[ 85.735572][ T40] audit: type=1400 audit(1779553187.187:209): avc: denied { transition } for pid=5960 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.742889][ T40] audit: type=1400 audit(1779553187.187:210): avc: denied { noatsecure } for pid=5960 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.752110][ T40] audit: type=1400 audit(1779553187.197:211): avc: denied { rlimitinh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.758060][ T40] audit: type=1400 audit(1779553187.197:212): avc: denied { siginh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.516551][ T50] cfg80211: failed to load regulatory.db [ 90.595280][ T40] audit: type=1400 audit(1779553192.047:213): avc: denied { write } for pid=5968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.663817][ T40] audit: type=1400 audit(1779553192.107:214): avc: denied { write } for pid=5971 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.950253][ T40] audit: type=1400 audit(1779553192.397:215): avc: denied { write } for pid=5975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.010468][ T40] audit: type=1400 audit(1779553192.457:216): avc: denied { write } for pid=5978 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.449193][ T40] audit: type=1400 audit(1779553192.897:217): avc: denied { write } for pid=5981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.510983][ T40] audit: type=1400 audit(1779553192.957:218): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.586584][ T40] audit: type=1400 audit(1779553193.037:219): avc: denied { write } for pid=5987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.645571][ T40] audit: type=1400 audit(1779553193.097:220): avc: denied { write } for pid=5990 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:10965' (ED25519) to the list of known hosts. 2026/05/23 16:19:55 parsed 1 programs [ 96.447357][ T40] audit: type=1400 audit(1779553197.897:221): avc: denied { read write } for pid=6010 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.458711][ T40] audit: type=1400 audit(1779553197.897:222): avc: denied { open } for pid=6010 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.546046][ T40] audit: type=1400 audit(1779553197.997:223): avc: denied { unlink } for pid=6010 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.926263][ T40] audit: type=1400 audit(1779553198.377:224): avc: denied { relabelto } for pid=6013 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 97.842152][ T6010] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.201734][ T40] audit: type=1400 audit(1779553201.647:225): avc: denied { sys_module } for pid=6017 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.652536][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.655802][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.658880][ T6017] bridge_slave_0: entered allmulticast mode [ 100.662845][ T6017] bridge_slave_0: entered promiscuous mode [ 100.668516][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.671998][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.675256][ T6017] bridge_slave_1: entered allmulticast mode [ 100.679212][ T6017] bridge_slave_1: entered promiscuous mode [ 100.741151][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.750587][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.817180][ T6017] team0: Port device team_slave_0 added [ 100.822378][ T6017] team0: Port device team_slave_1 added [ 100.880998][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.883913][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.895391][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.901291][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.904539][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.916005][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.987550][ T6017] hsr_slave_0: entered promiscuous mode [ 100.990943][ T6017] hsr_slave_1: entered promiscuous mode [ 101.147138][ T40] audit: type=1400 audit(1779553202.597:226): avc: denied { write } for pid=6034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.195676][ T40] audit: type=1400 audit(1779553202.647:227): avc: denied { write } for pid=6037 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.292047][ T40] audit: type=1400 audit(1779553202.737:228): avc: denied { write } for pid=6040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.346989][ T40] audit: type=1400 audit(1779553202.797:229): avc: denied { write } for pid=6043 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.426325][ T40] audit: type=1400 audit(1779553202.877:230): avc: denied { write } for pid=6045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.475979][ T40] audit: type=1400 audit(1779553202.927:231): avc: denied { write } for pid=6048 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.578321][ T40] audit: type=1400 audit(1779553203.027:232): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.603885][ T6017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.609101][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.612221][ T6017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.625023][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.628640][ T6017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.634208][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.637484][ T6017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.641929][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.646215][ T40] audit: type=1400 audit(1779553203.097:233): avc: denied { write } for pid=6053 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.709358][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.720833][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.726450][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.728892][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.735128][ T40] audit: type=1400 audit(1779553203.187:234): avc: denied { write } for pid=6062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.754250][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.757519][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.787176][ T40] audit: type=1400 audit(1779553203.237:235): avc: denied { write } for pid=6065 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.872347][ T40] audit: type=1400 audit(1779553203.317:236): avc: denied { write } for pid=6069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.936105][ T40] audit: type=1400 audit(1779553203.387:237): avc: denied { write } for pid=6074 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.037367][ T40] audit: type=1400 audit(1779553203.487:238): avc: denied { write } for pid=6079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.081382][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.088925][ T40] audit: type=1400 audit(1779553203.537:239): avc: denied { write } for pid=6085 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.110808][ T6017] veth0_vlan: entered promiscuous mode [ 102.119529][ T6017] veth1_vlan: entered promiscuous mode [ 102.143378][ T6017] veth0_macvtap: entered promiscuous mode [ 102.148260][ T6017] veth1_macvtap: entered promiscuous mode [ 102.160476][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.168688][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.174130][ T40] audit: type=1400 audit(1779553203.627:240): avc: denied { write } for pid=6087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.185746][ T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.189375][ T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.197096][ T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.200817][ T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.357522][ T160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.443192][ T160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.564789][ T160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.687110][ T160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.627397][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.632999][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.639207][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.645041][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.648944][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.212611][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.217263][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.238299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.241380][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/23 16:20:06 executed programs: 0 [ 104.829957][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.836012][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.840644][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.846901][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.850570][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.256374][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.258878][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.261356][ T6190] bridge_slave_0: entered allmulticast mode [ 105.264198][ T6190] bridge_slave_0: entered promiscuous mode [ 105.268517][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.271128][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.273839][ T6190] bridge_slave_1: entered allmulticast mode [ 105.276900][ T6190] bridge_slave_1: entered promiscuous mode [ 105.317984][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.325638][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.376600][ T6190] team0: Port device team_slave_0 added [ 105.384289][ T6190] team0: Port device team_slave_1 added [ 105.428917][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.431553][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.440211][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.446917][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.449660][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.457807][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.503711][ T6190] hsr_slave_0: entered promiscuous mode [ 105.506177][ T6190] hsr_slave_1: entered promiscuous mode [ 105.508704][ T6190] debugfs: 'hsr0' already exists in 'hsr' [ 105.510676][ T6190] Cannot create hsr debugfs directory [ 105.796743][ T160] bridge_slave_1: left allmulticast mode [ 105.799357][ T160] bridge_slave_1: left promiscuous mode [ 105.802069][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.809255][ T160] bridge_slave_0: left allmulticast mode [ 105.812013][ T160] bridge_slave_0: left promiscuous mode [ 105.815444][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.030053][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.038519][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.044347][ T160] bond0 (unregistering): Released all slaves [ 106.076952][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.171681][ T160] hsr_slave_0: left promiscuous mode [ 106.174046][ T160] hsr_slave_1: left promiscuous mode [ 106.176200][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.178938][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.182126][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.184963][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.192584][ T160] veth1_macvtap: left promiscuous mode [ 106.194823][ T160] veth0_macvtap: left promiscuous mode [ 106.196836][ T160] veth1_vlan: left promiscuous mode [ 106.198767][ T160] veth0_vlan: left promiscuous mode [ 106.332910][ T160] team0 (unregistering): Port device team_slave_1 removed [ 106.349034][ T160] team0 (unregistering): Port device team_slave_0 removed [ 106.468447][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 106.637667][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 106.637690][ T40] audit: type=1400 audit(1779553208.087:257): avc: denied { write } for pid=6227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.690832][ T40] audit: type=1400 audit(1779553208.137:258): avc: denied { write } for pid=6230 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.780077][ T40] audit: type=1400 audit(1779553208.227:259): avc: denied { write } for pid=6232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.827407][ T40] audit: type=1400 audit(1779553208.277:260): avc: denied { write } for pid=6235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.873540][ T5091] Bluetooth: hci0: command tx timeout [ 106.878983][ T6190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.885058][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.888556][ T6190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.894566][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.897897][ T6190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.904243][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.908052][ T6190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.912524][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.921864][ T40] audit: type=1400 audit(1779553208.367:261): avc: denied { write } for pid=6237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.972837][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.979364][ T40] audit: type=1400 audit(1779553208.427:262): avc: denied { write } for pid=6246 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.987240][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.995504][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.997989][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.009697][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.012702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.068729][ T40] audit: type=1400 audit(1779553208.517:263): avc: denied { write } for pid=6248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.127231][ T40] audit: type=1400 audit(1779553208.577:264): avc: denied { write } for pid=6253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.662065][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.689065][ T6190] veth0_vlan: entered promiscuous mode [ 107.694583][ T6190] veth1_vlan: entered promiscuous mode [ 107.723306][ T6190] veth0_macvtap: entered promiscuous mode [ 107.729178][ T6190] veth1_macvtap: entered promiscuous mode [ 107.742345][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.750809][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.760491][ T116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.763507][ T116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.769073][ T116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.773190][ T116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.862880][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.865890][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.879811][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.883311][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.933640][ T40] audit: type=1400 audit(1779553209.387:265): avc: denied { create } for pid=6264 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.942193][ T40] audit: type=1400 audit(1779553209.387:266): avc: denied { write } for pid=6264 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.102018][ T6265] infiniband syz1: set active [ 108.105364][ T6265] infiniband syz1: added syz_tun [ 108.120744][ T6265] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 108.126053][ T6265] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 108.132407][ T6265] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 108.161386][ T6265] RDS/IB: syz1: added [ 108.163406][ T6265] smc: adding ib device syz1 with port count 1 [ 108.166254][ T6265] smc: ib device syz1 port 1 has no pnetid [ 108.309836][ T6270] syz1: rxe_newlink: already configured on syz_tun [ 108.318868][ T59] ================================================================== [ 108.321711][ T59] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xb60/0xbe0 [ 108.324686][ T59] Read of size 8 at addr ffff88805b55a410 by task kworker/u32:3/59 [ 108.328728][ T59] [ 108.329825][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 108.329842][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.329851][ T59] Workqueue: rdma_cm cma_iboe_join_work_handler [ 108.329876][ T59] Call Trace: [ 108.329912][ T59] [ 108.329919][ T59] dump_stack_lvl+0x100/0x190 [ 108.329937][ T59] print_report+0x13d/0x4b0 [ 108.329962][ T59] ? __virt_addr_valid+0x239/0x430 [ 108.329982][ T59] ? ucma_create_uevent+0xb60/0xbe0 [ 108.330005][ T59] kasan_report+0xdf/0x1d0 [ 108.330027][ T59] ? ucma_create_uevent+0xb60/0xbe0 [ 108.330050][ T59] ucma_create_uevent+0xb60/0xbe0 [ 108.330072][ T59] ucma_event_handler+0x102/0x940 [ 108.330090][ T59] ? rcu_is_watching+0x12/0xc0 [ 108.330110][ T59] cma_cm_event_handler+0x9b/0x320 [ 108.330127][ T59] cma_iboe_join_work_handler+0xca/0x180 [ 108.330143][ T59] process_one_work+0xa0e/0x1980 [ 108.330160][ T59] ? __pfx_process_one_work+0x10/0x10 [ 108.330175][ T59] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 108.330192][ T59] worker_thread+0x5ef/0xe50 [ 108.330206][ T59] ? __pfx_worker_thread+0x10/0x10 [ 108.330219][ T59] ? kthread+0x13a/0x450 [ 108.330231][ T59] ? __pfx_worker_thread+0x10/0x10 [ 108.330243][ T59] kthread+0x370/0x450 [ 108.330254][ T59] ? __pfx_kthread+0x10/0x10 [ 108.330266][ T59] ret_from_fork+0x72b/0xd50 [ 108.330281][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 108.330294][ T59] ? __switch_to+0x800/0x1100 [ 108.330310][ T59] ? __pfx_kthread+0x10/0x10 [ 108.330322][ T59] ret_from_fork_asm+0x1a/0x30 [ 108.330340][ T59] [ 108.330343][ T59] [ 108.388278][ T59] Allocated by task 6270: [ 108.389723][ T59] kasan_save_stack+0x30/0x50 [ 108.391302][ T59] kasan_save_track+0x14/0x30 [ 108.392946][ T59] __kasan_kmalloc+0xaa/0xb0 [ 108.394516][ T59] ucma_process_join+0x232/0xa20 [ 108.396599][ T59] ucma_join_multicast+0xe9/0x160 [ 108.398672][ T59] ucma_write+0x1fb/0x330 [ 108.400374][ T59] vfs_write+0x2aa/0x1070 [ 108.401979][ T59] ksys_write+0x1f8/0x250 [ 108.403538][ T59] do_syscall_64+0x10b/0xf80 [ 108.405052][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.407061][ T59] [ 108.407882][ T59] Freed by task 6270: [ 108.409198][ T59] kasan_save_stack+0x30/0x50 [ 108.410739][ T59] kasan_save_track+0x14/0x30 [ 108.412319][ T59] kasan_save_free_info+0x3b/0x70 [ 108.414067][ T59] __kasan_slab_free+0x5f/0x80 [ 108.415837][ T59] kfree+0x223/0x6c0 [ 108.417669][ T59] ucma_process_join+0x39a/0xa20 [ 108.419664][ T59] ucma_join_multicast+0xe9/0x160 [ 108.421453][ T59] ucma_write+0x1fb/0x330 [ 108.422866][ T59] vfs_write+0x2aa/0x1070 [ 108.424292][ T59] ksys_write+0x1f8/0x250 [ 108.425718][ T59] do_syscall_64+0x10b/0xf80 [ 108.427297][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.429223][ T59] [ 108.430057][ T59] The buggy address belongs to the object at ffff88805b55a400 [ 108.430057][ T59] which belongs to the cache kmalloc-192 of size 192 [ 108.434612][ T59] The buggy address is located 16 bytes inside of [ 108.434612][ T59] freed 192-byte region [ffff88805b55a400, ffff88805b55a4c0) [ 108.439510][ T59] [ 108.440460][ T59] The buggy address belongs to the physical page: [ 108.442821][ T59] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b55a [ 108.445732][ T59] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.448116][ T59] page_type: f5(slab) [ 108.449458][ T59] raw: 00fff00000000000 ffff88801b8423c0 dead000000000100 dead000000000122 [ 108.452206][ T59] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 108.455002][ T59] page dumped because: kasan: bad access detected [ 108.457118][ T59] page_owner tracks the page as allocated [ 108.459098][ T59] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6190, tgid 6190 (syz-executor), ts 107757199054, free_ts 107728010459 [ 108.466435][ T59] post_alloc_hook+0xfd/0x120 [ 108.468042][ T59] get_page_from_freelist+0x11a6/0x33b0 [ 108.469911][ T59] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 108.471870][ T59] new_slab+0xa6/0x6c0 [ 108.473252][ T59] refill_objects+0x277/0x420 [ 108.474990][ T59] __pcs_replace_empty_main+0x375/0x650 [ 108.477100][ T59] __kmalloc_cache_noprof+0x493/0x6f0 [ 108.479576][ T59] netdevice_event+0x308/0x9a0 [ 108.481824][ T59] notifier_call_chain+0x99/0x400 [ 108.483746][ T59] call_netdevice_notifiers_info+0xbe/0x110 [ 108.485879][ T59] netif_set_mac_address+0x370/0x4a0 [ 108.487689][ T59] do_setlink.isra.0+0x75f/0x3e60 [ 108.489394][ T59] rtnl_newlink+0x11c2/0x2380 [ 108.491190][ T59] rtnetlink_rcv_msg+0x95e/0xe90 [ 108.493238][ T59] netlink_rcv_skb+0x159/0x420 [ 108.494708][ T59] netlink_unicast+0x585/0x850 [ 108.496394][ T59] page last free pid 6190 tgid 6190 stack trace: [ 108.498457][ T59] __free_frozen_pages+0x747/0x1040 [ 108.500250][ T59] qlist_free_all+0x47/0xf0 [ 108.501808][ T59] kasan_quarantine_reduce+0x1a0/0x1f0 [ 108.503726][ T59] __kasan_slab_alloc+0x69/0x90 [ 108.505474][ T59] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 108.507633][ T59] __alloc_skb+0x140/0x710 [ 108.509337][ T59] netlink_alloc_large_skb+0x69/0x150 [ 108.511164][ T59] netlink_sendmsg+0x680/0xda0 [ 108.512853][ T59] __sys_sendto+0x468/0x4b0 [ 108.514342][ T59] __x64_sys_sendto+0xe0/0x1c0 [ 108.515920][ T59] do_syscall_64+0x10b/0xf80 [ 108.517447][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.519619][ T59] [ 108.520396][ T59] Memory state around the buggy address: [ 108.522301][ T59] ffff88805b55a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.525078][ T59] ffff88805b55a380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 108.528482][ T59] >ffff88805b55a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.531486][ T59] ^ [ 108.533163][ T59] ffff88805b55a480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 108.535793][ T59] ffff88805b55a500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.538413][ T59] ================================================================== [ 108.543494][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.546473][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u32:3 Not tainted syzkaller #0 PREEMPT(full) [ 108.550421][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.555474][ T59] Workqueue: rdma_cm cma_iboe_join_work_handler [ 108.558187][ T59] Call Trace: [ 108.559433][ T59] [ 108.560438][ T59] dump_stack_lvl+0x100/0x190 [ 108.562416][ T59] vpanic+0x552/0x970 [ 108.564160][ T59] ? __pfx_vpanic+0x10/0x10 [ 108.566075][ T59] ? mark_held_locks+0x40/0x70 [ 108.568122][ T59] ? ucma_create_uevent+0xb60/0xbe0 [ 108.570340][ T59] panic+0xd1/0xe0 [ 108.571951][ T59] ? __pfx_panic+0x10/0x10 [ 108.573770][ T59] ? ucma_create_uevent+0xb60/0xbe0 [ 108.575949][ T59] ? preempt_schedule_common+0x42/0xc0 [ 108.578228][ T59] ? check_panic_on_warn+0x1f/0x90 [ 108.580481][ T59] check_panic_on_warn.cold+0x19/0x34 [ 108.583002][ T59] end_report.part.0+0x3a/0x90 [ 108.585168][ T59] kasan_report.cold+0xe/0x18 [ 108.587195][ T59] ? ucma_create_uevent+0xb60/0xbe0 [ 108.589363][ T59] ucma_create_uevent+0xb60/0xbe0 [ 108.591491][ T59] ucma_event_handler+0x102/0x940 [ 108.593387][ T59] ? rcu_is_watching+0x12/0xc0 [ 108.595162][ T59] cma_cm_event_handler+0x9b/0x320 [ 108.597141][ T59] cma_iboe_join_work_handler+0xca/0x180 [ 108.599605][ T59] process_one_work+0xa0e/0x1980 [ 108.601560][ T59] ? __pfx_process_one_work+0x10/0x10 [ 108.603857][ T59] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 108.606402][ T59] worker_thread+0x5ef/0xe50 [ 108.608222][ T59] ? __pfx_worker_thread+0x10/0x10 [ 108.610273][ T59] ? kthread+0x13a/0x450 [ 108.611656][ T59] ? __pfx_worker_thread+0x10/0x10 [ 108.613464][ T59] kthread+0x370/0x450 [ 108.615246][ T59] ? __pfx_kthread+0x10/0x10 [ 108.616924][ T59] ret_from_fork+0x72b/0xd50 [ 108.618967][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 108.621248][ T59] ? __switch_to+0x800/0x1100 [ 108.623391][ T59] ? __pfx_kthread+0x10/0x10 [ 108.625403][ T59] ret_from_fork_asm+0x1a/0x30 [ 108.627471][ T59] [ 108.629872][ T59] Kernel Offset: disabled [ 108.631765][ T59] Rebooting in 86400 seconds..