][ T213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.029570][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.033236][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.312294][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315153][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 2025/05/06 12:22:46 executed programs: 46 [ 72.827902][ T6080] Bluetooth: hci2: command tx timeout [ 72.827971][ T5287] Bluetooth: hci1: command tx timeout [ 72.831866][ T5287] Bluetooth: hci0: command tx timeout [ 72.908125][ T6080] Bluetooth: hci3: command tx timeout [ 74.401099][ T5945] ================================================================== [ 74.404683][ T5945] BUG: KASAN: slab-use-after-free in __mutex_lock+0xa65/0xb90 [ 74.408093][ T5945] Read of size 8 at addr ffff888027983b20 by task kworker/0:3/5945 [ 74.412919][ T5945] [ 74.413951][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: kworker/0:3 Not tainted 6.15.0-rc5-syzkaller-g01f95500a162 #0 PREEMPT(full) [ 74.413973][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.413984][ T5945] Workqueue: events l2cap_chan_timeout [ 74.414010][ T5945] Call Trace: [ 74.414016][ T5945] [ 74.414023][ T5945] dump_stack_lvl+0x116/0x1f0 [ 74.414045][ T5945] print_report+0xc3/0x670 [ 74.414061][ T5945] ? __virt_addr_valid+0x5e/0x590 [ 74.414083][ T5945] ? __phys_addr+0xc6/0x150 [ 74.414104][ T5945] ? __mutex_lock+0xa65/0xb90 [ 74.414124][ T5945] kasan_report+0xe0/0x110 [ 74.414140][ T5945] ? __mutex_lock+0xa65/0xb90 [ 74.414162][ T5945] __mutex_lock+0xa65/0xb90 [ 74.414182][ T5945] ? l2cap_chan_timeout+0x6d/0x310 [ 74.414205][ T5945] ? __pfx___mutex_lock+0x10/0x10 [ 74.414226][ T5945] ? debug_object_deactivate+0x1ec/0x3a0 [ 74.414256][ T5945] ? l2cap_chan_timeout+0x6d/0x310 [ 74.414277][ T5945] l2cap_chan_timeout+0x6d/0x310 [ 74.414299][ T5945] process_one_work+0x9cc/0x1b70 [ 74.414319][ T5945] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 74.414341][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 74.414361][ T5945] ? assign_work+0x1a0/0x250 [ 74.414381][ T5945] worker_thread+0x6c8/0xf10 [ 74.414400][ T5945] ? __kthread_parkme+0x19e/0x250 [ 74.414422][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 74.414438][ T5945] kthread+0x3c2/0x780 [ 74.414453][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414466][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414479][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414493][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414506][ T5945] ? rcu_is_watching+0x12/0xc0 [ 74.414523][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414537][ T5945] ret_from_fork+0x45/0x80 [ 74.414553][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.414566][ T5945] ret_from_fork_asm+0x1a/0x30 [ 74.414594][ T5945] [ 74.414600][ T5945] [ 74.485675][ T5945] Allocated by task 6923: [ 74.487502][ T5945] kasan_save_stack+0x33/0x60 [ 74.489094][ T5945] kasan_save_track+0x14/0x30 [ 74.491148][ T5945] __kasan_kmalloc+0xaa/0xb0 [ 74.493222][ T5945] l2cap_conn_add.part.0+0x60/0xa60 [ 74.495309][ T5945] l2cap_chan_connect+0x15e5/0x2020 [ 74.497184][ T5945] l2cap_sock_connect+0x3b7/0x740 [ 74.498838][ T5945] __sys_connect_file+0x13e/0x1a0 [ 74.500480][ T5945] __sys_connect+0x14d/0x170 [ 74.502019][ T5945] __x64_sys_connect+0x72/0xb0 [ 74.503602][ T5945] do_syscall_64+0xcd/0x260 [ 74.505542][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.507478][ T5945] [ 74.508281][ T5945] Freed by task 6080: [ 74.509630][ T5945] kasan_save_stack+0x33/0x60 [ 74.511231][ T5945] kasan_save_track+0x14/0x30 [ 74.512750][ T5945] kasan_save_free_info+0x3b/0x60 [ 74.514595][ T5945] __kasan_slab_free+0x51/0x70 [ 74.516343][ T5945] kfree+0x2b6/0x4d0 [ 74.517746][ T5945] l2cap_conn_del+0x59c/0x730 [ 74.519295][ T5945] l2cap_connect_cfm+0x9e1/0xf80 [ 74.520934][ T5945] hci_conn_failed+0x1ba/0x330 [ 74.522520][ T5945] hci_abort_conn_sync+0x740/0xb40 [ 74.524235][ T5945] abort_conn_sync+0x197/0x360 [ 74.525870][ T5945] hci_cmd_sync_work+0x1a8/0x430 [ 74.527502][ T5945] process_one_work+0x9cc/0x1b70 [ 74.529154][ T5945] worker_thread+0x6c8/0xf10 [ 74.530701][ T5945] kthread+0x3c2/0x780 [ 74.532053][ T5945] ret_from_fork+0x45/0x80 [ 74.533548][ T5945] ret_from_fork_asm+0x1a/0x30 [ 74.535162][ T5945] [ 74.536001][ T5945] The buggy address belongs to the object at ffff888027983800 [ 74.536001][ T5945] which belongs to the cache kmalloc-1k of size 1024 [ 74.540390][ T5945] The buggy address is located 800 bytes inside of [ 74.540390][ T5945] freed 1024-byte region [ffff888027983800, ffff888027983c00) [ 74.544859][ T5945] [ 74.545723][ T5945] The buggy address belongs to the physical page: [ 74.547803][ T5945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27980 [ 74.550652][ T5945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 74.553454][ T5945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 74.556083][ T5945] page_type: f5(slab) [ 74.557557][ T5945] raw: 00fff00000000040 ffff88801b442dc0 ffffea0000b69200 dead000000000002 [ 74.560814][ T5945] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 74.563564][ T5945] head: 00fff00000000040 ffff88801b442dc0 ffffea0000b69200 dead000000000002 [ 74.566873][ T5945] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 74.570275][ T5945] head: 00fff00000000003 ffffea00009e6001 00000000ffffffff 00000000ffffffff [ 74.573122][ T5945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 74.575960][ T5945] page dumped because: kasan: bad access detected [ 74.578061][ T5945] page_owner tracks the page as allocated [ 74.579924][ T5945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6066, tgid 6066 (syz-executor.1), ts 69187305549, free_ts 69176142527 [ 74.586926][ T5945] post_alloc_hook+0x181/0x1b0 [ 74.588519][ T5945] get_page_from_freelist+0x135c/0x3920 [ 74.590380][ T5945] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 74.592312][ T5945] alloc_pages_mpol+0x1fb/0x550 [ 74.593953][ T5945] new_slab+0x244/0x340 [ 74.595329][ T5945] ___slab_alloc+0xd9c/0x1940 [ 74.596908][ T5945] __slab_alloc.constprop.0+0x56/0xb0 [ 74.598676][ T5945] __kmalloc_node_noprof+0x2ed/0x500 [ 74.600426][ T5945] qdisc_alloc+0xbb/0xc50 [ 74.601864][ T5945] qdisc_create_dflt+0x73/0x430 [ 74.603466][ T5945] dev_activate+0x63f/0x12d0 [ 74.605034][ T5945] __dev_open+0x43a/0x7d0 [ 74.606485][ T5945] __dev_change_flags+0x55d/0x720 [ 74.608135][ T5945] netif_change_flags+0x8d/0x160 [ 74.609793][ T5945] do_setlink.constprop.0+0xddf/0x44b0 [ 74.611604][ T5945] rtnl_newlink+0x1446/0x2000 [ 74.613186][ T5945] page last free pid 6156 tgid 6156 stack trace: [ 74.615332][ T5945] __free_frozen_pages+0x69d/0xff0 [ 74.617052][ T5945] __put_partials+0x16d/0x1c0 [ 74.618611][ T5945] qlist_free_all+0x4e/0x120 [ 74.620154][ T5945] kasan_quarantine_reduce+0x195/0x1e0 [ 74.621950][ T5945] __kasan_slab_alloc+0x69/0x90 [ 74.623703][ T5945] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 74.626067][ T5945] getname_flags.part.0+0x4c/0x550 [ 74.627775][ T5945] getname_flags+0x93/0xf0 [ 74.629439][ T5945] vfs_fstatat+0xe1/0xf0 [ 74.631266][ T5945] __do_sys_newfstatat+0xa1/0x130 [ 74.633369][ T5945] do_syscall_64+0xcd/0x260 [ 74.635265][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.637781][ T5945] [ 74.638622][ T5945] Memory state around the buggy address: [ 74.640886][ T5945] ffff888027983a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.643593][ T5945] ffff888027983a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.646264][ T5945] >ffff888027983b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.648878][ T5945] ^ [ 74.650580][ T5945] ffff888027983b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.653207][ T5945] ffff888027983c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.655862][ T5945] ================================================================== [ 74.659244][ T5945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.662013][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: kworker/0:3 Not tainted 6.15.0-rc5-syzkaller-g01f95500a162 #0 PREEMPT(full) [ 74.665961][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.669465][ T5945] Workqueue: events l2cap_chan_timeout [ 74.671287][ T5945] Call Trace: [ 74.672398][ T5945] [ 74.673404][ T5945] dump_stack_lvl+0x3d/0x1f0 [ 74.674957][ T5945] panic+0x71c/0x800 [ 74.676285][ T5945] ? __pfx_panic+0x10/0x10 [ 74.677777][ T5945] ? mark_held_locks+0x49/0x80 [ 74.679349][ T5945] ? __mutex_lock+0xa65/0xb90 [ 74.680938][ T5945] ? check_panic_on_warn+0x1f/0xb0 [ 74.682619][ T5945] ? __mutex_lock+0xa65/0xb90 [ 74.684199][ T5945] check_panic_on_warn+0xab/0xb0 [ 74.685868][ T5945] end_report+0x107/0x170 [ 74.687288][ T5945] kasan_report+0xee/0x110 [ 74.688757][ T5945] ? __mutex_lock+0xa65/0xb90 [ 74.690360][ T5945] __mutex_lock+0xa65/0xb90 [ 74.691855][ T5945] ? l2cap_chan_timeout+0x6d/0x310 [ 74.693553][ T5945] ? __pfx___mutex_lock+0x10/0x10 [ 74.695257][ T5945] ? debug_object_deactivate+0x1ec/0x3a0 [ 74.697158][ T5945] ? l2cap_chan_timeout+0x6d/0x310 [ 74.698836][ T5945] l2cap_chan_timeout+0x6d/0x310 [ 74.700493][ T5945] process_one_work+0x9cc/0x1b70 [ 74.702135][ T5945] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 74.703974][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 74.705766][ T5945] ? assign_work+0x1a0/0x250 [ 74.707280][ T5945] worker_thread+0x6c8/0xf10 [ 74.708775][ T5945] ? __kthread_parkme+0x19e/0x250 [ 74.710475][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 74.712144][ T5945] kthread+0x3c2/0x780 [ 74.713518][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.715058][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.716647][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.718222][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.719840][ T5945] ? rcu_is_watching+0x12/0xc0 [ 74.721354][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.722882][ T5945] ret_from_fork+0x45/0x80 [ 74.724346][ T5945] ? __pfx_kthread+0x10/0x10 [ 74.725900][ T5945] ret_from_fork_asm+0x1a/0x30 [ 74.727474][ T5945] [ 74.729152][ T5945] Kernel Offset: disabled [ 74.730601][ T5945] Rebooting in 86400 seconds..