[ 75.097395][ T42] audit: type=1400 audit(1785603790.407:211): avc: denied { transition } for pid=5965 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.108504][ T42] audit: type=1400 audit(1785603790.427:212): avc: denied { noatsecure } for pid=5965 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.116093][ T42] audit: type=1400 audit(1785603790.427:213): avc: denied { rlimitinh } for pid=5965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.123578][ T42] audit: type=1400 audit(1785603790.427:214): avc: denied { siginh } for pid=5965 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.932424][ T42] audit: type=1400 audit(1785603795.247:215): avc: denied { write } for pid=5973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.992484][ T42] audit: type=1400 audit(1785603795.307:216): avc: denied { write } for pid=5976 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.123822][ T42] audit: type=1400 audit(1785603795.437:217): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.188040][ T42] audit: type=1400 audit(1785603795.497:218): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:39506' (ED25519) to the list of known hosts. [ 80.503299][ T42] audit: type=1400 audit(1785603795.817:219): avc: denied { write } for pid=5993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.551365][ T42] audit: type=1400 audit(1785603795.867:220): avc: denied { write } for pid=5996 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.494069][ T42] audit: type=1400 audit(1785603796.807:221): avc: denied { write } for pid=6005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.549018][ T42] audit: type=1400 audit(1785603796.867:222): avc: denied { write } for pid=6008 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.872033][ T24] cfg80211: failed to load regulatory.db 2026/08/01 17:03:17 parsed 1 programs [ 84.483956][ T42] audit: type=1400 audit(1785603799.797:223): avc: denied { read write } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.492797][ T42] audit: type=1400 audit(1785603799.797:224): avc: denied { open } for pid=6015 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.541051][ T42] audit: type=1400 audit(1785603799.857:225): avc: denied { unlink } for pid=6015 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.821861][ T42] audit: type=1400 audit(1785603800.137:226): avc: denied { relabelto } for pid=6017 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 85.473484][ T6015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.614630][ T42] audit: type=1400 audit(1785603802.927:227): avc: denied { sys_module } for pid=6020 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 88.026002][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.028520][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.030875][ T6020] bridge_slave_0: entered allmulticast mode [ 88.034383][ T6020] bridge_slave_0: entered promiscuous mode [ 88.038571][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.041228][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.043440][ T6020] bridge_slave_1: entered allmulticast mode [ 88.046147][ T6020] bridge_slave_1: entered promiscuous mode [ 88.089509][ T6020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.094585][ T6020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.138714][ T6020] team0: Port device team_slave_0 added [ 88.142137][ T6020] team0: Port device team_slave_1 added [ 88.182194][ T6020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.184596][ T6020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.192721][ T6020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.197018][ T6020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.200951][ T6020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.208980][ T6020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.271244][ T6020] hsr_slave_0: entered promiscuous mode [ 88.274414][ T6020] hsr_slave_1: entered promiscuous mode [ 88.444346][ T42] audit: type=1400 audit(1785603803.757:228): avc: denied { write } for pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.496343][ T42] audit: type=1400 audit(1785603803.807:229): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.584040][ T42] audit: type=1400 audit(1785603803.897:230): avc: denied { write } for pid=6042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.646148][ T42] audit: type=1400 audit(1785603803.957:231): avc: denied { write } for pid=6045 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.723084][ T42] audit: type=1400 audit(1785603804.037:232): avc: denied { write } for pid=6047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.788426][ T42] audit: type=1400 audit(1785603804.097:233): avc: denied { write } for pid=6050 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.865574][ T6020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.870843][ T6020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.873634][ T6020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.878132][ T6020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.882034][ T6020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.883173][ T42] audit: type=1400 audit(1785603804.197:234): avc: denied { write } for pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.896961][ T6020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.906620][ T6020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.912674][ T6020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.947704][ T42] audit: type=1400 audit(1785603804.257:235): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.980090][ T6020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.996561][ T6020] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.002548][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.005814][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.016981][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.020250][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.052526][ T42] audit: type=1400 audit(1785603804.367:236): avc: denied { write } for pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.285493][ T6020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.307910][ T6020] veth0_vlan: entered promiscuous mode [ 89.314932][ T6020] veth1_vlan: entered promiscuous mode [ 89.331274][ T6020] veth0_macvtap: entered promiscuous mode [ 89.336497][ T6020] veth1_macvtap: entered promiscuous mode [ 89.345011][ T6020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.354137][ T6020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.388631][ T5603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.395820][ T5603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399963][ T5603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.430089][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520390][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.611417][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.686031][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.773762][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.179145][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.181892][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.198776][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.201640][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.681736][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.685623][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.688200][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.692510][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.695112][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/01 17:03:27 executed programs: 0 [ 91.756306][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.760830][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.765032][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.769834][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.773480][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.200569][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.203360][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.205817][ T6189] bridge_slave_0: entered allmulticast mode [ 92.209835][ T6189] bridge_slave_0: entered promiscuous mode [ 92.214732][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.217944][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.221377][ T6189] bridge_slave_1: entered allmulticast mode [ 92.225433][ T6189] bridge_slave_1: entered promiscuous mode [ 92.269779][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.276172][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.335937][ T6189] team0: Port device team_slave_0 added [ 92.339539][ T6189] team0: Port device team_slave_1 added [ 92.371495][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.374361][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.383941][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.388212][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.390475][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.398493][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.439556][ T6189] hsr_slave_0: entered promiscuous mode [ 92.442338][ T6189] hsr_slave_1: entered promiscuous mode [ 92.444483][ T6189] debugfs: 'hsr0' already exists in 'hsr' [ 92.446683][ T6189] Cannot create hsr debugfs directory [ 92.915112][ T13] bridge_slave_1: left allmulticast mode [ 92.917618][ T13] bridge_slave_1: left promiscuous mode [ 92.920559][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.925183][ T13] bridge_slave_0: left allmulticast mode [ 92.927145][ T13] bridge_slave_0: left promiscuous mode [ 92.929867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.965701][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 92.965719][ T42] audit: type=1400 audit(1785603808.277:255): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.020706][ T42] audit: type=1400 audit(1785603808.337:256): avc: denied { write } for pid=6211 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.043367][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.049126][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.053500][ T13] bond0 (unregistering): Released all slaves [ 93.085337][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.156371][ T13] hsr_slave_0: left promiscuous mode [ 93.159388][ T13] hsr_slave_1: left promiscuous mode [ 93.162202][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.165308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.169106][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.172259][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.176693][ T42] audit: type=1400 audit(1785603808.487:257): avc: denied { write } for pid=6215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.186816][ T13] veth1_macvtap: left promiscuous mode [ 93.189356][ T13] veth0_macvtap: left promiscuous mode [ 93.191739][ T13] veth1_vlan: left promiscuous mode [ 93.193886][ T13] veth0_vlan: left promiscuous mode [ 93.236081][ T42] audit: type=1400 audit(1785603808.547:258): avc: denied { write } for pid=6218 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.342504][ T13] team0 (unregistering): Port device team_slave_1 removed [ 93.350296][ T13] team0 (unregistering): Port device team_slave_0 removed [ 93.430429][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.608807][ T42] audit: type=1400 audit(1785603808.927:259): avc: denied { write } for pid=6222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.657400][ T42] audit: type=1400 audit(1785603808.967:260): avc: denied { write } for pid=6225 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.724006][ T42] audit: type=1400 audit(1785603809.037:261): avc: denied { write } for pid=6227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.768151][ T42] audit: type=1400 audit(1785603809.077:262): avc: denied { write } for pid=6230 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.842144][ T42] audit: type=1400 audit(1785603809.157:263): avc: denied { write } for pid=6232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.858463][ T64] Bluetooth: hci0: command tx timeout [ 93.863639][ T6189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.870667][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.874091][ T6189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.879590][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.883602][ T6189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.889581][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.892553][ T42] audit: type=1400 audit(1785603809.207:264): avc: denied { write } for pid=6235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.893219][ T6189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.909897][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.964157][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.984637][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.992339][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.995322][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.006611][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.009793][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.661592][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.729710][ T6189] veth0_vlan: entered promiscuous mode [ 94.738238][ T6189] veth1_vlan: entered promiscuous mode [ 94.781417][ T6189] veth0_macvtap: entered promiscuous mode [ 94.787543][ T6189] veth1_macvtap: entered promiscuous mode [ 94.800097][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.805808][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.918533][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.921888][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.924781][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.928972][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.932349][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.952381][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.955294][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.999475][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.099544][ T6256] infiniband syz1: set active [ 95.101792][ T6256] infiniband syz1: added syz_tun [ 95.115341][ T6256] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 95.123382][ T6256] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 95.131210][ T6256] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 95.151988][ T6256] RDS/IB: syz1: added [ 95.154157][ T6256] smc: adding ib device syz1 with port count 1 [ 95.156875][ T6256] smc: ib device syz1 port 1 has no pnetid [ 95.311197][ T6261] syz1: rxe_newlink: already configured on syz_tun [ 95.317876][ T12] ================================================================== [ 95.320532][ T12] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xb60/0xbe0 [ 95.323115][ T12] Read of size 8 at addr ffff888035c69d10 by task kworker/u32:0/12 [ 95.327240][ T12] [ 95.328034][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 95.328048][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.328067][ T12] Workqueue: rdma_cm cma_iboe_join_work_handler [ 95.328095][ T12] Call Trace: [ 95.328100][ T12] [ 95.328105][ T12] dump_stack_lvl+0x100/0x190 [ 95.328121][ T12] print_report+0x13d/0x4b0 [ 95.328137][ T12] ? __virt_addr_valid+0x239/0x430 [ 95.328153][ T12] ? ucma_create_uevent+0xb60/0xbe0 [ 95.328168][ T12] kasan_report+0xdf/0x1c0 [ 95.328188][ T12] ? ucma_create_uevent+0xb60/0xbe0 [ 95.328211][ T12] ucma_create_uevent+0xb60/0xbe0 [ 95.328233][ T12] ucma_event_handler+0x102/0x940 [ 95.328247][ T12] ? rcu_is_watching+0x12/0xc0 [ 95.328264][ T12] cma_cm_event_handler+0x99/0x300 [ 95.328280][ T12] cma_iboe_join_work_handler+0xca/0x180 [ 95.328296][ T12] process_one_work+0xa23/0x1940 [ 95.328311][ T12] ? __pfx_process_one_work+0x10/0x10 [ 95.328324][ T12] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 95.328340][ T12] worker_thread+0x5ef/0xe50 [ 95.328353][ T12] ? kthread+0x13a/0x450 [ 95.328363][ T12] ? __pfx_worker_thread+0x10/0x10 [ 95.328374][ T12] kthread+0x370/0x450 [ 95.328383][ T12] ? __pfx_kthread+0x10/0x10 [ 95.328393][ T12] ret_from_fork+0x72b/0xd50 [ 95.328409][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 95.328428][ T12] ? __switch_to+0x800/0x10f0 [ 95.328439][ T12] ? __pfx_kthread+0x10/0x10 [ 95.328449][ T12] ret_from_fork_asm+0x1a/0x30 [ 95.328466][ T12] [ 95.328470][ T12] [ 95.388143][ T12] Allocated by task 6261: [ 95.389999][ T12] kasan_save_stack+0x30/0x50 [ 95.392013][ T12] kasan_save_track+0x14/0x30 [ 95.394023][ T12] __kasan_kmalloc+0xaa/0xb0 [ 95.395889][ T12] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 95.398139][ T12] ucma_process_join+0x232/0xa20 [ 95.400225][ T12] ucma_join_multicast+0xe9/0x160 [ 95.402306][ T12] ucma_write+0x1fb/0x330 [ 95.403944][ T12] vfs_write+0x2aa/0x1050 [ 95.405583][ T12] ksys_write+0x1f8/0x250 [ 95.407239][ T12] do_syscall_64+0x115/0x870 [ 95.409006][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.411205][ T12] [ 95.412112][ T12] Freed by task 6261: [ 95.413605][ T12] kasan_save_stack+0x30/0x50 [ 95.415368][ T12] kasan_save_track+0x14/0x30 [ 95.416926][ T12] kasan_save_free_info+0x3b/0x70 [ 95.418581][ T12] __kasan_slab_free+0x5f/0x80 [ 95.420062][ T12] kfree+0x22b/0x6c0 [ 95.421312][ T12] ucma_process_join+0x39a/0xa20 [ 95.423033][ T12] ucma_join_multicast+0xe9/0x160 [ 95.424885][ T12] ucma_write+0x1fb/0x330 [ 95.426561][ T12] vfs_write+0x2aa/0x1050 [ 95.428175][ T12] ksys_write+0x1f8/0x250 [ 95.429550][ T12] do_syscall_64+0x115/0x870 [ 95.431059][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.433035][ T12] [ 95.434008][ T12] The buggy address belongs to the object at ffff888035c69d00 [ 95.434008][ T12] which belongs to the cache kmalloc-192 of size 192 [ 95.438612][ T12] The buggy address is located 16 bytes inside of [ 95.438612][ T12] freed 192-byte region [ffff888035c69d00, ffff888035c69dc0) [ 95.442928][ T12] [ 95.443699][ T12] The buggy address belongs to the physical page: [ 95.445698][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c69 [ 95.448417][ T12] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.450655][ T12] page_type: f5(slab) [ 95.451926][ T12] raw: 00fff00000000000 ffff88801bc423c0 dead000000000100 dead000000000122 [ 95.454886][ T12] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 95.457555][ T12] page dumped because: kasan: bad access detected [ 95.459847][ T12] page_owner tracks the page as allocated [ 95.462129][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18695512552, free_ts 0 [ 95.468185][ T12] post_alloc_hook+0xfd/0x120 [ 95.469914][ T12] get_page_from_freelist+0xf48/0x3530 [ 95.471719][ T12] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 95.473610][ T12] new_slab+0xa2/0x640 [ 95.474953][ T12] refill_objects+0xe3/0x410 [ 95.476445][ T12] __pcs_replace_empty_main+0x376/0x680 [ 95.478221][ T12] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 95.480242][ T12] krealloc_node_align_noprof+0x1f9/0x3e0 [ 95.482038][ T12] add_sysfs_param+0xdb/0x970 [ 95.483492][ T12] param_sysfs_builtin_init+0x310/0x3f0 [ 95.485218][ T12] do_one_initcall+0x11d/0x700 [ 95.486764][ T12] kernel_init_freeable+0x6ea/0x7b0 [ 95.488510][ T12] kernel_init+0x1f/0x1e0 [ 95.489908][ T12] ret_from_fork+0x72b/0xd50 [ 95.491369][ T12] ret_from_fork_asm+0x1a/0x30 [ 95.492881][ T12] page_owner free stack trace missing [ 95.494594][ T12] [ 95.495393][ T12] Memory state around the buggy address: [ 95.497140][ T12] ffff888035c69c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.499712][ T12] ffff888035c69c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 95.502172][ T12] >ffff888035c69d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.504729][ T12] ^ [ 95.506199][ T12] ffff888035c69d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 95.508775][ T12] ffff888035c69e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.511212][ T12] ================================================================== [ 95.514054][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.516935][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 95.520583][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.524303][ T12] Workqueue: rdma_cm cma_iboe_join_work_handler [ 95.526344][ T12] Call Trace: [ 95.527444][ T12] [ 95.528504][ T12] dump_stack_lvl+0x100/0x190 [ 95.530072][ T12] vpanic+0x552/0x970 [ 95.531377][ T12] ? __pfx_vpanic+0x10/0x10 [ 95.532875][ T12] ? mark_held_locks+0x40/0x70 [ 95.534440][ T12] ? irqentry_exit+0x24d/0xa00 [ 95.535998][ T12] ? ucma_create_uevent+0xb60/0xbe0 [ 95.537731][ T12] panic+0xd1/0xe0 [ 95.539011][ T12] ? __pfx_panic+0x10/0x10 [ 95.540374][ T12] ? ucma_create_uevent+0xb60/0xbe0 [ 95.541987][ T12] ? preempt_schedule_common+0x42/0xc0 [ 95.543639][ T12] ? check_panic_on_warn+0x1f/0x90 [ 95.545286][ T12] check_panic_on_warn.cold+0x19/0x34 [ 95.547020][ T12] end_report.part.0+0x3a/0x90 [ 95.548649][ T12] kasan_report.cold+0xe/0x18 [ 95.550204][ T12] ? ucma_create_uevent+0xb60/0xbe0 [ 95.551960][ T12] ucma_create_uevent+0xb60/0xbe0 [ 95.553585][ T12] ucma_event_handler+0x102/0x940 [ 95.555276][ T12] ? rcu_is_watching+0x12/0xc0 [ 95.557013][ T12] cma_cm_event_handler+0x99/0x300 [ 95.558778][ T12] cma_iboe_join_work_handler+0xca/0x180 [ 95.560620][ T12] process_one_work+0xa23/0x1940 [ 95.562249][ T12] ? __pfx_process_one_work+0x10/0x10 [ 95.563984][ T12] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 95.566074][ T12] worker_thread+0x5ef/0xe50 [ 95.567694][ T12] ? kthread+0x13a/0x450 [ 95.569067][ T12] ? __pfx_worker_thread+0x10/0x10 [ 95.570761][ T12] kthread+0x370/0x450 [ 95.572176][ T12] ? __pfx_kthread+0x10/0x10 [ 95.573670][ T12] ret_from_fork+0x72b/0xd50 [ 95.575215][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 95.576914][ T12] ? __switch_to+0x800/0x10f0 [ 95.578901][ T12] ? __pfx_kthread+0x10/0x10 [ 95.580634][ T12] ret_from_fork_asm+0x1a/0x30 [ 95.582292][ T12] [ 95.583928][ T12] Kernel Offset: disabled [ 95.585299][ T12] Rebooting in 86400 seconds..