[ 82.672508][ T40] audit: type=1400 audit(1780200111.222:208): avc: denied { transition } for pid=5975 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 82.682219][ T40] audit: type=1400 audit(1780200111.222:209): avc: denied { noatsecure } for pid=5975 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 82.689799][ T40] audit: type=1400 audit(1780200111.222:210): avc: denied { rlimitinh } for pid=5975 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 82.696308][ T40] audit: type=1400 audit(1780200111.222:211): avc: denied { siginh } for pid=5975 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 86.485591][ T40] audit: type=1400 audit(1780200115.032:212): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.536409][ T40] audit: type=1400 audit(1780200115.082:213): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.650696][ T9] cfg80211: failed to load regulatory.db
[ 87.190426][ T40] audit: type=1400 audit(1780200115.732:214): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.255777][ T40] audit: type=1400 audit(1780200115.802:215): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.322792][ T40] audit: type=1400 audit(1780200115.872:216): avc: denied { write } for pid=5994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.389365][ T40] audit: type=1400 audit(1780200115.932:217): avc: denied { write } for pid=5997 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:50411' (ED25519) to the list of known hosts.
2026/05/31 04:01:58 parsed 1 programs
[ 89.820601][ T40] kauditd_printk_skb: 2 callbacks suppressed
[ 89.820613][ T40] audit: type=1400 audit(1780200118.372:220): avc: denied { node_bind } for pid=6013 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 92.160612][ T40] audit: type=1400 audit(1780200120.712:221): avc: denied { read write } for pid=6022 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 92.171246][ T40] audit: type=1400 audit(1780200120.712:222): avc: denied { open } for pid=6022 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 92.241814][ T40] audit: type=1400 audit(1780200120.792:223): avc: denied { unlink } for pid=6022 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 92.597150][ T40] audit: type=1400 audit(1780200121.142:224): avc: denied { relabelto } for pid=6026 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 93.322041][ T6022] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.506070][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.509409][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.531426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.533878][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.931219][ T40] audit: type=1401 audit(1780200124.482:225): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 96.993725][ T40] audit: type=1400 audit(1780200125.542:226): avc: denied { sys_module } for pid=6086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 97.330179][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.333293][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.336329][ T6086] bridge_slave_0: entered allmulticast mode
[ 97.346761][ T6086] bridge_slave_0: entered promiscuous mode
[ 97.351517][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.354606][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.357643][ T6086] bridge_slave_1: entered allmulticast mode
[ 97.361113][ T6086] bridge_slave_1: entered promiscuous mode
[ 97.384249][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.389753][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.410073][ T6086] team0: Port device team_slave_0 added
[ 97.414111][ T6086] team0: Port device team_slave_1 added
[ 97.430418][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.433565][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.445600][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.452029][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.454798][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.465324][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.502082][ T6086] hsr_slave_0: entered promiscuous mode
[ 97.505088][ T6086] hsr_slave_1: entered promiscuous mode
[ 97.645932][ T40] audit: type=1400 audit(1780200126.192:227): avc: denied { write } for pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 97.707300][ T40] audit: type=1400 audit(1780200126.252:228): avc: denied { write } for pid=6105 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 97.813852][ T40] audit: type=1400 audit(1780200126.362:229): avc: denied { write } for pid=6107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 97.878862][ T40] audit: type=1400 audit(1780200126.422:230): avc: denied { write } for pid=6110 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 97.959338][ T40] audit: type=1400 audit(1780200126.502:231): avc: denied { write } for pid=6112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 98.018861][ T40] audit: type=1400 audit(1780200126.562:232): avc: denied { write } for pid=6116 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 98.093213][ T40] audit: type=1400 audit(1780200126.642:233): avc: denied { write } for pid=6118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 98.135312][ T6086] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.141008][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 98.144556][ T6086] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.148564][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 98.152013][ T6086] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.158275][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 98.164726][ T6086] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.166983][ T40] audit: type=1400 audit(1780200126.712:234): avc: denied { write } for pid=6121 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 98.175454][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 98.237697][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.254447][ T6086] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.262418][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.265223][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.273277][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.276133][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.539984][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.567938][ T6086] veth0_vlan: entered promiscuous mode
[ 98.573967][ T6086] veth1_vlan: entered promiscuous mode
[ 98.588931][ T6086] veth0_macvtap: entered promiscuous mode
[ 98.594570][ T6086] veth1_macvtap: entered promiscuous mode
[ 98.603225][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.608758][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.614599][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.617355][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.621743][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.624462][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.685144][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.688372][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.691946][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.696487][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.702239][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.721612][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.788157][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.861562][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.951490][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/31 04:02:07 executed programs: 0
[ 99.316155][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.320010][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.323089][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.326663][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.331306][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.689813][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.692648][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.695023][ T6202] bridge_slave_0: entered allmulticast mode
[ 99.697778][ T6202] bridge_slave_0: entered promiscuous mode
[ 99.702627][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.704949][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.707359][ T6202] bridge_slave_1: entered allmulticast mode
[ 99.710270][ T6202] bridge_slave_1: entered promiscuous mode
[ 99.725481][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.731082][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.747551][ T6202] team0: Port device team_slave_0 added
[ 99.751484][ T6202] team0: Port device team_slave_1 added
[ 99.765474][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.767724][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.776028][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.781278][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.783902][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.793821][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.831797][ T6202] hsr_slave_0: entered promiscuous mode
[ 99.834660][ T6202] hsr_slave_1: entered promiscuous mode
[ 99.837262][ T6202] debugfs: 'hsr0' already exists in 'hsr'
[ 99.839586][ T6202] Cannot create hsr debugfs directory
[ 101.349447][ T5098] Bluetooth: hci0: command tx timeout
[ 102.060547][ T79] bridge_slave_1: left allmulticast mode
[ 102.062431][ T79] bridge_slave_1: left promiscuous mode
[ 102.064293][ T79] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.067889][ T79] bridge_slave_0: left allmulticast mode
[ 102.070233][ T79] bridge_slave_0: left promiscuous mode
[ 102.072134][ T79] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.188385][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.194159][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.198406][ T79] bond0 (unregistering): Released all slaves
[ 102.286758][ T40] kauditd_printk_skb: 18 callbacks suppressed
[ 102.286774][ T40] audit: type=1400 audit(1780200130.832:253): avc: denied { write } for pid=6228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.333862][ T40] audit: type=1400 audit(1780200130.882:254): avc: denied { write } for pid=6231 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.369308][ T79] hsr_slave_0: left promiscuous mode
[ 102.372629][ T79] hsr_slave_1: left promiscuous mode
[ 102.375338][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.378333][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.385852][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.388856][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.397642][ T79] veth1_macvtap: left promiscuous mode
[ 102.400157][ T79] veth0_macvtap: left promiscuous mode
[ 102.402537][ T79] veth1_vlan: left promiscuous mode
[ 102.404710][ T79] veth0_vlan: left promiscuous mode
[ 102.560024][ T79] team0 (unregistering): Port device team_slave_1 removed
[ 102.566866][ T79] team0 (unregistering): Port device team_slave_0 removed
[ 102.645566][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2
[ 102.724333][ T40] audit: type=1400 audit(1780200131.272:255): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.786940][ T40] audit: type=1400 audit(1780200131.332:256): avc: denied { write } for pid=6237 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.901423][ T40] audit: type=1400 audit(1780200131.452:257): avc: denied { write } for pid=6240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 102.941878][ T40] audit: type=1400 audit(1780200131.492:258): avc: denied { write } for pid=6243 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 103.008352][ T40] audit: type=1400 audit(1780200131.552:259): avc: denied { write } for pid=6245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 103.055451][ T40] audit: type=1400 audit(1780200131.602:260): avc: denied { write } for pid=6248 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 103.081661][ T6202] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.085956][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.088782][ T6202] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.095408][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.098154][ T6202] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.102158][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 103.104734][ T6202] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.108625][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 103.172574][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.181655][ T6202] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.189120][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.192118][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.200350][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.202566][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.429335][ T5098] Bluetooth: hci0: command tx timeout
[ 103.551020][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.590557][ T6202] veth0_vlan: entered promiscuous mode
[ 103.595826][ T6202] veth1_vlan: entered promiscuous mode
[ 103.611243][ T6202] veth0_macvtap: entered promiscuous mode
[ 103.615589][ T6202] veth1_macvtap: entered promiscuous mode
[ 103.623557][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.631936][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.638174][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.641901][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.646374][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.650359][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.691977][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.695176][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.710725][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.713215][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.746247][ T40] audit: type=1400 audit(1780200132.292:261): avc: denied { write } for pid=6266 comm="syz.0.17" name="/" dev="9p" ino=63458435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 103.753357][ T40] audit: type=1400 audit(1780200132.292:262): avc: denied { add_name } for pid=6266 comm="syz.0.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 103.805478][ T6267] ==================================================================
[ 103.808005][ T6267] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x18a/0x1d0
[ 103.810801][ T6267] Read of size 8 at addr ffff888028092f58 by task syz.0.17/6267
[ 103.814333][ T6267]
[ 103.815495][ T6267] CPU: 3 UID: 0 PID: 6267 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 103.815515][ T6267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.815525][ T6267] Call Trace:
[ 103.815531][ T6267]
[ 103.815537][ T6267] dump_stack_lvl+0x100/0x190
[ 103.815558][ T6267] print_report+0x13d/0x4b0
[ 103.815582][ T6267] ? __virt_addr_valid+0x239/0x430
[ 103.815600][ T6267] ? __list_del_entry_valid_or_report+0x18a/0x1d0
[ 103.815617][ T6267] kasan_report+0xdf/0x1d0
[ 103.815635][ T6267] ? __list_del_entry_valid_or_report+0x18a/0x1d0
[ 103.815654][ T6267] __list_del_entry_valid_or_report+0x18a/0x1d0
[ 103.815671][ T6267] netfs_clear_subrequests+0x98/0x260
[ 103.815692][ T6267] netfs_unbuffered_write+0x1358/0x21a0
[ 103.815713][ T6267] ? __pfx_netfs_unbuffered_write+0x10/0x10
[ 103.815732][ T6267] ? rolling_buffer_init+0x8a/0xb0
[ 103.815751][ T6267] ? netfs_create_write_req+0x527/0x860
[ 103.815773][ T6267] netfs_unbuffered_write_iter_locked+0x7e2/0xa90
[ 103.815793][ T6267] netfs_unbuffered_write_iter+0x442/0x740
[ 103.815811][ T6267] v9fs_file_write_iter+0xbf/0x100
[ 103.815832][ T6267] vfs_write+0x6ac/0x1070
[ 103.815849][ T6267] ? __pfx_v9fs_file_write_iter+0x10/0x10
[ 103.815869][ T6267] ? __pfx_vfs_write+0x10/0x10
[ 103.815891][ T6267] ksys_write+0x12a/0x250
[ 103.815908][ T6267] ? __pfx_ksys_write+0x10/0x10
[ 103.815924][ T6267] ? rcu_is_watching+0x12/0xc0
[ 103.815947][ T6267] do_syscall_64+0x115/0x870
[ 103.815967][ T6267] ? clear_bhb_loop+0x40/0x90
[ 103.815985][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.816000][ T6267] RIP: 0033:0x7fbdafd9ce59
[ 103.816013][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.816028][ T6267] RSP: 002b:00007fbdb0bf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.816044][ T6267] RAX: ffffffffffffffda RBX: 00007fbdb0015fa0 RCX: 00007fbdafd9ce59
[ 103.816054][ T6267] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003
[ 103.816064][ T6267] RBP: 00007fbdafe32d6f R08: 0000000000000000 R09: 0000000000000000
[ 103.816073][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.816082][ T6267] R13: 00007fbdb0016038 R14: 00007fbdb0015fa0 R15: 00007ffe0da23988
[ 103.816096][ T6267]
[ 103.816102][ T6267]
[ 103.904089][ T6267] Allocated by task 6267:
[ 103.905816][ T6267] kasan_save_stack+0x30/0x50
[ 103.907687][ T6267] kasan_save_track+0x14/0x30
[ 103.909555][ T6267] __kasan_slab_alloc+0x89/0x90
[ 103.911529][ T6267] kmem_cache_alloc_noprof+0x241/0x6e0
[ 103.913706][ T6267] mempool_alloc_noprof+0x1b7/0x310
[ 103.915778][ T6267] netfs_alloc_subrequest+0xc1/0x3c0
[ 103.917891][ T6267] netfs_prepare_write+0x76/0x780
[ 103.919891][ T6267] netfs_unbuffered_write+0x7b8/0x21a0
[ 103.922049][ T6267] netfs_unbuffered_write_iter_locked+0x7e2/0xa90
[ 103.924566][ T6267] netfs_unbuffered_write_iter+0x442/0x740
[ 103.926867][ T6267] v9fs_file_write_iter+0xbf/0x100
[ 103.928904][ T6267] vfs_write+0x6ac/0x1070
[ 103.930633][ T6267] ksys_write+0x12a/0x250
[ 103.932387][ T6267] do_syscall_64+0x115/0x870
[ 103.934045][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.936161][ T6267]
[ 103.937129][ T6267] Freed by task 6267:
[ 103.938736][ T6267] kasan_save_stack+0x30/0x50
[ 103.940600][ T6267] kasan_save_track+0x14/0x30
[ 103.942477][ T6267] kasan_save_free_info+0x3b/0x70
[ 103.944087][ T6267] __kasan_slab_free+0x5f/0x80
[ 103.945971][ T6267] kmem_cache_free+0x127/0x6c0
[ 103.947896][ T6267] mempool_free+0xde/0x130
[ 103.949717][ T6267] netfs_put_subrequest+0x282/0x4c0
[ 103.951645][ T6267] netfs_unbuffered_write+0x1420/0x21a0
[ 103.953329][ T6267] netfs_unbuffered_write_iter_locked+0x7e2/0xa90
[ 103.955823][ T6267] netfs_unbuffered_write_iter+0x442/0x740
[ 103.957777][ T6267] v9fs_file_write_iter+0xbf/0x100
[ 103.959634][ T6267] vfs_write+0x6ac/0x1070
[ 103.961352][ T6267] ksys_write+0x12a/0x250
[ 103.963076][ T6267] do_syscall_64+0x115/0x870
[ 103.964811][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.966775][ T6267]
[ 103.967740][ T6267] The buggy address belongs to the object at ffff888028092f00
[ 103.967740][ T6267] which belongs to the cache netfs_subrequest of size 200
[ 103.973296][ T6267] The buggy address is located 88 bytes inside of
[ 103.973296][ T6267] freed 200-byte region [ffff888028092f00, ffff888028092fc8)
[ 103.978557][ T6267]
[ 103.979532][ T6267] The buggy address belongs to the physical page:
[ 103.982034][ T6267] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880280932c0 pfn:0x28092
[ 103.985529][ T6267] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 103.988826][ T6267] memcg:ffff8880280920d9
[ 103.990525][ T6267] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 103.993828][ T6267] page_type: f5(slab)
[ 103.995426][ T6267] raw: 00fff00000000240 ffff88801fad1680 ffff888022be5408 ffff888022be5408
[ 103.998714][ T6267] raw: ffff8880280932c0 000001400019000f 00000000f5000000 ffff8880280920d9
[ 104.001705][ T6267] head: 00fff00000000240 ffff88801fad1680 ffff888022be5408 ffff888022be5408
[ 104.005063][ T6267] head: ffff8880280932c0 000001400019000f 00000000f5000000 ffff8880280920d9
[ 104.008442][ T6267] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 104.011409][ T6267] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 104.014743][ T6267] page dumped because: kasan: bad access detected
[ 104.017307][ T6267] page_owner tracks the page as allocated
[ 104.019142][ T6267] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2880(GFP_NOWAIT|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6267, tgid 6266 (syz.0.17), ts 103792298291, free_ts 103737337363
[ 104.026594][ T6267] post_alloc_hook+0xfd/0x120
[ 104.028203][ T6267] get_page_from_freelist+0x11a6/0x3410
[ 104.030396][ T6267] __alloc_frozen_pages_noprof+0x27c/0x2bc0
[ 104.032712][ T6267] new_slab+0xa6/0x6c0
[ 104.034338][ T6267] refill_objects+0x277/0x420
[ 104.036196][ T6267] __pcs_replace_empty_main+0x375/0x650
[ 104.038378][ T6267] kmem_cache_alloc_noprof+0x480/0x6e0
[ 104.040501][ T6267] mempool_alloc_noprof+0x1b7/0x310
[ 104.042548][ T6267] netfs_alloc_subrequest+0xc1/0x3c0
[ 104.044623][ T6267] netfs_prepare_write+0x76/0x780
[ 104.046619][ T6267] netfs_unbuffered_write+0x7b8/0x21a0
[ 104.048762][ T6267] netfs_unbuffered_write_iter_locked+0x7e2/0xa90
[ 104.051290][ T6267] netfs_unbuffered_write_iter+0x442/0x740
[ 104.053668][ T6267] v9fs_file_write_iter+0xbf/0x100
[ 104.055710][ T6267] vfs_write+0x6ac/0x1070
[ 104.057470][ T6267] ksys_write+0x12a/0x250
[ 104.059238][ T6267] page last free pid 6266 tgid 6266 stack trace:
[ 104.061740][ T6267] __free_frozen_pages+0x794/0x10a0
[ 104.063815][ T6267] qlist_free_all+0x47/0xf0
[ 104.065629][ T6267] kasan_quarantine_reduce+0x1a0/0x1f0
[ 104.067812][ T6267] __kasan_slab_alloc+0x69/0x90
[ 104.069682][ T6267] __kmalloc_noprof+0x2b9/0x850
[ 104.071655][ T6267] tomoyo_realpath_from_path+0xb6/0x690
[ 104.073853][ T6267] tomoyo_check_open_permission+0x2af/0x3c0
[ 104.076195][ T6267] tomoyo_file_open+0x6b/0x90
[ 104.078095][ T6267] security_file_open+0xb5/0x1e0
[ 104.080045][ T6267] do_dentry_open+0x588/0x14d0
[ 104.081946][ T6267] vfs_open+0x82/0x3f0
[ 104.083558][ T6267] path_openat+0x208c/0x31a0
[ 104.085390][ T6267] do_file_open+0x20e/0x430
[ 104.087193][ T6267] do_sys_openat2+0x10d/0x1e0
[ 104.089065][ T6267] __x64_sys_openat+0x12d/0x210
[ 104.091009][ T6267] do_syscall_64+0x115/0x870
[ 104.092847][ T6267]
[ 104.093813][ T6267] Memory state around the buggy address:
[ 104.096005][ T6267] ffff888028092e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.099124][ T6267] ffff888028092e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.102247][ T6267] >ffff888028092f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.105345][ T6267] ^
[ 104.107636][ T6267] ffff888028092f80: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[ 104.110765][ T6267] ffff888028093000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 104.113876][ T6267] ==================================================================
[ 104.120128][ T6267] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.122972][ T6267] CPU: 3 UID: 0 PID: 6267 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 104.126497][ T6267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.130407][ T6267] Call Trace:
[ 104.131743][ T6267]
[ 104.132917][ T6267] dump_stack_lvl+0x100/0x190
[ 104.134800][ T6267] vpanic+0x552/0x970
[ 104.136398][ T6267] ? __pfx_vpanic+0x10/0x10
[ 104.138196][ T6267] ? mark_held_locks+0x40/0x70
[ 104.140082][ T6267] ? __list_del_entry_valid_or_report+0x18a/0x1d0
[ 104.142582][ T6267] panic+0xd1/0xe0
[ 104.144066][ T6267] ? __pfx_panic+0x10/0x10
[ 104.145837][ T6267] ? __list_del_entry_valid_or_report+0x18a/0x1d0
[ 104.148330][ T6267] ? preempt_schedule_common+0x42/0xc0
[ 104.150466][ T6267] ? check_panic_on_warn+0x1f/0x90
[ 104.152479][ T6267] check_panic_on_warn.cold+0x19/0x34
[ 104.154560][ T6267] end_report.part.0+0x3a/0x90
[ 104.156016][ T6267] kasan_report.cold+0xe/0x18
[ 104.157933][ T6267] ? __list_del_entry_valid_or_report+0x18a/0x1d0
[ 104.160433][ T6267] __list_del_entry_valid_or_report+0x18a/0x1d0
[ 104.162878][ T6267] netfs_clear_subrequests+0x98/0x260
[ 104.164989][ T6267] netfs_unbuffered_write+0x1358/0x21a0
[ 104.167155][ T6267] ? __pfx_netfs_unbuffered_write+0x10/0x10
[ 104.169508][ T6267] ? rolling_buffer_init+0x8a/0xb0
[ 104.171548][ T6267] ? netfs_create_write_req+0x527/0x860
[ 104.173728][ T6267] netfs_unbuffered_write_iter_locked+0x7e2/0xa90
[ 104.176240][ T6267] netfs_unbuffered_write_iter+0x442/0x740
[ 104.178570][ T6267] v9fs_file_write_iter+0xbf/0x100
[ 104.180587][ T6267] vfs_write+0x6ac/0x1070
[ 104.182302][ T6267] ? __pfx_v9fs_file_write_iter+0x10/0x10
[ 104.184375][ T6267] ? __pfx_vfs_write+0x10/0x10
[ 104.186004][ T6267] ksys_write+0x12a/0x250
[ 104.187730][ T6267] ? __pfx_ksys_write+0x10/0x10
[ 104.189738][ T6267] ? rcu_is_watching+0x12/0xc0
[ 104.191649][ T6267] do_syscall_64+0x115/0x870
[ 104.193423][ T6267] ? clear_bhb_loop+0x40/0x90
[ 104.194916][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.197314][ T6267] RIP: 0033:0x7fbdafd9ce59
[ 104.199123][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.206068][ T6267] RSP: 002b:00007fbdb0bf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 104.209322][ T6267] RAX: ffffffffffffffda RBX: 00007fbdb0015fa0 RCX: 00007fbdafd9ce59
[ 104.212016][ T6267] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003
[ 104.215174][ T6267] RBP: 00007fbdafe32d6f R08: 0000000000000000 R09: 0000000000000000
[ 104.218011][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.221039][ T6267] R13: 00007fbdb0016038 R14: 00007fbdb0015fa0 R15: 00007ffe0da23988
[ 104.224129][ T6267]
[ 104.226076][ T6267] Kernel Offset: disabled
[ 104.227822][ T6267] Rebooting in 86400 seconds..