[ 86.945243][ T40] audit: type=1400 audit(1765630655.826:118): avc: denied { transition } for pid=6137 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.954837][ T40] audit: type=1400 audit(1765630655.836:119): avc: denied { noatsecure } for pid=6137 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.963237][ T40] audit: type=1400 audit(1765630655.836:120): avc: denied { rlimitinh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.970365][ T40] audit: type=1400 audit(1765630655.836:121): avc: denied { siginh } for pid=6137 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.697151][ T53] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:17277' (ED25519) to the list of known hosts. 2025/12/13 12:57:43 parsed 1 programs [ 94.853612][ T40] audit: type=1400 audit(1765630663.736:122): avc: denied { node_bind } for pid=6178 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.040217][ T40] audit: type=1400 audit(1765630665.926:123): avc: denied { read write } for pid=6189 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.050649][ T40] audit: type=1400 audit(1765630665.926:124): avc: denied { open } for pid=6189 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.087180][ T40] audit: type=1400 audit(1765630665.976:125): avc: denied { unlink } for pid=6189 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.487760][ T40] audit: type=1400 audit(1765630666.376:126): avc: denied { relabelto } for pid=6192 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 98.333902][ T6189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.414987][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 100.496668][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.498997][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.501284][ T6205] bridge_slave_0: entered allmulticast mode [ 100.503911][ T6205] bridge_slave_0: entered promiscuous mode [ 100.507335][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.509655][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.512049][ T6205] bridge_slave_1: entered allmulticast mode [ 100.516065][ T6205] bridge_slave_1: entered promiscuous mode [ 100.532453][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.536935][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.555160][ T6205] team0: Port device team_slave_0 added [ 100.558333][ T6205] team0: Port device team_slave_1 added [ 100.570936][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.573310][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.581374][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.585789][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.588065][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.598252][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.621022][ T6205] hsr_slave_0: entered promiscuous mode [ 100.623288][ T6205] hsr_slave_1: entered promiscuous mode [ 101.195229][ T6205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.201899][ T6205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.206079][ T6205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.210172][ T6205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.229827][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.232101][ T6205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.234508][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.237415][ T6205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.283361][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.293284][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.297951][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.301533][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.313797][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.316708][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.327985][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.330292][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.379426][ T40] audit: type=1400 audit(1765630670.266:127): avc: denied { sys_module } for pid=6205 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.466128][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.494045][ T6205] veth0_vlan: entered promiscuous mode [ 101.501394][ T6205] veth1_vlan: entered promiscuous mode [ 101.518284][ T6205] veth0_macvtap: entered promiscuous mode [ 101.527408][ T6205] veth1_macvtap: entered promiscuous mode [ 101.536166][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.542804][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.549510][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.552558][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.559396][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.562337][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.682420][ T74] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.770934][ T74] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.876413][ T74] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.966277][ T74] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.274232][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.277785][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.280913][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.284702][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.288248][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.613138][ T40] audit: type=1401 audit(1765630671.496:128): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 102.706388][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.709815][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.727843][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.731835][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/13 12:57:52 executed programs: 0 [ 103.774264][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.777414][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.780407][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.783608][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.786674][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.914947][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 104.017589][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.020069][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.022556][ T6359] bridge_slave_0: entered allmulticast mode [ 104.025744][ T6359] bridge_slave_0: entered promiscuous mode [ 104.029656][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.032177][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.034752][ T6359] bridge_slave_1: entered allmulticast mode [ 104.037825][ T6359] bridge_slave_1: entered promiscuous mode [ 104.057379][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.062182][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.086936][ T6359] team0: Port device team_slave_0 added [ 104.091891][ T6359] team0: Port device team_slave_1 added [ 104.116394][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.119390][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.130550][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.136820][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.139808][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.150804][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.192727][ T6359] hsr_slave_0: entered promiscuous mode [ 104.196538][ T6359] hsr_slave_1: entered promiscuous mode [ 104.199876][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 104.202383][ T6359] Cannot create hsr debugfs directory [ 104.863377][ T74] bridge_slave_1: left allmulticast mode [ 104.866291][ T74] bridge_slave_1: left promiscuous mode [ 104.868938][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.874690][ T74] bridge_slave_0: left allmulticast mode [ 104.877182][ T74] bridge_slave_0: left promiscuous mode [ 104.879586][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.086441][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.092259][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.097455][ T74] bond0 (unregistering): Released all slaves [ 105.251658][ T74] hsr_slave_0: left promiscuous mode [ 105.254557][ T74] hsr_slave_1: left promiscuous mode [ 105.256863][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.259547][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.263197][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.266597][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.273648][ T74] veth1_macvtap: left promiscuous mode [ 105.275770][ T74] veth0_macvtap: left promiscuous mode [ 105.277951][ T74] veth1_vlan: left promiscuous mode [ 105.280236][ T74] veth0_vlan: left promiscuous mode [ 105.554496][ T74] team0 (unregistering): Port device team_slave_1 removed [ 105.575668][ T74] team0 (unregistering): Port device team_slave_0 removed [ 105.855883][ T5297] Bluetooth: hci0: command tx timeout [ 106.042465][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.047097][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.051242][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.056128][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.106937][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.116984][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.122174][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.124453][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.135029][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.137377][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.252683][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.275118][ T6359] veth0_vlan: entered promiscuous mode [ 106.279837][ T6359] veth1_vlan: entered promiscuous mode [ 106.543431][ T6359] veth0_macvtap: entered promiscuous mode [ 106.550132][ T6359] veth1_macvtap: entered promiscuous mode [ 106.561662][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.569503][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.578197][ T5168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.581812][ T5168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.586444][ T5168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.589371][ T5168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.627057][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.635245][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.670571][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.673150][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.771604][ T40] audit: type=1400 audit(1765630675.656:129): avc: denied { unmount } for pid=6359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 107.935513][ T5297] Bluetooth: hci0: command tx timeout 2025/12/13 12:57:57 executed programs: 94 [ 110.015583][ T5297] Bluetooth: hci0: command tx timeout [ 112.105177][ T5297] Bluetooth: hci0: command tx timeout 2025/12/13 12:58:02 executed programs: 334 2025/12/13 12:58:07 executed programs: 569 [ 119.509365][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.516881][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.520639][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.524848][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.530540][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.673681][ T7607] chnl_net:caif_netlink_parms(): no params data found [ 119.754087][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.801148][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.804336][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.807543][ T7607] bridge_slave_0: entered allmulticast mode [ 119.811427][ T7607] bridge_slave_0: entered promiscuous mode [ 119.816276][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.819575][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.822683][ T7607] bridge_slave_1: entered allmulticast mode [ 119.826713][ T7607] bridge_slave_1: entered promiscuous mode [ 119.848144][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.871495][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.878142][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.903504][ T7607] team0: Port device team_slave_0 added [ 119.910394][ T7607] team0: Port device team_slave_1 added [ 119.931541][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.933970][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.942943][ T7607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.952591][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.959984][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.962236][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.970986][ T7607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.006510][ T7607] hsr_slave_0: entered promiscuous mode [ 120.009681][ T7607] hsr_slave_1: entered promiscuous mode [ 120.058158][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.178458][ T61] bridge_slave_1: left allmulticast mode [ 120.181449][ T61] bridge_slave_1: left promiscuous mode [ 120.185900][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.191449][ T61] bridge_slave_0: left allmulticast mode [ 120.193248][ T61] bridge_slave_0: left promiscuous mode [ 120.195445][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.391128][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.395016][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.398549][ T61] bond0 (unregistering): Released all slaves [ 120.804821][ T61] hsr_slave_0: left promiscuous mode [ 120.812868][ T61] hsr_slave_1: left promiscuous mode [ 120.815919][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.819189][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.822823][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.825970][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.837208][ T61] veth1_macvtap: left promiscuous mode [ 120.839552][ T61] veth0_macvtap: left promiscuous mode [ 120.841411][ T61] veth1_vlan: left promiscuous mode [ 120.843402][ T61] veth0_vlan: left promiscuous mode [ 121.159478][ T61] team0 (unregistering): Port device team_slave_1 removed [ 121.180791][ T61] team0 (unregistering): Port device team_slave_0 removed [ 121.472757][ T7607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.481547][ T7607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.487676][ T7607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.494084][ T7607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.573808][ T7607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.582947][ T7607] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.588175][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.590927][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.598175][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.601003][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.617154][ T5297] Bluetooth: hci1: command tx timeout [ 121.756760][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.791968][ T7607] veth0_vlan: entered promiscuous mode [ 121.800055][ T7607] veth1_vlan: entered promiscuous mode [ 121.824695][ T7607] veth0_macvtap: entered promiscuous mode [ 121.832057][ T7607] veth1_macvtap: entered promiscuous mode [ 121.843343][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.853032][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.861536][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.865487][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.869918][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.873645][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.909343][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.912322][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.925853][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.928731][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.695177][ T5297] Bluetooth: hci1: command tx timeout 2025/12/13 12:58:12 executed programs: 690 [ 125.775221][ T5297] Bluetooth: hci1: command tx timeout [ 127.855165][ T5297] Bluetooth: hci1: command tx timeout 2025/12/13 12:58:17 executed programs: 928 2025/12/13 12:58:22 executed programs: 1166 [ 134.672460][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.679358][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.684136][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.689706][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.693332][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.837302][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 134.928176][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.952230][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.954560][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.957506][ T8849] bridge_slave_0: entered allmulticast mode [ 134.960489][ T8849] bridge_slave_0: entered promiscuous mode [ 134.965248][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.968199][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.971138][ T8849] bridge_slave_1: entered allmulticast mode [ 134.974821][ T8849] bridge_slave_1: entered promiscuous mode [ 135.001988][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.008374][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.027733][ T8849] team0: Port device team_slave_0 added [ 135.030802][ T8849] team0: Port device team_slave_1 added [ 135.045450][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.047908][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.059154][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.068748][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.077169][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.079458][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.089729][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.125277][ T8849] hsr_slave_0: entered promiscuous mode [ 135.128342][ T8849] hsr_slave_1: entered promiscuous mode [ 135.130930][ T8849] debugfs: 'hsr0' already exists in 'hsr' [ 135.133348][ T8849] Cannot create hsr debugfs directory [ 135.208210][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.300094][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.391742][ T46] bridge_slave_1: left allmulticast mode [ 135.393695][ T46] bridge_slave_1: left promiscuous mode [ 135.396070][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.400407][ T46] bridge_slave_0: left allmulticast mode [ 135.402309][ T46] bridge_slave_0: left promiscuous mode [ 135.404332][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.574760][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.579533][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.583758][ T46] bond0 (unregistering): Released all slaves [ 135.874493][ T46] hsr_slave_0: left promiscuous mode [ 135.882354][ T46] hsr_slave_1: left promiscuous mode [ 135.885445][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.888207][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.895774][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.898872][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.918929][ T46] veth1_macvtap: left promiscuous mode [ 135.920851][ T46] veth0_macvtap: left promiscuous mode [ 135.923077][ T46] veth1_vlan: left promiscuous mode [ 135.925662][ T46] veth0_vlan: left promiscuous mode [ 136.193874][ T46] team0 (unregistering): Port device team_slave_1 removed [ 136.214788][ T46] team0 (unregistering): Port device team_slave_0 removed [ 136.584816][ T8849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.598023][ T8849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.606942][ T8849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.613451][ T8849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.676093][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.684671][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.692310][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.695286][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.702540][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.705410][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.745198][ T5297] Bluetooth: hci0: command tx timeout [ 136.850084][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.886699][ T8849] veth0_vlan: entered promiscuous mode [ 136.894171][ T8849] veth1_vlan: entered promiscuous mode [ 136.919120][ T8849] veth0_macvtap: entered promiscuous mode [ 136.925027][ T8849] veth1_macvtap: entered promiscuous mode [ 136.939028][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.947830][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.956451][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.960016][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.964510][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.968436][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.010802][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.013528][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.033536][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.036298][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.777331][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.779366][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.817130][ T5297] Bluetooth: hci0: command tx timeout 2025/12/13 12:58:27 executed programs: 1289 [ 140.895188][ T5297] Bluetooth: hci0: command tx timeout [ 142.985166][ T5297] Bluetooth: hci0: command tx timeout 2025/12/13 12:58:32 executed programs: 1527 2025/12/13 12:58:37 executed programs: 1766 [ 149.748527][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.753738][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.756755][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.762456][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.766367][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.929974][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.939989][T10092] chnl_net:caif_netlink_parms(): no params data found [ 150.003429][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.020608][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.023682][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.027144][T10092] bridge_slave_0: entered allmulticast mode [ 150.030923][T10092] bridge_slave_0: entered promiscuous mode [ 150.035635][T10092] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.038707][T10092] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.041731][T10092] bridge_slave_1: entered allmulticast mode [ 150.045501][T10092] bridge_slave_1: entered promiscuous mode [ 150.069083][T10092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.080462][T10092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.092571][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.120940][T10092] team0: Port device team_slave_0 added [ 150.125794][T10092] team0: Port device team_slave_1 added [ 150.147060][T10092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.150000][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.160905][T10092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.167041][T10092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.169887][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.180676][T10092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.193149][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.218776][T10092] hsr_slave_0: entered promiscuous mode [ 150.221106][T10092] hsr_slave_1: entered promiscuous mode [ 150.334557][ T61] bridge_slave_1: left allmulticast mode [ 150.337184][ T61] bridge_slave_1: left promiscuous mode [ 150.340237][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.346612][ T61] bridge_slave_0: left allmulticast mode [ 150.349021][ T61] bridge_slave_0: left promiscuous mode [ 150.351501][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.522313][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.526490][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.530011][ T61] bond0 (unregistering): Released all slaves [ 150.910242][ T61] hsr_slave_0: left promiscuous mode [ 150.913106][ T61] hsr_slave_1: left promiscuous mode [ 150.919452][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.922565][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.927950][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.931081][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.942279][ T61] veth1_macvtap: left promiscuous mode [ 150.944671][ T61] veth0_macvtap: left promiscuous mode [ 150.948078][ T61] veth1_vlan: left promiscuous mode [ 150.950363][ T61] veth0_vlan: left promiscuous mode [ 151.227904][ T61] team0 (unregistering): Port device team_slave_1 removed [ 151.248926][ T61] team0 (unregistering): Port device team_slave_0 removed [ 151.456341][T10092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.464492][T10092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.473043][T10092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.478165][T10092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.547619][T10092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.559995][T10092] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.567399][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.570544][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.593213][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.596357][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.710688][T10092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.733718][T10092] veth0_vlan: entered promiscuous mode [ 151.738807][T10092] veth1_vlan: entered promiscuous mode [ 151.753676][T10092] veth0_macvtap: entered promiscuous mode [ 151.758184][T10092] veth1_macvtap: entered promiscuous mode [ 151.765776][T10092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.771744][T10092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.775127][ T5297] Bluetooth: hci1: command tx timeout [ 151.778716][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.782397][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.787379][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.791078][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.825589][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.828935][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.840577][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.843238][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.865527][ T5297] Bluetooth: hci1: command tx timeout 2025/12/13 12:58:42 executed programs: 1902 [ 155.945166][ T5297] Bluetooth: hci1: command tx timeout [ 158.015564][ T5297] Bluetooth: hci1: command tx timeout 2025/12/13 12:58:47 executed programs: 2139 2025/12/13 12:58:53 executed programs: 2377 [ 164.669813][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.677859][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.681722][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.685701][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.689063][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.809885][T11334] chnl_net:caif_netlink_parms(): no params data found [ 164.910138][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.913359][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.916609][T11334] bridge_slave_0: entered allmulticast mode [ 164.920656][T11334] bridge_slave_0: entered promiscuous mode [ 164.936620][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.946897][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.950281][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.953542][T11334] bridge_slave_1: entered allmulticast mode [ 164.957789][T11334] bridge_slave_1: entered promiscuous mode [ 164.983678][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.989482][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.012727][T11334] team0: Port device team_slave_0 added [ 165.023472][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.032808][T11334] team0: Port device team_slave_1 added [ 165.053643][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.056743][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.067403][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.072598][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.075548][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.085758][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.120065][T11334] hsr_slave_0: entered promiscuous mode [ 165.123171][T11334] hsr_slave_1: entered promiscuous mode [ 165.126239][T11334] debugfs: 'hsr0' already exists in 'hsr' [ 165.128723][T11334] Cannot create hsr debugfs directory [ 165.164934][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.269144][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.388589][ T61] bridge_slave_1: left allmulticast mode [ 165.390444][ T61] bridge_slave_1: left promiscuous mode [ 165.392354][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.396745][ T61] bridge_slave_0: left allmulticast mode [ 165.398866][ T61] bridge_slave_0: left promiscuous mode [ 165.401337][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.554399][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.559404][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.563315][ T61] bond0 (unregistering): Released all slaves [ 165.969989][ T61] hsr_slave_0: left promiscuous mode [ 165.972167][ T61] hsr_slave_1: left promiscuous mode [ 165.974993][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.978919][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.982581][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.985738][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.002519][ T61] veth1_macvtap: left promiscuous mode [ 166.004874][ T61] veth0_macvtap: left promiscuous mode [ 166.007363][ T61] veth1_vlan: left promiscuous mode [ 166.009649][ T61] veth0_vlan: left promiscuous mode [ 166.229832][ T61] team0 (unregistering): Port device team_slave_1 removed [ 166.244974][ T61] team0 (unregistering): Port device team_slave_0 removed [ 166.467510][T11334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.472159][T11334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.476247][T11334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.480737][T11334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.537273][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.546863][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.552247][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.555306][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.563342][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.566469][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.719553][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.735197][ T64] Bluetooth: hci0: command tx timeout [ 166.747040][T11334] veth0_vlan: entered promiscuous mode [ 166.754355][T11334] veth1_vlan: entered promiscuous mode [ 166.772197][T11334] veth0_macvtap: entered promiscuous mode [ 166.777916][T11334] veth1_macvtap: entered promiscuous mode [ 166.792303][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.800116][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.807736][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.811270][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.815509][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.822364][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.860940][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.864326][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.883126][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.887333][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.815377][ T64] Bluetooth: hci0: command tx timeout 2025/12/13 12:58:58 executed programs: 2506 [ 170.905268][ T64] Bluetooth: hci0: command tx timeout [ 171.435837][T11813] ================================================================== [ 171.438523][T11813] BUG: KASAN: slab-use-after-free in afs_dynroot_readdir+0x94e/0xb70 [ 171.441298][T11813] Read of size 4 at addr ffff888033a63148 by task syz.0.2634/11813 [ 171.446005][T11813] [ 171.446989][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.0.2634 Not tainted syzkaller #0 PREEMPT(full) [ 171.447002][T11813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.447009][T11813] Call Trace: [ 171.447013][T11813] [ 171.447017][T11813] dump_stack_lvl+0x116/0x1f0 [ 171.447031][T11813] print_report+0xcd/0x630 [ 171.447044][T11813] ? __virt_addr_valid+0x81/0x610 [ 171.447054][T11813] ? __phys_addr+0xe8/0x180 [ 171.447063][T11813] ? afs_dynroot_readdir+0x94e/0xb70 [ 171.447077][T11813] kasan_report+0xe0/0x110 [ 171.447089][T11813] ? afs_dynroot_readdir+0x94e/0xb70 [ 171.447103][T11813] afs_dynroot_readdir+0x94e/0xb70 [ 171.447118][T11813] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 171.447132][T11813] ? selinux_file_permission+0x126/0x660 [ 171.447145][T11813] iterate_dir+0x296/0xaf0 [ 171.447157][T11813] __x64_sys_getdents+0x13c/0x2b0 [ 171.447169][T11813] ? __pfx___x64_sys_getdents+0x10/0x10 [ 171.447181][T11813] ? __pfx_filldir+0x10/0x10 [ 171.447194][T11813] do_syscall_64+0xcd/0xf80 [ 171.447204][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.447215][T11813] RIP: 0033:0x7f007cb8f7c9 [ 171.447223][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.447233][T11813] RSP: 002b:00007f007da6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 171.447243][T11813] RAX: ffffffffffffffda RBX: 00007f007cde5fa0 RCX: 00007f007cb8f7c9 [ 171.447250][T11813] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 171.447255][T11813] RBP: 00007f007cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.447261][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.447267][T11813] R13: 00007f007cde6038 R14: 00007f007cde5fa0 R15: 00007fffa843be78 [ 171.447276][T11813] [ 171.447279][T11813] [ 171.513998][T11813] Allocated by task 11807: [ 171.515407][T11813] kasan_save_stack+0x33/0x60 [ 171.516917][T11813] kasan_save_track+0x14/0x30 [ 171.518554][T11813] __kasan_kmalloc+0xaa/0xb0 [ 171.520047][T11813] afs_lookup_cell+0x8b2/0x1900 [ 171.521588][T11813] afs_dynroot_lookup+0x2e2/0xa90 [ 171.523216][T11813] __lookup_slow+0x251/0x460 [ 171.524696][T11813] lookup_slow+0x50/0x70 [ 171.526039][T11813] path_lookupat+0x5e9/0xc40 [ 171.527511][T11813] filename_lookup+0x224/0x5f0 [ 171.529105][T11813] user_path_at+0x3a/0x60 [ 171.530637][T11813] __x64_sys_mount+0x1fb/0x310 [ 171.532644][T11813] do_syscall_64+0xcd/0xf80 [ 171.534353][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.536222][T11813] [ 171.536994][T11813] Freed by task 11813: [ 171.538315][T11813] kasan_save_stack+0x33/0x60 [ 171.539955][T11813] kasan_save_track+0x14/0x30 [ 171.541485][T11813] kasan_save_free_info+0x3b/0x60 [ 171.543078][T11813] __kasan_slab_free+0x5f/0x80 [ 171.544610][T11813] kfree+0x2f8/0x6e0 [ 171.545868][T11813] afs_cell_destroy+0x21c/0x310 [ 171.547414][T11813] rcu_core+0x79c/0x15f0 [ 171.548797][T11813] handle_softirqs+0x219/0x950 [ 171.550381][T11813] __irq_exit_rcu+0x109/0x170 [ 171.552371][T11813] irq_exit_rcu+0x9/0x30 [ 171.553726][T11813] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 171.555488][T11813] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.557434][T11813] [ 171.558290][T11813] Last potentially related work creation: [ 171.560278][T11813] kasan_save_stack+0x33/0x60 [ 171.562079][T11813] kasan_record_aux_stack+0xa7/0xc0 [ 171.564073][T11813] __call_rcu_common.constprop.0+0xa5/0xa10 [ 171.565923][T11813] process_one_work+0x9ba/0x1b20 [ 171.567479][T11813] worker_thread+0x6c8/0xf10 [ 171.568980][T11813] kthread+0x3c5/0x780 [ 171.570268][T11813] ret_from_fork+0x983/0xb10 [ 171.571820][T11813] ret_from_fork_asm+0x1a/0x30 [ 171.573407][T11813] [ 171.574174][T11813] Second to last potentially related work creation: [ 171.576234][T11813] kasan_save_stack+0x33/0x60 [ 171.577764][T11813] kasan_record_aux_stack+0xa7/0xc0 [ 171.579404][T11813] insert_work+0x36/0x230 [ 171.580920][T11813] __queue_work+0x94f/0x10e0 [ 171.582492][T11813] queue_work_on+0x1a4/0x1f0 [ 171.584417][T11813] afs_put_cell.part.0+0x1ab/0x240 [ 171.586496][T11813] afs_manage_cell_work+0x6ac/0x1960 [ 171.588204][T11813] process_one_work+0x9ba/0x1b20 [ 171.589991][T11813] worker_thread+0x6c8/0xf10 [ 171.591896][T11813] kthread+0x3c5/0x780 [ 171.593561][T11813] ret_from_fork+0x983/0xb10 [ 171.595395][T11813] ret_from_fork_asm+0x1a/0x30 [ 171.597341][T11813] [ 171.598318][T11813] The buggy address belongs to the object at ffff888033a63000 [ 171.598318][T11813] which belongs to the cache kmalloc-1k of size 1024 [ 171.603731][T11813] The buggy address is located 328 bytes inside of [ 171.603731][T11813] freed 1024-byte region [ffff888033a63000, ffff888033a63400) [ 171.608358][T11813] [ 171.609167][T11813] The buggy address belongs to the physical page: [ 171.611217][T11813] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33a60 [ 171.613974][T11813] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 171.617370][T11813] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 171.619851][T11813] page_type: f5(slab) [ 171.621123][T11813] raw: 00fff00000000040 ffff88801b442dc0 dead000000000100 dead000000000122 [ 171.624210][T11813] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 171.627013][T11813] head: 00fff00000000040 ffff88801b442dc0 dead000000000100 dead000000000122 [ 171.629775][T11813] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 171.632515][T11813] head: 00fff00000000003 ffffea0000ce9801 00000000ffffffff 00000000ffffffff [ 171.635200][T11813] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 171.638031][T11813] page dumped because: kasan: bad access detected [ 171.640261][T11813] page_owner tracks the page as allocated [ 171.642046][T11813] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5656, tgid 5656 (dhcpcd-run-hook), ts 38831842937, free_ts 38807844702 [ 171.648724][T11813] post_alloc_hook+0x1af/0x220 [ 171.650435][T11813] get_page_from_freelist+0xd0b/0x31a0 [ 171.652466][T11813] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 171.654600][T11813] alloc_pages_mpol+0x1fb/0x550 [ 171.656386][T11813] new_slab+0x2c3/0x430 [ 171.657717][T11813] ___slab_alloc+0xe18/0x1c90 [ 171.659249][T11813] __slab_alloc.constprop.0+0x63/0x110 [ 171.661000][T11813] __kmalloc_noprof+0x4fc/0x910 [ 171.662547][T11813] tomoyo_init_log+0x1385/0x2140 [ 171.664128][T11813] tomoyo_supervisor+0x302/0x13b0 [ 171.666125][T11813] tomoyo_env_perm+0x191/0x200 [ 171.667937][T11813] tomoyo_find_next_domain+0xec1/0x20b0 [ 171.669905][T11813] tomoyo_bprm_check_security+0x12d/0x1d0 [ 171.671711][T11813] security_bprm_check+0x1b9/0x1e0 [ 171.673337][T11813] bprm_execve+0x81e/0x1620 [ 171.674802][T11813] do_execveat_common.isra.0+0x4a5/0x610 [ 171.676600][T11813] page last free pid 5655 tgid 5655 stack trace: [ 171.678595][T11813] __free_frozen_pages+0x7df/0x1170 [ 171.680313][T11813] qlist_free_all+0x4c/0xf0 [ 171.681761][T11813] kasan_quarantine_reduce+0x195/0x1e0 [ 171.683484][T11813] __kasan_slab_alloc+0x69/0x90 [ 171.685271][T11813] kmem_cache_alloc_noprof+0x25e/0x770 [ 171.687524][T11813] vm_area_alloc+0x1f/0x160 [ 171.689223][T11813] _install_special_mapping+0x2e/0x3d0 [ 171.691322][T11813] map_vdso+0x16e/0x580 [ 171.693074][T11813] arch_setup_additional_pages+0x41/0x60 [ 171.695399][T11813] load_elf_binary+0x1e51/0x4fe0 [ 171.697109][T11813] bprm_execve+0x8c2/0x1620 [ 171.698602][T11813] do_execveat_common.isra.0+0x4a5/0x610 [ 171.700774][T11813] __x64_sys_execve+0x8e/0xb0 [ 171.702303][T11813] do_syscall_64+0xcd/0xf80 [ 171.703758][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.705621][T11813] [ 171.706393][T11813] Memory state around the buggy address: [ 171.708601][T11813] ffff888033a63000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.711254][T11813] ffff888033a63080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.713813][T11813] >ffff888033a63100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.716278][T11813] ^ [ 171.718302][T11813] ffff888033a63180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.720852][T11813] ffff888033a63200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.723805][T11813] ================================================================== [ 171.729226][T11813] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.732314][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.0.2634 Not tainted syzkaller #0 PREEMPT(full) [ 171.736208][T11813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 171.740638][T11813] Call Trace: [ 171.742058][T11813] [ 171.743329][T11813] dump_stack_lvl+0x3d/0x1f0 [ 171.745288][T11813] vpanic+0x640/0x6f0 [ 171.747014][T11813] panic+0xca/0xd0 [ 171.748660][T11813] ? __pfx_panic+0x10/0x10 [ 171.750566][T11813] ? afs_dynroot_readdir+0x94e/0xb70 [ 171.752822][T11813] ? preempt_schedule_common+0x44/0xc0 [ 171.755104][T11813] ? preempt_schedule_thunk+0x16/0x30 [ 171.757312][T11813] ? check_panic_on_warn+0x1f/0xb0 [ 171.759309][T11813] check_panic_on_warn+0xab/0xb0 [ 171.761417][T11813] end_report+0x107/0x160 [ 171.763217][T11813] kasan_report+0xee/0x110 [ 171.764913][T11813] ? afs_dynroot_readdir+0x94e/0xb70 [ 171.767144][T11813] afs_dynroot_readdir+0x94e/0xb70 [ 171.769362][T11813] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 171.771771][T11813] ? selinux_file_permission+0x126/0x660 [ 171.774130][T11813] iterate_dir+0x296/0xaf0 [ 171.776034][T11813] __x64_sys_getdents+0x13c/0x2b0 [ 171.778202][T11813] ? __pfx___x64_sys_getdents+0x10/0x10 [ 171.780534][T11813] ? __pfx_filldir+0x10/0x10 [ 171.782495][T11813] do_syscall_64+0xcd/0xf80 [ 171.784419][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.786574][T11813] RIP: 0033:0x7f007cb8f7c9 [ 171.788384][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.796066][T11813] RSP: 002b:00007f007da6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 171.799531][T11813] RAX: ffffffffffffffda RBX: 00007f007cde5fa0 RCX: 00007f007cb8f7c9 [ 171.802283][T11813] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 171.804769][T11813] RBP: 00007f007cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.807352][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.810439][T11813] R13: 00007f007cde6038 R14: 00007f007cde5fa0 R15: 00007fffa843be78 [ 171.813768][T11813] [ 171.815840][T11813] Kernel Offset: disabled [ 171.817678][T11813] Rebooting in 86400 seconds..