[ 84.258862][ T40] audit: type=1400 audit(1768101214.340:116): avc: denied { transition } for pid=6138 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.267905][ T40] audit: type=1400 audit(1768101214.350:117): avc: denied { noatsecure } for pid=6138 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.275529][ T40] audit: type=1400 audit(1768101214.350:118): avc: denied { rlimitinh } for pid=6138 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.283274][ T40] audit: type=1400 audit(1768101214.350:119): avc: denied { siginh } for pid=6138 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.536917][ T1022] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:38261' (ED25519) to the list of known hosts. 2026/01/11 03:13:41 parsed 1 programs [ 91.373401][ T40] audit: type=1400 audit(1768101221.450:120): avc: denied { node_bind } for pid=6161 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.684409][ T40] audit: type=1400 audit(1768101223.760:121): avc: denied { read write } for pid=6190 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.694131][ T40] audit: type=1400 audit(1768101223.760:122): avc: denied { open } for pid=6190 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.749101][ T40] audit: type=1400 audit(1768101223.830:123): avc: denied { unlink } for pid=6190 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.081760][ T40] audit: type=1400 audit(1768101224.160:124): avc: denied { relabelto } for pid=6193 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 94.915622][ T6190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.666190][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.669712][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.673374][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.677704][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.680469][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.896987][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.899533][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.020456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.023244][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.093072][ T40] audit: type=1401 audit(1768101227.170:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 97.714025][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 97.957337][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.961010][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.964109][ T6238] bridge_slave_0: entered allmulticast mode [ 97.969223][ T6238] bridge_slave_0: entered promiscuous mode [ 97.978566][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.982329][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.985379][ T6238] bridge_slave_1: entered allmulticast mode [ 97.989908][ T6238] bridge_slave_1: entered promiscuous mode [ 98.044865][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.051599][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.090611][ T6238] team0: Port device team_slave_0 added [ 98.097975][ T6238] team0: Port device team_slave_1 added [ 98.123010][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.125325][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.136134][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.141439][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.143688][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.153146][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.177745][ T6238] hsr_slave_0: entered promiscuous mode [ 98.180773][ T6238] hsr_slave_1: entered promiscuous mode [ 98.447039][ T6238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.453013][ T6238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.459558][ T6238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.463933][ T6238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.483458][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.486569][ T6238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.541891][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.565456][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.574856][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.582176][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.584588][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.591461][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.593827][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.664843][ T40] audit: type=1400 audit(1768101228.740:126): avc: denied { sys_module } for pid=6238 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.759028][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.783211][ T6238] veth0_vlan: entered promiscuous mode [ 98.788534][ T6238] veth1_vlan: entered promiscuous mode [ 98.803688][ T6238] veth0_macvtap: entered promiscuous mode [ 98.808418][ T6238] veth1_macvtap: entered promiscuous mode [ 98.817094][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.826828][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.834859][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.838784][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.843184][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.848216][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/11 03:13:49 executed programs: 0 [ 98.965855][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.973677][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.981943][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.987061][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.990796][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.007950][ T6299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.013827][ T6304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.014261][ T6303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.018421][ T6304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.024046][ T6304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.025427][ T6303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.027788][ T6304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.029962][ T5289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.030484][ T5289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.037358][ T6303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.040232][ T6304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.040868][ T5289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.041379][ T5289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.052905][ T6303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.059546][ T6303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.378084][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 99.401963][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.450703][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 99.476837][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 99.625685][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.628750][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.631072][ T6292] bridge_slave_0: entered allmulticast mode [ 99.633820][ T6292] bridge_slave_0: entered promiscuous mode [ 99.640861][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.643187][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.645501][ T6292] bridge_slave_1: entered allmulticast mode [ 99.649440][ T6292] bridge_slave_1: entered promiscuous mode [ 99.666566][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 99.765871][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.769416][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.772645][ T6296] bridge_slave_0: entered allmulticast mode [ 99.776869][ T6296] bridge_slave_0: entered promiscuous mode [ 99.782268][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.785471][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.789006][ T6296] bridge_slave_1: entered allmulticast mode [ 99.793120][ T6296] bridge_slave_1: entered promiscuous mode [ 99.800193][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.831012][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.834281][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.838004][ T6297] bridge_slave_0: entered allmulticast mode [ 99.842130][ T6297] bridge_slave_0: entered promiscuous mode [ 99.859482][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.869602][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.872925][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.876706][ T6297] bridge_slave_1: entered allmulticast mode [ 99.880935][ T6297] bridge_slave_1: entered promiscuous mode [ 99.908085][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.911276][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.914484][ T6295] bridge_slave_0: entered allmulticast mode [ 99.918942][ T6295] bridge_slave_0: entered promiscuous mode [ 99.924175][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.927839][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.931228][ T6295] bridge_slave_1: entered allmulticast mode [ 99.935339][ T6295] bridge_slave_1: entered promiscuous mode [ 99.953675][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.991377][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.998267][ T6292] team0: Port device team_slave_0 added [ 100.013475][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.027566][ T6292] team0: Port device team_slave_1 added [ 100.033069][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.039238][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.059511][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.076828][ T6296] team0: Port device team_slave_0 added [ 100.085614][ T6296] team0: Port device team_slave_1 added [ 100.111760][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.113990][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.122411][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.127193][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.129524][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.138977][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.154482][ T6297] team0: Port device team_slave_0 added [ 100.158050][ T6295] team0: Port device team_slave_0 added [ 100.161502][ T6295] team0: Port device team_slave_1 added [ 100.167237][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.169478][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.179559][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.185588][ T6297] team0: Port device team_slave_1 added [ 100.210768][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.213371][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.224202][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.239729][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.242625][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.252350][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.258663][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.261577][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.272392][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.277546][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.279744][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.289206][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.298627][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.301398][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.310721][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.382533][ T6292] hsr_slave_0: entered promiscuous mode [ 100.385632][ T6292] hsr_slave_1: entered promiscuous mode [ 100.388644][ T6292] debugfs: 'hsr0' already exists in 'hsr' [ 100.390966][ T6292] Cannot create hsr debugfs directory [ 100.406027][ T6297] hsr_slave_0: entered promiscuous mode [ 100.409859][ T6297] hsr_slave_1: entered promiscuous mode [ 100.412824][ T6297] debugfs: 'hsr0' already exists in 'hsr' [ 100.415386][ T6297] Cannot create hsr debugfs directory [ 100.425113][ T6296] hsr_slave_0: entered promiscuous mode [ 100.428405][ T6296] hsr_slave_1: entered promiscuous mode [ 100.431263][ T6296] debugfs: 'hsr0' already exists in 'hsr' [ 100.433614][ T6296] Cannot create hsr debugfs directory [ 100.457506][ T6295] hsr_slave_0: entered promiscuous mode [ 100.460322][ T6295] hsr_slave_1: entered promiscuous mode [ 100.463223][ T6295] debugfs: 'hsr0' already exists in 'hsr' [ 100.465588][ T6295] Cannot create hsr debugfs directory [ 100.765086][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.824627][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.866147][ T6297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.894248][ T6297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.913154][ T6297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.934492][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.942011][ T6297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.002484][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.010428][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.023405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.025754][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.032052][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.034651][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.086818][ T5988] Bluetooth: hci1: command tx timeout [ 101.086967][ T6304] Bluetooth: hci3: command tx timeout [ 101.087030][ T6303] Bluetooth: hci2: command tx timeout [ 101.087372][ T6303] Bluetooth: hci0: command tx timeout [ 101.178162][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.223036][ T6297] veth0_vlan: entered promiscuous mode [ 101.229021][ T6297] veth1_vlan: entered promiscuous mode [ 101.244680][ T6297] veth0_macvtap: entered promiscuous mode [ 101.250366][ T6297] veth1_macvtap: entered promiscuous mode [ 101.259023][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.265075][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.271870][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.274807][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.280283][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.283977][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.342158][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.344754][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.390864][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.394104][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.412166][ T6292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.419607][ T6292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.429875][ T6292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.435839][ T6292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.449898][ T40] audit: type=1400 audit(1768101231.530:127): avc: denied { create } for pid=6362 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.470385][ T40] audit: type=1400 audit(1768101231.530:128): avc: denied { ioctl } for pid=6362 comm="syz.2.19" path="socket:[13543]" dev="sockfs" ino=13543 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.508212][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.531212][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.539255][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.542177][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.554716][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.557974][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.754411][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.785567][ T6292] veth0_vlan: entered promiscuous mode [ 101.790576][ T6292] veth1_vlan: entered promiscuous mode [ 101.806030][ T6292] veth0_macvtap: entered promiscuous mode [ 101.813950][ T6292] veth1_macvtap: entered promiscuous mode [ 101.822131][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.829121][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.835838][ T164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.839759][ T164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.843349][ T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.846222][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.892043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.895459][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.911594][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.914288][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.258384][ T63] bridge_slave_1: left allmulticast mode [ 102.260792][ T63] bridge_slave_1: left promiscuous mode [ 102.263289][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.273455][ T63] bridge_slave_0: left allmulticast mode [ 102.275342][ T63] bridge_slave_0: left promiscuous mode [ 102.282262][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.569009][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.575268][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.581917][ T63] bond0 (unregistering): Released all slaves [ 102.757114][ T63] hsr_slave_0: left promiscuous mode [ 102.759958][ T63] hsr_slave_1: left promiscuous mode [ 102.761941][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.764401][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.768009][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.770348][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.778273][ T63] veth1_macvtap: left promiscuous mode [ 102.780046][ T63] veth0_macvtap: left promiscuous mode [ 102.781847][ T63] veth1_vlan: left promiscuous mode [ 102.783596][ T63] veth0_vlan: left promiscuous mode [ 103.019642][ T63] team0 (unregistering): Port device team_slave_1 removed [ 103.042939][ T63] team0 (unregistering): Port device team_slave_0 removed [ 103.166573][ T6304] Bluetooth: hci3: command tx timeout [ 103.166880][ T64] Bluetooth: hci0: command tx timeout [ 103.166953][ T5988] Bluetooth: hci2: command tx timeout [ 103.178475][ T64] Bluetooth: hci1: command tx timeout [ 103.633211][ T6295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.640142][ T6295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.658842][ T6295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.699137][ T6295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.770501][ T6296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.780516][ T6296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.803097][ T6296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.819359][ T6296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.890505][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.919153][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.935012][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.937904][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.951802][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 2026/01/11 03:13:54 executed programs: 96 [ 103.960910][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.963889][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.982645][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.004939][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.008073][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.022632][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.025449][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.213160][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.251086][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.258785][ T6296] veth0_vlan: entered promiscuous mode [ 104.267489][ T6296] veth1_vlan: entered promiscuous mode [ 104.311155][ T6296] veth0_macvtap: entered promiscuous mode [ 104.323903][ T6296] veth1_macvtap: entered promiscuous mode [ 104.330241][ T6295] veth0_vlan: entered promiscuous mode [ 104.341520][ T6295] veth1_vlan: entered promiscuous mode [ 104.346648][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.357440][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.370609][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.373579][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.381665][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.385442][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.404336][ T6295] veth0_macvtap: entered promiscuous mode [ 104.414156][ T6295] veth1_macvtap: entered promiscuous mode [ 104.442766][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.444915][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.445775][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.464692][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.501360][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.501836][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.504954][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.510395][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.517574][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.522308][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.593325][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.603831][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.628606][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.631553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.260190][ T64] Bluetooth: hci2: command tx timeout [ 105.260249][ T6303] Bluetooth: hci0: command tx timeout [ 105.264455][ T5988] Bluetooth: hci1: command tx timeout [ 105.267631][ T6304] Bluetooth: hci3: command tx timeout [ 107.326200][ T5988] Bluetooth: hci2: command tx timeout [ 107.336860][ T6303] Bluetooth: hci0: command tx timeout [ 107.339293][ T6304] Bluetooth: hci3: command tx timeout [ 107.341691][ T5988] Bluetooth: hci1: command tx timeout 2026/01/11 03:13:59 executed programs: 702 2026/01/11 03:14:04 executed programs: 1465 [ 116.623859][T10223] ================================================================== [ 116.627212][T10223] BUG: KASAN: slab-use-after-free in nr_add_node+0x25db/0x2c00 [ 116.630276][T10223] Read of size 4 at addr ffff88802c4717b0 by task syz.2.1898/10223 [ 116.634963][T10223] [ 116.635997][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 116.636018][T10223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.636034][T10223] Call Trace: [ 116.636040][T10223] [ 116.636046][T10223] dump_stack_lvl+0x116/0x1f0 [ 116.636074][T10223] print_report+0xcd/0x630 [ 116.636098][T10223] ? __virt_addr_valid+0x81/0x610 [ 116.636114][T10223] ? __phys_addr+0xe8/0x180 [ 116.636130][T10223] ? nr_add_node+0x25db/0x2c00 [ 116.636148][T10223] kasan_report+0xe0/0x110 [ 116.636169][T10223] ? nr_add_node+0x25db/0x2c00 [ 116.636188][T10223] nr_add_node+0x25db/0x2c00 [ 116.636210][T10223] nr_rt_ioctl+0x11b7/0x29b0 [ 116.636232][T10223] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 116.636257][T10223] ? bpf_lsm_capable+0x9/0x10 [ 116.636276][T10223] ? security_capable+0x7e/0x260 [ 116.636295][T10223] nr_ioctl+0x19a/0x2d0 [ 116.636320][T10223] sock_do_ioctl+0x118/0x280 [ 116.636343][T10223] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.636367][T10223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.636387][T10223] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.636413][T10223] sock_ioctl+0x227/0x6b0 [ 116.636438][T10223] ? __pfx_sock_ioctl+0x10/0x10 [ 116.636459][T10223] ? hook_file_ioctl_common+0x144/0x410 [ 116.636489][T10223] ? selinux_file_ioctl+0x180/0x270 [ 116.636510][T10223] ? selinux_file_ioctl+0xb4/0x270 [ 116.636532][T10223] ? __pfx_sock_ioctl+0x10/0x10 [ 116.636554][T10223] __x64_sys_ioctl+0x18e/0x210 [ 116.636573][T10223] do_syscall_64+0xcd/0xf80 [ 116.636596][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.636613][T10223] RIP: 0033:0x7fb809b8f7c9 [ 116.636627][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.636644][T10223] RSP: 002b:00007fb80aa74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.636661][T10223] RAX: ffffffffffffffda RBX: 00007fb809de5fa0 RCX: 00007fb809b8f7c9 [ 116.636673][T10223] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 116.636683][T10223] RBP: 00007fb809c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.636693][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.636703][T10223] R13: 00007fb809de6038 R14: 00007fb809de5fa0 R15: 00007ffe85c7a8e8 [ 116.636720][T10223] [ 116.636726][T10223] [ 116.710121][T10223] Allocated by task 10207: [ 116.711517][T10223] kasan_save_stack+0x33/0x60 [ 116.713029][T10223] kasan_save_track+0x14/0x30 [ 116.714522][T10223] __kasan_kmalloc+0xaa/0xb0 [ 116.715991][T10223] nr_add_node+0xe4e/0x2c00 [ 116.717471][T10223] nr_rt_ioctl+0x11b7/0x29b0 [ 116.718920][T10223] nr_ioctl+0x19a/0x2d0 [ 116.720251][T10223] sock_do_ioctl+0x118/0x280 [ 116.721702][T10223] sock_ioctl+0x227/0x6b0 [ 116.723066][T10223] __x64_sys_ioctl+0x18e/0x210 [ 116.724580][T10223] do_syscall_64+0xcd/0xf80 [ 116.726007][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.727892][T10223] [ 116.728663][T10223] Freed by task 10223: [ 116.729943][T10223] kasan_save_stack+0x33/0x60 [ 116.731425][T10223] kasan_save_track+0x14/0x30 [ 116.732917][T10223] kasan_save_free_info+0x3b/0x60 [ 116.734490][T10223] __kasan_slab_free+0x5f/0x80 [ 116.736008][T10223] kfree+0x2f8/0x6e0 [ 116.737265][T10223] nr_add_node+0x23b9/0x2c00 [ 116.738741][T10223] nr_rt_ioctl+0x11b7/0x29b0 [ 116.740197][T10223] nr_ioctl+0x19a/0x2d0 [ 116.741500][T10223] sock_do_ioctl+0x118/0x280 [ 116.742950][T10223] sock_ioctl+0x227/0x6b0 [ 116.744323][T10223] __x64_sys_ioctl+0x18e/0x210 [ 116.745825][T10223] do_syscall_64+0xcd/0xf80 [ 116.747278][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.749162][T10223] [ 116.749921][T10223] The buggy address belongs to the object at ffff88802c471780 [ 116.749921][T10223] which belongs to the cache kmalloc-64 of size 64 [ 116.754114][T10223] The buggy address is located 48 bytes inside of [ 116.754114][T10223] freed 64-byte region [ffff88802c471780, ffff88802c4717c0) [ 116.758215][T10223] [ 116.758979][T10223] The buggy address belongs to the physical page: [ 116.760967][T10223] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c471c00 pfn:0x2c471 [ 116.764061][T10223] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 116.766544][T10223] page_type: f5(slab) [ 116.767828][T10223] raw: 00fff00000000200 ffff88801b4428c0 ffffea0000ce4110 ffffea0000a08a50 [ 116.770492][T10223] raw: ffff88802c471c00 000000000020001e 00000000f5000000 0000000000000000 [ 116.773319][T10223] page dumped because: kasan: bad access detected [ 116.775348][T10223] page_owner tracks the page as allocated [ 116.777204][T10223] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5953, tgid 5953 (syz-executor), ts 66314924908, free_ts 56317243004 [ 116.783114][T10223] post_alloc_hook+0x1af/0x220 [ 116.784682][T10223] get_page_from_freelist+0xd0b/0x31a0 [ 116.786492][T10223] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 116.788412][T10223] alloc_pages_mpol+0x1fb/0x550 [ 116.789948][T10223] new_slab+0x2c3/0x430 [ 116.791248][T10223] ___slab_alloc+0xe18/0x1c90 [ 116.792782][T10223] __slab_alloc.constprop.0+0x63/0x110 [ 116.794535][T10223] __kmalloc_noprof+0x4fc/0x910 [ 116.796465][T10223] tomoyo_encode2+0x100/0x3e0 [ 116.798362][T10223] tomoyo_encode+0x29/0x50 [ 116.800137][T10223] tomoyo_realpath_from_path+0x18f/0x6e0 [ 116.802357][T10223] tomoyo_mount_acl+0x1ae/0x850 [ 116.804295][T10223] tomoyo_mount_permission+0x16d/0x420 [ 116.806381][T10223] security_sb_mount+0x9b/0x260 [ 116.807959][T10223] path_mount+0x158/0x23a0 [ 116.809408][T10223] __x64_sys_mount+0x293/0x310 [ 116.810931][T10223] page last free pid 5914 tgid 5914 stack trace: [ 116.813086][T10223] __free_frozen_pages+0x7df/0x1170 [ 116.814763][T10223] __folio_put+0x329/0x450 [ 116.816238][T10223] anon_pipe_buf_release+0x40a/0x520 [ 116.818001][T10223] anon_pipe_read+0x5cd/0x1210 [ 116.819527][T10223] vfs_read+0xa98/0xcf0 [ 116.820875][T10223] ksys_read+0x1f8/0x250 [ 116.822235][T10223] do_syscall_64+0xcd/0xf80 [ 116.823691][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.825571][T10223] [ 116.826387][T10223] Memory state around the buggy address: [ 116.828200][T10223] ffff88802c471680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 116.830703][T10223] ffff88802c471700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 116.833247][T10223] >ffff88802c471780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 116.836008][T10223] ^ [ 116.837846][T10223] ffff88802c471800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 116.840305][T10223] ffff88802c471880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 116.842729][T10223] ================================================================== [ 116.845279][T10223] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.847512][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 116.850377][T10223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.853710][T10223] Call Trace: [ 116.854744][T10223] [ 116.855685][T10223] dump_stack_lvl+0x3d/0x1f0 [ 116.857145][T10223] vpanic+0x640/0x6f0 [ 116.858429][T10223] panic+0xca/0xd0 [ 116.859608][T10223] ? __pfx_panic+0x10/0x10 [ 116.861080][T10223] ? check_panic_on_warn+0x1f/0xb0 [ 116.862668][T10223] check_panic_on_warn+0xab/0xb0 [ 116.864264][T10223] end_report+0x107/0x160 [ 116.865639][T10223] kasan_report+0xee/0x110 [ 116.867077][T10223] ? nr_add_node+0x25db/0x2c00 [ 116.868632][T10223] nr_add_node+0x25db/0x2c00 [ 116.870107][T10223] nr_rt_ioctl+0x11b7/0x29b0 [ 116.871585][T10223] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 116.873203][T10223] ? bpf_lsm_capable+0x9/0x10 [ 116.874707][T10223] ? security_capable+0x7e/0x260 [ 116.876321][T10223] nr_ioctl+0x19a/0x2d0 [ 116.877673][T10223] sock_do_ioctl+0x118/0x280 [ 116.879153][T10223] ? __pfx_sock_do_ioctl+0x10/0x10 [ 116.880788][T10223] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.882383][T10223] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 116.884615][T10223] sock_ioctl+0x227/0x6b0 [ 116.886005][T10223] ? __pfx_sock_ioctl+0x10/0x10 [ 116.887597][T10223] ? hook_file_ioctl_common+0x144/0x410 [ 116.889355][T10223] ? selinux_file_ioctl+0x180/0x270 [ 116.890973][T10223] ? selinux_file_ioctl+0xb4/0x270 [ 116.892601][T10223] ? __pfx_sock_ioctl+0x10/0x10 [ 116.894214][T10223] __x64_sys_ioctl+0x18e/0x210 [ 116.895725][T10223] do_syscall_64+0xcd/0xf80 [ 116.897202][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.899086][T10223] RIP: 0033:0x7fb809b8f7c9 [ 116.900508][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.906666][T10223] RSP: 002b:00007fb80aa74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.909294][T10223] RAX: ffffffffffffffda RBX: 00007fb809de5fa0 RCX: 00007fb809b8f7c9 [ 116.911844][T10223] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 116.914266][T10223] RBP: 00007fb809c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.916756][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.919324][T10223] R13: 00007fb809de6038 R14: 00007fb809de5fa0 R15: 00007ffe85c7a8e8 [ 116.921852][T10223] [ 116.923608][T10223] Kernel Offset: disabled [ 116.925010][T10223] Rebooting in 86400 seconds..