[ 84.666754][ T40] audit: type=1400 audit(1769042602.479:116): avc: denied { transition } for pid=6144 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.676396][ T40] audit: type=1400 audit(1769042602.479:117): avc: denied { noatsecure } for pid=6144 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.686476][ T40] audit: type=1400 audit(1769042602.489:118): avc: denied { rlimitinh } for pid=6144 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.694732][ T40] audit: type=1400 audit(1769042602.489:119): avc: denied { siginh } for pid=6144 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:41700' (ED25519) to the list of known hosts. [ 92.242362][ T34] cfg80211: failed to load regulatory.db 2026/01/22 00:43:30 parsed 1 programs [ 92.518128][ T40] audit: type=1400 audit(1769042610.329:120): avc: denied { node_bind } for pid=6194 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 95.326278][ T40] audit: type=1400 audit(1769042613.139:121): avc: denied { read write } for pid=6210 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.337456][ T40] audit: type=1400 audit(1769042613.139:122): avc: denied { open } for pid=6210 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.404394][ T40] audit: type=1400 audit(1769042613.219:123): avc: denied { unlink } for pid=6210 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.913537][ T40] audit: type=1400 audit(1769042613.729:124): avc: denied { relabelto } for pid=6226 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.855538][ T6210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.382273][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.385644][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.477924][ T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.481135][ T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.564692][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.569719][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.577689][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.583985][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.589087][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.385152][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 100.607534][ T40] audit: type=1401 audit(1769042618.419:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 100.643734][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.646310][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.649100][ T6267] bridge_slave_0: entered allmulticast mode [ 100.652989][ T6267] bridge_slave_0: entered promiscuous mode [ 100.665024][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.668733][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.678346][ T6267] bridge_slave_1: entered allmulticast mode [ 100.683033][ T6267] bridge_slave_1: entered promiscuous mode [ 100.767709][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.822840][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.930658][ T6267] team0: Port device team_slave_0 added [ 100.936620][ T6267] team0: Port device team_slave_1 added [ 100.983364][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.985679][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.993810][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.002491][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.005002][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.015920][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.107550][ T6267] hsr_slave_0: entered promiscuous mode [ 101.115131][ T6267] hsr_slave_1: entered promiscuous mode [ 101.586341][ T6267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.591772][ T6267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.596506][ T6267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.602541][ T6267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.675402][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.692144][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.701107][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.704178][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.714554][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.718127][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.793527][ T40] audit: type=1400 audit(1769042619.609:126): avc: denied { sys_module } for pid=6267 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.883850][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.935476][ T6267] veth0_vlan: entered promiscuous mode [ 101.945173][ T6267] veth1_vlan: entered promiscuous mode [ 101.969979][ T6267] veth0_macvtap: entered promiscuous mode [ 101.976621][ T6267] veth1_macvtap: entered promiscuous mode [ 101.991692][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.003270][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.016426][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.020058][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.025748][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.028850][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/22 00:43:39 executed programs: 0 [ 102.170598][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.175643][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.179872][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.184325][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.188132][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.209876][ T6010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.221688][ T5292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.224297][ T6332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.229695][ T6332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.237909][ T6337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.238694][ T6332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.244532][ T6337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.246696][ T6332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.248713][ T6337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.253638][ T6332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.256345][ T6337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.257675][ T6332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.261277][ T6337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.278893][ T6336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.284354][ T6336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.319211][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.459264][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.530273][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.804864][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 102.820180][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 102.828420][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 102.951533][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 103.096945][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.099458][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.102296][ T6326] bridge_slave_0: entered allmulticast mode [ 103.105362][ T6326] bridge_slave_0: entered promiscuous mode [ 103.167625][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.171065][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.174240][ T6326] bridge_slave_1: entered allmulticast mode [ 103.178957][ T6326] bridge_slave_1: entered promiscuous mode [ 103.184385][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.187456][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.190535][ T6331] bridge_slave_0: entered allmulticast mode [ 103.196454][ T6331] bridge_slave_0: entered promiscuous mode [ 103.289909][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.292761][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.295600][ T6331] bridge_slave_1: entered allmulticast mode [ 103.299712][ T6331] bridge_slave_1: entered promiscuous mode [ 103.306065][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.309177][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.313234][ T6330] bridge_slave_0: entered allmulticast mode [ 103.317536][ T6330] bridge_slave_0: entered promiscuous mode [ 103.402865][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.406025][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.409050][ T6330] bridge_slave_1: entered allmulticast mode [ 103.414577][ T6330] bridge_slave_1: entered promiscuous mode [ 103.418288][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.421740][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.424325][ T6335] bridge_slave_0: entered allmulticast mode [ 103.427031][ T6335] bridge_slave_0: entered promiscuous mode [ 103.432616][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.437918][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.441210][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.444248][ T6335] bridge_slave_1: entered allmulticast mode [ 103.447939][ T6335] bridge_slave_1: entered promiscuous mode [ 103.548438][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.584091][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.594816][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.624210][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.630736][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.637984][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.694635][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.777293][ T6326] team0: Port device team_slave_0 added [ 103.798916][ T6331] team0: Port device team_slave_0 added [ 103.806335][ T6330] team0: Port device team_slave_0 added [ 103.811413][ T6326] team0: Port device team_slave_1 added [ 103.844393][ T6331] team0: Port device team_slave_1 added [ 103.848577][ T6330] team0: Port device team_slave_1 added [ 103.878958][ T6335] team0: Port device team_slave_0 added [ 103.954409][ T6335] team0: Port device team_slave_1 added [ 103.966799][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.021157][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.023695][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.033407][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.062888][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.065772][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.076740][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.084930][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.087350][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.098579][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.105261][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.108424][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.119502][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.149365][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.152773][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.162488][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.171469][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.174358][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.184865][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.204681][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.207748][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.218968][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.232181][ T6336] Bluetooth: hci0: command tx timeout [ 104.243566][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.246524][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.257259][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.310933][ T6336] Bluetooth: hci3: command tx timeout [ 104.320981][ T5292] Bluetooth: hci1: command tx timeout [ 104.323139][ T6336] Bluetooth: hci2: command tx timeout [ 104.365634][ T6330] hsr_slave_0: entered promiscuous mode [ 104.368318][ T6330] hsr_slave_1: entered promiscuous mode [ 104.372402][ T6330] debugfs: 'hsr0' already exists in 'hsr' [ 104.375018][ T6330] Cannot create hsr debugfs directory [ 104.409649][ T6331] hsr_slave_0: entered promiscuous mode [ 104.413586][ T6331] hsr_slave_1: entered promiscuous mode [ 104.417267][ T6331] debugfs: 'hsr0' already exists in 'hsr' [ 104.419911][ T6331] Cannot create hsr debugfs directory [ 104.454130][ T6326] hsr_slave_0: entered promiscuous mode [ 104.457846][ T6326] hsr_slave_1: entered promiscuous mode [ 104.460554][ T6326] debugfs: 'hsr0' already exists in 'hsr' [ 104.463219][ T6326] Cannot create hsr debugfs directory [ 104.627018][ T6335] hsr_slave_0: entered promiscuous mode [ 104.630624][ T6335] hsr_slave_1: entered promiscuous mode [ 104.634220][ T6335] debugfs: 'hsr0' already exists in 'hsr' [ 104.636802][ T6335] Cannot create hsr debugfs directory [ 104.728901][ T13] bridge_slave_1: left allmulticast mode [ 104.731407][ T13] bridge_slave_1: left promiscuous mode [ 104.733518][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.738321][ T13] bridge_slave_0: left allmulticast mode [ 104.740172][ T13] bridge_slave_0: left promiscuous mode [ 104.742597][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.963017][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.967399][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.971793][ T13] bond0 (unregistering): Released all slaves [ 105.164955][ T13] hsr_slave_0: left promiscuous mode [ 105.167937][ T13] hsr_slave_1: left promiscuous mode [ 105.170918][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.174041][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.177839][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.181287][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.205600][ T13] veth1_macvtap: left promiscuous mode [ 105.208111][ T13] veth0_macvtap: left promiscuous mode [ 105.210588][ T13] veth1_vlan: left promiscuous mode [ 105.213787][ T13] veth0_vlan: left promiscuous mode [ 105.805603][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.866969][ T13] team0 (unregistering): Port device team_slave_0 removed [ 106.311084][ T6336] Bluetooth: hci0: command tx timeout [ 106.391025][ T6336] Bluetooth: hci2: command tx timeout [ 106.391276][ T5292] Bluetooth: hci1: command tx timeout [ 106.391311][ T6337] Bluetooth: hci3: command tx timeout [ 107.875185][ T6330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.884128][ T6330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.891929][ T6330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.906655][ T6330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.949855][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.957329][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.963793][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.969459][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.050628][ T6331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.057796][ T6331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.065478][ T6331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.088024][ T6331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.147393][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.167198][ T6326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.184017][ T6326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.194450][ T6326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.203010][ T6326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.234349][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.248021][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.251003][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.268914][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.272015][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.333156][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.358714][ T6330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.363804][ T6330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.389103][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.401145][ T5292] Bluetooth: hci0: command tx timeout [ 108.405697][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.408792][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.425306][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.428418][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.442384][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.455575][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.471130][ T6336] Bluetooth: hci1: command tx timeout [ 108.471282][ T6337] Bluetooth: hci2: command tx timeout [ 108.473524][ T5292] Bluetooth: hci3: command tx timeout [ 108.480023][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.498568][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.501222][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.521506][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.536871][ T221] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.539944][ T221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.551951][ T221] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.555038][ T221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.572809][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.575992][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.630421][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.741227][ T6330] veth0_vlan: entered promiscuous mode [ 108.750012][ T6330] veth1_vlan: entered promiscuous mode [ 108.774243][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.807997][ T6330] veth0_macvtap: entered promiscuous mode [ 108.823206][ T6330] veth1_macvtap: entered promiscuous mode [ 108.853835][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.864029][ T6335] veth0_vlan: entered promiscuous mode [ 108.870663][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.884092][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.887949][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.896041][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.899658][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.905550][ T6335] veth1_vlan: entered promiscuous mode [ 108.925564][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.972632][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.020381][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.027955][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.028034][ T6335] veth0_macvtap: entered promiscuous mode [ 109.062015][ T6335] veth1_macvtap: entered promiscuous mode [ 109.092079][ T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.095899][ T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.116379][ T6326] veth0_vlan: entered promiscuous mode [ 109.126584][ T6331] veth0_vlan: entered promiscuous mode [ 109.134155][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.154175][ T6326] veth1_vlan: entered promiscuous mode [ 109.158824][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.163476][ T6331] veth1_vlan: entered promiscuous mode 2026/01/22 00:43:46 executed programs: 8 [ 109.189861][ T221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.204514][ T221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.208491][ T221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.218416][ T221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.227633][ T40] audit: type=1400 audit(1769042627.039:127): avc: denied { create } for pid=6486 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.243622][ T40] audit: type=1400 audit(1769042627.049:128): avc: denied { ioctl } for pid=6486 comm="syz.2.19" path="socket:[14472]" dev="sockfs" ino=14472 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.276336][ T6331] veth0_macvtap: entered promiscuous mode [ 109.288051][ T6331] veth1_macvtap: entered promiscuous mode [ 109.338141][ T6326] veth0_macvtap: entered promiscuous mode [ 109.356671][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.360933][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.366350][ T6326] veth1_macvtap: entered promiscuous mode [ 109.395603][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.458441][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.479048][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.483020][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.490920][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.500027][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.506312][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.512499][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.515755][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.520186][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.534295][ T4446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.537884][ T4446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.566236][ T4446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.569853][ T4446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.699730][ T4446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.705302][ T4446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.754598][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.758019][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.776339][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.779650][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.809054][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.813841][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.483604][ T5292] Bluetooth: hci0: command tx timeout [ 110.551369][ T5292] Bluetooth: hci3: command tx timeout [ 110.551435][ T6337] Bluetooth: hci1: command tx timeout [ 110.554416][ T6336] Bluetooth: hci2: command tx timeout 2026/01/22 00:43:52 executed programs: 407 [ 114.921891][ T7541] ================================================================== [ 114.925375][ T7541] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x2583/0x29b0 [ 114.928562][ T7541] Read of size 4 at addr ffff888039be5330 by task syz.2.500/7541 [ 114.935316][ T7541] [ 114.936430][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 114.936451][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.936463][ T7541] Call Trace: [ 114.936469][ T7541] [ 114.936476][ T7541] dump_stack_lvl+0x116/0x1f0 [ 114.936504][ T7541] print_report+0xcd/0x630 [ 114.936528][ T7541] ? __virt_addr_valid+0x81/0x610 [ 114.936543][ T7541] ? __phys_addr+0xe8/0x180 [ 114.936559][ T7541] ? nr_rt_ioctl+0x2583/0x29b0 [ 114.936578][ T7541] kasan_report+0xe0/0x110 [ 114.936600][ T7541] ? nr_rt_ioctl+0x2583/0x29b0 [ 114.936621][ T7541] nr_rt_ioctl+0x2583/0x29b0 [ 114.936643][ T7541] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 114.936684][ T7541] ? bpf_lsm_capable+0x9/0x10 [ 114.936705][ T7541] ? security_capable+0x7e/0x260 [ 114.936725][ T7541] nr_ioctl+0x19a/0x2d0 [ 114.936740][ T7541] sock_do_ioctl+0x118/0x280 [ 114.936771][ T7541] ? __pfx_sock_do_ioctl+0x10/0x10 [ 114.936797][ T7541] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 114.936816][ T7541] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 114.936844][ T7541] sock_ioctl+0x227/0x6b0 [ 114.936869][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 114.936892][ T7541] ? hook_file_ioctl_common+0x144/0x410 [ 114.936911][ T7541] ? selinux_file_ioctl+0x180/0x270 [ 114.936933][ T7541] ? selinux_file_ioctl+0xb4/0x270 [ 114.936956][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 114.936981][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 114.937000][ T7541] do_syscall_64+0xcd/0xf80 [ 114.937026][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.937043][ T7541] RIP: 0033:0x7f2db038eec9 [ 114.937056][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.937072][ T7541] RSP: 002b:00007f2db127a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.937088][ T7541] RAX: ffffffffffffffda RBX: 00007f2db05e5fa0 RCX: 00007f2db038eec9 [ 114.937099][ T7541] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007 [ 114.937108][ T7541] RBP: 00007f2db0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.937118][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.937127][ T7541] R13: 00007f2db05e6038 R14: 00007f2db05e5fa0 R15: 00007fff78547d48 [ 114.937143][ T7541] [ 114.937149][ T7541] [ 115.032723][ T7541] Allocated by task 7542: [ 115.034436][ T7541] kasan_save_stack+0x33/0x60 [ 115.036249][ T7541] kasan_save_track+0x14/0x30 [ 115.038217][ T7541] __kasan_kmalloc+0xaa/0xb0 [ 115.040149][ T7541] nr_add_node+0xe4e/0x2c00 [ 115.042033][ T7541] nr_rt_ioctl+0x11b7/0x29b0 [ 115.044063][ T7541] nr_ioctl+0x19a/0x2d0 [ 115.045709][ T7541] sock_do_ioctl+0x118/0x280 [ 115.047607][ T7541] sock_ioctl+0x227/0x6b0 [ 115.049502][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 115.051485][ T7541] do_syscall_64+0xcd/0xf80 [ 115.053413][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.055914][ T7541] [ 115.056953][ T7541] Freed by task 7541: [ 115.058771][ T7541] kasan_save_stack+0x33/0x60 [ 115.060922][ T7541] kasan_save_track+0x14/0x30 [ 115.062948][ T7541] kasan_save_free_info+0x3b/0x60 [ 115.065090][ T7541] __kasan_slab_free+0x5f/0x80 [ 115.067053][ T7541] kfree+0x2f8/0x6e0 [ 115.068622][ T7541] nr_rt_ioctl+0xbed/0x29b0 [ 115.070516][ T7541] nr_ioctl+0x19a/0x2d0 [ 115.072264][ T7541] sock_do_ioctl+0x118/0x280 [ 115.074273][ T7541] sock_ioctl+0x227/0x6b0 [ 115.076081][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 115.078078][ T7541] do_syscall_64+0xcd/0xf80 [ 115.079990][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.082555][ T7541] [ 115.083729][ T7541] The buggy address belongs to the object at ffff888039be5300 [ 115.083729][ T7541] which belongs to the cache kmalloc-64 of size 64 [ 115.089530][ T7541] The buggy address is located 48 bytes inside of [ 115.089530][ T7541] freed 64-byte region [ffff888039be5300, ffff888039be5340) [ 115.095033][ T7541] [ 115.096085][ T7541] The buggy address belongs to the physical page: [ 115.098727][ T7541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39be5 [ 115.102332][ T7541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 115.105322][ T7541] page_type: f5(slab) [ 115.107010][ T7541] raw: 00fff00000000000 ffff88801b4428c0 dead000000000100 dead000000000122 [ 115.110410][ T7541] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 115.113913][ T7541] page dumped because: kasan: bad access detected [ 115.116530][ T7541] page_owner tracks the page as allocated [ 115.118955][ T7541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6013, tgid 6013 (syz-executor), ts 71544812768, free_ts 71544108602 [ 115.126482][ T7541] post_alloc_hook+0x1af/0x220 [ 115.128563][ T7541] get_page_from_freelist+0xd0b/0x31a0 [ 115.130883][ T7541] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 115.133248][ T7541] alloc_pages_mpol+0x1fb/0x550 [ 115.135378][ T7541] new_slab+0x2c3/0x430 [ 115.137186][ T7541] ___slab_alloc+0xe18/0x1c90 [ 115.139753][ T7541] __slab_alloc.constprop.0+0x63/0x110 [ 115.142633][ T7541] __kmalloc_noprof+0x4fc/0x910 [ 115.144984][ T7541] tomoyo_encode2+0x100/0x3e0 [ 115.147116][ T7541] tomoyo_encode+0x29/0x50 [ 115.149014][ T7541] tomoyo_realpath_from_path+0x18f/0x6e0 [ 115.151389][ T7541] tomoyo_mount_acl+0x1ae/0x850 [ 115.153484][ T7541] tomoyo_mount_permission+0x16d/0x420 [ 115.155842][ T7541] security_sb_mount+0x9b/0x260 [ 115.157921][ T7541] path_mount+0x158/0x23a0 [ 115.159915][ T7541] __x64_sys_mount+0x293/0x310 [ 115.162056][ T7541] page last free pid 6013 tgid 6013 stack trace: [ 115.165084][ T7541] __free_frozen_pages+0x7df/0x1170 [ 115.168127][ T7541] inode_doinit_with_dentry+0xaca/0x12e0 [ 115.170800][ T7541] sb_finish_set_opts+0x221/0xb80 [ 115.173089][ T7541] selinux_set_mnt_opts+0xc52/0x18c0 [ 115.175359][ T7541] security_sb_set_mnt_opts+0xc0/0x140 [ 115.177655][ T7541] vfs_get_tree+0x17a/0x330 [ 115.179580][ T7541] path_mount+0x7bf/0x23a0 [ 115.181479][ T7541] __x64_sys_mount+0x293/0x310 [ 115.183506][ T7541] do_syscall_64+0xcd/0xf80 [ 115.185524][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.188096][ T7541] [ 115.189167][ T7541] Memory state around the buggy address: [ 115.191613][ T7541] ffff888039be5200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 115.195557][ T7541] ffff888039be5280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 115.199390][ T7541] >ffff888039be5300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 115.202779][ T7541] ^ [ 115.205189][ T7541] ffff888039be5380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 115.208514][ T7541] ffff888039be5400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 115.211741][ T7541] ================================================================== [ 115.215282][ T7541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.218301][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 115.222269][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.227472][ T7541] Call Trace: [ 115.229000][ T7541] [ 115.230299][ T7541] dump_stack_lvl+0x3d/0x1f0 [ 115.232220][ T7541] vpanic+0x640/0x6f0 [ 115.233922][ T7541] panic+0xca/0xd0 [ 115.235447][ T7541] ? __pfx_panic+0x10/0x10 [ 115.237400][ T7541] ? check_panic_on_warn+0x1f/0xb0 [ 115.239505][ T7541] check_panic_on_warn+0xab/0xb0 [ 115.241657][ T7541] end_report+0x107/0x160 [ 115.243517][ T7541] kasan_report+0xee/0x110 [ 115.245509][ T7541] ? nr_rt_ioctl+0x2583/0x29b0 [ 115.247877][ T7541] nr_rt_ioctl+0x2583/0x29b0 [ 115.250056][ T7541] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 115.252342][ T7541] ? bpf_lsm_capable+0x9/0x10 [ 115.254309][ T7541] ? security_capable+0x7e/0x260 [ 115.256396][ T7541] nr_ioctl+0x19a/0x2d0 [ 115.258174][ T7541] sock_do_ioctl+0x118/0x280 [ 115.260140][ T7541] ? __pfx_sock_do_ioctl+0x10/0x10 [ 115.262111][ T7541] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.264293][ T7541] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.267349][ T7541] sock_ioctl+0x227/0x6b0 [ 115.269351][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 115.271378][ T7541] ? hook_file_ioctl_common+0x144/0x410 [ 115.273690][ T7541] ? selinux_file_ioctl+0x180/0x270 [ 115.275888][ T7541] ? selinux_file_ioctl+0xb4/0x270 [ 115.278069][ T7541] ? __pfx_sock_ioctl+0x10/0x10 [ 115.280119][ T7541] __x64_sys_ioctl+0x18e/0x210 [ 115.282136][ T7541] do_syscall_64+0xcd/0xf80 [ 115.284151][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.286734][ T7541] RIP: 0033:0x7f2db038eec9 [ 115.288966][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.297336][ T7541] RSP: 002b:00007f2db127a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.300543][ T7541] RAX: ffffffffffffffda RBX: 00007f2db05e5fa0 RCX: 00007f2db038eec9 [ 115.303597][ T7541] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007 [ 115.307203][ T7541] RBP: 00007f2db0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.310649][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.314401][ T7541] R13: 00007f2db05e6038 R14: 00007f2db05e5fa0 R15: 00007fff78547d48 [ 115.318074][ T7541] [ 115.320384][ T7541] Kernel Offset: disabled [ 115.322276][ T7541] Rebooting in 86400 seconds..