[ 68.802801][ T44] audit: type=1400 audit(1789893389.389:208): avc: denied { transition } for pid=5960 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.805078][ T44] audit: type=1400 audit(1789893389.399:209): avc: denied { noatsecure } for pid=5960 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.805121][ T44] audit: type=1400 audit(1789893389.399:210): avc: denied { rlimitinh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.805153][ T44] audit: type=1400 audit(1789893389.399:211): avc: denied { siginh } for pid=5960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.114656][ T43] cfg80211: failed to load regulatory.db [ 71.118921][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.118981][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.608007][ T44] audit: type=1400 audit(1789893394.199:212): avc: denied { write } for pid=5969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.662290][ T44] audit: type=1400 audit(1789893394.249:213): avc: denied { write } for pid=5972 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.641697][ T44] audit: type=1400 audit(1789893395.229:214): avc: denied { write } for pid=5980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:9917' (ED25519) to the list of known hosts. [ 74.699071][ T44] audit: type=1400 audit(1789893395.289:215): avc: denied { write } for pid=5984 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.791269][ T44] audit: type=1400 audit(1789893395.379:216): avc: denied { write } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.836813][ T44] audit: type=1400 audit(1789893395.429:217): avc: denied { write } for pid=5993 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.223896][ T44] audit: type=1400 audit(1789893395.819:218): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.286719][ T44] audit: type=1400 audit(1789893395.879:219): avc: denied { write } for pid=6005 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 2026/09/20 08:36:36 parsed 1 programs 2026/09/20 08:36:36 serving rpc on tcp://40865 [ 75.847492][ T44] audit: type=1400 audit(1789893396.439:220): avc: denied { node_bind } for pid=5989 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 78.289670][ T44] audit: type=1400 audit(1789893398.879:221): avc: denied { read write } for pid=6011 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.289824][ T44] audit: type=1400 audit(1789893398.879:222): avc: denied { open } for pid=6011 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.315182][ T44] audit: type=1400 audit(1789893398.909:223): avc: denied { unlink } for pid=6011 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 79.657529][ T6011] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.448911][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 81.448930][ T44] audit: type=1400 audit(1789893402.039:225): avc: denied { sys_module } for pid=6017 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.784711][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.784754][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.784814][ T6017] bridge_slave_0: entered allmulticast mode [ 81.785656][ T6017] bridge_slave_0: entered promiscuous mode [ 81.790090][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.790167][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.790441][ T6017] bridge_slave_1: entered allmulticast mode [ 81.791897][ T6017] bridge_slave_1: entered promiscuous mode [ 81.817035][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.819531][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.840502][ T6017] team0: Port device team_slave_0 added [ 81.842368][ T6017] team0: Port device team_slave_1 added [ 81.863781][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.863798][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.863818][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.865880][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.865891][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.865912][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.896215][ T6017] hsr_slave_0: entered promiscuous mode [ 81.896606][ T6017] hsr_slave_1: entered promiscuous mode [ 82.006630][ T44] audit: type=1400 audit(1789893402.599:226): avc: denied { write } for pid=6034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.055519][ T44] audit: type=1400 audit(1789893402.649:227): avc: denied { write } for pid=6038 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.140981][ T44] audit: type=1400 audit(1789893402.729:228): avc: denied { write } for pid=6040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.195214][ T44] audit: type=1400 audit(1789893402.789:229): avc: denied { write } for pid=6043 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.257747][ T44] audit: type=1400 audit(1789893402.849:230): avc: denied { write } for pid=6045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.301834][ T44] audit: type=1400 audit(1789893402.889:231): avc: denied { write } for pid=6048 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.358716][ T6017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.362915][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.363593][ T6017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.369817][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.370349][ T6017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.373466][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.374139][ T6017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.378465][ T6017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.383265][ T44] audit: type=1400 audit(1789893402.979:232): avc: denied { write } for pid=6050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.391918][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.391970][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.392267][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.392311][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.419223][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.425932][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.426304][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.430660][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.432207][ T44] audit: type=1400 audit(1789893403.019:233): avc: denied { write } for pid=6059 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.438753][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.438798][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.441806][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.441848][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.494687][ T44] audit: type=1400 audit(1789893403.089:234): avc: denied { write } for pid=6062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.654635][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.688709][ T6017] veth0_vlan: entered promiscuous mode [ 82.692610][ T6017] veth1_vlan: entered promiscuous mode [ 82.710112][ T6017] veth0_macvtap: entered promiscuous mode [ 82.713308][ T6017] veth1_macvtap: entered promiscuous mode [ 82.719982][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.726612][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.763398][ T5752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776715][ T5752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.793506][ T5752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.823345][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.874961][ T5752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.955977][ T5752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.016432][ T5752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.089706][ T5752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.956548][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.957544][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.957774][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.958129][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.958350][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.126908][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.126927][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.144628][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.144642][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/20 08:36:45 executed programs: 0 [ 84.954556][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.955666][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.956085][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.956909][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.957376][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.338240][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.338373][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.338471][ T6189] bridge_slave_0: entered allmulticast mode [ 85.339753][ T6189] bridge_slave_0: entered promiscuous mode [ 85.343467][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.343541][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.343644][ T6189] bridge_slave_1: entered allmulticast mode [ 85.346004][ T6189] bridge_slave_1: entered promiscuous mode [ 85.370771][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.372201][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.387227][ T6189] team0: Port device team_slave_0 added [ 85.388985][ T6189] team0: Port device team_slave_1 added [ 85.404015][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.404026][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.404039][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.404813][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.404820][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.404832][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.426637][ T6189] hsr_slave_0: entered promiscuous mode [ 85.427405][ T6189] hsr_slave_1: entered promiscuous mode [ 85.427705][ T6189] debugfs: 'hsr0' already exists in 'hsr' [ 85.427717][ T6189] Cannot create hsr debugfs directory [ 86.304444][ T5752] bridge_slave_1: left allmulticast mode [ 86.304462][ T5752] bridge_slave_1: left promiscuous mode [ 86.304585][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.305960][ T5752] bridge_slave_0: left allmulticast mode [ 86.305972][ T5752] bridge_slave_0: left promiscuous mode [ 86.306060][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.429872][ T5752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.432155][ T5752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.435408][ T5752] bond0 (unregistering): Released all slaves [ 86.489821][ T5752] hsr_slave_0: left promiscuous mode [ 86.490468][ T5752] hsr_slave_1: left promiscuous mode [ 86.491152][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.491169][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.491818][ T5752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.491833][ T5752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.501104][ T5752] veth1_macvtap: left promiscuous mode [ 86.501135][ T5752] veth0_macvtap: left promiscuous mode [ 86.501227][ T5752] veth1_vlan: left promiscuous mode [ 86.501285][ T5752] veth0_vlan: left promiscuous mode [ 86.553000][ T44] kauditd_printk_skb: 18 callbacks suppressed [ 86.553019][ T44] audit: type=1400 audit(1789893407.139:253): avc: denied { write } for pid=6211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.611015][ T44] audit: type=1400 audit(1789893407.199:254): avc: denied { write } for pid=6214 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.715525][ T5752] team0 (unregistering): Port device team_slave_1 removed [ 86.726560][ T5752] team0 (unregistering): Port device team_slave_0 removed [ 86.834751][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 86.932811][ T44] audit: type=1400 audit(1789893407.519:255): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.981014][ T44] audit: type=1400 audit(1789893407.569:256): avc: denied { write } for pid=6221 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.033642][ T5798] Bluetooth: hci0: command tx timeout [ 87.085273][ T44] audit: type=1400 audit(1789893407.679:257): avc: denied { write } for pid=6224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.122417][ T6189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.127066][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.127521][ T6189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.128667][ T44] audit: type=1400 audit(1789893407.719:258): avc: denied { write } for pid=6227 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.130195][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.131602][ T6189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.133904][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.134528][ T6189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.139009][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.186803][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.195012][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201095][ T232] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.201216][ T232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.207400][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.207479][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.214703][ T44] audit: type=1400 audit(1789893407.809:259): avc: denied { write } for pid=6235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.273057][ T44] audit: type=1400 audit(1789893407.859:260): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.795009][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.836667][ T6189] veth0_vlan: entered promiscuous mode [ 87.866755][ T6189] veth1_vlan: entered promiscuous mode [ 87.888219][ T6189] veth0_macvtap: entered promiscuous mode [ 87.891687][ T6189] veth1_macvtap: entered promiscuous mode [ 87.903214][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.907642][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.963879][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.963899][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.972848][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.972885][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.972909][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.972931][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.977679][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.977692][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.010928][ T44] audit: type=1400 audit(1789893408.599:261): avc: denied { read write } for pid=6252 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.010969][ T44] audit: type=1400 audit(1789893408.599:262): avc: denied { open } for pid=6252 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.272875][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.425788][ T5849] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 88.427917][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.427947][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.430561][ T5849] usb 5-1: config 0 descriptor?? [ 88.843661][ T5849] aquacomputer_d5next 0003:0C70:F00E.0002: hidraw1: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 89.037953][ C2] ================================================================== [ 89.037963][ C2] BUG: KASAN: slab-out-of-bounds in aqc_raw_event+0x213e/0x25d0 [ 89.037978][ C2] Read of size 2 at addr ffff888025cda457 by task swapper/2/0 [ 89.037986][ C2] [ 89.037992][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 89.038005][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.038011][ C2] Call Trace: [ 89.038015][ C2] [ 89.038020][ C2] dump_stack_lvl+0x100/0x190 [ 89.038036][ C2] print_report+0x13d/0x4b0 [ 89.038052][ C2] ? __virt_addr_valid+0x239/0x430 [ 89.038063][ C2] ? aqc_raw_event+0x213e/0x25d0 [ 89.038072][ C2] kasan_report+0xdf/0x1c0 [ 89.038086][ C2] ? aqc_raw_event+0x213e/0x25d0 [ 89.038096][ C2] aqc_raw_event+0x213e/0x25d0 [ 89.038106][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.038120][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.038135][ C2] __hid_input_report.constprop.0+0x319/0x470 [ 89.038152][ C2] ? __pfx_aqc_raw_event+0x10/0x10 [ 89.038167][ C2] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 89.038179][ C2] hid_irq_in+0x55d/0x710 [ 89.038194][ C2] __usb_hcd_giveback_urb+0x38e/0x610 [ 89.038212][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 89.038229][ C2] dummy_timer+0xdb2/0x3700 [ 89.038242][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.038258][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 89.038268][ C2] ? rcu_is_watching+0x13/0xc0 [ 89.038282][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.038296][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 89.038306][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 89.038323][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 89.038340][ C2] handle_softirqs+0x1e6/0x9d0 [ 89.038352][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 89.038363][ C2] ? _raw_spin_unlock+0x28/0x50 [ 89.038375][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 89.038392][ C2] __irq_exit_rcu+0x16a/0x210 [ 89.038402][ C2] irq_exit_rcu+0x9/0x30 [ 89.038413][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 89.038428][ C2] [ 89.038431][ C2] [ 89.038435][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.038447][ C2] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 89.038461][ C2] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 73 fc fc 09 e8 be 29 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 89.038472][ C2] RSP: 0018:ffffc90000197c38 EFLAGS: 00000202 [ 89.038481][ C2] RAX: 000000000007c9e3 RBX: ffff88801f2f2580 RCX: 0000000000000000 [ 89.038488][ C2] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: ffff88801f2f3c90 [ 89.038495][ C2] RBP: ffffc90000197c90 R08: 0000000000000001 R09: 0000000000000000 [ 89.038502][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802aa6a580 [ 89.038508][ C2] R13: 0000000000000000 R14: ffffffff91457404 R15: ffff88806a63bf00 [ 89.038517][ C2] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 89.038531][ C2] __schedule+0x1261/0x6920 [ 89.038544][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.038559][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.038570][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.038585][ C2] ? __pfx___schedule+0x10/0x10 [ 89.038598][ C2] ? rcu_is_watching+0x13/0xc0 [ 89.038612][ C2] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 89.038625][ C2] schedule_idle+0x54/0x80 [ 89.038639][ C2] do_idle+0x365/0x5b0 [ 89.038651][ C2] ? __pfx_do_idle+0x10/0x10 [ 89.038663][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 89.038677][ C2] cpu_startup_entry+0x4f/0x60 [ 89.038690][ C2] start_secondary+0x21d/0x2d0 [ 89.038701][ C2] ? __pfx_start_secondary+0x10/0x10 [ 89.038713][ C2] common_startup_64+0x13e/0x158 [ 89.038729][ C2] [ 89.038733][ C2] [ 89.038736][ C2] Allocated by task 5849: [ 89.038741][ C2] kasan_save_stack+0x30/0x50 [ 89.038752][ C2] kasan_save_track+0x14/0x30 [ 89.038763][ C2] __kasan_kmalloc+0xaa/0xb0 [ 89.038773][ C2] __kmalloc_noprof+0x32f/0x840 [ 89.038783][ C2] hcd_buffer_alloc+0x1f5/0x290 [ 89.038792][ C2] usb_alloc_coherent+0x5f/0xa0 [ 89.038801][ C2] usbhid_start+0x5cf/0x23a0 [ 89.038814][ C2] hid_hw_start+0x65/0x140 [ 89.038832][ C2] aqc_probe+0x1a5/0x3510 [ 89.038846][ C2] hid_device_probe+0x4fe/0x850 [ 89.038859][ C2] really_probe+0x241/0xa60 [ 89.038870][ C2] __driver_probe_device+0x210/0x460 [ 89.038881][ C2] driver_probe_device+0x4a/0x140 [ 89.038892][ C2] __device_attach_driver+0x1df/0x320 [ 89.038903][ C2] bus_for_each_drv+0x159/0x1e0 [ 89.038911][ C2] __device_attach+0x1e4/0x4d0 [ 89.038922][ C2] device_initial_probe+0xaf/0xd0 [ 89.038933][ C2] bus_probe_device+0x64/0x160 [ 89.038943][ C2] device_add+0x121d/0x1970 [ 89.038956][ C2] hid_add_device+0x2bf/0x440 [ 89.038968][ C2] usbhid_probe+0xa64/0x10b0 [ 89.038981][ C2] usb_probe_interface+0x386/0x9b0 [ 89.038995][ C2] really_probe+0x241/0xa60 [ 89.039006][ C2] __driver_probe_device+0x210/0x460 [ 89.039017][ C2] driver_probe_device+0x4a/0x140 [ 89.039028][ C2] __device_attach_driver+0x1df/0x320 [ 89.039039][ C2] bus_for_each_drv+0x159/0x1e0 [ 89.039047][ C2] __device_attach+0x1e4/0x4d0 [ 89.039058][ C2] device_initial_probe+0xaf/0xd0 [ 89.039069][ C2] bus_probe_device+0x64/0x160 [ 89.039078][ C2] device_add+0x121d/0x1970 [ 89.039091][ C2] usb_set_configuration+0xd97/0x1c60 [ 89.039104][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 89.039115][ C2] usb_probe_device+0xef/0x400 [ 89.039128][ C2] really_probe+0x241/0xa60 [ 89.039138][ C2] __driver_probe_device+0x210/0x460 [ 89.039149][ C2] driver_probe_device+0x4a/0x140 [ 89.039159][ C2] __device_attach_driver+0x1df/0x320 [ 89.039171][ C2] bus_for_each_drv+0x159/0x1e0 [ 89.039179][ C2] __device_attach+0x1e4/0x4d0 [ 89.039189][ C2] device_initial_probe+0xaf/0xd0 [ 89.039201][ C2] bus_probe_device+0x64/0x160 [ 89.039210][ C2] device_add+0x121d/0x1970 [ 89.039222][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 89.039255][ C2] hub_event.cold+0x1e3/0xe90 [ 89.039271][ C2] process_one_work+0xac7/0x1b10 [ 89.039286][ C2] worker_thread+0x5ef/0xe50 [ 89.039300][ C2] kthread+0x373/0x450 [ 89.039313][ C2] ret_from_fork+0x730/0xd60 [ 89.039323][ C2] ret_from_fork_asm+0x1a/0x30 [ 89.039336][ C2] [ 89.039338][ C2] The buggy address belongs to the object at ffff888025cda400 [ 89.039338][ C2] which belongs to the cache kmalloc-96 of size 96 [ 89.039346][ C2] The buggy address is located 22 bytes to the right of [ 89.039346][ C2] allocated 65-byte region [ffff888025cda400, ffff888025cda441) [ 89.039356][ C2] [ 89.039359][ C2] The buggy address belongs to the physical page: [ 89.039364][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25cda [ 89.039374][ C2] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 89.039382][ C2] page_type: f5(slab) [ 89.039391][ C2] raw: 00fff00000000000 ffff88801c042280 dead000000000100 dead000000000122 [ 89.039400][ C2] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 89.039406][ C2] page dumped because: kasan: bad access detected [ 89.039411][ C2] page_owner tracks the page as allocated [ 89.039414][ C2] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4030277043 [ 89.039430][ C2] post_alloc_hook+0xfd/0x120 [ 89.039444][ C2] get_page_from_freelist+0x110d/0x35d0 [ 89.039459][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 89.039468][ C2] new_slab+0xa9/0x6e0 [ 89.039482][ C2] refill_objects+0xe3/0x410 [ 89.039490][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 89.039504][ C2] __kmalloc_cache_node_noprof+0x51c/0x720 [ 89.039515][ C2] __alloc_workqueue+0x6f2/0x1950 [ 89.039527][ C2] alloc_workqueue_noprof+0xc7/0x130 [ 89.039539][ C2] padata_alloc+0x78/0x400 [ 89.039552][ C2] pcrypt_init_padata+0x19/0xf5 [ 89.039562][ C2] pcrypt_init+0x99/0xf0 [ 89.039573][ C2] do_one_initcall+0x11c/0x6f0 [ 89.039583][ C2] kernel_init_freeable+0x6ea/0x7b0 [ 89.039598][ C2] kernel_init+0x21/0x1e0 [ 89.039607][ C2] ret_from_fork+0x730/0xd60 [ 89.039617][ C2] page_owner free stack trace missing [ 89.039620][ C2] [ 89.039622][ C2] Memory state around the buggy address: [ 89.039627][ C2] ffff888025cda300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 89.039634][ C2] ffff888025cda380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 89.039640][ C2] >ffff888025cda400: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 89.039646][ C2] ^ [ 89.039651][ C2] ffff888025cda480: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 89.039658][ C2] ffff888025cda500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 89.039663][ C2] ================================================================== [ 89.039669][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.388781][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 89.392330][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.396426][ C2] Call Trace: [ 89.397817][ C2] [ 89.399044][ C2] dump_stack_lvl+0x100/0x190 [ 89.401046][ C2] vpanic+0x553/0x970 [ 89.402759][ C2] ? __pfx_vpanic+0x10/0x10 [ 89.404690][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 89.406814][ C2] ? aqc_raw_event+0x213e/0x25d0 [ 89.408870][ C2] panic+0xd1/0xe0 [ 89.410439][ C2] ? __pfx_panic+0x10/0x10 [ 89.412334][ C2] ? end_report.part.0+0x23/0x90 [ 89.414421][ C2] ? rcu_is_watching+0x13/0xc0 [ 89.416428][ C2] ? end_report.part.0+0x23/0x90 [ 89.418486][ C2] check_panic_on_warn.cold+0x19/0x34 [ 89.420715][ C2] end_report.part.0+0x3a/0x90 [ 89.422696][ C2] kasan_report.cold+0xe/0x18 [ 89.424704][ C2] ? aqc_raw_event+0x213e/0x25d0 [ 89.426803][ C2] aqc_raw_event+0x213e/0x25d0 [ 89.428820][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.430985][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.433283][ C2] __hid_input_report.constprop.0+0x319/0x470 [ 89.435626][ C2] ? __pfx_aqc_raw_event+0x10/0x10 [ 89.437693][ C2] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 89.439986][ C2] hid_irq_in+0x55d/0x710 [ 89.441780][ C2] __usb_hcd_giveback_urb+0x38e/0x610 [ 89.443944][ C2] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 89.446002][ C2] dummy_timer+0xdb2/0x3700 [ 89.447853][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.450234][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 89.452264][ C2] ? rcu_is_watching+0x13/0xc0 [ 89.454169][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.456576][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 89.458550][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 89.460744][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 89.462867][ C2] handle_softirqs+0x1e6/0x9d0 [ 89.464873][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 89.467047][ C2] ? _raw_spin_unlock+0x28/0x50 [ 89.469062][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 89.471459][ C2] __irq_exit_rcu+0x16a/0x210 [ 89.473454][ C2] irq_exit_rcu+0x9/0x30 [ 89.475262][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 89.477627][ C2] [ 89.478856][ C2] [ 89.480125][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.482622][ C2] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 89.485139][ C2] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 73 fc fc 09 e8 be 29 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 89.493043][ C2] RSP: 0018:ffffc90000197c38 EFLAGS: 00000202 [ 89.495534][ C2] RAX: 000000000007c9e3 RBX: ffff88801f2f2580 RCX: 0000000000000000 [ 89.498835][ C2] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: ffff88801f2f3c90 [ 89.502148][ C2] RBP: ffffc90000197c90 R08: 0000000000000001 R09: 0000000000000000 [ 89.505421][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802aa6a580 [ 89.508736][ C2] R13: 0000000000000000 R14: ffffffff91457404 R15: ffff88806a63bf00 [ 89.512006][ C2] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 89.514464][ C2] __schedule+0x1261/0x6920 [ 89.516401][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.518580][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.521152][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.523452][ C2] ? __pfx___schedule+0x10/0x10 [ 89.525496][ C2] ? rcu_is_watching+0x13/0xc0 [ 89.527520][ C2] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 89.529729][ C2] schedule_idle+0x54/0x80 [ 89.531597][ C2] do_idle+0x365/0x5b0 [ 89.533301][ C2] ? __pfx_do_idle+0x10/0x10 [ 89.535167][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 89.537639][ C2] cpu_startup_entry+0x4f/0x60 [ 89.539644][ C2] start_secondary+0x21d/0x2d0 [ 89.541608][ C2] ? __pfx_start_secondary+0x10/0x10 [ 89.543813][ C2] common_startup_64+0x13e/0x158 [ 89.545875][ C2] [ 89.547902][ C2] Kernel Offset: disabled [ 89.549732][ C2] Rebooting in 86400 seconds..