[ 84.369015][ T40] audit: type=1400 audit(1775881377.277:117): avc: denied { transition } for pid=6126 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.382142][ T40] audit: type=1400 audit(1775881377.277:118): avc: denied { noatsecure } for pid=6126 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.391517][ T40] audit: type=1400 audit(1775881377.277:119): avc: denied { rlimitinh } for pid=6126 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.399748][ T40] audit: type=1400 audit(1775881377.277:120): avc: denied { siginh } for pid=6126 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.342047][ T39] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:30360' (ED25519) to the list of known hosts. 2026/04/11 04:23:05 parsed 1 programs [ 94.939732][ T40] audit: type=1400 audit(1775881387.847:121): avc: denied { read write } for pid=6178 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.949216][ T40] audit: type=1400 audit(1775881387.847:122): avc: denied { open } for pid=6178 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.981339][ T40] audit: type=1400 audit(1775881387.887:123): avc: denied { unlink } for pid=6178 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.347666][ T40] audit: type=1400 audit(1775881388.247:124): avc: denied { relabelto } for pid=6181 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.021646][ T6178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.719932][ T5288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.723841][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.726721][ T5288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.730134][ T5288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.733169][ T5288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.903379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.907999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.997575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.000306][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.506669][ T6214] chnl_net:caif_netlink_parms(): no params data found [ 98.548414][ T40] audit: type=1401 audit(1775881391.447:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 98.811584][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.814382][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.817286][ T6214] bridge_slave_0: entered allmulticast mode [ 98.822275][ T6214] bridge_slave_0: entered promiscuous mode [ 98.849198][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.852691][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.856072][ T6214] bridge_slave_1: entered allmulticast mode [ 98.860792][ T6214] bridge_slave_1: entered promiscuous mode [ 98.981690][ T6214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.002714][ T6214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.070762][ T6214] team0: Port device team_slave_0 added [ 99.100196][ T6214] team0: Port device team_slave_1 added [ 99.231686][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.234215][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.245523][ T6214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.256478][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.259610][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.270760][ T6214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.442044][ T6214] hsr_slave_0: entered promiscuous mode [ 99.445488][ T6214] hsr_slave_1: entered promiscuous mode [ 99.652235][ T6214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.660797][ T6214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.667773][ T6214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.682853][ T6214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.736958][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.749463][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.755973][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.759686][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.770886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.774614][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.802125][ T6214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.834710][ T40] audit: type=1400 audit(1775881392.737:126): avc: denied { sys_module } for pid=6214 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.996932][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.033814][ T6214] veth0_vlan: entered promiscuous mode [ 100.041254][ T6214] veth1_vlan: entered promiscuous mode [ 100.069381][ T6214] veth0_macvtap: entered promiscuous mode [ 100.081535][ T6214] veth1_macvtap: entered promiscuous mode [ 100.123480][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.135027][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.144355][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.148925][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.153218][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.157743][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/11 04:23:13 executed programs: 0 [ 100.270338][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.274906][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.284622][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.288081][ T6281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.292366][ T6281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.293223][ T6284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.294210][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.295079][ T6286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.295613][ T6286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.302254][ T6284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.305925][ T6286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.308875][ T6284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.313817][ T5288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.317267][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.321061][ T5288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.328890][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.333681][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.337135][ T6286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.345510][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.355282][ T6283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.666847][ T165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.831057][ T165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.856790][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 100.888086][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 100.934553][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 101.177844][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.181890][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.184642][ T6275] bridge_slave_0: entered allmulticast mode [ 101.187408][ T6275] bridge_slave_0: entered promiscuous mode [ 101.190927][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.193600][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.196091][ T6282] bridge_slave_0: entered allmulticast mode [ 101.200695][ T6282] bridge_slave_0: entered promiscuous mode [ 101.204053][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.206517][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.210257][ T6282] bridge_slave_1: entered allmulticast mode [ 101.213269][ T6282] bridge_slave_1: entered promiscuous mode [ 101.260443][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.262905][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.265206][ T6275] bridge_slave_1: entered allmulticast mode [ 101.267908][ T6275] bridge_slave_1: entered promiscuous mode [ 101.314876][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 101.320802][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.323949][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.327428][ T6278] bridge_slave_0: entered allmulticast mode [ 101.335600][ T6278] bridge_slave_0: entered promiscuous mode [ 101.341139][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.344119][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.347303][ T6278] bridge_slave_1: entered allmulticast mode [ 101.351001][ T6278] bridge_slave_1: entered promiscuous mode [ 101.382957][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.390940][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.438463][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.471939][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.486707][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.493749][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.515443][ T6275] team0: Port device team_slave_0 added [ 101.519939][ T6275] team0: Port device team_slave_1 added [ 101.677031][ T6278] team0: Port device team_slave_0 added [ 101.681383][ T6278] team0: Port device team_slave_1 added [ 101.697619][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.700341][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.709376][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.723567][ T6282] team0: Port device team_slave_0 added [ 101.745329][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.747660][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.758494][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.765148][ T6282] team0: Port device team_slave_1 added [ 101.795290][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.800935][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.810746][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.823060][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.825945][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.836902][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.883944][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.887438][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.892216][ T6287] bridge_slave_0: entered allmulticast mode [ 101.896647][ T6287] bridge_slave_0: entered promiscuous mode [ 101.965546][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.969489][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.972833][ T6287] bridge_slave_1: entered allmulticast mode [ 101.977176][ T6287] bridge_slave_1: entered promiscuous mode [ 102.055232][ T165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.065179][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.068566][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.080254][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.087872][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.091206][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.102640][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.128621][ T6275] hsr_slave_0: entered promiscuous mode [ 102.131320][ T6275] hsr_slave_1: entered promiscuous mode [ 102.133538][ T6275] debugfs: 'hsr0' already exists in 'hsr' [ 102.135425][ T6275] Cannot create hsr debugfs directory [ 102.141212][ T6278] hsr_slave_0: entered promiscuous mode [ 102.144716][ T6278] hsr_slave_1: entered promiscuous mode [ 102.148797][ T6278] debugfs: 'hsr0' already exists in 'hsr' [ 102.151479][ T6278] Cannot create hsr debugfs directory [ 102.164315][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.172575][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.318650][ T5978] Bluetooth: hci0: command tx timeout [ 102.361870][ T6282] hsr_slave_0: entered promiscuous mode [ 102.364498][ T6282] hsr_slave_1: entered promiscuous mode [ 102.366760][ T6282] debugfs: 'hsr0' already exists in 'hsr' [ 102.369587][ T6282] Cannot create hsr debugfs directory [ 102.373567][ T6287] team0: Port device team_slave_0 added [ 102.399428][ T5978] Bluetooth: hci3: command tx timeout [ 102.399706][ T6281] Bluetooth: hci2: command tx timeout [ 102.401820][ T5978] Bluetooth: hci1: command tx timeout [ 102.425834][ T6287] team0: Port device team_slave_1 added [ 102.521049][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.524249][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.535783][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.541670][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.544952][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.555138][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.795414][ T6287] hsr_slave_0: entered promiscuous mode [ 102.801438][ T6287] hsr_slave_1: entered promiscuous mode [ 102.804084][ T6287] debugfs: 'hsr0' already exists in 'hsr' [ 102.805977][ T6287] Cannot create hsr debugfs directory [ 102.967638][ T165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.190114][ T6275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.199173][ T6275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.204667][ T6275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.209707][ T6275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.279899][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.296670][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.305420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.308682][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.321063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.324273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.409528][ T165] bridge_slave_1: left allmulticast mode [ 103.412341][ T165] bridge_slave_1: left promiscuous mode [ 103.415470][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.421712][ T165] bridge_slave_0: left allmulticast mode [ 103.424208][ T165] bridge_slave_0: left promiscuous mode [ 103.426839][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.626190][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.633285][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.638893][ T165] bond0 (unregistering): Released all slaves [ 103.819979][ T165] hsr_slave_0: left promiscuous mode [ 103.823127][ T165] hsr_slave_1: left promiscuous mode [ 103.826035][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.829894][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.834687][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.838045][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.847505][ T165] veth1_macvtap: left promiscuous mode [ 103.850784][ T165] veth0_macvtap: left promiscuous mode [ 103.853584][ T165] veth1_vlan: left promiscuous mode [ 103.856282][ T165] veth0_vlan: left promiscuous mode [ 104.072274][ T165] team0 (unregistering): Port device team_slave_1 removed [ 104.081738][ T165] team0 (unregistering): Port device team_slave_0 removed [ 104.176506][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.230776][ T6275] veth0_vlan: entered promiscuous mode [ 104.255272][ T6275] veth1_vlan: entered promiscuous mode [ 104.290087][ T6275] veth0_macvtap: entered promiscuous mode [ 104.297248][ T6275] veth1_macvtap: entered promiscuous mode [ 104.330402][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.355890][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.377070][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.390417][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.399722][ T5978] Bluetooth: hci0: command tx timeout [ 104.404481][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.413571][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.417603][ T6278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.435446][ T6278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.446396][ T6278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.460676][ T6278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.488419][ T5978] Bluetooth: hci2: command tx timeout [ 104.488952][ T6283] Bluetooth: hci3: command tx timeout [ 104.493852][ T6281] Bluetooth: hci1: command tx timeout [ 104.521358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.525170][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.567175][ T6287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.593685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.596701][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.602215][ T6287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.609408][ T6287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.629318][ T6287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.676813][ T40] audit: type=1400 audit(1775881397.577:127): avc: denied { create } for pid=6386 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.695313][ T40] audit: type=1400 audit(1775881397.597:128): avc: denied { ioctl } for pid=6386 comm="syz.0.17" path="socket:[12869]" dev="sockfs" ino=12869 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.764877][ T6282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.777891][ T6282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.792072][ T6282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.802346][ T6282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.863613][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.927193][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.937287][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.940766][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.957450][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.960721][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.984610][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.027330][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.056778][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.059883][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.093617][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.096141][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.136133][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.170090][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.203216][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.206896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.224540][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.227584][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state 2026/04/11 04:23:18 executed programs: 21 [ 105.266153][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.347688][ T6278] veth0_vlan: entered promiscuous mode [ 105.385798][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.405340][ T6278] veth1_vlan: entered promiscuous mode [ 105.464729][ T6287] veth0_vlan: entered promiscuous mode [ 105.476046][ T6278] veth0_macvtap: entered promiscuous mode [ 105.494845][ T6278] veth1_macvtap: entered promiscuous mode [ 105.501986][ T6287] veth1_vlan: entered promiscuous mode [ 105.526488][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.556393][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.585686][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.590342][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.593325][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.606236][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.610267][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.620100][ T6287] veth0_macvtap: entered promiscuous mode [ 105.637398][ T6287] veth1_macvtap: entered promiscuous mode [ 105.666505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.669708][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.688885][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.713318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.714404][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.715932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.731301][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.735178][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.747778][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.756391][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764449][ T6282] veth0_vlan: entered promiscuous mode [ 105.783394][ T6282] veth1_vlan: entered promiscuous mode [ 105.845928][ T6282] veth0_macvtap: entered promiscuous mode [ 105.848382][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.851169][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.857582][ T6282] veth1_macvtap: entered promiscuous mode [ 105.897357][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.905098][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.913315][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.916658][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.950587][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.954500][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.966948][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.976278][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.035629][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.039239][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.096843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.104055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.480269][ T6281] Bluetooth: hci0: command tx timeout [ 106.559067][ T6281] Bluetooth: hci1: command tx timeout [ 106.561323][ T6281] Bluetooth: hci3: command tx timeout [ 106.568512][ T6281] Bluetooth: hci2: command tx timeout [ 108.559876][ T6281] Bluetooth: hci0: command tx timeout [ 108.638772][ T6281] Bluetooth: hci2: command tx timeout [ 108.639061][ T6283] Bluetooth: hci3: command tx timeout [ 108.640942][ T6281] Bluetooth: hci1: command tx timeout 2026/04/11 04:23:23 executed programs: 687 [ 114.722144][ T9321] ================================================================== [ 114.725138][ T9321] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x24ce/0x29e0 [ 114.727682][ T9321] Read of size 4 at addr ffff88803836c230 by task syz.3.1462/9321 [ 114.731577][ T9321] [ 114.732695][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.3.1462 Not tainted syzkaller #0 PREEMPT(full) [ 114.732709][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.732773][ T9321] Call Trace: [ 114.732821][ T9321] [ 114.732826][ T9321] dump_stack_lvl+0x100/0x190 [ 114.732852][ T9321] print_report+0x156/0x4c9 [ 114.732870][ T9321] ? __virt_addr_valid+0x239/0x430 [ 114.732891][ T9321] ? nr_rt_ioctl+0x24ce/0x29e0 [ 114.732906][ T9321] kasan_report+0xdf/0x1e0 [ 114.732919][ T9321] ? nr_rt_ioctl+0x24ce/0x29e0 [ 114.732952][ T9321] nr_rt_ioctl+0x24ce/0x29e0 [ 114.732968][ T9321] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 114.732982][ T9321] ? kasan_quarantine_put+0x104/0x240 [ 114.733001][ T9321] ? bpf_lsm_capable+0x9/0x10 [ 114.733014][ T9321] ? security_capable+0x80/0x260 [ 114.733033][ T9321] nr_ioctl+0x16e/0x2d0 [ 114.733044][ T9321] sock_do_ioctl+0x118/0x280 [ 114.733060][ T9321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 114.733072][ T9321] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 114.733089][ T9321] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 114.733109][ T9321] sock_ioctl+0x599/0x6b0 [ 114.733121][ T9321] ? __pfx_sock_ioctl+0x10/0x10 [ 114.733132][ T9321] ? hook_file_ioctl_common+0x146/0x410 [ 114.733147][ T9321] ? selinux_file_ioctl+0x139/0x290 [ 114.733162][ T9321] ? selinux_file_ioctl+0xb4/0x290 [ 114.733178][ T9321] ? __pfx_sock_ioctl+0x10/0x10 [ 114.733190][ T9321] __x64_sys_ioctl+0x18e/0x210 [ 114.733207][ T9321] do_syscall_64+0x106/0xf80 [ 114.733218][ T9321] ? clear_bhb_loop+0x40/0x90 [ 114.733230][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.733241][ T9321] RIP: 0033:0x7f2942d9a679 [ 114.733251][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.733262][ T9321] RSP: 002b:00007f2943b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.733343][ T9321] RAX: ffffffffffffffda RBX: 00007f2943005fa0 RCX: 00007f2942d9a679 [ 114.733350][ T9321] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 114.733356][ T9321] RBP: 00007f2942e2dee0 R08: 0000000000000000 R09: 0000000000000000 [ 114.733362][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.733368][ T9321] R13: 00007f2943006038 R14: 00007f2943005fa0 R15: 00007ffc373afae8 [ 114.733378][ T9321] [ 114.733381][ T9321] [ 114.809229][ T9321] Allocated by task 9320: [ 114.810611][ T9321] kasan_save_stack+0x30/0x50 [ 114.812185][ T9321] kasan_save_track+0x14/0x30 [ 114.813702][ T9321] __kasan_kmalloc+0xaa/0xb0 [ 114.815190][ T9321] nr_add_node+0xe0e/0x2cb0 [ 114.816701][ T9321] nr_rt_ioctl+0x16a5/0x29e0 [ 114.818335][ T9321] nr_ioctl+0x16e/0x2d0 [ 114.819746][ T9321] sock_do_ioctl+0x118/0x280 [ 114.821298][ T9321] sock_ioctl+0x599/0x6b0 [ 114.822720][ T9321] __x64_sys_ioctl+0x18e/0x210 [ 114.824247][ T9321] do_syscall_64+0x106/0xf80 [ 114.825722][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.827591][ T9321] [ 114.828369][ T9321] Freed by task 9321: [ 114.829641][ T9321] kasan_save_stack+0x30/0x50 [ 114.831132][ T9321] kasan_save_track+0x14/0x30 [ 114.832683][ T9321] kasan_save_free_info+0x3b/0x70 [ 114.834410][ T9321] __kasan_slab_free+0x5f/0x80 [ 114.835998][ T9321] kfree+0x1f6/0x6b0 [ 114.837332][ T9321] nr_rt_ioctl+0x67e/0x29e0 [ 114.838850][ T9321] nr_ioctl+0x16e/0x2d0 [ 114.840239][ T9321] sock_do_ioctl+0x118/0x280 [ 114.841796][ T9321] sock_ioctl+0x599/0x6b0 [ 114.843182][ T9321] __x64_sys_ioctl+0x18e/0x210 [ 114.844726][ T9321] do_syscall_64+0x106/0xf80 [ 114.846210][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.848080][ T9321] [ 114.848858][ T9321] The buggy address belongs to the object at ffff88803836c200 [ 114.848858][ T9321] which belongs to the cache kmalloc-64 of size 64 [ 114.853185][ T9321] The buggy address is located 48 bytes inside of [ 114.853185][ T9321] freed 64-byte region [ffff88803836c200, ffff88803836c240) [ 114.857768][ T9321] [ 114.858589][ T9321] The buggy address belongs to the physical page: [ 114.860590][ T9321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3836c [ 114.863369][ T9321] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 114.865597][ T9321] page_type: f5(slab) [ 114.866868][ T9321] raw: 00fff00000000000 ffff88801b8428c0 dead000000000100 dead000000000122 [ 114.869640][ T9321] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 114.872494][ T9321] page dumped because: kasan: bad access detected [ 114.874617][ T9321] page_owner tracks the page as allocated [ 114.876420][ T9321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 28445381605, free_ts 28038673384 [ 114.882545][ T9321] post_alloc_hook+0x153/0x170 [ 114.884230][ T9321] get_page_from_freelist+0x111d/0x3140 [ 114.886108][ T9321] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 114.888070][ T9321] new_slab+0xa6/0x6b0 [ 114.889372][ T9321] refill_objects+0x26b/0x400 [ 114.890864][ T9321] __pcs_replace_empty_main+0x1ab/0x660 [ 114.892647][ T9321] __kmalloc_noprof+0x688/0x850 [ 114.894208][ T9321] str_read+0x57/0x200 [ 114.895521][ T9321] type_read+0x331/0x4d0 [ 114.896875][ T9321] policydb_read+0x7af/0x3ab0 [ 114.898391][ T9321] security_load_policy+0x15c/0x1080 [ 114.900059][ T9321] sel_write_load+0x2ab/0x560 [ 114.901604][ T9321] vfs_write+0x2aa/0x1070 [ 114.903162][ T9321] ksys_write+0x12a/0x250 [ 114.904646][ T9321] do_syscall_64+0x106/0xf80 [ 114.906259][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.908190][ T9321] page last free pid 1 tgid 1 stack trace: [ 114.910043][ T9321] __free_frozen_pages+0x7e1/0x10d0 [ 114.911676][ T9321] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 114.913538][ T9321] __apply_to_page_range+0xb1d/0x1520 [ 114.915235][ T9321] __kasan_release_vmalloc+0xd7/0xe0 [ 114.916906][ T9321] purge_vmap_node+0x210/0xb40 [ 114.918448][ T9321] __purge_vmap_area_lazy+0x935/0xc20 [ 114.920131][ T9321] _vm_unmap_aliases+0x40e/0x630 [ 114.921712][ T9321] change_page_attr_set_clr+0x252/0x4a0 [ 114.923525][ T9321] set_memory_nx+0xb5/0x110 [ 114.925108][ T9321] free_init_pages+0x79/0xe0 [ 114.926725][ T9321] free_kernel_image_pages+0x24/0x50 [ 114.928675][ T9321] kernel_init+0x33/0x1e0 [ 114.930160][ T9321] ret_from_fork+0x754/0xd80 [ 114.932007][ T9321] ret_from_fork_asm+0x1a/0x30 [ 114.933975][ T9321] [ 114.934969][ T9321] Memory state around the buggy address: [ 114.937263][ T9321] ffff88803836c100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 114.940457][ T9321] ffff88803836c180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 114.943722][ T9321] >ffff88803836c200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 114.947020][ T9321] ^ [ 114.949357][ T9321] ffff88803836c280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 114.952666][ T9321] ffff88803836c300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 114.955875][ T9321] ================================================================== [ 114.959203][ T9321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.962235][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.3.1462 Not tainted syzkaller #0 PREEMPT(full) [ 114.966258][ T9321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.970328][ T9321] Call Trace: [ 114.971708][ T9321] [ 114.973000][ T9321] dump_stack_lvl+0x100/0x190 [ 114.975110][ T9321] vpanic+0x552/0x970 [ 114.976938][ T9321] ? __pfx_vpanic+0x10/0x10 [ 114.978884][ T9321] ? mark_held_locks+0x40/0x70 [ 114.980843][ T9321] ? nr_rt_ioctl+0x24ce/0x29e0 [ 114.982833][ T9321] panic+0xd1/0xe0 [ 114.984403][ T9321] ? __pfx_panic+0x10/0x10 [ 114.986282][ T9321] ? check_panic_on_warn+0x1f/0x90 [ 114.988474][ T9321] check_panic_on_warn.cold+0x19/0x34 [ 114.990730][ T9321] end_report.part.0+0x3a/0x90 [ 114.992717][ T9321] kasan_report.cold+0xe/0x18 [ 114.994731][ T9321] ? nr_rt_ioctl+0x24ce/0x29e0 [ 114.996871][ T9321] nr_rt_ioctl+0x24ce/0x29e0 [ 114.998992][ T9321] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 115.001036][ T9321] ? kasan_quarantine_put+0x104/0x240 [ 115.003240][ T9321] ? bpf_lsm_capable+0x9/0x10 [ 115.005197][ T9321] ? security_capable+0x80/0x260 [ 115.007335][ T9321] nr_ioctl+0x16e/0x2d0 [ 115.009163][ T9321] sock_do_ioctl+0x118/0x280 [ 115.011149][ T9321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 115.013268][ T9321] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.015310][ T9321] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 115.018162][ T9321] sock_ioctl+0x599/0x6b0 [ 115.019948][ T9321] ? __pfx_sock_ioctl+0x10/0x10 [ 115.021985][ T9321] ? hook_file_ioctl_common+0x146/0x410 [ 115.024373][ T9321] ? selinux_file_ioctl+0x139/0x290 [ 115.026602][ T9321] ? selinux_file_ioctl+0xb4/0x290 [ 115.028712][ T9321] ? __pfx_sock_ioctl+0x10/0x10 [ 115.030716][ T9321] __x64_sys_ioctl+0x18e/0x210 [ 115.032737][ T9321] do_syscall_64+0x106/0xf80 [ 115.034723][ T9321] ? clear_bhb_loop+0x40/0x90 [ 115.036781][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.039293][ T9321] RIP: 0033:0x7f2942d9a679 [ 115.041125][ T9321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.048987][ T9321] RSP: 002b:00007f2943b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.052596][ T9321] RAX: ffffffffffffffda RBX: 00007f2943005fa0 RCX: 00007f2942d9a679 [ 115.055790][ T9321] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 115.058984][ T9321] RBP: 00007f2942e2dee0 R08: 0000000000000000 R09: 0000000000000000 [ 115.062304][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.065749][ T9321] R13: 00007f2943006038 R14: 00007f2943005fa0 R15: 00007ffc373afae8 [ 115.068938][ T9321] [ 115.070899][ T9321] Kernel Offset: disabled [ 115.072696][ T9321] Rebooting in 86400 seconds..