[ 67.360316][ T42] audit: type=1400 audit(1786953733.667:211): avc: denied { transition } for pid=5969 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.369372][ T42] audit: type=1400 audit(1786953733.677:212): avc: denied { noatsecure } for pid=5969 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.377276][ T42] audit: type=1400 audit(1786953733.677:213): avc: denied { rlimitinh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 67.385029][ T42] audit: type=1400 audit(1786953733.677:214): avc: denied { siginh } for pid=5969 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.297881][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303256][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:30968' (ED25519) to the list of known hosts. [ 71.963789][ T42] audit: type=1400 audit(1786953738.267:215): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.024915][ T42] audit: type=1400 audit(1786953738.327:216): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.168976][ T42] audit: type=1400 audit(1786953738.477:217): avc: denied { write } for pid=5994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.221688][ T42] audit: type=1400 audit(1786953738.527:218): avc: denied { write } for pid=5997 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.319520][ T42] audit: type=1400 audit(1786953738.627:219): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.381453][ T42] audit: type=1400 audit(1786953738.687:220): avc: denied { write } for pid=6003 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.447840][ T42] audit: type=1400 audit(1786953738.757:221): avc: denied { write } for pid=6006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.498853][ T42] audit: type=1400 audit(1786953738.807:222): avc: denied { write } for pid=6009 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/08/17 08:02:19 parsed 1 programs 2026/08/17 08:02:19 serving rpc on tcp://35023 [ 75.008965][ T42] audit: type=1400 audit(1786953741.317:223): avc: denied { read write } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.018597][ T42] audit: type=1400 audit(1786953741.317:224): avc: denied { open } for pid=6015 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.090245][ T42] audit: type=1400 audit(1786953741.397:225): avc: denied { unlink } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.374584][ T42] audit: type=1400 audit(1786953741.677:226): avc: denied { relabelto } for pid=6017 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.010964][ T6015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.329364][ T42] audit: type=1401 audit(1786953744.637:227): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 78.872111][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875257][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.888696][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.891866][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.534289][ T42] audit: type=1400 audit(1786953745.837:228): avc: denied { sys_module } for pid=6078 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.953695][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.956207][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.958880][ T6078] bridge_slave_0: entered allmulticast mode [ 79.962503][ T6078] bridge_slave_0: entered promiscuous mode [ 79.973885][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.976895][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.979815][ T6078] bridge_slave_1: entered allmulticast mode [ 79.983357][ T6078] bridge_slave_1: entered promiscuous mode [ 80.004726][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.010496][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.028714][ T6078] team0: Port device team_slave_0 added [ 80.032268][ T6078] team0: Port device team_slave_1 added [ 80.044497][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.046683][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.054595][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.058939][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.061097][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.069056][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.090758][ T6078] hsr_slave_0: entered promiscuous mode [ 80.092957][ T6078] hsr_slave_1: entered promiscuous mode [ 80.191053][ T42] audit: type=1400 audit(1786953746.497:229): avc: denied { write } for pid=6094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.231024][ T42] audit: type=1400 audit(1786953746.537:230): avc: denied { write } for pid=6097 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.298047][ T42] audit: type=1400 audit(1786953746.607:231): avc: denied { write } for pid=6099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.366187][ T42] audit: type=1400 audit(1786953746.667:232): avc: denied { write } for pid=6102 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.441996][ T42] audit: type=1400 audit(1786953746.747:233): avc: denied { write } for pid=6104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.503389][ T42] audit: type=1400 audit(1786953746.807:234): avc: denied { write } for pid=6107 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.579662][ T6078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.583631][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.584966][ T42] audit: type=1400 audit(1786953746.887:235): avc: denied { write } for pid=6109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.586238][ T6078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.600786][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.604826][ T6078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.611858][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.615601][ T6078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.623571][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.644262][ T42] audit: type=1400 audit(1786953746.947:236): avc: denied { write } for pid=6112 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.646559][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.654824][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.657248][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.659472][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.705745][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.720101][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.724327][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.733309][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.743004][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.746128][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.755889][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.758412][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.072332][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.100384][ T6078] veth0_vlan: entered promiscuous mode [ 81.108729][ T6078] veth1_vlan: entered promiscuous mode [ 81.130455][ T6078] veth0_macvtap: entered promiscuous mode [ 81.134624][ T6078] veth1_macvtap: entered promiscuous mode [ 81.149018][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.158941][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.188667][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.192072][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.208292][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.216917][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.264460][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.270474][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.276038][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.279519][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.283394][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.287825][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.359967][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.438539][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.525655][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.529239][ T1350] cfg80211: failed to load regulatory.db 2026/08/17 08:02:28 executed programs: 0 [ 81.889023][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.893133][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.896153][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.901145][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.904628][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.222541][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.224939][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.229311][ T6194] bridge_slave_0: entered allmulticast mode [ 82.232266][ T6194] bridge_slave_0: entered promiscuous mode [ 82.235570][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.238721][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.241038][ T6194] bridge_slave_1: entered allmulticast mode [ 82.243676][ T6194] bridge_slave_1: entered promiscuous mode [ 82.261640][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.266384][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.281068][ T6194] team0: Port device team_slave_0 added [ 82.284235][ T6194] team0: Port device team_slave_1 added [ 82.297284][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.299474][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.307420][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.311743][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.313954][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.321939][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.346362][ T6194] hsr_slave_0: entered promiscuous mode [ 82.348761][ T6194] hsr_slave_1: entered promiscuous mode [ 82.350819][ T6194] debugfs: 'hsr0' already exists in 'hsr' [ 82.352599][ T6194] Cannot create hsr debugfs directory [ 83.857940][ T12] bridge_slave_1: left allmulticast mode [ 83.859791][ T12] bridge_slave_1: left promiscuous mode [ 83.861677][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.865862][ T12] bridge_slave_0: left allmulticast mode [ 83.868127][ T12] bridge_slave_0: left promiscuous mode [ 83.870056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.918256][ T64] Bluetooth: hci0: command tx timeout [ 83.955709][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.960042][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.963625][ T12] bond0 (unregistering): Released all slaves [ 84.049718][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 84.049733][ T42] audit: type=1400 audit(1786953750.357:255): avc: denied { write } for pid=6213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.104632][ T12] hsr_slave_0: left promiscuous mode [ 84.107487][ T12] hsr_slave_1: left promiscuous mode [ 84.110513][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.113169][ T42] audit: type=1400 audit(1786953750.417:256): avc: denied { write } for pid=6216 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.113471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.123882][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.128761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.134855][ T12] veth1_macvtap: left promiscuous mode [ 84.137202][ T12] veth0_macvtap: left promiscuous mode [ 84.139539][ T12] veth1_vlan: left promiscuous mode [ 84.141705][ T12] veth0_vlan: left promiscuous mode [ 84.274793][ T12] team0 (unregistering): Port device team_slave_1 removed [ 84.285477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 84.345000][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.532196][ T42] audit: type=1400 audit(1786953750.837:257): avc: denied { write } for pid=6219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.578966][ T42] audit: type=1400 audit(1786953750.887:258): avc: denied { write } for pid=6222 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.643881][ T42] audit: type=1400 audit(1786953750.947:259): avc: denied { write } for pid=6224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.704590][ T42] audit: type=1400 audit(1786953751.007:260): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.720523][ T6194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.724499][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.728076][ T6194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.735700][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.738608][ T6194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.742480][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.745742][ T6194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.749832][ T6194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.786639][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.795866][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.801830][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.804151][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.812828][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.815609][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.134716][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.164680][ T6194] veth0_vlan: entered promiscuous mode [ 85.186530][ T6194] veth1_vlan: entered promiscuous mode [ 85.210036][ T6194] veth0_macvtap: entered promiscuous mode [ 85.213901][ T6194] veth1_macvtap: entered promiscuous mode [ 85.224382][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.232242][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.267581][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.285859][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.290765][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.297124][ T5919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300806][ T5919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.315635][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.318849][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.326877][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.352579][ T42] audit: type=1400 audit(1786953751.657:261): avc: denied { create } for pid=6245 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.361280][ T42] audit: type=1400 audit(1786953751.657:262): avc: denied { write } for pid=6245 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.369457][ T42] audit: type=1400 audit(1786953751.657:263): avc: denied { nlmsg_write } for pid=6245 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.393795][ T6246] [ 85.394902][ T6246] ============================= [ 85.396457][ T6246] WARNING: suspicious RCU usage [ 85.398487][ T6246] syzkaller #0 Not tainted [ 85.399980][ T6246] ----------------------------- [ 85.401691][ T6246] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 85.404234][ T6246] [ 85.404234][ T6246] other info that might help us debug this: [ 85.404234][ T6246] [ 85.407783][ T6246] [ 85.407783][ T6246] rcu_scheduler_active = 2, debug_locks = 1 [ 85.410430][ T6246] 1 lock held by syz.0.17/6246: [ 85.411958][ T6246] #0: ffff88802c179c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 85.415273][ T6246] [ 85.415273][ T6246] stack backtrace: [ 85.417634][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 85.417655][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.417665][ T6246] Call Trace: [ 85.417672][ T6246] [ 85.417678][ T6246] dump_stack_lvl+0x100/0x190 [ 85.417707][ T6246] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 85.417737][ T6246] xfrm_do_migrate_state+0x2463/0x2f10 [ 85.417767][ T6246] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 85.417791][ T6246] ? __asan_memset+0x23/0x50 [ 85.417812][ T6246] ? __nla_validate_parse+0x1e7/0x28b0 [ 85.417850][ T6246] ? __nla_parse+0x40/0x60 [ 85.417866][ T6246] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 85.417893][ T6246] ? xfrm_user_rcv_msg+0x483/0xd80 [ 85.417912][ T6246] xfrm_user_rcv_msg+0x483/0xd80 [ 85.417937][ T6246] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 85.417959][ T6246] ? kfree_skbmem+0x19f/0x210 [ 85.417978][ T6246] ? consume_skb+0xd6/0x110 [ 85.418026][ T6246] ? rcu_is_watching+0x12/0xc0 [ 85.418054][ T6246] ? trace_contention_end+0x126/0x160 [ 85.418079][ T6246] ? __mutex_lock+0x26d/0x1bd0 [ 85.418109][ T6246] netlink_rcv_skb+0x159/0x420 [ 85.418133][ T6246] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 85.418155][ T6246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.418190][ T6246] xfrm_netlink_rcv+0x71/0x90 [ 85.418209][ T6246] netlink_unicast+0x585/0x850 [ 85.418237][ T6246] ? __pfx_netlink_unicast+0x10/0x10 [ 85.418256][ T6246] ? __pfx_sock_has_perm+0x10/0x10 [ 85.418286][ T6246] netlink_sendmsg+0x8b0/0xda0 [ 85.418310][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.418333][ T6246] ? selinux_socket_sendmsg+0x198/0x2f0 [ 85.418362][ T6246] ____sys_sendmsg+0xa4d/0xbe0 [ 85.418379][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.418401][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.418428][ T6246] ___sys_sendmsg+0x190/0x1e0 [ 85.418448][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.418465][ T6246] ? __lock_acquire+0x49f/0x1a40 [ 85.418514][ T6246] __sys_sendmsg+0x160/0x210 [ 85.418539][ T6246] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.418575][ T6246] do_syscall_64+0x115/0x870 [ 85.418595][ T6246] ? clear_bhb_loop+0x70/0xc0 [ 85.418617][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.418634][ T6246] RIP: 0033:0x7f06f839e019 [ 85.418650][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.418666][ T6246] RSP: 002b:00007f06f930b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.418683][ T6246] RAX: ffffffffffffffda RBX: 00007f06f8625fa0 RCX: 00007f06f839e019 [ 85.418694][ T6246] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 85.418704][ T6246] RBP: 00007f06f843500c R08: 0000000000000000 R09: 0000000000000000 [ 85.418713][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.418722][ T6246] R13: 00007f06f8626038 R14: 00007f06f8625fa0 R15: 00007ffe982272a8 [ 85.418744][ T6246] [ 85.997133][ T64] Bluetooth: hci0: command tx timeout 2026/08/17 08:02:33 executed programs: 72 [ 88.080343][ T64] Bluetooth: hci0: command tx timeout [ 90.156855][ T64] Bluetooth: hci0: command tx timeout 2026/08/17 08:02:38 executed programs: 333