[ 68.012688][ T43] audit: type=1400 audit(1789738123.683:205): avc: denied { transition } for pid=5950 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 68.014664][ T43] audit: type=1400 audit(1789738123.683:206): avc: denied { noatsecure } for pid=5950 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 68.014708][ T43] audit: type=1400 audit(1789738123.683:207): avc: denied { rlimitinh } for pid=5950 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 68.014742][ T43] audit: type=1400 audit(1789738123.683:208): avc: denied { siginh } for pid=5950 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.148318][ T1440] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.148355][ T1440] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.931341][ T43] audit: type=1400 audit(1789738128.603:209): avc: denied { write } for pid=5958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 72.994249][ T43] audit: type=1400 audit(1789738128.663:210): avc: denied { write } for pid=5961 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.118575][ T43] audit: type=1400 audit(1789738128.793:211): avc: denied { write } for pid=5964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.182867][ T43] audit: type=1400 audit(1789738128.853:212): avc: denied { write } for pid=5968 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:1874' (ED25519) to the list of known hosts.
[ 73.613250][ T43] audit: type=1400 audit(1789738129.283:213): avc: denied { write } for pid=5978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.659569][ T43] audit: type=1400 audit(1789738129.333:214): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.283366][ T43] audit: type=1400 audit(1789738129.953:215): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 74.343161][ T43] audit: type=1400 audit(1789738130.013:216): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/09/18 13:28:50 parsed 1 programs
2026/09/18 13:28:50 serving rpc on tcp://35205
[ 76.260424][ T1348] cfg80211: failed to load regulatory.db
[ 77.231423][ T43] audit: type=1400 audit(1789738132.903:217): avc: denied { read write } for pid=5999 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 77.231730][ T43] audit: type=1400 audit(1789738132.903:218): avc: denied { open } for pid=5999 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 77.258979][ T43] audit: type=1400 audit(1789738132.933:219): avc: denied { unlink } for pid=5999 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 77.688597][ T43] audit: type=1400 audit(1789738133.363:220): avc: denied { relabelto } for pid=6002 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 78.617173][ T5999] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 80.984529][ T43] audit: type=1401 audit(1789738136.663:221): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 81.230995][ T43] audit: type=1400 audit(1789738136.903:222): avc: denied { sys_module } for pid=6027 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 81.559280][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.559409][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.559507][ T6027] bridge_slave_0: entered allmulticast mode
[ 81.560846][ T6027] bridge_slave_0: entered promiscuous mode
[ 81.563406][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.563490][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.563592][ T6027] bridge_slave_1: entered allmulticast mode
[ 81.565207][ T6027] bridge_slave_1: entered promiscuous mode
[ 81.589074][ T6027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.591501][ T6027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.614084][ T6027] team0: Port device team_slave_0 added
[ 81.616618][ T6027] team0: Port device team_slave_1 added
[ 81.637406][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.637424][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.637445][ T6027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.638817][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.638830][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.638848][ T6027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.674164][ T6027] hsr_slave_0: entered promiscuous mode
[ 81.675021][ T6027] hsr_slave_1: entered promiscuous mode
[ 81.815015][ T43] audit: type=1400 audit(1789738137.493:223): avc: denied { write } for pid=6043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 81.858056][ T43] audit: type=1400 audit(1789738137.533:224): avc: denied { write } for pid=6046 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 81.965781][ T43] audit: type=1400 audit(1789738137.643:225): avc: denied { write } for pid=6049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.011180][ T43] audit: type=1400 audit(1789738137.683:226): avc: denied { write } for pid=6052 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.101943][ T43] audit: type=1400 audit(1789738137.773:227): avc: denied { write } for pid=6054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.149950][ T43] audit: type=1400 audit(1789738137.823:228): avc: denied { write } for pid=6057 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.179802][ T6027] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.182365][ T6027] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 82.182862][ T6027] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.185049][ T6027] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 82.187965][ T6027] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.197570][ T6027] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 82.198460][ T6027] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.202170][ T6027] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 82.220607][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.220705][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.220916][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.221125][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.226641][ T43] audit: type=1400 audit(1789738137.903:229): avc: denied { write } for pid=6059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.268141][ T6027] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.282122][ T74] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.282816][ T74] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.290813][ T43] audit: type=1400 audit(1789738137.963:230): avc: denied { write } for pid=6068 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.311663][ T6027] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.318967][ T74] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.319081][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.323570][ T74] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.323637][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.643013][ T6027] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.672940][ T6027] veth0_vlan: entered promiscuous mode
[ 82.685353][ T6027] veth1_vlan: entered promiscuous mode
[ 82.705857][ T6027] veth0_macvtap: entered promiscuous mode
[ 82.709529][ T6027] veth1_macvtap: entered promiscuous mode
[ 82.720392][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.725283][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.748341][ T5748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.748439][ T5748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.748674][ T5748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.748696][ T5748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.841190][ T5742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.911785][ T5742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.950197][ T5742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.994247][ T5742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.152178][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.154288][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.155102][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.156172][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.156675][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.960408][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.960429][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.980688][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.980713][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/18 13:29:00 executed programs: 0
[ 84.718912][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.720679][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.722265][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.723157][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.723744][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.084190][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.084274][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.086405][ T6179] bridge_slave_0: entered allmulticast mode
[ 85.087190][ T6179] bridge_slave_0: entered promiscuous mode
[ 85.088955][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.089016][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.089072][ T6179] bridge_slave_1: entered allmulticast mode
[ 85.090052][ T6179] bridge_slave_1: entered promiscuous mode
[ 85.108235][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.109687][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.121995][ T6179] team0: Port device team_slave_0 added
[ 85.123573][ T6179] team0: Port device team_slave_1 added
[ 85.146646][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.146669][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.146689][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.148075][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.148086][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.148103][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.189263][ T6179] hsr_slave_0: entered promiscuous mode
[ 85.190324][ T6179] hsr_slave_1: entered promiscuous mode
[ 85.191180][ T6179] debugfs: 'hsr0' already exists in 'hsr'
[ 85.191202][ T6179] Cannot create hsr debugfs directory
[ 85.709488][ T5742] bridge_slave_1: left allmulticast mode
[ 85.709513][ T5742] bridge_slave_1: left promiscuous mode
[ 85.710470][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.713423][ T5742] bridge_slave_0: left allmulticast mode
[ 85.713446][ T5742] bridge_slave_0: left promiscuous mode
[ 85.713635][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.830217][ T5742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 85.832793][ T5742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 85.834300][ T5742] bond0 (unregistering): Released all slaves
[ 85.927211][ T5742] hsr_slave_0: left promiscuous mode
[ 85.927851][ T5742] hsr_slave_1: left promiscuous mode
[ 85.928513][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 85.928529][ T5742] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 85.929287][ T5742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 85.929301][ T5742] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 85.936063][ T5742] veth1_macvtap: left promiscuous mode
[ 85.936098][ T5742] veth0_macvtap: left promiscuous mode
[ 85.936217][ T5742] veth1_vlan: left promiscuous mode
[ 85.936273][ T5742] veth0_vlan: left promiscuous mode
[ 86.103182][ T5742] team0 (unregistering): Port device team_slave_1 removed
[ 86.115538][ T5742] team0 (unregistering): Port device team_slave_0 removed
[ 86.204260][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2
[ 86.303998][ T43] kauditd_printk_skb: 20 callbacks suppressed
[ 86.304012][ T43] audit: type=1400 audit(1789738141.973:251): avc: denied { write } for pid=6203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.359625][ T43] audit: type=1400 audit(1789738142.033:252): avc: denied { write } for pid=6206 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.422054][ T6179] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.424561][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 86.425034][ T6179] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.429611][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 86.433939][ T6179] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.437961][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 86.438806][ T6179] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.444750][ T6179] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 86.744854][ T66] Bluetooth: hci0: command tx timeout
[ 86.753226][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.769507][ T43] audit: type=1400 audit(1789738142.443:253): avc: denied { write } for pid=6217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.770986][ T6179] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.779652][ T74] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.779737][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.783688][ T74] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.783769][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.861545][ T43] audit: type=1400 audit(1789738142.533:254): avc: denied { write } for pid=6220 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.949077][ T43] audit: type=1400 audit(1789738142.623:255): avc: denied { write } for pid=6224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 86.996981][ T43] audit: type=1400 audit(1789738142.673:256): avc: denied { write } for pid=6229 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 87.167760][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.202442][ T6179] veth0_vlan: entered promiscuous mode
[ 87.211395][ T6179] veth1_vlan: entered promiscuous mode
[ 87.234174][ T6179] veth0_macvtap: entered promiscuous mode
[ 87.237735][ T6179] veth1_macvtap: entered promiscuous mode
[ 87.250114][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.256860][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.285223][ T5748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.285250][ T5748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.285267][ T5748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.285284][ T5748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.308515][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.308533][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.323216][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.323253][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.349944][ T43] audit: type=1400 audit(1789738143.023:257): avc: denied { mount } for pid=6237 comm="syz.0.17" name="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 87.350153][ T43] audit: type=1400 audit(1789738143.023:258): avc: denied { search } for pid=6237 comm="syz.0.17" name="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 87.351798][ T43] audit: type=1400 audit(1789738143.023:259): avc: denied { search } for pid=6237 comm="syz.0.17" name="usb_gadget" dev="configfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 87.351872][ T43] audit: type=1400 audit(1789738143.023:260): avc: denied { write search } for pid=6237 comm="syz.0.17" name="usb_gadget" dev="configfs" ino=6334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 88.814847][ T66] Bluetooth: hci0: command tx timeout
[ 89.046585][ T6241] ==================================================================
[ 89.046600][ T6241] BUG: KASAN: slab-use-after-free in release_tty+0x5a8/0x5f0
[ 89.046626][ T6241] Write of size 8 at addr ffff888035607128 by task syz.0.18/6241
[ 89.046641][ T6241]
[ 89.046650][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 89.046672][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.046681][ T6241] Call Trace:
[ 89.046694][ T6241]
[ 89.046702][ T6241] dump_stack_lvl+0x100/0x190
[ 89.046729][ T6241] print_report+0x13d/0x4b0
[ 89.046756][ T6241] ? __virt_addr_valid+0x239/0x430
[ 89.046775][ T6241] ? release_tty+0x5a8/0x5f0
[ 89.046792][ T6241] kasan_report+0xdf/0x1c0
[ 89.046814][ T6241] ? release_tty+0x5a8/0x5f0
[ 89.046834][ T6241] release_tty+0x5a8/0x5f0
[ 89.046853][ T6241] tty_release_struct+0xb7/0xe0
[ 89.046872][ T6241] tty_release+0xd7a/0x1300
[ 89.046891][ T6241] ? ima_file_free+0xc6/0x340
[ 89.046911][ T6241] ? __pfx_tty_release+0x10/0x10
[ 89.046930][ T6241] __fput+0x3ff/0xb50
[ 89.046956][ T6241] task_work_run+0x150/0x240
[ 89.046982][ T6241] ? __pfx_task_work_run+0x10/0x10
[ 89.047009][ T6241] exit_to_user_mode_loop+0x1d8/0x700
[ 89.047032][ T6241] ? rcu_is_watching+0x13/0xc0
[ 89.047056][ T6241] do_syscall_64+0x661/0x790
[ 89.047083][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.047103][ T6241] RIP: 0033:0x7f2d49f9e0d9
[ 89.047118][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.047135][ T6241] RSP: 002b:00007ffeae8f1d68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 89.047155][ T6241] RAX: 0000000000000000 RBX: 00007f2d4a227da0 RCX: 00007f2d49f9e0d9
[ 89.047166][ T6241] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 89.047178][ T6241] RBP: 00007f2d4a227da0 R08: 0000000000000006 R09: 0000000000000000
[ 89.047193][ T6241] R10: 00007f2d4a227cb0 R11: 0000000000000246 R12: 0000000000015b6c
[ 89.047202][ T6241] R13: 00007f2d4a225fac R14: 0000000000015866 R15: 00007ffeae8f1e70
[ 89.047218][ T6241]
[ 89.047225][ T6241]
[ 89.047229][ T6241] Allocated by task 6242:
[ 89.047237][ T6241] kasan_save_stack+0x30/0x50
[ 89.047257][ T6241] kasan_save_track+0x14/0x30
[ 89.047272][ T6241] __kasan_kmalloc+0xaa/0xb0
[ 89.047289][ T6241] __kmalloc_cache_noprof+0x2f8/0x6d0
[ 89.047314][ T6241] gserial_alloc_line_no_console+0xac/0x710
[ 89.047332][ T6241] obex_alloc_inst+0x86/0x100
[ 89.047350][ T6241] try_get_usb_function_instance+0x136/0x1f0
[ 89.047368][ T6241] usb_get_function_instance+0x16/0x70
[ 89.047385][ T6241] function_make+0x18c/0x3f0
[ 89.047407][ T6241] configfs_mkdir+0x525/0xd40
[ 89.047424][ T6241] vfs_mkdir+0x364/0x850
[ 89.047439][ T6241] filename_mkdirat+0x48b/0x5e0
[ 89.047473][ T6241] __x64_sys_mkdirat+0x89/0xc0
[ 89.047497][ T6241] do_syscall_64+0x123/0x790
[ 89.047516][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.047532][ T6241]
[ 89.047536][ T6241] Freed by task 6242:
[ 89.047544][ T6241] kasan_save_stack+0x30/0x50
[ 89.047561][ T6241] kasan_save_track+0x14/0x30
[ 89.047577][ T6241] kasan_save_free_info+0x3b/0x70
[ 89.047602][ T6241] __kasan_slab_free+0x5f/0x80
[ 89.047621][ T6241] kfree+0x22b/0x6d0
[ 89.047643][ T6241] gserial_free_port+0x146/0x2f0
[ 89.047657][ T6241] gserial_free_line+0xf8/0x1e0
[ 89.047674][ T6241] obex_free_inst+0x3b/0x50
[ 89.047699][ T6241] usb_put_function_instance+0x97/0xc0
[ 89.047718][ T6241] config_item_cleanup+0x146/0x240
[ 89.047739][ T6241] config_item_put+0x93/0xb0
[ 89.047759][ T6241] configfs_rmdir+0x5e3/0x950
[ 89.047773][ T6241] vfs_rmdir+0x328/0x8a0
[ 89.047784][ T6241] filename_rmdir+0x31a/0x5c0
[ 89.047805][ T6241] __x64_sys_rmdir+0x46/0x70
[ 89.047827][ T6241] do_syscall_64+0x123/0x790
[ 89.047851][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.047867][ T6241]
[ 89.047872][ T6241] The buggy address belongs to the object at ffff888035607000
[ 89.047872][ T6241] which belongs to the cache kmalloc-2k of size 2048
[ 89.047887][ T6241] The buggy address is located 296 bytes inside of
[ 89.047887][ T6241] freed 2048-byte region [ffff888035607000, ffff888035607800)
[ 89.047905][ T6241]
[ 89.047910][ T6241] The buggy address belongs to the physical page:
[ 89.047919][ T6241] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35600
[ 89.047937][ T6241] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 89.047952][ T6241] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 89.047968][ T6241] page_type: f5(slab)
[ 89.047984][ T6241] raw: 00fff00000000040 ffff88801c042f00 dead000000000100 dead000000000122
[ 89.048000][ T6241] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 89.048017][ T6241] head: 00fff00000000040 ffff88801c042f00 dead000000000100 dead000000000122
[ 89.048034][ T6241] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 89.048051][ T6241] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 89.048068][ T6241] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 89.048079][ T6241] page dumped because: kasan: bad access detected
[ 89.048087][ T6241] page_owner tracks the page as allocated
[ 89.048094][ T6241] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 30, tgid 30 (kworker/1:0), ts 88104583819
[ 89.048148][ T6241] post_alloc_hook+0xfd/0x120
[ 89.048173][ T6241] get_page_from_freelist+0x110d/0x35d0
[ 89.048200][ T6241] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 89.048216][ T6241] new_slab+0xa9/0x6e0
[ 89.048242][ T6241] refill_objects+0xe3/0x410
[ 89.048255][ T6241] __pcs_replace_empty_main+0x35e/0x650
[ 89.048280][ T6241] __kmalloc_node_track_caller_noprof+0x6a8/0x870
[ 89.048299][ T6241] kmalloc_reserve+0xe8/0x350
[ 89.048325][ T6241] __alloc_skb+0x185/0x710
[ 89.048342][ T6241] mld_newpack.isra.0+0x18e/0xa20
[ 89.048362][ T6241] add_grhead+0x299/0x340
[ 89.048384][ T6241] add_grec+0x1389/0x1930
[ 89.048406][ T6241] mld_send_initial_cr+0x156/0x320
[ 89.048433][ T6241] mld_dad_work+0x32/0x1f0
[ 89.048452][ T6241] process_one_work+0xac7/0x1b10
[ 89.048475][ T6241] worker_thread+0x5ef/0xe50
[ 89.048500][ T6241] page last free pid 6179 tgid 6179 ts 86769812000 stack trace:
[ 89.048514][ T6241] __free_frozen_pages+0x79f/0x10f0
[ 89.048606][ T6241] qlist_free_all+0x47/0xf0
[ 89.048624][ T6241] kasan_quarantine_reduce+0x1a0/0x1f0
[ 89.048640][ T6241] __kasan_slab_alloc+0x69/0x90
[ 89.048659][ T6241] __kmalloc_node_noprof+0x2df/0x880
[ 89.048695][ T6241] qdisc_alloc+0xbb/0xb30
[ 89.048719][ T6241] qdisc_create_dflt+0x93/0x490
[ 89.048742][ T6241] dev_activate+0x64f/0xce0
[ 89.048767][ T6241] __dev_open+0x490/0x8f0
[ 89.048790][ T6241] __dev_change_flags+0x596/0x850
[ 89.048810][ T6241] netif_change_flags+0x8d/0x160
[ 89.048829][ T6241] do_setlink.isra.0+0x1ac4/0x3e60
[ 89.048850][ T6241] rtnl_newlink+0x13c1/0x2620
[ 89.048871][ T6241] rtnetlink_rcv_msg+0x95e/0xe90
[ 89.048893][ T6241] netlink_rcv_skb+0x159/0x420
[ 89.048912][ T6241] netlink_unicast+0x585/0x850
[ 89.048930][ T6241]
[ 89.048934][ T6241] Memory state around the buggy address:
[ 89.048945][ T6241] ffff888035607000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.048957][ T6241] ffff888035607080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.048969][ T6241] >ffff888035607100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.048978][ T6241] ^
[ 89.048987][ T6241] ffff888035607180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.048999][ T6241] ffff888035607200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.049009][ T6241] ==================================================================
[ 89.049020][ T6241] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 89.343548][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 89.347745][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 89.351787][ T6241] Call Trace:
[ 89.353121][ T6241]
[ 89.354307][ T6241] dump_stack_lvl+0x100/0x190
[ 89.356317][ T6241] vpanic+0x553/0x970
[ 89.357930][ T6241] ? __pfx_vpanic+0x10/0x10
[ 89.359746][ T6241] ? __pfx_vprintk_emit+0x10/0x10
[ 89.361762][ T6241] ? release_tty+0x5a8/0x5f0
[ 89.363696][ T6241] panic+0xd1/0xe0
[ 89.365184][ T6241] ? __pfx_panic+0x10/0x10
[ 89.366962][ T6241] ? release_tty+0x5a8/0x5f0
[ 89.368683][ T6241] check_panic_on_warn.cold+0x19/0x34
[ 89.370553][ T6241] end_report.part.0+0x3a/0x90
[ 89.372305][ T6241] kasan_report.cold+0xe/0x18
[ 89.374134][ T6241] ? release_tty+0x5a8/0x5f0
[ 89.375613][ T6241] release_tty+0x5a8/0x5f0
[ 89.377160][ T6241] tty_release_struct+0xb7/0xe0
[ 89.378732][ T6241] tty_release+0xd7a/0x1300
[ 89.380226][ T6241] ? ima_file_free+0xc6/0x340
[ 89.381720][ T6241] ? __pfx_tty_release+0x10/0x10
[ 89.383309][ T6241] __fput+0x3ff/0xb50
[ 89.384713][ T6241] task_work_run+0x150/0x240
[ 89.386576][ T6241] ? __pfx_task_work_run+0x10/0x10
[ 89.388623][ T6241] exit_to_user_mode_loop+0x1d8/0x700
[ 89.390778][ T6241] ? rcu_is_watching+0x13/0xc0
[ 89.392744][ T6241] do_syscall_64+0x661/0x790
[ 89.394692][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.396658][ T6241] RIP: 0033:0x7f2d49f9e0d9
[ 89.398159][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.404698][ T6241] RSP: 002b:00007ffeae8f1d68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 89.407316][ T6241] RAX: 0000000000000000 RBX: 00007f2d4a227da0 RCX: 00007f2d49f9e0d9
[ 89.410180][ T6241] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 89.412658][ T6241] RBP: 00007f2d4a227da0 R08: 0000000000000006 R09: 0000000000000000
[ 89.415157][ T6241] R10: 00007f2d4a227cb0 R11: 0000000000000246 R12: 0000000000015b6c
[ 89.418078][ T6241] R13: 00007f2d4a225fac R14: 0000000000015866 R15: 00007ffeae8f1e70
[ 89.421367][ T6241]
[ 89.423097][ T6241] Kernel Offset: disabled
[ 89.424526][ T6241] Rebooting in 86400 seconds..