[ 71.315271][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315332][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.866503][ T43] audit: type=1400 audit(1791443810.128:206): avc: denied { write } for pid=5962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.930237][ T43] audit: type=1400 audit(1791443810.188:207): avc: denied { write } for pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.304552][ T43] audit: type=1400 audit(1791443810.568:208): avc: denied { write } for pid=5968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.345630][ T43] audit: type=1400 audit(1791443810.608:209): avc: denied { write } for pid=5971 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.011754][ T43] audit: type=1400 audit(1791443811.268:210): avc: denied { write } for pid=5974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.051162][ T43] audit: type=1400 audit(1791443811.308:211): avc: denied { write } for pid=5977 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:63486' (ED25519) to the list of known hosts. [ 74.794367][ T43] audit: type=1400 audit(1791443812.058:212): avc: denied { write } for pid=5994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.847483][ T43] audit: type=1400 audit(1791443812.108:213): avc: denied { write } for pid=5997 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/10/08 07:16:53 parsed 1 programs 2026/10/08 07:16:53 serving rpc on tcp://42455 [ 76.438578][ T50] cfg80211: failed to load regulatory.db [ 78.758962][ T43] audit: type=1400 audit(1791443816.018:214): avc: denied { read write } for pid=6003 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.759217][ T43] audit: type=1400 audit(1791443816.018:215): avc: denied { open } for pid=6003 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.789327][ T43] audit: type=1400 audit(1791443816.048:216): avc: denied { unlink } for pid=6003 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.100136][ T43] audit: type=1400 audit(1791443816.358:217): avc: denied { relabelto } for pid=6006 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 80.049404][ T6003] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.919899][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.922792][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.924329][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.924915][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.925284][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.140037][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.140058][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.187660][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.187689][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.257320][ T43] audit: type=1400 audit(1791443819.518:218): avc: denied { create } for pid=6033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.198295][ T43] audit: type=1401 audit(1791443820.458:219): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 83.536239][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.536307][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.536365][ T6053] bridge_slave_0: entered allmulticast mode [ 83.537297][ T6053] bridge_slave_0: entered promiscuous mode [ 83.543672][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.543713][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.543763][ T6053] bridge_slave_1: entered allmulticast mode [ 83.544560][ T6053] bridge_slave_1: entered promiscuous mode [ 83.581767][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.588525][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.618155][ T6053] team0: Port device team_slave_0 added [ 83.678259][ T6053] team0: Port device team_slave_1 added [ 83.703128][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.703144][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.703164][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.704628][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.704639][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.704659][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.744857][ T6053] hsr_slave_0: entered promiscuous mode [ 83.745378][ T6053] hsr_slave_1: entered promiscuous mode [ 83.900137][ T6053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.901943][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.902569][ T6053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.904952][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.905590][ T6053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.909127][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.909949][ T6053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.914340][ T6053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.933245][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.933340][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.933828][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.933943][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.979280][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.987553][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.988140][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.994014][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.999142][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.999223][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.002892][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.002968][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.259835][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.283995][ T6053] veth0_vlan: entered promiscuous mode [ 84.287492][ T6053] veth1_vlan: entered promiscuous mode [ 84.307931][ T6053] veth0_macvtap: entered promiscuous mode [ 84.311990][ T6053] veth1_macvtap: entered promiscuous mode [ 84.321865][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.326757][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.343464][ T5539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.343618][ T5539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.343637][ T5539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.343654][ T5539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/08 07:17:01 executed programs: 0 [ 84.422650][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.425355][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.425780][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.426433][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.426824][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.482823][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.491498][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.494068][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.494761][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.495956][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.497143][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.497399][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.498414][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.498984][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.502696][ T6130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.504448][ T6135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.504525][ T6135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.505100][ T6130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.505243][ T6135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.506723][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.532804][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.628899][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.719389][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.228068][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.228148][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.228461][ T6132] bridge_slave_0: entered allmulticast mode [ 85.229884][ T6132] bridge_slave_0: entered promiscuous mode [ 85.234714][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.234776][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.234867][ T6132] bridge_slave_1: entered allmulticast mode [ 85.236207][ T6132] bridge_slave_1: entered promiscuous mode [ 85.259188][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.259231][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.259291][ T6120] bridge_slave_0: entered allmulticast mode [ 85.260084][ T6120] bridge_slave_0: entered promiscuous mode [ 85.261870][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.261966][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.262024][ T6120] bridge_slave_1: entered allmulticast mode [ 85.262752][ T6120] bridge_slave_1: entered promiscuous mode [ 85.318840][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.376353][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.379888][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.383489][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.397812][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.397883][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.397966][ T6125] bridge_slave_0: entered allmulticast mode [ 85.399174][ T6125] bridge_slave_0: entered promiscuous mode [ 85.438362][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.438449][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.438742][ T6127] bridge_slave_0: entered allmulticast mode [ 85.440141][ T6127] bridge_slave_0: entered promiscuous mode [ 85.441921][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.442014][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.442275][ T6125] bridge_slave_1: entered allmulticast mode [ 85.443743][ T6125] bridge_slave_1: entered promiscuous mode [ 85.444684][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.444735][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.444793][ T6127] bridge_slave_1: entered allmulticast mode [ 85.445804][ T6127] bridge_slave_1: entered promiscuous mode [ 85.469535][ T6120] team0: Port device team_slave_0 added [ 85.470864][ T6132] team0: Port device team_slave_0 added [ 85.491848][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.494785][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.495839][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.497901][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.499457][ T6120] team0: Port device team_slave_1 added [ 85.501400][ T6132] team0: Port device team_slave_1 added [ 85.582540][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.582557][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.582578][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.584467][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.584480][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.584498][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.585388][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.585401][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.585421][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.588065][ T6127] team0: Port device team_slave_0 added [ 85.588634][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.588646][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.588667][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.590775][ T6125] team0: Port device team_slave_0 added [ 85.600543][ T6127] team0: Port device team_slave_1 added [ 85.609572][ T6125] team0: Port device team_slave_1 added [ 85.686580][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.686591][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.686603][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.699692][ T6132] hsr_slave_0: entered promiscuous mode [ 85.700279][ T6132] hsr_slave_1: entered promiscuous mode [ 85.700820][ T6132] debugfs: 'hsr0' already exists in 'hsr' [ 85.700836][ T6132] Cannot create hsr debugfs directory [ 85.705806][ T6120] hsr_slave_0: entered promiscuous mode [ 85.706297][ T6120] hsr_slave_1: entered promiscuous mode [ 85.706627][ T6120] debugfs: 'hsr0' already exists in 'hsr' [ 85.706638][ T6120] Cannot create hsr debugfs directory [ 85.707122][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.707131][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.707143][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.708914][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.708924][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.708942][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.716770][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.716782][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.716805][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.810371][ T6125] hsr_slave_0: entered promiscuous mode [ 85.811237][ T6125] hsr_slave_1: entered promiscuous mode [ 85.811779][ T6125] debugfs: 'hsr0' already exists in 'hsr' [ 85.811796][ T6125] Cannot create hsr debugfs directory [ 85.850534][ T6127] hsr_slave_0: entered promiscuous mode [ 85.851426][ T6127] hsr_slave_1: entered promiscuous mode [ 85.851986][ T6127] debugfs: 'hsr0' already exists in 'hsr' [ 85.852003][ T6127] Cannot create hsr debugfs directory [ 86.110223][ T6132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.114169][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.114568][ T6132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.117450][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.117841][ T6132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.124444][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.126654][ T6132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.130676][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.183159][ T43] audit: type=1400 audit(1791443823.438:220): avc: denied { write } for pid=6197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.199245][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.232255][ T43] audit: type=1400 audit(1791443823.488:221): avc: denied { write } for pid=6206 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.246474][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.252080][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.252129][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.256359][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.256436][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.346630][ T43] audit: type=1400 audit(1791443823.608:222): avc: denied { write } for pid=6208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.376470][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.403722][ T43] audit: type=1400 audit(1791443823.658:223): avc: denied { write } for pid=6214 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.473228][ T43] audit: type=1400 audit(1791443823.728:224): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.517500][ T5086] Bluetooth: hci0: command tx timeout [ 86.517588][ T6133] Bluetooth: hci3: command tx timeout [ 86.541458][ T43] audit: type=1400 audit(1791443823.798:225): avc: denied { write } for pid=6225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.569192][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.593663][ T5086] Bluetooth: hci2: command tx timeout [ 86.593941][ T6133] Bluetooth: hci1: command tx timeout [ 86.604259][ T6120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.610646][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.611428][ T6120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.615834][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.622735][ T6120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.626117][ T43] audit: type=1400 audit(1791443823.888:226): avc: denied { write } for pid=6228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.628435][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.629315][ T6120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.632848][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.670180][ T6132] veth0_vlan: entered promiscuous mode [ 86.678639][ T6132] veth1_vlan: entered promiscuous mode [ 86.678731][ T43] audit: type=1400 audit(1791443823.938:227): avc: denied { write } for pid=6237 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.719451][ T6132] veth0_macvtap: entered promiscuous mode [ 86.724631][ T6132] veth1_macvtap: entered promiscuous mode [ 86.742311][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.746746][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.766510][ T43] audit: type=1400 audit(1791443824.028:228): avc: denied { write } for pid=6239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.768442][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.799641][ T6120] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.808308][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.808453][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.817681][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.817762][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.836016][ T43] audit: type=1400 audit(1791443824.098:229): avc: denied { write } for pid=6243 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.839768][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.839785][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.881598][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.881619][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.914672][ T6064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914699][ T6064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914716][ T6064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914733][ T6064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.156318][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.188629][ T6120] veth0_vlan: entered promiscuous mode [ 87.198438][ T6120] veth1_vlan: entered promiscuous mode [ 87.228872][ T6120] veth0_macvtap: entered promiscuous mode [ 87.233475][ T6120] veth1_macvtap: entered promiscuous mode [ 87.246940][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.252285][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.303616][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.303656][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.303686][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.303715][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329542][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.329562][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.363794][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.363814][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.593498][ T5086] Bluetooth: hci3: command tx timeout [ 88.598734][ T12] bridge_slave_1: left allmulticast mode [ 88.598758][ T12] bridge_slave_1: left promiscuous mode [ 88.598932][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.603294][ T6133] Bluetooth: hci0: command tx timeout [ 88.604793][ T12] bridge_slave_0: left allmulticast mode [ 88.604814][ T12] bridge_slave_0: left promiscuous mode [ 88.605002][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.675598][ T5086] Bluetooth: hci2: command tx timeout [ 88.676115][ T6133] Bluetooth: hci1: command tx timeout [ 88.767780][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.769977][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.771017][ T12] bond0 (unregistering): Released all slaves [ 88.856024][ T12] hsr_slave_0: left promiscuous mode [ 88.857041][ T12] hsr_slave_1: left promiscuous mode [ 88.857663][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.857678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.858474][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.858487][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.876404][ T12] veth1_macvtap: left promiscuous mode [ 88.876434][ T12] veth0_macvtap: left promiscuous mode [ 88.876515][ T12] veth1_vlan: left promiscuous mode [ 88.877448][ T12] veth0_vlan: left promiscuous mode 2026/10/08 07:17:06 executed programs: 13 [ 89.680210][ T12] team0 (unregistering): Port device team_slave_1 removed [ 89.696872][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.208833][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.514189][ T6127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.520854][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.531254][ T6127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.550974][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.556790][ T6127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.578773][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.580333][ T6127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.601303][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.673113][ T6133] Bluetooth: hci3: command tx timeout [ 90.673139][ T6133] Bluetooth: hci0: command tx timeout [ 90.763135][ T5086] Bluetooth: hci1: command tx timeout [ 90.763165][ T5086] Bluetooth: hci2: command tx timeout [ 90.799267][ T6125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.802530][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.813113][ T6125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.839224][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.839920][ T6125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.848992][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.852285][ T6125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.878854][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.921669][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.939242][ T6127] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.953063][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.953149][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.972086][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.972167][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.030470][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.042814][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.054509][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.054604][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.059884][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.059927][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.466473][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.518540][ T6127] veth0_vlan: entered promiscuous mode [ 91.530320][ T6127] veth1_vlan: entered promiscuous mode [ 91.561830][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.562363][ T6127] veth0_macvtap: entered promiscuous mode [ 91.566794][ T6127] veth1_macvtap: entered promiscuous mode [ 91.595575][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.610194][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.635493][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635948][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635980][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651453][ T6125] veth0_vlan: entered promiscuous mode [ 91.656693][ T6125] veth1_vlan: entered promiscuous mode [ 91.734914][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742146][ T6125] veth0_macvtap: entered promiscuous mode [ 91.748624][ T6125] veth1_macvtap: entered promiscuous mode [ 91.751369][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.751386][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.801814][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.811784][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.811801][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.812658][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.955752][ T6064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023478][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023518][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023546][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.058971][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.058997][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.061580][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.061593][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.753243][ T5086] Bluetooth: hci3: command tx timeout [ 92.753323][ T6133] Bluetooth: hci0: command tx timeout [ 92.833281][ T5086] Bluetooth: hci1: command tx timeout [ 92.833325][ T6133] Bluetooth: hci2: command tx timeout 2026/10/08 07:17:12 executed programs: 27 2026/10/08 07:17:18 executed programs: 47 2026/10/08 07:17:23 executed programs: 67 2026/10/08 07:17:29 executed programs: 87 2026/10/08 07:17:34 executed programs: 107 2026/10/08 07:17:39 executed programs: 127 2026/10/08 07:17:45 executed programs: 144 [ 132.761438][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761487][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 2026/10/08 07:17:50 executed programs: 165 2026/10/08 07:17:55 executed programs: 189 2026/10/08 07:18:01 executed programs: 206 [ 147.075319][ T7061] ================================================================== [ 147.075339][ T7061] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 147.075366][ T7061] Read of size 8 at addr ffff888029de2218 by task syz.1.224/7061 [ 147.075381][ T7061] [ 147.075389][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT(full) [ 147.075409][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.075420][ T7061] Call Trace: [ 147.075426][ T7061] [ 147.075433][ T7061] dump_stack_lvl+0x100/0x190 [ 147.075459][ T7061] print_report+0x13d/0x4b0 [ 147.075485][ T7061] ? __virt_addr_valid+0x239/0x430 [ 147.075504][ T7061] ? dvb_device_open+0x33f/0x3b0 [ 147.075523][ T7061] kasan_report+0xdf/0x1c0 [ 147.075549][ T7061] ? dvb_device_open+0x33f/0x3b0 [ 147.075570][ T7061] ? __pfx_dvb_device_open+0x10/0x10 [ 147.075591][ T7061] dvb_device_open+0x33f/0x3b0 [ 147.075609][ T7061] ? __pfx_dvb_device_open+0x10/0x10 [ 147.075629][ T7061] chrdev_open+0x234/0x6a0 [ 147.075653][ T7061] ? __pfx_chrdev_open+0x10/0x10 [ 147.075676][ T7061] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 147.075697][ T7061] do_dentry_open+0x6ab/0x14d0 [ 147.075718][ T7061] ? __pfx_chrdev_open+0x10/0x10 [ 147.075744][ T7061] vfs_open+0x82/0x3f0 [ 147.075770][ T7061] path_openat+0x19fa/0x2440 [ 147.075796][ T7061] ? __pfx_path_openat+0x10/0x10 [ 147.075823][ T7061] do_file_open+0x20e/0x430 [ 147.075847][ T7061] ? __pfx_do_file_open+0x10/0x10 [ 147.075879][ T7061] ? _raw_spin_unlock+0x28/0x50 [ 147.075898][ T7061] ? alloc_fd+0x471/0x7a0 [ 147.075925][ T7061] do_sys_openat2+0x10f/0x1e0 [ 147.075951][ T7061] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.075974][ T7061] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 147.075993][ T7061] ? rcu_is_watching+0x13/0xc0 [ 147.076018][ T7061] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.076037][ T7061] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.076061][ T7061] __x64_sys_openat+0x12d/0x210 [ 147.076077][ T7061] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.076098][ T7061] do_syscall_64+0x123/0x790 [ 147.076122][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.076140][ T7061] RIP: 0033:0x7ffba0b5e68e [ 147.076156][ T7061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.076172][ T7061] RSP: 002b:00007ffba1ab3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.076191][ T7061] RAX: ffffffffffffffda RBX: 00007ffba1ab46c0 RCX: 00007ffba0b5e68e [ 147.076203][ T7061] RDX: 0000000000000002 RSI: 00007ffba1ab3c00 RDI: ffffffffffffff9c [ 147.076215][ T7061] RBP: 00007ffba1ab3c00 R08: 0000000000000000 R09: 0000000000000000 [ 147.076226][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 147.076237][ T7061] R13: 00007ffba0e26128 R14: 00007ffba0e26090 R15: 00007ffddba3ca28 [ 147.076254][ T7061] [ 147.076260][ T7061] [ 147.076264][ T7061] Allocated by task 1: [ 147.076272][ T7061] kasan_save_stack+0x30/0x50 [ 147.076293][ T7061] kasan_save_track+0x14/0x30 [ 147.076313][ T7061] __kasan_kmalloc+0xaa/0xb0 [ 147.076338][ T7061] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 147.076355][ T7061] dvb_register_device+0x1d6/0x1e20 [ 147.076374][ T7061] dvb_register_frontend+0x552/0x820 [ 147.076391][ T7061] vidtv_bridge_probe+0x44b/0xa30 [ 147.076414][ T7061] platform_probe+0x106/0x1d0 [ 147.076433][ T7061] really_probe+0x241/0xa60 [ 147.076455][ T7061] __driver_probe_device+0x210/0x460 [ 147.076477][ T7061] driver_probe_device+0x4a/0x140 [ 147.076499][ T7061] __driver_attach+0x21f/0x5b0 [ 147.076521][ T7061] bus_for_each_dev+0x13e/0x1d0 [ 147.076539][ T7061] bus_add_driver+0x305/0x5b0 [ 147.076559][ T7061] driver_register+0x1e2/0x360 [ 147.076573][ T7061] vidtv_bridge_init+0x52/0x80 [ 147.076597][ T7061] do_one_initcall+0x11c/0x6f0 [ 147.076614][ T7061] kernel_init_freeable+0x6ea/0x7b0 [ 147.076631][ T7061] kernel_init+0x21/0x1e0 [ 147.076645][ T7061] ret_from_fork+0x730/0xd60 [ 147.076660][ T7061] ret_from_fork_asm+0x1a/0x30 [ 147.076675][ T7061] [ 147.076703][ T7061] Freed by task 7059: [ 147.076710][ T7061] kasan_save_stack+0x30/0x50 [ 147.076729][ T7061] kasan_save_track+0x14/0x30 [ 147.076749][ T7061] kasan_save_free_info+0x3b/0x70 [ 147.076766][ T7061] __kasan_slab_free+0x5f/0x80 [ 147.076787][ T7061] kfree+0x22b/0x6d0 [ 147.076803][ T7061] dvb_device_put.part.0+0x57/0x90 [ 147.076820][ T7061] dvb_device_open+0x2ba/0x3b0 [ 147.076836][ T7061] chrdev_open+0x234/0x6a0 [ 147.076857][ T7061] do_dentry_open+0x6ab/0x14d0 [ 147.076875][ T7061] vfs_open+0x82/0x3f0 [ 147.076897][ T7061] path_openat+0x19fa/0x2440 [ 147.076919][ T7061] do_file_open+0x20e/0x430 [ 147.076940][ T7061] do_sys_openat2+0x10f/0x1e0 [ 147.076963][ T7061] __x64_sys_openat+0x12d/0x210 [ 147.076977][ T7061] do_syscall_64+0x123/0x790 [ 147.076997][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.077014][ T7061] [ 147.077018][ T7061] The buggy address belongs to the object at ffff888029de2200 [ 147.077018][ T7061] which belongs to the cache kmalloc-256 of size 256 [ 147.077031][ T7061] The buggy address is located 24 bytes inside of [ 147.077031][ T7061] freed 256-byte region [ffff888029de2200, ffff888029de2300) [ 147.077047][ T7061] [ 147.077051][ T7061] The buggy address belongs to the physical page: [ 147.077058][ T7061] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29de2 [ 147.077072][ T7061] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 147.077086][ T7061] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 147.077102][ T7061] page_type: f5(slab) [ 147.077116][ T7061] raw: 00fff00000000040 ffff88801d042b40 dead000000000122 0000000000000000 [ 147.077129][ T7061] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 147.077145][ T7061] head: 00fff00000000040 ffff88801d042b40 dead000000000122 0000000000000000 [ 147.077158][ T7061] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 147.077172][ T7061] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 147.077185][ T7061] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 147.077193][ T7061] page dumped because: kasan: bad access detected [ 147.077200][ T7061] page_owner tracks the page as allocated [ 147.077205][ T7061] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9286225991 [ 147.077230][ T7061] post_alloc_hook+0xfd/0x120 [ 147.077247][ T7061] get_page_from_freelist+0x110d/0x35d0 [ 147.077265][ T7061] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 147.077282][ T7061] new_slab+0xa9/0x6e0 [ 147.077297][ T7061] refill_objects+0xe3/0x410 [ 147.077312][ T7061] __pcs_replace_empty_main+0x35e/0x650 [ 147.077328][ T7061] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 147.077349][ T7061] bus_add_driver+0x92/0x5b0 [ 147.077370][ T7061] driver_register+0x1e2/0x360 [ 147.077383][ T7061] usb_register_driver+0x21c/0x3e0 [ 147.077401][ T7061] do_one_initcall+0x11c/0x6f0 [ 147.077417][ T7061] kernel_init_freeable+0x6ea/0x7b0 [ 147.077450][ T7061] kernel_init+0x21/0x1e0 [ 147.077463][ T7061] ret_from_fork+0x730/0xd60 [ 147.077481][ T7061] ret_from_fork_asm+0x1a/0x30 [ 147.077498][ T7061] page_owner free stack trace missing [ 147.077503][ T7061] [ 147.077507][ T7061] Memory state around the buggy address: [ 147.077515][ T7061] ffff888029de2100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.077527][ T7061] ffff888029de2180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.077539][ T7061] >ffff888029de2200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.077547][ T7061] ^ [ 147.077556][ T7061] ffff888029de2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.077567][ T7061] ffff888029de2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 147.077576][ T7061] ================================================================== [ 147.079410][ T7061] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.357123][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT(full) [ 147.360387][ T7061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.363668][ T7061] Call Trace: [ 147.364770][ T7061] [ 147.365707][ T7061] dump_stack_lvl+0x100/0x190 [ 147.367441][ T7061] vpanic+0x553/0x970 [ 147.368908][ T7061] ? __pfx_vpanic+0x10/0x10 [ 147.370675][ T7061] ? mark_held_locks+0x40/0x70 [ 147.372617][ T7061] ? dvb_device_open+0x33f/0x3b0 [ 147.374402][ T7061] panic+0xd1/0xe0 [ 147.375563][ T7061] ? __pfx_panic+0x10/0x10 [ 147.377236][ T7061] ? dvb_device_open+0x33f/0x3b0 [ 147.379124][ T7061] ? preempt_schedule_common+0x3c/0xb0 [ 147.381223][ T7061] check_panic_on_warn.cold+0x19/0x34 [ 147.383427][ T7061] end_report.part.0+0x3a/0x90 [ 147.385231][ T7061] kasan_report.cold+0xe/0x18 [ 147.387167][ T7061] ? dvb_device_open+0x33f/0x3b0 [ 147.389214][ T7061] ? __pfx_dvb_device_open+0x10/0x10 [ 147.391225][ T7061] dvb_device_open+0x33f/0x3b0 [ 147.393185][ T7061] ? __pfx_dvb_device_open+0x10/0x10 [ 147.394847][ T7061] chrdev_open+0x234/0x6a0 [ 147.396261][ T7061] ? __pfx_chrdev_open+0x10/0x10 [ 147.398262][ T7061] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 147.400878][ T7061] do_dentry_open+0x6ab/0x14d0 [ 147.402776][ T7061] ? __pfx_chrdev_open+0x10/0x10 [ 147.404334][ T7061] vfs_open+0x82/0x3f0 [ 147.405625][ T7061] path_openat+0x19fa/0x2440 [ 147.407078][ T7061] ? __pfx_path_openat+0x10/0x10 [ 147.408853][ T7061] do_file_open+0x20e/0x430 [ 147.410734][ T7061] ? __pfx_do_file_open+0x10/0x10 [ 147.412892][ T7061] ? _raw_spin_unlock+0x28/0x50 [ 147.414930][ T7061] ? alloc_fd+0x471/0x7a0 [ 147.416702][ T7061] do_sys_openat2+0x10f/0x1e0 [ 147.418537][ T7061] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.420227][ T7061] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 147.422169][ T7061] ? rcu_is_watching+0x13/0xc0 [ 147.424126][ T7061] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.426071][ T7061] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.427690][ T7061] __x64_sys_openat+0x12d/0x210 [ 147.429569][ T7061] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.431554][ T7061] do_syscall_64+0x123/0x790 [ 147.433047][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.435297][ T7061] RIP: 0033:0x7ffba0b5e68e [ 147.436997][ T7061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.444050][ T7061] RSP: 002b:00007ffba1ab3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.446646][ T7061] RAX: ffffffffffffffda RBX: 00007ffba1ab46c0 RCX: 00007ffba0b5e68e [ 147.449841][ T7061] RDX: 0000000000000002 RSI: 00007ffba1ab3c00 RDI: ffffffffffffff9c [ 147.452324][ T7061] RBP: 00007ffba1ab3c00 R08: 0000000000000000 R09: 0000000000000000 [ 147.455437][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 147.457983][ T7061] R13: 00007ffba0e26128 R14: 00007ffba0e26090 R15: 00007ffddba3ca28 [ 147.461077][ T7061] [ 147.462877][ T7061] Kernel Offset: disabled [ 147.464236][ T7061] Rebooting in 86400 seconds..