[ 67.763514][ T43] audit: type=1400 audit(1789246943.477:208): avc: denied { transition } for pid=5963 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.765805][ T43] audit: type=1400 audit(1789246943.477:209): avc: denied { noatsecure } for pid=5963 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.765845][ T43] audit: type=1400 audit(1789246943.477:210): avc: denied { rlimitinh } for pid=5963 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.765875][ T43] audit: type=1400 audit(1789246943.477:211): avc: denied { siginh } for pid=5963 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 71.160313][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.160372][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.162831][ T851] cfg80211: failed to load regulatory.db
[ 71.909890][ T43] audit: type=1400 audit(1789246947.627:212): avc: denied { write } for pid=5967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 71.952598][ T43] audit: type=1400 audit(1789246947.667:213): avc: denied { write } for pid=5970 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 72.425932][ T43] audit: type=1400 audit(1789246948.137:214): avc: denied { write } for pid=5977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 72.490821][ T43] audit: type=1400 audit(1789246948.207:215): avc: denied { write } for pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.192912][ T43] audit: type=1400 audit(1789246948.907:216): avc: denied { write } for pid=5983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.263885][ T43] audit: type=1400 audit(1789246948.977:217): avc: denied { write } for pid=5986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.409220][ T43] audit: type=1400 audit(1789246949.127:218): avc: denied { write } for pid=5989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 73.453875][ T43] audit: type=1400 audit(1789246949.167:219): avc: denied { write } for pid=5992 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:21218' (ED25519) to the list of known hosts.
2026/09/12 21:02:31 parsed 1 programs
2026/09/12 21:02:31 serving rpc on tcp://40417
[ 76.039225][ T43] audit: type=1400 audit(1789246951.757:220): avc: denied { node_bind } for pid=6003 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 78.772810][ T43] audit: type=1400 audit(1789246954.487:221): avc: denied { read write } for pid=6012 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 78.773081][ T43] audit: type=1400 audit(1789246954.487:222): avc: denied { open } for pid=6012 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 78.799995][ T43] audit: type=1400 audit(1789246954.517:223): avc: denied { unlink } for pid=6012 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 79.188203][ T43] audit: type=1400 audit(1789246954.907:224): avc: denied { relabelto } for pid=6016 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 79.951033][ T6012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.852918][ T43] audit: type=1400 audit(1789246958.567:225): avc: denied { sys_module } for pid=6047 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 83.223260][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.223359][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.223431][ T6047] bridge_slave_0: entered allmulticast mode
[ 83.224513][ T6047] bridge_slave_0: entered promiscuous mode
[ 83.226597][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.226686][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.226753][ T6047] bridge_slave_1: entered allmulticast mode
[ 83.227834][ T6047] bridge_slave_1: entered promiscuous mode
[ 83.247565][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.249538][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.269574][ T6047] team0: Port device team_slave_0 added
[ 83.271320][ T6047] team0: Port device team_slave_1 added
[ 83.288184][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.288198][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.288214][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.289354][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.289362][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.289378][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.316239][ T6047] hsr_slave_0: entered promiscuous mode
[ 83.316794][ T6047] hsr_slave_1: entered promiscuous mode
[ 83.446277][ T43] audit: type=1400 audit(1789246959.157:226): avc: denied { write } for pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.501706][ T43] audit: type=1400 audit(1789246959.217:227): avc: denied { write } for pid=6066 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.587036][ T43] audit: type=1400 audit(1789246959.297:228): avc: denied { write } for pid=6068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.627024][ T43] audit: type=1400 audit(1789246959.337:229): avc: denied { write } for pid=6071 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.704985][ T43] audit: type=1400 audit(1789246959.417:230): avc: denied { write } for pid=6073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.835470][ T43] kauditd_printk_skb: 1 callbacks suppressed
[ 83.835488][ T43] audit: type=1400 audit(1789246959.547:232): avc: denied { write } for pid=6078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.868980][ T6047] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.870835][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 83.871201][ T6047] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.872762][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 83.873314][ T6047] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.875056][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 83.875582][ T6047] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.877572][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 83.914333][ T43] audit: type=1400 audit(1789246959.627:233): avc: denied { write } for pid=6081 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.954269][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.966202][ T6047] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.971571][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.971656][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.976622][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.976702][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.017555][ T43] audit: type=1400 audit(1789246959.737:234): avc: denied { write } for pid=6089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.066121][ T43] audit: type=1400 audit(1789246959.777:235): avc: denied { write } for pid=6094 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.142449][ T43] audit: type=1400 audit(1789246959.857:236): avc: denied { write } for pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.193882][ T43] audit: type=1400 audit(1789246959.907:237): avc: denied { write } for pid=6103 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.264186][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.273762][ T43] audit: type=1400 audit(1789246959.987:238): avc: denied { write } for pid=6108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.294272][ T6047] veth0_vlan: entered promiscuous mode
[ 84.298042][ T6047] veth1_vlan: entered promiscuous mode
[ 84.311470][ T6047] veth0_macvtap: entered promiscuous mode
[ 84.313477][ T6047] veth1_macvtap: entered promiscuous mode
[ 84.319981][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.324968][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.346438][ T43] audit: type=1400 audit(1789246960.057:239): avc: denied { write } for pid=6112 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.388717][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.388756][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.388785][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.388813][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.414328][ T43] audit: type=1400 audit(1789246960.127:240): avc: denied { write } for pid=6115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.446270][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.483097][ T43] audit: type=1400 audit(1789246960.197:241): avc: denied { write } for pid=6120 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.516223][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.574506][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.651679][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.248953][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.250536][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.251267][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.252118][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.252617][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.429710][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.429724][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.461490][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.461509][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/12 21:02:41 executed programs: 0
[ 86.013433][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.014821][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.015538][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.016859][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.017483][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.476204][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.476331][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.476460][ T6192] bridge_slave_0: entered allmulticast mode
[ 86.477971][ T6192] bridge_slave_0: entered promiscuous mode
[ 86.480346][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.480460][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.480550][ T6192] bridge_slave_1: entered allmulticast mode
[ 86.481925][ T6192] bridge_slave_1: entered promiscuous mode
[ 86.506857][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.510201][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.535417][ T6192] team0: Port device team_slave_0 added
[ 86.537956][ T6192] team0: Port device team_slave_1 added
[ 86.559942][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.559958][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.559978][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.561556][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.561567][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.561587][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.595972][ T6192] hsr_slave_0: entered promiscuous mode
[ 86.596739][ T6192] hsr_slave_1: entered promiscuous mode
[ 86.598207][ T6192] debugfs: 'hsr0' already exists in 'hsr'
[ 86.598224][ T6192] Cannot create hsr debugfs directory
[ 87.632332][ T12] bridge_slave_1: left allmulticast mode
[ 87.632348][ T12] bridge_slave_1: left promiscuous mode
[ 87.632691][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.634494][ T12] bridge_slave_0: left allmulticast mode
[ 87.634506][ T12] bridge_slave_0: left promiscuous mode
[ 87.634608][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.746263][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.753915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 87.755354][ T12] bond0 (unregistering): Released all slaves
[ 87.784791][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2
[ 87.816707][ T12] hsr_slave_0: left promiscuous mode
[ 87.817778][ T12] hsr_slave_1: left promiscuous mode
[ 87.818447][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.818463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.821336][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.821348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.828821][ T12] veth1_macvtap: left promiscuous mode
[ 87.828846][ T12] veth0_macvtap: left promiscuous mode
[ 87.828893][ T12] veth1_vlan: left promiscuous mode
[ 87.828925][ T12] veth0_vlan: left promiscuous mode
[ 87.976319][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 87.987431][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 88.037691][ T5088] Bluetooth: hci0: command tx timeout
[ 88.041629][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3
[ 88.337406][ T6192] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.339614][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 88.340103][ T6192] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.342795][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 88.343290][ T6192] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.345105][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 88.345467][ T6192] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.347178][ T6192] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 88.390296][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.400294][ T6192] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.410125][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.410187][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.666736][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.666783][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.953975][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.980887][ T6192] veth0_vlan: entered promiscuous mode
[ 88.992365][ T6192] veth1_vlan: entered promiscuous mode
[ 89.050276][ T6192] veth0_macvtap: entered promiscuous mode
[ 89.054033][ T6192] veth1_macvtap: entered promiscuous mode
[ 89.064917][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.069944][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.097172][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.097213][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.097238][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.097266][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.123795][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.123807][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.144786][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.144799][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.177199][ T43] kauditd_printk_skb: 21 callbacks suppressed
[ 89.177211][ T43] audit: type=1400 audit(1789246964.897:263): avc: denied { bind } for pid=6258 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 89.177464][ T43] audit: type=1400 audit(1789246964.897:264): avc: denied { listen } for pid=6258 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 90.128013][ T5088] Bluetooth: hci0: command tx timeout
2026/09/12 21:02:46 executed programs: 90
[ 92.207513][ T5088] Bluetooth: hci0: command tx timeout
[ 94.277045][ T5088] Bluetooth: hci0: command tx timeout
2026/09/12 21:02:51 executed programs: 339
2026/09/12 21:02:56 executed programs: 585
[ 101.404706][ T3367] ==================================================================
[ 101.404721][ T3367] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40
[ 101.404749][ T3367] Read of size 1 at addr ffff8880553d85a0 by task krfcommd/3367
[ 101.404763][ T3367]
[ 101.404772][ T3367] CPU: 0 UID: 0 PID: 3367 Comm: krfcommd Not tainted syzkaller #0 PREEMPT(full)
[ 101.404792][ T3367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.404803][ T3367] Call Trace:
[ 101.404809][ T3367]
[ 101.404816][ T3367] dump_stack_lvl+0x100/0x190
[ 101.404843][ T3367] print_report+0x13d/0x4b0
[ 101.404875][ T3367] ? __virt_addr_valid+0x239/0x430
[ 101.404895][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.404913][ T3367] kasan_report+0xdf/0x1c0
[ 101.404937][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.404958][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.404977][ T3367] __kasan_check_byte+0x36/0x50
[ 101.404999][ T3367] lock_acquire+0x132/0x380
[ 101.405018][ T3367] ? do_raw_spin_lock+0x128/0x260
[ 101.405041][ T3367] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.405064][ T3367] _raw_spin_lock_bh+0x33/0x40
[ 101.405082][ T3367] ? bt_accept_unlink+0x64/0x370
[ 101.405100][ T3367] bt_accept_unlink+0x64/0x370
[ 101.405117][ T3367] ? __local_bh_enable_ip+0xa5/0x120
[ 101.405137][ T3367] rfcomm_sk_state_change+0x319/0x3d0
[ 101.405166][ T3367] __rfcomm_dlc_close.isra.0+0x1e3/0x750
[ 101.405189][ T3367] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 101.405211][ T3367] rfcomm_session_close.isra.0+0xd5/0x190
[ 101.405235][ T3367] ? __pfx_sock_rfree+0x10/0x10
[ 101.405258][ T3367] rfcomm_run+0x6dd/0x54c0
[ 101.405285][ T3367] ? __pfx_rfcomm_run+0x10/0x10
[ 101.405308][ T3367] ? do_raw_spin_lock+0x128/0x260
[ 101.405331][ T3367] ? __pfx_woken_wake_function+0x10/0x10
[ 101.405352][ T3367] ? __kthread_parkme+0xbb/0x230
[ 101.405374][ T3367] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 101.405396][ T3367] ? __kthread_parkme+0x18f/0x230
[ 101.405417][ T3367] ? kthread+0x13a/0x450
[ 101.405440][ T3367] ? __pfx_rfcomm_run+0x10/0x10
[ 101.405463][ T3367] kthread+0x373/0x450
[ 101.405487][ T3367] ? __pfx_kthread+0x10/0x10
[ 101.405511][ T3367] ret_from_fork+0x730/0xd60
[ 101.405532][ T3367] ? __pfx_ret_from_fork+0x10/0x10
[ 101.405552][ T3367] ? __switch_to+0x800/0x10f0
[ 101.405577][ T3367] ? __pfx_kthread+0x10/0x10
[ 101.405602][ T3367] ret_from_fork_asm+0x1a/0x30
[ 101.405626][ T3367]
[ 101.405633][ T3367]
[ 101.405637][ T3367] Allocated by task 7393:
[ 101.405645][ T3367] kasan_save_stack+0x30/0x50
[ 101.405663][ T3367] kasan_save_track+0x14/0x30
[ 101.405681][ T3367] __kasan_kmalloc+0xaa/0xb0
[ 101.405698][ T3367] __kmalloc_noprof+0x32f/0x840
[ 101.405715][ T3367] sk_prot_alloc+0x10b/0x2a0
[ 101.405737][ T3367] sk_alloc+0x36/0xe80
[ 101.405753][ T3367] bt_sock_alloc+0x3b/0x3c0
[ 101.405769][ T3367] rfcomm_sock_alloc.constprop.0+0x51/0x2a0
[ 101.405794][ T3367] rfcomm_sock_create+0xf1/0x180
[ 101.405842][ T3367] bt_sock_create+0x185/0x350
[ 101.405858][ T3367] __sock_create+0x339/0x860
[ 101.405886][ T3367] __sys_socket+0x14d/0x260
[ 101.405899][ T3367] __x64_sys_socket+0x72/0xb0
[ 101.405913][ T3367] do_syscall_64+0x123/0x790
[ 101.405934][ T3367] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.405951][ T3367]
[ 101.405955][ T3367] Freed by task 7392:
[ 101.405963][ T3367] kasan_save_stack+0x30/0x50
[ 101.405980][ T3367] kasan_save_track+0x14/0x30
[ 101.405998][ T3367] kasan_save_free_info+0x3b/0x70
[ 101.406022][ T3367] __kasan_slab_free+0x5f/0x80
[ 101.406040][ T3367] kfree+0x22b/0x6d0
[ 101.406062][ T3367] __sk_destruct+0x88c/0xab0
[ 101.406077][ T3367] sk_destruct+0xc8/0xf0
[ 101.406093][ T3367] __sk_free+0xf4/0x3e0
[ 101.406110][ T3367] sk_free+0x61/0x90
[ 101.406125][ T3367] rfcomm_sock_kill+0x12b/0x230
[ 101.406149][ T3367] rfcomm_sock_release+0x119/0x1a0
[ 101.406173][ T3367] __sock_release+0xb3/0x260
[ 101.406191][ T3367] sock_close+0x1c/0x30
[ 101.406207][ T3367] __fput+0x3ff/0xb50
[ 101.406227][ T3367] task_work_run+0x150/0x240
[ 101.406251][ T3367] exit_to_user_mode_loop+0x1d8/0x700
[ 101.406271][ T3367] do_syscall_64+0x661/0x790
[ 101.406293][ T3367] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.406310][ T3367]
[ 101.406314][ T3367] The buggy address belongs to the object at ffff8880553d8000
[ 101.406314][ T3367] which belongs to the cache kmalloc-2k of size 2048
[ 101.406327][ T3367] The buggy address is located 1440 bytes inside of
[ 101.406327][ T3367] freed 2048-byte region [ffff8880553d8000, ffff8880553d8800)
[ 101.406344][ T3367]
[ 101.406348][ T3367] The buggy address belongs to the physical page:
[ 101.406355][ T3367] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880553dd000 pfn:0x553d8
[ 101.406371][ T3367] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.406385][ T3367] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 101.406401][ T3367] page_type: f5(slab)
[ 101.406417][ T3367] raw: 00fff00000000240 ffff88801c042f00 ffffea0000d5a810 ffffea0000d83610
[ 101.406433][ T3367] raw: ffff8880553dd000 0000000000080005 00000000f5000000 0000000000000000
[ 101.406449][ T3367] head: 00fff00000000240 ffff88801c042f00 ffffea0000d5a810 ffffea0000d83610
[ 101.406465][ T3367] head: ffff8880553dd000 0000000000080005 00000000f5000000 0000000000000000
[ 101.406480][ T3367] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 101.406496][ T3367] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 101.406506][ T3367] page dumped because: kasan: bad access detected
[ 101.406514][ T3367] page_owner tracks the page as allocated
[ 101.406519][ T3367] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6186, tgid 6186 (syz-executor), ts 85585809850
[ 101.406547][ T3367] post_alloc_hook+0xfd/0x120
[ 101.406570][ T3367] get_page_from_freelist+0x110d/0x35d0
[ 101.406596][ T3367] __alloc_frozen_pages_noprof+0x2eb/0x3300
[ 101.406622][ T3367] new_slab+0xa9/0x6e0
[ 101.406646][ T3367] refill_objects+0xe3/0x410
[ 101.406670][ T3367] __pcs_replace_empty_main+0x35e/0x650
[ 101.406695][ T3367] __kmalloc_cache_noprof+0x4f4/0x6d0
[ 101.406719][ T3367] rxrpc_alloc_connection+0xa3/0x770
[ 101.406741][ T3367] rxrpc_prealloc_service_connection+0x26/0x390
[ 101.406764][ T3367] rxrpc_service_prealloc_one+0x2c5/0x1040
[ 101.406791][ T3367] rxrpc_kernel_charge_accept+0xdd/0x120
[ 101.406807][ T3367] afs_charge_preallocation+0xd8/0x360
[ 101.406825][ T3367] afs_open_socket+0x31e/0x3f0
[ 101.406842][ T3367] afs_net_init+0x825/0xb00
[ 101.406865][ T3367] ops_init+0x1e2/0x5f0
[ 101.406888][ T3367] setup_net+0x118/0x3a0
[ 101.406908][ T3367] page last free pid 6013 tgid 6003 ts 80477321559 stack trace:
[ 101.406919][ T3367] __free_frozen_pages+0x79f/0x10f0
[ 101.406957][ T3367] __folio_put+0x3b4/0x5f0
[ 101.406979][ T3367] skb_release_data+0x649/0x8e0
[ 101.406997][ T3367] skb_attempt_defer_free+0x2ed/0x830
[ 101.407021][ T3367] tcp_recvmsg_locked+0x11ed/0x2a30
[ 101.407045][ T3367] tcp_recvmsg+0x141/0x630
[ 101.407057][ T3367] inet6_recvmsg+0xd5/0x4c0
[ 101.407072][ T3367] sock_recvmsg+0x102/0x220
[ 101.407093][ T3367] sock_read_iter+0x2b0/0x3a0
[ 101.407115][ T3367] vfs_read+0x960/0xb40
[ 101.407130][ T3367] ksys_read+0x1f8/0x250
[ 101.407145][ T3367] do_syscall_64+0x123/0x790
[ 101.407166][ T3367] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.407182][ T3367]
[ 101.407187][ T3367] Memory state around the buggy address:
[ 101.407195][ T3367] ffff8880553d8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.407207][ T3367] ffff8880553d8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.407219][ T3367] >ffff8880553d8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.407229][ T3367] ^
[ 101.407238][ T3367] ffff8880553d8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.407250][ T3367] ffff8880553d8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.407259][ T3367] ==================================================================
[ 101.407343][ T3367] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.686813][ T3367] CPU: 0 UID: 0 PID: 3367 Comm: krfcommd Not tainted syzkaller #0 PREEMPT(full)
[ 101.689758][ T3367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 101.693124][ T3367] Call Trace:
[ 101.694227][ T3367]
[ 101.695203][ T3367] dump_stack_lvl+0x100/0x190
[ 101.696769][ T3367] vpanic+0x553/0x970
[ 101.698111][ T3367] ? __pfx_vpanic+0x10/0x10
[ 101.699898][ T3367] ? mark_held_locks+0x40/0x70
[ 101.701828][ T3367] ? irqentry_exit+0x24d/0xa10
[ 101.703762][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.705759][ T3367] panic+0xd1/0xe0
[ 101.707290][ T3367] ? __pfx_panic+0x10/0x10
[ 101.709158][ T3367] check_panic_on_warn.cold+0x19/0x34
[ 101.711469][ T3367] end_report.part.0+0x3a/0x90
[ 101.713524][ T3367] kasan_report.cold+0xe/0x18
[ 101.715492][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.717552][ T3367] ? _raw_spin_lock_bh+0x33/0x40
[ 101.719557][ T3367] __kasan_check_byte+0x36/0x50
[ 101.721682][ T3367] lock_acquire+0x132/0x380
[ 101.723641][ T3367] ? do_raw_spin_lock+0x128/0x260
[ 101.725770][ T3367] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.727939][ T3367] _raw_spin_lock_bh+0x33/0x40
[ 101.729947][ T3367] ? bt_accept_unlink+0x64/0x370
[ 101.732060][ T3367] bt_accept_unlink+0x64/0x370
[ 101.734063][ T3367] ? __local_bh_enable_ip+0xa5/0x120
[ 101.736184][ T3367] rfcomm_sk_state_change+0x319/0x3d0
[ 101.738405][ T3367] __rfcomm_dlc_close.isra.0+0x1e3/0x750
[ 101.740707][ T3367] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 101.743161][ T3367] rfcomm_session_close.isra.0+0xd5/0x190
[ 101.745560][ T3367] ? __pfx_sock_rfree+0x10/0x10
[ 101.747566][ T3367] rfcomm_run+0x6dd/0x54c0
[ 101.749154][ T3367] ? __pfx_rfcomm_run+0x10/0x10
[ 101.751270][ T3367] ? do_raw_spin_lock+0x128/0x260
[ 101.753569][ T3367] ? __pfx_woken_wake_function+0x10/0x10
[ 101.756071][ T3367] ? __kthread_parkme+0xbb/0x230
[ 101.759336][ T3367] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 101.761828][ T3367] ? __kthread_parkme+0x18f/0x230
[ 101.763728][ T3367] ? kthread+0x13a/0x450
[ 101.765442][ T3367] ? __pfx_rfcomm_run+0x10/0x10
[ 101.767238][ T3367] kthread+0x373/0x450
[ 101.768929][ T3367] ? __pfx_kthread+0x10/0x10
[ 101.770753][ T3367] ret_from_fork+0x730/0xd60
[ 101.772495][ T3367] ? __pfx_ret_from_fork+0x10/0x10
[ 101.774300][ T3367] ? __switch_to+0x800/0x10f0
[ 101.776208][ T3367] ? __pfx_kthread+0x10/0x10
[ 101.778196][ T3367] ret_from_fork_asm+0x1a/0x30
[ 101.780384][ T3367]
[ 101.782326][ T3367] Kernel Offset: disabled
[ 101.784061][ T3367] Rebooting in 86400 seconds..