[ 116.796633][ T40] audit: type=1400 audit(1779551905.795:207): avc: denied { transition } for pid=5954 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.804659][ T40] audit: type=1400 audit(1779551905.795:208): avc: denied { noatsecure } for pid=5954 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.811257][ T40] audit: type=1400 audit(1779551905.805:209): avc: denied { rlimitinh } for pid=5954 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.817819][ T40] audit: type=1400 audit(1779551905.805:210): avc: denied { siginh } for pid=5954 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.180222][ T40] audit: type=1400 audit(1779551910.175:211): avc: denied { write } for pid=5962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.235984][ T40] audit: type=1400 audit(1779551910.235:212): avc: denied { write } for pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.844305][ T40] audit: type=1400 audit(1779551910.845:213): avc: denied { write } for pid=5968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.911173][ T40] audit: type=1400 audit(1779551910.905:214): avc: denied { write } for pid=5971 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.415876][ T40] audit: type=1400 audit(1779551911.415:215): avc: denied { write } for pid=5974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.488935][ T40] audit: type=1400 audit(1779551911.485:216): avc: denied { write } for pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.605278][ T40] audit: type=1400 audit(1779551911.605:217): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.663663][ T40] audit: type=1400 audit(1779551911.665:218): avc: denied { write } for pid=5983 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:16369' (ED25519) to the list of known hosts. 2026/05/23 15:58:33 parsed 1 programs [ 126.757806][ T40] audit: type=1400 audit(1779551915.755:219): avc: denied { read write } for pid=6003 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 126.767765][ T40] audit: type=1400 audit(1779551915.755:220): avc: denied { open } for pid=6003 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 126.825288][ T40] audit: type=1400 audit(1779551915.825:221): avc: denied { unlink } for pid=6003 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 127.234389][ T40] audit: type=1400 audit(1779551916.235:222): avc: denied { relabelto } for pid=6005 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 128.012044][ T6003] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 131.211001][ T40] audit: type=1401 audit(1779551920.205:223): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 131.544965][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.568471][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.577763][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.582417][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.588859][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.818535][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.822056][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.849076][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.852502][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.161607][ T40] audit: type=1400 audit(1779551921.155:224): avc: denied { sys_module } for pid=6071 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.539706][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.542893][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.546132][ T6071] bridge_slave_0: entered allmulticast mode [ 132.550375][ T6071] bridge_slave_0: entered promiscuous mode [ 132.560838][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.563221][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.565544][ T6071] bridge_slave_1: entered allmulticast mode [ 132.568334][ T6071] bridge_slave_1: entered promiscuous mode [ 132.600044][ T6071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.605177][ T6071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.643279][ T6071] team0: Port device team_slave_0 added [ 132.646831][ T6071] team0: Port device team_slave_1 added [ 132.678752][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.681100][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.689766][ T6071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.695176][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.697859][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.705919][ T6071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.748159][ T6071] hsr_slave_0: entered promiscuous mode [ 132.750471][ T6071] hsr_slave_1: entered promiscuous mode [ 132.884480][ T40] audit: type=1400 audit(1779551921.885:225): avc: denied { write } for pid=6087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.958382][ T40] audit: type=1400 audit(1779551921.955:226): avc: denied { write } for pid=6091 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.069018][ T40] audit: type=1400 audit(1779551922.065:227): avc: denied { write } for pid=6093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.128863][ T40] audit: type=1400 audit(1779551922.125:228): avc: denied { write } for pid=6096 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.205098][ T40] audit: type=1400 audit(1779551922.205:229): avc: denied { write } for pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.272810][ T40] audit: type=1400 audit(1779551922.275:230): avc: denied { write } for pid=6101 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.377030][ T40] audit: type=1400 audit(1779551922.375:231): avc: denied { write } for pid=6103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.431945][ T40] audit: type=1400 audit(1779551922.435:232): avc: denied { write } for pid=6106 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.441978][ T6071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.449925][ T6071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.454264][ T6071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.461034][ T6071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.465488][ T6071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.473425][ T6071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.477662][ T6071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.483780][ T6071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.536885][ T40] audit: type=1400 audit(1779551922.535:233): avc: denied { write } for pid=6113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.543813][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.559252][ T6071] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.566617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.570061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.580318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.582800][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.615815][ T40] audit: type=1400 audit(1779551922.615:234): avc: denied { write } for pid=6117 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.906951][ T6071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.937331][ T6071] veth0_vlan: entered promiscuous mode [ 133.945071][ T6071] veth1_vlan: entered promiscuous mode [ 133.970497][ T6071] veth0_macvtap: entered promiscuous mode [ 133.980271][ T6071] veth1_macvtap: entered promiscuous mode [ 133.994782][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.005637][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.015342][ T203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.020181][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.027739][ T203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.031160][ T203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.137434][ T203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.230802][ T203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.320521][ T203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.429882][ T203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/23 15:58:43 executed programs: 0 [ 134.606871][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.611015][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.615975][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.620817][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.628348][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.096762][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.099253][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.102086][ T6178] bridge_slave_0: entered allmulticast mode [ 135.105361][ T6178] bridge_slave_0: entered promiscuous mode [ 135.112215][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.115354][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.118530][ T6178] bridge_slave_1: entered allmulticast mode [ 135.123299][ T6178] bridge_slave_1: entered promiscuous mode [ 135.172519][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.177455][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.214582][ T6178] team0: Port device team_slave_0 added [ 135.218754][ T6178] team0: Port device team_slave_1 added [ 135.282739][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.285861][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.296822][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.303447][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.306541][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.320634][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.368382][ T6178] hsr_slave_0: entered promiscuous mode [ 135.370924][ T6178] hsr_slave_1: entered promiscuous mode [ 135.373641][ T6178] debugfs: 'hsr0' already exists in 'hsr' [ 135.376115][ T6178] Cannot create hsr debugfs directory [ 136.681666][ T5090] Bluetooth: hci0: command tx timeout [ 137.191669][ T203] bridge_slave_1: left allmulticast mode [ 137.193690][ T203] bridge_slave_1: left promiscuous mode [ 137.195817][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.200292][ T203] bridge_slave_0: left allmulticast mode [ 137.204592][ T203] bridge_slave_0: left promiscuous mode [ 137.207567][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.389674][ T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.396235][ T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.402488][ T203] bond0 (unregistering): Released all slaves [ 137.572244][ T203] hsr_slave_0: left promiscuous mode [ 137.574561][ T203] hsr_slave_1: left promiscuous mode [ 137.576636][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.579205][ T203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.583100][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.585856][ T203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.592998][ T203] veth1_macvtap: left promiscuous mode [ 137.594829][ T203] veth0_macvtap: left promiscuous mode [ 137.596752][ T203] veth1_vlan: left promiscuous mode [ 137.598461][ T203] veth0_vlan: left promiscuous mode [ 137.760176][ T203] team0 (unregistering): Port device team_slave_1 removed [ 137.767661][ T203] team0 (unregistering): Port device team_slave_0 removed [ 137.828483][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.911115][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 137.911130][ T40] audit: type=1400 audit(1779551926.905:253): avc: denied { write } for pid=6206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.961113][ T40] audit: type=1400 audit(1779551926.955:254): avc: denied { write } for pid=6209 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.083530][ T40] audit: type=1400 audit(1779551927.085:255): avc: denied { write } for pid=6212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.130715][ T40] audit: type=1400 audit(1779551927.125:256): avc: denied { write } for pid=6215 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.195938][ T40] audit: type=1400 audit(1779551927.195:257): avc: denied { write } for pid=6217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.241285][ T40] audit: type=1400 audit(1779551927.235:258): avc: denied { write } for pid=6220 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.313836][ T6178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.320722][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.324694][ T6178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.335883][ T40] audit: type=1400 audit(1779551927.335:259): avc: denied { write } for pid=6222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.336181][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.347808][ T6178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.354203][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.358233][ T6178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.366507][ T6178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.397739][ T40] audit: type=1400 audit(1779551927.395:260): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.428959][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.440899][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.452878][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.455931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.467190][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.470358][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.483681][ T40] audit: type=1400 audit(1779551927.485:261): avc: denied { write } for pid=6233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.524761][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.528063][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.533688][ T40] audit: type=1400 audit(1779551927.535:262): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.771876][ T5090] Bluetooth: hci0: command tx timeout [ 138.800008][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.829226][ T6178] veth0_vlan: entered promiscuous mode [ 138.838753][ T6178] veth1_vlan: entered promiscuous mode [ 138.858382][ T6178] veth0_macvtap: entered promiscuous mode [ 138.863467][ T6178] veth1_macvtap: entered promiscuous mode [ 138.874623][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.882854][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.892870][ T100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.896229][ T100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.899924][ T100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.904293][ T100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.950120][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.954937][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.979430][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.983159][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.178083][ T6249] infiniband syz1: set active [ 139.181731][ T6249] infiniband syz1: added syz_tun [ 139.195102][ T6249] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 139.200449][ T6249] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 139.207210][ T6249] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 139.232173][ T6249] RDS/IB: syz1: added [ 139.234444][ T6249] smc: adding ib device syz1 with port count 1 [ 139.237504][ T6249] smc: ib device syz1 port 1 has no pnetid [ 139.406787][ T6254] syz1: rxe_newlink: already configured on syz_tun [ 139.434756][ T6257] syz1: rxe_newlink: already configured on syz_tun [ 139.456877][ T6260] syz1: rxe_newlink: already configured on syz_tun [ 139.480624][ T6263] syz1: rxe_newlink: already configured on syz_tun [ 139.511834][ T6266] syz1: rxe_newlink: already configured on syz_tun [ 139.534631][ T6269] syz1: rxe_newlink: already configured on syz_tun [ 139.539296][ T100] ================================================================== [ 139.542330][ T100] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xb60/0xbe0 [ 139.544947][ T100] Read of size 8 at addr ffff88802e32eb10 by task kworker/u32:5/100 [ 139.548794][ T100] [ 139.550456][ T100] CPU: 0 UID: 0 PID: 100 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 139.550473][ T100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.550512][ T100] Workqueue: rdma_cm cma_iboe_join_work_handler [ 139.550558][ T100] Call Trace: [ 139.550568][ T100] [ 139.550576][ T100] dump_stack_lvl+0x100/0x190 [ 139.550597][ T100] print_report+0x13d/0x4b0 [ 139.550617][ T100] ? __virt_addr_valid+0x239/0x430 [ 139.550630][ T100] ? ucma_create_uevent+0xb60/0xbe0 [ 139.550643][ T100] kasan_report+0xdf/0x1d0 [ 139.550656][ T100] ? ucma_create_uevent+0xb60/0xbe0 [ 139.550669][ T100] ucma_create_uevent+0xb60/0xbe0 [ 139.550683][ T100] ucma_event_handler+0x102/0x940 [ 139.550697][ T100] ? rcu_is_watching+0x12/0xc0 [ 139.550716][ T100] cma_cm_event_handler+0x9b/0x320 [ 139.550732][ T100] cma_iboe_join_work_handler+0xca/0x180 [ 139.550749][ T100] process_one_work+0xa0e/0x1980 [ 139.550765][ T100] ? __pfx_process_one_work+0x10/0x10 [ 139.550779][ T100] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 139.550796][ T100] worker_thread+0x5ef/0xe50 [ 139.550810][ T100] ? __pfx_worker_thread+0x10/0x10 [ 139.550823][ T100] ? kthread+0x13a/0x450 [ 139.550835][ T100] ? __pfx_worker_thread+0x10/0x10 [ 139.550847][ T100] kthread+0x370/0x450 [ 139.550858][ T100] ? __pfx_kthread+0x10/0x10 [ 139.550870][ T100] ret_from_fork+0x72b/0xd50 [ 139.550884][ T100] ? __pfx_ret_from_fork+0x10/0x10 [ 139.550897][ T100] ? __switch_to+0x800/0x1100 [ 139.550913][ T100] ? __pfx_kthread+0x10/0x10 [ 139.550925][ T100] ret_from_fork_asm+0x1a/0x30 [ 139.550942][ T100] [ 139.550946][ T100] [ 139.604568][ T100] Allocated by task 6269: [ 139.606000][ T100] kasan_save_stack+0x30/0x50 [ 139.607559][ T100] kasan_save_track+0x14/0x30 [ 139.609190][ T100] __kasan_kmalloc+0xaa/0xb0 [ 139.611033][ T100] ucma_process_join+0x232/0xa20 [ 139.613130][ T100] ucma_join_multicast+0xe9/0x160 [ 139.615287][ T100] ucma_write+0x1fb/0x330 [ 139.617158][ T100] vfs_write+0x2aa/0x1070 [ 139.619029][ T100] ksys_write+0x1f8/0x250 [ 139.620889][ T100] do_syscall_64+0x10b/0xf80 [ 139.622884][ T100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.625187][ T100] [ 139.626071][ T100] Freed by task 6269: [ 139.627401][ T100] kasan_save_stack+0x30/0x50 [ 139.629043][ T100] kasan_save_track+0x14/0x30 [ 139.630842][ T100] kasan_save_free_info+0x3b/0x70 [ 139.632439][ T100] __kasan_slab_free+0x5f/0x80 [ 139.633897][ T100] kfree+0x223/0x6c0 [ 139.635142][ T100] ucma_process_join+0x39a/0xa20 [ 139.636722][ T100] ucma_join_multicast+0xe9/0x160 [ 139.638359][ T100] ucma_write+0x1fb/0x330 [ 139.639831][ T100] vfs_write+0x2aa/0x1070 [ 139.641291][ T100] ksys_write+0x1f8/0x250 [ 139.642721][ T100] do_syscall_64+0x10b/0xf80 [ 139.644251][ T100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.646154][ T100] [ 139.646928][ T100] The buggy address belongs to the object at ffff88802e32eb00 [ 139.646928][ T100] which belongs to the cache kmalloc-192 of size 192 [ 139.651775][ T100] The buggy address is located 16 bytes inside of [ 139.651775][ T100] freed 192-byte region [ffff88802e32eb00, ffff88802e32ebc0) [ 139.657383][ T100] [ 139.658476][ T100] The buggy address belongs to the physical page: [ 139.661240][ T100] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e32e [ 139.664829][ T100] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 139.667805][ T100] page_type: f5(slab) [ 139.669439][ T100] raw: 00fff00000000000 ffff88801b8423c0 dead000000000100 dead000000000122 [ 139.672735][ T100] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 139.676293][ T100] page dumped because: kasan: bad access detected [ 139.679022][ T100] page_owner tracks the page as allocated [ 139.681426][ T100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 54, tgid 54 (kworker/3:1), ts 18810843810, free_ts 18643503107 [ 139.689558][ T100] post_alloc_hook+0xfd/0x120 [ 139.691527][ T100] get_page_from_freelist+0x11a6/0x33b0 [ 139.693815][ T100] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 139.696242][ T100] new_slab+0xa6/0x6c0 [ 139.697962][ T100] refill_objects+0x277/0x420 [ 139.699900][ T100] __pcs_replace_empty_main+0x375/0x650 [ 139.702161][ T100] __kmalloc_noprof+0x688/0x850 [ 139.704162][ T100] usb_alloc_urb+0x66/0xa0 [ 139.705994][ T100] usb_control_msg+0x1d3/0x4b0 [ 139.707939][ T100] hub_ext_port_status+0x152/0x600 [ 139.710011][ T100] hub_activate+0x6d8/0x1d50 [ 139.711940][ T100] process_one_work+0xa0e/0x1980 [ 139.714101][ T100] worker_thread+0x5ef/0xe50 [ 139.716004][ T100] kthread+0x370/0x450 [ 139.717689][ T100] ret_from_fork+0x72b/0xd50 [ 139.719617][ T100] ret_from_fork_asm+0x1a/0x30 [ 139.721605][ T100] page last free pid 54 tgid 54 stack trace: [ 139.724004][ T100] __free_frozen_pages+0x747/0x1040 [ 139.726338][ T100] vfree+0x15f/0x8d0 [ 139.728127][ T100] delayed_vfree_work+0x56/0x80 [ 139.730308][ T100] process_one_work+0xa0e/0x1980 [ 139.732534][ T100] worker_thread+0x5ef/0xe50 [ 139.734507][ T100] kthread+0x370/0x450 [ 139.736184][ T100] ret_from_fork+0x72b/0xd50 [ 139.738130][ T100] ret_from_fork_asm+0x1a/0x30 [ 139.740130][ T100] [ 139.741212][ T100] Memory state around the buggy address: [ 139.743515][ T100] ffff88802e32ea00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.746813][ T100] ffff88802e32ea80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.750294][ T100] >ffff88802e32eb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.753681][ T100] ^ [ 139.755588][ T100] ffff88802e32eb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 139.758833][ T100] ffff88802e32ec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.762127][ T100] ================================================================== [ 139.766701][ T100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.769830][ T100] CPU: 0 UID: 0 PID: 100 Comm: kworker/u32:5 Not tainted syzkaller #0 PREEMPT(full) [ 139.773745][ T100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.777948][ T100] Workqueue: rdma_cm cma_iboe_join_work_handler [ 139.780629][ T100] Call Trace: [ 139.782060][ T100] [ 139.783484][ T100] dump_stack_lvl+0x100/0x190 [ 139.785586][ T100] vpanic+0x552/0x970 [ 139.787282][ T100] ? __pfx_vpanic+0x10/0x10 [ 139.789208][ T100] ? mark_held_locks+0x40/0x70 [ 139.791231][ T100] ? ucma_create_uevent+0xb60/0xbe0 [ 139.793434][ T100] panic+0xd1/0xe0 [ 139.795007][ T100] ? __pfx_panic+0x10/0x10 [ 139.796873][ T100] ? ucma_create_uevent+0xb60/0xbe0 [ 139.799099][ T100] ? preempt_schedule_common+0x42/0xc0 [ 139.801474][ T100] ? check_panic_on_warn+0x1f/0x90 [ 139.803704][ T100] check_panic_on_warn.cold+0x19/0x34 [ 139.805991][ T100] end_report.part.0+0x3a/0x90 [ 139.808098][ T100] kasan_report.cold+0xe/0x18 [ 139.810029][ T100] ? ucma_create_uevent+0xb60/0xbe0 [ 139.812228][ T100] ucma_create_uevent+0xb60/0xbe0 [ 139.814338][ T100] ucma_event_handler+0x102/0x940 [ 139.816437][ T100] ? rcu_is_watching+0x12/0xc0 [ 139.818594][ T100] cma_cm_event_handler+0x9b/0x320 [ 139.820799][ T100] cma_iboe_join_work_handler+0xca/0x180 [ 139.823182][ T100] process_one_work+0xa0e/0x1980 [ 139.825329][ T100] ? __pfx_process_one_work+0x10/0x10 [ 139.827601][ T100] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 139.830274][ T100] worker_thread+0x5ef/0xe50 [ 139.832227][ T100] ? __pfx_worker_thread+0x10/0x10 [ 139.834546][ T100] ? kthread+0x13a/0x450 [ 139.836648][ T100] ? __pfx_worker_thread+0x10/0x10 [ 139.839000][ T100] kthread+0x370/0x450 [ 139.840740][ T100] ? __pfx_kthread+0x10/0x10 [ 139.842696][ T100] ret_from_fork+0x72b/0xd50 [ 139.844683][ T100] ? __pfx_ret_from_fork+0x10/0x10 [ 139.846769][ T100] ? __switch_to+0x800/0x1100 [ 139.848835][ T100] ? __pfx_kthread+0x10/0x10 [ 139.850811][ T100] ret_from_fork_asm+0x1a/0x30 [ 139.852867][ T100] [ 139.855051][ T100] Kernel Offset: disabled [ 139.856970][ T100] Rebooting in 86400 seconds..