Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. 2024/11/05 10:50:54 ignoring optional flag "sandboxArg"="0" 2024/11/05 10:50:55 parsed 1 programs [ 89.915402][ T29] audit: type=1400 audit(1730803857.117:140): avc: denied { read write } for pid=6460 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 89.941690][ T29] audit: type=1400 audit(1730803857.117:141): avc: denied { open } for pid=6460 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 89.986468][ T29] audit: type=1400 audit(1730803857.187:142): avc: denied { unlink } for pid=6460 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.243978][ T29] audit: type=1400 audit(1730803857.437:143): avc: denied { relabelto } for pid=6465 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.128813][ T6460] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.651573][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.661952][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.669544][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.678264][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.686008][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.693249][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.823281][ T29] audit: type=1400 audit(1730803860.017:144): avc: denied { mount } for pid=6472 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.917604][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.928282][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.154348][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.162816][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.481884][ T29] audit: type=1401 audit(1730803860.677:145): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 94.250728][ T6522] chnl_net:caif_netlink_parms(): no params data found [ 94.321569][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.328999][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.337296][ T6522] bridge_slave_0: entered allmulticast mode [ 94.343772][ T6522] bridge_slave_0: entered promiscuous mode [ 94.351283][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.358653][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.365889][ T6522] bridge_slave_1: entered allmulticast mode [ 94.372686][ T6522] bridge_slave_1: entered promiscuous mode [ 94.398785][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.411035][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.447512][ T6522] team0: Port device team_slave_0 added [ 94.455774][ T6522] team0: Port device team_slave_1 added [ 94.477889][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.485344][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.511302][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.530487][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.537660][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.563614][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.617934][ T6522] hsr_slave_0: entered promiscuous mode [ 94.623898][ T6522] hsr_slave_1: entered promiscuous mode [ 94.738932][ T29] audit: type=1400 audit(1730803861.937:146): avc: denied { getattr } for pid=6545 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.791208][ T29] audit: type=1400 audit(1730803861.987:147): avc: denied { read } for pid=6547 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.818270][ T29] audit: type=1400 audit(1730803861.987:148): avc: denied { open } for pid=6547 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1744 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.902123][ T29] audit: type=1400 audit(1730803862.097:149): avc: denied { create } for pid=6544 comm="dhcpcd-run-hook" name="resolv.conf.lapb13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.950888][ T29] audit: type=1400 audit(1730803862.097:150): avc: denied { write } for pid=6544 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb13.link" dev="tmpfs" ino=2040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.990125][ T29] audit: type=1400 audit(1730803862.097:151): avc: denied { append } for pid=6544 comm="dhcpcd-run-hook" name="resolv.conf.lapb13.link" dev="tmpfs" ino=2040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.014609][ T29] audit: type=1400 audit(1730803862.147:152): avc: denied { unlink } for pid=6555 comm="rm" name="resolv.conf.lapb13.link" dev="tmpfs" ino=2040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.249160][ T6522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.258444][ T6522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.267616][ T6522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.277473][ T6522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.338024][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.356859][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.369086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.376209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.406009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.413117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.470747][ T29] audit: type=1400 audit(1730803862.667:153): avc: denied { sys_module } for pid=6522 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.558826][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.596739][ T6522] veth0_vlan: entered promiscuous mode [ 95.608312][ T6522] veth1_vlan: entered promiscuous mode [ 95.637668][ T6522] veth0_macvtap: entered promiscuous mode [ 95.647558][ T6522] veth1_macvtap: entered promiscuous mode [ 95.665130][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.680171][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.692514][ T6522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.702066][ T6522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.710845][ T6522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.720042][ T6522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/11/05 10:51:03 executed programs: 0 [ 95.906344][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.916328][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.923976][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.932227][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.028684][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.047649][ T6617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.059518][ T6620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.068418][ T6620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.077724][ T6620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.087131][ T6620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.095879][ T6620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.103593][ T6620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.111664][ T6620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.119782][ T6620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.127623][ T6620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.135344][ T6620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.143655][ T6620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.151616][ T6620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.151748][ T6621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.159577][ T6620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.166560][ T6621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.180283][ T6620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.184659][ T6621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.190077][ T6617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.195678][ T6621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.201666][ T6617] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.208870][ T6621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.216168][ T6617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.225901][ T6621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.260702][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.297043][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.366838][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.461070][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.568680][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.771571][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 96.893082][ T6603] chnl_net:caif_netlink_parms(): no params data found [ 96.904729][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 97.039391][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.061966][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.072459][ T6611] bridge_slave_0: entered allmulticast mode [ 97.081579][ T6611] bridge_slave_0: entered promiscuous mode [ 97.132317][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.141002][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.148283][ T6611] bridge_slave_1: entered allmulticast mode [ 97.157816][ T6611] bridge_slave_1: entered promiscuous mode [ 97.227155][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 97.252562][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.260267][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.267983][ T6603] bridge_slave_0: entered allmulticast mode [ 97.275094][ T6603] bridge_slave_0: entered promiscuous mode [ 97.286934][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.335454][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.342563][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.354855][ T6603] bridge_slave_1: entered allmulticast mode [ 97.361742][ T6603] bridge_slave_1: entered promiscuous mode [ 97.375949][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.392883][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 97.494222][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.501411][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.514687][ T6615] bridge_slave_0: entered allmulticast mode [ 97.521521][ T6615] bridge_slave_0: entered promiscuous mode [ 97.554431][ T6603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.567528][ T6611] team0: Port device team_slave_0 added [ 97.574943][ T6603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.600050][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.607416][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.614900][ T6615] bridge_slave_1: entered allmulticast mode [ 97.621331][ T6615] bridge_slave_1: entered promiscuous mode [ 97.630603][ T6611] team0: Port device team_slave_1 added [ 97.689116][ T6603] team0: Port device team_slave_0 added [ 97.712002][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.719902][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.734297][ T6618] bridge_slave_0: entered allmulticast mode [ 97.743097][ T6618] bridge_slave_0: entered promiscuous mode [ 97.754916][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.762012][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.769639][ T6618] bridge_slave_1: entered allmulticast mode [ 97.776525][ T6618] bridge_slave_1: entered promiscuous mode [ 97.792473][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.809976][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.817302][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.844817][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.857851][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.865030][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.891190][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.911328][ T6603] team0: Port device team_slave_1 added [ 97.959897][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.016779][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.028958][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.039575][ T6608] bridge_slave_0: entered allmulticast mode [ 98.047045][ T6608] bridge_slave_0: entered promiscuous mode [ 98.055104][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.062175][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.069922][ T6608] bridge_slave_1: entered allmulticast mode [ 98.083391][ T6608] bridge_slave_1: entered promiscuous mode [ 98.113936][ T6615] team0: Port device team_slave_0 added [ 98.137236][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.150660][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.182947][ T6603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.201940][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.208963][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.240630][ T6603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.270696][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.275533][ T6621] Bluetooth: hci4: command tx timeout [ 98.280029][ T55] Bluetooth: hci2: command tx timeout [ 98.285695][ T6610] Bluetooth: hci0: command tx timeout [ 98.291125][ T5142] Bluetooth: hci1: command tx timeout [ 98.307968][ T6615] team0: Port device team_slave_1 added [ 98.315746][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.341263][ T6611] hsr_slave_0: entered promiscuous mode [ 98.348344][ T6611] hsr_slave_1: entered promiscuous mode [ 98.354278][ T5142] Bluetooth: hci3: command tx timeout [ 98.360838][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.369760][ T6611] Cannot create hsr debugfs directory [ 98.381148][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.447022][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.499588][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.512446][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.543668][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.564026][ T6618] team0: Port device team_slave_0 added [ 98.573092][ T6603] hsr_slave_0: entered promiscuous mode [ 98.581174][ T6603] hsr_slave_1: entered promiscuous mode [ 98.589002][ T6603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.596934][ T6603] Cannot create hsr debugfs directory [ 98.649977][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.662382][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.697737][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.713000][ T6618] team0: Port device team_slave_1 added [ 98.743311][ T6608] team0: Port device team_slave_0 added [ 98.752722][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.760520][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.787128][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.803079][ T6608] team0: Port device team_slave_1 added [ 98.832882][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.840106][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.866931][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.894613][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.901586][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.928298][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.976765][ T6615] hsr_slave_0: entered promiscuous mode [ 98.983077][ T6615] hsr_slave_1: entered promiscuous mode [ 98.995956][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.003531][ T6615] Cannot create hsr debugfs directory [ 99.030023][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.037335][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.063461][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.172586][ T6618] hsr_slave_0: entered promiscuous mode [ 99.178982][ T6618] hsr_slave_1: entered promiscuous mode [ 99.191520][ T6618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.199806][ T6618] Cannot create hsr debugfs directory [ 99.230588][ T6608] hsr_slave_0: entered promiscuous mode [ 99.237749][ T6608] hsr_slave_1: entered promiscuous mode [ 99.243825][ T6608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.257977][ T6608] Cannot create hsr debugfs directory [ 99.545702][ T6611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.561848][ T6611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.598292][ T6611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.616811][ T6611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.725359][ T35] bridge_slave_1: left allmulticast mode [ 99.731046][ T35] bridge_slave_1: left promiscuous mode [ 99.737161][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.748497][ T35] bridge_slave_0: left allmulticast mode [ 99.754472][ T35] bridge_slave_0: left promiscuous mode [ 99.760157][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.016858][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.027345][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.037701][ T35] bond0 (unregistering): Released all slaves [ 100.127895][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.153710][ T35] hsr_slave_0: left promiscuous mode [ 100.165097][ T35] hsr_slave_1: left promiscuous mode [ 100.173719][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.188095][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.201351][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.211176][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.233332][ T35] veth1_macvtap: left promiscuous mode [ 100.245444][ T35] veth0_macvtap: left promiscuous mode [ 100.251034][ T35] veth1_vlan: left promiscuous mode [ 100.260770][ T35] veth0_vlan: left promiscuous mode [ 100.355987][ T5142] Bluetooth: hci4: command tx timeout [ 100.361426][ T5142] Bluetooth: hci0: command tx timeout [ 100.367799][ T55] Bluetooth: hci1: command tx timeout [ 100.373220][ T55] Bluetooth: hci2: command tx timeout [ 100.446779][ T5142] Bluetooth: hci3: command tx timeout [ 100.732176][ T35] team0 (unregistering): Port device team_slave_1 removed [ 100.779364][ T35] team0 (unregistering): Port device team_slave_0 removed [ 101.097427][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.111923][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.119056][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.152096][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.159248][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.430793][ T6603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.458588][ T6603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.496094][ T6603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.593955][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.619181][ T6603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.043804][ T6611] veth0_vlan: entered promiscuous mode [ 102.079458][ T6611] veth1_vlan: entered promiscuous mode [ 102.148747][ T6603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.186793][ T6608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.206680][ T6611] veth0_macvtap: entered promiscuous mode [ 102.225726][ T6603] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.233228][ T6608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.256285][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.263374][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.276206][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.283303][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.305128][ T6611] veth1_macvtap: entered promiscuous mode [ 102.311597][ T6608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.340709][ T6608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.393636][ T6618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.405095][ T6618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.414599][ T6618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.434380][ T55] Bluetooth: hci0: command tx timeout [ 102.434515][ T6610] Bluetooth: hci4: command tx timeout [ 102.439779][ T55] Bluetooth: hci2: command tx timeout [ 102.450803][ T5142] Bluetooth: hci1: command tx timeout [ 102.452812][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.471808][ T6618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.502183][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.514589][ T5142] Bluetooth: hci3: command tx timeout [ 102.523956][ T6611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.533323][ T6611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.548251][ T6611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.557540][ T6611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.651958][ T6615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.662902][ T6615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.676468][ T6615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.700054][ T6615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.749333][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.783132][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.812305][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.827059][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.838996][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.876720][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.889080][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.896179][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.908825][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.915901][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.929875][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.942464][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.956782][ T6608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.967297][ T6608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 2024/11/05 10:51:10 executed programs: 10 [ 103.039405][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.063640][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.070465][ T29] audit: type=1400 audit(1730803870.257:154): avc: denied { append } for pid=6875 comm="syz.2.17" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.108832][ T6603] veth0_vlan: entered promiscuous mode [ 103.125440][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.132547][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.141138][ T29] audit: type=1400 audit(1730803870.257:155): avc: denied { read write } for pid=6875 comm="syz.2.17" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.160474][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.166180][ T29] audit: type=1400 audit(1730803870.257:156): avc: denied { open } for pid=6875 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.199392][ T29] audit: type=1400 audit(1730803870.257:157): avc: denied { ioctl } for pid=6875 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.207092][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.231159][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.241420][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.248823][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.260340][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.267431][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.343227][ T6603] veth1_vlan: entered promiscuous mode [ 103.355049][ T2142] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.396895][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.498824][ T6603] veth0_macvtap: entered promiscuous mode [ 103.519328][ T6608] veth0_vlan: entered promiscuous mode [ 103.528486][ T2142] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 103.548928][ T6603] veth1_macvtap: entered promiscuous mode [ 103.555049][ T2142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.563053][ T2142] usb 3-1: Product: syz [ 103.572005][ T6608] veth1_vlan: entered promiscuous mode [ 103.584517][ T2142] usb 3-1: Manufacturer: syz [ 103.595217][ T2142] usb 3-1: SerialNumber: syz [ 103.618140][ T2142] usb 3-1: config 0 descriptor?? [ 103.632629][ T6603] batadv_check_known_mac_addr: 1 callbacks suppressed [ 103.632645][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.659476][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.673316][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.700734][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.722182][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.741127][ T6603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.760925][ T6603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.782986][ T6603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.801802][ T6603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.848834][ T6608] veth0_macvtap: entered promiscuous mode [ 103.853136][ T6876] card: ffff88807b9a4000, dev: ffff88807b9a43f0, snd_card_file_add [ 103.863420][ T6876] card: ffff88807b9a4000, dev: ffff88807b9a43f0, snd_ctl_open [ 103.872394][ T6608] veth1_macvtap: entered promiscuous mode [ 103.884044][ T6868] usb 3-1: USB disconnect, device number 2 [ 103.900945][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.911551][ T6868] card: ffff88807b9a4000, snd_ctl_dev_disconnect [ 103.945517][ T6868] card: ffff88807b9a4000, dev: ffff88807b9a43f0, kref: 2, snd_card_disconnect [ 103.976192][ T6868] card: ffff88807b9a4000, rl: 0, snd_card_free [ 103.978147][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.984304][ T6868] card: ffff88807b9a4000, kref: 2, snd_card_free_when_closed [ 104.013633][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.028147][ T6608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038829][ T6608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.047978][ T6608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.057016][ T6608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.086800][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.098626][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.109313][ T6875] card: ffff88807b9a4000, snd_card_do_free [ 104.115716][ T6875] card: ffff88807b9a4000, snd_ctl_dev_free [ 104.121595][ T6875] card: ffff88807b9a4000, snd_usx2y_card_private_free [ 104.130201][ T6875] card: ffff88807b9a4000, snd_ctl_release [ 104.146595][ T6875] ================================================================== [ 104.154674][ T6875] BUG: KASAN: slab-use-after-free in kobject_put+0x4ed/0x5a0 [ 104.162066][ T6875] Read of size 1 at addr ffff88807b9a442c by task syz.2.17/6875 [ 104.169701][ T6875] [ 104.172041][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.17 Not tainted 6.12.0-rc6-syzkaller-g2e1b3cc9d7f7-dirty #0 [ 104.182042][ T6618] veth0_vlan: entered promiscuous mode [ 104.182534][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.193569][ T6618] veth1_vlan: entered promiscuous mode [ 104.198004][ T6875] Call Trace: [ 104.198012][ T6875] [ 104.198018][ T6875] dump_stack_lvl+0x116/0x1f0 [ 104.198047][ T6875] print_report+0xc3/0x620 [ 104.218753][ T6875] ? __virt_addr_valid+0x5e/0x590 [ 104.220756][ T6618] veth0_macvtap: entered promiscuous mode [ 104.223892][ T6875] ? __phys_addr+0xc6/0x150 [ 104.232735][ T6618] veth1_macvtap: entered promiscuous mode [ 104.234060][ T6875] kasan_report+0xd9/0x110 [ 104.234085][ T6875] ? kobject_put+0x4ed/0x5a0 [ 104.234106][ T6875] ? kobject_put+0x4ed/0x5a0 [ 104.253374][ T6875] kobject_put+0x4ed/0x5a0 [ 104.257812][ T6875] put_device+0x1f/0x30 [ 104.261981][ T6875] snd_ctl_release+0x3b2/0x480 [ 104.266756][ T6875] ? __pfx_snd_disconnect_release+0x10/0x10 [ 104.272665][ T6875] __fput+0x3f6/0xb60 [ 104.276661][ T6875] task_work_run+0x14e/0x250 [ 104.281262][ T6875] ? __pfx_task_work_run+0x10/0x10 [ 104.286380][ T6875] ? rcu_is_watching+0x12/0xc0 [ 104.291156][ T6875] syscall_exit_to_user_mode+0x27b/0x2a0 [ 104.296804][ T6875] do_syscall_64+0xda/0x250 [ 104.301320][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.307235][ T6875] RIP: 0033:0x7f017e37e719 [ 104.311668][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.318661][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.331265][ T6875] RSP: 002b:00007ffe61637728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 104.331286][ T6875] RAX: 0000000000000000 RBX: 0000000000019275 RCX: 00007f017e37e719 [ 104.331297][ T6875] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 104.331308][ T6875] RBP: 00007f017e537a80 R08: 0000000000000001 R09: 00007ffe61637a1f [ 104.331319][ T6875] R10: 00007f017e200000 R11: 0000000000000246 R12: 00000000000196c6 [ 104.331329][ T6875] R13: 00007ffe61637830 R14: 0000000000000032 R15: ffffffffffffffff [ 104.331347][ T6875] [ 104.331354][ T6875] [ 104.331357][ T6875] Allocated by task 2142: [ 104.331366][ T6875] kasan_save_stack+0x33/0x60 [ 104.331388][ T6875] kasan_save_track+0x14/0x30 [ 104.331406][ T6875] __kasan_kmalloc+0xaa/0xb0 [ 104.331423][ T6875] __kmalloc_noprof+0x1e8/0x400 [ 104.331443][ T6875] snd_card_new+0x74/0x120 [ 104.331459][ T6875] snd_usx2y_probe+0x387/0x9c0 [ 104.331484][ T6875] usb_probe_interface+0x309/0x9d0 [ 104.331503][ T6875] really_probe+0x23e/0xa90 [ 104.331527][ T6875] __driver_probe_device+0x1de/0x440 [ 104.331550][ T6875] driver_probe_device+0x4c/0x1b0 [ 104.331574][ T6875] __device_attach_driver+0x1df/0x310 [ 104.331597][ T6875] bus_for_each_drv+0x157/0x1e0 [ 104.331615][ T6875] __device_attach+0x1e8/0x4b0 [ 104.331637][ T6875] bus_probe_device+0x17f/0x1c0 [ 104.331656][ T6875] device_add+0x114b/0x1a70 [ 104.331673][ T6875] usb_set_configuration+0x10cb/0x1c50 [ 104.331696][ T6875] usb_generic_driver_probe+0xb1/0x110 [ 104.331718][ T6875] usb_probe_device+0xec/0x3e0 [ 104.331741][ T6875] really_probe+0x23e/0xa90 [ 104.331764][ T6875] __driver_probe_device+0x1de/0x440 [ 104.350102][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.355286][ T6875] driver_probe_device+0x4c/0x1b0 [ 104.355317][ T6875] __device_attach_driver+0x1df/0x310 [ 104.355338][ T6875] bus_for_each_drv+0x157/0x1e0 [ 104.355357][ T6875] __device_attach+0x1e8/0x4b0 [ 104.355377][ T6875] bus_probe_device+0x17f/0x1c0 [ 104.355398][ T6875] device_add+0x114b/0x1a70 [ 104.355415][ T6875] usb_new_device+0xd90/0x1a10 [ 104.355439][ T6875] hub_event+0x2d9a/0x4e10 [ 104.355461][ T6875] process_one_work+0x9c5/0x1ba0 [ 104.355479][ T6875] worker_thread+0x6c8/0xf00 [ 104.355495][ T6875] kthread+0x2c1/0x3a0 [ 104.355514][ T6875] ret_from_fork+0x45/0x80 [ 104.355530][ T6875] ret_from_fork_asm+0x1a/0x30 [ 104.355555][ T6875] [ 104.355560][ T6875] Freed by task 6875: [ 104.355569][ T6875] kasan_save_stack+0x33/0x60 [ 104.355587][ T6875] kasan_save_track+0x14/0x30 [ 104.355604][ T6875] kasan_save_free_info+0x3b/0x60 [ 104.355629][ T6875] __kasan_slab_free+0x51/0x70 [ 104.355646][ T6875] kfree+0x14f/0x4b0 [ 104.375466][ T29] audit: type=1400 audit(1730803871.567:158): avc: denied { rename } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.379505][ T6875] release_card_device+0x17f/0x1f0 [ 104.388091][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.390455][ T6875] device_release+0xa1/0x240 [ 104.392991][ T29] audit: type=1400 audit(1730803871.567:159): avc: denied { unlink } for pid=5186 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.397058][ T6875] kobject_put+0x1e4/0x5a0 [ 104.397078][ T6875] put_device+0x1f/0x30 [ 104.397094][ T6875] snd_card_file_remove+0x3a0/0x5b0 [ 104.397118][ T6875] snd_ctl_release+0x390/0x480 [ 104.397135][ T6875] __fput+0x3f6/0xb60 [ 104.397154][ T6875] task_work_run+0x14e/0x250 [ 104.402800][ T29] audit: type=1400 audit(1730803871.567:160): avc: denied { create } for pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.406455][ T6875] syscall_exit_to_user_mode+0x27b/0x2a0 [ 104.406484][ T6875] do_syscall_64+0xda/0x250 [ 104.406499][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.406522][ T6875] [ 104.406526][ T6875] The buggy address belongs to the object at ffff88807b9a4000 [ 104.406526][ T6875] which belongs to the cache kmalloc-4k of size 4096 [ 104.515607][ T5142] Bluetooth: hci4: command tx timeout [ 104.517208][ T6875] The buggy address is located 1068 bytes inside of [ 104.517208][ T6875] freed 4096-byte region [ffff88807b9a4000, ffff88807b9a5000) [ 104.517230][ T6875] [ 104.517235][ T6875] The buggy address belongs to the physical page: [ 104.517254][ T6875] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b9a0 [ 104.522000][ T5142] Bluetooth: hci0: command tx timeout [ 104.526792][ T6875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.526808][ T6875] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.526823][ T6875] page_type: f5(slab) [ 104.526839][ T6875] raw: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 104.526855][ T6875] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 104.526870][ T6875] head: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 104.526886][ T6875] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 104.526903][ T6875] head: 00fff00000000003 ffffea0001ee6801 ffffffffffffffff 0000000000000000 [ 104.838243][ T6875] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 104.846893][ T6875] page dumped because: kasan: bad access detected [ 104.853290][ T6875] page_owner tracks the page as allocated [ 104.858978][ T6875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6887, tgid 6887 (kworker/u8:7), ts 103656163705, free_ts 103633261852 [ 104.879704][ T6875] post_alloc_hook+0x2d1/0x350 [ 104.884450][ T6875] get_page_from_freelist+0xf7d/0x2d10 [ 104.889901][ T6875] __alloc_pages_noprof+0x223/0x25a0 [ 104.895166][ T6875] alloc_pages_mpol_noprof+0x2c9/0x610 [ 104.900611][ T6875] new_slab+0x2c9/0x410 [ 104.904747][ T6875] ___slab_alloc+0xdac/0x1880 [ 104.909399][ T6875] __slab_alloc.constprop.0+0x56/0xb0 [ 104.914748][ T6875] __kmalloc_cache_noprof+0x2b4/0x300 [ 104.920094][ T6875] tomoyo_find_next_domain+0xba0/0x2070 [ 104.925622][ T6875] tomoyo_bprm_check_security+0x12b/0x1d0 [ 104.931320][ T6875] security_bprm_check+0x1b9/0x1e0 [ 104.936411][ T6875] bprm_execve+0x642/0x1960 [ 104.940892][ T6875] kernel_execve+0x2ef/0x3b0 [ 104.945467][ T6875] call_usermodehelper_exec_async+0x255/0x4c0 [ 104.951510][ T6875] ret_from_fork+0x45/0x80 [ 104.955900][ T6875] ret_from_fork_asm+0x1a/0x30 [ 104.960660][ T6875] page last free pid 6618 tgid 6618 stack trace: [ 104.966963][ T6875] free_unref_page+0x5f4/0xdc0 [ 104.971702][ T6875] __put_partials+0x14c/0x170 [ 104.976354][ T6875] qlist_free_all+0x4e/0x120 [ 104.980917][ T6875] kasan_quarantine_reduce+0x192/0x1e0 [ 104.986352][ T6875] __kasan_slab_alloc+0x69/0x90 [ 104.991180][ T6875] kmem_cache_alloc_node_noprof+0x153/0x310 [ 104.997051][ T6875] __alloc_skb+0x2b1/0x380 [ 105.001442][ T6875] netlink_alloc_large_skb+0x69/0x130 [ 105.006812][ T6875] netlink_sendmsg+0x689/0xd70 [ 105.011549][ T6875] __sys_sendto+0x479/0x4d0 [ 105.016034][ T6875] __x64_sys_sendto+0xe0/0x1c0 [ 105.020787][ T6875] do_syscall_64+0xcd/0x250 [ 105.025267][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.031140][ T6875] [ 105.033436][ T6875] Memory state around the buggy address: [ 105.039035][ T6875] ffff88807b9a4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.047075][ T6875] ffff88807b9a4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.055123][ T6875] >ffff88807b9a4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.063157][ T6875] ^ [ 105.068521][ T6875] ffff88807b9a4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.076558][ T6875] ffff88807b9a4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.084603][ T6875] ================================================================== [ 105.094012][ T5142] Bluetooth: hci2: command tx timeout [ 105.099520][ T6610] Bluetooth: hci3: command tx timeout [ 105.106842][ T55] Bluetooth: hci1: command tx timeout [ 105.114245][ T6875] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.121448][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.17 Not tainted 6.12.0-rc6-syzkaller-g2e1b3cc9d7f7-dirty #0 [ 105.131958][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.142015][ T6875] Call Trace: [ 105.145291][ T6875] [ 105.148223][ T6875] dump_stack_lvl+0x3d/0x1f0 [ 105.152823][ T6875] panic+0x71d/0x800 [ 105.156732][ T6875] ? __pfx_panic+0x10/0x10 [ 105.161173][ T6875] ? irqentry_exit+0x3b/0x90 [ 105.165774][ T6875] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.170984][ T6875] ? preempt_schedule_thunk+0x1a/0x30 [ 105.176373][ T6875] ? preempt_schedule_common+0x44/0xc0 [ 105.181848][ T6875] ? check_panic_on_warn+0x1f/0xb0 [ 105.186975][ T6875] check_panic_on_warn+0xab/0xb0 [ 105.191897][ T6875] end_report+0x117/0x180 [ 105.196229][ T6875] kasan_report+0xe9/0x110 [ 105.200654][ T6875] ? kobject_put+0x4ed/0x5a0 [ 105.205253][ T6875] ? kobject_put+0x4ed/0x5a0 [ 105.209856][ T6875] kobject_put+0x4ed/0x5a0 [ 105.214281][ T6875] put_device+0x1f/0x30 [ 105.218433][ T6875] snd_ctl_release+0x3b2/0x480 [ 105.223177][ T6875] ? __pfx_snd_disconnect_release+0x10/0x10 [ 105.229053][ T6875] __fput+0x3f6/0xb60 [ 105.233017][ T6875] task_work_run+0x14e/0x250 [ 105.237594][ T6875] ? __pfx_task_work_run+0x10/0x10 [ 105.242701][ T6875] ? rcu_is_watching+0x12/0xc0 [ 105.247458][ T6875] syscall_exit_to_user_mode+0x27b/0x2a0 [ 105.253113][ T6875] do_syscall_64+0xda/0x250 [ 105.257627][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.263528][ T6875] RIP: 0033:0x7f017e37e719 [ 105.267940][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.287545][ T6875] RSP: 002b:00007ffe61637728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 105.295967][ T6875] RAX: 0000000000000000 RBX: 0000000000019275 RCX: 00007f017e37e719 [ 105.303942][ T6875] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 105.311999][ T6875] RBP: 00007f017e537a80 R08: 0000000000000001 R09: 00007ffe61637a1f [ 105.319963][ T6875] R10: 00007f017e200000 R11: 0000000000000246 R12: 00000000000196c6 [ 105.327942][ T6875] R13: 00007ffe61637830 R14: 0000000000000032 R15: ffffffffffffffff [ 105.335925][ T6875] [ 105.339151][ T6875] Kernel Offset: disabled [ 105.343478][ T6875] Rebooting in 86400 seconds..