[ 84.476032][ T40] audit: type=1400 audit(1780108504.085:208): avc: denied { transition } for pid=5970 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.487824][ T40] audit: type=1400 audit(1780108504.085:209): avc: denied { noatsecure } for pid=5970 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.496009][ T40] audit: type=1400 audit(1780108504.095:210): avc: denied { rlimitinh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.503646][ T40] audit: type=1400 audit(1780108504.095:211): avc: denied { siginh } for pid=5970 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xae000) [ 85.258939][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.261552][ T1134] ata1: failed to read log page 10h (errno=-5) [ 85.263971][ T1134] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 85.266707][ T1134] ata1.00: irq_stat 0x41000000 [ 85.268885][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.271415][ T1134] ata1.00: cmd 61/70:70:a6:af:08/05:00:00:00:00/40 tag 14 ncq dma 712704 out [ 85.271415][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.278598][ T1134] ata1.00: status: { DRDY } [ 85.280497][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.282967][ T1134] ata1.00: cmd 61/20:78:16:b5:08/0c:00:00:00:00/40 tag 15 ncq dma 1589248 ou [ 85.282967][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.288821][ T1134] ata1.00: status: { DRDY } [ 85.294125][ T1134] ata1.00: configured for UDMA/100 [ 85.296777][ T1134] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 85.399322][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.402249][ T1134] ata1: failed to read log page 10h (errno=-5) [ 85.404930][ T1134] ata1.00: exception Emask 0x1 SAct 0x70 SErr 0x0 action 0x0 [ 85.408311][ T1134] ata1.00: irq_stat 0x40000000 [ 85.410331][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.412213][ T1134] ata1.00: cmd 61/00:20:36:01:09/20:00:00:00:00/40 tag 4 ncq dma 4194304 ou [ 85.412213][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.417434][ T1134] ata1.00: status: { DRDY } [ 85.419182][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.421430][ T1134] ata1.00: cmd 61/00:28:36:21:09/20:00:00:00:00/40 tag 5 ncq dma 4194304 ou [ 85.421430][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.426572][ T1134] ata1.00: status: { DRDY } [ 85.428549][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.430904][ T1134] ata1.00: cmd 61/00:30:36:41:09/20:00:00:00:00/40 tag 6 ncq dma 4194304 ou [ 85.430904][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.436573][ T1134] ata1.00: status: { DRDY } [ 85.439980][ T1134] ata1.00: configured for UDMA/100 [ 85.442854][ T1134] ata1: EH complete [ 86.760593][ T1352] cfg80211: failed to load regulatory.db [ 87.470950][ T40] audit: type=1400 audit(1780108507.085:212): avc: denied { write } for pid=5974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.536524][ T40] audit: type=1400 audit(1780108507.145:213): avc: denied { write } for pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.352537][ T40] audit: type=1400 audit(1780108507.965:214): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.400186][ T40] audit: type=1400 audit(1780108508.015:215): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.344142][ T40] audit: type=1400 audit(1780108508.955:216): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.398781][ T40] audit: type=1400 audit(1780108509.015:217): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.622840][ T40] audit: type=1400 audit(1780108509.235:218): avc: denied { write } for pid=5996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.670170][ T40] audit: type=1400 audit(1780108509.285:219): avc: denied { write } for pid=5999 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1ae000) [ 90.841624][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 90.846804][ T1134] ata1: failed to read log page 10h (errno=-5) [ 90.850025][ T1134] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 90.852675][ T1134] ata1.00: irq_stat 0x41000000 [ 90.854219][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 90.856136][ T1134] ata1.00: cmd 61/70:58:66:27:08/0d:00:00:00:00/40 tag 11 ncq dma 1761280 ou [ 90.856136][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 90.862505][ T1134] ata1.00: status: { DRDY } [ 90.864596][ T1134] ata1.00: error: { ABRT } [ 90.866432][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 90.870409][ T1134] ata1.00: cmd 61/08:60:36:c1:09/00:00:00:00:00/40 tag 12 ncq dma 4096 out [ 90.870409][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) Warning: Permanently added '[localhost]:13820' (ED25519) to the list of known hosts. [ 90.877769][ T1134] ata1.00: status: { DRDY } [ 90.879727][ T1134] ata1.00: error: { ABRT } [ 90.882398][ T1134] ata1.00: configured for UDMA/100 [ 90.885057][ T1134] ata1: EH complete 2026/05/30 02:35:12 parsed 1 programs [ 92.476851][ T40] audit: type=1400 audit(1780108512.085:220): avc: denied { node_bind } for pid=6010 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 95.169138][ T40] audit: type=1400 audit(1780108514.785:221): avc: denied { read write } for pid=6021 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.179802][ T40] audit: type=1400 audit(1780108514.785:222): avc: denied { open } for pid=6021 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.220918][ T40] audit: type=1400 audit(1780108514.835:223): avc: denied { unlink } for pid=6021 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.561595][ T40] audit: type=1400 audit(1780108515.175:224): avc: denied { relabelto } for pid=6024 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 96.294642][ T6021] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.683327][ T40] audit: type=1400 audit(1780108518.295:225): avc: denied { sys_module } for pid=6035 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.034503][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.037744][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.041208][ T6035] bridge_slave_0: entered allmulticast mode [ 99.045283][ T6035] bridge_slave_0: entered promiscuous mode [ 99.051718][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.054880][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.057942][ T6035] bridge_slave_1: entered allmulticast mode [ 99.062032][ T6035] bridge_slave_1: entered promiscuous mode [ 99.087355][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.093870][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.120357][ T6035] team0: Port device team_slave_0 added [ 99.124963][ T6035] team0: Port device team_slave_1 added [ 99.147380][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.150374][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.161067][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.167154][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.170223][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.181041][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.223234][ T6035] hsr_slave_0: entered promiscuous mode [ 99.226476][ T6035] hsr_slave_1: entered promiscuous mode [ 99.369830][ T40] audit: type=1400 audit(1780108518.985:226): avc: denied { write } for pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.435005][ T40] audit: type=1400 audit(1780108519.045:227): avc: denied { write } for pid=6056 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.534594][ T40] audit: type=1400 audit(1780108519.145:228): avc: denied { write } for pid=6058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.588426][ T40] audit: type=1400 audit(1780108519.195:229): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.665326][ T40] audit: type=1400 audit(1780108519.275:230): avc: denied { write } for pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.776665][ T6035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.780701][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.783384][ T6035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.787636][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.792279][ T6035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.797172][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.801231][ T6035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.805419][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.823735][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.826032][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.828544][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.830808][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.871482][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.883009][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.886739][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.900401][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.909970][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.913181][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.921184][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.924197][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.206058][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.211616][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 100.211632][ T40] audit: type=1400 audit(1780108519.825:238): avc: denied { write } for pid=6100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.229800][ T6035] veth0_vlan: entered promiscuous mode [ 100.236901][ T6035] veth1_vlan: entered promiscuous mode [ 100.263152][ T6035] veth0_macvtap: entered promiscuous mode [ 100.267460][ T6035] veth1_macvtap: entered promiscuous mode [ 100.273537][ T40] audit: type=1400 audit(1780108519.885:239): avc: denied { write } for pid=6103 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.276112][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.289393][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.295646][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.298595][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.303847][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.306551][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.355365][ T40] audit: type=1400 audit(1780108519.965:240): avc: denied { write } for pid=6106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.403000][ T40] audit: type=1400 audit(1780108520.015:241): avc: denied { write } for pid=6112 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.413691][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.482541][ T40] audit: type=1400 audit(1780108520.095:242): avc: denied { write } for pid=6115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.496772][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.539400][ T40] audit: type=1400 audit(1780108520.155:243): avc: denied { write } for pid=6119 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.555033][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.559588][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.563293][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.567549][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.572812][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.587726][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.616074][ T40] audit: type=1400 audit(1780108520.225:244): avc: denied { write } for pid=6126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.663677][ T40] audit: type=1400 audit(1780108520.275:245): avc: denied { write } for pid=6129 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.689509][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.761385][ T40] audit: type=1400 audit(1780108520.375:246): avc: denied { write } for pid=6136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.824290][ T40] audit: type=1400 audit(1780108520.435:247): avc: denied { write } for pid=6140 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.304759][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.308136][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.336104][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.340229][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/30 02:35:22 executed programs: 0 [ 102.601667][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.605489][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.608902][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.612834][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.616373][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.058758][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.061163][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.063459][ T6204] bridge_slave_0: entered allmulticast mode [ 103.066559][ T6204] bridge_slave_0: entered promiscuous mode [ 103.070199][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.072657][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.074923][ T6204] bridge_slave_1: entered allmulticast mode [ 103.077522][ T6204] bridge_slave_1: entered promiscuous mode [ 103.094674][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.099150][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.114558][ T6204] team0: Port device team_slave_0 added [ 103.117548][ T6204] team0: Port device team_slave_1 added [ 103.134661][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.136838][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.145212][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.149980][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.152245][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.161346][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.187093][ T6204] hsr_slave_0: entered promiscuous mode [ 103.189444][ T6204] hsr_slave_1: entered promiscuous mode [ 103.191857][ T6204] debugfs: 'hsr0' already exists in 'hsr' [ 103.194093][ T6204] Cannot create hsr debugfs directory [ 103.708185][ T12] bridge_slave_1: left allmulticast mode [ 103.710056][ T12] bridge_slave_1: left promiscuous mode [ 103.711939][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.715912][ T12] bridge_slave_0: left allmulticast mode [ 103.717743][ T12] bridge_slave_0: left promiscuous mode [ 103.720563][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.884387][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.889423][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.893624][ T12] bond0 (unregistering): Released all slaves [ 104.033871][ T12] hsr_slave_0: left promiscuous mode [ 104.037608][ T12] hsr_slave_1: left promiscuous mode [ 104.039704][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.042038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.044682][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.047156][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.055575][ T12] veth1_macvtap: left promiscuous mode [ 104.057328][ T12] veth0_macvtap: left promiscuous mode [ 104.059172][ T12] veth1_vlan: left promiscuous mode [ 104.060909][ T12] veth0_vlan: left promiscuous mode [ 104.194328][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.203699][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.279403][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.679278][ T5096] Bluetooth: hci0: command tx timeout [ 104.745460][ T6204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.752291][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.757808][ T6204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.767120][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.771348][ T6204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.781164][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.784841][ T6204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.795479][ T6204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.871979][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.885572][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.894507][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.897544][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.906450][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.909568][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.562711][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.623116][ T6204] veth0_vlan: entered promiscuous mode [ 105.631668][ T6204] veth1_vlan: entered promiscuous mode [ 105.654976][ T6204] veth0_macvtap: entered promiscuous mode [ 105.661337][ T6204] veth1_macvtap: entered promiscuous mode [ 105.675375][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.689600][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.712174][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.716105][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.723520][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.728714][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.770379][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.772848][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.826046][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.829543][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.872447][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 105.872463][ T40] audit: type=1400 audit(1780108525.485:261): avc: denied { write } for pid=6260 comm="syz.0.17" name="/" dev="9p" ino=63730113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.884804][ T40] audit: type=1400 audit(1780108525.485:262): avc: denied { add_name } for pid=6260 comm="syz.0.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.892455][ T40] audit: type=1400 audit(1780108525.485:263): avc: denied { create } for pid=6260 comm="syz.0.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.900215][ T40] audit: type=1400 audit(1780108525.485:264): avc: denied { associate } for pid=6260 comm="syz.0.17" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.908188][ T40] audit: type=1400 audit(1780108525.495:265): avc: denied { write } for pid=6260 comm="syz.0.17" name="file1" dev="9p" ino=63730119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.916658][ T40] audit: type=1400 audit(1780108525.495:266): avc: denied { open } for pid=6260 comm="syz.0.17" path="/0/file0/file1" dev="9p" ino=63730119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.935939][ T40] audit: type=1400 audit(1780108525.545:267): avc: denied { unmount } for pid=6260 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.938563][ T6261] ================================================================== [ 105.946284][ T6261] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x18a/0x1d0 [ 105.949769][ T6261] Read of size 8 at addr ffff888023e99598 by task syz.0.17/6261 [ 105.954728][ T6261] [ 105.955782][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 105.955804][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.955814][ T6261] Call Trace: [ 105.955821][ T6261] [ 105.955828][ T6261] dump_stack_lvl+0x100/0x190 [ 105.955850][ T6261] print_report+0x13d/0x4b0 [ 105.955875][ T6261] ? __virt_addr_valid+0x239/0x430 [ 105.955895][ T6261] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 105.955915][ T6261] kasan_report+0xdf/0x1d0 [ 105.955935][ T6261] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 105.955956][ T6261] __list_del_entry_valid_or_report+0x18a/0x1d0 [ 105.955976][ T6261] netfs_clear_subrequests+0x98/0x260 [ 105.955999][ T6261] netfs_unbuffered_write+0x1358/0x21b0 [ 105.956022][ T6261] ? __pfx_netfs_unbuffered_write+0x10/0x10 [ 105.956045][ T6261] ? rolling_buffer_init+0x8a/0xb0 [ 105.956066][ T6261] ? netfs_create_write_req+0x527/0x860 [ 105.956091][ T6261] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 105.956113][ T6261] netfs_unbuffered_write_iter+0x442/0x740 [ 105.956134][ T6261] v9fs_file_write_iter+0xbf/0x100 [ 105.956157][ T6261] vfs_write+0x6ac/0x1070 [ 105.956175][ T6261] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 105.956198][ T6261] ? __pfx_vfs_write+0x10/0x10 [ 105.956223][ T6261] ksys_write+0x12a/0x250 [ 105.956242][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 105.956261][ T6261] ? rcu_is_watching+0x12/0xc0 [ 105.956288][ T6261] do_syscall_64+0x115/0x870 [ 105.956312][ T6261] ? clear_bhb_loop+0x40/0x90 [ 105.956331][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.956349][ T6261] RIP: 0033:0x7f85f8d9ce59 [ 105.956364][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.956380][ T6261] RSP: 002b:00007f85f9c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.956397][ T6261] RAX: ffffffffffffffda RBX: 00007f85f9015fa0 RCX: 00007f85f8d9ce59 [ 105.956408][ T6261] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003 [ 105.956419][ T6261] RBP: 00007f85f8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 105.956429][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.956439][ T6261] R13: 00007f85f9016038 R14: 00007f85f9015fa0 R15: 00007ffd265d5168 [ 105.956455][ T6261] [ 105.956460][ T6261] [ 106.037369][ T6261] Allocated by task 6261: [ 106.038831][ T6261] kasan_save_stack+0x30/0x50 [ 106.040358][ T6261] kasan_save_track+0x14/0x30 [ 106.041989][ T6261] __kasan_slab_alloc+0x89/0x90 [ 106.043538][ T6261] kmem_cache_alloc_noprof+0x241/0x6e0 [ 106.045360][ T6261] mempool_alloc_noprof+0x1b7/0x310 [ 106.047003][ T6261] netfs_alloc_subrequest+0xc1/0x3c0 [ 106.048782][ T6261] netfs_prepare_write+0x76/0x780 [ 106.050526][ T6261] netfs_unbuffered_write+0x7b8/0x21b0 [ 106.052443][ T6261] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 106.054399][ T6261] netfs_unbuffered_write_iter+0x442/0x740 [ 106.056074][ T6261] v9fs_file_write_iter+0xbf/0x100 [ 106.058019][ T6261] vfs_write+0x6ac/0x1070 [ 106.059729][ T6261] ksys_write+0x12a/0x250 [ 106.061387][ T6261] do_syscall_64+0x115/0x870 [ 106.063159][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.065438][ T6261] [ 106.066363][ T6261] Freed by task 6261: [ 106.067904][ T6261] kasan_save_stack+0x30/0x50 [ 106.069734][ T6261] kasan_save_track+0x14/0x30 [ 106.071544][ T6261] kasan_save_free_info+0x3b/0x70 [ 106.073529][ T6261] __kasan_slab_free+0x5f/0x80 [ 106.075372][ T6261] kmem_cache_free+0x127/0x6c0 [ 106.077217][ T6261] mempool_free+0xde/0x130 [ 106.078937][ T6261] netfs_put_subrequest+0x282/0x4c0 [ 106.080943][ T6261] netfs_unbuffered_write+0x1419/0x21b0 [ 106.083062][ T6261] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 106.085594][ T6261] netfs_unbuffered_write_iter+0x442/0x740 [ 106.087890][ T6261] v9fs_file_write_iter+0xbf/0x100 [ 106.089914][ T6261] vfs_write+0x6ac/0x1070 [ 106.091499][ T6261] ksys_write+0x12a/0x250 [ 106.092897][ T6261] do_syscall_64+0x115/0x870 [ 106.094313][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.096293][ T6261] [ 106.097152][ T6261] The buggy address belongs to the object at ffff888023e99540 [ 106.097152][ T6261] which belongs to the cache netfs_subrequest of size 200 [ 106.101912][ T6261] The buggy address is located 88 bytes inside of [ 106.101912][ T6261] freed 200-byte region [ffff888023e99540, ffff888023e99608) [ 106.106197][ T6261] [ 106.107135][ T6261] The buggy address belongs to the physical page: [ 106.109208][ T6261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023e99680 pfn:0x23e98 [ 106.112798][ T6261] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 106.115324][ T6261] memcg:ffff888023e980d9 [ 106.116648][ T6261] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 106.119354][ T6261] page_type: f5(slab) [ 106.120796][ T6261] raw: 00fff00000000240 ffff888100ae5680 ffff888022d29408 ffff888022d29408 [ 106.123760][ T6261] raw: ffff888023e99680 0000014000190012 00000000f5000000 ffff888023e980d9 [ 106.126646][ T6261] head: 00fff00000000240 ffff888100ae5680 ffff888022d29408 ffff888022d29408 [ 106.129704][ T6261] head: ffff888023e99680 0000014000190012 00000000f5000000 ffff888023e980d9 [ 106.132413][ T6261] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 106.135158][ T6261] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 106.137836][ T6261] page dumped because: kasan: bad access detected [ 106.139952][ T6261] page_owner tracks the page as allocated [ 106.141939][ T6261] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2880(GFP_NOWAIT|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6261, tgid 6260 (syz.0.17), ts 105932466205, free_ts 105884430549 [ 106.148365][ T6261] post_alloc_hook+0xfd/0x120 [ 106.150064][ T6261] get_page_from_freelist+0x11a6/0x3410 [ 106.152237][ T6261] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 106.154545][ T6261] new_slab+0xa6/0x6c0 [ 106.156137][ T6261] refill_objects+0x277/0x420 [ 106.157786][ T6261] __pcs_replace_empty_main+0x375/0x650 [ 106.159940][ T6261] kmem_cache_alloc_noprof+0x480/0x6e0 [ 106.162281][ T6261] mempool_alloc_noprof+0x1b7/0x310 [ 106.164460][ T6261] netfs_alloc_subrequest+0xc1/0x3c0 [ 106.166662][ T6261] netfs_prepare_write+0x76/0x780 [ 106.168719][ T6261] netfs_unbuffered_write+0x7b8/0x21b0 [ 106.170998][ T6261] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 106.173275][ T6261] netfs_unbuffered_write_iter+0x442/0x740 [ 106.175385][ T6261] v9fs_file_write_iter+0xbf/0x100 [ 106.177543][ T6261] vfs_write+0x6ac/0x1070 [ 106.179398][ T6261] ksys_write+0x12a/0x250 [ 106.181370][ T6261] page last free pid 40 tgid 40 stack trace: [ 106.183972][ T6261] __free_frozen_pages+0x794/0x10a0 [ 106.186111][ T6261] rcu_core+0x5a2/0x10d0 [ 106.187870][ T6261] handle_softirqs+0x1ea/0xa00 [ 106.189498][ T6261] __irq_exit_rcu+0x162/0x210 [ 106.190977][ T6261] irq_exit_rcu+0x9/0x30 [ 106.192319][ T6261] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 106.194078][ T6261] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.195930][ T6261] [ 106.196836][ T6261] Memory state around the buggy address: [ 106.198985][ T6261] ffff888023e99480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.201757][ T6261] ffff888023e99500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 106.204525][ T6261] >ffff888023e99580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.207212][ T6261] ^ [ 106.208945][ T6261] ffff888023e99600: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.211771][ T6261] ffff888023e99680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.214181][ T6261] ================================================================== [ 106.217345][ T6261] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.219589][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.222379][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.225418][ T6261] Call Trace: [ 106.226444][ T6261] [ 106.227341][ T6261] dump_stack_lvl+0x100/0x190 [ 106.228816][ T6261] vpanic+0x552/0x970 [ 106.230034][ T6261] ? __pfx_vpanic+0x10/0x10 [ 106.231469][ T6261] ? mark_held_locks+0x40/0x70 [ 106.232956][ T6261] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 106.235232][ T6261] panic+0xd1/0xe0 [ 106.236688][ T6261] ? __pfx_panic+0x10/0x10 [ 106.238409][ T6261] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 106.240852][ T6261] ? preempt_schedule_common+0x42/0xc0 [ 106.242928][ T6261] ? check_panic_on_warn+0x1f/0x90 [ 106.244891][ T6261] check_panic_on_warn.cold+0x19/0x34 [ 106.246928][ T6261] end_report.part.0+0x3a/0x90 [ 106.248806][ T6261] kasan_report.cold+0xe/0x18 [ 106.250622][ T6261] ? __list_del_entry_valid_or_report+0x18a/0x1d0 [ 106.252898][ T6261] __list_del_entry_valid_or_report+0x18a/0x1d0 [ 106.254877][ T6261] netfs_clear_subrequests+0x98/0x260 [ 106.256756][ T6261] netfs_unbuffered_write+0x1358/0x21b0 [ 106.258723][ T6261] ? __pfx_netfs_unbuffered_write+0x10/0x10 [ 106.260473][ T6261] ? rolling_buffer_init+0x8a/0xb0 [ 106.262254][ T6261] ? netfs_create_write_req+0x527/0x860 [ 106.264023][ T6261] netfs_unbuffered_write_iter_locked+0x7e2/0xa90 [ 106.266077][ T6261] netfs_unbuffered_write_iter+0x442/0x740 [ 106.267957][ T6261] v9fs_file_write_iter+0xbf/0x100 [ 106.269605][ T6261] vfs_write+0x6ac/0x1070 [ 106.270930][ T6261] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 106.273157][ T6261] ? __pfx_vfs_write+0x10/0x10 [ 106.275085][ T6261] ksys_write+0x12a/0x250 [ 106.276855][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 106.278842][ T6261] ? rcu_is_watching+0x12/0xc0 [ 106.280830][ T6261] do_syscall_64+0x115/0x870 [ 106.282728][ T6261] ? clear_bhb_loop+0x40/0x90 [ 106.284629][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.287001][ T6261] RIP: 0033:0x7f85f8d9ce59 [ 106.288825][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.296435][ T6261] RSP: 002b:00007f85f9c79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.299845][ T6261] RAX: ffffffffffffffda RBX: 00007f85f9015fa0 RCX: 00007f85f8d9ce59 [ 106.303037][ T6261] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000003 [ 106.305949][ T6261] RBP: 00007f85f8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 106.309174][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.312399][ T6261] R13: 00007f85f9016038 R14: 00007f85f9015fa0 R15: 00007ffd265d5168 [ 106.315543][ T6261] [ 106.317600][ T6261] Kernel Offset: disabled [ 106.319368][ T6261] Rebooting in 86400 seconds..