[ 68.031872][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 68.031999][ T43] audit: type=1400 audit(1788556552.174:209): avc: denied { transition } for pid=5977 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.032059][ T43] audit: type=1400 audit(1788556552.174:210): avc: denied { noatsecure } for pid=5977 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.032347][ T43] audit: type=1400 audit(1788556552.174:211): avc: denied { rlimitinh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.032502][ T43] audit: type=1400 audit(1788556552.174:212): avc: denied { siginh } for pid=5977 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.556105][ T43] audit: type=1400 audit(1788556554.694:213): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.615214][ T43] audit: type=1400 audit(1788556554.754:214): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.062781][ T43] audit: type=1400 audit(1788556555.204:215): avc: denied { write } for pid=5986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.124979][ T43] audit: type=1400 audit(1788556555.264:216): avc: denied { write } for pid=5989 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.714762][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.714888][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.415773][ T43] audit: type=1400 audit(1788556556.554:217): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.464951][ T43] audit: type=1400 audit(1788556556.604:218): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.043800][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 73.046783][ T43] audit: type=1400 audit(1788556557.184:223): avc: denied { write } for pid=6014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.127802][ T43] audit: type=1400 audit(1788556557.264:224): avc: denied { write } for pid=6017 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.233630][ T43] audit: type=1400 audit(1788556557.374:225): avc: denied { write } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.301756][ T43] audit: type=1400 audit(1788556557.444:226): avc: denied { write } for pid=6023 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.599670][ T43] audit: type=1400 audit(1788556557.734:227): avc: denied { write } for pid=6026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.670704][ T43] audit: type=1400 audit(1788556557.814:228): avc: denied { write } for pid=6029 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:42545' (ED25519) to the list of known hosts. 2026/09/04 21:15:59 parsed 1 programs 2026/09/04 21:15:59 serving rpc on tcp://40289 [ 76.824547][ T852] cfg80211: failed to load regulatory.db [ 78.061625][ T43] audit: type=1400 audit(1788556562.204:229): avc: denied { read write } for pid=6050 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.061964][ T43] audit: type=1400 audit(1788556562.204:230): avc: denied { open } for pid=6050 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.093821][ T43] audit: type=1400 audit(1788556562.234:231): avc: denied { unlink } for pid=6050 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 78.393503][ T43] audit: type=1400 audit(1788556562.534:232): avc: denied { relabelto } for pid=6053 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.069018][ T6050] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.830190][ T43] audit: type=1400 audit(1788556564.964:233): avc: denied { sys_module } for pid=6060 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.134933][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.138168][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.144054][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.147808][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.151867][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.668436][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.668489][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.745199][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.745392][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.745491][ T6060] bridge_slave_0: entered allmulticast mode [ 81.746803][ T6060] bridge_slave_0: entered promiscuous mode [ 81.773629][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.775527][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.775677][ T6060] bridge_slave_1: entered allmulticast mode [ 81.776985][ T6060] bridge_slave_1: entered promiscuous mode [ 81.827520][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.833048][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.833099][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.848863][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.873287][ T6060] team0: Port device team_slave_0 added [ 81.874823][ T6060] team0: Port device team_slave_1 added [ 82.071645][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.072877][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.072899][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.090846][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.090986][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.091037][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.139207][ T43] audit: type=1401 audit(1788556566.274:234): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 82.193208][ T6060] hsr_slave_0: entered promiscuous mode [ 82.196218][ T6060] hsr_slave_1: entered promiscuous mode [ 82.628485][ T43] audit: type=1400 audit(1788556566.764:235): avc: denied { write } for pid=6147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.703217][ T43] audit: type=1400 audit(1788556566.844:236): avc: denied { write } for pid=6150 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.804946][ T43] audit: type=1400 audit(1788556566.944:237): avc: denied { write } for pid=6152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.878037][ T43] audit: type=1400 audit(1788556567.014:238): avc: denied { write } for pid=6155 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.003959][ T6060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.011420][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.012392][ T6060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.019083][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.019621][ T6060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.024446][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.025286][ T6060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.031842][ T6060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.097100][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.109307][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.112858][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.112902][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.117560][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.117609][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.117758][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 83.117775][ T43] audit: type=1400 audit(1788556567.254:241): avc: denied { write } for pid=6168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.189663][ T43] audit: type=1400 audit(1788556567.324:242): avc: denied { write } for pid=6171 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.280238][ T43] audit: type=1400 audit(1788556567.414:243): avc: denied { write } for pid=6177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.352622][ T43] audit: type=1400 audit(1788556567.494:244): avc: denied { write } for pid=6183 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.396030][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.420668][ T6060] veth0_vlan: entered promiscuous mode [ 83.424812][ T6060] veth1_vlan: entered promiscuous mode [ 83.451852][ T6060] veth0_macvtap: entered promiscuous mode [ 83.455667][ T6060] veth1_macvtap: entered promiscuous mode [ 83.458847][ T43] audit: type=1400 audit(1788556567.594:245): avc: denied { write } for pid=6188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.470548][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.478893][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.510760][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511508][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511594][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511648][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537429][ T43] audit: type=1400 audit(1788556567.674:246): avc: denied { write } for pid=6191 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/09/04 21:16:07 executed programs: 0 [ 83.638679][ T43] audit: type=1400 audit(1788556567.774:247): avc: denied { write } for pid=6194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.653829][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.658228][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.658619][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.659090][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.659376][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.681300][ T5797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.717063][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.721537][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.723172][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.726805][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.730158][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.736196][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.743160][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.745265][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.746439][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.746849][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.749658][ T43] audit: type=1400 audit(1788556567.884:248): avc: denied { write } for pid=6203 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.780517][ T6210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.783751][ T6210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.784610][ T6210] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.785675][ T6210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.786697][ T6210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.852052][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.853560][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.854054][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.855441][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.855909][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.893509][ T5797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.969019][ T43] audit: type=1400 audit(1788556568.104:249): avc: denied { write } for pid=6229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.013347][ T5797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.027722][ T43] audit: type=1400 audit(1788556568.164:250): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.132138][ T5797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.742765][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.743100][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.743202][ T6198] bridge_slave_0: entered allmulticast mode [ 84.744524][ T6198] bridge_slave_0: entered promiscuous mode [ 84.843285][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.843451][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.843541][ T6198] bridge_slave_1: entered allmulticast mode [ 84.844686][ T6198] bridge_slave_1: entered promiscuous mode [ 84.951239][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951323][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.951388][ T6206] bridge_slave_0: entered allmulticast mode [ 84.952117][ T6206] bridge_slave_0: entered promiscuous mode [ 84.953619][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.953678][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.953752][ T6206] bridge_slave_1: entered allmulticast mode [ 84.955032][ T6206] bridge_slave_1: entered promiscuous mode [ 84.957653][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.960405][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.993669][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.993801][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.993902][ T6222] bridge_slave_0: entered allmulticast mode [ 84.995226][ T6222] bridge_slave_0: entered promiscuous mode [ 85.032881][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.032972][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.033159][ T6222] bridge_slave_1: entered allmulticast mode [ 85.033928][ T6222] bridge_slave_1: entered promiscuous mode [ 85.034517][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.034598][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.034920][ T6204] bridge_slave_0: entered allmulticast mode [ 85.036154][ T6204] bridge_slave_0: entered promiscuous mode [ 85.047204][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.048298][ T6198] team0: Port device team_slave_0 added [ 85.050431][ T6198] team0: Port device team_slave_1 added [ 85.079558][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.079706][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.079806][ T6204] bridge_slave_1: entered allmulticast mode [ 85.081324][ T6204] bridge_slave_1: entered promiscuous mode [ 85.084641][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.108475][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.108556][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.108635][ T6214] bridge_slave_0: entered allmulticast mode [ 85.109741][ T6214] bridge_slave_0: entered promiscuous mode [ 85.111855][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.111898][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.112050][ T6214] bridge_slave_1: entered allmulticast mode [ 85.112829][ T6214] bridge_slave_1: entered promiscuous mode [ 85.138694][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.151972][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.152032][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.152083][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.154883][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.154896][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.154918][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.170736][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.174323][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.177332][ T6206] team0: Port device team_slave_0 added [ 85.208454][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.210721][ T6206] team0: Port device team_slave_1 added [ 85.213060][ T6214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.231198][ T6204] team0: Port device team_slave_0 added [ 85.250747][ T6214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.270233][ T6204] team0: Port device team_slave_1 added [ 85.271694][ T6214] team0: Port device team_slave_0 added [ 85.309631][ T6214] team0: Port device team_slave_1 added [ 85.322237][ T6222] team0: Port device team_slave_0 added [ 85.323920][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.323937][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.323960][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.347451][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.347512][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.347551][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.348792][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.348801][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.348814][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.349640][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.349648][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.349661][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.352222][ T6222] team0: Port device team_slave_1 added [ 85.359643][ T6198] hsr_slave_0: entered promiscuous mode [ 85.361026][ T6198] hsr_slave_1: entered promiscuous mode [ 85.361629][ T6198] debugfs: 'hsr0' already exists in 'hsr' [ 85.361648][ T6198] Cannot create hsr debugfs directory [ 85.379800][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.379819][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.379841][ T6214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.441374][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.441432][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.441479][ T6214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.451443][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.451463][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.451486][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.494392][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.494436][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.494469][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.545924][ T6204] hsr_slave_0: entered promiscuous mode [ 85.546650][ T6204] hsr_slave_1: entered promiscuous mode [ 85.547529][ T6204] debugfs: 'hsr0' already exists in 'hsr' [ 85.547546][ T6204] Cannot create hsr debugfs directory [ 85.561159][ T6214] hsr_slave_0: entered promiscuous mode [ 85.562030][ T6214] hsr_slave_1: entered promiscuous mode [ 85.562723][ T6214] debugfs: 'hsr0' already exists in 'hsr' [ 85.562741][ T6214] Cannot create hsr debugfs directory [ 85.578970][ T6206] hsr_slave_0: entered promiscuous mode [ 85.579896][ T6206] hsr_slave_1: entered promiscuous mode [ 85.581097][ T6206] debugfs: 'hsr0' already exists in 'hsr' [ 85.581119][ T6206] Cannot create hsr debugfs directory [ 85.711608][ T5790] Bluetooth: hci0: command tx timeout [ 85.718651][ T6222] hsr_slave_0: entered promiscuous mode [ 85.719474][ T6222] hsr_slave_1: entered promiscuous mode [ 85.719993][ T6222] debugfs: 'hsr0' already exists in 'hsr' [ 85.720109][ T6222] Cannot create hsr debugfs directory [ 85.780635][ T5790] Bluetooth: hci2: command tx timeout [ 85.780972][ T6210] Bluetooth: hci1: command tx timeout [ 85.870433][ T6210] Bluetooth: hci4: command tx timeout [ 85.870486][ T5790] Bluetooth: hci3: command tx timeout [ 87.005891][ T5797] bridge_slave_1: left allmulticast mode [ 87.005973][ T5797] bridge_slave_1: left promiscuous mode [ 87.006407][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.015377][ T5797] bridge_slave_0: left allmulticast mode [ 87.015456][ T5797] bridge_slave_0: left promiscuous mode [ 87.015708][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.149487][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.155901][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.163443][ T5797] bond0 (unregistering): Released all slaves [ 87.213416][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 87.228341][ T5797] hsr_slave_0: left promiscuous mode [ 87.231237][ T5797] hsr_slave_1: left promiscuous mode [ 87.231967][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.231983][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.234289][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.234304][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.246072][ T5797] veth1_macvtap: left promiscuous mode [ 87.246201][ T5797] veth0_macvtap: left promiscuous mode [ 87.246305][ T5797] veth1_vlan: left promiscuous mode [ 87.246373][ T5797] veth0_vlan: left promiscuous mode [ 87.456428][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 87.483834][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 87.780298][ T5790] Bluetooth: hci0: command tx timeout [ 87.829056][ T6198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.843936][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.846996][ T6198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.852364][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.852967][ T6198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.858657][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.859266][ T6198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.860664][ T5790] Bluetooth: hci1: command tx timeout [ 87.860684][ T6210] Bluetooth: hci2: command tx timeout [ 87.867606][ T6198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.941783][ T6210] Bluetooth: hci3: command tx timeout [ 87.941884][ T6210] Bluetooth: hci4: command tx timeout [ 87.946129][ T6214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.953187][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.953866][ T6214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.964006][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.964889][ T6214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.968979][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.972278][ T6214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.978521][ T6214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.139661][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.155739][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 88.156151][ T43] audit: type=1400 audit(1788556572.294:265): avc: denied { write } for pid=6348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.191532][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.208865][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.209065][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.211410][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.211499][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.247928][ T43] audit: type=1400 audit(1788556572.384:266): avc: denied { write } for pid=6353 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.359762][ T43] audit: type=1400 audit(1788556572.494:267): avc: denied { write } for pid=6356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.368318][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.384402][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.390971][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.391043][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.406124][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.406252][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.442812][ T43] audit: type=1400 audit(1788556572.584:268): avc: denied { write } for pid=6362 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.525757][ T6204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.533482][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.534061][ T6204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.539547][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.540849][ T6204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.545568][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.553150][ T6204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.559150][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.585622][ T43] audit: type=1400 audit(1788556572.724:269): avc: denied { write } for pid=6368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.676484][ T43] audit: type=1400 audit(1788556572.814:270): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.687911][ T6206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.692323][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.696454][ T6206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.705548][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.707761][ T6206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.712615][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.713308][ T6206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.719183][ T6206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.736162][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.797183][ T43] audit: type=1400 audit(1788556572.934:271): avc: denied { write } for pid=6393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.811128][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.858869][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.859412][ T6222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.861436][ T43] audit: type=1400 audit(1788556573.004:272): avc: denied { write } for pid=6401 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.867915][ T6222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.876847][ T6222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.884685][ T6222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.885755][ T6222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.893818][ T6222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.903213][ T6222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.913325][ T6222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.914912][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.914989][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.938408][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.938552][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.947747][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.965200][ T43] audit: type=1400 audit(1788556573.104:273): avc: denied { write } for pid=6404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.000245][ T6198] veth0_vlan: entered promiscuous mode [ 89.019206][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.034793][ T6198] veth1_vlan: entered promiscuous mode [ 89.038967][ T43] audit: type=1400 audit(1788556573.174:274): avc: denied { write } for pid=6414 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.083125][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.098540][ T6214] veth0_vlan: entered promiscuous mode [ 89.104032][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.104141][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.119767][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.119954][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.134271][ T6214] veth1_vlan: entered promiscuous mode [ 89.161184][ T6198] veth0_macvtap: entered promiscuous mode [ 89.178337][ T6198] veth1_macvtap: entered promiscuous mode [ 89.202303][ T6214] veth0_macvtap: entered promiscuous mode [ 89.205762][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.219060][ T6214] veth1_macvtap: entered promiscuous mode [ 89.221783][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.237396][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.241237][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.250948][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.270160][ T6222] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.293510][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.293663][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.310568][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.310928][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.311003][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.311040][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.323389][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.323433][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.414828][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.418675][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.477398][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.477477][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.504723][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.504762][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.544837][ T5582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.549990][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553182][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.565042][ T5582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.566071][ T5582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.566223][ T5582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.585319][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/09/04 21:16:13 executed programs: 10 [ 89.634160][ T6451] (syz.0.17,6451,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 89.638111][ T6451] (syz.0.17,6451,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 89.642059][ T6451] (syz.0.17,6451,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 89.656281][ T6204] veth0_vlan: entered promiscuous mode [ 89.667460][ T6204] veth1_vlan: entered promiscuous mode [ 89.688034][ T6458] (syz.0.22,6458, ** replaying previous printk message ** [ 89.688034][ T6458] (syz.0.22,6458,3):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 89.688148][ T6458] (syz.0.22,6458,3):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 89.688184][ T6458] (syz.0.22,6458,3):o2hb_region_dev_store:1944 ERROR: status = -5 [ 89.688395][ T6459] ================================================================== [ 89.688404][ T6459] BUG: KASAN: slab-use-after-free in o2hb_region_dev_store+0x1751/0x1b00 [ 89.688419][ T6459] Write of size 8 at addr ffff8880262b82e8 by task syz.3.20/6459 [ 89.688428][ T6459] [ 89.688434][ T6459] CPU: 2 UID: 0 PID: 6459 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 89.688446][ T6459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.688451][ T6459] Call Trace: [ 89.688455][ T6459] [ 89.688459][ T6459] dump_stack_lvl+0x100/0x190 [ 89.688475][ T6459] print_report+0x13d/0x4b0 [ 89.688497][ T6459] ? __virt_addr_valid+0x239/0x430 [ 89.688508][ T6459] ? o2hb_region_dev_store+0x1751/0x1b00 [ 89.688518][ T6459] kasan_report+0xdf/0x1c0 [ 89.688531][ T6459] ? o2hb_region_dev_store+0x1751/0x1b00 [ 89.688543][ T6459] o2hb_region_dev_store+0x1751/0x1b00 [ 89.688558][ T6459] ? __pfx_o2hb_region_dev_store+0x10/0x10 [ 89.688569][ T6459] ? down_read+0x13b/0x4c0 [ 89.688583][ T6459] ? __pfx_down_read+0x10/0x10 [ 89.688596][ T6459] ? lock_acquire+0x1d1/0x380 [ 89.688607][ T6459] configfs_write_iter+0x302/0x4e0 [ 89.688623][ T6459] vfs_write+0x6af/0x1050 [ 89.688633][ T6459] ? __pfx_configfs_write_iter+0x10/0x10 [ 89.688648][ T6459] ? __pfx_vfs_write+0x10/0x10 [ 89.688657][ T6459] ? find_held_lock+0x2b/0x80 [ 89.688674][ T6459] ksys_write+0x12a/0x250 [ 89.688684][ T6459] ? __pfx_ksys_write+0x10/0x10 [ 89.688694][ T6459] do_syscall_64+0x123/0x790 [ 89.688706][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.688717][ T6459] RIP: 0033:0x7f79d5d9e019 [ 89.688726][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.688736][ T6459] RSP: 002b:00007f79d6c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.688747][ T6459] RAX: ffffffffffffffda RBX: 00007f79d6025fa0 RCX: 00007f79d5d9e019 [ 89.688754][ T6459] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 89.688760][ T6459] RBP: 00007f79d5e3500c R08: 0000000000000000 R09: 0000000000000000 [ 89.688767][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.688773][ T6459] R13: 00007f79d6026038 R14: 00007f79d6025fa0 R15: 00007ffc42008128 [ 89.688782][ T6459] [ 89.688786][ T6459] [ 89.688789][ T6459] Allocated by task 6459: [ 89.688796][ T6459] kasan_save_stack+0x30/0x50 [ 89.688810][ T6459] kasan_save_track+0x14/0x30 [ 89.688822][ T6459] __kasan_kmalloc+0xaa/0xb0 [ 89.688834][ T6459] __kmalloc_noprof+0x32f/0x840 [ 89.688846][ T6459] o2hb_region_dev_store+0x88b/0x1b00 [ 89.688858][ T6459] configfs_write_iter+0x302/0x4e0 [ 89.688877][ T6459] vfs_write+0x6af/0x1050 [ 89.688886][ T6459] ksys_write+0x12a/0x250 [ 89.688897][ T6459] do_syscall_64+0x123/0x790 [ 89.688912][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.688927][ T6459] [ 89.688930][ T6459] Freed by task 6458: [ 89.688937][ T6459] kasan_save_stack+0x30/0x50 [ 89.688950][ T6459] kasan_save_track+0x14/0x30 [ 89.688963][ T6459] kasan_save_free_info+0x3b/0x70 [ 89.688984][ T6459] __kasan_slab_free+0x5f/0x80 [ 89.688999][ T6459] kfree+0x22b/0x6d0 [ 89.689016][ T6459] o2hb_unmap_slot_data+0x190/0x330 [ 89.689040][ T6459] o2hb_region_dev_store+0x112e/0x1b00 [ 89.689054][ T6459] configfs_write_iter+0x302/0x4e0 [ 89.689073][ T6459] vfs_write+0x6af/0x1050 [ 89.689080][ T6459] ksys_write+0x12a/0x250 [ 89.689088][ T6459] do_syscall_64+0x123/0x790 [ 89.689098][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.689108][ T6459] [ 89.689110][ T6459] The buggy address belongs to the object at ffff8880262b8200 [ 89.689110][ T6459] which belongs to the cache kmalloc-256 of size 256 [ 89.689118][ T6459] The buggy address is located 232 bytes inside of [ 89.689118][ T6459] freed 256-byte region [ffff8880262b8200, ffff8880262b8300) [ 89.689127][ T6459] [ 89.689130][ T6459] The buggy address belongs to the physical page: [ 89.689134][ T6459] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x262b8 [ 89.689143][ T6459] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.689151][ T6459] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.689161][ T6459] page_type: f5(slab) [ 89.689170][ T6459] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 89.689179][ T6459] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.689187][ T6459] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 89.689196][ T6459] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 89.689204][ T6459] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 89.689213][ T6459] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 89.689218][ T6459] page dumped because: kasan: bad access detected [ 89.689223][ T6459] page_owner tracks the page as allocated [ 89.689226][ T6459] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 39, tgid 39 (kdevtmpfs), ts 6186544854 [ 89.689241][ T6459] post_alloc_hook+0xfd/0x120 [ 89.689255][ T6459] get_page_from_freelist+0x110d/0x35d0 [ 89.689269][ T6459] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 89.689284][ T6459] new_slab+0xa9/0x6e0 [ 89.689297][ T6459] refill_objects+0xe3/0x410 [ 89.689311][ T6459] __pcs_replace_empty_main+0x35e/0x650 [ 89.689325][ T6459] __kmalloc_noprof+0x67c/0x840 [ 89.689333][ T6459] security_inode_init_security+0x113/0x370 [ 89.689346][ T6459] shmem_mknod+0x2ce/0x480 [ 89.689355][ T6459] vfs_mknod+0x3a5/0x7f0 [ 89.689369][ T6459] devtmpfs_work_loop+0x48d/0xae4 [ 89.689378][ T6459] devtmpfsd+0x3f/0x50 [ 89.689386][ T6459] kthread+0x373/0x450 [ 89.689399][ T6459] ret_from_fork+0x730/0xd60 [ 89.689409][ T6459] ret_from_fork_asm+0x1a/0x30 [ 89.689420][ T6459] page_owner free stack trace missing [ 89.689423][ T6459] [ 89.689425][ T6459] Memory state around the buggy address: [ 89.689429][ T6459] ffff8880262b8180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.689436][ T6459] ffff8880262b8200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.689443][ T6459] >ffff8880262b8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.689448][ T6459] ^ [ 89.689453][ T6459] ffff8880262b8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.689460][ T6459] ffff8880262b8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.689465][ T6459] ================================================================== [ 89.689471][ T6459] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.936868][ T6459] CPU: 2 UID: 0 PID: 6459 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 89.940374][ T6459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.944083][ T6459] Call Trace: [ 89.945198][ T6459] [ 89.946309][ T6459] dump_stack_lvl+0x100/0x190 [ 89.948406][ T6459] vpanic+0x553/0x970 [ 89.949796][ T6459] ? __pfx_vpanic+0x10/0x10 [ 89.951527][ T6459] ? __pfx_vprintk_emit+0x10/0x10 [ 89.953619][ T6459] ? o2hb_region_dev_store+0x1751/0x1b00 [ 89.955744][ T6459] panic+0xd1/0xe0 [ 89.957225][ T6459] ? __pfx_panic+0x10/0x10 [ 89.959055][ T6459] ? o2hb_region_dev_store+0x1751/0x1b00 [ 89.961093][ T6459] check_panic_on_warn.cold+0x19/0x34 [ 89.963001][ T6459] end_report.part.0+0x3a/0x90 [ 89.964771][ T6459] kasan_report.cold+0xe/0x18 [ 89.966423][ T6459] ? o2hb_region_dev_store+0x1751/0x1b00 [ 89.968125][ T6459] o2hb_region_dev_store+0x1751/0x1b00 [ 89.969747][ T6459] ? __pfx_o2hb_region_dev_store+0x10/0x10 [ 89.971504][ T6459] ? down_read+0x13b/0x4c0 [ 89.973007][ T6459] ? __pfx_down_read+0x10/0x10 [ 89.974948][ T6459] ? lock_acquire+0x1d1/0x380 [ 89.976816][ T6459] configfs_write_iter+0x302/0x4e0 [ 89.978543][ T6459] vfs_write+0x6af/0x1050 [ 89.979900][ T6459] ? __pfx_configfs_write_iter+0x10/0x10 [ 89.982222][ T6459] ? __pfx_vfs_write+0x10/0x10 [ 89.984095][ T6459] ? find_held_lock+0x2b/0x80 [ 89.986234][ T6459] ksys_write+0x12a/0x250 [ 89.987589][ T6459] ? __pfx_ksys_write+0x10/0x10 [ 89.989135][ T6459] do_syscall_64+0x123/0x790 [ 89.990572][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.992451][ T6459] RIP: 0033:0x7f79d5d9e019 [ 89.993842][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.001122][ T6459] RSP: 002b:00007f79d6c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.004335][ T6459] RAX: ffffffffffffffda RBX: 00007f79d6025fa0 RCX: 00007f79d5d9e019 [ 90.007427][ T6459] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 90.010663][ T6459] RBP: 00007f79d5e3500c R08: 0000000000000000 R09: 0000000000000000 [ 90.014336][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.018914][ T6459] R13: 00007f79d6026038 R14: 00007f79d6025fa0 R15: 00007ffc42008128 [ 90.022077][ T6459] [ 90.024296][ T6459] Kernel Offset: disabled [ 90.026196][ T6459] Rebooting in 86400 seconds..