[ 80.185772][ T40] audit: type=1400 audit(1775880409.057:117): avc: denied { transition } for pid=6137 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.196508][ T40] audit: type=1400 audit(1775880409.057:118): avc: denied { noatsecure } for pid=6137 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.205310][ T40] audit: type=1400 audit(1775880409.057:119): avc: denied { rlimitinh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.213311][ T40] audit: type=1400 audit(1775880409.057:120): avc: denied { siginh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:6403' (ED25519) to the list of known hosts. 2026/04/11 04:06:56 parsed 1 programs [ 88.247547][ T9] cfg80211: failed to load regulatory.db [ 90.187811][ T40] audit: type=1400 audit(1775880419.057:121): avc: denied { read write } for pid=6214 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.199779][ T40] audit: type=1400 audit(1775880419.057:122): avc: denied { open } for pid=6214 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.227811][ T40] audit: type=1400 audit(1775880419.097:123): avc: denied { unlink } for pid=6214 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.552829][ T40] audit: type=1400 audit(1775880419.417:124): avc: denied { relabelto } for pid=6217 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 91.320872][ T6214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.239429][ T5288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.243250][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.249881][ T5288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.252541][ T5288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.255216][ T5288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.425113][ T40] audit: type=1401 audit(1775880422.287:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 93.589351][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.593175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.673432][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.683223][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.127543][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 94.350758][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.354172][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.365977][ T6263] bridge_slave_0: entered allmulticast mode [ 94.370999][ T6263] bridge_slave_0: entered promiscuous mode [ 94.376457][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.380335][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.383463][ T6263] bridge_slave_1: entered allmulticast mode [ 94.388015][ T6263] bridge_slave_1: entered promiscuous mode [ 94.444871][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.457293][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.522470][ T6263] team0: Port device team_slave_0 added [ 94.530035][ T6263] team0: Port device team_slave_1 added [ 94.565369][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.568438][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.579770][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.586699][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.589556][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.601217][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.663452][ T6263] hsr_slave_0: entered promiscuous mode [ 94.667604][ T6263] hsr_slave_1: entered promiscuous mode [ 94.853107][ T6263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.861653][ T6263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.868043][ T6263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.874782][ T6263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.946476][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.964845][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.976884][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.979614][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.987029][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.989490][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.064693][ T40] audit: type=1400 audit(1775880423.927:126): avc: denied { sys_module } for pid=6263 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.252559][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.276305][ T6263] veth0_vlan: entered promiscuous mode [ 95.281303][ T6263] veth1_vlan: entered promiscuous mode [ 95.310280][ T6263] veth0_macvtap: entered promiscuous mode [ 95.314729][ T6263] veth1_macvtap: entered promiscuous mode [ 95.327873][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.349934][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.365811][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369996][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376678][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380753][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/11 04:07:04 executed programs: 0 [ 95.479506][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.483586][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.487990][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.492709][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.499798][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.513162][ T5969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.523298][ T5969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.538747][ T5969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.542419][ T5969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.547038][ T5969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.600899][ T5969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.606828][ T5969] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.615620][ T5288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.619296][ T5288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.622545][ T5288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.625349][ T5288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.629530][ T5288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.632287][ T5288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.634911][ T5288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.653298][ T5288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.918402][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 95.944831][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 96.061661][ T6318] chnl_net:caif_netlink_parms(): no params data found [ 96.123026][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.128116][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.131457][ T6324] bridge_slave_0: entered allmulticast mode [ 96.135429][ T6324] bridge_slave_0: entered promiscuous mode [ 96.159674][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.162415][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.165479][ T6315] bridge_slave_0: entered allmulticast mode [ 96.168302][ T6315] bridge_slave_0: entered promiscuous mode [ 96.172432][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.175311][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.177839][ T6315] bridge_slave_1: entered allmulticast mode [ 96.180552][ T6315] bridge_slave_1: entered promiscuous mode [ 96.203804][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.207943][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.210469][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.213641][ T6324] bridge_slave_1: entered allmulticast mode [ 96.217538][ T6324] bridge_slave_1: entered promiscuous mode [ 96.250870][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 96.262141][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.293930][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.335095][ T6315] team0: Port device team_slave_0 added [ 96.357102][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.374965][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.393493][ T6315] team0: Port device team_slave_1 added [ 96.422400][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.424975][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.427949][ T6318] bridge_slave_0: entered allmulticast mode [ 96.431146][ T6318] bridge_slave_0: entered promiscuous mode [ 96.454837][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.457957][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.461534][ T6318] bridge_slave_1: entered allmulticast mode [ 96.466149][ T6318] bridge_slave_1: entered promiscuous mode [ 96.483960][ T6324] team0: Port device team_slave_0 added [ 96.490000][ T6324] team0: Port device team_slave_1 added [ 96.516823][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.520302][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.531900][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.568100][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.570436][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.579920][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.586101][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.589168][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.602014][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.618441][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.621750][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.625493][ T6322] bridge_slave_0: entered allmulticast mode [ 96.628725][ T6322] bridge_slave_0: entered promiscuous mode [ 96.636394][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.638727][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.648535][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.662627][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.667107][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.670812][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.674070][ T6322] bridge_slave_1: entered allmulticast mode [ 96.677638][ T6322] bridge_slave_1: entered promiscuous mode [ 96.703116][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.731765][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.737653][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.750594][ T6315] hsr_slave_0: entered promiscuous mode [ 96.753517][ T6315] hsr_slave_1: entered promiscuous mode [ 96.757026][ T6315] debugfs: 'hsr0' already exists in 'hsr' [ 96.759363][ T6315] Cannot create hsr debugfs directory [ 96.762675][ T6318] team0: Port device team_slave_0 added [ 96.788318][ T6318] team0: Port device team_slave_1 added [ 96.805057][ T6322] team0: Port device team_slave_0 added [ 96.810830][ T6324] hsr_slave_0: entered promiscuous mode [ 96.813369][ T6324] hsr_slave_1: entered promiscuous mode [ 96.815808][ T6324] debugfs: 'hsr0' already exists in 'hsr' [ 96.817760][ T6324] Cannot create hsr debugfs directory [ 96.835246][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.837588][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.847386][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.852742][ T6322] team0: Port device team_slave_1 added [ 96.868945][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.871965][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.883509][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.932074][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.934449][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.944591][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.951267][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.954407][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.965609][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.056851][ T6318] hsr_slave_0: entered promiscuous mode [ 97.060163][ T6318] hsr_slave_1: entered promiscuous mode [ 97.063557][ T6318] debugfs: 'hsr0' already exists in 'hsr' [ 97.066910][ T6318] Cannot create hsr debugfs directory [ 97.112822][ T6322] hsr_slave_0: entered promiscuous mode [ 97.115368][ T6322] hsr_slave_1: entered promiscuous mode [ 97.117675][ T6322] debugfs: 'hsr0' already exists in 'hsr' [ 97.119485][ T6322] Cannot create hsr debugfs directory [ 97.536114][ T63] Bluetooth: hci0: command tx timeout [ 97.608961][ T63] Bluetooth: hci1: command tx timeout [ 97.653240][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.686041][ T63] Bluetooth: hci3: command tx timeout [ 97.688325][ T5288] Bluetooth: hci2: command tx timeout [ 97.742099][ T6315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.747186][ T6315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.752763][ T6315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.761641][ T6315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.830556][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.846599][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.876454][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.879959][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.892731][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.895633][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.061039][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.084418][ T6315] veth0_vlan: entered promiscuous mode [ 98.107354][ T6315] veth1_vlan: entered promiscuous mode [ 98.122440][ T6315] veth0_macvtap: entered promiscuous mode [ 98.126725][ T6315] veth1_macvtap: entered promiscuous mode [ 98.137177][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.143510][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.154797][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.160546][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.173026][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.178127][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.216269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219469][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.258383][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.260933][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.298612][ T6318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.301105][ T40] audit: type=1400 audit(1775880427.167:127): avc: denied { create } for pid=6397 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.311166][ T40] audit: type=1400 audit(1775880427.167:128): avc: denied { create } for pid=6397 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.313436][ T6318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.325638][ T40] audit: type=1400 audit(1775880427.197:129): avc: denied { ioctl } for pid=6397 comm="syz.0.17" path="socket:[14659]" dev="sockfs" ino=14659 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.345407][ T6318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.357405][ T6318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.434509][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.447979][ T6318] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.460282][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.463390][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.474464][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.477684][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.505253][ T6318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.508584][ T6318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.643755][ T6318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.679560][ T6318] veth0_vlan: entered promiscuous mode [ 98.689204][ T6318] veth1_vlan: entered promiscuous mode [ 98.722981][ T6318] veth0_macvtap: entered promiscuous mode [ 98.729666][ T6318] veth1_macvtap: entered promiscuous mode [ 98.743025][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.753808][ T6318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.764825][ T216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.776297][ T216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.782453][ T216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.787869][ T216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.840045][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.842620][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.873673][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.877023][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.159734][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.239748][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.488199][ T46] bridge_slave_1: left allmulticast mode [ 99.490577][ T46] bridge_slave_1: left promiscuous mode [ 99.493049][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.504218][ T46] bridge_slave_0: left allmulticast mode [ 99.515424][ T46] bridge_slave_0: left promiscuous mode [ 99.517630][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.607983][ T5288] Bluetooth: hci0: command tx timeout [ 99.685514][ T5288] Bluetooth: hci1: command tx timeout [ 99.702910][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.709372][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.714495][ T46] bond0 (unregistering): Released all slaves [ 99.765951][ T5288] Bluetooth: hci3: command tx timeout [ 99.765979][ T63] Bluetooth: hci2: command tx timeout [ 99.939787][ T46] hsr_slave_0: left promiscuous mode [ 99.947299][ T46] hsr_slave_1: left promiscuous mode [ 99.949440][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.951823][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.961353][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.963991][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.986763][ T46] veth1_macvtap: left promiscuous mode [ 99.989024][ T46] veth0_macvtap: left promiscuous mode [ 99.991313][ T46] veth1_vlan: left promiscuous mode [ 99.993178][ T46] veth0_vlan: left promiscuous mode [ 100.180882][ T46] team0 (unregistering): Port device team_slave_1 removed [ 100.194198][ T46] team0 (unregistering): Port device team_slave_0 removed 2026/04/11 04:07:09 executed programs: 88 [ 100.500555][ T6322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.518499][ T6322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.525996][ T6322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.547284][ T6322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.699529][ T6324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.706143][ T6324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.711752][ T6324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.720124][ T6324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.847003][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.868390][ T6322] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.883065][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.891750][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.895985][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.911768][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.914943][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.940530][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.959907][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.962258][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.977177][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.980223][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.252762][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.300682][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.328300][ T6322] veth0_vlan: entered promiscuous mode [ 101.351067][ T6322] veth1_vlan: entered promiscuous mode [ 101.373525][ T6324] veth0_vlan: entered promiscuous mode [ 101.399420][ T6324] veth1_vlan: entered promiscuous mode [ 101.405970][ T6322] veth0_macvtap: entered promiscuous mode [ 101.418612][ T6322] veth1_macvtap: entered promiscuous mode [ 101.446762][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.451614][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.477734][ T6324] veth0_macvtap: entered promiscuous mode [ 101.480707][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.483841][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.492978][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.498159][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.511979][ T6324] veth1_macvtap: entered promiscuous mode [ 101.528953][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.537943][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.574688][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.579486][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.582982][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.592120][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.622255][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.629054][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.654419][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.659293][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685491][ T63] Bluetooth: hci0: command tx timeout [ 101.701796][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.705097][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.739336][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.745017][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.765347][ T63] Bluetooth: hci1: command tx timeout [ 101.845508][ T63] Bluetooth: hci3: command tx timeout [ 101.846381][ T5288] Bluetooth: hci2: command tx timeout [ 103.767753][ T5288] Bluetooth: hci0: command tx timeout [ 103.856191][ T5288] Bluetooth: hci1: command tx timeout [ 103.926640][ T5288] Bluetooth: hci3: command tx timeout [ 103.926656][ T63] Bluetooth: hci2: command tx timeout 2026/04/11 04:07:14 executed programs: 634 2026/04/11 04:07:19 executed programs: 1234 2026/04/11 04:07:24 executed programs: 2021 [ 116.492884][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.506369][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.510564][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.519785][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.523080][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.696850][T10901] chnl_net:caif_netlink_parms(): no params data found [ 116.761071][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.808116][T10901] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.810842][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.813571][T10901] bridge_slave_0: entered allmulticast mode [ 116.816885][T10901] bridge_slave_0: entered promiscuous mode [ 116.820224][T10901] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.823026][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.826547][T10901] bridge_slave_1: entered allmulticast mode [ 116.830562][T10901] bridge_slave_1: entered promiscuous mode [ 116.850905][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.877755][T10901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.882333][T10901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.912796][T10901] team0: Port device team_slave_0 added [ 116.917742][T10901] team0: Port device team_slave_1 added [ 116.930985][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.951127][T10901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.953542][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.961863][T10901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.969047][T10901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.971504][T10901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.982721][T10901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.032900][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.043008][T10901] hsr_slave_0: entered promiscuous mode [ 117.047264][T10901] hsr_slave_1: entered promiscuous mode [ 117.184063][ T60] bridge_slave_1: left allmulticast mode [ 117.187561][ T60] bridge_slave_1: left promiscuous mode [ 117.189529][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.202258][ T60] bridge_slave_0: left allmulticast mode [ 117.204178][ T60] bridge_slave_0: left promiscuous mode [ 117.207062][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.319863][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.326109][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.333185][ T60] bond0 (unregistering): Released all slaves [ 117.644909][ T60] hsr_slave_0: left promiscuous mode [ 117.648337][ T60] hsr_slave_1: left promiscuous mode [ 117.650402][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.652884][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.660043][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.662702][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.670695][ T60] veth1_macvtap: left promiscuous mode [ 117.672802][ T60] veth0_macvtap: left promiscuous mode [ 117.674939][ T60] veth1_vlan: left promiscuous mode [ 117.676826][ T60] veth0_vlan: left promiscuous mode [ 117.818786][ T60] team0 (unregistering): Port device team_slave_1 removed [ 117.827104][ T60] team0 (unregistering): Port device team_slave_0 removed [ 118.139678][T10901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.147939][T10901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.155701][T10901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.173541][T10901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.244536][T10901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.261223][T10901] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.269405][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.272101][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.275741][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.278042][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.431360][T10901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.469827][T10901] veth0_vlan: entered promiscuous mode [ 118.481850][T10901] veth1_vlan: entered promiscuous mode [ 118.510947][T10901] veth0_macvtap: entered promiscuous mode [ 118.517955][T10901] veth1_macvtap: entered promiscuous mode [ 118.527800][T10901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.536144][T10901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.544701][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.551761][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.562297][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.566205][ T63] Bluetooth: hci4: command tx timeout [ 118.570777][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.625946][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.629352][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.650014][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.652601][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.705431][ T5288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.710195][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.717531][ T5288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.724384][ T5288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.731735][ T5288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.940424][T11342] chnl_net:caif_netlink_parms(): no params data found [ 118.959537][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.063114][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.086623][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.089326][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.091848][T11342] bridge_slave_0: entered allmulticast mode [ 119.095366][T11342] bridge_slave_0: entered promiscuous mode [ 119.098595][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.102041][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.105039][T11342] bridge_slave_1: entered allmulticast mode [ 119.108912][T11342] bridge_slave_1: entered promiscuous mode [ 119.127376][T11342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.135503][T11342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.153985][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.182794][T11342] team0: Port device team_slave_0 added [ 119.187543][T11342] team0: Port device team_slave_1 added [ 119.211502][T11342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.214456][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.229393][T11342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.244329][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.254454][T11342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.257023][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.266836][T11342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.300066][T11342] hsr_slave_0: entered promiscuous mode [ 119.302544][T11342] hsr_slave_1: entered promiscuous mode [ 119.304892][T11342] debugfs: 'hsr0' already exists in 'hsr' [ 119.308478][T11342] Cannot create hsr debugfs directory [ 119.445743][ T12] bridge_slave_1: left allmulticast mode [ 119.448729][ T12] bridge_slave_1: left promiscuous mode [ 119.451207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.458520][ T12] bridge_slave_0: left allmulticast mode [ 119.461529][ T12] bridge_slave_0: left promiscuous mode [ 119.463858][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.600019][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.604107][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.609554][ T12] bond0 (unregistering): Released all slaves [ 119.944145][ T12] hsr_slave_0: left promiscuous mode [ 119.947317][ T12] hsr_slave_1: left promiscuous mode [ 119.949448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.951791][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.954896][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.957402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.962765][ T12] veth1_macvtap: left promiscuous mode [ 119.964772][ T12] veth0_macvtap: left promiscuous mode [ 119.968313][ T12] veth1_vlan: left promiscuous mode [ 119.970045][ T12] veth0_vlan: left promiscuous mode [ 120.079388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 120.090607][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.296863][T11342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.307647][T11342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.312904][T11342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.320580][T11342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.393214][T11342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.409115][T11342] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.424136][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.426689][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.440979][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.443289][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state 2026/04/11 04:07:29 executed programs: 2540 [ 120.610759][T11342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.643240][T11342] veth0_vlan: entered promiscuous mode [ 120.652202][T11342] veth1_vlan: entered promiscuous mode [ 120.655553][ T5288] Bluetooth: hci4: command tx timeout [ 120.675647][T11342] veth0_macvtap: entered promiscuous mode [ 120.684858][T11342] veth1_macvtap: entered promiscuous mode [ 120.697435][T11342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.705300][T11342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.715902][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.718980][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.726299][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.737140][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.776182][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.778689][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.799123][T11747] ================================================================== [ 120.802006][T11747] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x24ce/0x29e0 [ 120.803740][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.805023][T11747] Read of size 4 at addr ffff88802f2bfa30 by task syz.2.2582/11747 [ 120.805040][T11747] [ 120.805124][T11747] CPU: 3 UID: 0 PID: 11747 Comm: syz.2.2582 Not tainted syzkaller #0 PREEMPT(full) [ 120.805159][T11747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.805261][T11747] Call Trace: [ 120.805267][T11747] [ 120.805273][T11747] dump_stack_lvl+0x100/0x190 [ 120.805301][T11747] print_report+0x156/0x4c9 [ 120.805321][T11747] ? __virt_addr_valid+0x239/0x430 [ 120.805344][T11747] ? nr_rt_ioctl+0x24ce/0x29e0 [ 120.805360][T11747] kasan_report+0xdf/0x1e0 [ 120.805375][T11747] ? nr_rt_ioctl+0x24ce/0x29e0 [ 120.805391][T11747] nr_rt_ioctl+0x24ce/0x29e0 [ 120.805408][T11747] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 120.805424][T11747] ? kasan_quarantine_put+0x104/0x240 [ 120.805445][T11747] ? bpf_lsm_capable+0x9/0x10 [ 120.805459][T11747] ? security_capable+0x80/0x260 [ 120.805479][T11747] nr_ioctl+0x16e/0x2d0 [ 120.805490][T11747] sock_do_ioctl+0x118/0x280 [ 120.805507][T11747] ? __pfx_sock_do_ioctl+0x10/0x10 [ 120.805520][T11747] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.805540][T11747] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 120.805562][T11747] sock_ioctl+0x599/0x6b0 [ 120.805576][T11747] ? __pfx_sock_ioctl+0x10/0x10 [ 120.805588][T11747] ? hook_file_ioctl_common+0x146/0x410 [ 120.805604][T11747] ? selinux_file_ioctl+0x139/0x290 [ 120.805620][T11747] ? selinux_file_ioctl+0xb4/0x290 [ 120.805638][T11747] ? __pfx_sock_ioctl+0x10/0x10 [ 120.805651][T11747] __x64_sys_ioctl+0x18e/0x210 [ 120.805669][T11747] do_syscall_64+0x106/0xf80 [ 120.805684][T11747] ? clear_bhb_loop+0x40/0x90 [ 120.805697][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.805710][T11747] RIP: 0033:0x7f048759af39 [ 120.805722][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.805733][T11747] RSP: 002b:00007f04884ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.805746][T11747] RAX: ffffffffffffffda RBX: 00007f0487805fa0 RCX: 00007f048759af39 [ 120.805753][T11747] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 120.805760][T11747] RBP: 00007f048762fee0 R08: 0000000000000000 R09: 0000000000000000 [ 120.805767][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.805773][T11747] R13: 00007f0487806038 R14: 00007f0487805fa0 R15: 00007ffc086c3878 [ 120.805783][T11747] [ 120.805787][T11747] [ 120.810033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.811635][T11747] Allocated by task 11741: [ 120.811648][T11747] kasan_save_stack+0x30/0x50 [ 120.811669][T11747] kasan_save_track+0x14/0x30 [ 120.813664][ T5288] Bluetooth: hci0: command tx timeout [ 120.815454][T11747] __kasan_kmalloc+0xaa/0xb0 [ 120.815474][T11747] nr_add_node+0xe0e/0x2cb0 [ 120.815487][T11747] nr_rt_ioctl+0x16a5/0x29e0 [ 120.815500][T11747] nr_ioctl+0x16e/0x2d0 [ 120.815509][T11747] sock_do_ioctl+0x118/0x280 [ 120.815519][T11747] sock_ioctl+0x599/0x6b0 [ 120.815530][T11747] __x64_sys_ioctl+0x18e/0x210 [ 120.815545][T11747] do_syscall_64+0x106/0xf80 [ 120.815554][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.909929][T11747] [ 120.910712][T11747] Freed by task 11747: [ 120.912017][T11747] kasan_save_stack+0x30/0x50 [ 120.913551][T11747] kasan_save_track+0x14/0x30 [ 120.915135][T11747] kasan_save_free_info+0x3b/0x70 [ 120.916757][T11747] __kasan_slab_free+0x5f/0x80 [ 120.918304][T11747] kfree+0x1f6/0x6b0 [ 120.919603][T11747] nr_rt_ioctl+0x67e/0x29e0 [ 120.921188][T11747] nr_ioctl+0x16e/0x2d0 [ 120.922573][T11747] sock_do_ioctl+0x118/0x280 [ 120.924096][T11747] sock_ioctl+0x599/0x6b0 [ 120.925530][T11747] __x64_sys_ioctl+0x18e/0x210 [ 120.927065][T11747] do_syscall_64+0x106/0xf80 [ 120.928557][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.930399][T11747] [ 120.931147][T11747] The buggy address belongs to the object at ffff88802f2bfa00 [ 120.931147][T11747] which belongs to the cache kmalloc-64 of size 64 [ 120.935464][T11747] The buggy address is located 48 bytes inside of [ 120.935464][T11747] freed 64-byte region [ffff88802f2bfa00, ffff88802f2bfa40) [ 120.939765][T11747] [ 120.940592][T11747] The buggy address belongs to the physical page: [ 120.942693][T11747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f2bf [ 120.945593][T11747] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 120.947842][T11747] page_type: f5(slab) [ 120.949131][T11747] raw: 00fff00000000000 ffff88801b8428c0 dead000000000100 dead000000000122 [ 120.951932][T11747] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 120.954643][T11747] page dumped because: kasan: bad access detected [ 120.956740][T11747] page_owner tracks the page as allocated [ 120.958664][T11747] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6241, tgid 6241 (udevd), ts 102140423007, free_ts 102139580969 [ 120.965299][T11747] post_alloc_hook+0x153/0x170 [ 120.966845][T11747] get_page_from_freelist+0x111d/0x3140 [ 120.968633][T11747] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 120.970535][T11747] new_slab+0xa6/0x6b0 [ 120.971850][T11747] refill_objects+0x26b/0x400 [ 120.973386][T11747] __pcs_replace_empty_main+0x1ab/0x660 [ 120.975193][T11747] __kmalloc_noprof+0x688/0x850 [ 120.976779][T11747] tomoyo_encode2+0xfb/0x3c0 [ 120.978317][T11747] tomoyo_encode+0x29/0x50 [ 120.979815][T11747] tomoyo_realpath_from_path+0x18c/0x690 [ 120.981674][T11747] tomoyo_path_number_perm+0x23c/0x580 [ 120.983425][T11747] tomoyo_path_mknod+0x164/0x190 [ 120.985082][T11747] security_path_mknod+0x161/0x300 [ 120.986719][T11747] may_o_create+0x30/0x3a0 [ 120.988164][T11747] lookup_open.isra.0+0xa0d/0x11b0 [ 120.989853][T11747] path_openat+0x2291/0x31a0 [ 120.991404][T11747] page last free pid 6905 tgid 6905 stack trace: [ 120.993561][T11747] __free_frozen_pages+0x7e1/0x10d0 [ 120.995290][T11747] __kasan_populate_vmalloc+0x1ea/0x210 [ 120.997060][T11747] alloc_vmap_area+0x95d/0x2bd0 [ 120.998610][T11747] __get_vm_area_node+0x1ca/0x330 [ 121.000249][T11747] __vmalloc_node_range_noprof+0x213/0x1530 [ 121.002168][T11747] __vmalloc_node_noprof+0xad/0xf0 [ 121.003810][T11747] copy_process+0x5ec/0x7a40 [ 121.005320][T11747] kernel_clone+0xfc/0x9a0 [ 121.006757][T11747] __do_sys_clone3+0x214/0x290 [ 121.008333][T11747] do_syscall_64+0x106/0xf80 [ 121.009928][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.011987][T11747] [ 121.012807][T11747] Memory state around the buggy address: [ 121.014640][T11747] ffff88802f2bf900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 121.017180][T11747] ffff88802f2bf980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 121.019698][T11747] >ffff88802f2bfa00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 121.022226][T11747] ^ [ 121.024002][T11747] ffff88802f2bfa80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 121.026637][T11747] ffff88802f2bfb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 121.029175][T11747] ================================================================== [ 121.032626][T11747] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.035005][T11747] CPU: 3 UID: 0 PID: 11747 Comm: syz.2.2582 Not tainted syzkaller #0 PREEMPT(full) [ 121.037972][T11747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.041174][T11747] Call Trace: [ 121.042259][T11747] [ 121.043220][T11747] dump_stack_lvl+0x100/0x190 [ 121.044760][T11747] vpanic+0x552/0x970 [ 121.046052][T11747] ? __pfx_vpanic+0x10/0x10 [ 121.047511][T11747] ? mark_held_locks+0x40/0x70 [ 121.049057][T11747] ? nr_rt_ioctl+0x24ce/0x29e0 [ 121.050647][T11747] panic+0xd1/0xe0 [ 121.051950][T11747] ? __pfx_panic+0x10/0x10 [ 121.053539][T11747] ? check_panic_on_warn+0x1f/0x90 [ 121.055539][T11747] check_panic_on_warn.cold+0x19/0x34 [ 121.057437][T11747] end_report.part.0+0x3a/0x90 [ 121.058994][T11747] kasan_report.cold+0xe/0x18 [ 121.060517][T11747] ? nr_rt_ioctl+0x24ce/0x29e0 [ 121.062091][T11747] nr_rt_ioctl+0x24ce/0x29e0 [ 121.063586][T11747] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 121.065209][T11747] ? kasan_quarantine_put+0x104/0x240 [ 121.066937][T11747] ? bpf_lsm_capable+0x9/0x10 [ 121.068505][T11747] ? security_capable+0x80/0x260 [ 121.070169][T11747] nr_ioctl+0x16e/0x2d0 [ 121.071581][T11747] sock_do_ioctl+0x118/0x280 [ 121.073146][T11747] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.074913][T11747] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.076545][T11747] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.078705][T11747] sock_ioctl+0x599/0x6b0 [ 121.080095][T11747] ? __pfx_sock_ioctl+0x10/0x10 [ 121.081684][T11747] ? hook_file_ioctl_common+0x146/0x410 [ 121.083463][T11747] ? selinux_file_ioctl+0x139/0x290 [ 121.085243][T11747] ? selinux_file_ioctl+0xb4/0x290 [ 121.086957][T11747] ? __pfx_sock_ioctl+0x10/0x10 [ 121.088616][T11747] __x64_sys_ioctl+0x18e/0x210 [ 121.090268][T11747] do_syscall_64+0x106/0xf80 [ 121.092040][T11747] ? clear_bhb_loop+0x40/0x90 [ 121.093646][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.095574][T11747] RIP: 0033:0x7f048759af39 [ 121.097035][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.103281][T11747] RSP: 002b:00007f04884ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.106340][T11747] RAX: ffffffffffffffda RBX: 00007f0487805fa0 RCX: 00007f048759af39 [ 121.108898][T11747] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 121.111390][T11747] RBP: 00007f048762fee0 R08: 0000000000000000 R09: 0000000000000000 [ 121.113897][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.116476][T11747] R13: 00007f0487806038 R14: 00007f0487805fa0 R15: 00007ffc086c3878 [ 121.119014][T11747] [ 121.120840][T11747] Kernel Offset: disabled [ 121.122303][T11747] Rebooting in 86400 seconds..